Merge remote-tracking branch 'origin/main' into feat/virtual-desktop-server

Author: ochafik

examples/basic-host/package.json

@@ -6,7 +6,7 @@
   "scripts": {
     "build": "tsc --noEmit && concurrently \"cross-env INPUT=index.html vite build\" \"cross-env INPUT=sandbox.html vite build\"",
     "watch": "concurrently \"cross-env INPUT=index.html vite build --watch\" \"cross-env INPUT=sandbox.html vite build --watch\"",
-    "serve": "bun serve.ts",
+    "serve": "bun --watch serve.ts",
     "start": "cross-env NODE_ENV=development npm run build && npm run serve",
     "dev": "cross-env NODE_ENV=development concurrently \"npm run watch\" \"npm run serve\""
   },

examples/basic-host/src/sandbox.ts

@@ -95,21 +95,9 @@ window.addEventListener("message", async (event) => {
         inner.setAttribute("allow", allowAttribute);
       }
       if (typeof html === "string") {
-        // Use document.write instead of srcdoc for WebGL compatibility.
-        // srcdoc creates an opaque origin which prevents WebGL canvas updates
-        // from being displayed properly. document.write preserves the sandbox
-        // origin, allowing WebGL to work correctly.
-        // CSP is enforced via HTTP headers on this page (sandbox.html).
-        const doc = inner.contentDocument || inner.contentWindow?.document;
-        if (doc) {
-          doc.open();
-          doc.write(html);
-          doc.close();
-        } else {
-          // Fallback to srcdoc if document is not accessible
-          console.warn("[Sandbox] document.write not available, falling back to srcdoc");
-          inner.srcdoc = html;
-        }
+        inner.srcdoc = html;
+      } else {
+        console.error("[Sandbox] Missing or invalid HTML content in sandbox-resource-ready notification.");
       }
     } else {
       if (inner && inner.contentWindow) {

examples/basic-host/src/tamper-detection.ts

@@ -18,7 +18,7 @@
   "scripts": {
     "build": "tsc --noEmit && cross-env INPUT=mcp-app.html vite build",
     "watch": "cross-env INPUT=mcp-app.html vite build --watch",
-    "serve": "bun server.ts",
+    "serve": "bun --watch server.ts",
     "start": "cross-env NODE_ENV=development npm run build && npm run serve",
     "dev": "cross-env NODE_ENV=development concurrently 'npm run watch' 'npm run serve'",
     "prepublishOnly": "npm run build"

examples/basic-server-preact/package.json

@@ -18,7 +18,7 @@
   "scripts": {
     "build": "tsc --noEmit && cross-env INPUT=mcp-app.html vite build",
     "watch": "cross-env INPUT=mcp-app.html vite build --watch",
-    "serve": "bun server.ts",
+    "serve": "bun --watch server.ts",
     "start": "cross-env NODE_ENV=development npm run build && npm run serve",
     "dev": "cross-env NODE_ENV=development concurrently 'npm run watch' 'npm run serve'",
     "prepublishOnly": "npm run build"

examples/basic-server-react/package.json

@@ -18,7 +18,7 @@
   "scripts": {
     "build": "tsc --noEmit && cross-env INPUT=mcp-app.html vite build",
     "watch": "cross-env INPUT=mcp-app.html vite build --watch",
-    "serve": "bun server.ts",
+    "serve": "bun --watch server.ts",
     "start": "cross-env NODE_ENV=development npm run build && npm run serve",
     "dev": "cross-env NODE_ENV=development concurrently 'npm run watch' 'npm run serve'",
     "prepublishOnly": "npm run build"

examples/basic-server-solid/package.json

@@ -18,7 +18,7 @@
   "scripts": {
     "build": "tsc --noEmit && cross-env INPUT=mcp-app.html vite build",
     "watch": "cross-env INPUT=mcp-app.html vite build --watch",
-    "serve": "bun server.ts",
+    "serve": "bun --watch server.ts",
     "start": "cross-env NODE_ENV=development npm run build && npm run serve",
     "dev": "cross-env NODE_ENV=development concurrently 'npm run watch' 'npm run serve'",
     "prepublishOnly": "npm run build"