fix(client-sdk): stop compose box discarding in-progress notes

.gitattributes

@@ -0,0 +1,12 @@
+# Normalize line endings for this cross-platform CLI.
+* text=auto eol=lf
+
+# dist/ is compiled output, committed on purpose: this is a Claude Code plugin
+# distributed as a GitHub repo, and plugin installs fetch repo contents with no
+# build step. If dist/ is not committed, every install breaks. Do not gitignore it.
+#
+# It is still generated code, not something a human edits by hand, so mark it as
+# such: GitHub collapses it in PR diffs and excludes it from language stats, and
+# -diff keeps it out of local `git diff` output too. CI still enforces that dist/
+# matches a fresh build of src/, see .github/workflows/ci.yml.
+dist/** linguist-generated=true -diff

.github/workflows/ci.yml

@@ -2,21 +2,53 @@ name: CI
 
 on:
   push:
+    branches: [main]
   pull_request:
+    branches: [main]
+
+# Minimal permissions: the workflow only checks out code and runs local scripts.
+permissions:
+  contents: read
 
 jobs:
   test:
     name: Test (Node ${{ matrix.node }})
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        node: [18, 20]
+        node: [22, 24, 26]
     steps:
       - uses: actions/checkout@v4
       - uses: actions/setup-node@v4
         with:
           node-version: ${{ matrix.node }}
-      - run: npm install
+          cache: npm
+      - run: npm ci
       - run: npm run typecheck
       - run: npm run build
-      - run: node --test
+      - run: npm test
+
+  # dist/ is committed on purpose (see .gitattributes), which also hides it from
+  # PR diffs. That makes stale compiled output easy to miss, so enforce the
+  # invariant here instead: a clean rebuild of src/ must produce byte-identical
+  # dist/ output. Runs on a single Node version only, there is nothing to gain
+  # from comparing build output across the matrix.
+  dist-drift:
+    name: Verify dist/ matches a fresh build
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 24
+          cache: npm
+      - run: npm ci
+      - run: npm run build
+      - name: Fail if dist/ is stale
+        run: |
+          if git diff --exit-code -- dist/; then
+            echo "dist/ matches a fresh build of src/."
+          else
+            echo "::error::dist/ does not match a fresh build of src/. Run 'npm run build' locally and commit the updated dist/ output."
+            exit 1
+          fi

.github/workflows/release.yml

@@ -0,0 +1,26 @@
+# This repo ships as a Claude Code plugin, distributed via the GitHub repo
+# itself (see .claude-plugin/), not published to npm. release-please's job
+# here is only to open the release PR, then on merge create the git tag,
+# the GitHub Release, and the changelog. There is no publish step, unlike
+# the sibling openapi-zod-ts monorepo's release workflow.
+name: Release Please
+
+on:
+  push:
+    branches: [main]
+  workflow_dispatch: {}
+
+permissions:
+  contents: write # create tags and releases
+  issues: write # release-please's documented basic configuration requires this
+  pull-requests: write # create and update release PRs
+
+jobs:
+  release-please:
+    name: Release Please
+    runs-on: ubuntu-latest
+    steps:
+      - uses: googleapis/release-please-action@45996ed1f6d02564a971a2fa1b5860e934307cf7 # v5.0.0
+        with:
+          config-file: release-please-config.json
+          manifest-file: .release-please-manifest.json

.release-please-manifest.json

@@ -0,0 +1 @@
+{ ".": "1.0.0" }

README.md

@@ -15,7 +15,7 @@ Interactive HTML feedback loop for Claude Code agents. The agent opens an HTML f
 2. `/plugin install loupe@codewithagents`
 3. If prompted, run `/reload-plugins` to activate.
 
-The skill is invoked as `/loupe:loupe`. Requires Node.js 18+ and has zero runtime dependencies.
+The skill is invoked as `/loupe:loupe`. Requires Node.js 22+ and has zero runtime dependencies.
 
 ## Development
 
@@ -51,7 +51,7 @@ node dist/cli.js poll /path/to/your/file.html --reply "I've updated the layout."
 
 ## Requirements
 
-- Node.js 18 or newer.
+- Node.js 22 or newer.
 - Zero runtime npm dependencies.
 
 ## License