one-code-extension 0.1.3 → 0.3.0

package/extensions/mcp/index.ts

@@ -16,10 +16,11 @@
  */
 
 import os from "node:os";
-import type { ExtensionAPI, ExtensionContext } from "@earendil-works/pi-coding-agent";
+import { getAgentDir, type ExtensionAPI, type ExtensionContext, type ToolDefinition } from "@earendil-works/pi-coding-agent";
 import { Type } from "typebox";
 import { DEFER_CHANNEL } from "../lib/deferred.ts";
-import { persistIfLarge } from "../lib/persisted-output.ts";
+import { MCP_TOOLS_CHANNEL } from "../lib/mcp-share.ts";
+import { persistIfLarge, sessionResultsDir } from "../lib/persisted-output.ts";
 import { ccToolRenderers } from "../lib/tui-render.ts";
 import {
 	callTool,
@@ -27,15 +28,35 @@ import {
 	type Connection,
 	connect,
 	type FailedConnection,
+	isUnauthorized,
+	mcpFailuresReminder,
 	mcpInstructionsReminder,
 	readResource,
 	readResourceDir,
 } from "./client.ts";
 import { CONTEXT_ORDER, REMINDER_CHANNEL } from "../lib/reminders.ts";
 import { join } from "node:path";
-import { discoverPlugins } from "../lib/plugins.ts";
+import {
+	MCP_STATUS_CHANNEL,
+	MCP_STATUS_REQUEST_CHANNEL,
+	type McpServerStatus,
+	type McpStatusEvent,
+} from "../lib/mcp-status.ts";
+import { defaultDiscoverRoots, discoverPlugins } from "../lib/plugins.ts";
+import { readDisabledMcpServers, setMcpServerDisabled } from "../lib/mcp-overrides.ts";
+import { boundedDockHeight, safeThemeBold, safeThemePaint, truncateLine } from "../lib/tui-render.ts";
+import { authenticate as runOAuthFlow, silentProvider } from "./oauth/flow.ts";
+import { hasStoredTokens } from "./oauth/store.ts";
+import { announcedFrom, applyMcpDelta, emptyAnnounced, mcpChangeNotices, mcpDelta, type McpSnapshot } from "./announce.ts";
+import { decodeMcpKey } from "./panel/keys.ts";
+import { type McpEntry, type McpEntryStatus } from "./panel/model.ts";
+import { renderMcpPanel, type McpPaint } from "./panel/render.ts";
+import { applyMcpKey, initialMcpState, type McpEffect } from "./panel/state.ts";
+import { sessionAlive } from "../lib/session-lifecycle.ts";
 import { loadServers, type McpServer } from "./config.ts";
+import { approveMcpServers, persistApproval, projectRootOf } from "./trust.ts";
 import {
+	capDescription,
 	describeContent,
 	describeResourceContents,
 	jsonSchemaToTypeBox,
@@ -44,6 +65,9 @@ import {
 	namespacedToolName,
 } from "./schema.ts";
 
+/** Anthropic's hard limit on a tool name; a longer one fails the whole request. */
+const MAX_TOOL_NAME_LENGTH = 128;
+
 /** Shared "server name not found" tool result for the resource read/list-dir tools. */
 function unknownServerError(name: string) {
 	return {
@@ -55,36 +79,72 @@ function unknownServerError(name: string) {
 
 export default function mcpExtension(pi: ExtensionAPI) {
 	const connections = new Map<string, Connection>();
-	const failures: FailedConnection[] = [];
+	let failures: FailedConnection[] = [];
 	const registered = new Set<string>();
 	let servers: McpServer[] = [];
+	// http servers that returned a 401 with no stored tokens — authNeeded via OAuth,
+	// distinct from a missing-env authNeeded (which Authenticate cannot fix).
+	const oauthNeeded = new Set<string>();
+	// Servers the user disabled (persisted in ~/.onecode) — discovered but not connected.
+	let disabledNames = new Set<string>();
+	// Project .mcp.json servers withheld this session (no consent yet, declined,
+	// or disabled via Claude Code's disabledMcpjsonServers) — listed, not connected.
+	const withheldNames = new Map<string, string>();
+	// Config file paths contributed by plugins, so the panel can group them.
+	let pluginConfigPaths = new Set<string>();
+	const home = os.homedir();
+	// Live tool definitions, shared with in-process subagents so they reach MCP
+	// through these same open connections instead of connecting their own.
+	const sharedTools: ToolDefinition[] = [];
+	// Message 1 carries the MCP instructions and failed-servers reminders. Once a
+	// request has gone out it is part of every later request's cached prefix, so
+	// those blocks are frozen and later changes ride one-shot notices (./announce.ts).
+	let requestSent = false;
+	let announced = emptyAnnounced();
+	pi.on("context", () => {
+		requestSent = true;
+	});
 
