feat(web/apps): spec-conformant Apps host + CLI/deep-link path for programmatic review#1510

Open

tobinsouth wants to merge 55 commits into

modelcontextprotocol:v2/mainfrom

tobinsouth:apps-host-parity

Commits on Jun 22, 2026

feat(web/apps): enforce per-app _meta.ui.csp in the sandbox proxy
tobinsouth
committed
feat(web/apps): push live theme to running apps via host-context-changed
tobinsouth
committed
feat(web/apps): seed and live-push hostContext.styles to running apps
tobinsouth
committed
feat(web/apps): seed and live-push hostContext.containerDimensions
tobinsouth
committed
fix(web/apps): harden sandbox CSP builder against injection
tobinsouth
committed
feat(web/apps): honor view size-changed and resize the app container
tobinsouth
committed
feat(web/apps): wire ui/request-display-mode through the protocol
tobinsouth
committed
feat(web/apps): support ui/download-file in the apps host bridge
tobinsouth
committed
feat(web/apps): support ui/message — log view-submitted user content
tobinsouth
committed
feat(web/apps): surface app log notifications in a collapsible log panel
tobinsouth
committed
fix(web/apps): harden ui/download-file against scheme abuse and prompt injection
tobinsouth
committed
feat(web/apps): replay staged tool-input-partial fragments before tool-input
tobinsouth
committed
fix(web/apps): use \p{Cc} for download-label control-char strip
tobinsouth
committed
fix(web/apps): tighten sandbox CSP defaults and download-label sanitizer
tobinsouth
committed
fix(web/apps): build the per-app CSP host-side and wrap untrusted HTML in a fixed shell
tobinsouth
committed
feat(cli): add --app-info to probe a tool's MCP App UI metadata
tobinsouth
committed
fix(web/apps): correctness fixes for resource load, downloads, host-context, and container measurement
tobinsouth
committed
feat(web): deep-link auto-connect and openApp pre-selection
tobinsouth
committed
docs: add mcp-app-review recipe and an mcp_app_demo test fixture
tobinsouth
committed
fix(web,test-servers): document deep-link CSRF gate and harden demo widget origin checks
tobinsouth
committed
refactor(web/apps): reuse existing helpers and SDK affordances
tobinsouth
committed
refactor(web/apps): simplify state-reset, dedupe subcomponents, drop dead code
tobinsouth
committed
docs(test-servers): point mcp_app_demo widget at ext-apps SDK for origin handling
tobinsouth
committed
test(web/apps): assert wrapSandboxedHtml introduces no host-authored <iframe>
tobinsouth
committed
fix(web,cli): deep-link auto-connect on empty catalog, appArgs pre-fill, CLI output newlines
tobinsouth
committed
fix(test-servers): mcp_app_demo widget sends ui/initialize (View→Host) instead of listening for it
tobinsouth
committed
fix(test-servers): mcp_app_demo merges host-context-changed partials
tobinsouth
committed
fix(web,test-servers): deep-link upsert race + ui/notifications/initialized method name
tobinsouth
committed

Commits on Jun 23, 2026

Commits on Jun 24, 2026