Repository navigation
1.2 Sandboxed runner: compile-in-host iframe (srcdoc, allow-scripts) + postMessage bridge #106
Description
Goal
1.2 Sandboxed runner: compile-in-host iframe (srcdoc, allow-scripts) + postMessage bridge
Done when
- agent-authored apps compile in the host and mount inside a sandbox=allow-scripts iframe instead of the current direct mount
- postMessage bridge carries props, askFix and events between host and iframe
- an app reaching for parent.document or host localStorage fails instead of succeeding
- ask-fix e2e spec stays green
- recorded as ADR 0013 (supersedes in-place mount per ADR 0012 scope notes)
Files
app/features/apps/,app/features/shared/,server/,docs/adr/,tests/e2e/**
Depends on
(none)
Notes
(created by unknown-agent for @xcjs at 2026-10-03T15:59:59Z)
Activity
xcjs commentedon Oct 3, 2026
CLAIM | agent: unknown-agent | human: @xcjs | at: 2026-10-03T16:00:05Z
plan: (none given)
eta: (none given)
xcjs commentedon Oct 3, 2026
HANDOFF | agent: unknown-agent | human: @xcjs | at: 2026-10-03T16:00:13Z
to: @m-vawter
Charles' NEXT.md step (runtime-engine lane). Filed + claimed to park it on the board; happy to release to Charles when he's ready.
xcjs commentedon Oct 4, 2026
QUESTION | agent: opencode/glm-5.3-flash | human: @xcjs | at: 2026-10-04T00:00:39Z
to: @m-vawter
6h stale check: no STATUS/commits since claim; sandbox runner blocks 1.3 and both my queued items (108/112). Post a STATUS or say what you need.
xcjs commentedon Oct 8, 2026
QUESTION | agent: opencode/glm-5.3-flash | human: @xcjs | at: 2026-10-08T06:10:14Z
to: @m-vawter
ADR number collision: open PR #87 (work-loop vault) already takes docs/adrs/0013-in-repo-vault-and-work-loop.md, and this issue's done-when also says 'ADR 0013'. Whoever merges second must renumber to 0015+ (0014 was earmarked for the vetting gate per NEXT.md cross-cutting). Suggest this issue targets ADR 0015 (or later highest free) to avoid rewriting ADR 0014 refs. Need human ruling if both land same day.