Refactors, tests, rest window handling

.github/workflows/ci.yml

@@ -23,5 +23,9 @@ jobs:
           cache: npm
       - name: Install
         run: npm ci
+      - name: Bundle
+        run: npm run bundle
+      - name: Verify bundled output is up to date
+        run: git diff --exit-code -- dist
       - name: CI
         run: npm run test:ci

.github/workflows/release-please.yml

@@ -19,6 +19,19 @@ jobs:
     if: ${{ github.event.workflow_run.conclusion == 'success' || github.event_name == 'workflow_dispatch' }}
     runs-on: ubuntu-latest
     steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+      - name: Setup Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+          cache: npm
+      - name: Install
+        run: npm ci
+      - name: Bundle
+        run: npm run bundle
+      - name: Verify bundled output is up to date
+        run: git diff --exit-code -- dist
       - name: Run Release Please
         uses: googleapis/release-please-action@16a9c90856f42705d54a6fda1823352bdc62cf38
         with:

README.md

@@ -4,7 +4,7 @@
 
 [![GitHub Actions](https://img.shields.io/badge/GitHub-Action-2088FF?style=for-the-badge&logo=github-actions&logoColor=white)](https://github.com/features/actions)
 [![Node.js](https://img.shields.io/badge/Node.js-20+-339933?style=for-the-badge&logo=node.js&logoColor=white)](https://nodejs.org/)
-[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg?style=for-the-badge)](./docs/LICENSE)
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg?style=for-the-badge)](./LICENSE)
 
 ---
 

SECURITY.md

@@ -0,0 +1,6 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+Please report security vulnerabilities by opening a Private Vulnerability
+report in the action repo.