@danieltmn/tamnora 0.17.0 → 0.18.0

package/harness/packages/server/public/index.html

@@ -37,7 +37,7 @@
   </head>
   <body>
     <header class="topbar">
-      <div class="brand"><span class="logo"><img src="/icons/logo.png" alt="Tamnora" /></span> <span id="topbar-section" class="topbar-section">chat</span> <span class="ver">v0.17.0</span></div>
+      <div class="brand"><span class="logo"><img src="/icons/logo.png" alt="Tamnora" /></span> <span id="topbar-section" class="topbar-section">chat</span> <span class="ver">v0.18.0</span></div>
       <nav class="tabs">
         <button class="tab active" data-tab="chat">chat</button>
         <button class="tab" data-tab="providers">proveedores</button>
@@ -270,7 +270,12 @@
             <div class="xp-bar">
               <input id="preview-url" placeholder="http://127.0.0.1:5173" spellcheck="false" />
               <button id="preview-open" class="btn" type="button">abrir</button>
-              <button id="preview-tunnel" class="btn" type="button" title="Abrir un túnel público al puerto (para el celular)">túnel</button>
+              <select id="preview-provider" title="cómo exponer el puerto para acceso remoto" aria-label="proveedor de acceso remoto">
+                <option value="tailscale">tailscale</option>
+                <option value="tunnelmole">público</option>
+              </select>
+              <button id="preview-tunnel" class="btn" type="button" title="Exponer el puerto para acceso remoto (tailscale privado o túnel público)">túnel</button>
+              <button id="preview-close" class="btn danger" type="button" hidden title="Cerrar el túnel/exposición remota">cerrar</button>
             </div>
             <div class="preview-tools">
               <select id="preview-device" title="tamaño de pantalla" aria-label="tamaño de pantalla">
@@ -564,12 +569,36 @@
           <p class="muted verify-line">
             Se combinan con <code>mcp[]</code> de <code>tamnora.json</code>; los guardados acá viven en la base.
           </p>
+          <div class="import-bar">
+            <label class="field grow"><span>carga de herramientas MCP</span>
+              <select id="mcp-mode">
+                <option value="auto">auto (diferir si hay muchas)</option>
+                <option value="lazy">diferido (índice + mcp_call)</option>
+                <option value="eager">completas (todas en cada turno)</option>
+              </select>
+            </label>
+            <span id="mcp-count" class="muted"></span>
+          </div>
+          <div class="import-bar">
+            <input id="mcp-pinned" placeholder="tools/servidores fijos (coma), ej. mcp__postgres__query" spellcheck="false" />
+            <button id="mcp-pinned-save" class="btn" type="button">fijar</button>
+          </div>
           <div class="import-bar">
             <input id="mcp-import" placeholder="nombre del registro oficial, URL o JSON (bloque mcpServers)" spellcheck="false" />
             <button id="mcp-import-btn" class="btn" type="button">importar</button>
           </div>
+          <div class="import-bar">
+            <input id="mcp-search" placeholder="buscar en el registro oficial (ej. github, postgres)" spellcheck="false" />
+            <button id="mcp-search-btn" class="btn" type="button">buscar</button>
+          </div>
           <div id="mcp-import-status" class="summary"></div>
+          <div id="mcp-search-status" class="summary"></div>
+          <ul id="mcp-search-results" class="providers"></ul>
           <ul id="mcp-list" class="providers"></ul>
+          <details class="catalog">
+            <summary>sugeridos</summary>
+            <ul id="mcp-catalog" class="providers"></ul>
+          </details>
         </div>
 
