Connections: one-click, instant on/off for every AI app (context + observation), for people and agents

[KAVentures]

Merge order

Merge #89 first, then #88. This branch contains #89 as an explicit parent and has been integration-merged so the unified Connections layer cannot regress the richer Claude Code/Codex observability added by #89.

Why

Connecting AI apps was spread over separate MCP buttons, observation cards, and manual snippets. There was no single place to install, enable/disable, remove, or inspect both context access and structural observation.

What

Connect tab → Connections adds one row per supported app with separate Context (MCP) and Observe controls.

• Claude Code: MCP plus rich hooks + logs-only OTel observation from v0.90: make agent observability rich and capability-aware #89.
• Codex: MCP plus structural OTel logs + traces from v0.90: make agent observability rich and capability-aware #89; prompt/response/guardian content logging stays disabled.
• Claude Desktop, Cursor, VS Code, Windsurf, Gemini CLI: one-click MCP configuration where supported.
• On first use, configuration is installed conservatively with backup/preserve/refuse-on-conflict behavior.
• Off/on uses persistent runtime switches enforced on every MCP call or supported observation ingress; no client restart is required merely to flip the OWG switch.
• Remove uninstalls only OWG-owned configuration.
• owg_connect.py provides the same operations for scripts/agents.
• GET/POST /v1/connections backs the dashboard and remains authenticated; it is deliberately not exposed as an MCP tool.

Integration with #89

The combined tree preserves:

• Claude model calls, model identity, token usage, approval decisions, failures and subagent handoffs.
• Codex structural business events + trace hierarchy, including multi-agent handoffs when emitted.
• capability-aware 0 vs — observability semantics and rich MCP get_agent_runs summaries.
• write-only local telemetry credentials and strict content allowlists.

The Connections Observe switch gates both the Claude and Codex native ingest endpoints without downgrading their telemetry configuration.

Additional fixes found during integration

• Fixed the shared Windows CI assertion that incorrectly expected POSIX 0600 mode bits on Windows.
• Fixed a real Windows connection-switch cache race: rapid atomic replacements of connections.json could retain the same observed mtime and make off appear as on. OWG now updates its in-process cache immediately after its own write and clears stale cache state when the switch file disappears.
• Added regression tests for immediate switch-cache coherence and stale-cache clearing.
• Updated manual/setup copy so Codex correctly says structural OTel logs + traces, not the older trace-only behavior.

Verification

Final combined head is green across:

• Windows pytest
• Ubuntu pytest + repeat-suite + repository DB check
• macOS pytest
• browser/dashboard JavaScript
• self-hosted Gateway container
• release packaging

#89 is independently green as well.

No additional version bump beyond #89's 0.90.0; #88 is the Connections layer on top.