2ca5948309
* Scope MCP OAuth tokens to user + workspace
Bind authorization-code grants to the authorizing workspace (via auth codes),
inherit workspace on refresh, resolve MCP/API requests from the token instead
of current_workspace_id, backfill existing grants, and revoke workspace tokens
when a member is removed.
Co-authored-by: Cursor <cursoragent@cursor.com>
* Add multi-workspace MCP OAuth coverage
Cover coexistence of the same client across workspaces, settings
list/disconnect scoped to the current workspace, and API key
controllers excluding workspace-bound MCP grants.
Co-authored-by: Cursor <cursoragent@cursor.com>
* Use constrained foreignUuid for oauth_auth_codes.workspace_id
Match the project's UUID foreign-key convention instead of a separate
foreign() call.
Co-authored-by: Cursor <cursoragent@cursor.com>
* Localize the MCP OAuth authorize consent screen
Wire authorize.blade.php to mcp.* translation keys (including the
workspace scope copy) and cover pt-BR rendering.
Co-authored-by: Cursor <cursoragent@cursor.com>
* Fix invalid Mockery import in bind workspace test
CI treats the non-compound `use Mockery` as an ErrorException and
aborts the whole parallel suite.
Co-authored-by: Cursor <cursoragent@cursor.com>
* Inline MCP OAuth workspace backfill into the migration
Move the one-shot backfill out of a dedicated Action and wrap it in an
explicit transaction so a failure rolls back partial binds/revokes.
Co-authored-by: Cursor <cursoragent@cursor.com>
* Nest MCP authorize i18n keys and test backfill rollback
Group consent-screen copy under mcp.authorize.*, and assert the
workspace backfill migration rolls back binds when it fails before
commit.
Co-authored-by: Cursor <cursoragent@cursor.com>
* Hardcode TryPost in the MCP authorize page title
Drop the config('app.name') interpolation from the consent screen title.
Co-authored-by: Cursor <cursoragent@cursor.com>
* Add workspace picker to MCP OAuth consent screen
Let users choose which workspace to bind at authorize time instead of
always using current_workspace_id; silent re-consent still falls back.
Co-authored-by: Cursor <cursoragent@cursor.com>
* Tighten MCP authorize workspace select spacing
Match NativeSelect styling and give the label, control, and helper text room to breathe.
Co-authored-by: Cursor <cursoragent@cursor.com>
* Convert MCP OAuth consent screen to Inertia Vue
Reuse AuthCardLayout, Button, and NativeSelect so the authorize page
matches the app UI. Keep native form posts so Passport's external
redirect still works for MCP client popups.
Co-authored-by: Cursor <cursoragent@cursor.com>
* Polish MCP authorize layout with logo and workspace combobox
Drop the shield and AuthCardLayout double-logo, put TryPost branding
at the top, and reuse the app Combobox pattern for workspace search.
Co-authored-by: Cursor <cursoragent@cursor.com>
* Align MCP OAuth workspace backfill with mcpOAuth scope
Reuse AccessToken::mcpOAuth() so the migration only touches mcp:use
grants on non-PAT clients, matching the rest of the codebase.
Co-authored-by: Cursor <cursoragent@cursor.com>
* Tighten MCP OAuth workspace backfill heuristics
Only touch connected MCP sessions, bind a sole membership or a valid
current workspace, and revoke ambiguous multi-workspace grants instead
of guessing the oldest workspace.
Co-authored-by: Cursor <cursoragent@cursor.com>
* Drop Passport connection override from auth code migration
Always use the app default database connection from .env.
Co-authored-by: Cursor <cursoragent@cursor.com>
* Bind MCP OAuth workspace in AccessTokenRepository
Replace the AccessTokenCreated listener with the same Passport repository
override pattern used for auth codes, so workspace_id is set at persist.
Co-authored-by: Cursor <cursoragent@cursor.com>
* Simplify AccessTokenRepository workspace binding
Drop redundant string casts and the oldest-workspace fallback; keep a
small ownedWorkspace/payloadId helper surface instead.
Co-authored-by: Cursor <cursoragent@cursor.com>
* Extract Passport MCP authorization view from AppServiceProvider
Keep configurePassport thin by moving the Inertia consent props into an
invokable App\Passport\AuthorizationView class.
Co-authored-by: Cursor <cursoragent@cursor.com>
* Simplify AuthorizationView and cover it with direct tests
Use collection higher-order mapping for workspaces/scopes and add focused
tests for current-workspace selection and empty-user props.
Co-authored-by: Cursor <cursoragent@cursor.com>
* Rename BindWorkspaceToAccessTokenTest after listener removal
The suite now covers AuthCodeRepository and AccessTokenRepository
workspace binding, not an AccessTokenCreated listener.