         <div class="panel ajustes-panel" data-panel="skills">
@@ -584,8 +613,18 @@
             <input id="skill-import" placeholder="https://skills.sh/owner/repo/skill" spellcheck="false" />
             <button id="skill-import-btn" class="btn" type="button">importar</button>
           </div>
+          <div class="import-bar">
+            <input id="skill-search" placeholder="buscar skills en GitHub (ej. testing, react)" spellcheck="false" />
+            <button id="skill-search-btn" class="btn" type="button">buscar</button>
+          </div>
           <div id="skill-import-status" class="summary"></div>
+          <div id="skill-search-status" class="summary"></div>
+          <ul id="skill-search-results" class="providers"></ul>
           <ul id="skill-list" class="providers"></ul>
+          <details class="catalog">
+            <summary>sugeridas</summary>
+            <ul id="skill-catalog" class="providers"></ul>
+          </details>
         </div>
 
         <div class="panel ajustes-panel" data-panel="memoria">

package/harness/packages/server/public/styles.css

@@ -15,6 +15,12 @@
   --accent-soft: rgba(217, 112, 74, 0.18);
   --ok: #8fae7f;
   --warn: #d9a441;
+  --info: #6f9fd8;
+  --danger-soft: rgba(224, 112, 92, 0.16);
+  --ok-soft: rgba(143, 174, 127, 0.16);
+  --warn-soft: rgba(217, 164, 65, 0.16);
+  --info-soft: rgba(111, 159, 216, 0.16);
+  --muted-soft: rgba(156, 151, 137, 0.14);
   --solid: #12130b;
   --primary-fg: #fff7ef;
   --sans: Manrope, system-ui, "Segoe UI", Arial, sans-serif;
@@ -46,6 +52,12 @@ html[data-theme='paper'] {
   --accent-soft: rgba(189, 84, 47, 0.1);
   --ok: #66865d;
   --warn: #8a5a00;
+  --info: #3f6ea6;
+  --danger-soft: rgba(147, 64, 34, 0.1);
+  --ok-soft: rgba(102, 134, 93, 0.14);
+  --warn-soft: rgba(138, 90, 0, 0.12);
+  --info-soft: rgba(63, 110, 166, 0.12);
+  --muted-soft: rgba(104, 104, 93, 0.12);
   --solid: #f7f2e6;
   --primary-fg: #fbf6ec;
   --page-bg: #f5efe2;
@@ -820,6 +832,60 @@ body.resizing * { cursor: col-resize !important; }
 .perm-card.collapsed .perm-args,
 .perm-card.collapsed .perm-actions { display: none; }
 
