# What changed in @modelcontextprotocol/ext-apps

> 156 changes in @modelcontextprotocol/ext-apps 0.0 to 2 from its official release notes, upgrade guides and advisories: 24 breaking, 6 deprecations, 9 security, 49 new APIs and options. Each one cited. Sources checked 2026-10-19. HTML: https://unstale.sh/npm/@modelcontextprotocol/ext-apps/

To see which of these apply to a repository, run `npx @unstale/cli init` in it.

## @modelcontextprotocol/ext-apps 2

### Breaking changes

- The guard now also rejects registrations for notifications/progress and notifications/cancelled with an already registered error. (2.0.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v2.0.0)
- The 21 published example packages now declare a Node.js engine requirement of >=20, matching the root package and README. (2.0.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v2.0.1), [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v2.0.0)
- Custom handlers now receive the request signal at extra.mcpReq.signal instead of extra.signal. (2.0.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v2.0.0)
- Host-side wire deltas change handler-thrown -32002 to -32602 for Views, use -32602 for invalid params on ui/* methods instead of -32603, and remove the MCP error N: message prefix. (2.0.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v2.0.0)
- Replace the @modelcontextprotocol/sdk@^1 peer dependency with @modelcontextprotocol/client@^2.0.0, required because App and AppBridge extend its Protocol. (2.0.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v2.0.0)
- Remote JSON-RPC errors are represented as ProtocolError with a numeric code. (2.0.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v2.0.0)
- ProtocolWithEvents is removed. (2.0.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v2.0.0)
- Local failures are represented as SdkError with a string code. (2.0.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v2.0.0)
- Requires zod 4.2 or later; zod 3 and the 1.x fallback for zod 3.25 are no longer supported. (2.0.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v2.0.0)

### Security

- @modelcontextprotocol/server-pdf now pins @cantoo/pdf-lib to exactly 2.6.5, avoiding the untested 2.11.x resolution and dependencies flagged by supply-chain scanners. (2.0.3) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v2.0.3)
- The root overrides that pinned seroval are removed; the updated dependency tree passes vulnerability and supply-chain scans. (2.0.3) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v2.0.3)
- @modelcontextprotocol/server-basic-solid now depends on solid-js 1.9.15 instead of exact 1.9.10, avoiding the vulnerable seroval 1.3 dependency. (2.0.3) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v2.0.3)

### Deprecations

- AppNotification remains available as a deprecated type alias. (2.0.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v2.0.0)
- AppRequest remains available as a deprecated type alias. (2.0.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v2.0.0)
- AppResult remains available as a deprecated type alias. (2.0.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v2.0.0)
- Raw zod shapes remain accepted as a deprecated overload; wrap them in z.object({...}) to move off it. (2.0.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v2.0.0)
- The 2.x form keys registration by method name; the 1.x schema-and-handler form remains as a deprecated overload with a one-time warning and is removed in 3.0. (2.0.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v2.0.0)
- The 2.x form keys registration by method name and takes params before the handler; the 1.x schema-and-handler form remains as a deprecated overload with a one-time warning and is removed in 3.0. (2.0.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v2.0.0)

### New APIs and options

- The server package is an optional peer dependency for projects using the ./server helpers. (2.0.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v2.0.0)

### Behavior and default changes

- The schema follows 2.0 core schemas: structuredContent accepts any JSON value, result _meta documents io.modelcontextprotocol/serverInfo, toolInfo.tool.outputSchema is a loose object, and a recursive JSON-value definition is added. (2.0.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v2.0.0)

### Fixes and other changes

- Example servers and the quickstart now derive the dist path from import.meta.url, preventing startup crashes on Node 18 and Node 20.0 to 20.10. (2.0.1) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v2.0.1)
- Relative imports now use explicit .js extensions so published declarations resolve under NodeNext and Node16. (2.0.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v2.0.0)

## @modelcontextprotocol/ext-apps 1

### Breaking changes

- Types csp as ?: never so misplaced declarations fail at compile time. (1.7.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v1.7.0)
- Types permissions as ?: never so misplaced declarations fail at compile time. (1.7.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v1.7.0)
- Schemas now import from zod/v4 to match the SDK's zod API. (1.2.2) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v1.2.2)
- The pdf-server removes its domain allowlist and requires HTTPS only. (1.1.1) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v1.1.1)
- Corrects the return behavior of registerAppResource; it returns void rather than a registered resource. (1.1.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v1.1.0)

