@absolutejs/mcp 0.17.5 → 0.17.7

package/CHANGELOG.md

@@ -6,6 +6,22 @@ This file is generated by `absolute-changelog` from the entries in
 `changelog/`. Edit an entry, not this file — and add new ones under
 `changelog/unreleased/`.
 
+## 0.17.7 — 2026-09-12
+
+### Added
+
+- **Ship a synthetic external-checkout host canary with expiring links, explicit approval and purchase-status checks**
+
+## 0.17.6 — 2026-09-11
+
+### Added
+
+- **Allow verified patched hosts through the version fallback with optional Apps configuration** (`clientSupportsMcpApps`, `McpAppsConfig`)
+
+### Fixed
+
+- **Use text and structured report results on affected VS Code builds while their upstream webview startup race remains unresolved**
+
 ## 0.17.5 — 2026-09-11
 
 ### Added

package/UPSTREAM_ISSUES.md

@@ -0,0 +1,19 @@
+# Upstream issues
+
+## VS Code webviews can go blank after a remount
+
+Tracking: [microsoft/vscode#335908](https://github.com/microsoft/vscode/issues/335908). An issue was submitted; no pull request was submitted.
+
+An earlier asynchronous origin-hash completion can replace the iframe after a newer mount connects. In native Windows VS Code 1.135.0, delaying the first hash reproduced a blank report. A current-promise guard passed three rounds across balance, usage and receipts in the isolated test process. The same unguarded method was found in the local 1.136.1 bundle; that version was source-inspected, not runtime-tested. See [the source patch and regression checker](canary/vscode/README.md).
+
+### Shared workaround in MCP 0.17.6
+
+New sessions identifying themselves as `Visual Studio Code` version `1.135.0` or `1.136.1` receive text and structured results without Apps metadata or HTML resources. Report tools remain available. Authorization, billing and other host negotiations are unchanged. This exact-version rule is a presentation workaround, not a security boundary or a certification of other versions.
+
+For an existing VS Code connection, run **MCP: Reset Cached Tools**, then **Developer: Reload Window**, reconnect/start the MCP server and open a new chat. Reconnection alone reused old UI metadata in our test. Reconnect the MCP server after upgrading: the negotiated Apps capability is stored in the session, so existing sessions retain their old decision. Consumers get the workaround through the package; they do not need a project-specific renderer or an editor patch.
+
+`apps.allowKnownBrokenHosts: true` bypasses the version exclusion for controlled testing of a verified patched host. It still requires the host to advertise the Apps MIME capability. Do not enable it on ordinary affected installations. The diagnostic in-memory VS Code patch does not survive restart and is not the deployed workaround.
+
+### Removal
+
+Keep the fallback for affected builds until they can reliably render Apps. When an upstream fix ships, verify fresh conversations, repeated mounts, refresh and pagination in the released host before certifying rich views there. Remove the override when a patched test build is retired. Keep the source regression and issue history so a successful retry is not mistaken for a fix.

