teddywyly-oai 6d75b525ea Allow hosted Apps MCP contributions to override the protocol mode (#46019) ...

## What changed

Add an optional `protocol_mode` to `McpServerContribution::HostedApps` and apply it when registering the server. Preserve the hosted Apps default when no override is provided.

## Testing

Add an integration test that selects MCP `2026-07-28` with the global feature disabled and completes a native user verification flow, including resuming the tool call with the verification response. Extend capability tests to confirm that the override preserves hosted Apps user verification without granting it to ordinary extension registrations.

GitOrigin-RevId: e8662c45f964c00b0bb4503bbcfd8432d7e2fa70

2026-09-16 20:32:52 +00:00

..

agent

Add opt-in nonfatal handling for clock read failures (#45825)

2026-09-16 01:16:35 +00:00

apps

Make Apps guidance react to MCP availability (#30226)

2026-07-06 14:29:19 -07:00

config

Preserve attachment Unix socket grants when controller policy is omitted (#46004)

2026-09-16 18:21:22 +00:00

context

Centralize compaction checkpoint selection and validation (#46009)

2026-09-16 19:25:50 +00:00

context_manager

Centralize compaction checkpoint selection and validation (#46009)

2026-09-16 19:25:50 +00:00

exec_policy

Apply remote platform semantics to exec safety checks (#42113)

2026-09-01 18:24:56 +00:00

guardian

Centralize compaction checkpoint selection and validation (#46009)

2026-09-16 19:25:50 +00:00

mcp_tool_call

Use captured step settings for tool planning and execution (#44242)

2026-09-09 17:45:37 +00:00

plugins

Attribute command and plugin analytics to the invoking model (#45445)

2026-09-14 15:30:22 +00:00

realtime_conversation

Support attaching to existing realtime calls (#39876)

2026-08-21 06:41:28 +00:00

realtime_history

Record realtime conversation history in Core (#41924)

2026-08-31 22:38:23 +00:00

sandboxing

Derive sandbox contexts from turn environments (#40551)

2026-08-25 05:16:45 +00:00

session

Report clock failures again after recovery (#46006)

2026-09-16 18:54:45 +00:00

state

Continue interrupted work after managed daemon restarts (#45820)

2026-09-16 00:54:58 +00:00

tasks

Preserve executor path URIs in permission profile workspace roots (#45863)

2026-09-16 04:23:46 +00:00

thread_manager

Add managed thread lifetimes with cancellation-safe startup (#45502)

2026-09-14 19:30:11 +00:00

tools

Enable app tool result metadata with analytics controls (#46010)

2026-09-16 19:32:16 +00:00

unified_exec

Preserve executor path URIs in permission profile workspace roots (#45863)

2026-09-16 04:23:46 +00:00

utils

Count serialized JSON bytes without allocating strings (#40604)

2026-08-25 13:10:24 +00:00

agent_communication.rs

Support plaintext collaboration tool messages (#35845)

2026-07-28 23:49:37 +00:00

agents_md_manager.rs

Add a provider for thread-scoped instructions (#44701)

2026-09-11 01:57:54 +00:00

agents_md_tests.rs

Reject paths in project documentation fallback filenames (#45865)

2026-09-16 04:59:23 +00:00

agents_md.rs

Reject paths in project documentation fallback filenames (#45865)

2026-09-16 04:59:23 +00:00

apply_patch_tests.rs

Authorize apply_patch in the executor path context (#42391)

2026-09-02 23:58:24 +00:00

apply_patch.rs

Authorize apply_patch in the executor path context (#42391)

2026-09-02 23:58:24 +00:00

attestation.rs

[codex] request desktop attestation from app (#20619)

2026-05-08 12:36:02 -07:00

client_common_tests.rs

Refactor image content to use a shared ImageReference type (#45543)

2026-09-14 23:25:09 +00:00

client_common.rs

Normalize image detail for the receiving model (#44249)

2026-09-09 17:56:06 +00:00

client_tests.rs

Enable app tool result metadata with analytics controls (#46010)

2026-09-16 19:32:16 +00:00

client.rs

Enable app tool result metadata with analytics controls (#46010)

2026-09-16 19:32:16 +00:00

codex_delegate_tests.rs

Honor thread analytics opt-outs when using shared clients (#44646)

2026-09-10 21:30:56 +00:00

codex_delegate.rs

Add attachment upload and resolution APIs and pass stores into sessions (#45556)

2026-09-15 00:29:13 +00:00

codex_thread.rs

Preserve executor path URIs in permission profile workspace roots (#45863)

