feat(ui): route to Settings for auth instead of disabling inline

Authentication is an application-wide control, so the per-workspace install
panel no longer flips it inline. The auth nudge now links to Settings →
Security (via navigateTo('settings')) where the user makes the deliberate
choice. Drops the inline setGatewayAuthDisabled call from the panel.

Test updated: the nudge renders an "Open Settings" action that navigates to
settings rather than toggling auth in place.

Claude-Session: https://claude.ai/code/session_01Baan9JmzR43uxxRUh7CAMF
Signed-off-by: Mohammod Al Amin Ashik <maa.ashik00@gmail.com>

Author: its-mash

apps/desktop/src/features/workspaces/WorkspaceInstallPanel.tsx

@@ -2,12 +2,12 @@ import { useCallback, useEffect, useState } from 'react';
 import { Check, Copy, Download, Loader2, ShieldCheck, ShieldOff, AlertCircle } from 'lucide-react';
 import { Button } from '@mcpmux/ui';
 import { getGatewayStatus } from '@/lib/api/gateway';
+import { useNavigateTo } from '@/stores';
 import {
   generateWorkspaceConfigSnippet,
   getGatewayAuthDisabled,
   installWorkspaceMcpConfig,
   listWorkspaceInstallClients,
-  setGatewayAuthDisabled,
   type WorkspaceInstallClient,
   type WorkspaceInstallResult,
 } from '@/lib/api/workspaceInstall';
@@ -62,7 +62,7 @@ export function WorkspaceInstallPanel({ workspaceRoot }: { workspaceRoot: string
   const [results, setResults] = useState<WorkspaceInstallResult[] | null>(null);
   const [copiedId, setCopiedId] = useState<string | null>(null);
   const [error, setError] = useState<string | null>(null);
-  const [togglingAuth, setTogglingAuth] = useState(false);
+  const navigateTo = useNavigateTo();
 
   useEffect(() => {
     let cancelled = false;
@@ -146,18 +146,6 @@ export function WorkspaceInstallPanel({ workspaceRoot }: { workspaceRoot: string
     }
   };
 
-  const handleDisableAuth = async () => {
-    setTogglingAuth(true);
-    try {
-      const v = await setGatewayAuthDisabled(true);
-      setAuthDisabled(v);
-    } catch (e) {
-      setError(e instanceof Error ? e.message : String(e));
-    } finally {
-      setTogglingAuth(false);
-    }
-  };
-
   return (
     <div className="space-y-4" data-testid="workspace-install-panel">
       <p className="text-sm text-[rgb(var(--muted))]">
@@ -179,23 +167,18 @@ export function WorkspaceInstallPanel({ workspaceRoot }: { workspaceRoot: string
               Apps will need an access key to connect.
             </p>
             <p className="mt-0.5 text-amber-700 dark:text-amber-400">
-              For zero-config setup, disable system-wide authentication — apps then connect with
-              just the URL and this workspace header.
+              Authentication is an application-wide setting. For zero-config setup, turn it off in
+              Settings → Security — apps then connect with just the URL and this workspace header.
             </p>
             <Button
               variant="secondary"
               size="sm"
               className="mt-2 h-7 text-xs"
-              disabled={togglingAuth}
-              onClick={handleDisableAuth}
-              data-testid="workspace-install-disable-auth"
+              onClick={() => navigateTo('settings')}
+              data-testid="workspace-install-open-auth-settings"
             >
-              {togglingAuth ? (
-                <Loader2 className="mr-1.5 h-3 w-3 animate-spin" />
-              ) : (
-                <ShieldOff className="mr-1.5 h-3 w-3" />
-              )}
-              Disable authentication
+              <ShieldOff className="mr-1.5 h-3 w-3" />
+              Open Settings
             </Button>
           </div>
         </div>

tests/ts/components/WorkspaceInstallPanel.test.tsx

@@ -19,29 +19,32 @@ const {
   installMock,
   snippetMock,
   getAuthMock,
-  setAuthMock,
   gatewayStatusMock,
+  navigateMock,
 } = vi.hoisted(() => ({
   listClientsMock: vi.fn(),
   installMock: vi.fn(),
   snippetMock: vi.fn(),
   getAuthMock: vi.fn(),
-  setAuthMock: vi.fn(),
   gatewayStatusMock: vi.fn(),
+  navigateMock: vi.fn(),
 }));
 
 vi.mock('@/lib/api/workspaceInstall', () => ({
   listWorkspaceInstallClients: listClientsMock,
   installWorkspaceMcpConfig: installMock,
   generateWorkspaceConfigSnippet: snippetMock,
   getGatewayAuthDisabled: getAuthMock,
-  setGatewayAuthDisabled: setAuthMock,
 }));
 
 vi.mock('@/lib/api/gateway', () => ({
   getGatewayStatus: gatewayStatusMock,
 }));
 
+vi.mock('@/stores', () => ({
+  useNavigateTo: () => navigateMock,
+}));
+
 import { WorkspaceInstallPanel } from '@/features/workspaces/WorkspaceInstallPanel';
 
 const CLIENTS = [
@@ -61,7 +64,7 @@ describe('WorkspaceInstallPanel', () => {
     installMock.mockReset();
     snippetMock.mockReset();
     getAuthMock.mockReset().mockResolvedValue(true);
-    setAuthMock.mockReset();
+    navigateMock.mockReset();
     gatewayStatusMock
       .mockReset()
       .mockResolvedValue({ running: true, url: 'http://localhost:45818' });
@@ -122,20 +125,16 @@ describe('WorkspaceInstallPanel', () => {
     expect(installMock.mock.calls[0][0].clients).toEqual(['opencode']);
   });
 
-  it('shows the auth nudge and disables auth inline', async () => {
+  it('shows the auth nudge and routes to Settings (no inline disable)', async () => {
     const user = userEvent.setup();
     getAuthMock.mockResolvedValue(false); // auth currently required
-    setAuthMock.mockResolvedValue(true);
     render(<WorkspaceInstallPanel workspaceRoot={ROOT} />);
 
-    const disableBtn = await screen.findByTestId('workspace-install-disable-auth');
-    await user.click(disableBtn);
-
-    await waitFor(() => expect(setAuthMock).toHaveBeenCalledWith(true));
-    // Nudge is replaced by the "auth is off" confirmation.
-    await waitFor(() =>
-      expect(screen.queryByTestId('workspace-install-auth-nudge')).toBeNull()
-    );
+    // Auth is application-wide: the panel links to Settings instead of
+    // flipping it inline.
+    const openSettings = await screen.findByTestId('workspace-install-open-auth-settings');
+    await user.click(openSettings);
+    expect(navigateMock).toHaveBeenCalledWith('settings');
   });
 
   it('copies a client snippet to the clipboard', async () => {