@puredesktop/puredesktop-ui-bridge 2.1.8 → 2.1.9

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@puredesktop/puredesktop-ui-bridge",
-  "version": "2.1.8",
+  "version": "2.1.9",
   "description": "PureScience plugin SDK — bridge client, theme, and shared UI",
   "type": "module",
   "repository": {
@@ -9,7 +9,7 @@
     "directory": "packages/ui"
   },
   "publishConfig": {
-    "access": "restricted",
+    "access": "public",
     "registry": "https://registry.npmjs.org"
   },
   "files": [
@@ -20,6 +20,9 @@
     "./agents/appAgentConnectors.ts": "./src/agents/appAgentConnectors.ts",
     "./agents/appAgentConnectors": "./src/agents/appAgentConnectors.ts",
     "./agents/appAgentConnectors.js": "./src/agents/appAgentConnectors.ts",
+    "./agents/mcpServerPresets.ts": "./src/agents/mcpServerPresets.ts",
+    "./agents/mcpServerPresets": "./src/agents/mcpServerPresets.ts",
+    "./agents/mcpServerPresets.js": "./src/agents/mcpServerPresets.ts",
     "./agents/runtime/agentLiveReducer.ts": "./src/agents/runtime/agentLiveReducer.ts",
     "./agents/runtime/agentLiveReducer": "./src/agents/runtime/agentLiveReducer.ts",
     "./agents/runtime/agentLiveReducer.js": "./src/agents/runtime/agentLiveReducer.ts",
@@ -43,6 +46,9 @@
     "./agents/runtime/mergeUsageTurn.ts": "./src/agents/runtime/mergeUsageTurn.ts",
     "./agents/runtime/mergeUsageTurn": "./src/agents/runtime/mergeUsageTurn.ts",
     "./agents/runtime/mergeUsageTurn.js": "./src/agents/runtime/mergeUsageTurn.ts",
+    "./agents/runtime/pendingAsks.ts": "./src/agents/runtime/pendingAsks.ts",
+    "./agents/runtime/pendingAsks": "./src/agents/runtime/pendingAsks.ts",
+    "./agents/runtime/pendingAsks.js": "./src/agents/runtime/pendingAsks.ts",
     "./agents/runtime/pendingToolCalls.ts": "./src/agents/runtime/pendingToolCalls.ts",
     "./agents/runtime/pendingToolCalls": "./src/agents/runtime/pendingToolCalls.ts",
     "./agents/runtime/pendingToolCalls.js": "./src/agents/runtime/pendingToolCalls.ts",
@@ -59,6 +65,9 @@
     "./bridge/agents": "./src/bridge/agents.ts",
     "./bridge/agents.js": "./src/bridge/agents.ts",
     "./bridge/agents.ts": "./src/bridge/agents.ts",
+    "./bridge/agentScopeDefaults.ts": "./src/bridge/agentScopeDefaults.ts",
+    "./bridge/agentScopeDefaults": "./src/bridge/agentScopeDefaults.ts",
+    "./bridge/agentScopeDefaults.js": "./src/bridge/agentScopeDefaults.ts",
     "./bridge/agentToolHandlers.ts": "./src/bridge/agentToolHandlers.ts",
     "./bridge/agentToolHandlers": "./src/bridge/agentToolHandlers.ts",
     "./bridge/agentToolHandlers.js": "./src/bridge/agentToolHandlers.ts",
@@ -129,9 +138,6 @@
     "./bridge/googleAuth.ts": "./src/bridge/googleAuth.ts",
     "./bridge/googleAuth": "./src/bridge/googleAuth.ts",
     "./bridge/googleAuth.js": "./src/bridge/googleAuth.ts",
-    "./bridge/googleProviderConfig.ts": "./src/bridge/googleProviderConfig.ts",
-    "./bridge/googleProviderConfig": "./src/bridge/googleProviderConfig.ts",
-    "./bridge/googleProviderConfig.js": "./src/bridge/googleProviderConfig.ts",
     "./bridge/index.ts": "./src/bridge/index.ts",
     "./bridge/index": "./src/bridge/index.ts",
     "./bridge/index.js": "./src/bridge/index.ts",
@@ -141,12 +147,21 @@
     "./bridge/inlinePreview": "./src/bridge/inlinePreview.ts",
     "./bridge/inlinePreview.js": "./src/bridge/inlinePreview.ts",
     "./bridge/inlinePreview.ts": "./src/bridge/inlinePreview.ts",
+    "./bridge/mcpClient.mjs": "./src/bridge/mcpClient.mjs",
+    "./bridge/mcpClient": "./src/bridge/mcpClient.mjs",
+    "./bridge/mcpClient.js": "./src/bridge/mcpClient.mjs",
     "./bridge/methods.mjs": "./src/bridge/methods.mjs",
     "./bridge/methods": "./src/bridge/methods.mjs",
     "./bridge/methods.js": "./src/bridge/methods.mjs",
     "./bridge/network.mjs": "./src/bridge/network.mjs",
     "./bridge/network": "./src/bridge/network.mjs",
     "./bridge/network.js": "./src/bridge/network.mjs",
+    "./bridge/notifications.mjs": "./src/bridge/notifications.mjs",
