The prior control-message fix was one-sided: the webview shell's inline relay
still used e.data.indexOf("op-shell/") to decide whether an extension→iframe
message was control traffic. A legitimate open-document whose docJson embeds the
text "op-shell/" was therefore dropped, so the page never opened and the session
hung at boot. The relay now JSON.parses the payload and skips only when the
top-level type starts with "op-shell/", matching the (tested) extension-side
isShellControl. Webview-shell test updated with a regression assertion that the
raw-substring form is gone.
--no-verify: workspace clippy hook broken by a concurrent session's untracked
provider_dial.rs; no Rust touched. 129 tests + tsc + oxlint green.
|
||
|---|---|---|
| .. | ||
| op-vscode | ||
| op-web-sdk | ||
| op-web-sdk-react | ||
| op-web-sdk-vue | ||
| scripts | ||
| .oxfmtrc.json | ||
| .oxlintrc.json | ||
| bun.lock | ||
| CLAUDE.md | ||
| package.json | ||