feat(mcp): 外部 Agent / MCP 连接管理页

创建/查看/撤销 MCP 访问令牌:scope 与应用范围可选(默认最小两项 scope)、
有效期默认 90 天(服务端上限 365)、明文只在创建后弹窗显示一次,并直接给出
可粘贴的客户端配置片段。

端点地址取自 services/request 新增的 resolveApiBaseUrl(),跟当前会话实际
连接的 API 基址走——生产构建里 process.env.PUBLIC_API 不会被替换,页面里
自己拼常量会在切换端点/自部署时给出错误地址。

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

Author: sunnylqm

src/components/top-navigation/index.tsx

@@ -1,4 +1,5 @@
 import {
+  ApiOutlined,
   AppstoreOutlined,
   DashboardOutlined,
   FileTextOutlined,
@@ -115,6 +116,15 @@ export default function TopNavigation({
               <Link to={rootRouterPath.apiTokens}>{t('nav.api_tokens')}</Link>
             ),
           },
+          {
+            key: 'mcp-connections',
+            icon: <ApiOutlined />,
+            label: (
+              <Link to={rootRouterPath.mcpConnections}>
+                {t('nav.mcp_connections')}
+              </Link>
+            ),
+          },
           {
             key: 'members',
             icon: <TeamOutlined />,

src/i18n/locales/en.json

@@ -288,6 +288,65 @@
     "all_apps": "All apps",
     "n_apps": "{{count}} app(s)"
   },
+  "mcp": {
+    "title": "External agents / MCP",
+    "description": "Connect Pushy's read-only diagnostics to your own AI client.",
+    "docs_link": "Read the guide",
+    "create_token": "Create MCP token",
+    "create_modal_title": "Create MCP token",
+    "endpoint_label": "MCP endpoint",
+    "privacy_notice": "Results go to the client you authorize, which may forward them to the model provider you chose. Grant only the apps you need to debug.",
+    "token_name": "Token name",
+    "token_name_required": "Please enter a token name",
+    "token_name_placeholder": "e.g. troubleshooting",
+    "client_id": "Client label",
+    "client_id_required": "Please enter a client label",
+    "client_id_hint": "Name of the client that will connect; used for display and audit attribution only",
+    "scopes": "Scopes",
+    "scopes_required": "Select at least one scope",
+    "scopes_hint": "The two defaults cover release topology and update diagnosis",
+    "scope_pushy_apps_read": "List authorized apps",
+    "scope_pushy_diagnose": "Release topology, update decisions and artifact states",
+    "scope_pushy_health_read": "Version health (not available yet)",
+    "scope_pushy_metrics_read": "Metrics queries (not available yet)",
+    "scope_pushy_quota_read": "Quota status (not available yet)",
+    "scope_pushy_audit_read": "Audit summaries (elevated, not available yet)",
+    "scope_pushy_nodes_read": "Self-hosted node status (elevated, not available yet)",
+    "apps_hint": "Empty = every app of the account; granting only the apps you debug is strongly recommended",
+    "all_apps": "All apps",
+    "n_apps": "{{count}} app(s)",
+    "expiration": "Expiry",
+    "expiration_hint": "The server caps this at 365 days; just reissue when it expires",
+    "exp_days": "{{count}} days",
+    "create_button": "Create",
+    "create_success": "MCP token created",
+    "create_failed": "Creation failed",
+    "created_title": "Token created",
+    "created_ok": "Saved it",
+    "created_warning": "This token is shown only once — copy it now.",
+    "client_config_hint": "Client configuration example (Claude Desktop and friends):",
+    "copy_button": "Copy token",
+    "copied": "Copied to clipboard",
+    "col_name": "Name",
+    "col_client": "Client",
+    "col_token": "Token",
+    "col_scopes": "Scopes",
+    "col_apps": "Apps",
+    "col_expires": "Expires",
+    "col_last_used": "Last used",
+    "col_action": "Action",
+    "revoked": "Revoked",
+    "expired": "Expired",
+    "never": "Never",
+    "never_used": "Never used",
+    "revoke_button": "Revoke",
+    "revoke_title": "Revoke this token?",
+    "revoke_desc": "Clients using it disconnect immediately.",
+    "revoke_success": "Token revoked",
+    "revoke_failed": "Revocation failed",
+    "yes": "Yes",
+    "no": "No"
+  },
   "audit_logs": {
     "status_all": "All Statuses",
     "status_2xx": "2xx Success",
@@ -678,7 +737,8 @@
     "theme_auto": "Follow system",
     "theme_light": "Light",
     "theme_dark": "Dark",
-    "members": "Team"
+    "members": "Team",
+    "mcp_connections": "External agents / MCP"
   },
   "app_drawer": {
     "expand": "Expand app list",