+    "./bridge/notifications": "./src/bridge/notifications.mjs",
+    "./bridge/notifications.js": "./src/bridge/notifications.mjs",
+    "./bridge/operations.mjs": "./src/bridge/operations.mjs",
+    "./bridge/operations": "./src/bridge/operations.mjs",
+    "./bridge/operations.js": "./src/bridge/operations.mjs",
     "./bridge/os.mjs": "./src/bridge/os.mjs",
     "./bridge/os": "./src/bridge/os.mjs",
     "./bridge/os.js": "./src/bridge/os.mjs",
@@ -255,6 +270,9 @@
     "./bridge/react/usePlatformJsonStore.tsx": "./src/bridge/react/usePlatformJsonStore.tsx",
     "./bridge/react/usePlatformJsonStore": "./src/bridge/react/usePlatformJsonStore.tsx",
     "./bridge/react/usePlatformJsonStore.js": "./src/bridge/react/usePlatformJsonStore.tsx",
+    "./bridge/react/usePlatformOperations.tsx": "./src/bridge/react/usePlatformOperations.tsx",
+    "./bridge/react/usePlatformOperations": "./src/bridge/react/usePlatformOperations.tsx",
+    "./bridge/react/usePlatformOperations.js": "./src/bridge/react/usePlatformOperations.tsx",
     "./bridge/react/usePlatformPreferences.tsx": "./src/bridge/react/usePlatformPreferences.tsx",
     "./bridge/react/usePlatformPreferences": "./src/bridge/react/usePlatformPreferences.tsx",
     "./bridge/react/usePlatformPreferences.js": "./src/bridge/react/usePlatformPreferences.tsx",
@@ -389,6 +407,9 @@
     "./components/agents/index.js": "./src/components/agents/index.ts",
     "./components/agents": "./src/components/agents/index.ts",
     "./components/agents.js": "./src/components/agents/index.ts",
+    "./components/agents/QuestionRequestList.tsx": "./src/components/agents/QuestionRequestList.tsx",
+    "./components/agents/QuestionRequestList": "./src/components/agents/QuestionRequestList.tsx",
+    "./components/agents/QuestionRequestList.js": "./src/components/agents/QuestionRequestList.tsx",
     "./components/assets/asset-library/AssetLibraryDialog.tsx": "./src/components/assets/asset-library/AssetLibraryDialog.tsx",
     "./components/assets/asset-library/AssetLibraryDialog": "./src/components/assets/asset-library/AssetLibraryDialog.tsx",
     "./components/assets/asset-library/AssetLibraryDialog.js": "./src/components/assets/asset-library/AssetLibraryDialog.tsx",
@@ -623,6 +644,9 @@
     "./components/common/connections/index.js": "./src/components/common/connections/index.ts",
     "./components/common/connections": "./src/components/common/connections/index.ts",
     "./components/common/connections.js": "./src/components/common/connections/index.ts",
+    "./components/common/connections/ProviderConnection.tsx": "./src/components/common/connections/ProviderConnection.tsx",
+    "./components/common/connections/ProviderConnection": "./src/components/common/connections/ProviderConnection.tsx",
+    "./components/common/connections/ProviderConnection.js": "./src/components/common/connections/ProviderConnection.tsx",
     "./components/common/containers/AppFrame.tsx": "./src/components/common/containers/AppFrame.tsx",
     "./components/common/containers/AppFrame": "./src/components/common/containers/AppFrame.tsx",
     "./components/common/containers/AppFrame.js": "./src/components/common/containers/AppFrame.tsx",
@@ -1122,6 +1146,12 @@
     "./editor/toolbarOverlays.ts": "./src/editor/toolbarOverlays.ts",
     "./editor/toolbarOverlays": "./src/editor/toolbarOverlays.ts",
     "./editor/toolbarOverlays.js": "./src/editor/toolbarOverlays.ts",
+    "./ics/generateIcs.ts": "./src/ics/generateIcs.ts",
+    "./ics/generateIcs": "./src/ics/generateIcs.ts",
+    "./ics/generateIcs.js": "./src/ics/generateIcs.ts",
+    "./net/httpRetry.ts": "./src/net/httpRetry.ts",
+    "./net/httpRetry": "./src/net/httpRetry.ts",
+    "./net/httpRetry.js": "./src/net/httpRetry.ts",
     "./theme/appAccents.ts": "./src/theme/appAccents.ts",
     "./theme/appAccents": "./src/theme/appAccents.ts",
     "./theme/appAccents.js": "./src/theme/appAccents.ts",