package/canary/checkout.ts

@@ -0,0 +1,198 @@
+/** Synthetic external-checkout fixture. No accounts, card inputs or gateway. */
+import {
+  createCheckoutHandoffTool,
+  createMcpHandler,
+  createPurchaseStatusTool,
+} from "@absolutejs/mcp";
+
+export function createCheckoutCanary(origin: string, now = () => Date.now()) {
+  const publicUrl = new URL(origin);
+  if (publicUrl.protocol !== "https:" || publicUrl.origin !== origin)
+    throw Error("Provide an exact HTTPS checkout origin");
+  const purchases = new Map<
+    string,
+    { token: string; expires: number; approved: boolean }
+  >();
+  const started = now();
+  const checkout = createCheckoutHandoffTool({
+    origin,
+    issue: async (productId) => {
+      if (productId !== "synthetic-1000")
+        throw Error("Only synthetic-1000 is supported");
+      if (purchases.size >= 100)
+        throw Error("Restart the canary before creating more fixtures");
+      const purchaseId = crypto.randomUUID();
+      const token = crypto.randomUUID();
+      const expires = now() + 15 * 60_000;
+      purchases.set(purchaseId, { token, expires, approved: false });
+      return {
+        purchaseId,
+        url: `${origin}/checkout#${purchaseId}/${token}`,
+        expiresAt: new Date(expires).toISOString(),
+      };
+    },
+  });
+  const status = createPurchaseStatusTool({
+    read: async (purchaseId) => {
+      const purchase = purchases.get(purchaseId);
+      return purchase
+        ? {
+            purchaseId,
+            status: purchase.approved ? "approved" : "not_started",
+            creditsGranted: purchase.approved ? 1000 : 0,
+          }
+        : null;
+    },
+  });
+  const handler = createMcpHandler({
+    issuer: "http://127.0.0.1:4428",
+    path: "/mcp",
+    serverInfo: { name: "absolute-checkout-canary", version: "1" },
+    authorize: async () => ({
+      ok: true,
+      caller: "synthetic-fixture",
+      scopes: [],
+    }),
+    // This review authorizes only this synthetic developer fixture. Never reuse
+    // it for a real merchant or infer a commerce binding from clientInfo.
+    commerce: () => ({
+      profiles: ["direct-mcp"],
+      capabilities: { externalLinks: true },
+      reviews: [
+        {
+          id: "operator-synthetic-checkout-canary",
+          profile: "direct-mcp",
+          actions: ["external_checkout"],
+          categories: ["usage_credits"],
+          reviewedAt: new Date(started).toISOString(),
+          expiresAt: new Date(started + 60 * 60_000).toISOString(),
+          sourceUrls: ["https://code.visualstudio.com/license"],
+        },
+      ],
+    }),
+    tools: () => ({
+      prepare_test_checkout: {
+        ...checkout,
+        description: `SYNTHETIC TEST ONLY. Use productId synthetic-1000. ${checkout.description}`,
+      },
+      get_test_purchase_status: status,
+    }),
+  });
+  const headers = {
+    "content-type": "text/html; charset=utf-8",
+    "cache-control": "no-store",
+    "referrer-policy": "no-referrer",
+    "x-content-type-options": "nosniff",
+    "content-security-policy":
+      "default-src 'none'; script-src 'unsafe-inline'; style-src 'unsafe-inline'; connect-src 'self'; base-uri 'none'; frame-ancestors 'none'; form-action 'none'",
+  };
+  const page = `<!doctype html><html lang="en"><meta charset="utf-8"><meta name="viewport" content="width=device-width"><title>MCP checkout test</title><style>:root{color-scheme:light dark;font:18px system-ui}body{max-width:40rem;margin:10vh auto;padding:2rem}button{padding:1rem;font:inherit}strong{display:block;margin:1rem 0}</style><h1>MCP checkout test</h1><p>Synthetic developer fixture. No real payment, card information, account or subscription.</p><strong>1,000 simulated credits · $0 charged</strong><p id="status" role="status">Checking test link…</p><button id="approve" disabled>Simulate approval</button><script>
+const capability=location.hash.slice(1);history.replaceState(null,'','/checkout');const status=document.getElementById('status'),button=document.getElementById('approve');
+async function update(action){button.disabled=true;try{const r=await fetch('/state',{method:'POST',headers:{'content-type':'application/json'},body:JSON.stringify({capability,action})});if(!r.ok)throw Error('This test link is invalid or expired.');const value=await r.json();status.textContent=value.approved?'Approved — 1,000 simulated credits. Return to your assistant and check purchase status.':'Ready. Opening this page has not approved anything.';button.hidden=value.approved;button.disabled=value.approved;}catch(e){status.textContent=e.message;}}
+button.addEventListener('click',()=>update('approve'));update('read');</script></html>`;
+  return {
+    mcp: handler,
+    checkout: async (request: Request): Promise<Response> => {
+      const url = new URL(request.url);
+      if (url.pathname === "/checkout" && request.method === "GET")
+        return new Response(page, { headers });
+      if (url.pathname !== "/state" || request.method !== "POST")
+        return new Response("Not found", { status: 404 });
+      if (
+        request.headers.get("origin") !== origin ||
+        !request.headers.get("content-type")?.startsWith("application/json")
+      )
+        return new Response("Forbidden", { status: 403 });
+      const raw = await request.text();
+      if (raw.length > 1024) return new Response("Too large", { status: 413 });
+      let input;
+      try {
+        input = JSON.parse(raw);
+      } catch {
+        return new Response("Invalid JSON", { status: 400 });
+      }
+      if (
+        !input ||
+        typeof input.capability !== "string" ||
+        !["read", "approve"].includes(input.action)
+      )
+        return new Response("Invalid request", { status: 400 });
+      const [id, token, extra] = input.capability.split("/");
+      const purchase = purchases.get(id);
+      if (
+        extra !== undefined ||
+        !purchase ||
+        purchase.token !== token ||
+        purchase.expires <= now()
+      )
+        return new Response("Invalid or expired test link", { status: 404 });
+      if (input.action === "approve") purchase.approved = true;
+      return Response.json(
+        { approved: purchase.approved },
+        { headers: { "cache-control": "no-store" } },
+      );
+    },
+  };
+}
+
+if (import.meta.main) {
+  const fixture = createCheckoutCanary(
+    process.env.CANARY_CHECKOUT_ORIGIN ?? "",
+  );
+  Bun.serve({
+    hostname: "127.0.0.1",
+    port: 4438,
+    fetch: async (request) => {
+      const response = await fixture.checkout(request);
+      const path = new URL(request.url).pathname;
+      console.log(
+        JSON.stringify({
+          surface: "checkout",
+          method: request.method,
+          route: path === "/checkout" || path === "/state" ? path : "unknown",
+          status: response.status,
+        }),
+      );
+      return response;
+    },
+  });
+  Bun.serve({
+    hostname: "127.0.0.1",
+    port: 4428,
+    fetch: async (request) => {
+      let rpc;
+      try {
+        if (request.method === "POST") rpc = await request.clone().json();
+      } catch {
+        /* handler validates */
+      }
+      const response =
+        (await fixture.mcp(request)) ??
+        new Response("Not found", { status: 404 });
+      // Never log checkout capabilities, arguments, transcripts or auth headers.
+      console.log(
+        JSON.stringify({
+          method: rpc?.method ?? request.method,
+          status: response.status,
+          ...(rpc?.method === "initialize"
+            ? {
+                client: rpc.params?.clientInfo?.name,
+                version: rpc.params?.clientInfo?.version,
+              }
+            : {}),
+          ...(rpc?.method === "tools/call" ? { tool: rpc.params?.name } : {}),
+        }),
+      );
+      return response;
+    },
+  });
+  console.log(
+    JSON.stringify({
+      ready: true,
+      mcp: "http://127.0.0.1:4428/mcp",
+      checkoutPort: 4438,
+      synthetic: true,
+      payments: false,
+    }),
+  );
+}

