Gagan 3e34cbe1af feat(apps): M2 host integration — tools, fetch proxy, LLM, copilot, bundled agents ... - checkCapability choke point (D7): tools/llm/copilot access requires the capability in the app's manifest; 403 capability_not_declared otherwise - POST /_rowboat/tools/search|execute: Composio pass-through with the same request shape as the builtin, typed error mapping - POST /_rowboat/fetch: SSRF-guarded proxy (loopback/RFC1918/link-local/ULA/ *.localhost rejection re-checked per redirect hop, 5MB cap + truncated flag, 30s timeout, Host/Cookie stripped) - POST /_rowboat/llm/generate: default-model plumbing, override validated against the allowed set, token/concurrency caps, usage attributed app_llm_generate/<folder> - POST /_rowboat/copilot/run: headless run (bg-task tool profile, no shell), app-attributed audit turn with origin context, 10-min timeout, 1-per-app cap - registered M2 routes are POST-only (GETs are D17-exempt and must not reach them) - bundled agents (§8): strict AppAgentDefinitionSchema, deterministic app--<folder>--<name> slugs materialized disabled with sourceApp, manifest removals deactivate, app delete removes owned tasks; sourceApp in summaries - new use cases app_llm_generate / app_copilot_run in runs + analytics enums		2026-07-04 18:16:43 +05:30
..
scripts	Code mode: make packaged builds work via managed engine provisioning (#625)	2026-06-17 21:53:15 +05:30
src	feat(apps): M2 host integration — tools, fetch proxy, LLM, copilot, bundled agents	2026-07-04 18:16:43 +05:30
.gitignore	bootstrap new electron app	2026-01-16 12:05:33 +05:30
package.json	feat: run code mode on an in-app ACP client with live approvals (#593)	2026-06-05 14:45:08 +05:30
tsconfig.build.json	Refactor builtin file tools beyond workspace scope	2026-05-25 16:21:51 +05:30
tsconfig.json	feat: extract presentation generator into executable code with builtin tool	2026-01-30 13:30:06 +05:30
vitest.config.ts	Refactor builtin file tools beyond workspace scope	2026-05-25 16:21:51 +05:30