package/src/agents/mcpServerPresets.test.ts

@@ -0,0 +1,105 @@
+import { describe, expect, it } from 'vitest'
+import {
+  MCP_SERVER_PRESETS,
+  MCP_SERVER_PRESET_CATEGORY_LABELS,
+  MCP_PRESET_RUNTIME_RANK,
+  findMcpServerPreset,
+  mcpPresetRuntime,
+} from './mcpServerPresets.js'
+
+describe('MCP_SERVER_PRESETS', () => {
+  it('uses unique registry-safe ids', () => {
+    const ids = MCP_SERVER_PRESETS.map(preset => preset.id)
+    expect(new Set(ids).size).toBe(ids.length)
+    for (const id of ids) {
+      // Registry constraint from the mcp-client store: [a-z0-9-]+ (no `__`).
+      expect(id).toMatch(/^[a-z0-9-]+$/)
+    }
+  })
+
+  it('gives every preset a coherent transport target', () => {
+    for (const preset of MCP_SERVER_PRESETS) {
+      if (preset.transport === 'stdio') {
+        expect(preset.command, preset.id).toBeTruthy()
+        expect(preset.url, preset.id).toBeUndefined()
+      } else {
+        expect(preset.url, preset.id).toMatch(/^https:\/\//)
+        expect(preset.command, preset.id).toBeUndefined()
+      }
+    }
+  })
+
+  it('labels every category used by a preset', () => {
+    for (const preset of MCP_SERVER_PRESETS) {
+      expect(MCP_SERVER_PRESET_CATEGORY_LABELS[preset.category]).toBeTruthy()
+    }
+  })
+
+  it('includes the academic core (arxiv, pubmed, wikipedia)', () => {
+    for (const id of ['arxiv', 'pubmed', 'wikipedia']) {
+      expect(findMcpServerPreset(id), id).toBeDefined()
+    }
+  })
+
+  it('marks token-gated presets so the UI can ask up front', () => {
+    expect(findMcpServerPreset('github')?.requiresToken).toBe(true)
+  })
+
+  it('gives local (stdio) academic presets an iconDomain so they get a real logo', () => {
+    for (const id of ['arxiv', 'pubmed', 'wikipedia']) {
+      const preset = findMcpServerPreset(id)
+      expect(preset?.transport, id).toBe('stdio')
+      expect(preset?.iconDomain, id).toBeTruthy()
+    }
+  })
+
+  it('keeps every iconDomain a bare host (no scheme or path)', () => {
+    for (const preset of MCP_SERVER_PRESETS) {
+      if (!preset.iconDomain) continue
+      expect(preset.iconDomain, preset.id).toMatch(/^[a-z0-9.-]+$/i)
+    }
+  })
+
+  it('classifies runtime by transport and runner', () => {
+    expect(mcpPresetRuntime(findMcpServerPreset('deepwiki')!)).toBe('remote')
+    expect(mcpPresetRuntime(findMcpServerPreset('memory')!)).toBe('node')
+    expect(mcpPresetRuntime(findMcpServerPreset('arxiv')!)).toBe('python')
+  })
+
+  it('ranks no-install runtimes ahead of Python', () => {
+    expect(MCP_PRESET_RUNTIME_RANK.remote).toBeLessThan(
+      MCP_PRESET_RUNTIME_RANK.node,
+    )
+    expect(MCP_PRESET_RUNTIME_RANK.node).toBeLessThan(
+      MCP_PRESET_RUNTIME_RANK.python,
+    )
+  })
+
+  it('offers a broad set of no-install (remote+node) servers', () => {
+    const noInstall = MCP_SERVER_PRESETS.filter(
+      p => mcpPresetRuntime(p) !== 'python',
+    )
+    expect(noInstall.length).toBeGreaterThanOrEqual(12)
+  })
+
+  it('carries auth + env var for apiKey presets', () => {
+    const exa = findMcpServerPreset('exa')
+    expect(exa?.auth).toBe('apiKey')
+    expect(exa?.apiKeyEnvVar).toBe('EXA_API_KEY')
+    expect(exa?.requiresToken).toBe(true)
+    expect(mcpPresetRuntime(exa!)).toBe('node')
+  })
+
+  it('marks remote token servers as bearer', () => {
+    expect(findMcpServerPreset('github')?.auth).toBe('bearer')
+    expect(findMcpServerPreset('stripe')?.auth).toBe('bearer')
+  })
+
+  it('keeps keyless remote servers auth-free', () => {
+    for (const id of ['deepwiki', 'context7', 'cloudflare-docs']) {
+      const preset = findMcpServerPreset(id)
+      expect(preset, id).toBeDefined()
+      expect(preset?.auth ?? 'none', id).toBe('none')
+    }
+  })
+})