 	/**
 	 * Where oversized results are persisted — the session dir, matching Claude
 	 * Code's `<session-dir>/tool-results/<id>.txt`. A session-less run (`--no-session`)
 	 * has no such dir, so a temp folder serves; the model gets the path either way.
 	 */
-	const resultsDir = (ctx: ExtensionContext | undefined): string => {
-		try {
-			const dir = ctx?.sessionManager.getSessionDir();
-			if (dir) return dir;
-		} catch {
-			// fall through to the temp folder
-		}
-		return join(os.tmpdir(), "one-code");
-	};
+	const resultsDir = (ctx: ExtensionContext | undefined): string => sessionResultsDir(ctx);
 
 	const registerToolsFor = (connection: Connection) => {
 		for (const tool of connection.tools) {
 			const name = namespacedToolName(connection.server.name, tool.name);
-			if (registered.has(name)) continue;
+			// Anthropic caps a tool name at 128 characters and rejects the whole
+			// request when one is longer — and a deferred definition rides every
+			// request from request 1, so one over-long name would fail every turn
+			// of the session with an opaque `tools.N.custom.name` error. Drop it
+			// here with a clear reason instead.
+			if (name.length > MAX_TOOL_NAME_LENGTH) {
+				failures.push({
+					server: connection.server,
+					error: `tool "${tool.name}" skipped: its namespaced name is ${name.length} characters, over the ${MAX_TOOL_NAME_LENGTH}-character limit the provider enforces`,
+				});
+				continue;
+			}
+			if (registered.has(name)) {
+				// Two tools sanitise to one name (`a-b` and `a_b`, or a server
+				// reconnecting under a stale registration). Skipping silently would
+				// make the second tool unreachable with no trace; record it where
+				// the connection summary reports it.
+				failures.push({
+					server: connection.server,
+					error: `tool "${tool.name}" skipped: its registered name "${name}" is already taken by another tool`,
+				});
+				continue;
+			}
 			registered.add(name);
 
-			pi.registerTool({
+			const def: ToolDefinition = {
 				name,
 				label: `${connection.server.name}: ${tool.name}`,
 				...ccToolRenderers(`${connection.server.name}: ${tool.name}`),
-				description: tool.description ?? `MCP tool "${tool.name}" from server "${connection.server.name}".`,
+				description: capDescription(tool.description) ?? `MCP tool "${tool.name}" from server "${connection.server.name}".`,
 				parameters: jsonSchemaToTypeBox(tool.inputSchema),
 				async execute(toolCallId, params, _signal, _onUpdate, ctx) {
 					const live = connections.get(connection.server.name);
@@ -97,7 +157,7 @@ export default function mcpExtension(pi: ExtensionAPI) {
 					}
 					try {
 						const result = await callTool(live, tool.name, (params ?? {}) as Record<string, unknown>);
-						const { text, images } = describeContent(result.content as McpContentBlock[] | undefined);
+						const { text, images } = describeContent(result.content as McpContentBlock[] | undefined, connection.server.name);
 						return {
 							content: [
 								{
@@ -117,7 +177,9 @@ export default function mcpExtension(pi: ExtensionAPI) {
 						};
 					}
 				},
-			});
+			};
+			pi.registerTool(def);
+			sharedTools.push(def);
 
 			// Deferred: the model discovers these through tool_search.
 			pi.events.emit(DEFER_CHANNEL, {
@@ -125,82 +187,195 @@ export default function mcpExtension(pi: ExtensionAPI) {
 				keywords: [connection.server.name, tool.name.replace(/[_-]/g, " "), "mcp"],
 			});
 		}
+		// Publish the live set so in-process subagents can share these connections.
+		if (sharedTools.length > 0) pi.events.emit(MCP_TOOLS_CHANNEL, { tools: [...sharedTools] });
 	};
 
 	/** Resolves when every configured server has connected or failed. */
 	let connecting: Promise<void> | undefined;
 	let connectSettled = false;
-	let shuttingDown = false;
-
-	const connectAll = async (ctx: ExtensionContext) => {
-		servers = loadServers(ctx.cwd, os.homedir(), process.env, discoverPlugins(join(os.homedir(), ".claude")).mcpConfigs);
-		if (servers.length === 0) return;
+	// False after session_shutdown: every pi.* call throws from then on (lib/session-lifecycle.ts).
+	const alive = sessionAlive(pi);
 