2026-09-16 04:23:46 +00:00

command_canonicalization_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

command_canonicalization.rs

core: remove cross-crate re-exports from lib.rs (#16512)

2026-04-01 23:06:24 -07:00

compact_model_fallback.rs

Remove the unused legacy remote compaction implementation (#44273)

2026-09-09 18:40:53 +00:00

compact_remote_history_tests.rs

Remove the unused legacy remote compaction implementation (#44273)

2026-09-09 18:40:53 +00:00

compact_remote_history.rs

Remove the unused legacy remote compaction implementation (#44273)

2026-09-09 18:40:53 +00:00

compact_remote_v2_attempt.rs

Use captured step settings for request metadata and tool hooks (#45248)

2026-09-13 15:47:59 +00:00

compact_remote_v2_image_budget_tests.rs

Refactor image content to use a shared ImageReference type (#45543)

2026-09-14 23:25:09 +00:00

compact_remote_v2_images.rs

Support image references by file ID in inputs and tool outputs (#45794)

2026-09-15 21:19:08 +00:00

compact_remote_v2.rs

Preserve Guardian evidence during checkpoint migration (#45789)

2026-09-15 20:41:39 +00:00

compact_tests.rs

Refactor image content to use a shared ImageReference type (#45543)

2026-09-14 23:25:09 +00:00

compact_token_budget.rs

Preserve root turn attribution in turn-start events (#44611)

2026-09-10 18:24:13 +00:00

compact.rs

Preserve Guardian evidence during checkpoint migration (#45789)

2026-09-15 20:41:39 +00:00

connectors_tests.rs

Honor app link settings for MCP tool approvals (#42056)

2026-09-01 13:43:27 +00:00

connectors.rs

Honor thread-level plugin exclusions across runtime capabilities (#44655)

2026-09-10 21:51:34 +00:00

current_time.rs

[codex] route sleep through time providers (#29973)

2026-06-24 22:17:43 -07:00

cyber_access_program.rs

Add per-turn cyber access program selection (#40687)

2026-08-25 19:54:52 +00:00

elicitation_tests.rs

elicitations: Move to shared ElicitationService (#30627)

2026-07-06 11:20:32 -07:00

elicitation.rs

elicitations: Move to shared ElicitationService (#30627)

2026-07-06 11:20:32 -07:00

environment_selection.rs

Preserve executor path URIs in permission profile workspace roots (#45863)

2026-09-16 04:23:46 +00:00

event_mapping_tests.rs

Support image references by file ID in inputs and tool outputs (#45794)

2026-09-15 21:19:08 +00:00

event_mapping.rs

Support image references by file ID in inputs and tool outputs (#45794)

2026-09-15 21:19:08 +00:00

exec_env_tests.rs

Add a feature flag to preserve apply_patch line endings (#37758)

2026-08-10 01:44:30 +00:00

exec_env.rs

Expose the Codex version to commands and turn metadata (#42395)

2026-09-03 00:17:19 +00:00

exec_policy_tests.rs

Remove selected core test cases (#42066)

2026-09-01 14:43:27 +00:00

exec_policy_windows_tests.rs

Retire the untrusted approval policy (#39630)

2026-08-20 07:03:02 +00:00

exec_policy.rs

Apply remote platform semantics to exec safety checks (#42113)

2026-09-01 18:24:56 +00:00

exec_tests.rs

Preserve executor path URIs in permission profile workspace roots (#45863)

2026-09-16 04:23:46 +00:00

exec.rs

Preserve executor path URIs in permission profile workspace roots (#45863)

2026-09-16 04:23:46 +00:00

function_tool.rs

feat: extract shared tool executor interface (#22359)

2026-05-13 11:31:27 +02:00

git_info_tests.rs

Sanitize credentials from Git remote metadata (#40713)

2026-08-25 21:34:05 +00:00

guardian_review.rs

Move Guardian reviewer lifecycle into the extension (#45537)

2026-09-14 22:58:51 +00:00

hook_mcp_executor.rs

Preserve executor context for MCP stop hooks (#40012)

2026-08-21 21:17:42 +00:00

hook_runtime.rs

Use captured step settings for request metadata and tool hooks (#45248)

2026-09-13 15:47:59 +00:00

image_preparation_tests.rs

Support image references by file ID in inputs and tool outputs (#45794)

2026-09-15 21:19:08 +00:00

image_preparation.rs

Support image references by file ID in inputs and tool outputs (#45794)

2026-09-15 21:19:08 +00:00

installation_id.rs

feat: split memories part 2 (#19860)

