6 months ago
715ad3aThis closes the latest PR #83 review feedback in two places. Web desktop workspace starts now restart a live server when the launch path or yolo mode changes instead of silently reusing stale process settings, and A2UI links now reject data: payload URLs while images keep the documented inline-data support. The accompanying regressions lock both behaviors in place. Constraint: Web desktop launch state must stay aligned with the requested workspace config, and A2UI link safety must not regress image data URL support Rejected: Key workspace server reuse on workspaceId alone and rely on manual restart | leaves web desktop sessions pointed at stale cwd or approval mode Rejected: Ban data: for both links and images | conflicts with the documented image contract and would regress existing inline image support Confidence: high Scope-risk: narrow Reversibility: clean Directive: Keep link and image URL allowlists separate, and treat workspacePath/yolo as part of the web desktop server identity whenever reuse logic changes Tested: bun test test/webDesktopRoutes.test.ts apps/desktop/test/a2ui-extended-catalog.test.tsx; bun run typecheck; bun test --max-concurrency 1 Not-tested: GitHub Actions on the new commit
Parente1a6b9e
