@cat-factory/app 0.260.1 → 0.261.0

package/app/components/auth/LoginScreen.vue

@@ -5,6 +5,7 @@ import SecretInput from '~/components/common/SecretInput.vue'
 import type { VcsProvider } from '~/types/domain'
 import { VCS_PROVIDER_ICONS, VCS_PROVIDER_LABELS, vcsTokenCreateUrl } from '~/utils/vcs'
 import { SSO_ERROR_MESSAGE_KEYS } from '~/utils/sso'
+import { postSignInUrl } from '~/utils/postSignIn'
 
 const auth = useAuthStore()
 const { t } = useI18n()
@@ -62,7 +63,7 @@ async function submitPat(provider: PatProvider) {
   patBusy.value = true
   try {
     await auth.patLogin({ provider })
-    if (typeof window !== 'undefined') window.location.assign(window.location.pathname)
+    if (typeof window !== 'undefined') window.location.assign(postSignInUrl(window.location))
   } catch (e) {
     patError.value = apiErrorEnvelope(e)?.message ?? t('auth.localMode.failed')
   } finally {
@@ -105,7 +106,7 @@ async function submitPassword() {
       await auth.passwordLogin({ email: email.value, password: password.value })
     }
     // Reload so the app boots with the new session.
-    if (typeof window !== 'undefined') window.location.assign(window.location.pathname)
+    if (typeof window !== 'undefined') window.location.assign(postSignInUrl(window.location))
   } catch (e) {
     error.value = apiErrorEnvelope(e)?.message ?? t('auth.login.signInFailed')
   } finally {
@@ -177,7 +178,7 @@ async function submitRemotePat() {
   remotePatBusy.value = true
   try {
     await auth.patLogin({ provider: remotePatProvider.value, token: remotePatToken.value.trim() })
-    if (typeof window !== 'undefined') window.location.assign(window.location.pathname)
+    if (typeof window !== 'undefined') window.location.assign(postSignInUrl(window.location))
   } catch (e) {
     remotePatError.value = apiErrorEnvelope(e)?.message ?? t('auth.login.signInFailed')
   } finally {

