dodo-mcp 1.1.0 → 1.2.1

package/docs/WEB_CLIENTS.md

@@ -117,6 +117,7 @@ authorization, DODO ไม่ได้รัน หรือ public OAuth routes
 | ได้ 404 จาก OAuth หรือ discovery | Tunnel route มาเฉพาะ `/mcp`; แก้ให้ route ทุก path เพราะ OAuth ใช้ `/.well-known/...`, `/auth`, `/interaction`, `/token` และ `/jwks` ด้วย |
 | เห็น tools เก่า/เรียกแล้ว not found | เปิด connection ใน ChatGPT แล้ว Refresh; หาก cache ยังไม่เปลี่ยนให้ลบและสร้าง connection ใหม่ |
 | ยังไม่เห็น Sub-agent operations | เปิด **Settings → Sub-agent tools ใน MCP** ใน Local Config แล้ว restart DODO และ rescan/recreate connection |
+| operation ที่ต้องการหายจาก discover/gateway | ตรวจ **Settings → Tools ที่ AI มองเห็น** แล้วเปิด operation, restart DODO และ rescan/recreate connection |
 
 ห้ามส่ง `client_secret`, access token, refresh token, Cloudflare Tunnel token หรือ URL
 ของ Local Config ให้ผู้ช่วย AI เพื่อแก้ปัญหา ใช้เฉพาะสถานะและ redacted logs จาก
@@ -124,10 +125,14 @@ authorization, DODO ไม่ได้รัน หรือ public OAuth routes
 
 ## Compact behavior
 
-HTTP default เป็น Compact surface 19 tools ประกอบด้วย overview, `dodo_discover` และ gateways client จะค้น operation ที่ต้องการจาก discover แล้วเรียก gateway พร้อม top-level workspace context
+HTTP default เป็น Compact surface สูงสุด 20 tools ประกอบด้วย overview, `dodo_discover` และ gateways client จะค้น operation ที่ต้องการจาก discover แล้วเรียก gateway พร้อม top-level workspace context จำนวนจริงอาจต่ำลงเมื่อเจ้าของปิด operations ครบทั้ง gateway
 
 Compact ไม่ลด security และไม่ได้รวมสิทธิ์หลาย operation เป็น approval เดียว target operation ยังคงมี scope, ACL, trust, approval, hash และ path policy ของตัวเอง
 
+เจ้าของซ่อน operation ที่ไม่ใช้จาก **Settings → Tools ที่ AI มองเห็น** ได้ การเปลี่ยนนี้
+ลด schema ของ Compact/Hybrid จริงและเอา direct duplicate ออกจาก Hybrid แต่ไม่เปลี่ยน
+Full/STDIO หรือ permission ใด ๆ ต้อง restart server และ rescan/recreate client หลังบันทึก
+
 ## Client cache
 
 client บางตัว cache tool catalog หลังสร้าง connection หาก schema หรือ surface เปลี่ยน ให้ refresh ตาม client หรือ recreate connection เมื่อ refresh ไม่ได้ล้าง catalog เดิม

package/docs/adr/048-persistent-connection-mode.md

@@ -2,7 +2,9 @@
 
 ## Status
 
-Accepted in source; unreleased.
+Accepted in DODO 1.0.3. Extended by ADR-050 with an owner-managed Cloudflare Local
+mode; the credential and DODO-owned supervisor rules below remain authoritative for
+`tunnel` mode.
 
