Daniel Salazar 41f5bf91ba refactor(apps): one app view with the launch gates, built by AppService ...

AppDriver's serializer and its private-app / hosted-backing gates move to
AppService.views, built on a pure toAppView that is the one place
index_url is withheld. AppDriver, the subdomains driver's embedded apps and
the GUI shell view all use it. Visibility of protected apps
(filterReadable) moves with it.

Subdomain embeds (associated_app, app_owner) used to return index_url with
no gate; they now withhold it from a viewer who may not open a private app
or whose hosted backing is gone, and carry privateAccess, godmode and
feedback_enabled like a direct app read.

2026-10-10 19:37:12 -04:00

..

backend

refactor(apps): one app view with the launch gates, built by AppService

2026-10-10 19:37:12 -04:00

cli

…

dev-center

Auth limits, reborn-app tokens, seat addresses, drop-area encode (#4148)

2026-10-09 00:12:59 -07:00

docs

Misc subdomain and worker fixes (#4157)

2026-10-09 19:59:52 -04:00

gui

fix: settle which plan an org seat resolves to, and confirm a seat's address (#4139)

2026-10-09 16:17:51 -04:00

mcp-connector

…

puter-js

Misc subdomain and worker fixes (#4157)

2026-10-09 19:59:52 -04:00

worker

…

worker-types

Misc subdomain and worker fixes (#4157)

2026-10-09 19:59:52 -04:00