Connectors become a per-coworker allowlist (OPE-93)

Sessions expose declared-and-connected only; 'all' is builtin-only; legacy true
migrates to the recommended refs, else nothing. Consent lists real names and
per-connector caps force re-consent when an update widens the grant.

surfaces/gui/src/api.ts

@@ -898,7 +898,8 @@ export interface PersonaConsent {
   description: string;
   tools: string[];
   risk: string[];
-  connectors: boolean;
+  // "all" (general builtins) or the declared allowlist — [] means no connector access.
+  connectors: "all" | string[];
   mcp: string[];
   messaging: boolean;
   recommended_mode: string;

surfaces/gui/src/components/PersonasTab.tsx

@@ -376,7 +376,11 @@ function ConsentCard({
       )}
       <div className="text-[12.5px] text-ink mt-2">
         Can {summary}
-        {c.connectors ? " · use your connected services" : ""}
+        {c.connectors === "all"
+          ? " · use ALL your connected services"
+          : c.connectors.length
+            ? ` · use connectors: ${c.connectors.join(", ")}`
+            : ""}
         {c.messaging ? " · send messages" : ""}
         {c.mcp.length ? ` · use MCP: ${c.mcp.join(", ")}` : ""}
         <button