feat(auth): add enterprise SSO and RBAC

apps/web/src/components/settings-sidebar/index.vue

@@ -63,7 +63,7 @@ import { computed, inject, type Component } from 'vue'
 import { storeToRefs } from 'pinia'
 import { useRouter, useRoute } from 'vue-router'
 import { useI18n } from 'vue-i18n'
-import { ChevronLeft, Bot, Boxes, Globe, Brain, Volume2, AudioLines, Mail, AppWindow, ChartLine, User, Store, Info } from 'lucide-vue-next'
+import { ChevronLeft, Bot, Boxes, Globe, Brain, Volume2, AudioLines, Mail, AppWindow, ShieldCheck, ChartLine, User, Store, Info } from 'lucide-vue-next'
 import { useChatSelectionStore } from '@/store/chat-selection'
 import {
   Sidebar,
@@ -119,6 +119,7 @@ const allNavItems: { title: string; name: string; icon: Component }[] = [
   { title: t('sidebar.transcription'), name: 'transcription', icon: AudioLines },
   { title: t('sidebar.email'), name: 'email', icon: Mail },
   { title: t('sidebar.browser'), name: 'browser', icon: AppWindow },
+  { title: t('sidebar.iam'), name: 'iam', icon: ShieldCheck },
   { title: t('sidebar.supermarket'), name: 'supermarket', icon: Store },
   { title: t('sidebar.usage'), name: 'usage', icon: ChartLine },
   { title: t('sidebar.profile'), name: 'profile', icon: User },

apps/web/src/i18n/locales/en.json

@@ -12,6 +12,8 @@
     "loading": "Loading...",
     "operation": "Actions",
     "enable": "Enable",
+    "enabled": "Enabled",
+    "disabled": "Disabled",
     "optional": "optional",
     "advanced": "Advanced",
     "import": "Import",
@@ -75,6 +77,7 @@
     "platform": "Platform",
     "usage": "Usage",
     "browser": "Browser",
+    "iam": "IAM",
     "supermarket": "Supermarket",
     "about": "About"
   },
@@ -1607,6 +1610,52 @@
     "colInputTokens": "Input",
     "colOutputTokens": "Output"
   },
+  "iam": {
+    "title": "Identity and Access",
+    "subtitle": "Manage SSO providers, groups, role assignments, and built-in roles.",
+    "roles": "Roles",
+    "groups": "Groups",
+    "sso": "SSO",
+    "botPermissions": "Bot permissions",
+    "key": "Key",
+    "displayName": "Display name",
+    "source": "Source",
+    "actions": "Actions",
+    "members": "Members",
+    "createGroup": "Create group",
+    "editGroup": "Edit group",
+    "externalId": "External ID",
+    "metadata": "Metadata JSON",
+    "groupMembers": "Group members",
+    "selectGroup": "Select group",
+    "selectUser": "Select user",
+    "deleteGroupConfirm": "Delete this group?",
+    "name": "Name",
+    "type": "Type",
+    "enabled": "Enabled",
+    "mappings": "Mappings",
+    "createProvider": "Create provider",
+    "editProvider": "Edit provider",
+    "trustEmail": "Trust email",
+    "emailLinkingPolicy": "Email linking policy",
+    "configJson": "Config JSON",
+    "attributeMappingJson": "Attribute mapping JSON",
+    "deleteProviderConfirm": "Delete this SSO provider?",
+    "groupMappings": "Group mappings",
+    "selectProvider": "Select provider",
+    "externalGroup": "External group",
+    "assignBotRole": "Assign bot role",
+    "bot": "Bot",
+    "selectBot": "Select bot",
+    "principalType": "Principal type",
+    "principal": "Principal",
+    "selectPrincipal": "Select principal",
+    "role": "Role",
+    "assign": "Assign",
+    "scope": "Scope",
+    "system": "System",
+    "empty": "No records"
+  },
   "supermarket": {
     "title": "Supermarket",
     "searchPlaceholder": "Search MCPs and Skills...",

apps/web/src/i18n/locales/zh.json

@@ -12,6 +12,8 @@
     "loading": "加载中...",
     "operation": "操作",
     "enable": "启用",
+    "enabled": "已启用",
+    "disabled": "已禁用",
     "optional": "可选",
     "advanced": "高级选项",
     "import": "导入",
@@ -75,6 +77,7 @@
     "platform": "接入平台",
     "usage": "用量统计",
     "browser": "浏览器",
+    "iam": "身份权限",
     "supermarket": "市场",
     "about": "关于"
   },
@@ -1603,6 +1606,52 @@
     "colInputTokens": "输入",
     "colOutputTokens": "输出"
   },
+  "iam": {
+    "title": "身份与权限",
+    "subtitle": "管理 SSO 提供方、用户组、角色分配和内置角色。",
+    "roles": "角色",
+    "groups": "用户组",
+    "sso": "SSO",
+    "botPermissions": "Bot 权限",
+    "key": "Key",
+    "displayName": "显示名称",
+    "source": "来源",
+    "actions": "操作",
+    "members": "成员",
+    "createGroup": "创建用户组",
+    "editGroup": "编辑用户组",
+    "externalId": "外部 ID",
+    "metadata": "Metadata JSON",
+    "groupMembers": "用户组成员",
+    "selectGroup": "选择用户组",
+    "selectUser": "选择用户",
+    "deleteGroupConfirm": "删除这个用户组？",
+    "name": "名称",
+    "type": "类型",
+    "enabled": "启用",
+    "mappings": "映射",
+    "createProvider": "创建提供方",
+    "editProvider": "编辑提供方",
+    "trustEmail": "信任邮箱",
+    "emailLinkingPolicy": "邮箱合并策略",
+    "configJson": "Config JSON",
+    "attributeMappingJson": "Attribute mapping JSON",
+    "deleteProviderConfirm": "删除这个 SSO 提供方？",
+    "groupMappings": "用户组映射",
+    "selectProvider": "选择提供方",
+    "externalGroup": "外部用户组",
+    "assignBotRole": "分配 Bot 角色",
+    "bot": "Bot",
+    "selectBot": "选择 Bot",
+    "principalType": "主体类型",
+    "principal": "主体",
+    "selectPrincipal": "选择主体",
+    "role": "角色",
+    "assign": "分配",
+    "scope": "Scope",
+    "system": "系统",
+    "empty": "暂无记录"
+  },
   "supermarket": {
     "title": "市场",
     "searchPlaceholder": "搜索 MCP 和 Skills...",