Skip to content
This repository was archived by the owner on Aug 6, 2026. It is now read-only.

Build the canvas application pipeline - #3823

Closed
k11kirky wants to merge 13 commits into
mainfrom
posthog-code/canvas-application-build-plan
Closed

Build the canvas application pipeline#3823
k11kirky wants to merge 13 commits into
mainfrom
posthog-code/canvas-application-build-plan

Conversation

@k11kirky

@k11kirkyk11kirky commented Jul 26, 2026

Copy link
Copy Markdown
Contributor

Why

Canvases need to support arbitrary client-side browser applications while keeping generation safe, reproducible, and available to every task.

Changes

  • Add one browser-application contract for React, Quill, HTML, Three.js, D3, ECharts, workers, WebAssembly, and bounded binary assets.
  • Add deterministic local validation, manifest-enforced runtime capabilities, and signed immutable cloud artifact rendering with legacy fallback.
  • Make canvas skills and complete or diff-aware guarded publishing available to every task.
  • Document storage, concurrency, retention, migration, security limits, and the future path toward hosted micro-app backends.

The cloud persistence and authoritative build worker are implemented in PostHog/posthog#73727.

Test plan

  • Shared, core, UI, builder, plugin, and runtime-capability test suites
  • Typechecks for shared, core, workspace-server, host-router, and UI packages
  • Host-boundary validation, Biome, dependency policy, worker, asset, and WebAssembly fixtures

Created with PostHog Code

Generated-By: PostHog Code
Task-Id: f2d133f0-a9e6-4a16-8ecd-fc0a20bab2c3
@trunk-io

trunk-ioBot commented Jul 26, 2026

Copy link
Copy Markdown

Merging to main in this repository is managed by Trunk.

  • To merge this pull request, check the box to the left or comment /trunk merge below.

After your PR is submitted to the merge queue, this comment will be automatically updated with its status. If the PR fails, failure details will also be posted here

Generated-By: PostHog Code
Task-Id: f2d133f0-a9e6-4a16-8ecd-fc0a20bab2c3
Generated-By: PostHog Code
Task-Id: f2d133f0-a9e6-4a16-8ecd-fc0a20bab2c3
Generated-By: PostHog Code
Task-Id: f2d133f0-a9e6-4a16-8ecd-fc0a20bab2c3
Generated-By: PostHog Code
Task-Id: f2d133f0-a9e6-4a16-8ecd-fc0a20bab2c3
Generated-By: PostHog Code
Task-Id: f2d133f0-a9e6-4a16-8ecd-fc0a20bab2c3
Generated-By: PostHog Code
Task-Id: f2d133f0-a9e6-4a16-8ecd-fc0a20bab2c3
@github-actions

github-actionsBot commented Jul 26, 2026

Copy link
Copy Markdown

React Doctor found no issues in the changed files. 🎉

Reviewed by React Doctor for commit 1b1c81d.

Generated-By: PostHog Code
Task-Id: f2d133f0-a9e6-4a16-8ecd-fc0a20bab2c3
Generated-By: PostHog Code
Task-Id: f2d133f0-a9e6-4a16-8ecd-fc0a20bab2c3
Generated-By: PostHog Code
Task-Id: f2d133f0-a9e6-4a16-8ecd-fc0a20bab2c3
k11kirky added a commit to PostHog/posthog that referenced this pull request Jul 26, 2026
Phase 1 of the canvas application build pipeline plan (PostHog/code#3823):
- Canvas source-project API on the desktop file system: list/create canvases,
read the source project + current version, validate a candidate project
(structured diagnostics), and publish guarded by
expected_current_version_id. A compatibility adapter presents legacy
meta.code canvases as a synthetic web project and reduces valid projects
back to the single-file storage, so this ships before the build service
with no storage changes.
- MCP tools (desktop-file-system-canvas-*) so any authorized local or cloud
task can author canvases without the canvas composer's embedded prompt.
- Five bundled skills extracted from the canvas authoring contract:
building-canvases, building-react-quill-canvases, building-html-canvases,
querying-canvas-data, validating-and-publishing-canvases.
Generated-By: PostHog Code
Task-Id: 9e9a7b3c-f90d-4867-aa0d-b9acc83e26e1
Route canvas generation through shared skills and validation, expose cloud validation through the typed API, align source contracts with backend responses, and harden local builds against undeclared dependencies and unsafe HTML.
Generated-By: PostHog Code
Task-Id: f2d133f0-a9e6-4a16-8ecd-fc0a20bab2c3
@k11kirkyk11kirky changed the title Plan the canvas application build pipelineBuild the canvas application pipelineJul 26, 2026
Generated-By: PostHog Code
Task-Id: f2d133f0-a9e6-4a16-8ecd-fc0a20bab2c3
Generated-By: PostHog Code
Task-Id: f2d133f0-a9e6-4a16-8ecd-fc0a20bab2c3
@k11kirkyPostHog

Copy link
Copy Markdown
ContributorAuthor

Superseded by the phased canvas build pipeline: #3824#3825#3826#3827#3834#3835. The continuation phases retain the stacked contracts and add authoritative artifact rendering plus advanced assets and workers.

Sign up for freeto subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

@k11kirky