Repository navigation
Add scoped connected-app services and reviewed agent tool mappings - #119
Merged
ymote merged 5 commits intoOct 7, 2026
Merged
Conversation
This was referenced Oct 6, 2026
This was referenced Oct 7, 2026
ymote
marked this pull request as ready for review
October 7, 2026 00:31
ymote
merged commit Oct 7, 2026
6eb362b
into
feat/photos-youtube-service-capabilities
2 checks passed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Ordinary App Hub apps need reusable provider services without receiving tokens or declaring first-party system IDs. Add explicit
auth,github,gcalendarandgmailcapabilities and signed, reviewedhost_methodmappings for app-owned tools. Admission keeps app namespace, target-family grants, private-data flags and minimum risk checks; approval/remote-write endpoints are excluded.Keep host-sheet text, keyboard, IME, clipboard and pointer-release events out of the underlying app. A shared input classifier is used by the installed runner and OctoSense’s foreground Glance workspace; the runner captures its host surface references before app evaluation. Also retire host sheets before replacing them. A queued request or late reply from the prior sheet can no longer act on its replacement, including when a Splash heap address is reused.
Depends on #96 for the existing media-capability/system-pack changes. OctoSense #347 implements the services; App Design Flow #154 carries the three connected sample apps. This PR alone does not configure OAuth or run an agent.
Validation: contract/policy suites passed, including 29 agent-bundle tests; all 20 appstore tests passed, including real Splash/pump replacement and native CardAppView modal-input regressions. GitHub contract and semver checks passed on
5c7a13f92fa25d36ba1fe7fb99dc9fb1b235f8d3. Live provider and device acceptance are outside this repository and remain pending. No production catalog, publisher key or private account data changed.