package/src/agents/mcpServerPresets.ts

@@ -0,0 +1,380 @@
+/**
+ * Curated MCP servers preloaded with PureDesktop — one click to add from the
+ * assistant Tools library (nothing is enabled until the user confirms).
+ * Selection favors keyless servers; entries that need a key say so and the
+ * UI asks for the bearer token after the first failing test.
+ *
+ * `stdio` presets run locally and need their runner on PATH (`npx` → Node,
+ * `uvx` → uv); remote presets need nothing. The Test button verifies either
+ * way, so a missing runner or a renamed package fails loudly, not silently.
+ */
+
+export type McpServerPresetTransport = 'http' | 'sse' | 'stdio'
+
+export type McpServerPresetCategory =
+  | 'academic'
+  | 'knowledge'
+  | 'documentation'
+  | 'developer'
+
+export type McpServerPresetAuth = 'none' | 'bearer' | 'apiKey'
+
+export interface McpServerPreset {
+  /** Registry id — `[a-z0-9-]+`, stable across releases. */
+  id: string
+  label: string
+  description: string
+  category: McpServerPresetCategory
+  transport: McpServerPresetTransport
+  url?: string
+  command?: string
+  args?: string[]
+  /**
+   * How the server authenticates: `bearer` (Authorization header on a remote
+   * server) or `apiKey` (an env var, named by `apiKeyEnvVar`, on a local stdio
+   * server). Omitted → no auth.
+   */
+  auth?: McpServerPresetAuth
+  /** Env var the key is passed as, for `auth: 'apiKey'` servers. */
+  apiKeyEnvVar?: string
+  /** Preset needs a secret (bearer token or API key) before it will connect. */
+  requiresToken?: boolean
+  /** Short caveat shown with the entry (runner needed, rate limits, …). */
+  note?: string
+  /**
+   * Site to pull a favicon from for the row logo. Auto-derived from `url` for
+   * remote presets; set explicitly for local (stdio) presets that still have a
+   * recognizable home page (arXiv, PubMed, …) so they don't fall back to plain
+   * initials.
+   */
+  iconDomain?: string
+}
+
+export const MCP_SERVER_PRESETS: readonly McpServerPreset[] = [
+  // ---- Academic research ----------------------------------------------------
+  {
+    id: 'arxiv',
+    label: 'arXiv',
+    description:
+      'Search arXiv preprints, fetch abstracts, and download papers for analysis.',
+    category: 'academic',
+    transport: 'stdio',
+    command: 'uvx',
+    args: ['arxiv-mcp-server'],
+    note: 'Python server — needs uv (one-time install).',
+    iconDomain: 'arxiv.org',
+  },
+  {
+    id: 'pubmed',
+    label: 'PubMed',
+    description:
+      'Search PubMed biomedical literature and fetch article metadata and abstracts.',
+    category: 'academic',
+    transport: 'stdio',
+    command: 'uvx',
+    args: ['pubmedmcp'],
+    note: 'Python server — needs uv (one-time install).',
+    iconDomain: 'pubmed.ncbi.nlm.nih.gov',
+  },
+  {
+    id: 'wikipedia',
+    label: 'Wikipedia',
+    description:
+      'Look up and summarize Wikipedia articles with full-text search.',
+    category: 'academic',
+    transport: 'stdio',
+    command: 'uvx',
+    args: ['wikipedia-mcp'],
+    note: 'Python server — needs uv (one-time install).',
+    iconDomain: 'wikipedia.org',
+  },
+  {
+    id: 'huggingface',
+    label: 'Hugging Face',
+    description:
+      'Search models, datasets, Spaces, and daily papers on the Hugging Face Hub.',
+    category: 'academic',
+    transport: 'http',
+    url: 'https://huggingface.co/mcp',
+    note: 'Remote server; anonymous access is rate-limited.',
+  },
+  {
+    id: 'exa',
+    label: 'Exa research',
+    description:
+      'Neural web + research-paper search with full-text retrieval — strong for academic literature.',
+    category: 'academic',
+    transport: 'stdio',
+    command: 'npx',
+    args: ['-y', 'exa-mcp-server'],
+    auth: 'apiKey',
+    apiKeyEnvVar: 'EXA_API_KEY',
+    requiresToken: true,
+    note: 'Runs via npx (Node). Needs a free Exa API key (asked for after adding).',
+    iconDomain: 'exa.ai',
+  },
+
+  // ---- General knowledge work ----------------------------------------------
+  {
+    id: 'fetch',
+    label: 'Web fetch',
+    description:
+      'Fetch a web page and convert it to markdown for reading and citation.',
