felixxia-oai aa89cf62bb Freeze plugin roots in MCP tool attribution (#41117) ...

## Why

Plugin MCP trust decisions must describe the exact host-discovered server
registration. Looking up a plugin again by ID can resolve a different root.

## What changed

- Retain the host plugin root in MCP catalog attribution and connection identity.
- Reconnect an MCP server when its attributed plugin root changes.
- Pass the retained root through tool lifecycle attribution and use it directly
  when building trusted tool context.

## Testing

Add coverage for catalog identity, connection reconciliation, lifecycle
attribution, and rejecting a different root associated with the same plugin ID.

GitOrigin-RevId: bc92743dd40ab44065a07c3ea972b4956ef8351f

2026-08-27 11:27:50 +00:00

..

src

Freeze plugin roots in MCP tool attribution (#41117)

2026-08-27 11:27:50 +00:00

BUILD.bazel

Extract MCP into codex-mcp crate (#15919)

2026-04-01 19:03:26 -07:00

Cargo.toml

Reconnect MCP servers when authentication mode changes (#40634)

2026-08-25 16:14:26 +00:00