feat: docs and ui tweaks

surfsense_backend/app/agents/chat/multi_agent_chat/shared/tools/mcp/tool.py

@@ -649,14 +649,31 @@ async def _load_http_mcp_tools(
     total_discovered = len(tool_definitions)
 
     if allowed_set:
-        tool_definitions = [td for td in tool_definitions if td["name"] in allowed_set]
-        logger.info(
-            "HTTP MCP server '%s' (connector %d): %d/%d tools after allowlist filter",
-            url,
-            connector_id,
-            len(tool_definitions),
-            total_discovered,
-        )
+        filtered = [td for td in tool_definitions if td["name"] in allowed_set]
+        if not filtered and total_discovered:
+            # The server renamed its tools out from under our allowlist
+            # (e.g. Notion's "notion-" prefix rename) — a fully-dead
+            # allowlist would silently disable the connector. Load
+            # everything instead: renamed tools won't match
+            # ``readonly_tools`` either, so every tool stays HITL-gated.
+            logger.warning(
+                "HTTP MCP server '%s' (connector %d): allowlist matched 0/%d "
+                "advertised tools — server likely renamed its tools. "
+                "Loading all tools (HITL-gated). Update the registry allowlist: %s",
+                url,
+                connector_id,
+                total_discovered,
+                sorted(td["name"] for td in tool_definitions),
+            )
+        else:
+            tool_definitions = filtered
+            logger.info(
+                "HTTP MCP server '%s' (connector %d): %d/%d tools after allowlist filter",
+                url,
+                connector_id,
+                len(tool_definitions),
+                total_discovered,
+            )
     else:
         logger.info(
             "Discovered %d tools from HTTP MCP server '%s' (connector %d) — no allowlist, loading all",

surfsense_backend/app/agents/chat/multi_agent_chat/subagents/builtins/knowledge_base/agent.py

@@ -16,6 +16,9 @@ from langchain_core.tools import BaseTool
 from app.agents.chat.multi_agent_chat.shared.filesystem_selection import FilesystemMode
 from app.agents.chat.multi_agent_chat.shared.permissions import Rule, Ruleset
 from app.agents.chat.multi_agent_chat.subagents.shared.spec import SurfSenseSubagentSpec
+from app.agents.chat.multi_agent_chat.subagents.shared.subagent_builder import (
+    append_today_utc,
+)
 
 from .middleware_stack import build_kb_middleware
 from .prompts import load_description, load_readonly_system_prompt, load_system_prompt
@@ -57,7 +60,7 @@ def build_subagent(
         {
             "name": NAME,
             "description": load_description(),
-            "system_prompt": load_system_prompt(filesystem_mode),
+            "system_prompt": append_today_utc(load_system_prompt(filesystem_mode)),
             "model": llm,
             "tools": [_build_search_knowledge_base_tool(dependencies)],
             "middleware": build_kb_middleware(
@@ -86,7 +89,9 @@ def build_readonly_subagent(
         {
             "name": READONLY_NAME,
             "description": "Read-only knowledge_base specialist (invoked via ask_knowledge_base).",
-            "system_prompt": load_readonly_system_prompt(filesystem_mode),
+            "system_prompt": append_today_utc(
+                load_readonly_system_prompt(filesystem_mode)
+            ),
             "model": llm,
             "tools": [_build_search_knowledge_base_tool(dependencies)],
             "middleware": build_kb_middleware(

surfsense_backend/app/agents/chat/multi_agent_chat/subagents/shared/subagent_builder.py

@@ -5,6 +5,7 @@ from __future__ import annotations
 import logging
 import re
 import time as _perf_time
+from datetime import UTC, datetime
 from typing import Any, cast
 
 from deepagents import SubAgent
@@ -60,6 +61,19 @@ def _resolve_includes(prompt: str, *, subagent_name: str) -> str:
     return _INCLUDE_DIRECTIVE_RE.sub(_replace, prompt)
 
 
+def append_today_utc(prompt: str) -> str:
+    """Append the current UTC date so subagents share the main agent's clock.
+
+    The main agent injects ``Today (UTC): ...`` into its identity prompt, but
+    delegated subagents (calendar/gmail/drive, date-filtered searches, etc.)
+    never saw it and would guess the date. Appended at build time; the compiled
+    graph is cache-keyed on the main prompt hash (which carries the same date),
+    so a day rollover rebuilds both together and they stay consistent.
+    """
+    today = datetime.now(UTC).date().isoformat()
+    return f"{prompt}\n\nToday (UTC): {today}\n"
+
+
 def _user_allowlist_for(
     dependencies: dict[str, Any], subagent_name: str
 ) -> Ruleset | None:
@@ -115,6 +129,7 @@ def pack_subagent(
 
     _t0 = _perf_time.perf_counter()
     system_prompt = _resolve_includes(system_prompt, subagent_name=name)
+    system_prompt = append_today_utc(system_prompt)
     _t_resolve = _perf_time.perf_counter() - _t0
 
     flags = dependencies["flags"]