Joe Savona aa1399cbcd Forward caller metadata on MCP resource reads (#59509) ...

## What changed

Accept an optional `_meta` object on `mcpServer/resource/read` and forward it to MCP `resources/read`, including reads bound to an originating tool call. Update the protocol schemas and generated TypeScript and Python types.

Reject caller metadata containing host-owned `threadId`, `x-codex-turn-metadata`, or `codex/connectionLease` keys. For `codex_apps`, also reserve `connector_id`, `link_id`, and `_codex_apps.resource_uri` to preserve app and account routing.

## Testing

Add integration coverage for metadata forwarding through stdio, hosted app reads with and without a thread, and origin-bound widget reads. Cover rejection of reserved keys and non-object metadata.

GitOrigin-RevId: 227ee0fb5fe15fa2ff2ec66d4d5ae16de8935a8c

2026-11-04 22:55:22 +00:00

..

codex_apps

Upgrade rmcp to 3.0.0 (#36001)

2026-07-29 17:38:20 +00:00

connection_manager

Preserve sandbox context in prepared MCP calls (#59020)

2026-11-03 01:08:08 +00:00

mcp

Preserve sandbox context in prepared MCP calls (#59020)

2026-11-03 01:08:08 +00:00

rmcp_client

Add model Search discovery to MCP bindings (#59034)

2026-11-03 01:59:24 +00:00

runtime

Fix enterprise MCP credential selection and reauthentication (#55859)

2026-10-21 10:40:59 +00:00

snapshots

Support package-style MCP server names (#41700)

2026-08-30 16:45:34 +00:00

agent_plugin_config.rs

Add Agent Plugins MCP config parsing (#36796)

2026-08-03 20:36:59 +00:00

auth_changes_tests.rs

Notify opted-in stdio MCP servers of auth changes (#43428)

2026-09-07 10:37:46 +00:00

auth_changes.rs

Notify opted-in stdio MCP servers of auth changes (#43428)

2026-09-07 10:37:46 +00:00

auth_elicitation.rs

Add connector auth failure detection without an install URL (#44938)

2026-09-11 23:36:17 +00:00

binding_clients.rs

Share eligible local stdio MCP connections across chats (#57211)

2026-10-26 19:37:32 +00:00

binding_tests.rs

Preserve sandbox context in prepared MCP calls (#59020)

2026-11-03 01:08:08 +00:00

binding.rs

Add model Search discovery to MCP bindings (#59034)

2026-11-03 01:59:24 +00:00

catalog_tests.rs

Preserve MCP disable reasons across runtime overlays (#56266)

2026-10-22 21:11:21 +00:00

catalog.rs

Preserve MCP disable reasons across runtime overlays (#56266)

2026-10-22 21:11:21 +00:00

client_capabilities_tests.rs

Add negotiated network policy metadata support for MCP calls (#56278)

2026-10-22 22:33:07 +00:00

client_capabilities.rs

Add negotiated network policy metadata support for MCP calls (#56278)

2026-10-22 22:33:07 +00:00

client_tool_catalog.rs

Share eligible local stdio MCP connections across chats (#57211)

2026-10-26 19:37:32 +00:00

codex_apps.rs

[codex-apps] Filter optional file fields by tool schema (#31686)

2026-07-09 14:32:23 -07:00

connection_manager_tests.rs

Preserve sandbox context in prepared MCP calls (#59020)

2026-11-03 01:08:08 +00:00

connection_manager.rs

Allow Apps catalog discovery before the initial tool inventory completes (#58352)

2026-10-30 14:47:56 +00:00

connection_pool_tests.rs

Preserve sandbox context in prepared MCP calls (#59020)

2026-11-03 01:08:08 +00:00

connection_pool.rs

Forward caller metadata on MCP resource reads (#59509)

2026-11-04 22:55:22 +00:00

elicitation_tests.rs

Preserve sandbox context in prepared MCP calls (#59020)

2026-11-03 01:08:08 +00:00

elicitation.rs

Preserve diagnostic reasons for MCP user verification failures (#51808)

2026-10-07 19:28:14 +00:00

ema_account.rs

Support confidential OAuth clients for enterprise-managed MCP auth (#56001)

