Andrew Harvard
7f157bfae1
Rename useMcpAppBridge back to useSandboxBridge
2026-02-05 11:07:45 -05:00
Andrew Harvard
7b7d8e1491
Minimize HTML template diff while keeping secure context changes
2026-02-05 11:06:17 -05:00
Andrew Harvard
2c4f0642a5
Simplify mcp_app_proxy.rs code style to match main branch patterns
2026-02-05 11:05:00 -05:00
Andrew Harvard
a0ef38dcc7
Add allow-forms to sandbox attribute for form support
2026-02-05 10:51:36 -05:00
Andrew Harvard
0f2eaae067
Apply CSP to inner content iframe to enforce restrictions
2026-02-05 10:51:36 -05:00
Andrew Harvard
0d183d4845
Rename mcp_app_view to mcp_app_proxy for cleaner diff
2026-02-05 10:51:36 -05:00
Andrew Harvard
f47ac13e16
Add double iframe architecture for MCP Apps
...
- Outer iframe: real URL (/mcp-app-view/{token}) for secure context
- Inner iframe: sandboxed with src (/mcp-app-view/{token}/content)
- Bridge template forwards postMessage between host and inner iframe
- Tokens are reusable (not single-use) since both iframes need to fetch
2026-02-05 10:51:36 -05:00
Andrew Harvard
5c2b2f68e4
Consolidate MCP App bridges and remove old proxy
...
- Rename useSecureContextBridge to useMcpAppBridge (single unified bridge)
- Remove useSandboxBridge (no longer needed with real URL approach)
- Remove mcp_app_proxy route and template (replaced by mcp_app_view)
- Remove fetchMcpAppProxyUrl from utils
- Update types.ts with DisplayMode and AppCapabilities
- Update HostContext to use containerDimensions instead of viewport
2026-02-05 10:51:35 -05:00
Andrew Harvard
87b24108a0
Add secure context support for MCP Apps
...
- Add /mcp-app-view endpoint that serves HTML from real URLs
- Enable window.isSecureContext for Web Payments SDK, WebAuthn, etc.
- Add useSandboxBridge hook for secure iframe communication
- Server enforces CSP headers for security boundary
2026-02-05 10:51:35 -05:00
David Katz
f9a24edc42
Port release checklist from notion to markdown ( #6921 )
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2026-02-05 15:45:21 +00:00
Sheikh Limon
bca26dd88d
fix: correct Tailwind @source paths for tarball builds ( #6978 )
...
Signed-off-by: sheikhlimon <sheikhlimon404@gmail.com >
2026-02-05 15:33:57 +00:00
Rabi Mishra
d1b6053d2f
fix: detect context length errors in GCP Vertex AI provider ( #6976 )
...
Signed-off-by: rabi <ramishra@redhat.com >
2026-02-05 12:49:22 +00:00
Peter Willemsen
e701350f5d
Added the ability to escape Jinja variables in recipes to include them in prompts ( #6975 )
...
Signed-off-by: Peter Willemsen <peter@codebuffet.co >
2026-02-05 12:37:57 +00:00
Elias Posen
2992856231
Bug Fix: bump pctx ( #6967 )
...
Signed-off-by: Elias Posen <elias@posen.ch >
2026-02-05 12:07:47 +00:00
Adrian Cole
aa4f320d23
fix(acp): fixtures now raise content mismatch errors ( #6912 )
...
Signed-off-by: Adrian Cole <adrian@tetrate.io >
2026-02-05 06:32:16 +00:00
Zane
5fc21ce094
custom provider form minor improvements ( #6966 )
2026-02-05 00:03:44 +00:00
Bright Zheng
950f1412ab
Fix 'Edit In Place' feature appending instead of editing messages ( #6955 )
...
Co-authored-by: Claude <noreply@anthropic.com >
Co-authored-by: Zane Staggs <zane@squareup.com >
2026-02-04 22:03:24 +00:00
Angie Jones
78a9e48836
docs: change RPI slash commands ( #6963 )
...
Co-authored-by: dianed-square <73617011+dianed-square@users.noreply.github.com >
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2026-02-04 21:48:51 +00:00
Douwe Osinga
6ae72a6cf0
Use haiku for databricks ( #6943 )
...
Co-authored-by: Douwe Osinga <douwe@squareup.com >
2026-02-04 17:17:59 +00:00
jh-block
5492052f0c
Allow copying long strings to the clipboard in the diagnostics viewer ( #6951 )
2026-02-04 18:17:50 +01:00
Andrew Harvard
2b90c2c310
feat(mcp-apps): add Permission Policy support for sandbox iframes ( #6947 )
2026-02-04 16:52:11 +00:00
Zane
d8d9bb741b
fix tool confirmations not showing up mid chat ( #6935 )
2026-02-04 15:37:21 +00:00
dianed-square
f3d969c317
docs: custom model definitions ( #6910 )
2026-02-04 15:07:26 +00:00
Songlin Yang
79088dbc80
fix(1785): enable lto and codegen-units in release build ( #6586 )
...
