Add filter-based topology bulk writes and refine API key scopes UX.

Filter add/layout/remove keeps MCP payloads small; tokens default MCP scopes and edit them in a modal with a compact help tip.

Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
oliver 2026-08-04 07:39:14 +08:00
parent bf0dfd66d8
commit 2d92dde8e5
18 changed files with 1294 additions and 257 deletions

View file

@ -11,6 +11,7 @@ const en = {
pagerMeta: "{{total}} items · page {{page}}/{{pages}}",
opFailed: "Operation failed",
empty: "-",
cancel: "Cancel",
},
workbench: {
title: "Workbench",
@ -476,8 +477,8 @@ const en = {
colStatus: "Status",
colIp: "IP",
apiKeysTitle: "API Key management",
apiKeysHint:
"Create long-lived tokens for MCP/scripts. The secret is shown only once. Admins can issue keys for other users. Pick scopes; topology drawing needs ne:write.",
apiKeysHelp:
"The web UI uses login sessions, not API keys — keys are for MCP/scripts. Defaults on create: alarms:read + ne:read + ne:write + ne:exec; refine later with Edit scopes (takes effect immediately, no need to regenerate). Secret is shown once. Admins may issue for other users; scopes cannot exceed the owner's. Unused scopes are reserved for future MCP tools.",
tokenName: "Name",
expiresIn: "Expiry",
expire7d: "7 days",
@ -489,6 +490,7 @@ const en = {
tokenOwnerSelf: "Myself ({{user}})",
createToken: "Create key",
tokenCreated: "API key created",
tokenUpdated: "Scopes updated",
tokenRevoked: "Revoked",
tokenOnceHint: "Copy and store this secret now; it will not be shown again:",
copyToken: "Copy",
@ -501,24 +503,21 @@ const en = {
tokenStatusRevoked: "Revoked",
revokeToken: "Revoke",
revokeConfirm: "Revoke this API key?",
scopesTitle: "Scopes",
scopesHint:
"Scopes are stored on the token. Without Inherit, pick at least one. MCP default omits ne:write so write tools stay hidden from the agent.",
scopesInherit: "Inherit all owner scopes",
scopesInheritShort: "Inherit owner",
editScopes: "Edit scopes",
saveScopes: "Save scopes",
scopesUnsetLegacy: "Unrestricted (same as owner)",
scopesCol: "Scopes",
scopesRequired: "Select at least one scope, or inherit all owner scopes",
scopesRequired: "Select at least one scope",
scopesNoneAvailable: "This owner has no grantable scopes",
scopePresetMcp: "MCP default (read + CLI)",
scopePresetTopoWrite: "MCP + topology write",
scopeAlarmsRead: "alarms:read Alarms read",
scopeNeRead: "ne:read NE / topology read",
scopeNeWrite: "ne:write NE / topology write (draw)",
scopeNeExec: "ne:exec Managed NE exec",
scopeWebcrt: "webcrt:session WebCRT",
scopeSql: "sql:query SQL",
scopeAdminUsers: "admin:users User admin",
scopeOpsWrite: "ops:write Ops write",
scopeAlarmsRead: "alarms:read — Alarms read (netx MCP)",
scopeNeRead: "ne:read — NE / topology read (MCP)",
scopeNeWrite: "ne:write — NE / topology write / draw (MCP)",
scopeNeExec: "ne:exec — Managed NE CLI (netx MCP)",
scopeSql: "sql:query — UME SQL (netx MCP)",
scopeWebcrt: "webcrt:session — WebCRT (reserved MCP)",
scopeAdminUsers: "admin:users — User admin (reserved MCP)",
scopeOpsWrite: "ops:write — Ops write / subscriptions (reserved MCP)",
forceChangeTitle: "Change initial password",
forceChangeHint: "Account {{user}} is still using the default password. You must change it before continuing.",
oldPassword: "Current password",