feat(mcp): add pause/resume controls

[shizhigu]

Why

#1562 added the MCP enable/disable route. This keeps that user-facing flow, but covers the cases that matter once MCP config is shared: inherited global apps, no-op toggles, approval races, and desktop fallback. Users can pause an app without deleting its URL, headers, OAuth setup, or local config.

What changed

• Add PATCH /workspace/:id/mcp/:name with { enabled: boolean } and keep the merged POST /enabled route on the same server path.
• Use OpenCode's existing mcp.<name>.enabled flag for pause/resume.
• Treat inherited global MCPs as workspace pause overrides, not removable project entries.
• Add Settings -> Apps/MCP Pause and Resume actions with all locale keys.

Test plan

• pnpm --filter openwork-server exec bun test src/mcp.remote-connect.e2e.test.ts src/mcp-routes.e2e.test.ts
• bun test apps/app/src/app/mcp.test.ts apps/app/tests/connections-store-mcp-toggle.test.ts apps/app/tests/settings-route-permissions.test.ts
• pnpm --filter openwork-server typecheck
• pnpm --filter openwork-server build:bin
• pnpm --filter @openwork/app typecheck
• pnpm --filter @openwork/app build
• git diff --check

Evidence

Enabled app with the Pause action:

Paused app with the Resume action:

Notes

• Follow-up to feat(mcp): add per-mcp-server enable/disable toggle #1562 / [Feature]: Be able to enable or disable MCP servers and tools #1414, not a replacement for the merged basic toggle.
• Out of scope: per-tool toggles, marketplace changes, OAuth logout, and global config editing.
• Full Docker smoke was not rerun in the final hardening pass; the screenshots above were captured from the local app harness/dev flow.
• Vercel previews on fork PRs still require team authorization.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
openwork-landing	Ready	Preview, Comment, Open in v0	May 1, 2026 5:19pm

[vercel]

@shizhigu is attempting to deploy a commit to the Different AI Team on Vercel.

A member of the Team first needs to authorize it.

[github-actions]

The following comment was made by an LLM, it may be inaccurate:

[venkateshamatam]

nice one!! just made a PR for the same yesterday #1562

[shizhigu]

nice one!! just made a PR for the same yesterday #1562

Thanks! Saw #1562 too. Mine goes a bit deeper. Happy to converge if the maintainers prefer one path!

[src-opn]

quite some conflicts here because we made some changes
can you clean them up, and instead of a button have a toggle for enabled/disabled