+    category: 'knowledge',
+    transport: 'stdio',
+    command: 'uvx',
+    args: ['mcp-server-fetch'],
+    note: 'Python reference server — needs uv (one-time install).',
+    iconDomain: 'developer.mozilla.org',
+  },
+  {
+    id: 'duckduckgo',
+    label: 'DuckDuckGo search',
+    description: 'Key-free web search with content extraction.',
+    category: 'knowledge',
+    transport: 'stdio',
+    command: 'uvx',
+    args: ['duckduckgo-mcp-server'],
+    note: 'Python server — needs uv (one-time install).',
+    iconDomain: 'duckduckgo.com',
+  },
+  {
+    id: 'memory',
+    label: 'Memory (knowledge graph)',
+    description:
+      'Persistent knowledge-graph memory agents can read and extend across sessions.',
+    category: 'knowledge',
+    transport: 'stdio',
+    command: 'npx',
+    args: ['-y', '@modelcontextprotocol/server-memory'],
+    note: 'Reference server; runs locally via npx.',
+    iconDomain: 'modelcontextprotocol.io',
+  },
+  {
+    id: 'sequential-thinking',
+    label: 'Sequential thinking',
+    description:
+      'Structured step-by-step reasoning scratchpad for complex problems.',
+    category: 'knowledge',
+    transport: 'stdio',
+    command: 'npx',
+    args: ['-y', '@modelcontextprotocol/server-sequential-thinking'],
+    note: 'Reference server; runs locally via npx.',
+    iconDomain: 'modelcontextprotocol.io',
+  },
+  {
+    id: 'time',
+    label: 'Time & timezones',
+    description: 'Current time and timezone conversion.',
+    category: 'knowledge',
+    transport: 'stdio',
+    command: 'uvx',
+    args: ['mcp-server-time'],
+    note: 'Python reference server — needs uv (one-time install).',
+    iconDomain: 'modelcontextprotocol.io',
+  },
+  {
+    id: 'tavily',
+    label: 'Tavily search',
+    description:
+      'Web search, extract, and crawl tuned for LLM answers with citations.',
+    category: 'knowledge',
+    transport: 'stdio',
+    command: 'npx',
+    args: ['-y', 'tavily-mcp'],
+    auth: 'apiKey',
+    apiKeyEnvVar: 'TAVILY_API_KEY',
+    requiresToken: true,
+    note: 'Runs via npx (Node). Needs a Tavily API key (asked for after adding).',
+    iconDomain: 'tavily.com',
+  },
+  {
+    id: 'brave-search',
+    label: 'Brave Search',
+    description: 'Independent web and local search index.',
+    category: 'knowledge',
+    transport: 'stdio',
+    command: 'npx',
+    args: ['-y', '@modelcontextprotocol/server-brave-search'],
+    auth: 'apiKey',
+    apiKeyEnvVar: 'BRAVE_API_KEY',
+    requiresToken: true,
+    note: 'Runs via npx (Node). Needs a Brave Search API key (asked for after adding).',
+    iconDomain: 'search.brave.com',
+  },
+  {
+    id: 'firecrawl',
+    label: 'Firecrawl',
+    description:
+      'Scrape, crawl, and structure whole websites into clean markdown or JSON.',
+    category: 'knowledge',
+    transport: 'stdio',
+    command: 'npx',
+    args: ['-y', 'firecrawl-mcp'],
+    auth: 'apiKey',
+    apiKeyEnvVar: 'FIRECRAWL_API_KEY',
+    requiresToken: true,
+    note: 'Runs via npx (Node). Needs a Firecrawl API key (asked for after adding).',
+    iconDomain: 'firecrawl.dev',
+  },
+
+  // ---- Documentation --------------------------------------------------------
+  {
+    id: 'context7',
+    label: 'Context7 docs',
+    description:
+      'Version-accurate library and framework documentation for grounded answers.',
+    category: 'documentation',
+    transport: 'http',
+    url: 'https://mcp.context7.com/mcp',
+    note: 'Remote server; anonymous tier is rate-limited.',
+  },
+  {
+    id: 'deepwiki',
+    label: 'DeepWiki',
+    description:
+      'Ask questions about public GitHub repositories via generated wikis.',
+    category: 'documentation',
+    transport: 'http',
+    url: 'https://mcp.deepwiki.com/mcp',
+    note: 'Remote server, key-free.',
+  },
+  {
+    id: 'microsoft-learn',
+    label: 'Microsoft Learn',
+    description:
+      'Search and read Microsoft/Azure documentation grounded to current pages.',
+    category: 'documentation',
+    transport: 'http',
+    url: 'https://learn.microsoft.com/api/mcp',
+    note: 'Remote server, key-free.',