package/canary/results/vscode-checkout-2026-09-12.json

@@ -0,0 +1,28 @@
+{
+  "host": "Visual Studio Code",
+  "version": "1.135.0",
+  "surface": "native Windows Copilot chat, directly configured loopback MCP",
+  "fixture": "canary/checkout.ts",
+  "date": "2026-09-12",
+  "synthetic": true,
+  "realPayments": false,
+  "results": {
+    "discoversBothTools": true,
+    "linkCreationApprovalVisible": true,
+    "toolResultReviewVisible": true,
+    "clickableMarkdownAnchor": true,
+    "nativeAnchorLaunch": "unverified: mouse and keyboard activation did not produce a measured checkout request",
+    "windowsHttpsHandlerOpensReturnedUrl": true,
+    "nativeChromeCheckoutPage": true,
+    "fragmentRemovedAfterLoad": true,
+    "beforeBrowserApproval": { "status": "not_started", "creditsGranted": 0 },
+    "afterBrowserApproval": { "status": "approved", "creditsGranted": 1000 },
+    "repeatedRead": { "status": "approved", "creditsGranted": 1000 }
+  },
+  "limits": [
+    "Native link launch remains a host-canary gate; no one-click end-to-end claim.",
+    "Browser state assertions used a second visible Chrome profile after explicit navigation to the returned URL.",
+    "No OAuth, real gateway, rich payment UI, real sales approval or marketplace distribution certified.",
+    "No checkout capability, purchase ID, card data or account credentials included."
+  ]
+}

package/canary/vscode/README.md

@@ -28,4 +28,6 @@ Some unmodified first-load runs passed too: this is a timing-sensitive failure,
 