Signed-off-by: lsytj0413 <511121939@qq.com >
2026-02-04 13:34:09 +00:00
dianed-square
98ba4a9cb1
docs: ovhcloud provider ( #6932 )
2026-02-03 23:55:34 +00:00
jh-block
e0a1381e39
Allow building with CUDA as the candle backend ( #6914 )
2026-02-03 22:58:02 +00:00
dianed-square
adc7732482
docs: gooseignore negation patterns ( #6929 )
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2026-02-03 22:44:32 +00:00
Rabi Mishra
1e645c0212
feat: display subagent tool calls in CLI and UI ( #6535 )
...
Signed-off-by: rabi <ramishra@redhat.com >
2026-02-03 20:56:59 +00:00
github-actions[bot]
7ee634eaa7
chore(release): release version 1.23.0 (minor) ( #6906 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-02-03 20:43:47 +00:00
Emma Youndtsmith
782ef02e6e
Document keyboard shortcut menu ( #6928 )
...
Co-authored-by: dianed-square <73617011+dianed-square@users.noreply.github.com >
2026-02-03 20:39:06 +00:00
Emma Youndtsmith
7fa5b3ecdf
Document duplicate session button and fork command ( #6923 )
2026-02-03 19:19:57 +00:00
dianed-square
632e4fc30f
docs: cli external editor ( #6922 )
2026-02-03 19:15:18 +00:00
dianed-square
29e41ee2e2
docs: customizable prompt templates ( #6908 )
2026-02-03 19:14:49 +00:00
Songlin Yang
3e38c303e6
feat: pass env to shell command ( #6863 )
...
Signed-off-by: lsytj0413 <511121939@qq.com >
2026-02-03 18:44:07 +00:00
Zane
aa356bd460
fix: per session working dir isolation ( #6920 )
2026-02-03 18:20:02 +00:00
Elias Posen
8631caa890
Use Port of Context (pctx) for code mode ( #6765 )
...
Signed-off-by: Elias Posen <elias@posen.ch >
Signed-off-by: Adrian Cole <adrian@tetrate.io >
Co-authored-by: Adrian Cole <adrian@tetrate.io >
2026-02-03 12:15:49 -05:00
Zane
1f95f07065
Dont show new chat placeholders for recipes in sidebar ( #6790 )
2026-02-03 08:36:05 -08:00
Jack Amadeo
eae5a47788
More providers for testing ( #6849 )
2026-02-03 16:21:59 +00:00
Zane
efaf2a6cfb
fix session history cards title wrapping early ( #6854 )
2026-02-03 16:11:55 +00:00
Sheikh Limon
578dc5a88d
fix: broken Tailwind scan in tarball releases ( #6917 )
...
Signed-off-by: sheikhlimon <sheikhlimon404@gmail.com >
2026-02-03 16:11:12 +00:00
Zane
5c259e09a4
fix deep links not working in markdown ( #6907 )
2026-02-03 07:51:42 -08:00
jh-block
a3f93ad532
Update candle to 0.9 ( #6913 )
2026-02-03 13:59:52 +00:00
Douwe Osinga
0f334dbd45
Make ctrl-c work like in claude code ( #6900 )
...
Co-authored-by: Douwe Osinga <douwe@squareup.com >
2026-02-03 12:08:16 +00:00
Douwe Osinga
1373d9c5f9
Careless whisper ( #6877 )
...
Co-authored-by: Douwe Osinga <douwe@squareup.com >
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2026-02-03 11:54:29 +00:00
Songlin Yang
3d0bb3c670
fix: use lazy for regex to avoid recompile ( #6865 )
...
Signed-off-by: lsytj0413 <511121939@qq.com >
2026-02-03 07:00:58 +00:00
Rabi Mishra
e32e117b7e
fixi(deps): broken goose/goose-cli build on main ( #6911 )
...
Signed-off-by: rabi <ramishra@redhat.com >
2026-02-03 05:29:44 +00:00
Rizel Scarlett
ca7a99a11e
docs: update MCP Apps blog post terminology and add toolInputs streaming info ( #6904 )
2026-02-03 01:25:17 +00:00
Sean Kenneth Doherty
bbcfe7f571
fix(mistral): add devstral models with correct 262K context length ( #6867 )
2026-02-03 01:13:12 +00:00
Adrian Cole
1ad81e3b69
refactor(providers): extract ProviderDef trait and OpenAiCompatibleProvider ( #6832 )
...
Signed-off-by: Adrian Cole <adrian@tetrate.io >
2026-02-02 22:36:54 +00:00
BestCodes
849cc60fbc
feat: ask ai discord bot ( #6842 )
...
Signed-off-by: The-Best-Codes <bestcodes.official@gmail.com >
2026-02-02 22:11:28 +00:00