victor-openai b71af39fe6 Preserve MCP App UI metadata in tool-call events and history (#45805) ...

## Why

Clients need widget presentation details to render MCP Apps without waiting for the full MCP catalog, including when replaying saved history.

## What changed

- Add `mcpToolCall.mcpAppUi` with the invoked descriptor's `resourceUri` and `preferredModelDisplayMode`, and carry it through tool-call events and saved history.
- Support `fullscreen` and default to `inline` when the display preference is missing or unsupported.
- Keep existing resource URI fields for compatibility. Leave `mcpAppUi` null for older history and tools that declare widgets only in result metadata, where clients still use catalog discovery.
- Update protocol schemas, TypeScript and Python types, and app-server documentation.

## Testing

Add parameterized integration coverage for fullscreen, missing and unsupported preferences, legacy URI metadata, and result-only widgets, verifying consistent tool events and preservation across session resume.

GitOrigin-RevId: 2a9bed804dcea8c2b4903b8406fa6710681f7f5e

2026-09-15 22:52:56 +00:00

..

models

Bind direct tool-call metadata to invocation outputs (#45185)

2026-09-13 06:53:20 +00:00

openai_models

Expose available access programs in model discovery (#44893)

2026-09-11 19:13:04 +00:00

permissions

Resolve permission profiles with explicit execution-host path context (#44676)

2026-09-11 00:03:40 +00:00

prompts/base_instructions

…

account.rs

Support Edu Plus and Edu Pro account plans (#39316)

2026-08-18 23:47:00 +00:00

agent_path.rs

…

approvals.rs

Attribute command and plugin analytics to the invoking model (#45445)

2026-09-14 15:30:22 +00:00

auth.rs

Support managed AWS access keys for Amazon Bedrock (#40481)

2026-08-24 21:39:48 +00:00

capabilities_tests.rs

…

capabilities.rs

…

config_types.rs

Separate executor sandbox selection from Windows sandbox levels (#45730)

2026-09-15 16:40:06 +00:00

dynamic_tools.rs

…

environment.rs

Skip Guardian reviews in Full Access (#42147)

2026-09-01 22:16:54 +00:00

error_tests.rs

Use curly apostrophes in protocol error messages (#43961)

2026-09-09 01:19:07 +00:00

error.rs

Use curly apostrophes in protocol error messages (#43961)

2026-09-09 01:19:07 +00:00

exec_output_tests.rs

…

exec_output.rs

…

items.rs

Preserve MCP App UI metadata in tool-call events and history (#45805)

2026-09-15 22:52:56 +00:00

legacy_events.rs

Preserve MCP App UI metadata in tool-call events and history (#45805)

2026-09-15 22:52:56 +00:00

lib.rs

Add configurable memory versions with isolated storage (#43797)

2026-09-08 10:55:48 +00:00

local_media_tests.rs

Support image references by file ID in inputs and tool outputs (#45794)

2026-09-15 21:19:08 +00:00

local_media.rs

Support image references by file ID in inputs and tool outputs (#45794)

2026-09-15 21:19:08 +00:00

mcp_approval_meta.rs

Require synchronous review for sensitive MCP actions (#41094)

2026-08-27 08:44:54 +00:00

mcp_policy.rs

Enforce environment MCP policies (#39335)

2026-08-19 01:26:16 +00:00

mcp.rs

Support openai/elicitation form requests (#41447)

2026-08-29 02:43:10 +00:00

memory_citation.rs

…

memory_version.rs

Add configurable memory versions with isolated storage (#43797)

2026-09-08 10:55:48 +00:00

models.rs

Support image references by file ID in inputs and tool outputs (#45794)

2026-09-15 21:19:08 +00:00

network_policy.rs

…

num_format.rs

…

openai_models.rs

Retire Friendly and Pragmatic personality selection (#44946)

2026-09-12 00:22:04 +00:00

parse_command.rs

…

permission_profile_intersection_tests.rs

Preserve target-native paths in command approvals (#42577)

2026-09-03 16:21:10 +00:00

permission_profile_intersection.rs

Preserve target-native paths in command approvals (#42577)

2026-09-03 16:21:10 +00:00

permission_profile_snapshot.rs

Move permission profile snapshots into the protocol (#38651)

2026-08-14 21:17:29 +00:00

permissions.rs

Resolve permission profiles with explicit execution-host path context (#44676)

2026-09-11 00:03:40 +00:00

plan_tool.rs

…

protocol.rs

Preserve MCP App UI metadata in tool-call events and history (#45805)

2026-09-15 22:52:56 +00:00

realtime.rs

Persist realtime events in the thread timeline (#40508)

2026-08-25 01:03:20 +00:00

request_permissions.rs

Preserve target-native cwd in permission approval requests (#42314)

2026-09-02 17:27:50 +00:00

request_user_input_tests.rs

Make user input blocking behavior explicit (#36410)

2026-08-01 00:38:10 +00:00

request_user_input.rs

Make user input blocking behavior explicit (#36410)

2026-08-01 00:38:10 +00:00

response_item_id_tests.rs

…

response_item_id.rs

…

response_usage.rs

Preserve raw response usage metadata (#41980)

2026-09-01 05:17:11 +00:00

review_format.rs

…

sanitized_git_url_tests.rs

Sanitize credentials from Git remote metadata (#40713)

2026-08-25 21:34:05 +00:00

sanitized_git_url.rs

Sanitize credentials from Git remote metadata (#40713)

2026-08-25 21:34:05 +00:00

security_risk.rs

Record reviewed actions with security risk scores (#40901)

2026-08-26 15:02:21 +00:00

session_id.rs

…

shell_environment_tests.rs

Prevent Node REPL auth tokens from reaching child processes (#39301)

2026-08-18 22:29:58 +00:00

shell_environment.rs

Add credential brokering to network proxy feature config (#40466)

2026-08-24 19:52:27 +00:00

thread_id.rs

Distinguish rollout IDs from thread IDs (#38127)

2026-08-12 05:20:32 +00:00

tool_name.rs

Canonicalize default tools under the functions namespace (#37022)

2026-08-05 04:07:59 +00:00

turn_input.rs

Gate new turn submissions on host shutdown admission (#43943)

2026-09-08 23:45:10 +00:00

user_input.rs

Support image references by file ID in inputs and tool outputs (#45794)

2026-09-15 21:19:08 +00:00