 ## Delivery status
 
-This package distributes a reviewable upstream source patch and regression checker. It does **not** patch users' VS Code installations. The in-memory test change does not survive an editor restart. An upstream release or an explicitly maintained patched host build is required before claiming that ordinary VS Code users receive this fix. Keep the first-load rollout gate open until that distribution is verified. No upstream submission is implied by this artifact.
+The bug is reported in [microsoft/vscode#335908](https://github.com/microsoft/vscode/issues/335908); no PR was submitted. This package distributes the source patch and checker for review, but does not modify installed editors. The test-process patch disappears on restart.
+
+MCP 0.17.6 instead defaults affected versions to text and structured reports. Reconnect after upgrading to negotiate the fallback. See [UPSTREAM_ISSUES.md](../../UPSTREAM_ISSUES.md) for the exact version scope, diagnostic override and removal conditions. Rich first-load support remains unverified in an unmodified released host.

package/changelog.json

@@ -1,143 +1,171 @@
 {
-  "contract": 1,
-  "name": "@absolutejs/mcp",
-  "releases": [
-    {
-      "version": "0.17.5",
-      "date": "2026-09-11",
-      "changes": [
-        {
-          "kind": "added",
-          "summary": "Distribute a verified VS Code webview startup-race source patch and actual-method regression checker, with explicit upstream delivery requirements"
-        }
-      ]
-    },
-    {
-      "version": "0.17.4",
-      "date": "2026-09-11",
-      "changes": [
-        {
-          "kind": "added",
-          "summary": "Ship an authenticated two-account staging canary for read isolation, credential rejection and session reconnect with private credentials and aggregate-only results"
-        }
-      ]
-    },
-    {
-      "version": "0.17.3",
-      "date": "2026-09-11",
-      "changes": [
-        {
-          "kind": "fixed",
-          "summary": "Authorize session deletion, recover explicit client initialization after expiry, and preserve typed HTTP failures without replaying tools"
-        },
-        {
-          "kind": "fixed",
-          "summary": "Accept the standard protocol-header compatibility fallback used by VS Code Copilot and record native report rendering evidence"
-        }
-      ]
-    },
-    {
-      "version": "0.17.2",
-      "date": "2026-09-11",
-      "changes": [
-        {
-          "kind": "added",
-          "summary": "Record verified Claude web rendering, refresh, pagination and narrow-viewport host canary evidence"
-        }
-      ]
-    },
-    {
-      "version": "0.17.1",
-      "date": "2026-09-11",
-      "changes": [
-        {
-          "kind": "added",
-          "summary": "Ship a preflight-validated synthetic host canary and record Claude Code and Codex terminal interoperability evidence"
-        }
-      ]
-    },
-    {
-      "version": "0.17.0",
-      "date": "2026-09-11",
-      "changes": [
-        {
-          "kind": "added",
-          "summary": "Negotiate MCP Apps with persisted capabilities, guarded offline UI resources and reusable SDK-backed billing views"
-        },
-        {
-          "kind": "added",
-          "summary": "Preserve remote UI metadata in the client and expose immutable PostgreSQL migration entries"
-        },
-        {
-          "kind": "changed",
-          "summary": "Extend McpClientOptions, McpRemoteTool, createSessionRegistry, McpSessionStore, McpServerConfig, McpTool and McpToolResult with optional Apps capability and metadata fields; existing text-only callers remain supported",
-          "symbols": [
-            "McpClientOptions",
-            "McpRemoteTool",
-            "createSessionRegistry",
-            "McpSessionStore",
-            "McpServerConfig",
-            "McpTool",
-            "McpToolResult"
-          ]
-        }
-      ]
-    },
-    {
-      "version": "0.16.0",
-      "date": "2026-09-11",
-      "changes": [
-        {
-          "kind": "added",
-          "summary": "Add account-bound billing status, paginated receipts, bounded usage and reviewed billing-management links"
-        }
-      ]
-    },
-    {
-      "version": "0.15.1",
-      "date": "2026-09-11",
-      "changes": [
-        {
-          "kind": "fixed",
-          "summary": "Build and test before publishing so checkout exports are present in the distributed artifact"
-        }
-      ]
-    },
-    {
-      "version": "0.15.0",
-      "date": "2026-09-11",
-      "changes": [
-        {
-          "kind": "added",
-          "summary": "Add commerce-classified account-bound checkout handoff and purchase status tools"
-        }
-      ]
-    },
-    {
-      "changes": [
-        {
-          "kind": "added",
-          "summary": "Add explicit credit-budget envelopes for durable prepaid MCP work"
-        }
-      ],
-      "date": "2026-09-11",
-      "version": "0.14.0"