package/app/components/settings/McpAuthorizeScreen.vue

@@ -0,0 +1,262 @@
+<script setup lang="ts">
+import { computed, onMounted, ref } from 'vue'
+import {
+  MCP_AUTHORIZATION_REQUEST_INVALID,
+  PUBLIC_API_SCOPES,
+  type PublicApiScope,
+} from '@cat-factory/contracts'
+import { apiErrorEnvelope, apiErrorReason } from '~/composables/api/errors'
+
+// The consent screen an MCP host's authorization request lands on
+// (`/mcp-authorize?request=…`), reached by a redirect from `GET /oauth/authorize`.
+//
+// A page in the APP rather than a screen the backend renders, and that is the security shape of
+// this flow: the authorization endpoint is a top-level navigation a third party triggers, carrying
+// no bearer token, so a screen served there could never say WHO is approving. Here the session is
+// the app's own, and the two calls this page makes are ordinary gated API where the board choice
+// and its `secrets.manage` check actually run.
+//
+// Not a public route: an expired session renders the login screen on this same URL, and once the
+// person signs in the query string is still here and the flow continues (`postSignInUrl`, which
+// LoginScreen reloads to, exists to keep it). That is correct rather than a gap, and it is also how
+// an SSO deployment gets its identity provider into a flow that otherwise has no idea who anyone
+// is.
+
+const api = useApi()
+const { t } = useI18n()
+
+type Screen = 'loading' | 'deciding' | 'submitting' | 'failed'
+
+const screen = ref<Screen>('loading')
+const detail = ref<string | null>(null)
+/**
+ * A refusal that did NOT consume the request, shown beside the choices rather than instead of
+ * them. See `decide`: the two failures are answered differently because only one of them ends the
+ * flow.
+ */
+const decisionError = ref<string | null>(null)
+const clientName = ref('')
+const redirectOrigin = ref('')
+const workspaces = ref<{ label: string; value: string }[]>([])
+const workspaceId = ref<string | undefined>(undefined)
+/**
+ * Starts at the FLOOR of the ladder and is replaced by the server's `defaultScope` once the request
+ * resolves. The screen never preselects from the host's own ask: an unauthenticated registration
+ * can name any scope, so the server clamps it (`consentDefaultScope`) and this page renders what it
+ * was given. Least privilege before that answer arrives, in case a render ever beats it.
+ */
+const scope = ref<PublicApiScope>('read')
+/** What the host asked for, when the server preselected something else. Shown, never applied. */
+const requestedScope = ref<PublicApiScope | null>(null)
+
+const sealedRequest = computed(() =>
+  typeof window === 'undefined'
+    ? ''
+    : (new URLSearchParams(window.location.search).get('request') ?? ''),
+)
+
+/**
+ * The ladder, as choices. Every rung is offered rather than a curated subset: the rungs are what
+ * the surface itself enforces, and hiding one would leave a host that genuinely needs it unable to
+ * be granted it from the screen built for granting.
+ */
+const scopeItems = computed(() =>
+  PUBLIC_API_SCOPES.map((value) => ({
+    value,
+    label: t(`mcpAuthorize.scope.${value}.label`),
+    description: t(`mcpAuthorize.scope.${value}.description`),
+  })),
+)
+
+onMounted(async () => {
+  if (!sealedRequest.value) {
+    screen.value = 'failed'
+    detail.value = t('mcpAuthorize.error.noRequest')
+    return
+  }
+  try {
+    const [request, boards] = await Promise.all([
+      api.describeMcpAuthorization(sealedRequest.value),
+      api.listWorkspaces(),
+    ])
+    clientName.value = request.clientName
+    redirectOrigin.value = request.redirectOrigin
+    scope.value = request.defaultScope
+    // Only worth saying when the two differ: identical values would be a line telling a person
+    // that the thing in front of them is the thing in front of them.
+    requestedScope.value =
+      request.requestedScope && request.requestedScope !== request.defaultScope
+        ? request.requestedScope
+        : null
+    workspaces.value = boards.map((board) => ({ label: board.name, value: board.id }))
+    workspaceId.value = workspaces.value[0]?.value
+    screen.value = 'deciding'
+  } catch (e) {
+    // Terminal whatever the cause: with no request to describe there is nothing to decide, and the
+    // person is told to start again from the host, which is the only place a new one comes from.
+    screen.value = 'failed'
+    detail.value = apiErrorEnvelope(e)?.message ?? t('mcpAuthorize.error.expired')
+  }
+})
+
+async function decide(decision: 'approve' | 'deny') {
+  if (decision === 'approve' && !workspaceId.value) return
+  screen.value = 'submitting'
+  decisionError.value = null
+  try {
+    const result = await api.decideMcpAuthorization(
+      decision === 'approve'
+        ? {
+            decision,
+            request: sealedRequest.value,
+            workspaceId: workspaceId.value as string,
+            scope: scope.value,
+          }
+        : { decision, request: sealedRequest.value },
+    )
+    // A full navigation, never a router push: the destination is the HOST's own callback, which is
+    // waiting for a browser to arrive at it with the code on the query string.
+    if (typeof window !== 'undefined') window.location.assign(result.redirectTo)
+  } catch (e) {
+    // Two outcomes, because two things can be wrong and only one of them ends the flow. The sealed
+    // request gone is TERMINAL: nothing on this page can mint another, so it says so and offers the
+    // way out. Anything else (this board is one the person cannot mint a key on, it disappeared,
+    // the deployment hiccuped) leaves the request valid and this screen the only place the decision
+    // can be made, so dropping to a dead end over it would strand a person who has a board they
+    // COULD have picked one dropdown away.
+    if (apiErrorReason(e) === MCP_AUTHORIZATION_REQUEST_INVALID) {
+      screen.value = 'failed'
+      detail.value = apiErrorEnvelope(e)?.message ?? t('mcpAuthorize.error.expired')
+      return
+    }
+    screen.value = 'deciding'
+    decisionError.value = apiErrorEnvelope(e)?.message ?? t('mcpAuthorize.error.failed')
+  }
+}
+
+function backToApp() {
+  if (typeof window !== 'undefined') window.location.assign('/')
+}
+</script>
+
+<template>
+  <div
+    class="flex min-h-screen w-screen items-center justify-center bg-slate-950 p-4 text-slate-100"
+    data-testid="mcp-authorize"
+  >
+    <div
+      class="w-full max-w-md rounded-xl border border-slate-800 bg-slate-900/80 p-8 backdrop-blur"
+    >
+      <template v-if="screen === 'loading'">
+        <UIcon name="i-lucide-loader" class="mx-auto h-10 w-10 animate-spin text-indigo-400" />
+      </template>
+
+      <template v-else-if="screen === 'failed'">
+        <UIcon name="i-lucide-alert-triangle" class="mx-auto mb-3 h-10 w-10 text-red-400" />
+        <h1
+          class="mb-1 text-center text-lg font-semibold text-white"
+          data-testid="mcp-authorize-failed"
+        >
+          {{ t('mcpAuthorize.error.title') }}
+        </h1>
+        <p class="mb-6 text-center text-sm break-words text-slate-400">{{ detail }}</p>
+        <UButton block color="neutral" variant="subtle" @click="backToApp">
+          {{ t('mcpAuthorize.back') }}
+        </UButton>
+      </template>
+
+      <template v-else>
+        <UIcon name="i-lucide-plug-zap" class="mx-auto mb-3 h-10 w-10 text-indigo-400" />
+        <h1 class="mb-1 text-center text-lg font-semibold text-white">
+          {{ t('mcpAuthorize.title', { client: clientName }) }}
+        </h1>
+        <!-- The origin is the one fact here an attacker cannot choose: it was matched against what
+             the client registered before this screen was ever reached. The name beside it is a
+             stranger's own words, so the copy presents it as a claim rather than as identity.
+             The copy reads "It says it is {client}, and …" in every locale, so BOTH holes have to
+             be filled: an unpassed `client` renders a sentence naming nobody, on the one screen
+             whose whole subject is who is asking. -->
+        <p class="mb-6 text-center text-sm text-slate-400">
+          {{ t('mcpAuthorize.subtitle', { client: clientName, origin: redirectOrigin }) }}
+        </p>
+
+        <div v-if="!workspaces.length" class="mb-6 text-center text-sm text-amber-300">
+          {{ t('mcpAuthorize.noWorkspaces') }}
+        </div>
+
+        <template v-else>
+          <UFormField :label="t('mcpAuthorize.workspace.label')" class="mb-4">
+            <USelect
+              v-model="workspaceId"
+              :items="workspaces"
+              value-key="value"
+              class="w-full"
+              data-testid="mcp-authorize-workspace"
+            />
+          </UFormField>
+
+          <UFormField
+            :label="t('mcpAuthorize.scopeLabel')"
+            :description="t('mcpAuthorize.scopeHint')"
+            :class="requestedScope ? 'mb-2' : 'mb-6'"
+          >
+            <URadioGroup
+              v-model="scope"
+              :items="scopeItems"
+              value-key="value"
+              data-testid="mcp-authorize-scope"
+            />
+          </UFormField>
+
+          <!-- Only when the host asked for something other than what is preselected. Anyone can
+               register a client and ask for `admin`, so the ask is reported as a fact ABOUT the
+               host rather than acted on: raising the grant stays a thing a person does. -->
+          <p
+            v-if="requestedScope"
+            class="mb-6 text-xs text-amber-300"
+            data-testid="mcp-authorize-requested-scope"
+          >
+            {{
+              t('mcpAuthorize.requestedScope', {
+                client: clientName,
+                scope: t(`mcpAuthorize.scope.${requestedScope}.label`),
+              })
+            }}
+          </p>
+        </template>
+
+        <p
+          v-if="decisionError"
+          class="mb-4 text-center text-sm break-words text-red-400"
+          data-testid="mcp-authorize-decision-error"
+        >
+          {{ decisionError }}
+        </p>
+
+        <div class="flex gap-2">
+          <UButton
+            block
+            color="neutral"
+            variant="subtle"
+            :disabled="screen === 'submitting'"
+            @click="decide('deny')"
+          >
+            {{ t('mcpAuthorize.deny') }}
+          </UButton>
+          <UButton
+            block
+            color="primary"
+            :loading="screen === 'submitting'"
+            :disabled="!workspaceId"
+            data-testid="mcp-authorize-approve"
+            @click="decide('approve')"
+          >
+            {{ t('mcpAuthorize.approve') }}
+          </UButton>
+        </div>
+
+        <p class="mt-4 text-center text-xs text-slate-500">{{ t('mcpAuthorize.revokeHint') }}</p>
+      </template>
+    </div>
+  </div>
+</template>