+/* question card (ask_user) ------------------------------------------------- */
+.question-card {
+  border: 1px solid var(--accent);
+  border-radius: 8px;
+  padding: 10px 12px;
+  background: var(--accent-soft);
+}
+.question-title { font-weight: 700; margin-bottom: 8px; }
+.question-form { display: flex; flex-direction: column; gap: 9px; }
+.question-field { display: flex; flex-direction: column; gap: 4px; }
+.question-label { font-size: 12.5px; color: var(--muted); }
+.question-input {
+  font: inherit;
+  color: var(--text);
+  background: var(--theirs);
+  border: 1px solid var(--border);
+  border-radius: 6px;
+  padding: 6px 8px;
+}
+.question-input:focus { outline: none; border-color: var(--accent); }
+.question-actions { display: flex; align-items: center; gap: 8px; margin-top: 2px; }
+.question-actions .spacer { flex: 1; }
+.question-card.answered { border-color: var(--ok); background: var(--ok-soft); }
+.question-card.answered .question-title { color: var(--ok); }
+
+/* choice card (offer_choices) ---------------------------------------------- */
+.choice-card {
+  border: 1px solid var(--border);
+  border-radius: 8px;
+  padding: 10px 12px;
+  background: var(--theirs);
+  margin-top: 6px;
+}
+.choice-question { margin-bottom: 8px; }
+.choice-options { display: flex; flex-wrap: wrap; gap: 6px; }
+.choice-btn { border-radius: 999px; padding: 5px 12px; }
+
+/* plan card (show_plan) ---------------------------------------------------- */
+.plan-card {
+  border: 1px solid var(--border);
+  border-radius: 8px;
+  padding: 10px 12px;
+  background: var(--theirs);
+  margin-top: 6px;
+}
+.plan-title { font-weight: 700; margin-bottom: 6px; }
+.plan-steps { list-style: none; margin: 0; padding: 0; display: flex; flex-direction: column; gap: 4px; }
+.plan-step { display: flex; align-items: baseline; gap: 8px; line-height: 1.4; }
+.plan-mark { flex: none; width: 14px; font-family: var(--mono); color: var(--muted); }
+.plan-step.done .plan-mark { color: var(--ok); }
+.plan-step.done .plan-text { color: var(--muted); text-decoration: line-through; }
+.plan-step.active .plan-mark { color: var(--accent); }
+.plan-step.active .plan-text { color: var(--text); font-weight: 600; }
+
 /* activity indicators ------------------------------------------------------ */
 .activity { display: flex; align-items: center; gap: 9px; margin-top: 10px; color: var(--muted); font-size: 12.5px; }
 .activity .loader { color: var(--accent); }
@@ -1439,7 +1505,7 @@ pre.code code { background: none; border: 0; padding: 0; font-size: 0.92em; }
 .xtab:hover { background: var(--theirs); color: var(--text); }
 .xtab.is-active { background: var(--theirs); color: var(--text); }
 .xp-pane { display: flex; flex-direction: column; flex: 1; min-height: 0; }
-.xp-bar { display: flex; gap: 6px; align-items: center; padding: 9px 12px; }
+.xp-bar { display: flex; flex-wrap: wrap; gap: 6px; align-items: center; padding: 9px 12px; }
 .xp-bar input { flex: 1; min-width: 0; }
 .xp-bar .grow { flex: 1; min-width: 0; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
 .chips { display: flex; flex-wrap: wrap; gap: 6px; padding: 0 12px 8px; }
@@ -1498,6 +1564,16 @@ pre.code code { background: none; border: 0; padding: 0; font-size: 0.92em; }
 .import-bar { display: flex; gap: 6px; margin: 4px 0 10px; }
 .import-bar input { flex: 1; min-width: 0; }
 
+details.catalog { margin: 10px 0; }
+details.catalog > summary {
+  cursor: pointer;
+  font: 600 11px var(--mono);
+  letter-spacing: 0.06em;
+  text-transform: uppercase;
+  color: var(--muted);
+}
+details.catalog[open] > summary { margin-bottom: 6px; }
+
 .file-actions { display: flex; align-items: center; gap: 10px; }
 .file-modal { width: min(880px, calc(100vw - 40px)); }
 .file-preview {
@@ -1950,9 +2026,29 @@ dialog.modal::backdrop { background: rgba(24, 22, 16, 0.55); backdrop-filter: bl
 .advisor-head { display: flex; align-items: center; gap: 8px; margin-bottom: 4px; }
 .advisor-glyph { color: var(--accent); font-size: 13px; line-height: 1; }
 .advisor-title { font: 600 10px var(--mono); letter-spacing: 0.08em; text-transform: uppercase; color: var(--muted); }
+.advisor-badge {
+  font: 600 10px var(--mono);
+  letter-spacing: 0.04em;
+  text-transform: uppercase;
+  padding: 1px 7px;
+  border-radius: 999px;
+  color: var(--accent);
+  background: var(--accent-soft);
+  border: 1px solid currentColor;
+}
 .advisor-text { color: var(--text); line-height: 1.5; }
-.advisor-code { border-left-color: var(--warn); }
-.advisor-code .advisor-glyph { color: var(--warn); }
+.advisor-code { border-left-color: var(--danger); background: var(--danger-soft); }
+.advisor-code .advisor-glyph,
+.advisor-code .advisor-badge { color: var(--danger); }
+.advisor-explain { border-left-color: var(--info); background: var(--info-soft); }
+.advisor-explain .advisor-glyph,
+.advisor-explain .advisor-badge { color: var(--info); }
+.advisor-advice { border-left-color: var(--ok); background: var(--ok-soft); }
+.advisor-advice .advisor-glyph,
+.advisor-advice .advisor-badge { color: var(--ok); }
+.advisor-summary { border-left-color: var(--muted); background: var(--muted-soft); }
+.advisor-summary .advisor-glyph,
+.advisor-summary .advisor-badge { color: var(--muted); }
 
