mirror of
https://github.com/onyx-dot-app/onyx.git
synced 2026-10-21 19:02:45 -05:00
Wenxi
f8c224c145
## Description Let users manage external-app and MCP action permissions in the Plugins UI. Scheduled tasks use the same controls and keep independent app selections and policies. Workspace-disabled actions remain locked. External-app admin tabs follow the MCP flow: Configuration, Authentication, and Tools, followed by Skills where supported. Configuration contains the user-management switch. Authentication contains credentials and custom headers. Tools contains individual action policies. Bulk changes use a dropdown; each action uses Auto-approve, Ask, and Disabled buttons. Plugin modals fit their content up to 80% of the viewport. Scrollbars do not shift the tabs or move content off center. MCP descriptions appear below tool names. Save requires changes, and closing an edited form asks for confirmation. Each opening loads fresh settings; refreshes preserve the open draft. Policy links open the matching app's permissions tab. Remove the superseded standalone policy editors. Keep personally disabled MCP servers in permission catalogs while preserving runtime restrictions. ## How Has This Been Tested? - This PR's intermediate tree passed 233 frontend tests across 14 suites after rebasing onto main. - Commit hooks passed, including TypeScript, formatting, lint, and feature-map integrity. - Earlier local Kind/browser checks covered external-app and MCP saves, workspace restrictions, bulk edits, reset, dirty-form dismissal, failed saves, retries, desktop/mobile sizing, and independent browser-tab saves. ## Additional Options - [ ] [Optional] Please cherry-pick this PR to the latest release version. - [x] [Optional] Override Linear Check <!-- This is an auto-generated comment: release notes by coderabbit.ai --> ## Summary by CodeRabbit * **New Features** * Manage approval settings for connected Craft-compatible apps and MCP servers from plugin details. Search actions, apply bulk Auto-approve, Ask, or Disabled choices, and reset to workspace defaults. * Task editors offer the same per-action and bulk controls, with independent task settings and confirmation before discarding unsaved changes. * App configuration lets administrators control whether users can manage approval settings. Editor tabs separate Configuration, Authentication, Tools, and Skills. * Connected app setup cards link directly to approval settings. * **Improvements** * MCP tool descriptions are visible inline, and plugin editors use larger, scrollable modals. * Workspace-disabled actions remain visible but locked with an explanation. <!-- end of auto-generated comment: release notes by coderabbit.ai -->