-    },
-    {
-      "changes": [
-        {
-          "kind": "added",
-          "summary": "Add reviewed host commerce eligibility, execution guards, and reusable credit status tools",
-          "symbols": [
-            "McpServerConfig",
-            "McpTool",
-            "evaluateCommerce",
-            "createCreditBalanceTool"
-          ]
-        }
-      ],
-      "date": "2026-09-11",
-      "version": "0.13.0"
-    }
-  ]
+	"contract": 1,
+	"name": "@absolutejs/mcp",
+	"releases": [
+		{
+			"changes": [
+				{
+					"kind": "added",
+					"summary": "Ship a synthetic external-checkout host canary with expiring links, explicit approval and purchase-status checks"
+				}
+			],
+			"date": "2026-09-12",
+			"version": "0.17.7"
+		},
+		{
+			"changes": [
+				{
+					"kind": "fixed",
+					"summary": "Use text and structured report results on affected VS Code builds while their upstream webview startup race remains unresolved"
+				},
+				{
+					"kind": "added",
+					"summary": "Allow verified patched hosts through the version fallback with optional Apps configuration",
+					"symbols": [
+						"clientSupportsMcpApps",
+						"McpAppsConfig"
+					]
+				}
+			],
+			"date": "2026-09-11",
+			"version": "0.17.6"
+		},
+		{
+			"changes": [
+				{
+					"kind": "added",
+					"summary": "Distribute a verified VS Code webview startup-race source patch and actual-method regression checker, with explicit upstream delivery requirements"
+				}
+			],
+			"date": "2026-09-11",
+			"version": "0.17.5"
+		},
+		{
+			"changes": [
+				{
+					"kind": "added",
+					"summary": "Ship an authenticated two-account staging canary for read isolation, credential rejection and session reconnect with private credentials and aggregate-only results"
+				}
+			],
+			"date": "2026-09-11",
+			"version": "0.17.4"
+		},
+		{
+			"changes": [
+				{
+					"kind": "fixed",
+					"summary": "Authorize session deletion, recover explicit client initialization after expiry, and preserve typed HTTP failures without replaying tools"
+				},
+				{
+					"kind": "fixed",
+					"summary": "Accept the standard protocol-header compatibility fallback used by VS Code Copilot and record native report rendering evidence"
+				}
+			],
+			"date": "2026-09-11",
+			"version": "0.17.3"
+		},
+		{
+			"changes": [
+				{
+					"kind": "added",
+					"summary": "Record verified Claude web rendering, refresh, pagination and narrow-viewport host canary evidence"
+				}
+			],
+			"date": "2026-09-11",
+			"version": "0.17.2"
+		},
+		{
+			"changes": [
+				{
+					"kind": "added",
+					"summary": "Ship a preflight-validated synthetic host canary and record Claude Code and Codex terminal interoperability evidence"
+				}
+			],
+			"date": "2026-09-11",
+			"version": "0.17.1"
+		},
+		{
+			"changes": [
+				{
+					"kind": "added",
+					"summary": "Negotiate MCP Apps with persisted capabilities, guarded offline UI resources and reusable SDK-backed billing views"
+				},
+				{
+					"kind": "added",
+					"summary": "Preserve remote UI metadata in the client and expose immutable PostgreSQL migration entries"
+				},
+				{
+					"kind": "changed",
+					"summary": "Extend McpClientOptions, McpRemoteTool, createSessionRegistry, McpSessionStore, McpServerConfig, McpTool and McpToolResult with optional Apps capability and metadata fields; existing text-only callers remain supported",
+					"symbols": [
+						"McpClientOptions",
+						"McpRemoteTool",
+						"createSessionRegistry",
+						"McpSessionStore",
+						"McpServerConfig",
+						"McpTool",
+						"McpToolResult"
+					]
+				}
+			],
+			"date": "2026-09-11",
+			"version": "0.17.0"
+		},
+		{
+			"changes": [
+				{
+					"kind": "added",
+					"summary": "Add account-bound billing status, paginated receipts, bounded usage and reviewed billing-management links"
+				}
+			],
+			"date": "2026-09-11",
+			"version": "0.16.0"
+		},
+		{
+			"changes": [
+				{
+					"kind": "fixed",
+					"summary": "Build and test before publishing so checkout exports are present in the distributed artifact"
+				}
+			],
+			"date": "2026-09-11",
+			"version": "0.15.1"
+		},
+		{
+			"changes": [
+				{
+					"kind": "added",
+					"summary": "Add commerce-classified account-bound checkout handoff and purchase status tools"
+				}
+			],
+			"date": "2026-09-11",
+			"version": "0.15.0"
+		},
+		{
+			"changes": [
+				{
+					"kind": "added",
+					"summary": "Add explicit credit-budget envelopes for durable prepaid MCP work"
+				}
+			],
+			"date": "2026-09-11",
+			"version": "0.14.0"
+		},
+		{
+			"changes": [
+				{
+					"kind": "added",
+					"summary": "Add reviewed host commerce eligibility, execution guards, and reusable credit status tools",
+					"symbols": [
+						"McpServerConfig",
+						"McpTool",
+						"evaluateCommerce",
+						"createCreditBalanceTool"
+					]
+				}
+			],
+			"date": "2026-09-11",
+			"version": "0.13.0"
+		}
+	]
 }

