feat(rooms): Room Widgets (MSC1236 im.vector.modular.widgets)

Phase C.1 of the protocol-gaps roadmap, gate-green (693 tests). Generalizes the
Element Call widget host into a general room-widget feature:
- StateEvent.Widget + widgetsPanelAtom + useRoomWidgets (WidgetParser).
- RoomWidgetView: sandboxed-iframe host via ClientWidgetApi with a conservative
  GeneralWidgetDriver (approves only benign display caps — no room-event
  send/read/to-device). Blocks same-origin widget URLs (sandbox breakout guard).
- WidgetsPanel: list / open / add / remove, PL-gated on im.vector.modular.widgets,
  https + non-same-origin URL validation. Mounted like the media gallery (header
  toggle + 3-way content-panel exclusivity + mobile full-screen overlay).
- Tested URL/capability/id helpers.

Requires the prod CSP frame-src widening (matrix repo) for external widgets.
v1 cuts (capability consent prompt, Jitsi/sticker types, user widgets) noted.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

This commit is contained in:

Jared Vititoe

2026-07-03 13:27:23 -04:00

parent 17bd50cc4e

commit 43f4ceb45d

13 changed files with 584 additions and 13 deletions

									
										src/app/state/widgetsPanel.ts
									
		+4
		
												View File
												
				@@ -0,0 +1,4 @@

				import { atom } from 'jotai';

				// Whether the room's Widgets side-panel is open (mirrors mediaGalleryAtom).

				export const widgetsPanelAtom = atom<boolean>(false);