fix(apps): consent completeness, reinstall after uninstall, sandbox font

Radin committed …

⧉caf871616735

Author

Radin · radin@coline.appOct 1, 2026 at 04:54

Committer

Radin · radin@coline.appOct 1, 2026 at 04:54

Parents

d47b0dabdf6b

fix(apps): consent completeness, reinstall after uninstall, sandbox font

Found by driving the platform in a browser as the workspace owner:

- Uninstalled apps stayed under "Installed" with an Open button and no
  way to reinstall: the workspace apps query returned revoked installs.
  It now returns active and suspended installs only.
- Install consent never mentioned that an external-backend app's logic
  runs on the developer's server; it now names the host and says data
  goes there. Generic permission lines that a specific line covers
  (hosts, accounts, URLs, public page, background work) are no longer
  repeated, so the dialog is shorter and nothing scrolls out of sight.
- The host's sandbox stylesheet referenced Geist by relative URL, which
  the sandbox CSP (font-src data:) always blocks; apps already embed the
  font through their own stylesheet, so the host copy is dropped.
- The developer console's workspace app page read data outside Suspense
  (Cache Components blocking route); it now uses the wrapper pattern.
- The developer overview no longer suggests `npm test` (templates ship
  no tests); the Code "Coline App" note no longer clips under the footer.

Also: verify-full-stack accepts E2E_KEEP=1 to leave the fixture
installed for browser QA, and scripts/e2e/storage-state.ts writes a
Playwright session for the dev workspace owner.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>