Apps subsystem for self-hosted#1333

Closed

RhysSullivan wants to merge 23 commits into

mainfrom

apps-subsystem-b

Commits on Jul 5, 2026

apps: scaffold plugin package with five seam interfaces and QuickJS sandbox backing
RhysSullivan
committed
apps: workflow runner with journal replay, conformance suites, and SIGKILL kill test
RhysSullivan
committed
apps: FDI publish pipeline (discover, bundle, collect, project) with descriptor extraction
RhysSullivan
committed
apps: runtime, connection DI bindings, source plugin, and self-host wiring with end-to-end test
RhysSullivan
committed
apps: HTTP routes (publish/invoke/ui/SSE/workflows) and MCP surface (publish door, skills, ui resources)
RhysSullivan
committed
apps: end-to-end proof over real GitHub emulator (publish MCP, invoke HTTP, workflow, ui, SSE, skills)
RhysSullivan
committed
apps: fix e2e emulator types for repo typecheck
RhysSullivan
committed
apps: wire subsystem into self-host app with HTTP surface and booted integration test
RhysSullivan
committed
apps: add workflow scheduler (cron matching, due-fire, dedup) and finalize DESIGN.md
RhysSullivan
committed
docs: move apps design record to APPS_DESIGN.md, restore design.md design system
RhysSullivan
committed
apps: make publish atomic (commit last, descriptor in snapshot, repair path)
RhysSullivan
committed
apps: sandbox the workflow orchestrator behind a serializable step bridge
RhysSullivan
committed
apps: harden the handle bridge dispatch and deepen the sandbox conformance suite
RhysSullivan
committed
apps: make published tools real catalog citizens in the running self-host
RhysSullivan
committed
apps: prove the subsystem over the wire + mount the UI in a real MCP-Apps host
RhysSullivan
committed
apps: authenticate the HTTP surface behind Better Auth
RhysSullivan
committed
apps: escape the UI data island to prevent script breakout
RhysSullivan
committed
apps: single-driver workflow lease + snapshot-pinned resume
RhysSullivan
committed
apps: require an exact connection binding, no conns[0] fallback
RhysSullivan
committed
apps: guard publishes with a ref CAS, payload limits, and cron validation
RhysSullivan
committed
apps: store an explicit scope<->connection mapping, collision-free scope dbs
RhysSullivan
committed
apps: apps_open_ui checks client UI capability, returns a fallback URL
RhysSullivan
committed
apps: document the security model and publish limits
RhysSullivan
committed