Tonder Web SDK 0.1.12

Tonder Web SDK 0.1.12

Syncs the AI integration plugin with Web SDK documentation 0.1.5.

Changed

• Bundles the Web SDK 0.1.5 README snapshot from GitHub.
• Carries forward maintained integration recipes for framework configuration, secure fields, payment flows, saved-card/COF reminders, and reconciliation guidance.
• Updates Claude and Codex plugin metadata for release 0.1.12.

Verification

• npm test
• npm run build
• claude plugin validate ./plugins/claude-code/tonder-web-sdk
• claude plugin validate .
• Codex plugin validator

Tonder Web SDK 0.1.11

Tonder Web SDK 0.1.11

Fixes recipe output so agents no longer receive hardcoded API key or secure-token examples through the lifecycle section.

Fixed

• Syncs Web SDK README examples that use public browser configuration for Tonder public API key and SDK environment.
• Replaces the get_integration_recipe lifecycle block with concise framework-specific configuration guidance instead of embedding API reference examples.
• Adds regression tests to prevent hardcoded api_key: 'pk_test_...' and secure_token: 'server_minted_secure_token' from leaking into recipe output.

Verification

• npm test
• npm run build
• claude plugin validate ./plugins/claude-code/tonder-web-sdk
• claude plugin validate .
• Codex plugin validator

Tonder Web SDK 0.1.10

Tonder Web SDK 0.1.10

Configuration and secure-token guidance update for the Tonder Web SDK AI integrations.

Changed

• Bundles Web SDK docs 0.1.3 from the public GitHub README.
• Guides agents to use public app configuration for the Tonder public API key and SDK environment:
  • Vite/React: import.meta.env.VITE_*
  • Next.js Client Components: process.env.NEXT_PUBLIC_*
  • Angular: environment.ts / file replacements
  • Plain HTML: merchant-provided public runtime config such as window.__TONDER_CONFIG__
• Keeps currency as merchant checkout/business data instead of forcing it into environment variables.
• Adds always-on final-response reminder for backend-generated secure_token requirements in Card on File, saved-card, list/remove-card, and enrollment flows.

Verification

• npm test
• npm run build
• claude plugin validate ./plugins/claude-code/tonder-web-sdk
• claude plugin validate .
• Codex plugin validator

Tonder Web SDK 0.1.9

Tonder Web SDK 0.1.9

Security hardening release for the Tonder Web SDK AI integrations.

Security

• Adds explicit public-documentation boundaries to the bundled skill and MCP server instructions.
• Prepends MCP tool responses with a reminder that only public SDK integration guidance is exposed.
• Adds restricted-content tests for private endpoints, internal headers, bearer-token examples, source maps, and local/private-network URLs in bundled documentation.
• Updates maintainer guidance with a release hardening gate for public plugin artifacts.

Verification

• npm test
• npm run build
• claude plugin validate ./plugins/claude-code/tonder-web-sdk
• claude plugin validate .
• Codex plugin validator

Tonder Web SDK 0.1.8

Release 0.1.8

Summary

Patch release syncing the latest Tonder Web SDK README from GitHub and improving payment reporting guidance.

Fixed

• Bundled Web SDK docs 0.1.2 from https://github.com/tonderio/web-sdk/blob/main/README.md.
• Documents client_reference as the merchant order/reference used in dashboards, exports, webhooks, transaction records, and transaction reports.
• Documents non-sensitive metadata fields useful for reports: operation_date, customer_email, customer_id, and business_user.
• Keeps idempotency_key guidance focused on preventing duplicate charges during retries.
• Ensures generated SDK documentation snapshots include maintained integration recipes.

Verification

• npm run sync:docs
• npm test
• npm run build
• claude plugin validate ./plugins/claude-code/tonder-web-sdk
• claude plugin validate .
• Codex plugin validation

Tonder Web SDK 0.1.7

Release 0.1.7

Summary

Patch release correcting secure-field mount container height guidance and refreshing the bundled Web SDK documentation from GitHub.

Fixed

• HTML, React, and Angular recipes now recommend max-height: 90px for .card-field mount containers.
• Agent instructions now explain that merchant CSS caps the mount container height while customization.card_fields.styles styles SDK-rendered input internals inside the secure iframe.
• Bundled Web SDK docs were synced from https://github.com/tonderio/web-sdk/blob/main/README.md.
• MCP tools now use the latest bundled Web SDK docs version by default instead of pinning tool input schemas to 0.1.0.
• Docs sync now falls back to GitHub API reads when raw GitHub URLs are rate-limited.

Verification

• npm run sync:docs
• npm test
• npm run build
• claude plugin validate ./plugins/claude-code/tonder-web-sdk
• claude plugin validate .
• Codex plugin validation