feat(app): connect local AI tools through MCP

[NarwhalChen]

Summary

• expose Main-process builtin and configured MCP tools to local AI providers
• gate untrusted and state-changing calls through request-scoped renderer approval
• connect Codex through its native HTTP MCP configuration
• render tool lifecycle parts directly from AI SDK 6 UI messages
• preserve click results when an interaction changes the renderer DOM
• add focused IPC, runtime, catalog, tool rendering, and automation tests

Split boundary

This is the second extracted slice of #206 and depends on the local AI runtime merged in #208. Computer control, image-preserving Codex transport, and the Settings provider toggle remain in the final slice.

Verification

• pnpm --filter @convera/app test — 17 files / 52 tests
• pnpm --filter @convera/app lint — 0 errors, 7 existing warnings
• pnpm --filter @convera/app exec tsc --noEmit --skipLibCheck
• pnpm --filter @convera/app automation:typecheck

No CI workflow is added.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

2 Skipped Deployments

Project	Deployment	Actions	Updated (UTC)
foxyfox-docs	Skipped		Jul 30, 2026 1:30pm
foxyfox-website	Skipped		Jul 30, 2026 1:30pm