### Security

- Adds allowUnsafeEval, defaulting to false, so Views run under strict CSP without unsafe-eval; opting out enables the faster JIT path. (1.7.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v1.7.0)
- Adds robust path validation and support for folder or file roots. (1.1.2) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v1.1.2)

### New APIs and options

- Adds sampling support via stock SDK types. (1.7.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v1.7.0)
- Views can expose tools for the Host to call. (1.7.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v1.7.0)
- Supports notifying the Host about changes to the tool list exposed by a View. (1.7.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v1.7.0)
- callServerTool can now opt into resetting its timeout based on progress. (1.6.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v1.6.0)
- A get_viewer_state interact action is available to retrieve viewer state. (1.5.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v1.5.0)
- Adds addEventListener with DOM-model on* semantics, allowing event listeners to be registered. (1.4.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v1.4.0)
- Adds pinch-to-zoom. (1.4.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v1.4.0)
- Adds removeEventListener with DOM-model on* semantics, allowing event listeners to be removed. (1.4.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v1.4.0)
- Adds the save_as interact action. (1.4.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v1.4.0)
- Adds a notification for the UI to initiate termination. (1.3.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v1.3.0)
- Adds listServerResources() to the App API for listing server resources. (1.2.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v1.2.0)
- Adds readServerResource() to the App API for reading server resources. (1.2.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v1.2.0)
- Adds a host-mediated file download method for apps. (1.1.2) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v1.1.2)
- A Claude Code plugin is now available for pdf-server. (1.1.1) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v1.1.1)
- The pdf-server now has MCPB packaging, providing a bundle developers can use. (1.1.1) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v1.1.1)
- Adds a helper function for checking whether a tool's visibility is app-only. (1.1.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v1.1.0)
- Adds a helper function for checking whether a tool's visibility is model-only. (1.1.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v1.1.0)

### Behavior and default changes

- Host-bound methods warn when called before connect() completes; they throw instead when AppOptions.strict is enabled. (1.7.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v1.7.0)
- Warns when it receives requests before ui/notifications/initialized. (1.7.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v1.7.0)
- One-shot event handlers warn when first registered after connect() completes. (1.7.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v1.7.0)
- Imported annotations are rasterized. (1.5.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v1.5.0)
- Adds fit-to-page behavior in fullscreen. (1.4.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v1.4.0)
- The spec is stable and the SDK is at v1.0.0. (1.0.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v1.0.0)

### Fixes and other changes

- Missing HostCapabilities fields were added to the specification. (1.7.5) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v1.7.5)
- The experimental capability setting is typed as Record<string, object> and its contents are preserved during initialization instead of being stripped by the generated schema. (1.7.5) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v1.7.5)
- The experimental capability setting is typed as Record<string, object> and its contents are preserved during initialization instead of being stripped by the generated schema. (1.7.5) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v1.7.5)
- object-src is synchronized with default-src in the specification. (1.7.5) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v1.7.5)
- Forwards autoResize and strict to the underlying App. (1.7.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v1.7.0)
- Effect cleanup now closes the App, preventing React StrictMode's development double-invoke from leaving a zombie PostMessageTransport listener. (1.7.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v1.7.0)
- Highlight, underline, and strike annotations from existing PDFs are imported. (1.5.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v1.5.0)
- Form-field saving is made more robust, with save consistency follow-ups. (1.5.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v1.5.0)
- The PDF viewer toolbar layout is fixed. (1.5.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v1.5.0)
- The zoom-out button can zoom below fit-to-page. (1.5.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v1.5.0)
- Pinch interactions to and from fullscreen are fixed. (1.5.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v1.5.0)
- PDF highlights render with translucency. (1.5.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v1.5.0)
- Fixes batch results to be 1:1. (1.4.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v1.4.0)
- Renders the page before O(numPages) annotation scans. (1.4.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v1.4.0)
- Fixes an npx DOMMatrix crash. (1.4.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v1.4.0)
- Fixes fullscreen jitter. (1.4.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v1.4.0)
- Fixes a broken MCPB bundle. (1.4.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v1.4.0)
- Fixes radio and dropdown handling in fill_form/save. (1.4.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v1.4.0)
- Fixes viewer liveness. (1.4.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v1.4.0)
- Fixes auto-resize destroying horizontal scroll positions. (1.3.2) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v1.3.2)
- Reverts the fullscreen size-changed skip. (1.3.2) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v1.3.2)
- Fixes detached-buffer handling when a PDF range is re-requested. (1.3.1) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v1.3.1)
- The react-with-deps package now bundles the SDK and zod, unlike before. (1.2.1) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v1.2.1)
- Fixes autoResize reporting viewport height when content is taller. (1.2.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v1.2.0)
- basic-host now supports audio and video, allowing developers to use it with apps that need those media capabilities. (1.1.1) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v1.1.1)
- The pdf-server no longer displays the page-loading overlay. (1.1.1) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v1.1.1)
- Adds validation for the params argument to callServerTool. (1.1.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v1.1.0)
- Changes the Host <> Sandbox communication protocol requirement to SHOULD. (1.1.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v1.1.0)
- Handles non-JSON-RPC messages gracefully instead of allowing them to cause protocol message handling errors. (1.1.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v1.1.0)
- Adds a double-connect guard to prevent protocol message handling errors. (1.1.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v1.1.0)
- Accepts UIResourceMeta in both resources/list and resources/read, aligning the spec and SDK. (1.1.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v1.1.0)

