In the Apps sdk docs the guidance is to implement versioning on the resource uri of the widget (ui.resourceUri or openai/outputTemplate)
“Treat the URI as your cache key. When you update the markup or bundle, version the URI and update every reference to it (for example, the registerAppResource URI, _meta.ui.resourceUri in your tool descriptor, and the contents[].uri in your template list). ChatGPT honors _meta[“openai/outputTemplate”] as an OpenAI-specific compatibility alias.”
Yet the app submission guidelines indicate that
“Once your app is published, tool names, signatures, and descriptions are locked for safety. To add or update your app’s tools or metadata, you must resubmit the app for review. Once your resubmission is approved, you can publish the update which will replace the previous version of your app.”
What is the guidance for releasing a new version of my widget (and widget uri) on my mcp server yet staying protected from openai making a read resource request for the resource uri that is locked in the tool description of my submitted and approved app?