feat(bridge): OpenFang tool surface v2 over MCP bridge (+ Stage 9 hardening)

.github/pull_request_template.md

@@ -6,10 +6,18 @@
 
 <!-- Brief list of what changed. -->
 
+## Pre-PR checks (run locally before opening)
+
+Run the full gate locally before opening the PR — CI is strict and Windows clippy in particular catches things macOS/Linux clippy skips via `#[cfg]`.
+
+- [ ] `cargo fmt --all --check`
+- [ ] `cargo clippy --workspace --all-targets -- -D warnings`
+- [ ] `cargo test --workspace`
+- [ ] `cargo audit` (no new vulns; warnings reviewed)
+- [ ] **Windows cross-check:** `scripts/check-windows.sh` (catches `#[cfg(unix)]`-gated import warnings that only fire on Windows CI). First run installs the `x86_64-pc-windows-gnu` rustup target; requires `mingw-w64` (macOS: `brew install mingw-w64`).
+
 ## Testing
 
-- [ ] `cargo clippy --workspace --all-targets -- -D warnings` passes
-- [ ] `cargo test --workspace` passes
 - [ ] Live integration tested (if applicable)
 
 ## Security

Cargo.toml

@@ -14,6 +14,7 @@ members = [
     "crates/openfang-desktop",
     "crates/openfang-hands",
     "crates/openfang-extensions",
+    "crates/openfang-mcp-bridge",
     "xtask",
 ]
 

crates/openfang-api/Cargo.toml

@@ -16,6 +16,7 @@ openfang-skills = { path = "../openfang-skills" }
 openfang-hands = { path = "../openfang-hands" }
 openfang-extensions = { path = "../openfang-extensions" }
 openfang-migrate = { path = "../openfang-migrate" }
+openfang-mcp-bridge = { path = "../openfang-mcp-bridge" }
 dashmap = { workspace = true }
 tokio = { workspace = true }
 serde = { workspace = true }