2026-10-21 22:30:35 +00:00

ema_auth.rs

Preserve safe enterprise MCP authentication error details (#56153)

2026-10-22 11:51:23 +00:00

ema_token_source.rs

Preserve safe enterprise MCP authentication error details (#56153)

2026-10-22 11:51:23 +00:00

event_stream.rs

Enable enterprise-managed authorization for MCP connections (#55334)

2026-10-19 17:57:35 +00:00

executor_environment_http_client.rs

Resolve HTTP MCP bearer tokens in executor environments (#39926)

2026-08-21 12:50:15 +00:00

lib.rs

Forward caller metadata on MCP resource reads (#59509)

2026-11-04 22:55:22 +00:00

model_search_tests.rs

Add model Search discovery to MCP bindings (#59034)

2026-11-03 01:59:24 +00:00

model_search.rs

Add model Search discovery to MCP bindings (#59034)

2026-11-03 01:59:24 +00:00

openai_docs_source_attribution_tests.rs

Attribute OpenAI docs MCP requests to Codex (#33424)

2026-07-15 20:54:54 +00:00

openai_docs_source_attribution.rs

Attribute OpenAI docs MCP requests to Codex (#33424)

2026-07-15 20:54:54 +00:00

pagination_tests.rs

Limit MCP catalog pagination (#36039)

2026-07-29 22:37:09 +00:00

pagination.rs

Raise the host-owned Codex Apps catalog limit (#36772)

2026-08-03 17:06:46 +00:00

plugin_config_tests.rs

Reconcile V2 executor plugins with cloud catalogs (#55301)

2026-10-19 15:15:17 +00:00

plugin_config.rs

Reconcile V2 executor plugins with cloud catalogs (#55301)

2026-10-19 15:15:17 +00:00

resource_client.rs

Allow Apps catalog discovery before the initial tool inventory completes (#58352)

2026-10-30 14:47:56 +00:00

resource_origin.rs

Forward caller metadata on MCP resource reads (#59509)

2026-11-04 22:55:22 +00:00

rmcp_client_credential_policy_tests.rs

Preserve executor MCP credential boundaries across reconnects (#48143)

2026-09-25 17:15:29 +00:00

rmcp_client.rs

Allow Apps catalog discovery before the initial tool inventory completes (#58352)

2026-10-30 14:47:56 +00:00

runtime_shared_connection_tests.rs

Share eligible local stdio MCP connections across chats (#57211)

2026-10-26 19:37:32 +00:00

runtime.rs

Forward caller metadata on MCP resource reads (#59509)

2026-11-04 22:55:22 +00:00

sandbox_executable.rs

Expose a verified sandbox launcher to local MCP servers (#52182)

2026-10-08 17:25:09 +00:00

sandbox_metadata_tests.rs

Separate MCP sandbox policy from launcher metadata (#53709)

2026-10-13 16:23:44 +00:00

sandbox_metadata.rs

Separate MCP sandbox policy from launcher metadata (#53709)

2026-10-13 16:23:44 +00:00

server_tests.rs

Preserve MCP tool-list metadata in server status (#54686)

2026-10-16 19:26:46 +00:00

server.rs

Add opt-in protocol discovery for local stdio MCP servers (#57210)

2026-10-26 19:37:06 +00:00

tool_catalog_cache.rs

Add opt-in protocol discovery for local stdio MCP servers (#57210)

2026-10-26 19:37:06 +00:00

tool_request_meta.rs

Add scoped host metadata hooks for MCP tool requests (#58395)

2026-10-30 17:32:09 +00:00

tools.rs

Propagate Apps tool refreshes to existing threads (#43900)

2026-09-08 19:56:25 +00:00

trusted_access_tests.rs

Share byte buffers across exec-server output chunks (#49972)

2026-10-01 12:41:39 +00:00

trusted_access.rs

Propagate authentication header failures before sending requests (#55607)

2026-10-20 15:43:19 +00:00

user_verification_elicitation.rs

Preserve diagnostic reasons for MCP user verification failures (#51808)

2026-10-07 19:28:14 +00:00