-		// A server whose credentials are unset would connect with an empty token and
-		// fail with a confusing protocol error; skip it and say why instead.
-		for (const server of servers.filter((s) => s.missingEnv?.length)) {
+	/**
+	 * Connect one server, updating the live maps. Prior failure/authNeeded state
+	 * for the server is cleared first, so this doubles as the reconnect path.
+	 *   - An http server with stored OAuth tokens connects with the silent
+	 *     provider (refreshing as needed); without tokens it connects with NO
+	 *     provider so a 401 throws instead of popping a browser at startup.
+	 *   - A 401 from an http server marks it authNeeded (OAuth); any other error
+	 *     is a hard failure.
+	 */
+	/**
+	 * Record a freshly established connection as the live one for its server:
+	 * clear stale failure/authNeeded state, register its tools (and resource
+	 * tools), and surface any listTools warnings. The single "now connected"
+	 * path — both connectOne and the OAuth flow route through it, so neither can
+	 * drift (e.g. drop the warnings step).
+	 */
+	const adoptConnection = (server: McpServer, connection: Connection): void => {
+		failures = failures.filter((f) => f.server.name !== server.name);
+		oauthNeeded.delete(server.name);
+		connections.set(server.name, connection);
+		// A server that dies (or drops the HTTP session) mid-session must not keep
+		// reading "connected" with a stale tool count; its tools stay registered
+		// and answer "not connected" until Reconnect in /mcp.
+		connection.client.onclose = () => {
+			if (connection.closing || !alive()) return;
+			if (connections.get(server.name) !== connection) return;
+			connections.delete(server.name);
+			const tail = connection.stderrTail();
 			failures.push({
 				server,
-				error: `not started — ${server.missingEnv?.join(", ")} not set in the environment`,
+				error: `connection closed by the server${tail ? `\nserver stderr: ${tail.slice(-1_000)}` : ""}`,
 			});
+			emitInstructions();
+		};
+		registerToolsFor(connection);
+		for (const warning of connection.warnings) failures.push({ server, error: warning });
+		if (connection.resources.length > 0) registerResourceTools();
+	};
+
+	const connectOne = async (server: McpServer): Promise<void> => {
+		failures = failures.filter((f) => f.server.name !== server.name);
+		oauthNeeded.delete(server.name);
+		const provider = server.kind === "http" && hasStoredTokens(server.name) ? silentProvider(server.name) : undefined;
+		try {
+			const connection = await connect(server, provider);
+			if (!alive()) {
+				await close(connection);
+				return;
+			}
+			adoptConnection(server, connection);
+		} catch (error) {
+			if (!alive()) return;
+			if (server.kind === "http" && isUnauthorized(error)) oauthNeeded.add(server.name);
+			else failures.push({ server, error: (error as Error).message });
 		}
+	};
 
-		const results = await Promise.all(
-			servers
-				.filter((server) => !server.missingEnv?.length)
-				.map(async (server) => {
-				try {
-					return { connection: await connect(server) };
-				} catch (error) {
-					return { failure: { server, error: (error as Error).message } };
-				}
-			}),
-		);
+	/**
+	 * Tell the MODEL about the servers, the way Claude Code does (findings §14):
+	 * each connected server's own usage instructions (its initialize result), and
+	 * which servers failed — otherwise it concludes the tools do not exist or the
+	 * user has no access instead of reporting a connection failure the user can
+	 * fix (review M4). Re-run on every connect, close, reconnect, authenticate,
+	 * enable and disable. Before the first request the two first-prepend blocks on
+	 * message 1 are (re)written; after it they are frozen and only the changes are
+	 * announced (./announce.ts).
+	 */
+	const emitInstructions = () => {
+		const live = [...connections.values()];
+		const snapshot: McpSnapshot = {
+			connected: live.map((c) => ({ name: c.server.name, instructions: c.instructions })),
+			failed: failures.filter((f) => !connections.has(f.server.name)).map((f) => ({ name: f.server.name, error: f.error })),
+		};
 
-		// The session may have shut down while a slow server was still answering;
-		// a connection landing now would leak its transport, so close it instead.
-		if (shuttingDown) {
-			await Promise.all(results.map((result) => (result.connection ? close(result.connection) : undefined)));
+		if (!requestSent) {
+			// Nothing is cached yet: (re)write the standing message-1 blocks.
+			if (snapshot.failed.length === 0) {
+				pi.events.emit(REMINDER_CHANNEL, { scope: "every-turn", key: "mcp-failures", text: "", remove: true });
+			} else {
+				pi.events.emit(REMINDER_CHANNEL, {
+					scope: "every-turn",
+					key: "mcp-failures",
+					text: mcpFailuresReminder(snapshot.failed),
+					placement: "first-prepend",
+					order: CONTEXT_ORDER.mcp + 1,
+				});
+			}
+			const instructions = mcpInstructionsReminder(live);
+			if (instructions) {
+				pi.events.emit(REMINDER_CHANNEL, {
+					scope: "every-turn",
+					key: "mcp-instructions",
+					text: instructions,
+					placement: "first-prepend",
+					order: CONTEXT_ORDER.mcp,
+				});
+			} else {
+				// No server has instructions anymore (e.g. the last one was disabled or
+				// disconnected) — drop the stale every-turn reminder so the model stops
+				// being told to use tools that are gone.
+				pi.events.emit(REMINDER_CHANNEL, { scope: "every-turn", key: "mcp-instructions", text: "", remove: true });
+			}
+			announced = announcedFrom(snapshot);
 			return;
 		}
 
