feat(den): Library v2 — one endpoint for everything you can use; web shows connections, kinds, and sign-in states (F5 v2)

[benjaminshafii]

What

The F5 v2 web library from the approved canvas (frames 13/14 in "OpenWork Extensions — Latest" + F5 v2), built on the U2 unified endpoint rather than a client-side union.

den-api — GET /v1/me/library: one server-side answer to "what can this member use" — a discriminated union of plugins (with componentKinds, edges, role — superset of /v1/me/plugin-access, which stays for compatibility) and connections (transport mcp/native, per-member state: connected / needs_signin / needs_admin_setup / available, grant-granular edges — person/team/org-wide preserved, not flattened).

den-web — the library becomes what the canvas promised: single-column rows with kind-tinted icon tiles, name + item-specific description; chips in shared-layer tones (kind, MCP/Native transport, provenance, amber "Needs your sign-in"); kind pills with live counts where the MCPs pill also matches MCP-backed connections (the facet rule); removable "Needs sign-in · N ×" state filter combining with tabs + search; Sign in deep-links into Your Connections. Hero/tabs/search fidelity from #3430 preserved; mobile per the Page-4 rules.

Tests (commands + results)

den-api: bun test me-library + me-access (+ team-access, grant-native in executor run) → green; tsc clean
den-web: tsc + next build → clean
evals: library-view.slow.test.ts on the stack lane → 3× pass (executor 2× + orchestrator rerun):
  API leg (nova sees plugin AND needs_signin MCP connection via /v1/me/library),
  browser leg (kind pills with counts, Sign in href → your-connections, facet click keeps
  the connection visible, no component counts, hero fidelity), REAL per-member OAuth
  connection via startMockMcp — desktop + 375px frames, vision 3/3

The spec caught and fixed a real parser bug mid-run (provider: null on external MCP connections) — the member-perspective browser leg keeps paying for itself.

U2 status

Shipped: the unified endpoint + web consuming it. Remaining U2 (follow-ups): desktop swaps its cloud feeds onto /v1/me/library, then the parity spec pinning web ≡ desktop ≡ chat. Noted: photoRoll() now warns deprecated post-#3431 — evidence tooling migration to @openwork/testkit queued separately.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
openwork-app	Ready	Preview	Aug 2, 2026 9:41pm
openwork-den	Ready	Preview	Aug 2, 2026 9:41pm
openwork-den-worker-proxy	Ready	Preview	Aug 2, 2026 9:41pm
openwork-diagnostics	Ready	Preview	Aug 2, 2026 9:41pm
openwork-landing	Ready	Preview, v0	Aug 2, 2026 9:41pm

[diff-warden]

Warden security clearance: clear. No new security issues found in this diff (25065191120ea4ef8bfd6cddff460beae80020e5). Automated clearance satisfies the required-review gate only — a human still reviews and merges. Analysis run

[benjaminshafii]

Photo roll — library-v2 — 3/3 frames passed

✅ 3/3 frames passed · 4 expectations passed · 0 failed

✅ PASS — 1. A compact gradient header is titled Library, with its description immediately below and before the tabs

• ✅ PASS A compact gradient header is titled Library, with its description immediately below and before the tabs — A compact blue gradient banner is titled “Library”; directly below it is “Everything you can use in chat — yours, shared with you, from your teams, and org-wide.” before the All/Mine/Shared with me/Team/Everyone tabs.

✅ PASS — 2. A library lists plugin and connection rows with kind and provenance chips

• ✅ PASS A library lists plugin and connection rows with kind and provenance chips — Library rows show kind chips such as “Skill” and “Connection,” plus provenance/access chips including “Catalog: Anthropic Knowledge Work Plugins” and “Everyone.”
• ✅ PASS A connection row shows a needs sign-in state with a Sign in action — The “Library Spec Linear 1785706779380” connection row visibly shows “Needs your sign-in” and a “Sign in” button.

✅ PASS — 3. A narrow mobile layout keeps rows readable with wrapped chips

• ✅ PASS A narrow mobile layout keeps rows readable with wrapped chips — The screenshot shows a narrow single-column card layout; chips wrap onto additional lines, such as “Needs your sign-in” below the Connection/MCP/Everyone row.

---

Roll created 2026-08-02T21:39:40.978Z · Source: evals/results/rolls/2026-08-02T21-39-40-977Z-library-v2/roll.json · Repro: pnpm fraimz:publish -- --pr 3440 --roll 2026-08-02T21-39-40-977Z-library-v2

[diff-warden]

Warden security clearance: clear. No new security issues found in this diff (0348e931000580641c0035f9c7d2fcd57379260e). Automated clearance satisfies the required-review gate only — a human still reviews and merges. Analysis run

[diff-warden]

Warden security clearance: clear. No new security issues found in this diff (731c78b4869868cf6c3f4a7c0de63104dafbe384). Automated clearance satisfies the required-review gate only — a human still reviews and merges. Analysis run