feat(mcp-app): complete the MCP Apps program — plugin ui:// serving, the full app→host surface, and ['app'] visibility made real - #1600

Merged

ken-jo merged 37 commits into

mainfrom

feat/mcp-app-hostcontext-theme-locale

Jul 12, 2026

Commits on Jul 11, 2026

feat(mcp-app): add standard McpUiHostContext builder (theme/locale/tz)

ken-jo
and
claude
committed
a089625
feat(mcp-app): wire host theme/locale/timezone into the AppBridge HostContext

ken-jo
and
claude
committed
1a8ca66
fix(mcp-app): address review nits — real font mapping, wiring guard, doc accuracy

ken-jo
and
claude
committed
53ed747
test(mcp-app): type-clean the P0 test files (index typing, Array access, deferred drift pin)

ken-jo
and
claude
committed
2678ecb
fix(mcp-app): McpAppView must not require a ThemeProvider ancestor

ken-jo
and
claude
committed
596fb60
refactor(mcp-app): extract app→host handler seam with capability SoT

ken-jo
and
claude
committed
8aff554
feat(mcp-app): wire onsizechange to live webview dimensions

ken-jo
and
claude
committed
64bcffe
feat(mcp-app): wire onopenlink to the existing gated egress path

ken-jo
and
claude
committed
8806d83
feat(mcp): define the plugin ui:// resource-declaration contract

ken-jo
and
claude
committed
1e2e9ab
feat(mcp): serve a plugin's own ui:// resources over the loopback host

ken-jo
and
claude
committed
d8f415c
feat(ipc): unify ui:// backend resolution (loopback-first) in the render IPC

ken-jo
and
claude
committed
d692acb
feat(ipc): gate an MCP App's tools/call on its OWN server

ken-jo
and
claude
committed
a972866
feat(mcp-app): wire oncalltool to the gated app tools/call IPC

ken-jo
and
claude
committed
27c3dbe
test(boot): lock getPluginToolInvoker into the AppServices key set

ken-jo
and
claude
committed
b887ea8
refactor(mcp-app): serve plugin ui:// cards as CONTENT, not a host file read

ken-jo
and
claude
committed
9cd04ba
feat(mcp-app): let a plugin tool trigger its OWN declared ui:// card

ken-jo
and
claude
committed
ed06b10
feat(chat): add `app-emitted` origin + the `<app-message>` provenance envelope

ken-jo
and
claude
committed
33afaef
feat(engine): treat MCP-app message input as a staged, non-user turn origin

ken-jo
and
claude
committed
2accb08
feat(mcp-app): gated `ui/message` IPC — notification, guidance, or a user-gated card

ken-jo
and
claude
committed
593ca6b
feat(mcp-app): wire `onmessage` into the bridge — ONE handlers-table entry

ken-jo
and
claude
committed
cc5fd4b
feat(mcp-app): user-gated staging card for an app message with no turn in flight

ken-jo
and
claude
committed
6e72f49
i18n: catalogs for the MCP-app message keys (en/ko + 5 language packs)

ken-jo
and
claude
committed
e886708
feat(mcp-app): wire `onrequestdisplaymode` — the mode ACTUALLY applied, on the existing detach seam

ken-jo
and
claude
committed
d43533e
feat(mcp-app): wire `ondownloadfile` — inline bytes, a save dialog, and NO host-side fetch

ken-jo
and
claude
committed
3b2cb31
feat(mcp-app): wire `onupdatemodelcontext` — an overwrite slot the model reads NEXT turn, never a wake-up

ken-jo
and
claude
committed
810f283
fix(mcp-app): stop the bridge JSDoc from tagging ITSELF @deprecated

ken-jo
and
claude
committed
430d357
docs(mcp-app): author guide for ui:// cards + the assessment that drove #1600

ken-jo
and
claude
committed
460377b

Commits on Jul 12, 2026

fix(mcp-app)!: an app is NOT the plugin panel — close the ungoverned tool-call bypass

ken-jo
and
claude
committed
446becd
fix(mcp-app): bound the card, and make a display mode TRUE

ken-jo
and
claude
committed
62b91e3
fix(mcp-app): the fence an app can close is not a fence

ken-jo
and
claude
committed
1be6a22
refactor(mcp-app)!: drop the ui-resource `permissions` knob nothing honored

ken-jo
and
claude
committed
9090c5e
feat(mcp-app): make ["app"] visibility real — governed, and the same on both arms

ken-jo
and
claude
committed
ac38631
feat(mcp-app): pip — an in-page panel, because that is what every host actually does

ken-jo
and
claude
committed
4360e94
fix(mcp-app): close the model-execution lane the ["app"] governance opened

ken-jo
and
claude
committed
5367412
test(mcp-app): teach the runtime.counts mock the model-visible tool accessor

ken-jo
and
claude
committed
696ef2a
test(mcp-app): dedup the helpers CI check:test-quality flagged, and stop it scanning agent worktrees

ken-jo
and
claude
committed
12b574b
Merge remote-tracking branch 'origin/main' into feat/mcp-app-hostcontext-theme-locale
ken-jo
committed
4fd21e2