package/app/composables/api/mcpAuthorization.ts

@@ -0,0 +1,30 @@
+import {
+  decideMcpAuthorizationContract,
+  describeMcpAuthorizationContract,
+  type McpAuthorizationDecision,
+} from '@cat-factory/contracts'
+import type { ApiContext } from './context'
+
+/**
+ * The consent screen an MCP host's authorization request lands on.
+ *
+ * The mirror image of the tool-server OAuth calls beside it: those connect THIS deployment to
+ * someone else's MCP server, these let someone else's host connect to this one. Neither is
+ * workspace-prefixed, and for opposite reasons: there the board is sealed into the vendor's state,
+ * here it is what the person on the screen is choosing.
+ *
+ * Both are POSTs, the read included. The sealed request is a value the page carries rather than an
+ * id it looks up, and a query string would write it into browser history and every log in between.
+ */
+export function mcpAuthorizationApi({ send }: ApiContext) {
+  return {
+    describeMcpAuthorization: (request: string) =>
+      send(describeMcpAuthorizationContract, { body: { request } }),
+
+    // Answers with WHERE to send the browser, rather than redirecting: a 302 on a `fetch` is
+    // followed by the browser without this page seeing it, which would deliver the host's callback
+    // an XHR instead of the navigation it is waiting for.
+    decideMcpAuthorization: (body: McpAuthorizationDecision) =>
+      send(decideMcpAuthorizationContract, { body }),
+  }
+}

package/app/composables/useApi.ts

@@ -35,6 +35,7 @@ import { modelsApi } from './api/models'
 import { notificationsApi } from './api/notifications'
 import { packageRegistriesApi } from './api/packageRegistries'
 import { capabilityCredentialsApi } from './api/capabilityCredentials'
+import { mcpAuthorizationApi } from './api/mcpAuthorization'
 import { toolServersApi } from './api/toolServers'
 import { preflightsApi } from './api/preflights'
 import { presetsApi } from './api/presets'
@@ -161,6 +162,7 @@ export function useApi() {
     ...testSecretsApi(ctx),
     ...packageRegistriesApi(ctx),
     ...capabilityCredentialsApi(ctx),
+    ...mcpAuthorizationApi(ctx),
     ...toolServersApi(ctx),
     ...previewApi(ctx),
     ...environmentsApi(ctx),

package/app/pages/mcp-authorize.vue

@@ -0,0 +1,7 @@
+<script setup lang="ts">
+import McpAuthorizeScreen from '~/components/settings/McpAuthorizeScreen.vue'
+</script>
+
+<template>
+  <McpAuthorizeScreen />
+</template>

package/app/stores/auth/session.ts

@@ -1,5 +1,6 @@
 import type { Ref } from 'vue'
 import type { AuthUser } from '~/types/domain'
+import { postSignInUrl } from '~/utils/postSignIn'
 
 /**
  * Shared reactive state + injected dependencies the auth-store sign-in factory closes over.
@@ -24,9 +25,20 @@ export interface AuthSessionContext {
 export function createAuthSessionActions(ctx: AuthSessionContext) {
   const { api, apiBase, token, user, autoLoginProvider } = ctx
 