* Fail closed when auth code has no bindable workspace
Authorization-code grants no longer fall back to the user's current
workspace, so a token cannot be minted for a different tenant than consent.
Co-authored-by: Cursor <cursoragent@cursor.com>
* Retrigger CI after GitHub Actions infrastructure failures
Co-authored-by: Cursor <cursoragent@cursor.com>
* chore: retrigger CI
Co-authored-by: Cursor <cursoragent@cursor.com>
* fix: harden MCP OAuth workspace binding on refresh and backfill
Co-authored-by: Cursor <cursoragent@cursor.com>
* fix: always show MCP OAuth consent to pick a workspace
Disable Passport silent re-consent and require an explicit workspace_id
from the consent form, with Passport wiring moved to its own provider.
Co-authored-by: Cursor <cursoragent@cursor.com>
* fix: sort MCP connected clients by last used
Show most recently used OAuth connections first on the workspace MCP settings page.
Co-authored-by: Cursor <cursoragent@cursor.com>
---------
Co-authored-by: Cursor <cursoragent@cursor.com>
65 lines
3.3 KiB
PHP
65 lines
3.3 KiB
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
return [
|
|
'title' => 'MCP',
|
|
'subtitle' => 'TryPostアカウントで投稿の作成・管理ができるよう、AIアシスタントを接続します。',
|
|
'copy_step' => 'TryPostサーバーURLをコピー',
|
|
'open_step' => 'AIアシスタントを開く',
|
|
'copy' => 'URLをコピー',
|
|
'connect' => ':clientで接続',
|
|
'step_add' => '下の名前・URL・設定をアプリに貼り付けてください。初回接続時はブラウザでログインが開きます。',
|
|
'name_label' => '名前',
|
|
'url_label' => 'サーバーURL',
|
|
'config_label' => '設定',
|
|
'connected_title' => '接続済みアプリ',
|
|
'connected_description' => 'サインインしたアシスタントです。不要な接続は切断できます。',
|
|
'connected_empty' => 'まだ接続がありません。上の Claude、ChatGPT、または他のクライアントを使ってください。',
|
|
'disconnect' => '切断',
|
|
'disconnect_title' => 'アプリを切断',
|
|
'disconnect_confirm' => 'TryPostからアプリを切断します。再度MCPを使うには再接続が必要です。',
|
|
'disconnected' => 'アプリを切断しました。',
|
|
'copied' => 'コピーしました',
|
|
'last_used' => '最終使用',
|
|
'never' => 'なし',
|
|
'documentation_title' => 'ドキュメント',
|
|
'documentation_description' => 'クライアント別のセットアップ、利用可能なツール、トラブルシューティング。',
|
|
'view_docs' => 'ドキュメントを見る',
|
|
'connector_name' => 'TryPost',
|
|
|
|
'authorize' => [
|
|
'page_title' => 'Authorize Application - TryPost',
|
|
'app_title' => 'Authorize MCP',
|
|
'heading' => 'Authorize :client',
|
|
'intro' => 'This application will be able to:',
|
|
'intro_capability' => 'Use available MCP functionality.',
|
|
'logged_in_as' => 'Logged in as:',
|
|
'workspace' => 'Workspace:',
|
|
'workspace_scope' => 'This connection will only access the selected workspace.',
|
|
'permissions' => 'Permissions:',
|
|
'cancel' => 'Cancel',
|
|
'approve' => 'Authorize',
|
|
'approving' => 'Authorizing...',
|
|
'select_workspace' => 'Select a workspace',
|
|
'search_workspace' => 'Search workspaces...',
|
|
'no_workspace_found' => 'No workspace found',
|
|
'scope_mcp_use' => 'Use MCP server',
|
|
],
|
|
|
|
'other_clients_title' => 'その他のアプリ',
|
|
'other_clients_description' => 'Cursor、VS Code、Claude Code、その他MCP対応アプリ。',
|
|
|
|
'clients' => [
|
|
'claude' => 'Settings → Connectors を開き、カスタムコネクタを追加して上のURLを貼り付けます。',
|
|
'chatgpt' => 'Settings → Apps & Connectors を開き、カスタムコネクタを作成して上のURLを貼り付けます。',
|
|
'cursor' => 'CursorでTryPostをリモートMCPサーバーとして追加します。',
|
|
'cursor_name' => 'Cursor',
|
|
'vscode' => '下の設定をVS CodeのMCP設定に貼り付けます。',
|
|
'vscode_name' => 'VS Code',
|
|
'claude_code' => '下の設定をClaude CodeのMCP設定に貼り付けます。',
|
|
'claude_code_name' => 'Claude Code',
|
|
'other' => 'mcpServers設定を読むクライアントならどれでも使えます。',
|
|
'other_name' => 'その他',
|
|
],
|
|
];
|