 .brand .ver.ver-action { cursor: pointer; }
 .brand .ver.ver-action:hover { color: var(--accent); }

package/harness/packages/server/src/lib/agentTools.js

@@ -7,11 +7,15 @@ import {
   parseSkillMarkdown,
   parseSkillRef,
   fetchSkillFromGithub,
+  searchSkillsGithub,
   writeSkillFiles,
   getMcpRegistryServer,
   registryServerToConfig,
+  registryServerToCandidate,
+  searchMcpRegistry,
   normalizeMcpConfig,
   homeDir,
+  envValue,
   memorySlug,
   listMemoryTopics,
   readMemoryIndex,
@@ -37,6 +41,12 @@ function definition(name, description, parameters, required = []) {
 
 const DEFINITIONS = [
   definition('list_mcp', 'Lista los servidores MCP configurados (de tamnora.json y de la base).', {}),
+  definition(
+    'search_mcp',
+    'Busca servidores en el registro oficial de MCP y devuelve candidatos (id, nombre, descripción y env requerido) sin instalarlos. Para registrar uno, usá install_mcp con el nombre del registro.',
+    { query: { type: 'string', description: 'Texto a buscar, ej. "github" o "postgres"' } },
+    ['query']
+  ),
   definition(
     'install_mcp',
     'Registra un servidor MCP. stdio: pasá command (y args). http: pasá url. Para webs con JavaScript/Cloudflare (que fetch_url no lee) instalá un MCP de navegador, ej. command "npx" args ["-y","@playwright/mcp@latest"].',
@@ -57,6 +67,12 @@ const DEFINITIONS = [
   ),
   definition('remove_mcp', 'Elimina un servidor MCP guardado desde la consola.', { id: { type: 'string' } }, ['id']),
   definition('list_skills', 'Lista las skills instaladas y si están habilitadas.', {}),
+  definition(
+    'search_skills',
+    'Busca skills en GitHub y devuelve refs instalables (owner/repo/slug). Para instalarlas, usá install_skill con "ref".',
+    { query: { type: 'string', description: 'Texto a buscar, ej. "testing" o "react"' } },
+    ['query']
+  ),
   definition(
     'skill',
     'Carga el contenido completo de una skill por su id. Usala cuando una skill del índice aplique a la tarea.',
@@ -113,7 +129,7 @@ function decisionFor(ctx, name, args) {
   const value = perms[name];
   if (value === 'allow' || value === 'ask' || value === 'deny') return value;
   if (name === 'memory') return String(args?.action ?? 'read').toLowerCase() === 'write' ? 'ask' : 'allow';
-  return name.startsWith('list_') || name === 'skill' ? 'allow' : 'ask';
+  return name.startsWith('list_') || name.startsWith('search_') || name === 'skill' ? 'allow' : 'ask';
 }
 
 /**
@@ -144,6 +160,19 @@ export function createAgentTools(ctx) {
           source: s.source ?? 'config',
         })), null, 2);
 
+      case 'search_mcp': {
+        const query = String(args.query ?? '').trim();
+        if (!query) return 'Pasá "query" para buscar en el registro MCP.';
+        let servers;
+        try {
+          servers = await searchMcpRegistry(query, { limit: 10 });
+        } catch (error) {
+          return `No se pudo consultar el registro MCP: ${error.message}`;
+        }
+        if (!servers.length) return `Sin resultados para "${query}".`;
+        return JSON.stringify(servers.map(registryServerToCandidate), null, 2);
+      }
+
       case 'install_mcp': {
         if (args.registry || args.name) {
           let server;
@@ -223,6 +252,19 @@ export function createAgentTools(ctx) {
       case 'list_skills':
         return JSON.stringify(skillsView(ctx).map(({ id, name, enabled, description }) => ({ id, name, enabled, description })), null, 2);
 