 ## Context
 

package/docs/adr/050-cloudflare-local-and-project-access.md

@@ -0,0 +1,67 @@
+# ADR-050 — Cloudflare Local mode and visible per-project access
+
+## Status
+
+Accepted for DODO 1.2.0. This extends ADR-048; its credential isolation and
+DODO-owned supervisor rules remain in force.
+
+## Context
+
+The owner UI used the label “Local” for loopback-only MCP. Owners also use the word
+local for a `cloudflared` binary installed and managed on the same machine, so the
+two-process ownership models were easy to confuse. The personal access UI also hid
+the detailed Trust and Client ACL cards without replacing them with a visible,
+simple project-level control. Authority still existed, but owners could not see or
+change the intended project ceiling from the Projects page.
+
+## Decision
+
+DODO exposes three mutually exclusive installation connection modes:
+
+- `local`: loopback-only MCP; no Cloudflare process or public origin is used.
+- `external`: **Cloudflare Local**; the owner installs, starts and stops
+  `cloudflared`. DODO advertises the reviewed public HTTPS origin but never accepts
+  a Tunnel token and never supervises that process.
+- `tunnel`: **DODO Tunnel**; DODO reads a credential through the reviewed credential
+  provider, starts one owned child, waits for readiness and stops that child.
+
+The UI never uses “Local” by itself. It labels the choices “เฉพาะเครื่อง (Loopback)”,
+“Cloudflare Local (ติดตั้งในเครื่อง)” and “DODO Tunnel”. `--local` remains a
+deprecated loopback alias because changing an old flag to a public mode would be an
+unsafe compatibility break; new commands are `--loopback` and
+`--cloudflare-local`.
+
+Every registered project has one visible access ceiling: `read`, `edit` or `full`.
+The Projects page displays and saves it in both personal and managed installations.
+In personal mode this replaces repeated Trust/Client ACL configuration; in managed
+mode the existing per-client ACL remains required. Effective authority is always:
+
+```text
+token scopes ∩ live grant scopes ∩ managed ACL (when enabled) ∩ project access ceiling
+```
+
+The ceiling cannot grant a missing OAuth scope and does not bypass workspace
+identity/epoch, approval, sandbox, path/secret guards, expected hashes, idempotency
+or audit.
+
+## Consequences
+
+- Saving Cloudflare Local never reads, writes or validates a DODO Tunnel token.
+- Remote Config can use either public Cloudflare mode; external mode depends on the
+  owner-managed route, while tunnel mode additionally requires the owned supervisor.
+- Existing `local` config remains loopback-only. Legacy external config migrates to
+  the explicit `external` mode.
+- Existing project rows migrate to `full` so the upgrade does not silently revoke
+  authority. Invalid stored levels fail closed to `read`.
+- Connection-mode and project-access changes require no repository configuration and
+  expose no owner operation through MCP.
+
+## Evidence
+
+- `tests/integration/connectionMode.test.ts`
+- `tests/integration/configUiComponents.test.ts`
+- `tests/security/tunnelCredentials.test.ts`
+- `tests/security/remoteConfig.test.ts`
+- `tests/integration/projectAccessUi.test.ts`
+- `tests/integration/projectByName.test.ts`
+- `tests/security/projectAccessLevel.test.ts`

package/docs/adr/README.md

@@ -65,3 +65,4 @@ decisions; ADR-011+ resolve implementation ambiguities without reducing security
 - [047 — Temporary Remote Config on the tunneled listener](047-temporary-remote-config.md)
 - [048 — Persistent exclusive Local/Tunnel connection mode](048-persistent-connection-mode.md)
 - [049 — Owner-approved Android control through ADB](049-android-adb-control.md)
+- [050 — Cloudflare Local mode and visible per-project access](050-cloudflare-local-and-project-access.md)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dodo-mcp",
-  "version": "1.1.0",
+  "version": "1.2.1",
   "author": "Arthittakun",
   "description": "DODO — local-first MCP server with multi-project coding, AI providers, sub-agents, context, memory, media and workflow tools; embedded OAuth and workspace permissions.",
   "type": "module",
@@ -47,6 +47,8 @@
     "docs/RELEASE_1.0.5.md",
     "docs/RELEASE_1.0.6.md",
     "docs/RELEASE_1.1.0.md",
+    "docs/RELEASE_1.2.0.md",
+    "docs/RELEASE_1.2.1.md",
     "docs/RELEASE_NOTES.md",
     "docs/SCHEDULES.md",
     "docs/SECURITY.md",