-		for (const result of results) {
-			if (result.connection) {
-				connections.set(result.connection.server.name, result.connection);
-				registerToolsFor(result.connection);
-				for (const warning of result.connection.warnings) {
-					failures.push({ server: result.connection.server, error: warning });
-				}
-			} else if (result.failure) {
-				failures.push(result.failure);
-			}
+		// Message 1 is frozen (rewriting it would re-cache the whole conversation):
+		// tell the model only what changed, as one-shots where it reads next.
+		const delta = mcpDelta(announced, snapshot);
+		for (const text of mcpChangeNotices(delta)) pi.events.emit(REMINDER_CHANNEL, { text });
+		applyMcpDelta(announced, delta);
+	};
+
+	/** Config files that exist but failed to parse (review M11) — shown at startup and in /mcp. */
+	let configErrors: string[] = [];
+
+	const connectAll = async (ctx: ExtensionContext) => {
+		const plugins = discoverPlugins(defaultDiscoverRoots(getAgentDir(), ctx.cwd));
+		pluginConfigPaths = new Set(plugins.mcpConfigs);
+		configErrors = [];
+		servers = loadServers(ctx.cwd, home, process.env, [...pluginConfigPaths], {
+			pluginNames: plugins.mcpConfigPlugins,
+			onError: (path, message) => configErrors.push(`${path}: ${message}`),
+		});
+		if (configErrors.length > 0) {
+			const text = `MCP config could not be parsed (ignored): ${configErrors.join("; ")}`;
+			if (ctx.hasUI) ctx.ui.notify(text, "warning");
+			else process.stderr.write(`${text}\n`);
 		}
+		disabledNames = readDisabledMcpServers(ctx.cwd, home);
+		if (servers.length === 0) return;
 
-		if (failures.length > 0 && ctx.hasUI) {
-			ctx.ui.notify(
-				failures.map((f) => `MCP server "${f.server.name}" failed: ${f.error}`).join("\n") + " (/mcp for status)",
-				"warning",
+		// Disabled servers are listed but never connected; a server with an unset
+		// credential env var stays "needs authentication" and is not attempted
+		// (connecting with an empty token fails confusingly). A project .mcp.json
+		// server needs the user's consent first (trust.ts — a cloned repo must not
+		// run commands at startup). Everything else connects.
+		const candidates = servers.filter((server) => !disabledNames.has(server.name) && !server.missingEnv?.length);
+		const consent = await approveMcpServers(candidates, pluginConfigPaths, ctx.cwd, home, {
+			hasUI: ctx.hasUI,
+			select: (title, options) => ctx.ui.select(title, options),
+			notify: (message) => {
+				if (ctx.hasUI) ctx.ui.notify(message, "warning");
+				else process.stderr.write(`${message}\n`);
+			},
+			disable: (server) => {
+				setMcpServerDisabled(server.name, true, "project", ctx.cwd, home);
+				disabledNames.add(server.name);
+			},
+		});
+		if (!alive()) return;
+		withheldNames.clear();
+		for (const { server, reason } of consent.withheld) {
+			withheldNames.set(
+				server.name,
+				reason === "disabled-by-claude-settings"
+					? "disabled by disabledMcpjsonServers in Claude Code settings"
+					: reason === "declined"
+						? "not approved this session (project .mcp.json)"
+						: "not approved (project .mcp.json; approve in an interactive session)",
 			);
 		}
+		await Promise.all(consent.approved.map(connectOne));
 
-		const resourceCount = [...connections.values()].reduce((n, c) => n + c.resources.length, 0);
-		if (resourceCount > 0) {
-			registerResourceTools();
-		}
+		if (!alive()) return;
 