## @modelcontextprotocol/ext-apps 0.4

### Breaking changes

- The function now uses Tool as its input type. (0.4.1) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.4.1)
- Replaces the deprecated RESOURCE_URI_META_KEY with _meta.ui.resourceUri. (0.4.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.4.0)

### Security

- Adds baseUriDomains to enhanced sandbox capability negotiation for CSP configuration. (0.4.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.4.0)
- Fixes CSP handling in basic-host sandboxing by using HTTP headers. (0.4.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.4.0)
- Adds frameDomains to enhanced sandbox capability negotiation for CSP configuration. (0.4.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.4.0)
- Adds Permission Policy support to enhanced sandbox capability negotiation. (0.4.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.4.0)

### New APIs and options

- EXAMPLE=folder-name support lets developers run a specific example. (0.4.2) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.4.2)
- A new helper supports capability negotiation between views and hosts. (0.4.2) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.4.2)
- basic-host now supports Server-Sent Events transport as a fallback. (0.4.2) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.4.2)
- basic-host adds a theme toggle and MCP style CSS variables for consistent styling. (0.4.2) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.4.2)
- The basic host adds URL parameters, fullscreen mode, and a unified layout. (0.4.1) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.4.1)
- A Claude Code plugin with a Create MCP App skill is added. (0.4.1) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.4.1)
- The basic-host UI gains collapsible sections. (0.4.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.4.0)
- Adds a protocol method for guests to update their model context dynamically. (0.4.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.4.0)

### Behavior and default changes

- The basic host filters app-only tools and prioritizes UI tools. (0.4.1) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.4.1)
- The log level for unknown source messages changes from error to debug. (0.4.1) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.4.1)
- npm start now runs in dev mode with --watch for automatic restarts. (0.4.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.4.0)

### Fixes and other changes

- The spec permissions type is aligned with the SDK implementation. (0.4.2) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.4.2)
- Rendering uses document.write again because CesiumJS does not work with srcdoc. (0.4.1) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.4.1)
- Improves error handling for server startup failures. (0.4.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.4.0)

## @modelcontextprotocol/ext-apps 0.3

### Breaking changes

- PostMessageTransport now requires eventSource. (0.3.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.3.0)

### New APIs and options

- Method names are exported as constants. (0.3.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.3.0)
- An npm start alias was added for examples:start. (0.3.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.3.0)

### Behavior and default changes

- The resourceUri field is optional for tools that just need visibility. (0.3.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.3.0)
- The viewport type was updated. (0.3.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.3.0)

### Fixes and other changes

- The registerAppTool signature was fixed to align with the MCP TypeScript SDK. (0.3.1) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.3.1)
- The default constructor now includes the missing origin parameter. (0.3.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.3.0)
- The id field is optional, matching the spec. (0.3.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.3.0)

