fix(extension): safe production defaults and auto-propagate serverSource changes

Default changes (4):
- mcp.autoConfigureOnInstall: true → false (don't write IDE configs without consent)
- ai.autoInstallFiles: true → false (don't install files without consent)
- mcp.toolProfile: full → safe-write (don't expose destructive tools by default)
- debug.enabled: true → false (debug tracing is opt-in)

Auto-propagation:
- Changing serverSource (bundled/npx) in settings now automatically updates
  all configured IDEs and shows a confirmation message. No need to manually
  click Update on each IDE.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: ARHAEEM

packages/extension/package.json

@@ -107,7 +107,7 @@
       "properties": {
         "airtableFormula.mcp.autoConfigureOnInstall": {
           "type": "boolean",
-          "default": true,
+          "default": false,
           "description": "Automatically configure MCP in detected IDEs on first launch."
         },
         "airtableFormula.mcp.serverPathOverride": {
@@ -132,7 +132,7 @@
         },
         "airtableFormula.ai.autoInstallFiles": {
           "type": "boolean",
-          "default": true,
+          "default": false,
           "description": "Automatically install AI skills/rules/workflows on first launch."
         },
         "airtableFormula.ai.includeAgents": {
@@ -168,7 +168,7 @@
         },
         "airtableFormula.mcp.toolProfile": {
           "type": "string",
-          "default": "full",
+          "default": "safe-write",
           "enum": [
             "read-only",
             "safe-write",
@@ -223,7 +223,7 @@
         },
         "airtableFormula.debug.enabled": {
           "type": "boolean",
-          "default": true,
+          "default": false,
           "description": "Enable debug event collection for both extension and MCP server. Events are buffered in memory and only written to disk on export."
         },
         "airtableFormula.debug.bufferSize": {

packages/extension/src/extension.ts

@@ -602,16 +602,31 @@ export async function activate(context: vscode.ExtensionContext): Promise<void>
         }),
     );
 
-    // React to debug setting changes at runtime
+    // React to setting changes at runtime
     context.subscriptions.push(
         traceConfigChanges(debugCollector),
-        vscode.workspace.onDidChangeConfiguration((e) => {
+        vscode.workspace.onDidChangeConfiguration(async (e) => {
             if (e.affectsConfiguration('airtableFormula.debug.enabled')) {
                 debugCollector.enabled = getSettings().debug.enabled;
             }
             if (e.affectsConfiguration('airtableFormula.debug.bufferSize')) {
                 debugCollector.resize(getSettings().debug.bufferSize);
             }
+
+            // Auto-propagate serverSource changes to all configured IDEs
+            if (e.affectsConfiguration('airtableFormula.mcp.serverSource')) {
+                const statuses = await getAllIdeStatuses();
+                const configured = statuses.filter(s => s.detected && s.mcpConfigured);
+                if (configured.length > 0) {
+                    const entry = getServerEntry(context);
+                    const serverPath = getBundledServerPath(context);
+                    await Promise.all(configured.map(s => configureMcpForIde(s.ideId, serverPath, entry)));
+                    vscode.window.showInformationMessage(
+                        `Airtable Formula: MCP server source updated to "${getSettings().mcp.serverSource}" for ${configured.map(s => s.label).join(', ')}.`
+                    );
+                    dashboardProvider.refresh();
+                }
+            }
         }),
     );
 

packages/webview/src/store.ts

@@ -28,11 +28,11 @@ interface Store extends DashboardState {
 
 const defaultSettings: SettingsSnapshot = {
   mcp:     {
-    autoConfigureOnInstall: true,
+    autoConfigureOnInstall: false,
     notifyOnUpdates:        true,
     toolProfile: {
-      profile:      'full',
-      enabledCount: 32,
+      profile:      'safe-write',
+      enabledCount: 23,
       totalCount:   32,
       categories: {
         read: true, fieldWrite: true, fieldDestructive: true,
@@ -41,10 +41,10 @@ const defaultSettings: SettingsSnapshot = {
     },
     serverSource: 'bundled' as const,
   },
-  ai:      { autoInstallFiles: true, includeAgents: false },
+  ai:      { autoInstallFiles: false, includeAgents: false },
   formula: { formatterVersion: 'v2' },
   auth:    { autoRefresh: true, refreshIntervalHours: 12 },
-  debug:   { enabled: true, verboseHttp: false, bufferSize: 1000 },
+  debug:   { enabled: false, verboseHttp: false, bufferSize: 1000 },
 };
 
 const defaultAuth: AuthState = {