-		// Servers' own usage instructions (initialize result) ride an every-turn
-		// reminder, as Claude Code injects them (findings §14) — without this the
-		// field is silently dropped and servers can't teach the model their tools.
-		const instructions = mcpInstructionsReminder([...connections.values()]);
-		if (instructions) {
-			pi.events.emit(REMINDER_CHANNEL, {
-				scope: "every-turn",
-				key: "mcp-instructions",
-				text: instructions,
-				placement: "first-prepend",
-				order: CONTEXT_ORDER.mcp,
-			});
+		if (failures.length > 0) {
+			const text = failures.map((f) => `MCP server "${f.server.name}" failed: ${f.error}`).join("\n") + " (/mcp for status)";
+			if (ctx.hasUI) ctx.ui.notify(text, "warning");
+			else process.stderr.write(`${text}\n`);
+		}
+		if (oauthNeeded.size > 0 && ctx.hasUI) {
+			ctx.ui.notify(
+				`${oauthNeeded.size} MCP server${oauthNeeded.size === 1 ? "" : "s"} need authentication — run /mcp to authenticate.`,
+				"warning",
+			);
 		}
+
+		emitInstructions();
 	};
 
 	let resourceToolsRegistered = false;
@@ -217,7 +392,7 @@ export default function mcpExtension(pi: ExtensionAPI) {
 			parameters: Type.Object({
 				server: Type.Optional(Type.String({ description: "Limit to one server by name" })),
 			}),
-			async execute(_toolCallId, params) {
+			async execute(toolCallId, params, _signal, _onUpdate, ctx) {
 				// A bad `server` name must not read back as "this server has zero
 				// resources" — validate it like read_mcp_resource does, else a typo
 				// looks like an empty (but real) server.
@@ -243,7 +418,12 @@ export default function mcpExtension(pi: ExtensionAPI) {
 					}
 				}
 				return {
-					content: [{ type: "text", text: lines.length ? lines.join("\n") : "No MCP resources available." }],
+					content: [
+						{
+							type: "text",
+							text: lines.length ? persistIfLarge(lines.join("\n"), { dir: resultsDir(ctx), id: toolCallId }) : "No MCP resources available.",
+						},
+					],
 					details: { count: lines.length },
 				};
 			},
@@ -293,7 +473,7 @@ export default function mcpExtension(pi: ExtensionAPI) {
 				server: Type.String({ description: "Server name that owns the directory" }),
 				uri: Type.String({ description: "The directory resource uri to list" }),
 			}),
-			async execute(_toolCallId, params) {
+			async execute(toolCallId, params, _signal, _onUpdate, ctx) {
 				const connection = connections.get(params.server);
 				if (!connection) return unknownServerError(params.server);
 				try {
@@ -301,7 +481,12 @@ export default function mcpExtension(pi: ExtensionAPI) {
 					const entries = (result.resources ?? result.entries ?? []) as Array<{ uri?: string; name?: string; mimeType?: string }>;
 					const lines = entries.map((e) => `${e.uri ?? "(no uri)"}${e.name ? ` — ${e.name}` : ""}${e.mimeType ? ` (${e.mimeType})` : ""}`);
 					return {
-						content: [{ type: "text", text: lines.length ? lines.join("\n") : "(empty directory)" }],
+						content: [
+							{
+								type: "text",
+								text: lines.length ? persistIfLarge(lines.join("\n"), { dir: resultsDir(ctx), id: toolCallId }) : "(empty directory)",
+							},
+						],
 						details: { server: params.server, uri: params.uri },
 					};
 				} catch (error) {
@@ -320,6 +505,10 @@ export default function mcpExtension(pi: ExtensionAPI) {
 	};
 
 	pi.on("session_start", async (_event, ctx) => {
+		// A new session (/clear, resume in a new process) has no cached prefix yet:
+		// its message-1 blocks are written fresh (same reset as tool-search).
+		requestSent = false;
+		announced = emptyAnnounced();
 		// pi awaits session_start handlers serially before the prompt opens, and
 		// remote servers take seconds to answer — awaiting here was the entire
 		// "slow startup" (4.9s → 0.24s measured, findings §15). In the interactive
@@ -336,36 +525,347 @@ export default function mcpExtension(pi: ExtensionAPI) {
 		});
 		connecting.finally(() => {
 			connectSettled = true;
+			// The session may be gone by now (/clear while a remote server was still
+			// answering): pi's API throws from assertActive after session_shutdown,
+			// and from a promise continuation that is an uncaught exception that
+			// killed the process (STEERING-REVIEW-2026-09-05 H3, measured).
+			if (!alive()) return;
+			// Final publish, marked settled — emitted even with zero servers/tools so
+			// a consumer that spawns children early (subagents) can stop waiting for
+			// late-connecting servers instead of snapshotting an empty set forever.
+			pi.events.emit(MCP_TOOLS_CHANNEL, { tools: [...sharedTools], settled: true });
 		});
-		if (!ctx.hasUI || process.env.PI_SUBAGENT_CHILD) {
+		if (!ctx.hasUI) {
 			await connecting;
 		}
 	});
 
 	pi.on("session_shutdown", async () => {
-		shuttingDown = true;
 		await Promise.all([...connections.values()].map((connection) => close(connection)));
 		connections.clear();
 	});
 