+      case 'search_skills': {
+        const query = String(args.query ?? '').trim();
+        if (!query) return 'Pasá "query" para buscar skills.';
+        let results;
+        try {
+          results = await searchSkillsGithub(query, { token: envValue(['GITHUB_TOKEN', 'GH_TOKEN']) });
+        } catch (error) {
+          return `No se pudo buscar en GitHub: ${error.message}`;
+        }
+        if (!results.length) return `Sin resultados para "${query}".`;
+        return JSON.stringify(results, null, 2);
+      }
+
       case 'skill': {
         const id = String(args.name ?? args.id ?? '').trim();
         const skill = findSkill(ctx, id);
@@ -308,7 +350,7 @@ export function createAgentTools(ctx) {
     }
   }
 
-  // Tools de admin que no modifican nada (lístar/leer): disponibles en todo modo.
-  const readOnly = new Set(['list_mcp', 'list_skills', 'skill']);
+  // Tools de admin que no modifican nada (lístar/leer/buscar): disponibles en todo modo.
+  const readOnly = new Set(['list_mcp', 'search_mcp', 'list_skills', 'search_skills', 'skill']);
   return { definitions: DEFINITIONS, handles, execute, readOnly };
 }

package/harness/packages/server/src/lib/channels/telegram.js

@@ -474,6 +474,8 @@ export function startTelegramChannel(
       yes: false,
       onAsk,
       mcp,
+      mcpMode: ctx.effectiveMcpMode(),
+      mcpPinned: ctx.effectiveMcpPinned(),
     });
     const exposeAdmin = !mode.tools;
     const admin = ctx.agentTools;

package/harness/packages/server/src/lib/prompt.js

@@ -33,11 +33,12 @@ function workspacePreamble(cwd) {
  * @param {string[]} opts.files - instruction file names (e.g. ['AGENTS.md'])
  * @param {() => string} [opts.profileText] - user profile block, re-read on every call
  * @param {() => string} [opts.skillsText] - skills block, re-read on every call
+ * @param {() => string} [opts.mcpText] - MCP tool index block, re-read on every call
  * @param {() => string} [opts.scopeText] - strict-scope block, re-read on every call
  * @param {string[]} [opts.ruleFiles] - glob patterns of project rule files
  * @param {boolean} [opts.memory] - inject the project memory block
  */
-export function createPromptBuilder({ cwd, files, profileText, skillsText, scopeText, ruleFiles = [], memory = false }) {
+export function createPromptBuilder({ cwd, files, profileText, skillsText, mcpText, scopeText, ruleFiles = [], memory = false }) {
   const cache = new Map();
 
   async function buildFor(workspace) {
@@ -60,6 +61,8 @@ export function createPromptBuilder({ cwd, files, profileText, skillsText, scope
     if (profile) parts.push(profile);
     const extra = typeof skillsText === 'function' ? String(skillsText() ?? '').trim() : '';
     if (extra) parts.push(extra);
+    const mcp = typeof mcpText === 'function' ? String(mcpText() ?? '').trim() : '';
+    if (mcp) parts.push(mcp);
     if (memory) {
       const mem = memoryPrompt(key);
       if (mem) parts.push(mem);

