fix: host may request user consent (#126)

idosal · web-flow · commit a31e48a11e52 · 2025-12-11T20:07:58.000+01:00
diff --git a/specification/draft/apps.mdx b/specification/draft/apps.mdx
@@ -530,8 +530,9 @@ Host SHOULD open the URL in the user's default browser or a new tab.
   }
 }
 ```
-
-Host SHOULD add the message to the conversation thread, preserving the specified role.
+Host behavior:
+* Host SHOULD add the message to the conversation context, preserving the specified role.
+* Host MAY request user consent.
 
 #### Notifications (Host → UI)
 

Original file line number	Diff line number	Diff line change
`@@ -530,8 +530,9 @@ Host SHOULD open the URL in the user's default browser or a new tab.`
`530`	`530`	`}`
`531`	`531`	`}`
`532`	`532`	```
`533`		`-`
`534`		`-Host SHOULD add the message to the conversation thread, preserving the specified role.`
	`533`	`+Host behavior:`
	`534`	`+* Host SHOULD add the message to the conversation context, preserving the specified role.`
	`535`	`+* Host MAY request user consent.`
`535`	`536`
`536`	`537`	`#### Notifications (Host → UI)`
`537`	`538`