-  /** Build a post-login redirect back to the current page, with an optional invite. */
+  /**
+   * Build a post-login redirect back to the current page, with an optional invite.
+   *
+   * "The current page" includes its QUERY STRING, through the same `postSignInUrl` the credential
+   * forms reload to, so the round-trip through an identity provider lands where the person started
+   * rather than one level up. A flow that carries its whole subject there (`/mcp-authorize?request=`)
+   * otherwise comes back from the IdP to a page that no longer knows what it was asked, and this is
+   * the path an SSO deployment takes for EVERY sign-in, not an unusual one.
+   *
+   * The `invite` is dropped from the returned-to URL by that helper and named as its own parameter
+   * here, which is the same token travelling as itself rather than twice.
+   */
   function redirectTarget(invite?: string): string {
-    const here = window.location.origin + window.location.pathname
+    const here = window.location.origin + postSignInUrl(window.location)
     const params = new URLSearchParams({ redirect: here })
     if (invite) params.set('invite', invite)
     return params.toString()

package/app/utils/postSignIn.spec.ts

@@ -0,0 +1,29 @@
+import { describe, expect, it } from 'vitest'
+import { postSignInUrl } from './postSignIn'
+
+// The regression this exists for: every sign-in path reloaded to `location.pathname`, so a flow
+// whose subject rides the query string lost it the moment a person signed in. The MCP consent
+// screen is the one that fails hardest, and signing in first is the ordinary way a first connect
+// goes, so the loss is on the common path rather than an edge of it.
+
+describe('postSignInUrl', () => {
+  it('keeps the query string the destination needs', () => {
+    expect(postSignInUrl({ pathname: '/mcp-authorize', search: '?request=sealed-value' })).toBe(
+      '/mcp-authorize?request=sealed-value',
+    )
+  })
+
+  it('drops the invite token, which the signup call already spent', () => {
+    // Not a matter of tidiness: a consumed invite left in the address bar is a token in every
+    // place a URL gets pasted, and it buys the reader nothing because it no longer works.
+    expect(postSignInUrl({ pathname: '/', search: '?invite=tok_1' })).toBe('/')
+    expect(postSignInUrl({ pathname: '/', search: '?invite=tok_1&ws=ws_9' })).toBe('/?ws=ws_9')
+  })
+
+  it('answers a bare path unchanged, and drops a fragment', () => {
+    expect(postSignInUrl({ pathname: '/', search: '' })).toBe('/')
+    // The fragment is absent by construction: it is never read here, so a stale one would only
+    // scroll the freshly booted app to an anchor the previous screen owned.
+    expect(postSignInUrl({ pathname: '/boards', search: '?a=1' })).toBe('/boards?a=1')
+  })
+})

package/app/utils/postSignIn.ts

@@ -0,0 +1,29 @@
+/**
+ * Where the browser reloads to once a sign-in succeeds.
+ *
+ * Every sign-in path reloads rather than routing, because the app has to boot with the new session
+ * rather than patch itself around it. What it reloads TO is the question this answers, and the
+ * naive `location.pathname` gets it wrong: the login screen renders at whatever URL the person
+ * arrived at, so the query string belongs to the destination, not to the sign-in. Dropping it
+ * silently strands any flow that carries its subject there. The MCP consent screen is the case that
+ * bites hardest (`/mcp-authorize?request=<sealed>`): signing in first is the COMMON path for a
+ * first connect, and landing back with no `request` leaves a person looking at "this page was
+ * opened without an authorization request" with no way forward except restarting from the host.
+ *
+ * `invite` is the one parameter dropped, and it is dropped because it has already been SPENT: the
+ * signup call consumed it, so keeping it would leave a consumed token in the address bar and in
+ * every place a URL gets pasted. Everything else is the destination's business, not this module's,
+ * which is why the rule is a named exception rather than an allowlist nobody remembers to extend.
+ */
+const SPENT_PARAMS = ['invite']
+
+/**
+ * The post-sign-in URL for one location: its path, its query minus the spent parameters, and no
+ * fragment (nothing in this app puts state there, and a stale one would scroll to nowhere).
+ */
+export function postSignInUrl(location: { pathname: string; search: string }): string {
+  const params = new URLSearchParams(location.search)
+  for (const spent of SPENT_PARAMS) params.delete(spent)
+  const query = params.toString()
+  return query ? `${location.pathname}?${query}` : location.pathname
+}