src/i18n/locales/zh-CN.json

@@ -288,6 +288,65 @@
     "all_apps": "全部应用",
     "n_apps": "{{count}} 个应用"
   },
+  "mcp": {
+    "title": "外部 Agent / MCP",
+    "description": "把 Pushy 的只读诊断能力接到你自己的 AI 客户端。",
+    "docs_link": "查看接入文档",
+    "create_token": "创建 MCP 令牌",
+    "create_modal_title": "创建 MCP 令牌",
+    "endpoint_label": "MCP 服务地址",
+    "privacy_notice": "返回的数据会交给你授权的客户端，它可能继续发送给你选择的模型供应商。请只勾选需要排查的应用。",
+    "token_name": "令牌名称",
+    "token_name_required": "请输入令牌名称",
+    "token_name_placeholder": "例如：排障用",
+    "client_id": "客户端标识",
+    "client_id_required": "请输入客户端标识",
+    "client_id_hint": "填写将要连接的客户端名称，仅用于展示与审计归因",
+    "scopes": "授权范围（scope）",
+    "scopes_required": "请至少选择一个 scope",
+    "scopes_hint": "默认两项即可完成发布拓扑与更新判定的排查",
+    "scope_pushy_apps_read": "读取已授权应用列表",
+    "scope_pushy_diagnose": "发布拓扑、更新判定与产物状态",
+    "scope_pushy_health_read": "版本健康度（尚未开放）",
+    "scope_pushy_metrics_read": "指标查询（尚未开放）",
+    "scope_pushy_quota_read": "配额状态（尚未开放）",
+    "scope_pushy_audit_read": "审计摘要（需高权限，尚未开放）",
+    "scope_pushy_nodes_read": "自托管节点状态（需高权限，尚未开放）",
+    "apps_hint": "不选 = 账户下全部应用；强烈建议只勾选需要排查的应用",
+    "all_apps": "全部应用",
+    "n_apps": "{{count}} 个应用",
+    "expiration": "有效期",
+    "expiration_hint": "服务端上限 365 天；到期后重新签发即可",
+    "exp_days": "{{count}} 天",
+    "create_button": "创建",
+    "create_success": "MCP 令牌创建成功",
+    "create_failed": "创建失败",
+    "created_title": "令牌创建成功",
+    "created_ok": "我已保存",
+    "created_warning": "令牌只显示这一次，请立即复制保存。",
+    "client_config_hint": "客户端配置示例（Claude Desktop 等）：",
+    "copy_button": "复制令牌",
+    "copied": "已复制到剪贴板",
+    "col_name": "名称",
+    "col_client": "客户端",
+    "col_token": "令牌",
+    "col_scopes": "授权范围",
+    "col_apps": "应用范围",
+    "col_expires": "到期",
+    "col_last_used": "最后使用",
+    "col_action": "操作",
+    "revoked": "已撤销",
+    "expired": "已过期",
+    "never": "永不过期",
+    "never_used": "从未使用",
+    "revoke_button": "撤销",
+    "revoke_title": "确定撤销此令牌？",
+    "revoke_desc": "撤销后使用该令牌的客户端会立即断开。",
+    "revoke_success": "令牌已撤销",
+    "revoke_failed": "撤销失败",
+    "yes": "确定",
+    "no": "取消"
+  },
   "audit_logs": {
     "status_all": "全部状态",
     "status_2xx": "2xx 成功",
@@ -678,7 +737,8 @@
     "theme_auto": "跟随系统",
     "theme_light": "浅色",
     "theme_dark": "深色",
-    "members": "团队"
+    "members": "团队",
+    "mcp_connections": "外部 Agent / MCP"
   },
   "app_drawer": {
     "expand": "展开应用列表",