web: Wave 2 — spec-conformant MCP Apps host (rollup of #1565–#1572)#1660

Merged

cliffhall merged 26 commits into

v2/mainfrom

v2/1572-app-status

Jul 12, 2026

Commits on Jul 11, 2026

web: sandbox hardening — opaque-origin inner frame, srcdoc-only, frame-ancestors

cliffhall
and
claude
committed
web: enforce per-app _meta.ui.csp in the app bridge + surface resource-read failures

cliffhall
and
claude
committed
web: full hostContext delivery + live host-context-changed updates

cliffhall
and
claude
committed
web: honor ui/notifications/size-changed and ui/request-display-mode

cliffhall
and
claude
committed
web: honor ui/download-file with confirmation and http(s) allowlist

cliffhall
and
claude
committed
web: surface ui/message and app logging in panels below the running app

cliffhall
and
claude
committed
web: stage partial input — replay tool-input-partial before final tool input

cliffhall
and
claude
committed
web: app lifecycle status + machine-readable data attributes on the Apps screen

cliffhall
and
claude
committed
review: warn when server sandbox drops allow-scripts + revert incidental lockfile churn

cliffhall
and
claude
committed
Merge branch 'v2/1565-sandbox-hardening' into v2/1566-per-app-csp
cliffhall
committed
review: document CSP-vs-permissions filtering asymmetry (PR #1652)

cliffhall
and
claude
committed
test: lock in per-app HOST_CAPABILITIES isolation (PR #1652 round 2)

cliffhall
and
claude
committed
Merge branch 'v2/1566-per-app-csp' into v2/1567-hostcontext-delivery
cliffhall
committed
review: gate theme observer on initialized + document seed/dep assumptions (PR #1654)

cliffhall
and
claude
committed
Merge branch 'v2/1567-hostcontext-delivery' into v2/1568-size-displaymode
cliffhall
committed
review: guard 0-height size reports, distinct RendererFrame, shared payload type (PR #1656)

cliffhall
and
claude
committed
Merge branch 'v2/1568-size-displaymode' into v2/1569-download-file
cliffhall
committed
review: distinguish links, cap batch size, comment truncation (PR #1657)

cliffhall
and
claude
committed
review: skip embedded resource with neither text nor blob (PR #1657 round 2)

cliffhall
and
claude
committed
Merge branch 'v2/1569-download-file' into v2/1570-message-logs
cliffhall
committed
review: type-honest formatLogData, cap channels, log-panel a11y (PR #1658)

cliffhall
and
claude
committed
review: stable id key for Messages panel (PR #1658 round 2)

cliffhall
and
claude
committed
Merge branch 'v2/1570-message-logs' into v2/1571-stage-partial-input
cliffhall
committed
review: note partialStages intentionally survives handleOpen (PR #1659)

cliffhall
and
claude
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

web: Wave 2 — spec-conformant MCP Apps host (rollup of #1565–#1572)#1660

web: Wave 2 — spec-conformant MCP Apps host (rollup of #1565–#1572)#1660
cliffhall merged 26 commits into
v2/mainfrom
v2/1572-app-status

Commits on Jul 11, 2026

web: sandbox hardening — opaque-origin inner frame, srcdoc-only, frame-ancestors

web: enforce per-app _meta.ui.csp in the app bridge + surface resource-read failures

web: full hostContext delivery + live host-context-changed updates

web: honor ui/notifications/size-changed and ui/request-display-mode

web: honor ui/download-file with confirmation and http(s) allowlist

web: surface ui/message and app logging in panels below the running app

web: stage partial input — replay tool-input-partial before final tool input

web: app lifecycle status + machine-readable data attributes on the Apps screen

review: warn when server sandbox drops allow-scripts + revert incidental lockfile churn

Merge branch 'v2/1565-sandbox-hardening' into v2/1566-per-app-csp

review: document CSP-vs-permissions filtering asymmetry (PR #1652)

test: lock in per-app HOST_CAPABILITIES isolation (PR #1652 round 2)

Merge branch 'v2/1566-per-app-csp' into v2/1567-hostcontext-delivery

review: gate theme observer on initialized + document seed/dep assumptions (PR #1654)

Merge branch 'v2/1567-hostcontext-delivery' into v2/1568-size-displaymode

review: guard 0-height size reports, distinct RendererFrame, shared payload type (PR #1656)

Merge branch 'v2/1568-size-displaymode' into v2/1569-download-file

review: distinguish links, cap batch size, comment truncation (PR #1657)

review: skip embedded resource with neither text nor blob (PR #1657 round 2)

Merge branch 'v2/1569-download-file' into v2/1570-message-logs

review: type-honest formatLogData, cap channels, log-panel a11y (PR #1658)

review: stable id key for Messages panel (PR #1658 round 2)

Merge branch 'v2/1570-message-logs' into v2/1571-stage-partial-input

review: note partialStages intentionally survives handleOpen (PR #1659)

Commits on Jul 12, 2026

Merge branch 'v2/1571-stage-partial-input' into v2/1572-app-status

review: align error-panel docs with behavior + gate data-app-error on running (PR #1660)