Skip to content

WebKitUI MCP 0.6.3 — superseded, use 0.6.5

Choose a tag to compare

View all tags
@lowrisk75 lowrisk75 released this 06 Sep 11:31
· 6 commits to main since this release
v0.6.3
5367ba2
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

⚠️ Licence : cette release contredit sa propre LICENSE

THIRD_PARTY_NOTICES.md y déclare "The project license is the MIT License in LICENSE", alors que le fichier LICENSE livré à côté est la Business Source License 1.1. LICENSE fait foi et a toujours été BUSL. La phrase est corrigée à partir de 0.6.4.

Utilisez 0.6.4.

0.6.2 is broken. Use this instead. Its confirmation panel never drew, so no navigation could be approved and the server was unusable. Nothing unsafe happened — every navigation failed closed — but nothing worked either.

What went wrong

The panel's window collection behavior named both canJoinAllSpaces and moveToActiveSpace. AppKit refuses that pair and throws, so the helper aborted before drawing anything.

Signing, notarization and 179 tests all passed on that build, because none of them start the helper. The pre-notarization verifier now does, and fails the build if the helper exits instead of presenting a prompt. It was checked in both directions: it reports the 0.6.2 helper dead with status 134, and the fixed one as presenting.

Tab now goes somewhere

With the panel drawing again, Tab still did nothing in a frontmost window: the details text view is selectable, so it took first responder and kept the key press. The two buttons now form an explicit key view loop that Tab cannot leave, with Cancel as the initial responder — the keyboard lands on the refusal, and reaching Navigate takes a deliberate second press. Verified on hardware, keyboard only, no mouse.

Also in this line (from 0.6.2)

Release host lease actually releases it. The Status window button used to close only the sessions the broker knew about, while the lease is an flock held by a client in its own process — so in the one case an operator reaches for that button it did nothing, silently. It now finds the real holder, refuses to signal anything it cannot vouch for (the pid must be alive and its executable must really be a WebKitUI client, since pids get recycled onto strangers), sends SIGTERM and nothing harsher, and reports the outcome.

Verification

  • 179 tests pass.
  • Developer ID signed (Team TDV6D5L785), hardened runtime, notarized and stapled.
shasum -a 256 -c SHA256SUMS
spctl -a -vv -t exec "WebKitUI MCP.app"

Licensed under the Business Source License 1.1; Change Date 2030-08-28, then Apache 2.0.

Assets 4
Loading