package/dist/apps.js

@@ -49,9 +49,11 @@ var createBillingApps = () => {
 
 // src/apps.ts
 var MCP_APP_MIME = "text/html;profile=mcp-app";
-var clientSupportsMcpApps = (params) => {
+var clientSupportsMcpApps = (params, options = {}) => {
   if (!isRecord(params) || !isRecord(params.capabilities) || !isRecord(params.capabilities.extensions))
     return false;
+  if (!options.allowKnownBrokenHosts && isRecord(params.clientInfo) && params.clientInfo.name === "Visual Studio Code" && (params.clientInfo.version === "1.135.0" || params.clientInfo.version === "1.136.1"))
+    return false;
   const ui = params.capabilities.extensions["io.modelcontextprotocol/ui"];
   return isRecord(ui) && Array.isArray(ui.mimeTypes) && ui.mimeTypes.includes(MCP_APP_MIME);
 };

package/dist/index.js

@@ -49,9 +49,11 @@ var createBillingApps = () => {
 
 // src/apps.ts
 var MCP_APP_MIME = "text/html;profile=mcp-app";
-var clientSupportsMcpApps = (params) => {
+var clientSupportsMcpApps = (params, options = {}) => {
   if (!isRecord(params) || !isRecord(params.capabilities) || !isRecord(params.capabilities.extensions))
     return false;
+  if (!options.allowKnownBrokenHosts && isRecord(params.clientInfo) && params.clientInfo.name === "Visual Studio Code" && (params.clientInfo.version === "1.135.0" || params.clientInfo.version === "1.136.1"))
+    return false;
   const ui = params.capabilities.extensions["io.modelcontextprotocol/ui"];
   return isRecord(ui) && Array.isArray(ui.mimeTypes) && ui.mimeTypes.includes(MCP_APP_MIME);
 };
@@ -1379,7 +1381,7 @@ var initialize = async (config, id, params, context) => {
   if (!config.elicitation?.enabled && !config.apps || !context.sessions)
     return response;
   const elicitation = clientElicitation(params);
-  const sessionId = await context.sessions.create(elicitation.form || elicitation.url, elicitation.url, Boolean(config.apps) && clientSupportsMcpApps(params));
+  const sessionId = await context.sessions.create(elicitation.form || elicitation.url, elicitation.url, Boolean(config.apps) && clientSupportsMcpApps(params, config.apps));
   response.headers.set("Mcp-Session-Id", sessionId);
   return response;
 };

package/dist/src/apps.d.ts

@@ -5,11 +5,13 @@ export type McpAppResource = {
     html: string;
 };
 export type McpAppsConfig = {
+    /** Only enable for a host build whose upstream rendering fix has been verified. */
+    allowKnownBrokenHosts?: boolean;
     resources: Record<string, McpAppResource>;
     store?: McpSessionStore;
 };
 /** Capability is presentation only; never a commerce or authorization decision. */
-export declare const clientSupportsMcpApps: (params: unknown) => boolean;
+export declare const clientSupportsMcpApps: (params: unknown, options?: Pick<McpAppsConfig, "allowKnownBrokenHosts">) => boolean;
 export declare const withMcpApp: (tool: McpTool, resourceUri: string) => McpTool;
 /** Offline templates: all data comes through authenticated tool results and the
  * official host bridge. Network, nested frames and privileged permissions are not requested. */

