5 Commits

Include renames

Author	SHA1	Message	Date
mrhid6	7762629634	chore: replace em dashes with hyphens, add no-em-dash rule to CLAUDE.md	2026-09-10 09:18:57 +00:00
mrhid6	a0c20299a5	docs: document agent access over MCP and token tag restrictions	2026-09-09 08:20:42 +00:00
mrhid6	c4bc4b68bf	docs: describe the redesigned api keys page	2026-09-08 14:12:53 +00:00
mrhid6	99f5e799a4	feat: Give API keys their own page and group the sidebar ... The token management card sat on /settings, which is owner|admin throughout, so it hid a capability every member already had: the API has never required a role to mint or revoke your own key. It is now the /api-keys page, reachable at every role, with the instance-wide lifetime cap left behind on /settings because that is policy rather than one person's credentials — and that split is what lets the page be ungated. The sidebar gains groups: Fleet, Access, Automation, Instance, each with a small-caps heading and a rule above it. Grouping is by what the operator is doing rather than by which service answers, so SSH keys, secrets and API keys sit together as credentials. A group whose every item is admin-only disappears whole for a member; a labelled section with nothing under it reads as a failure rather than a restriction. The UI says keys while the collection, prefix and routes still say tokens. Renaming a published endpoint to match a nav label would break every script already written against it.	2026-08-13 08:54:42 +00:00
mrhid6	63984af250	docs: Document API tokens and the OpenAPI reference	2026-08-13 08:04:09 +00:00