Dustin Healy 1a70dce24b fix(mcp): advertise apps per-request for user connections and tear down navigated sandbox frames ... User connections now advertise the io.modelcontextprotocol/ui capability using the per-request appsEnabled resolved from resolveAllowlists rather than the static base flag, so a tenant/role/user override of mcpSettings.apps is honored at capability negotiation. The sandbox proxy treats inner-frame navigation as a teardown signal: after the initial blob load, any further load means the allow-scripts app navigated its own frame, so the proxy marks it navigated, revokes the blob, removes the frame, and gates both forwarding paths on that flag. This stops proxied host responses from reaching a navigated page and stops a navigated page from relaying messages to the host.		2026-06-29 10:37:39 -07:00
..
public	fix(mcp): advertise apps per-request for user connections and tear down navigated sandbox frames	2026-06-29 10:37:39 -07:00
scripts
src	fix(mcp): carry apps flag through the request resolver and canonicalize resource-read auth	2026-06-29 00:52:58 -07:00
sw
test
babel.config.cjs
check_updates.sh
index.html
jest.config.cjs
nginx.conf
package.json
postcss.config.cjs
tailwind.config.cjs
tsconfig.json
vite.config.ts