package/i18n/locales/de.json

@@ -1,4 +1,43 @@
 {
+  "mcpAuthorize": {
+    "title": "{client} verbinden?",
+    "subtitle": "Die Anwendung gibt an, {client} zu sein, und diese Installation leitet sie zurück an {origin}.",
+    "workspace": {
+      "label": "Board, auf dem sie handeln darf"
+    },
+    "scopeLabel": "Was sie tun darf",
+    "scopeHint": "Jede Stufe schließt die darüberliegenden ein.",
+    "scope": {
+      "read": {
+        "label": "Nur lesen",
+        "description": "Services, Aufgaben, Pipelines und Läufe ansehen."
+      },
+      "write": {
+        "label": "Lesen und schreiben",
+        "description": "Zusätzlich Aufgaben anlegen und starten."
+      },
+      "decide": {
+        "label": "Lesen, schreiben und entscheiden",
+        "description": "Zusätzlich die Fragen beantworten, auf die ein pausierter Lauf wartet."
+      },
+      "admin": {
+        "label": "Voller Zugriff",
+        "description": "Zusätzlich Aufgaben löschen und auf Benachrichtigungen reagieren, was einen Pull Request zusammenführen kann."
+      }
+    },
+    "requestedScope": "{client} hat {scope} angefragt. Wählen Sie das oben nur, wenn Sie es wirklich gewähren möchten.",
+    "approve": "Verbinden",
+    "deny": "Abbrechen",
+    "back": "Zurück zur App",
+    "noWorkspaces": "Sie haben noch kein Board, mit dem sich das verbinden ließe.",
+    "revokeHint": "Dabei wird ein API-Schlüssel ausgestellt, den Sie jederzeit in den Board-Einstellungen widerrufen können.",
+    "error": {
+      "title": "Diese Verbindung konnte nicht eingerichtet werden",
+      "noRequest": "Diese Seite wurde ohne Autorisierungsanfrage geöffnet. Starten Sie die Verbindung in Ihrem MCP-Host.",
+      "expired": "Diese Autorisierungsanfrage ist ungültig oder abgelaufen. Starten Sie die Verbindung in Ihrem MCP-Host erneut.",
+      "failed": "Die Entscheidung konnte nicht gespeichert werden. Starten Sie die Verbindung in Ihrem MCP-Host erneut."
+    }
+  },
   "settings": {
     "modelConfiguration": {
       "title": "Modellkonfiguration",

package/i18n/locales/en.json

@@ -2682,6 +2682,45 @@
       }
     }
   },
+  "mcpAuthorize": {
+    "title": "Connect {client}?",
+    "subtitle": "It says it is {client}, and this deployment will send it back to {origin}.",
+    "workspace": {
+      "label": "Board it may act on"
+    },
+    "scopeLabel": "What it may do",
+    "scopeHint": "Each level includes the ones above it.",
+    "scope": {
+      "read": {
+        "label": "Read only",
+        "description": "See services, tasks, pipelines and runs."
+      },
+      "write": {
+        "label": "Read and write",
+        "description": "Also create and start tasks."
+      },
+      "decide": {
+        "label": "Read, write and decide",
+        "description": "Also answer the questions a parked run is waiting on."
+      },
+      "admin": {
+        "label": "Full access",
+        "description": "Also delete tasks and act on notifications, which can merge a pull request."
+      }
+    },
+    "requestedScope": "{client} asked for {scope}. Choose it above only if you mean to grant that.",
+    "approve": "Connect",
+    "deny": "Cancel",
+    "back": "Back to the app",
+    "noWorkspaces": "You have no boards to connect this to yet.",
+    "revokeHint": "This issues an API key you can revoke at any time from the board's settings.",
+    "error": {
+      "title": "This connection could not be set up",
+      "noRequest": "This page was opened without an authorization request. Start the connection from your MCP host.",
+      "expired": "This authorization request is invalid or has expired. Start the connection again from your MCP host.",
+      "failed": "The decision could not be recorded. Start the connection again from your MCP host."
+    }
+  },
   "settings": {
     "modelConfiguration": {
       "title": "Model Configuration",

package/i18n/locales/es.json

@@ -2575,6 +2575,45 @@
       }
     }
   },
+  "mcpAuthorize": {
+    "title": "¿Conectar {client}?",
+    "subtitle": "Dice ser {client}, y esta instalación lo devolverá a {origin}.",
+    "workspace": {
+      "label": "Tablero en el que podrá actuar"
+    },
+    "scopeLabel": "Lo que podrá hacer",
+    "scopeHint": "Cada nivel incluye los anteriores.",
+    "scope": {
+      "read": {
+        "label": "Solo lectura",
+        "description": "Ver servicios, tareas, pipelines y ejecuciones."
+      },
+      "write": {
+        "label": "Lectura y escritura",
+        "description": "Además, crear e iniciar tareas."
+      },
+      "decide": {
+        "label": "Lectura, escritura y decisión",
+        "description": "Además, responder a las preguntas que espera una ejecución detenida."
+      },
+      "admin": {
+        "label": "Acceso completo",
+        "description": "Además, eliminar tareas y actuar sobre notificaciones, lo que puede fusionar un pull request."
+      }
+    },
+    "requestedScope": "{client} solicitó {scope}. Elige esa opción arriba solo si de verdad quieres concederla.",
+    "approve": "Conectar",
+    "deny": "Cancelar",
+    "back": "Volver a la aplicación",
+    "noWorkspaces": "Todavía no tienes ningún tablero al que conectarlo.",
+    "revokeHint": "Esto emite una clave de API que puedes revocar cuando quieras desde los ajustes del tablero.",
+    "error": {
+      "title": "No se pudo establecer esta conexión",
+      "noRequest": "Esta página se abrió sin una solicitud de autorización. Inicia la conexión desde tu host MCP.",
+      "expired": "Esta solicitud de autorización no es válida o ha caducado. Vuelve a iniciar la conexión desde tu host MCP.",
+      "failed": "No se pudo registrar la decisión. Vuelve a iniciar la conexión desde tu host MCP."
+    }
+  },
   "settings": {
     "modelConfiguration": {
       "title": "Configuración de modelos",