+	// Single source of truth for a server's status, shared by the /plugins status
+	// snapshot, the /mcp panel entries, and the text fallback.
+	const deriveStatus = (server: McpServer): { status: McpEntryStatus; detail?: string; toolCount?: number } => {
+		if (disabledNames.has(server.name)) return { status: "disabled" };
+		const withheld = withheldNames.get(server.name);
+		if (withheld) return { status: "disabled", detail: withheld };
+		const connection = connections.get(server.name);
+		if (connection) {
+			// A server can connect yet warn (e.g. listTools/listResources failed);
+			// adoptConnection files those under `failures`. Surface it so the warning
+			// isn't collected-but-invisible.
+			const warning = failures.find((f) => f.server.name === server.name);
+			return { status: "connected", toolCount: connection.tools.length, detail: warning?.error };
+		}
+		if (oauthNeeded.has(server.name)) return { status: "authNeeded" };
+		if (server.missingEnv?.length) {
+			return { status: "authNeeded", detail: `${server.missingEnv.join(", ")} not set in the environment` };
+		}
+		const failure = failures.find((f) => f.server.name === server.name);
+		if (failure) return { status: "failed", detail: failure.error };
+		return connectSettled ? { status: "failed", detail: "not connected" } : { status: "connecting" };
+	};
+
+	// The /plugins panel can't import this extension's state (jiti gives every
+	// extension its own module instance), and the bus doesn't replay — so it
+	// asks: a request event answered with a status snapshot.
+	const buildStatusSnapshot = (): McpServerStatus[] =>
+		servers.map((server) => {
+			const { status, detail, toolCount } = deriveStatus(server);
+			return { name: server.name, status, detail, toolCount, source: server.source };
+		});
+
+	pi.events.on(MCP_STATUS_REQUEST_CHANNEL, () => {
+		pi.events.emit(MCP_STATUS_CHANNEL, { servers: buildStatusSnapshot(), settled: connectSettled } satisfies McpStatusEvent);
+	});
+
+	// --- /mcp panel ------------------------------------------------------------
+
+	const shorten = (p: string) => (p.startsWith(home) ? `~${p.slice(home.length)}` : p);
+
+	// One place that turns a server's config source into its display group, sort
+	// rank, config-location label, and disable-persistence scope — so the four
+	// can't drift apart. Plugin servers persist at project scope (mcp-overrides
+	// has no plugin scope; per-repo is the right default for a plugin).
+	interface Provenance {
+		rank: number;
+		group: string;
+		configLocation: string;
+		scope: "user" | "project";
+	}
+	const classify = (server: McpServer): Provenance => {
+		if (pluginConfigPaths.has(server.source)) {
+			return { rank: 3, group: "Plugin MCPs", configLocation: "Plugin configuration", scope: "project" };
+		}
+		if (server.source === join(home, ".claude.json")) {
+			return { rank: 0, group: `User MCPs (${shorten(server.source)})`, configLocation: shorten(server.source), scope: "user" };
+		}
+		if (server.source.endsWith(join(".claude", "settings.local.json"))) {
+			return { rank: 2, group: "Project MCPs (.claude/settings.local.json)", configLocation: shorten(server.source), scope: "project" };
+		}
+		return { rank: 1, group: `Project MCPs (${shorten(server.source)})`, configLocation: shorten(server.source), scope: "project" };
+	};
+
+	const buildEntries = (): McpEntry[] =>
+		servers
+			.map((server) => {
+				const { status, detail, toolCount } = deriveStatus(server);
+				const { rank, group, configLocation } = classify(server);
+				const canAuthenticate = server.kind === "http" && !server.missingEnv?.length;
+				// Issue line for hard failures, for an env-missing authNeeded (so the user
+				// sees which variable to set), and for a connected-but-warning server; an
+				// OAuth authNeeded needs no issue — the Authenticate action speaks for itself.
+				const issue =
+					status === "failed" || status === "connected" || status === "disabled" || (status === "authNeeded" && !canAuthenticate)
+						? detail
+						: undefined;
+				// Auth line shown on a failed http server (as Claude Code does), read
+				// honestly from whether tokens are stored — not just "failed http".
+				const authState =
+					status === "failed" && server.kind === "http"
+						? hasStoredTokens(server.name)
+							? ("authenticated" as const)
+							: ("notAuthenticated" as const)
+						: undefined;
+				const entry: McpEntry = {
+					name: server.name,
+					group,
+					status,
