@absolutejs/mcp 0.17.1 → 0.17.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +6 -0
- package/canary/results/2026-09-11-claude-web.json +30 -0
- package/changelog.json +10 -0
- package/docs/host-canaries.md +13 -3
- package/package.json +1 -1
package/CHANGELOG.md
CHANGED
|
@@ -6,6 +6,12 @@ This file is generated by `absolute-changelog` from the entries in
|
|
|
6
6
|
`changelog/`. Edit an entry, not this file — and add new ones under
|
|
7
7
|
`changelog/unreleased/`.
|
|
8
8
|
|
|
9
|
+
## 0.17.2 — 2026-09-11
|
|
10
|
+
|
|
11
|
+
### Added
|
|
12
|
+
|
|
13
|
+
- **Record verified Claude web rendering, refresh, pagination and narrow-viewport host canary evidence**
|
|
14
|
+
|
|
9
15
|
## 0.17.1 — 2026-09-11
|
|
10
16
|
|
|
11
17
|
### Added
|
|
@@ -0,0 +1,30 @@
|
|
|
1
|
+
{
|
|
2
|
+
"date": "2026-09-11",
|
|
3
|
+
"runtimePackage": "@absolutejs/mcp@0.17.1",
|
|
4
|
+
"host": "Claude web custom connector",
|
|
5
|
+
"browser": "Windows Chrome 152.0.7977.83",
|
|
6
|
+
"data": "synthetic only",
|
|
7
|
+
"protocol": "2025-06-18",
|
|
8
|
+
"appsMimeType": "text/html;profile=mcp-app",
|
|
9
|
+
"successfulCalls": {
|
|
10
|
+
"get_billing_status": 2,
|
|
11
|
+
"get_usage_report": 2,
|
|
12
|
+
"list_receipts": 2
|
|
13
|
+
},
|
|
14
|
+
"observed": [
|
|
15
|
+
"Three native report views rendered",
|
|
16
|
+
"Balance refresh succeeded",
|
|
17
|
+
"Usage refresh and daily row expansion succeeded",
|
|
18
|
+
"Receipt pagination ended with empty page and hidden Older receipts button",
|
|
19
|
+
"No extra tool calls from initial rendering or page reload",
|
|
20
|
+
"390px desktop viewport: app widths 322px; no horizontal document overflow"
|
|
21
|
+
],
|
|
22
|
+
"notVerified": [
|
|
23
|
+
"Native mobile application",
|
|
24
|
+
"OAuth login",
|
|
25
|
+
"Account isolation",
|
|
26
|
+
"Expired-session reconnect",
|
|
27
|
+
"IDE hosts"
|
|
28
|
+
],
|
|
29
|
+
"cleanup": "Temporary connector and development route removed"
|
|
30
|
+
}
|
package/changelog.json
CHANGED
|
@@ -2,6 +2,16 @@
|
|
|
2
2
|
"contract": 1,
|
|
3
3
|
"name": "@absolutejs/mcp",
|
|
4
4
|
"releases": [
|
|
5
|
+
{
|
|
6
|
+
"version": "0.17.2",
|
|
7
|
+
"date": "2026-09-11",
|
|
8
|
+
"changes": [
|
|
9
|
+
{
|
|
10
|
+
"kind": "added",
|
|
11
|
+
"summary": "Record verified Claude web rendering, refresh, pagination and narrow-viewport host canary evidence"
|
|
12
|
+
}
|
|
13
|
+
]
|
|
14
|
+
},
|
|
5
15
|
{
|
|
6
16
|
"version": "0.17.1",
|
|
7
17
|
"date": "2026-09-11",
|
package/docs/host-canaries.md
CHANGED
|
@@ -42,19 +42,29 @@ Record the exact host version/surface, transport, requested and negotiated proto
|
|
|
42
42
|
|
|
43
43
|
## Observed September 11, 2026
|
|
44
44
|
|
|
45
|
-
|
|
45
|
+
Terminal tests ran against the built `0.17.0` runtime. The later Claude web test used the published `0.17.1` canary.
