Repository navigation

web: Wave 2 — spec-conformant MCP Apps host (rollup of #1565–#1572) - #1660

Merged

cliffhall merged 26 commits into

v2/mainfrom

v2/1572-app-status

Jul 12, 2026

Merged

web: Wave 2 — spec-conformant MCP Apps host (rollup of #1565–#1572)#1660
cliffhall merged 26 commits into
v2/mainfrom
v2/1572-app-status

Commits on Jul 11, 2026
- web: sandbox hardening — opaque-origin inner frame, srcdoc-only, frame-ancestors
  
  cliffhall
  and
  claude
  committed
  2649521
- web: enforce per-app _meta.ui.csp in the app bridge + surface resource-read failures
  
  cliffhall
  and
  claude
  committed
  446f6ba
- web: full hostContext delivery + live host-context-changed updates
  
  cliffhall
  and
  claude
  committed
  679a3e2
- web: honor ui/notifications/size-changed and ui/request-display-mode
  
  cliffhall
  and
  claude
  committed
  326aa0e
- web: honor ui/download-file with confirmation and http(s) allowlist
  
  cliffhall
  and
  claude
  committed
  8f120dc
- web: surface ui/message and app logging in panels below the running app
  
  cliffhall
  and
  claude
  committed
  77af567
- web: stage partial input — replay tool-input-partial before final tool input
  
  cliffhall
  and
  claude
  committed
  9551a3f
- web: app lifecycle status + machine-readable data attributes on the Apps screen
  
  cliffhall
  and
  claude
  committed
  908adf9
- review: warn when server sandbox drops allow-scripts + revert incidental lockfile churn
  
  cliffhall
  and
  claude
  committed
  cdd166d
- Merge branch 'v2/1565-sandbox-hardening' into v2/1566-per-app-csp
  cliffhall
  committed
  8437a1c
- review: document CSP-vs-permissions filtering asymmetry (PR #1652)
  
  cliffhall
  and
  claude
  committed
  345395b
- test: lock in per-app HOST_CAPABILITIES isolation (PR #1652 round 2)
  
  cliffhall
  and
  claude
  committed
  226c2c6
- Merge branch 'v2/1566-per-app-csp' into v2/1567-hostcontext-delivery
  cliffhall
  committed
  a03a074
- review: gate theme observer on initialized + document seed/dep assumptions (PR #1654)
  
  cliffhall
  and
  claude
  committed
  0426f1b
- Merge branch 'v2/1567-hostcontext-delivery' into v2/1568-size-displaymode
  cliffhall
  committed
  5688b6b
- review: guard 0-height size reports, distinct RendererFrame, shared payload type (PR #1656)
  
  cliffhall
  and
  claude
  committed
  0c30294
- Merge branch 'v2/1568-size-displaymode' into v2/1569-download-file
  cliffhall
  committed
  9ffaa42
- review: distinguish links, cap batch size, comment truncation (PR #1657)
  
  cliffhall
  and
  claude
  committed
  a3a5bfa
- review: skip embedded resource with neither text nor blob (PR #1657 round 2)
  
  cliffhall
  and
  claude
  committed
  ca21c59
- Merge branch 'v2/1569-download-file' into v2/1570-message-logs
  cliffhall
  committed
  f646322
- review: type-honest formatLogData, cap channels, log-panel a11y (PR #1658)
  
  cliffhall
  and
  claude
  committed
  0190220
- review: stable id key for Messages panel (PR #1658 round 2)
  
  cliffhall
  and
  claude
  committed
  e8e0a5c
- Merge branch 'v2/1570-message-logs' into v2/1571-stage-partial-input
  cliffhall
  committed
  16fd1ea
- review: note partialStages intentionally survives handleOpen (PR #1659)
  
  cliffhall
  and
  claude
  committed
  541d2c4
Commits on Jul 12, 2026
- Merge branch 'v2/1571-stage-partial-input' into v2/1572-app-status
  cliffhall
  committed
  4ccfc3c
- review: align error-panel docs with behavior + gate data-app-error on running (PR #1660)
  
  cliffhall
  and
  claude
  committed
  6b097ac

Commits

Commits on Jul 11, 2026

Commits on Jul 12, 2026