2026-04-28 13:03:28 +02:00

lib.rs

Route Guardian requests through /responses with identifying headers (#45736)

2026-09-15 17:09:11 +00:00

mcp_openai_file.rs

Honor environment-resolved workspace roots (#40912)

2026-08-26 16:28:35 +00:00

mcp_skill_dependencies.rs

Add trusted enterprise MCP auth configuration (#44832)

2026-09-11 14:25:56 +00:00

mcp_tool_approval_templates.rs

Organize bundled Rust resources under asset directories (#41477)

2026-08-29 06:05:28 +00:00

mcp_tool_call_tests.rs

Preserve MCP App UI metadata in tool-call events and history (#45805)

2026-09-15 22:52:56 +00:00

mcp_tool_call.rs

Preserve MCP App UI metadata in tool-call events and history (#45805)

2026-09-15 22:52:56 +00:00

mcp_tool_exposure_test.rs

Reuse MCP handlers across sampling steps (#37273)

2026-08-06 13:37:07 +00:00

mcp_tool_exposure.rs

Honor app link settings for MCP tool approvals (#42056)

2026-09-01 13:43:27 +00:00

mcp.rs

Allow hosted Apps MCP contributions to override the protocol mode (#46019)

2026-09-16 20:32:52 +00:00

memory_usage.rs

Tag memory usage telemetry with the memory version (#45960)

2026-09-16 15:17:41 +00:00

mention_syntax.rs

Extract codex-utils-plugins crate (#15746)

2026-03-25 11:05:35 -07:00

network_policy_decision_tests.rs

fix: attribut network requests to the exact exec on linux (#29697)

2026-07-06 14:51:34 -07:00

network_policy_decision.rs

refactor(proxy): clarify sandbox block messages (#17168)

2026-04-09 10:53:06 -07:00

original_image_detail.rs

Remove js_repl feature (#19410)

2026-04-24 17:49:29 -07:00

otel_init.rs

Prepare the telemetry shutdown worker during initialization (#39050)

2026-08-17 19:06:53 +00:00

prompt_debug.rs

Use the originating model when recording conversation history (#44243)

2026-09-09 17:46:00 +00:00

realtime_context_tests.rs

Persist Daybreak preferences in thread metadata (#42854)

2026-09-04 21:17:25 +00:00

realtime_context.rs

Add experimental app-server project APIs (#38940)

2026-08-17 04:01:37 +00:00

realtime_conversation_tests.rs

Reconnect WebRTC Realtime sideband transports (#39257)

2026-08-18 18:41:40 +00:00

realtime_conversation.rs

Gate new turn submissions on host shutdown admission (#43943)

2026-09-08 23:45:10 +00:00

realtime_history_tests.rs

Preserve MCP App UI metadata in tool-call events and history (#45805)

2026-09-15 22:52:56 +00:00

realtime_history.rs

Record realtime conversation history in Core (#41924)

2026-08-31 22:38:23 +00:00

realtime_prompt.rs

[codex] Consolidate shared prompts in codex-prompts (#25151)

2026-06-01 18:45:07 +00:00

responses_headers.rs

Route Guardian requests through /responses with identifying headers (#45736)

2026-09-15 17:09:11 +00:00

responses_metadata.rs

Expose session analytics state in Responses turn metadata (#44628)

2026-09-10 19:41:14 +00:00

responses_retry_tests.rs

Separate Codex error details from retry metadata (#34996)

2026-07-23 19:32:26 +00:00

responses_retry.rs

Improve Guardian retries and review failure reporting (#44482)

2026-09-10 09:50:59 +00:00

rollout_budget.rs

Remove the deprecated thread/rollback API (#44915)

2026-09-11 21:32:04 +00:00

rollout.rs

Honor the configured SQLite home across state consumers (#34994)

2026-07-23 19:19:35 +00:00

safety_tests.rs

Authorize apply_patch in the executor path context (#42391)

2026-09-02 23:58:24 +00:00

safety.rs

Authorize apply_patch in the executor path context (#42391)

2026-09-02 23:58:24 +00:00

sandbox_tags_tests.rs

Report configured sandbox policy consistently (#41933)

2026-08-31 23:29:20 +00:00

sandbox_tags.rs

Separate executor sandbox selection from Windows sandbox levels (#45730)

2026-09-15 16:40:06 +00:00

session_prefix_tests.rs

core: surface terminal subagent errors to parent agents (#28375)

2026-06-16 14:34:54 +02:00

session_prefix.rs

Classify additional generated context fragments (#40275)

