feat(mcp-apps): add Permission Policy support for sandbox iframes (#6947)

ui/desktop/openapi.json

@@ -5249,6 +5249,28 @@
           "never_allow"
         ]
       },
+      "PermissionsMetadata": {
+        "type": "object",
+        "description": "Sandbox permissions for MCP Apps\nSpecifies which browser capabilities the UI needs access to.\nMaps to the iframe Permission Policy `allow` attribute.",
+        "properties": {
+          "camera": {
+            "type": "boolean",
+            "description": "Request camera access (maps to Permission Policy `camera` feature)"
+          },
+          "clipboardWrite": {
+            "type": "boolean",
+            "description": "Request clipboard write access (maps to Permission Policy `clipboard-write` feature)"
+          },
+          "geolocation": {
+            "type": "boolean",
+            "description": "Request geolocation access (maps to Permission Policy `geolocation` feature)"
+          },
+          "microphone": {
+            "type": "boolean",
+            "description": "Request microphone access (maps to Permission Policy `microphone` feature)"
+          }
+        }
+      },
       "PricingData": {
         "type": "object",
         "required": [
@@ -7021,6 +7043,9 @@
             "description": "Preferred domain for the app (used for CORS)",
             "nullable": true
           },
+          "permissions": {
+            "$ref": "#/components/schemas/PermissionsMetadata"
+          },
           "prefersBorder": {
             "type": "boolean",
             "description": "Whether the app prefers to have a border around it",