package/i18n/locales/fr.json

@@ -2575,6 +2575,45 @@
       }
     }
   },
+  "mcpAuthorize": {
+    "title": "Connecter {client} ?",
+    "subtitle": "Il se présente comme {client}, et ce déploiement le renverra vers {origin}.",
+    "workspace": {
+      "label": "Tableau sur lequel il pourra agir"
+    },
+    "scopeLabel": "Ce qu'il pourra faire",
+    "scopeHint": "Chaque niveau inclut les précédents.",
+    "scope": {
+      "read": {
+        "label": "Lecture seule",
+        "description": "Voir les services, les tâches, les pipelines et les exécutions."
+      },
+      "write": {
+        "label": "Lecture et écriture",
+        "description": "Et aussi créer et lancer des tâches."
+      },
+      "decide": {
+        "label": "Lecture, écriture et décision",
+        "description": "Et aussi répondre aux questions qu'attend une exécution en pause."
+      },
+      "admin": {
+        "label": "Accès complet",
+        "description": "Et aussi supprimer des tâches et agir sur les notifications, ce qui peut fusionner une pull request."
+      }
+    },
+    "requestedScope": "{client} a demandé {scope}. Ne choisissez cette option ci-dessus que si vous voulez vraiment l'accorder.",
+    "approve": "Connecter",
+    "deny": "Annuler",
+    "back": "Retour à l'application",
+    "noWorkspaces": "Vous n'avez encore aucun tableau auquel le connecter.",
+    "revokeHint": "Cela émet une clé d'API que vous pouvez révoquer à tout moment depuis les réglages du tableau.",
+    "error": {
+      "title": "Cette connexion n'a pas pu être établie",
+      "noRequest": "Cette page a été ouverte sans demande d'autorisation. Lancez la connexion depuis votre hôte MCP.",
+      "expired": "Cette demande d'autorisation est invalide ou a expiré. Relancez la connexion depuis votre hôte MCP.",
+      "failed": "La décision n'a pas pu être enregistrée. Relancez la connexion depuis votre hôte MCP."
+    }
+  },
   "settings": {
     "modelConfiguration": {
       "title": "Configuration des modèles",

package/i18n/locales/he.json

@@ -2575,6 +2575,45 @@
       }
     }
   },
+  "mcpAuthorize": {
+    "title": "לחבר את {client}?",
+    "subtitle": "הוא מציג את עצמו כ־{client}, והפריסה הזו תחזיר אותו אל {origin}.",
+    "workspace": {
+      "label": "הלוח שבו יורשה לפעול"
+    },
+    "scopeLabel": "מה יורשה לעשות",
+    "scopeHint": "כל רמה כוללת את הרמות שמעליה.",
+    "scope": {
+      "read": {
+        "label": "קריאה בלבד",
+        "description": "לראות שירותים, משימות, פייפליינים והרצות."
+      },
+      "write": {
+        "label": "קריאה וכתיבה",
+        "description": "וגם ליצור משימות ולהפעיל אותן."
+      },
+      "decide": {
+        "label": "קריאה, כתיבה והכרעה",
+        "description": "וגם לענות על השאלות שהרצה ממתינה להן."
+      },
+      "admin": {
+        "label": "גישה מלאה",
+        "description": "וגם למחוק משימות ולפעול על התראות, מה שעשוי למזג בקשת משיכה."
+      }
+    },
+    "requestedScope": "{client} ביקש {scope}. בחרו באפשרות הזו למעלה רק אם אתם באמת מתכוונים להעניק אותה.",
+    "approve": "חיבור",
+    "deny": "ביטול",
+    "back": "חזרה לאפליקציה",
+    "noWorkspaces": "אין לך עדיין לוח שאפשר לחבר אליו.",
+    "revokeHint": "פעולה זו מנפיקה מפתח API שאפשר לבטל בכל עת מהגדרות הלוח.",
+    "error": {
+      "title": "לא ניתן היה להקים את החיבור",
+      "noRequest": "הדף נפתח ללא בקשת הרשאה. התחילו את החיבור מתוך מארח ה־MCP שלכם.",
+      "expired": "בקשת ההרשאה אינה תקפה או שפג תוקפה. התחילו את החיבור שוב מתוך מארח ה־MCP שלכם.",
+      "failed": "לא ניתן היה לרשום את ההחלטה. התחילו את החיבור שוב מתוך מארח ה־MCP שלכם."
+    }
+  },
   "settings": {
     "modelConfiguration": {
       "title": "הגדרת מודלים",

