Approval surface:
- MCP cards show the full argument envelope (expandable JSON) and the real
destination ("leaves this computer → host", stamped from the user's own
config); the long-tail card path never silently truncates any argument —
values the one-liner can't show whole render as labeled complete blocks
(the old 96-char cut hid email bodies past char 96).
- The MCP grant ladder: Allow once / Allow for this request (EXTERNAL
family; tooltip states the trade — later calls in this answer run unseen,
nothing survives the answer) / Always allow this tool (durable, revocable
on the server page) / Deny. Session-wide grants stay hidden where the
server refuses them — no button that lies.
- One renderer for parked approvals: a redelivered (reconnect/navigation)
approval maps back into the real card component — evidence and buttons
can never drift from the live card again. Transcript origin chips name
their source: your trust rule vs the legacy server flag vs a run grant.
Connectors/MCP management:
- Connect-time tool review: per-tool checkboxes; first review is an
explicit "Keep these tools" consent moment (creates the include list and
locks in fail-closed growth), later toggles auto-save with a receipt;
"new" badges only tools the server added since review (declines are
remembered via the exclude list, never badged).
- Trust surface: right-aligned "always allowed · Revoke" chip per trusted
tool (idle-dimmed when the tool is unchecked — standing rules never
vanish from the screen that audits them); header counts granted
authority; loud banner + one-click migration for the legacy server flag.
- One tool-review dialect: shared row/chip/count primitives across MCP and
catalog-connector pages; read/asks-first chips explain themselves
(offered only where our own code pins the kind — MCP rows carry no risk
chips, a server's word is not evidence; the page states "every tool asks
unless always-allowed" once instead).
- Clarity passes from live testing: one healthy status word (Ready);
group headers count their own rows; adding/connecting a server lands on
the detail page where the review ceremony waits (curated offers live in
Available, never among servers you own); Test shows Testing…/a transient
result at the button with the durable receipt in the header; the
per-server Configuration mirror is replaced by one "Show mcp.json"
reveal-in-file-manager affordance; lifecycle controls carry explanatory
tooltips. en+zh throughout.
Approval origins (reviewer/user/bypass, notes, grants) ride the tool message display sidecar so chips and deny blocks survive reload.
The Auto-Approve explainer is persisted once per session server-side with new shorter copy; later switches persist one-line markers.
Onboarding Next now accepts OAuth sign-in; an explicit draft folder pick survives a coworker change.
Composer shows context-window figures only (session totals on hold); specialists introduce themselves on first contact.
The Testing chip froze forever on guarded servers — the page never refetched
after the probe settled server-side. Opener renamed to Add custom MCP server.
Deep links (artifact/board chips, Access) force-show transiently without touching the pref.
Topbar Artifacts chip drops its cowork-only gate (artifacts are universal now).
Copy contents is the primary copy; path/open/reveal live in the labeled menu.
Access footer: '+ Add a source · Manage →'; mute explainer moves to the toggle tooltip.
Auto-collapse is edge-triggered now: stable callback identity + the rail notifies
only on real open/close transitions, so a manual toggle is never fought.
More fold gains a Files section listing workspace/scratch/granted roots.
Roots open in the artifact viewer (Files breadcrumb); folder click-through was already there.
Gated sessions run workspace+scratch dual-root; artifact listing scans scratch only.
Artifact chips resolve across workspace, scratch, and granted roots; request_directory registers for all sessions.
List groups General/Security with quiet disclosures for unshipped coworkers and the installer (native pickers for folder/zip); gallery is internal-build only.
Detail: markdown About with bundle screenshot carousel, one Connectors table (Status/Enable), tool calls collapsed under Advanced, management controls moved here.
Account menu drops Automations (sidebar nav has it) and the OpenWorker Cloud suffix.
Token savings + compaction move from Models to a new Settings - Context optimization tab.
Coworkers page loses its duplicate intro line.
Custom - MCP group after Connected; Add custom server modal at top; per-server detail subpage with Test.
Status never claims connected for stdio: Live / Ready + persisted tested-at / Not tested / Needs sign-in / Error.
Explicit connect reports stderr tails; a 401 on an anonymous http probe becomes needs-sign-in with a one-click OAuth switch.
Test button probes any enabled server row without opening a session.
Rohit C Prasad