+					toolCount,
+					issue,
+					url: server.kind === "http" ? server.url : undefined,
+					configLocation,
+					authState,
+					canAuthenticate,
+				};
+				return { entry, rank };
+			})
+			.sort((a, b) =>
+				a.rank !== b.rank
+					? a.rank - b.rank
+					: a.entry.group === b.entry.group
+						? a.entry.name.localeCompare(b.entry.name)
+						: a.entry.group.localeCompare(b.entry.group),
+			)
+			.map((e) => e.entry);
+
+	/** Bounded dock like /skills and /plugins — keeps the transcript visible above. */
+	const MCP_PANEL_MAX_HEIGHT = 22;
+
+	const openMcpPanel = async (ctx: ExtensionContext): Promise<void> => {
+		await ctx.ui.custom<null>((tui, theme, _keybindings, done) => {
+			const paint: McpPaint = { fg: safeThemePaint(theme), bold: safeThemeBold(theme) };
+			const state = initialMcpState();
+			let notices: string[] = [];
+			const busy = new Set<string>();
+			let cache: { width: number; lines: string[] } | undefined;
+			// The entry list is derived from live connection state; build it once and
+			// rebuild only when that state changes (an action lands, or the ticker
+			// sees connects still settling) — never per render frame or per keystroke.
+			let entries = buildEntries();
+			const repaint = () => {
+				cache = undefined;
+				tui.requestRender();
+			};
+			const syncRepaint = () => {
+				entries = buildEntries();
+				repaint();
+			};
+			// Animate while connecting or an action is in flight; real changes repaint explicitly.
+			const ticker = setInterval(() => {
+				if (busy.size > 0 || !connectSettled) syncRepaint();
+			}, 500);
+			ticker.unref?.();
+
+			// Message after a (re)connect attempt: silent on success, else name the
+			// reason from the freshly derived status (auth vs a hard failure).
+			const outcomeNotice = (server: McpServer): string[] => {
+				const status = deriveStatus(server).status;
+				if (status === "connected") return [];
+				if (status === "authNeeded") return [`"${server.name}" needs authentication.`];
+				return [`"${server.name}" could not connect.`];
+			};
+
+			const runReconnect = async (entry: McpEntry) => {
+				const server = servers.find((s) => s.name === entry.name);
+				if (!server || busy.has(entry.name)) return;
+				busy.add(entry.name);
+				notices = [`Reconnecting to "${entry.name}"…`];
+				syncRepaint();
+				const existing = connections.get(entry.name);
+				if (existing) {
+					connections.delete(entry.name);
+					await close(existing);
+				}
+				await connectOne(server);
+				busy.delete(entry.name);
+				// The session may have been replaced during the connect (an RPC
+				// new_session while the panel was open): every pi.* call throws
+				// then, and from a void'ed continuation that is an unhandled
+				// rejection (LIFECYCLE-REVIEW-2026-09-06 L2).
+				if (!alive()) return;
+				emitInstructions();
+				notices = outcomeNotice(server);
+				syncRepaint();
+			};
+
+			const runDisable = (entry: McpEntry) => {
+				const server = servers.find((s) => s.name === entry.name);
+				if (!server || busy.has(entry.name)) return; // don't cut across an in-flight connect
+				setMcpServerDisabled(entry.name, true, classify(server).scope, ctx.cwd, home);
+				disabledNames.add(entry.name);
+				const existing = connections.get(entry.name);
+				if (existing) {
+					connections.delete(entry.name);
+					void close(existing);
+				}
+				state.detail = undefined;
+				emitInstructions(); // drops the disabled server's instructions reminder
+				notices = [`Disabled "${entry.name}". Its tools stay unavailable until re-enabled.`];
+				syncRepaint();
+			};
+
+			const runEnable = async (entry: McpEntry) => {
+				const server = servers.find((s) => s.name === entry.name);
+				if (!server || busy.has(entry.name)) return;
+				setMcpServerDisabled(entry.name, false, classify(server).scope, ctx.cwd, home);
+				disabledNames.delete(entry.name);
+				// Enabling a withheld project .mcp.json server by hand IS the consent.
+				if (withheldNames.delete(entry.name)) persistApproval(projectRootOf(server), server);
+				busy.add(entry.name);
+				notices = [`Enabling "${entry.name}"…`];
+				syncRepaint();
+				await connectOne(server);
+				busy.delete(entry.name);
+				if (!alive()) return; // see runReconnect
+				emitInstructions();
+				notices = outcomeNotice(server);
+				syncRepaint();
+			};
+
+			const runAuthenticate = async (entry: McpEntry) => {
+				const server = servers.find((s) => s.name === entry.name);