package/i18n/locales/it.json

@@ -1,4 +1,43 @@
 {
+  "mcpAuthorize": {
+    "title": "Collegare {client}?",
+    "subtitle": "Dichiara di essere {client}, e questa installazione lo rimanderà a {origin}.",
+    "workspace": {
+      "label": "Bacheca su cui potrà agire"
+    },
+    "scopeLabel": "Cosa potrà fare",
+    "scopeHint": "Ogni livello include quelli precedenti.",
+    "scope": {
+      "read": {
+        "label": "Sola lettura",
+        "description": "Vedere servizi, attività, pipeline ed esecuzioni."
+      },
+      "write": {
+        "label": "Lettura e scrittura",
+        "description": "Inoltre creare e avviare attività."
+      },
+      "decide": {
+        "label": "Lettura, scrittura e decisione",
+        "description": "Inoltre rispondere alle domande su cui un'esecuzione è in attesa."
+      },
+      "admin": {
+        "label": "Accesso completo",
+        "description": "Inoltre eliminare attività e agire sulle notifiche, il che può unire una pull request."
+      }
+    },
+    "requestedScope": "{client} ha richiesto {scope}. Seleziona quell'opzione qui sopra solo se intendi davvero concederla.",
+    "approve": "Collega",
+    "deny": "Annulla",
+    "back": "Torna all'app",
+    "noWorkspaces": "Non hai ancora una bacheca a cui collegarlo.",
+    "revokeHint": "Questo emette una chiave API che puoi revocare in qualsiasi momento dalle impostazioni della bacheca.",
+    "error": {
+      "title": "Non è stato possibile creare questo collegamento",
+      "noRequest": "Questa pagina è stata aperta senza una richiesta di autorizzazione. Avvia il collegamento dal tuo host MCP.",
+      "expired": "Questa richiesta di autorizzazione non è valida o è scaduta. Riavvia il collegamento dal tuo host MCP.",
+      "failed": "Non è stato possibile registrare la decisione. Riavvia il collegamento dal tuo host MCP."
+    }
+  },
   "settings": {
     "modelConfiguration": {
       "title": "Configurazione del modello",

package/i18n/locales/ja.json

@@ -2575,6 +2575,45 @@
       }
     }
   },
+  "mcpAuthorize": {
+    "title": "{client} を接続しますか？",
+    "subtitle": "{client} を名乗っており、このデプロイは接続後に {origin} へ戻します。",
+    "workspace": {
+      "label": "操作を許可するボード"
+    },
+    "scopeLabel": "許可する操作",
+    "scopeHint": "各レベルは上位のレベルを含みます。",
+    "scope": {
+      "read": {
+        "label": "読み取りのみ",
+        "description": "サービス、タスク、パイプライン、実行を閲覧します。"
+      },
+      "write": {
+        "label": "読み取りと書き込み",
+        "description": "加えて、タスクの作成と開始ができます。"
+      },
+      "decide": {
+        "label": "読み取り、書き込み、判断",
+        "description": "加えて、停止中の実行が待っている質問に回答できます。"
+      },
+      "admin": {
+        "label": "フルアクセス",
+        "description": "加えて、タスクの削除と通知への対応ができ、プルリクエストがマージされることもあります。"
+      }
+    },
+    "requestedScope": "{client} は {scope} を要求しました。本当に許可する場合のみ、上でその項目を選んでください。",
+    "approve": "接続",
+    "deny": "キャンセル",
+    "back": "アプリに戻る",
+    "noWorkspaces": "接続できるボードがまだありません。",
+    "revokeHint": "これにより API キーが発行されます。ボードの設定からいつでも無効化できます。",
+    "error": {
+      "title": "この接続を設定できませんでした",
+      "noRequest": "認可リクエストなしでこのページが開かれました。MCP ホストから接続を開始してください。",
+      "expired": "この認可リクエストは無効か、有効期限が切れています。MCP ホストから接続をやり直してください。",
+      "failed": "判断を記録できませんでした。MCP ホストから接続をやり直してください。"
+    }
+  },
   "settings": {
     "modelConfiguration": {
       "title": "モデル設定",

package/i18n/locales/pl.json

@@ -2575,6 +2575,45 @@
       }
     }
   },
+  "mcpAuthorize": {
+    "title": "Połączyć {client}?",
+    "subtitle": "Podaje się za {client}, a ta instalacja odeśle go do {origin}.",
+    "workspace": {
+      "label": "Tablica, na której będzie działać"
+    },
+    "scopeLabel": "Co będzie mógł robić",
+    "scopeHint": "Każdy poziom obejmuje poprzednie.",
+    "scope": {
+      "read": {
+        "label": "Tylko odczyt",
+        "description": "Podgląd usług, zadań, potoków i uruchomień."
+      },
+      "write": {
+        "label": "Odczyt i zapis",
+        "description": "Dodatkowo tworzenie i uruchamianie zadań."
+      },
+      "decide": {
+        "label": "Odczyt, zapis i decyzje",
+        "description": "Dodatkowo odpowiadanie na pytania, na które czeka wstrzymane uruchomienie."
+      },
+      "admin": {
+        "label": "Pełny dostęp",
+        "description": "Dodatkowo usuwanie zadań i reagowanie na powiadomienia, co może scalić pull request."
+      }
+    },
+    "requestedScope": "{client} poprosił o {scope}. Wybierz tę opcję powyżej tylko wtedy, gdy naprawdę chcesz jej udzielić.",
+    "approve": "Połącz",
+    "deny": "Anuluj",
+    "back": "Powrót do aplikacji",
+    "noWorkspaces": "Nie masz jeszcze tablicy, z którą można to połączyć.",
+    "revokeHint": "Zostanie wydany klucz API, który w każdej chwili możesz unieważnić w ustawieniach tablicy.",
+    "error": {
+      "title": "Nie udało się skonfigurować tego połączenia",
+      "noRequest": "Ta strona została otwarta bez żądania autoryzacji. Rozpocznij łączenie w swoim hoście MCP.",
+      "expired": "To żądanie autoryzacji jest nieprawidłowe lub wygasło. Rozpocznij łączenie ponownie w swoim hoście MCP.",
+      "failed": "Nie udało się zapisać decyzji. Rozpocznij łączenie ponownie w swoim hoście MCP."
+    }
+  },
   "settings": {
     "modelConfiguration": {
       "title": "Konfiguracja modeli",

