[Leeeon233]

Related issue

No linked issue; internal feature request.

Problem / pressure

Projects need reusable MCP selections. Resolve defaults at turn authoring so settings changes cannot alter accepted work.

Summary

Add a Default MCP tab after Skills in desktop project settings, with switches and loading, failure, missing-connection and read-only states. Workspace Flock stores one ids array per project: absence inherits workspace defaults; a present array replaces them; [] turns all off. Branches/worktrees share project identity.

Landing, draft and existing-session composers use scoped selection and click-time snapshots. CLI and single/batch MCP creation resolve target-project defaults; continuation retains the target selection. Explicit ids override either path. Existing Operation configuration freezes ids for retry/recovery; runtime consumes only turn ids.

UI writes check project authority and workspace scope, commit locally, then upload best-effort. UI Designer's UI and translations are integrated. Latest main is merged, preserving attachments, run-config provenance and Operation origin metadata. Bilingual Specs remain draft; the architecture note records implementation, limits and ablation evidence.

Ablation removed the single-consumer settings hook/model, memo wrappers, duplicate save/error state, and a project-row write helper with no production consumer: 70 fewer production lines. The Tab now owns edit state directly. Removing the readiness gate caused three behavioral failures, so that guard is retained. Failed-save recovery coverage was added.

Visual explanation

flowchart LR
  C[Workspace catalog] --> R[Shared default resolver]
  P[Project ids array] --> R
  R --> A[UI / CLI / MCP authoring]
  E[Explicit or existing selection] --> A
  A --> T[Turn and Operation ids]
  T --> D[Dispatch and recovery]

Loading

Before / after

Projects previously had no default MCP setting, and CLI/MCP turns omitted selection. New conversations preselect defaults; existing conversations retain their selection, including []. Customized projects stop inheriting later workspace-default additions.

Test plan

• Final targeted ablation validation: 84 UI + 22 shared + 120 CLI tests passed. Failed-write/retry was tested before and after simplification; unauthorized writes and click-time snapshots remain covered.
• Negative control: removing readiness caused 3 failures / 6 passes; restored before final validation. No behavioral tests were removed.
• Full pnpm check: typechecks and lint passed; CLI completed 4,421 passed / 4 skipped / 1 failed. The unchanged recursive Git SSH-submodule test still fails with context_unreadable. This stops the full command before the integrated components suite completes; do not treat it as a green full check.
• Formatting and docs check passed. Earlier platform/public-boundary and translation checks passed; the ablation adds no platform paths or copy.
• UI Designer previously ran 557 components files / 4,910 tests and light/dark Storybook checks before the main merge; this is not full-suite validation of the final head.
• No packaged Electron walkthrough. Mobile project settings retain their layout. Failed catalog opens retry after all consumers release; loaded local snapshots remain usable offline.

PR remains draft pending human review.