2026-08-23 20:08:40 +00:00

session_rollout_init_error.rs

Preserve sandbox errors during session initialization (#40381)

2026-08-24 10:56:54 +00:00

session_startup_prewarm.rs

Move Guardian reviewer lifecycle into the extension (#45537)

2026-09-14 22:58:51 +00:00

shell_snapshot_sandbox_tests.rs

Wire the Windows MXC sandbox into command execution (#45176)

2026-09-13 06:07:03 +00:00

shell_snapshot_sandbox.rs

Wire the Windows MXC sandbox into command execution (#45176)

2026-09-13 06:07:03 +00:00

shell_snapshot_tests.rs

Wire Windows sandbox selection into managed proxy routing (#45757)

2026-09-15 18:41:13 +00:00

shell_snapshot.rs

Support configured credential providers across shell snapshots (#44072)

2026-09-09 06:04:59 +00:00

shell_tests.rs

Resolve model-provided shells by type (#39607)

2026-08-20 06:03:25 +00:00

shell.rs

Resolve model-provided shells by type (#39607)

2026-08-20 06:03:25 +00:00

skills.rs

Trust invoked user skills in Guardian reviews (#41006)

2026-08-27 00:07:26 +00:00

spawn.rs

Support sandboxed file streaming in exec-server (#38356)

2026-08-13 11:11:26 +00:00

state_db_bridge.rs

state: pass state db handles through consumers (#20561)

2026-05-04 11:46:03 -07:00

stream_events_utils_tests.rs

Bind direct tool-call metadata to invocation outputs (#45185)

2026-09-13 06:53:20 +00:00

stream_events_utils.rs

Bind direct tool-call metadata to invocation outputs (#45185)

2026-09-13 06:53:20 +00:00

test_support.rs

Add a provider for thread-scoped instructions (#44701)

2026-09-11 01:57:54 +00:00

thread_manager_tests.rs

Add elicitation classification support to app and MCP analytics (#45649)

2026-09-15 08:28:03 +00:00

thread_manager.rs

Copy current thread attachments into non-ephemeral forks (#45579)

2026-09-15 02:33:27 +00:00

thread_rollout_truncation_tests.rs

Preserve root turn attribution in turn-start events (#44611)

2026-09-10 18:24:13 +00:00

thread_rollout_truncation.rs

Preserve harness metadata across conversation history (#38058)

2026-08-11 19:30:12 +00:00

turn_diff_tracker_tests.rs

Render turn diffs for foreign environment paths (#34654)

2026-07-22 02:19:45 +00:00

turn_diff_tracker.rs

Render turn diffs for foreign environment paths (#34654)

2026-07-22 02:19:45 +00:00

turn_metadata_tests.rs

Use captured step settings for request metadata and tool hooks (#45248)

2026-09-13 15:47:59 +00:00

turn_metadata.rs

Use captured step settings for request metadata and tool hooks (#45248)

2026-09-13 15:47:59 +00:00

turn_timing_tests.rs

Replace Guardian tickets with parent response IDs (#43002)

2026-09-05 13:02:49 +00:00

turn_timing.rs

Propagate response tickets to Guardian reviews (#42758)

2026-09-04 12:56:26 +00:00

user_shell_command_tests.rs

Organize context fragments (#18794)

2026-04-20 22:39:17 -07:00

user_shell_command.rs

Snapshot resolved settings for each model step (#40651)

2026-08-25 17:41:22 +00:00

util_tests.rs

Trim TUI legacy core helper usage (#22695)

2026-05-14 16:54:59 -07:00

util.rs

Remove unused Rust helpers (#34345)

2026-07-20 13:45:29 +00:00

web_search.rs

Remove unused Rust helpers (#34345)

2026-07-20 13:45:29 +00:00

windows_sandbox_read_grants_tests.rs

windows-sandbox: pass workspace roots to runner (#24108)

2026-05-28 15:26:55 -07:00

windows_sandbox_read_grants.rs

windows-sandbox: pass workspace roots to runner (#24108)

2026-05-28 15:26:55 -07:00

windows_sandbox_tests.rs

Route Windows sandbox proxy traffic by restricting SID (#34613)

2026-07-21 21:06:04 +00:00

windows_sandbox.rs

Wire Windows sandbox selection into managed proxy routing (#45757)

2026-09-15 18:41:13 +00:00

windows_system_config.rs

Add telemetry for the Windows system config namespace (#44284)

2026-09-09 19:31:12 +00:00

worktree_trust_tests.rs

Validate linked worktrees before inheriting project trust (#39616)

2026-08-20 06:29:32 +00:00