package/i18n/locales/tr.json

@@ -2575,6 +2575,45 @@
       }
     }
   },
+  "mcpAuthorize": {
+    "title": "{client} bağlansın mı?",
+    "subtitle": "Kendisini {client} olarak tanıtıyor ve bu kurulum onu {origin} adresine geri gönderecek.",
+    "workspace": {
+      "label": "Üzerinde işlem yapabileceği pano"
+    },
+    "scopeLabel": "Neler yapabilecek",
+    "scopeHint": "Her düzey kendisinden öncekileri de kapsar.",
+    "scope": {
+      "read": {
+        "label": "Yalnızca okuma",
+        "description": "Servisleri, görevleri, hatları ve çalışmaları görüntüler."
+      },
+      "write": {
+        "label": "Okuma ve yazma",
+        "description": "Ayrıca görev oluşturur ve başlatır."
+      },
+      "decide": {
+        "label": "Okuma, yazma ve karar",
+        "description": "Ayrıca duraklatılmış bir çalışmanın beklediği soruları yanıtlar."
+      },
+      "admin": {
+        "label": "Tam erişim",
+        "description": "Ayrıca görev siler ve bildirimlere işlem uygular; bu bir pull request'i birleştirebilir."
+      }
+    },
+    "requestedScope": "{client} {scope} istedi. Bunu gerçekten vermek istiyorsanız yukarıdan o seçeneği seçin.",
+    "approve": "Bağla",
+    "deny": "Vazgeç",
+    "back": "Uygulamaya dön",
+    "noWorkspaces": "Bunu bağlayabileceğiniz bir pano henüz yok.",
+    "revokeHint": "Bu işlem, pano ayarlarından istediğiniz zaman iptal edebileceğiniz bir API anahtarı oluşturur.",
+    "error": {
+      "title": "Bu bağlantı kurulamadı",
+      "noRequest": "Bu sayfa bir yetkilendirme isteği olmadan açıldı. Bağlantıyı MCP istemcinizden başlatın.",
+      "expired": "Bu yetkilendirme isteği geçersiz veya süresi dolmuş. Bağlantıyı MCP istemcinizden yeniden başlatın.",
+      "failed": "Karar kaydedilemedi. Bağlantıyı MCP istemcinizden yeniden başlatın."
+    }
+  },
   "settings": {
     "modelConfiguration": {
       "title": "Model Yapılandırması",

package/i18n/locales/uk.json

@@ -2575,6 +2575,45 @@
       }
     }
   },
+  "mcpAuthorize": {
+    "title": "Підключити {client}?",
+    "subtitle": "Він представляється як {client}, і це розгортання поверне його на {origin}.",
+    "workspace": {
+      "label": "Дошка, на якій він зможе діяти"
+    },
+    "scopeLabel": "Що йому дозволено",
+    "scopeHint": "Кожен рівень включає попередні.",
+    "scope": {
+      "read": {
+        "label": "Лише читання",
+        "description": "Переглядати сервіси, завдання, конвеєри та запуски."
+      },
+      "write": {
+        "label": "Читання та запис",
+        "description": "А також створювати й запускати завдання."
+      },
+      "decide": {
+        "label": "Читання, запис і рішення",
+        "description": "А також відповідати на питання, на які чекає призупинений запуск."
+      },
+      "admin": {
+        "label": "Повний доступ",
+        "description": "А також видаляти завдання й діяти за сповіщеннями, що може злити пулреквест."
+      }
+    },
+    "requestedScope": "{client} запросив {scope}. Обирайте цей варіант вище, лише якщо ви справді хочете його надати.",
+    "approve": "Підключити",
+    "deny": "Скасувати",
+    "back": "Повернутися до застосунку",
+    "noWorkspaces": "У вас поки немає дошки, до якої це можна підключити.",
+    "revokeHint": "Буде видано ключ API, який ви будь-коли можете відкликати в налаштуваннях дошки.",
+    "error": {
+      "title": "Не вдалося налаштувати це підключення",
+      "noRequest": "Цю сторінку відкрито без запиту авторизації. Почніть підключення у своєму хості MCP.",
+      "expired": "Цей запит авторизації недійсний або застарів. Почніть підключення знову у своєму хості MCP.",
+      "failed": "Не вдалося зберегти рішення. Почніть підключення знову у своєму хості MCP."
+    }
+  },
   "settings": {
     "modelConfiguration": {
       "title": "Налаштування моделей",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cat-factory/app",
-  "version": "0.260.1",
+  "version": "0.261.0",
   "description": "Reusable Nuxt layer for the Agent Architecture Board SPA (components, stores, composables, pages). Consume it from a thin deployment app via `extends: ['@cat-factory/app']` and point it at your backend with NUXT_PUBLIC_API_BASE. See deploy/frontend for an example.",
   "repository": {
     "type": "git",
@@ -40,7 +40,7 @@
     "valibot": "^1.4.2",
     "vue": "3.5.41",
     "wretch": "^3.0.9",
-    "@cat-factory/contracts": "0.291.0"
+    "@cat-factory/contracts": "0.292.0"
   },
   "devDependencies": {
     "@toad-contracts/testing": "0.3.2",