## @modelcontextprotocol/ext-apps 0.2

### Breaking changes

- The MCP SDK becomes a peer dependency. (0.2.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.2.0)
- Request methods are renamed to remove the send prefix, affecting method names callers use. (0.2.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.2.0)

### New APIs and options

- Adds a way to pass custom fonts to MCP Apps. (0.2.1) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.2.1)
- AppBridge accepts an optional Client, allowing custom forwarding. (0.2.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.2.0)
- AppNotification is added as a protocol type. (0.2.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.2.0)
- AppRequest is added as a protocol type. (0.2.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.2.0)
- AppResult is added as a protocol type. (0.2.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.2.0)
- The _meta.ui structure is reorganized, and tool visibility is added. (0.2.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.2.0)
- Server helpers are added for developers integrating the package. (0.2.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.2.0)
- The host context gains a styles prop. (0.2.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.2.0)
- Tool visibility is added to the MCP Apps metadata conventions. (0.2.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.2.0)
- Developers can use their own zod version. (0.2.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.2.0)

### Behavior and default changes

- Zod schemas are version-agnostic for Zod v3.25+ and v4, allowing developers to use either supported version. (0.2.2) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.2.2)
- connect() defaults to the parent post transport. (0.2.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.2.0)
- Apps request display mode instead of the previous approach. (0.2.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.2.0)

### Fixes and other changes

- Adds a previously missing style variable for MCP Apps. (0.2.1) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.2.1)
- React becomes a peer dependency to support multiple versions. (0.2.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.2.0)
- The notification name is corrected in the spec. (0.2.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.2.0)

## @modelcontextprotocol/ext-apps 0.1

### Breaking changes

- Adds the tool-cancelled notification and corrects the notification name to ui/notifications/tool-cancelled. (0.1.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.1.0)

### New APIs and options

- App now stores and exposes hostContext. (0.1.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.1.0)
- Adds media-src to CSP to support video and audio. (0.1.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.1.0)

### Fixes and other changes

- Adds the missing App.onteardown API. (0.1.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.1.0)
- The host may request user consent. (0.1.0) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.1.0)

## @modelcontextprotocol/ext-apps 0.0

### Breaking changes

- CSP domain fields in the specification use camelCase. (0.0.2) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.0.2)
- Removes the carousel display mode. (0.0.2) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.0.2)
- The UI resource MIME type format was changed to use a profile parameter instead of a suffix. (0.0.2) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.0.2)
- Removes system from the theme options and theme type. (0.0.2) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.0.2)

### New APIs and options

- Adds the RESOURCE_MIME_TYPE constant. (0.0.5) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.0.5)
- Adds an app notification handler for tool input. (0.0.2) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.0.2)
- Adds an app notification handler for tool results. (0.0.2) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.0.2)
- Adds a bridge notification handler for size changes. (0.0.2) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.0.2)
- Adds a method to send host context changes. (0.0.2) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.0.2)
- Adds the McpUiDisplayMode type. (0.0.2) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.0.2)
- Adds the McpUiTheme type. (0.0.2) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.0.2)
- Reexports RESOURCE_URI_META_KEY. (0.0.2) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.0.2)
- Adds UI resource metadata types for CSP and rendering configuration. (0.0.2) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.0.2)

### Behavior and default changes

- The params field is optional in the initialized notification schema. (0.0.2) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.0.2)
- Adds forwarding for ReadResourceRequestSchema when the resources capability is enabled. (0.0.2) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.0.2)

### Fixes and other changes

- Fixed CSP settings. (0.0.7) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.0.7)
- Fixed mimeType handling. (0.0.7) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.0.7)
- Temporarily handles wrapped JSON-RPC responses; the temporary unwrapping hack was later removed. (0.0.2) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.0.2)
- Corrects the host-context-changed notification name in the specification. (0.0.2) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.0.2)
- Fixes iframe sizing to use actual content dimensions and addresses a size feedback loop on Linux and Windows. (0.0.2) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.0.2)
- Fixes compatibility with SDK version 1.23 and later. (0.0.2) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.0.2)
- Corrects the size-changed notification name to use the correct tense. (0.0.2) — [release notes](https://github.com/modelcontextprotocol/ext-apps/releases/tag/v0.0.2)