feat(ui): support host transport and strict browser CSP - #299

Merged

hyperb1iss merged 8 commits into

mainfrom

nova/remote-host-ui-bridge

Sep 20, 2026

Commits on Sep 20, 2026

feat(daemon): expose the resolved UI directory

hyperb1iss
and
codex
committed
5364172
feat(ui): add the host Remote browser bridge

hyperb1iss
and
codex
committed
57820e8
fix(ui): close Remote bridge transport lifecycles

hyperb1iss
and
codex
committed
7f9fe36
feat(ui): expose Remote runtime detection

hyperb1iss
and
codex
committed
33cb3f5
fix(ui): eliminate raw HTML rendering sinks

hyperb1iss
and
codex
committed
83bc43d
fix(ui): support strict Trusted Types hosts

hyperb1iss
and
codex
committed
c5ac2d0
fix(ui): constrain static SVG trust and share host policy ownership
hyperb1iss
committed
90bd8a9
fix(ui): validate bridge headers and reject obscured HTML sinks

hyperb1iss
and
codex
committed
7a837fd