fcf5e6e46f
- Keep PR1 strictly read-only: drop the scope selector, the read_write request rule and mcp:write granting from the UI/controller (the write scope returns with the write tools in PR2). Removes a token that could be minted over-privileged with a false "can edit data" UI promise. - Gate via User::canUseFeature(PlanFeature::McpAccess) instead of hasProPlan() directly, matching the existing feature-gating convention. - Confirm token rotation behind an AlertDialog (it breaks connected clients), matching revoke; drop the silent on-load clipboard auto-copy. - Give the data-egress disclaimer a destructive variant for visual weight. - Extract the duplicated token-ownership check; document the controller-reuse coupling and the shared-tenant space-scoping model; fix ListSpaces N+1 and a duplicate output key. |
||
|---|---|---|
| .. | ||
| components | ||
| contexts | ||
| hooks | ||
| layouts | ||
| lib | ||
| pages | ||
| providers | ||
| services | ||
| types | ||
| utils | ||
| app.tsx | ||
| ssr.tsx | ||