package/harness/packages/server/src/lib/questions.js

@@ -0,0 +1,72 @@
+/**
+ * Broker para formularios interactivos (`ask_user`). El chat registra un pedido
+ * pendiente (`ask`) y lo espera mientras el SSE emite un evento `question`; la
+ * consola responde con `POST /api/questions/:askId`, que llama a `answer`. Los
+ * pedidos que nadie contesta expiran como cancelados.
+ *
+ * Igual que `approvals`, guarda el `meta` (sessionId, title, questions) para que
+ * un cliente **sin** stream abierto sepa que hay un formulario esperando.
+ *
+ * @param {object} [opts]
+ * @param {number} [opts.timeoutMs] - how long to wait before cancelling
+ */
+export function createQuestionBroker({ timeoutMs = 900000 } = {}) {
+  const pending = new Map();
+
+  function settle(id, answers, ok) {
+    const entry = pending.get(id);
+    if (!entry) return false;
+    clearTimeout(entry.timer);
+    pending.delete(id);
+    entry.resolve({ ok, answers: answers ?? null });
+    return true;
+  }
+
+  return {
+    /** Register a pending form; resolves to `{ ok, answers }`. */
+    ask(id, meta = {}) {
+      return new Promise((resolve) => {
+        const timer = setTimeout(() => settle(id, null, false), timeoutMs);
+        timer.unref?.();
+        pending.set(id, { resolve, timer, requestedAt: Date.now(), ...meta });
+      });
+    },
+
+    /** Answer a pending form. Returns false if it expired or is unknown. */
+    answer(id, answers) {
+      return settle(id, answers, true);
+    },
+
+    /** Cancel every pending form of a session (used when the run stops). */
+    cancelForSession(sessionId) {
+      for (const [id, entry] of pending) {
+        if (entry.sessionId === sessionId) settle(id, null, false);
+      }
+    },
+
+    /** Cancel everything still pending (used on shutdown). */
+    cancelAll() {
+      for (const id of [...pending.keys()]) settle(id, null, false);
+    },
+
+    /** Lo que sigue esperando, para que cualquier cliente pueda mostrarlo. */
+    list({ sessionId } = {}) {
+      const items = [];
+      for (const [askId, entry] of pending) {
+        if (sessionId !== undefined && entry.sessionId !== sessionId) continue;
+        items.push({
+          askId,
+          sessionId: entry.sessionId ?? null,
+          title: entry.title ?? '',
+          questions: entry.questions ?? [],
+          requestedAt: entry.requestedAt,
+        });
+      }
+      return items.sort((a, b) => a.requestedAt - b.requestedAt);
+    },
+
+    get pending() {
+      return pending.size;
+    },
+  };
+}

package/harness/packages/server/src/lib/scheduler.js

@@ -53,7 +53,16 @@ async function runAgentSchedule(ctx, schedule) {
   ctx.store.addMessage(sessionId, userMessage);
   const prefixLength = messages.length;
 
-  const local = createTools({ root: cwd, enabled: mode.tools ?? undefined, permissions: ctx.config.permissions, yes: true, mcp, signal });
+  const local = createTools({
+    root: cwd,
+    enabled: mode.tools ?? undefined,
+    permissions: ctx.config.permissions,
+    yes: true,
+    mcp,
+    mcpMode: ctx.effectiveMcpMode(),
+    mcpPinned: ctx.effectiveMcpPinned(),
+    signal,
+  });
   const exposeAdmin = !mode.tools;
   const admin = ctx.agentTools;
   const emit = (type, data, agentId = null) => ctx.runs.emit(sessionId, type, data, { agentId });
@@ -64,6 +73,8 @@ async function runAgentSchedule(ctx, schedule) {
     model,
     permissions: ctx.config.permissions,
     mcp,
+    mcpMode: ctx.effectiveMcpMode(),
+    mcpPinned: ctx.effectiveMcpPinned(),
     signal,
     exclude: admin.definitions.map((d) => d.function.name),
     emit,