package/docs/commerce-host-rules.md

@@ -264,3 +264,16 @@ The first slice exports `evaluateCommerce` through `@absolutejs/mcp/commerce`, a
 The bundled rules cover the explicit restrictions established above; the broad host inventory currently maps to reviewed direct/self-hosted or unknown profiles rather than claiming every host has been verified. Missing policy, malformed categories, ambiguous restrictions, expired reviews and unavailable capabilities block the action. Deployment reviews cannot override bundled restrictions.
 
 This slice is not a general content filter: prompts, resources, untagged tools and arbitrary returned links require the shared evaluator at their own presentation boundaries. Shared renderers, native capability plumbing, checkout sessions, prepaid accounting changes and live cross-host conformance remain to implement. Existing Agency enforcement remains independent.
+
+## September 12 follow-up: native VS Code developer checkout test
+
+The directly configured VS Code/Copilot channel now has a package-owned
+[synthetic checkout canary](host-canaries.md#synthetic-external-checkout-canary).
+This is an application development test within VS Code license §1, with no real
+merchant, card input, funds or credits. It does not change the `direct-mcp`
+production default, approve Marketplace distribution, or establish permission
+for live sales under every Copilot agreement. Check the actual account's terms:
+individual Copilot uses GitHub ToS §J; volume licensing has separate current
+Generative AI Services Terms. The old Copilot product-specific terms are archived.
+The linked canary record preserves the exact native host result independently
+of commercial eligibility. Existing Claude and ChatGPT restrictions still apply.

package/docs/host-canaries.md

@@ -97,3 +97,68 @@ This verifies the selected read path, not every tenant resource, token revocatio
 ## VS Code first-load race identified
 