|
|
46
46
|
|
|
47
47
|
| Host | Negotiation | Observed result |
|
|
48
48
|
| ------------------------------------------------ | ------------------------------------------------------------------------ | ---------------------------------------------------------------------------------------------------------- |
|
|
49
49
|
| Claude Code 2.1.265, print mode, Streamable HTTP | Requested 2025-11-25; accepted server 2025-06-18; no Apps MIME extension | Four read calls passed, including cursor pagination; text/structured fallback; no embedded rendering claim |
|
|
50
50
|
| Codex CLI 0.154.0, exec mode, Streamable HTTP | Requested and accepted 2025-06-18; no Apps MIME extension | Four read calls passed, including cursor pagination; text/structured fallback; no embedded rendering claim |
|
|
51
|
-
| Claude web
|
|
51
|
+
| Claude web, Windows Chrome 152.0.7977.83 | Apps MIME advertised; accepted 2025-06-18 | Three native views, refresh and pagination passed |
|
|
52
52
|
| VS Code 1.135.0 | Installed version confirmed | Interactive Copilot/MCP Apps UI not exercised |
|
|
53
53
|
| Cursor, Gemini CLI, goose | Executables unavailable in this environment | Not tested |
|
|
54
54
|
| ChatGPT hosted surfaces | No host canary performed | Not tested |
|
|
55
55
|
|
|
56
56
|
Both tested terminal clients tolerated GET 405 (no standalone SSE stream) and discovered all three tools. Claude Code also sent a `server/discover` probe that received 400 before successful initialization. These observations do not establish support in other versions or distributions. Initial fixture-development attempts failed receipt validation; the final fixture uses the billing package cursor encoder, supplies a valid receipt ID, and validates its records before listening.
|
|
57
57
|
|
|
58
|
-
The remaining release gates are
|
|
58
|
+
The remaining release gates are other host surfaces including IDE rendering, authenticated staging reconnect/isolation, then the product's migration and commerce approval gates. This evidence does not enable any host commerce profile.
|
|
59
59
|
|
|
60
60
|
Sources: [Codex MCP configuration](https://learn.chatgpt.com/docs/extend/mcp?surface=cli), [VS Code MCP servers](https://code.visualstudio.com/docs/copilot/customization/mcp-servers), and the installed `claude --help` / `claude mcp --help` output. Host observations above come from actual local runs, not documentation claims.
|
|
61
|
+
|
|
62
|
+
## Claude web rendering evidence
|
|
63
|
+
|
|
64
|
+
The signed-in custom-connector test used the published 0.17.1 synthetic canary and native Windows Chrome 152.0.7977.83. Claude identified the reports as three interactive tools. All three HTML resource reads and initial tool calls succeeded. There were exactly three initial report calls; loading/reloading the views did not issue extra tool calls. Explicit balance refresh, usage refresh and Older receipts produced three further successful read calls. Daily usage expanded correctly. The final receipt page was empty and the Older receipts button disappeared. At a 390-pixel desktop viewport the embedded views had 322-pixel widths and no horizontal document overflow. This is not a native mobile-app check.
|
|
65
|
+
|
|
66
|
+
A temporary public tunnel allowed discovery but failed tool execution before reaching the handler. The passing run used a dedicated HTTPS development endpoint forwarding to the unchanged synthetic fixture. The temporary connector and route were removed afterward. No production application, billing data, OAuth grants or commerce profiles were changed. Reviewed aggregate evidence is in `canary/results/2026-09-11-claude-web.json`; it includes no endpoint addresses, headers, session IDs, credentials or chat transcripts. Patch 0.17.2 distributes this evidence; report runtime code is unchanged.
|
|
67
|
+
|
|
68
|
+
For Windows/WSL testing, a headed Linux browser may not appear on the Windows desktop. Use a native Windows test browser with a separate persistent profile and loopback CDP endpoint. Reuse one Playwright CDP connection. If existing cross-origin frames are missing from automation, reload with that connection established; Claude uses a wrapper frame and a nested `about:blank` app frame. Never commit browser profiles or credentials.
|
|
69
|
+
|
|
70
|
+
Conversational rendering is verified for this exact surface. VS Code/Cursor interactive rendering and authenticated staging reconnect/account-isolation remain separate open gates.
|
package/package.json
CHANGED