package/harness/packages/server/src/lib/tasks.js

@@ -32,6 +32,8 @@ export function createSubagentTool(ctx, options) {
     model,
     permissions = {},
     mcp = null,
+    mcpMode = 'auto',
+    mcpPinned = [],
     signal,
     exclude = [],
     emit,
@@ -67,7 +69,7 @@ export function createSubagentTool(ctx, options) {
       Array.isArray(args.tools) && args.tools.length
         ? args.tools.filter((tool) => !exclude.includes(tool))
         : mode.tools ?? undefined;
-    const local = createTools({ root: cwd, enabled, permissions, yes: false, mcp, signal });
+    const local = createTools({ root: cwd, enabled, permissions, yes: false, mcp, mcpMode, mcpPinned, signal });
     const basePrompt = await ctx.systemPromptFor(cwd);
     const messages = [
       { role: 'system', content: `${basePrompt}\n\n${SUBAGENT_PROMPT}\n\nTarea: ${description}` },

package/harness/packages/server/src/routes/chat.js

@@ -76,12 +76,28 @@ export function registerChat(route, ctx) {
     sendJson(res, 200, { pending: ctx.approvals.list({ sessionId }) });
   });
 
+  // Respuesta de un formulario interactivo (`ask_user`).
+  route('POST', '/api/questions/:askId', async ({ req, res, params }) => {
+    const body = await readJson(req);
+    const answers = body.answers && typeof body.answers === 'object' ? body.answers : {};
+    if (!ctx.questions.answer(params.askId, answers)) {
+      return sendError(res, 404, 'Formulario expirado o inexistente.');
+    }
+    sendJson(res, 200, { ok: true });
+  });
+
+  route('GET', '/api/questions', ({ res, query }) => {
+    const sessionId = query.get('sessionId') ?? undefined;
+    sendJson(res, 200, { pending: ctx.questions.list({ sessionId }) });
+  });
+
   route('POST', '/api/sessions/:id/stop', ({ res, params }) => {
     if (!ctx.runs.isActive(params.id)) return sendJson(res, 200, { ok: true, stopped: false });
     ctx.runs.cancel(params.id);
-    // Un run esperando una aprobacion quedaria colgado: la denegamos para que
-    // el bucle del agente pueda desenrollarse y termine.
+    // Un run esperando una aprobacion o un formulario quedaria colgado: los
+    // resolvemos para que el bucle del agente pueda desenrollarse y termine.
     ctx.approvals.cancelForSession(params.id);
+    ctx.questions.cancelForSession(params.id);
     sendJson(res, 200, { ok: true, stopped: true });
   });
 
@@ -163,6 +179,7 @@ export function registerChat(route, ctx) {
       }
       ctx.runs.cancel(sessionId);
       ctx.approvals.cancelForSession(sessionId);
+      ctx.questions.cancelForSession(sessionId);
       await ctx.runs.waitForIdle(sessionId);
     }
 
@@ -208,13 +225,23 @@ export function registerChat(route, ctx) {
           ctx.runs.emit(sessionId, 'permission_resolved', { askId, allow });
           return allow;
         };
+    const onQuestion = async ({ title, questions }) => {
+      const askId = randomUUID();
+      ctx.runs.emit(sessionId, 'question', { askId, sessionId, title, questions });
+      const result = await ctx.questions.ask(askId, { sessionId, title, questions });
+      ctx.runs.emit(sessionId, 'question_answered', { askId, answers: result.answers, cancelled: !result.ok });
+      return result;
+    };
     const local = createTools({
       root: sessionCwd,
       enabled,
       permissions: ctx.config.permissions,
       yes: autoApprove,
       onAsk,
+      onQuestion,
       mcp,
+      mcpMode: ctx.effectiveMcpMode(),
+      mcpPinned: ctx.effectiveMcpPinned(),
       signal: ctx.runs.signal(sessionId),
     });
     // En modo plan (solo lectura) no exponemos las tools de administración.
@@ -228,6 +255,8 @@ export function registerChat(route, ctx) {
       model,
       permissions: ctx.config.permissions,
       mcp,
+      mcpMode: ctx.effectiveMcpMode(),
+      mcpPinned: ctx.effectiveMcpPinned(),
       signal: ctx.runs.signal(sessionId),
       exclude: [...admin.definitions.map((d) => d.function.name), ...(ctx.plugins?.list?.().map((t) => t.name) ?? [])],
       emit: emitAgent,