+  },
+  {
+    id: 'cloudflare-docs',
+    label: 'Cloudflare Docs',
+    description:
+      'Search and read Cloudflare developer documentation, grounded to current pages.',
+    category: 'documentation',
+    transport: 'sse',
+    url: 'https://docs.mcp.cloudflare.com/sse',
+    note: 'Remote server, key-free.',
+    iconDomain: 'cloudflare.com',
+  },
+
+  // ---- Developer ------------------------------------------------------------
+  {
+    id: 'git',
+    label: 'Git (local repos)',
+    description:
+      'Inspect and search local git repositories: log, diff, blame, status.',
+    category: 'developer',
+    transport: 'stdio',
+    command: 'uvx',
+    args: ['mcp-server-git'],
+    note: 'Python reference server — needs uv (one-time install).',
+    iconDomain: 'git-scm.com',
+  },
+  {
+    id: 'github',
+    label: 'GitHub',
+    description:
+      'Repositories, issues, and pull requests through the official GitHub MCP.',
+    category: 'developer',
+    transport: 'http',
+    url: 'https://api.githubcopilot.com/mcp/',
+    auth: 'bearer',
+    requiresToken: true,
+    note: 'Needs a GitHub personal access token (asked for after adding).',
+    iconDomain: 'github.com',
+  },
+  {
+    id: 'playwright',
+    label: 'Playwright browser',
+    description:
+      'Drive a real browser: navigate, click, fill, and read pages for the agent.',
+    category: 'developer',
+    transport: 'stdio',
+    command: 'npx',
+    args: ['-y', '@playwright/mcp@latest'],
+    note: 'Runs via npx (Node); downloads a browser on first use.',
+    iconDomain: 'playwright.dev',
+  },
+  {
+    id: 'everything',
+    label: 'Everything (demo)',
+    description:
+      'Reference server exercising every MCP feature — handy for trying tools out.',
+    category: 'developer',
+    transport: 'stdio',
+    command: 'npx',
+    args: ['-y', '@modelcontextprotocol/server-everything'],
+    note: 'Reference server; runs locally via npx.',
+    iconDomain: 'modelcontextprotocol.io',
+  },
+  {
+    id: 'chart',
+    label: 'Charts (AntV)',
+    description:
+      'Generate 25+ chart types (line, bar, pie, maps, …) as images from data.',
+    category: 'developer',
+    transport: 'stdio',
+    command: 'npx',
+    args: ['-y', '@antv/mcp-server-chart'],
+    note: 'Runs via npx (Node).',
+    iconDomain: 'antv.antgroup.com',
+  },
+  {
+    id: 'stripe',
+    label: 'Stripe',
+    description:
+      'Query and manage Stripe: customers, payments, invoices, and products.',
+    category: 'developer',
+    transport: 'http',
+    url: 'https://mcp.stripe.com',
+    auth: 'bearer',
+    requiresToken: true,
+    note: 'Needs a Stripe restricted API key as the bearer token (asked for after adding).',
+    iconDomain: 'stripe.com',
+  },
+]
+
+export const MCP_SERVER_PRESET_CATEGORY_LABELS: Record<
+  McpServerPresetCategory,
+  string
+> = {
+  academic: 'Academic research',
+  knowledge: 'Knowledge work',
+  documentation: 'Documentation',
+  developer: 'Developer',
+}
+
+export function findMcpServerPreset(id: string): McpServerPreset | undefined {
+  return MCP_SERVER_PRESETS.find(preset => preset.id === id)
+}
+
+/**
+ * What a preset needs on the user's machine to run:
+ * - `remote`  — nothing (an HTTP/SSE endpoint the shell just calls);
+ * - `node`    — a system `npx` (Node.js), usually already present;
+ * - `python`  — `uvx` (uv), the least commonly installed.
+ *
+ * The Tools UI privileges lower-friction runtimes and clearly flags the ones
+ * that need an extra install, rather than requiring uv across the board.
+ */
+export type McpPresetRuntime = 'remote' | 'node' | 'python'
+
+const NODE_RUNNERS = new Set(['npx', 'node', 'bunx'])
+
+export function mcpPresetRuntime(
+  preset: Pick<McpServerPreset, 'transport' | 'command'>,
+): McpPresetRuntime {
+  if (preset.transport !== 'stdio') return 'remote'
+  return preset.command && NODE_RUNNERS.has(preset.command) ? 'node' : 'python'
+}
+
+/** Sort rank so no-install servers come first, then Node, then Python. */
+export const MCP_PRESET_RUNTIME_RANK: Record<McpPresetRuntime, number> = {
+  remote: 0,
+  node: 1,
+  python: 2,
+}

