feat: Permission form. mcp:run action

Author: adityathebe

src/components/Permissions/ManagePermissions/Forms/PermissionForm.tsx

@@ -52,10 +52,20 @@ function PermissionActionDropdown({ isDisabled }: { isDisabled?: boolean }) {
     return undefined;
   }, [values]);
 
-  const availableActions = useMemo(
-    () => getActionsForResourceType(resourceType),
-    [resourceType]
-  );
+  const availableActions = useMemo(() => {
+    const actions = getActionsForResourceType(resourceType);
+
+    // Add mcp:run when: playbook resource + specific playbook selected + person/team subject
+    if (
+      resourceType === "playbook" &&
+      values.playbook_id &&
+      (values.subject_type === "person" || values.subject_type === "team")
+    ) {
+      return [...actions, { value: "mcp:run", label: "mcp:run" }];
+    }
+
+    return actions;
+  }, [resourceType, values.playbook_id, values.subject_type]);
 
   if (!resourceType) {
     return null;

src/components/Permissions/PermissionsView.tsx

@@ -14,6 +14,7 @@ import { FormikSelectDropdownOption } from "../Forms/Formik/FormikSelectDropdown
 import PermissionForm from "./ManagePermissions/Forms/PermissionForm";
 import PermissionsTable from "./PermissionsTable";
 
+// Source: github.com/flanksource/duty/rbac/policy/policy.go
 export const permissionsActionsList: FormikSelectDropdownOption[] = [
   { value: "read", label: "read" },
   { value: "update", label: "update" },
@@ -23,7 +24,8 @@ export const permissionsActionsList: FormikSelectDropdownOption[] = [
   { value: "create,read,update,delete", label: "create,read,update,delete" },
   { value: "playbook:run", label: "playbook:run" },
   { value: "playbook:approve", label: "playbook:approve" },
-  { value: "playbook:*", label: "playbook:*" }
+  { value: "playbook:*", label: "playbook:*" },
+  { value: "mcp:run", label: "mcp:run" }
 ];
 
 const commonActions: FormikSelectDropdownOption[] = [