Dustin Healy ae0e98e4c9 fix(mcp): address Codex round-3 findings declined in error ... Re-verification against source showed five previously declined Codex threads had merit, so this implements the fixes rather than the incorrect push-backs. Restores rendering of inline ui:// text resources attached to a tool call. The selector in ToolCall excluded text-bearing resources and ToolCallInfo no longer received attachments, so an inline resource vanished unless the model echoed a marker. MCPAppView now renders every renderable attachment and routes text resources through its srcDoc branch. Wires metadata cache invalidation. clearResourceUriCache had no caller, so the resourceUri, modelOnly and knownToolNames caches were never cleared. Tearing down a user connection now evicts that server/user cache entry. Threads the original registry config through the iframe follow-up RPCs. readResource and appToolCall share a getAppConnection helper that resolves the server config, hands it to getConnection so config-source servers resolve, refreshes headers for non-DB-sourced servers, and rejects configs that still need request body placeholders the app context cannot supply. Completes the host side of the App Bridge so migrated mcp-ui apps keep working: advertises serverResources and sets onreadresource for lazy resource loads, and wires onmessage so ui/message (the standardized replacement for mcp-ui prompt and intent actions) reaches the conversation. Honors a dedicated sandbox origin. getMCPSandboxUrl passes the parent origin to the sandbox, which the proxy reads from the parentOrigin query param so the handshake targets LibreChat instead of the sandbox's own origin.		2026-06-23 21:42:17 -07:00
..
assets
fonts
mcp-sandbox.html	fix(mcp): address Codex round-3 findings declined in error	2026-06-23 21:42:17 -07:00
robots.txt