 MCP 0.17.5 includes `canary/vscode/README.md`, a VS Code source patch and an executable actual-method regression. A controlled out-of-order origin-hash completion reproduces a blank view in native VS Code 1.135.0. The candidate current-promise guard passed three rounds across all three report views and both source-level completion orders. This is a host fix, not an MCP renderer change. The package distributes the patch for review; it does not modify installed editors or certify an upstream release. First-load activation remains blocked until a supported host containing the fix is verified.
+
+## Temporary VS Code fallback (0.17.6)
+
+The issue is tracked in [microsoft/vscode#335908](https://github.com/microsoft/vscode/issues/335908). Known affected versions now receive text and structured reports on new sessions, keeping tools usable without invoking the faulty webview path. Other hosts retain their negotiated presentation. See [UPSTREAM_ISSUES.md](../UPSTREAM_ISSUES.md) for scope and removal conditions. This workaround does not certify rich rendering on affected editors.
+
+Native Windows VS Code 1.135.0 verification: after removing the in-memory editor patch, reconnecting alone left cached UI metadata and produced resource errors. Running **MCP: Reset Cached Tools**, reloading the window and opening a new chat cleared it. The final run returned all three reports as visible text, with three successful tool calls, no resource reads and no App frames. This is a verified text fallback, not rich rendering evidence.
+
+## Synthetic external-checkout canary
+
+`bun run canary:checkout` (installed: `bun node_modules/@absolutejs/mcp/canary/checkout.ts`)
+uses the package's real checkout handoff and purchase-status tools with in-memory
+synthetic purchases. Set `CANARY_CHECKOUT_ORIGIN` to the exact HTTPS origin of a
+temporary reverse proxy to loopback port 4438. Connect the desktop test host only
+to `http://127.0.0.1:4428/mcp`. Expose only port 4438 through the proxy; it serves
+only the fixture page/state routes, never MCP. Stop both processes after testing.
+No account database, payment provider, card input or real credit ledger is used.
+Do not mount either handler in a customer application.
+
+This is an operator-authorized development test, not a live commerce approval.
+The fixture's one-hour, server-owned review applies only to synthetic links;
+never copy it into a production commerce binding. VS Code's [license §1](https://code.visualstudio.com/license)
+permits application development/testing. GitHub's [additional product terms](https://docs.github.com/en/site-policy/github-terms/github-terms-for-additional-products-and-features#github-copilot)
+point individual Copilot users to ToS §J and business users to their applicable
+agreement. The older Copilot product terms are archived; current volume purchases
+may instead use the [March 2026 Generative AI Services Terms](https://github.com/customer-terms/github-generative-ai-services-terms).
+Do not treat an old agreement, another product's marketplace rules, or this
+technical test as approval for every Copilot account or live digital sales.
+
+1. Request `prepare_test_checkout` with `productId: "synthetic-1000"` and approve
+   the host's tool prompt if shown. Ask for a clickable link and a
+   `get_test_purchase_status` read using the returned `purchaseId`.
+2. Confirm status is `not_started`, with zero granted credits. Click the link
+   using the host's ordinary external-link UI. The HTTPS page must clearly say
+   synthetic test, show no card fields, and require **Simulate approval**.
+3. Before clicking that button, read status again: still zero. Click once, then
+   return to chat and request status again: approved, 1,000 simulated credits.
+4. Repeat the read: still 1,000. Never let the agent approve the browser step on
+   behalf of a paying customer. This operator test contains no real payment.
+
+Links expire after 15 minutes. Capabilities travel in a URL fragment, are removed
+from the address bar on load, and are submitted only to the same checkout origin.
+Refreshing after removal intentionally requires reopening the original link.
+The fixture is bounded to 100 purchases per run. Its aggregate log excludes
+capabilities and tool arguments; keep full host transcripts private. Record the
+actual link UI, approval UI, browser navigation, before/after tool results and
+host version. This does not certify real merchant approval, OAuth continuity,
+3DS, or rich embedded payment support.
+
+### September 12 VS Code checkout observation
+
+Native Windows VS Code 1.135.0/Copilot discovered both tools, displayed link-creation
+and result-review prompts, and rendered the returned HTTPS URL as a Markdown
+anchor. Native Chrome showed the fixture page with its fragment removed. Copilot
+reported `not_started`/0 after the browser opened, then `approved`/1000 after the
+operator's simulated approval, including a second unchanged status read.
+
+**Qualified result:** mouse/keyboard activation of the Copilot anchor did not
+produce a measured checkout request in the final navigation probe. Opening the
+returned URL through the Windows HTTPS handler worked in the default Chrome
+profile. Browser state assertions used explicit navigation in a separate visible
+Chrome profile. These are separate observations: native one-click chat-to-browser
+launch is still unverified. No upstream cause has been established. Use the
+returned URL manually during development; do not advertise the seamless host
+handoff as passed. See `canary/results/vscode-checkout-2026-09-12.json` for aggregate
+evidence. No host/source patch or browser-default change was applied.

package/package.json

@@ -72,7 +72,8 @@
     "docs/mcp-apps.md",
     "docs/third-party",
     "canary",
-    "docs/host-canaries.md"
+    "docs/host-canaries.md",
+    "UPSTREAM_ISSUES.md"
   ],
   "scripts": {
     "build": "bun run build:apps && rm -rf dist && bun build src/index.ts src/manifest.ts src/commerce.ts src/apps.ts --outdir dist --root ./src --target=bun --external @absolutejs/agency --external '@absolutejs/agency/*' --external elysia && tsc --emitDeclarationOnly --project tsconfig.json && absolute-manifest emit",
@@ -84,8 +85,9 @@
     "prepublishOnly": "bun run check:package",
     "build:apps": "bun scripts/build-apps.ts",
     "canary": "bun canary/server.ts",
-    "check:canary": "tsc --noEmit --strict --skipLibCheck --moduleResolution bundler --module esnext --target esnext --types bun canary/server.ts canary/authenticated.ts canary/vscode/check-mount.ts"
+    "check:canary": "tsc --noEmit --strict --skipLibCheck --moduleResolution bundler --module esnext --target esnext --types bun canary/server.ts canary/authenticated.ts canary/vscode/check-mount.ts canary/checkout.ts",
+    "canary:checkout": "bun canary/checkout.ts"
   },
   "types": "./dist/src/index.d.ts",
-  "version": "0.17.5"
+  "version": "0.17.7"
 }