+				if (!server || busy.has(entry.name)) return;
+				if (server.kind !== "http") {
+					notices = [`"${entry.name}" is not an http server; OAuth is unavailable.`];
+					repaint();
+					return;
+				}
+				busy.add(entry.name);
+				notices = [`Starting authorization for "${entry.name}"…`];
+				syncRepaint();
+				try {
+					const connection = await runOAuthFlow({
+						server,
+						home,
+						onPrompt: (message) => {
+							notices = message.split("\n");
+							repaint();
+						},
+					});
+					if (!alive()) {
+						await close(connection); // see runReconnect
+						return;
+					}
+					adoptConnection(server, connection);
+					emitInstructions();
+					notices = [`Authenticated "${entry.name}".`];
+				} catch (error) {
+					notices = [`Authentication failed: ${(error as Error).message}`];
+				} finally {
+					busy.delete(entry.name);
+					syncRepaint();
+				}
+			};
+
+			// Each action is a void'ed promise. A throw after the session was
+			// replaced is expected (every pi.* call throws then) and dropped; any
+			// other failure is shown in the panel, never an unhandled rejection.
+			const guarded = (work: Promise<void>) =>
+				work.catch((error) => {
+					if (!alive()) return;
+					notices = [`Action failed: ${(error as Error).message}`];
+					syncRepaint();
+				});
+
+			const runEffect = (effect: McpEffect) => {
+				switch (effect.kind) {
+					case "close":
+						clearInterval(ticker);
+						done(null);
+						return;
+					case "reconnect":
+						void guarded(runReconnect(effect.entry));
+						return;
+					case "disable":
+						runDisable(effect.entry);
+						return;
+					case "enable":
+						void guarded(runEnable(effect.entry));
+						return;
+					case "authenticate":
+						void guarded(runAuthenticate(effect.entry));
+						return;
+				}
+			};
+
+			return {
+				render: (width: number) => {
+					if (cache?.width === width) return cache.lines;
+					const termRows = (tui as { terminal: { rows: number } }).terminal.rows;
+					const height = boundedDockHeight(termRows, MCP_PANEL_MAX_HEIGHT);
+					const lines = renderMcpPanel(
+						{ state, entries, width, height, notices, settled: connectSettled },
+						paint,
+					).map((line) => truncateLine(line, width));
+					cache = { width, lines };
+					return lines;
+				},
+				handleInput: (data: string) => {
+					const key = decodeMcpKey(data);
+					if (!key) return;
+					// Navigation reads the cached entries; effects (which change the
+					// underlying state) rebuild them via syncRepaint inside their handlers.
+					const effect = applyMcpKey(state, key, entries);
+					if (effect) runEffect(effect);
+					repaint();
+				},
+				invalidate: () => {
+					cache = undefined;
+				},
+				dispose: () => {
+					clearInterval(ticker);
+				},
+			};
+		});
+	};
+
 	pi.registerCommand("mcp", {
-		description: "Show MCP server status",
+		description: "Manage MCP servers (status, reconnect, authenticate, enable/disable)",
 		handler: async (_args, ctx) => {
 			if (servers.length === 0) {
 				ctx.ui.notify("No MCP servers configured. Add them to .mcp.json or ~/.claude.json.", "info");
 				return;
 			}
+			if (ctx.hasUI) {
+				await openMcpPanel(ctx);
+				return;
+			}
+			// Non-interactive fallback: a flat status listing, with tool/resource
+			// counts and any warning for connected servers.
 			const lines = servers.map((server) => {
+				const { status, detail } = deriveStatus(server);
 				const connection = connections.get(server.name);
+				let suffix = "";
 				if (connection) {
-					const warning = connection.warnings.length ? ` — WARNING: ${connection.warnings.join("; ")}` : "";
-					return `connected ${server.name} — ${connection.tools.length} tools, ${connection.resources.length} resources (${server.source})${warning}`;
+					suffix = ` — ${connection.tools.length} tools, ${connection.resources.length} resources`;
+					if (detail) suffix += ` — WARNING: ${detail}`;
+				} else if (detail) {
+					suffix = ` — ${detail}`;
 				}
-				const failure = failures.find((f) => f.server.name === server.name);
-				if (failure) return `failed    ${server.name} — ${failure.error} (${server.source})`;
-				return connectSettled
-					? `failed    ${server.name} — not connected (${server.source})`
-					: `…         ${server.name} — still connecting (${server.source})`;
+				return `${status.padEnd(12)} ${server.name}${suffix} (${server.source})`;
 			});
 			ctx.ui.notify(lines.join("\n"), "info");
 		},