package/src/agents/runtime/index.ts

@@ -8,6 +8,13 @@ export {
 export { createIdleLiveTurn, reduceAgentLiveTurn } from './agentLiveReducer.js'
 export { unresolvedToolCalls } from './unresolvedToolCalls.js'
 export { derivePendingToolCalls } from './pendingToolCalls.js'
+export {
+  derivePendingAsks,
+  sessionPendingAskCalls,
+  type PendingAsk,
+  type PendingAskDelegation,
+  type PendingAskSession,
+} from './pendingAsks.js'
 export { toolRequiresApproval } from './toolRequiresApproval.js'
 export { mergeUsageTurn } from './mergeUsageTurn.js'
 export {

package/src/agents/runtime/mapAgentSnapshot.ts

@@ -8,7 +8,7 @@ import {
   type AgentUiToolCall,
 } from '../../components/agents/agentTypes.js'
 import { derivePendingToolCalls } from './pendingToolCalls.js'
-import { toolRequiresApproval } from './toolRequiresApproval.js'
+import { sessionPendingAskCalls } from './pendingAsks.js'
 
 const VISIBLE_ROLES = new Set(['user', 'assistant', 'tool'])
 
@@ -76,19 +76,22 @@ export function mapPendingToolCalls(
   )
 }
 
-/** Pending tools that still need explicit user approval. */
+/**
+ * Pending tools that still need explicit user approval — the shared
+ * pending-asks selector's per-session slice (docs/09 §Card states).
+ */
 export function mapApprovalPendingToolCalls(
   snapshot: PlatformAgentRunSnapshot | null,
   policy: PlatformAgentSessionToolPolicy | undefined,
   acceptedPendingToolCallIds: readonly string[] = [],
 ): AgentUiToolCall[] {
   if (!snapshot || !policy) return []
-  const accepted = new Set(acceptedPendingToolCallIds)
-  return derivePendingToolCalls(snapshot.messages, snapshot.state)
-    .filter(
-      call => !accepted.has(call.id) && toolRequiresApproval(call.name, policy),
-    )
-    .map(mapToolCall)
+  return sessionPendingAskCalls({
+    state: snapshot.state,
+    messages: snapshot.messages,
+    acceptedPendingToolCallIds,
+    toolPolicy: policy,
+  })
 }
 
 function mapToolCall(call: AgentUiToolCall): AgentUiToolCall {