v1.0.0

Added

• A Claude Code plugin, with this repository as its marketplace:
  /plugin marketplace add gcrft123/tailr, then /plugin install tailr@tailr.
  It carries the MCP server, the operating rules as a skill, and a /tailr:start
  command — the same setup tailr init performs, without editing anything in the
  project, and updatable from /plugin rather than by re-running a script. The
  rules in it are generated from the same source init writes from, and the
  version it advertises is stamped when a release is cut; npm test fails if
  either drifts, so an installed plugin cannot quietly fall behind the protocol
  Tailr actually speaks.
• A release flow keyed to the tags: pushing vX.Y.Z verifies the tag against
  the manifest, runs the tests, publishes to npm with provenance, and cuts a
  GitHub Release from this file. Publishing authenticates as a trusted publisher
  over OIDC, so no npm token is stored anywhere. npm version is the whole
  interface to it.
• A test suite — npm test, no dependencies — covering the bridge state machine
  and its refusals, the proxy's injection and passthrough, the three outcomes of
  tailr wait, and the idempotence of tailr init. CI runs it on Node 18, 20
  and 22, and fails if Tailr ever takes on a runtime dependency.
• Source resolution reads more of what dev tooling already emits:
  data-v-inspector (Vue), data-inspector-relative-path (react-dev-inspector),
  data-astro-source-file (Astro), Svelte's __svelte_meta, and a generic
  data-source, alongside the React fibers and data-tailr-source it already
  read. Windows paths and trailing column numbers are handled.
• npm run demo starts the demo app itself instead of expecting one on a port
  nothing had started.

Fixed

• An https:// target crashed the session process on the first page request.
  https dev servers are now proxied, hot-reload upgrade included, and a
  self-signed certificate is accepted — a local dev server's always is.
• Rewritten HTML carried both the upstream's transfer-encoding: chunked and a
  freshly computed content-length. Strict clients refuse that combination
  outright, and every dev server streams its HTML. HTML arriving compressed is
  now passed through whole rather than decoded as utf-8 and injected into.
• tailr status exited 0 while the agent's own run was still in flight,
  reporting leased work back to it as a waiting batch. It now reports what the
  server calls pending.
• Closing a run that was already closed returned 500 Server error. rather than
  409 No open run. — an agent retrying tailr done after a dropped connection
  could not tell that apart from a real failure.
• A synchronous failure inside the proxy took the whole session down with it. It
  now costs one page, and the review URL stays up.

Changed

• PRODUCT.md no longer describes the project as having no implementation, and
  states exactly how far source resolution reaches. The overlay surface doc
  describes the Island that shipped rather than the withdrawn Callout direction.