package/harness/packages/server/src/routes/mcp.js

@@ -3,8 +3,14 @@ import {
   mcpTransport,
   getMcpRegistryServer,
   registryServerToConfig,
+  registryServerToCandidate,
+  searchMcpRegistry,
   normalizeMcpConfig,
+  MCP_CATALOG,
+  mcpCatalogEntry,
   maskEnv,
+  useLazyMcp,
+  MCP_AUTO_THRESHOLD,
 } from '../lib/core.js';
 import { readJson, sendJson, sendError } from '../lib/http.js';
 
@@ -79,11 +85,15 @@ function parseServer(body, id, existing = null) {
 export function registerMcp(route, ctx) {
   route('GET', '/api/mcp', async ({ res, query }) => {
     const servers = listServers(ctx);
+    const mode = ctx.effectiveMcpMode();
+    const pinned = ctx.effectiveMcpPinned();
+    let toolCount = null;
 
     if (query.get('connect')) {
       const connectable = ctx.mergedMcpServers().filter((s) => s.enabled !== false);
       const registry = await buildMcpRegistry(connectable);
       try {
+        toolCount = registry.definitions.length;
         for (const server of servers) {
           const session = registry.sessions.find((s) => s.server.id === server.id);
           const failure = registry.errors.find((e) => e.server.id === server.id);
@@ -108,14 +118,56 @@ export function registerMcp(route, ctx) {
       }
     }
 
-    sendJson(res, 200, { servers });
+    sendJson(res, 200, {
+      servers,
+      mode,
+      pinned,
+      threshold: MCP_AUTO_THRESHOLD,
+      toolCount,
+      lazy: toolCount === null ? null : useLazyMcp(mode, toolCount, MCP_AUTO_THRESHOLD),
+    });
+  });
+
+  route('GET', '/api/mcp/catalog', ({ res }) => {
+    const installed = new Set(ctx.mergedMcpServers().map((s) => s.id));
+    sendJson(res, 200, {
+      catalog: MCP_CATALOG.map((entry) => ({
+        id: entry.id,
+        name: entry.name,
+        description: entry.description ?? '',
+        transport: entry.type === 'http' ? 'http' : 'stdio',
+        command: entry.command ?? null,
+        args: entry.args ?? [],
+        requiredEnv: entry.requiredEnv ?? [],
+        installed: installed.has(entry.id),
+      })),
+    });
+  });
+
+  route('GET', '/api/mcp/search', async ({ res, query }) => {
+    const q = String(query.get('q') ?? '').trim();
+    if (!q) return sendJson(res, 200, { results: [] });
+    let servers;
+    try {
+      servers = await searchMcpRegistry(q, { limit: 15 });
+    } catch (error) {
+      return sendError(res, 502, `No pude consultar el registro MCP: ${error.message}`);
+    }
+    const installed = new Set(ctx.mergedMcpServers().map((s) => s.id));
+    sendJson(res, 200, {
+      results: servers.map(registryServerToCandidate).map((c) => ({ ...c, installed: installed.has(c.id) })),
+    });
   });
 
   route('POST', '/api/mcp/import', async ({ req, res }) => {
     const body = await readJson(req);
     let record;
     try {
-      if (body.json !== undefined || body.config !== undefined) {
+      if (body.catalog) {
+        const entry = mcpCatalogEntry(String(body.catalog));
+        if (!entry) return sendError(res, 404, 'Ese servidor no está en el catálogo.');
+        record = entry;
+      } else if (body.json !== undefined || body.config !== undefined) {
         record = normalizeMcpConfig(body.json ?? body.config, body.id);
       } else if (body.name) {
         const server = await getMcpRegistryServer(String(body.name), { strict: true });