package/schemas/global-config.schema.json

@@ -357,6 +357,15 @@
       "default": false,
       "type": "boolean"
     },
+    "disabledDiscoverOperations": {
+      "default": [],
+      "maxItems": 200,
+      "type": "array",
+      "items": {
+        "type": "string",
+        "pattern": "^[a-z][a-z0-9_]{0,63}$"
+      }
+    },
     "tunnel": {
       "default": {
         "connectionMode": "local",
@@ -370,6 +379,7 @@
           "type": "string",
           "enum": [
             "local",
+            "external",
             "tunnel"
           ]
         },
@@ -484,6 +494,7 @@
     "logRetentionDays",
     "accessMode",
     "exposeSubagentsToMcp",
+    "disabledDiscoverOperations",
     "tunnel",
     "dangerouslyAllowInsecurePublicUrl"
   ],

package/schemas/tools.compact.json

@@ -21,15 +21,15 @@
   "stats": {
     "compact": {
       "toolCount": 20,
-      "schemaBytes": 55373
+      "schemaBytes": 59073
     },
     "hybrid": {
       "toolCount": 49,
-      "schemaBytes": 125901
+      "schemaBytes": 134966
     },
     "full": {
       "toolCount": 138,
-      "schemaBytes": 475008
+      "schemaBytes": 500538
     }
   },
   "tools": [
@@ -53,6 +53,12 @@
             "type": "string",
             "pattern": "^prj_[0-9a-hjkmnp-tv-z]{8,64}$"
           },
+          "targetProject": {
+            "description": "Owner-registered project NAME to target (alternative to targetProjectId; must match exactly one project)",
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 120
+          },
           "projectId": {
             "description": "Optional owner-registered project ID for read-only federation; omit to use the active workspace",
             "type": "string",
@@ -178,6 +184,12 @@
             "type": "string",
             "pattern": "^prj_[0-9a-hjkmnp-tv-z]{8,64}$"
           },
+          "targetProject": {
+            "description": "Owner-registered project NAME to target (alternative to targetProjectId; must match exactly one project)",
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 120
+          },
           "workspaceId": {
             "type": "string",
             "minLength": 1,
@@ -374,6 +386,12 @@
             "type": "string",
             "pattern": "^prj_[0-9a-hjkmnp-tv-z]{8,64}$"
           },
+          "targetProject": {
+            "description": "Owner-registered project NAME to target (alternative to targetProjectId; must match exactly one project)",
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 120
+          },
           "workspaceId": {
             "type": "string",
             "minLength": 1,
@@ -563,6 +581,12 @@
             "type": "string",
             "pattern": "^prj_[0-9a-hjkmnp-tv-z]{8,64}$"
           },
+          "targetProject": {
+            "description": "Owner-registered project NAME to target (alternative to targetProjectId; must match exactly one project)",
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 120
+          },
           "workspaceId": {
             "type": "string",
             "minLength": 1,
@@ -743,6 +767,12 @@
             "type": "string",
             "pattern": "^prj_[0-9a-hjkmnp-tv-z]{8,64}$"
           },
+          "targetProject": {
+            "description": "Owner-registered project NAME to target (alternative to targetProjectId; must match exactly one project)",
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 120
+          },
           "workspaceId": {
             "type": "string",
             "minLength": 1,
@@ -911,6 +941,12 @@
             "type": "string",
             "pattern": "^prj_[0-9a-hjkmnp-tv-z]{8,64}$"
           },
+          "targetProject": {
+            "description": "Owner-registered project NAME to target (alternative to targetProjectId; must match exactly one project)",
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 120
+          },
           "workspaceId": {
             "type": "string",
             "minLength": 1,
@@ -1071,6 +1107,12 @@
             "type": "string",
             "pattern": "^prj_[0-9a-hjkmnp-tv-z]{8,64}$"
           },
+          "targetProject": {
+            "description": "Owner-registered project NAME to target (alternative to targetProjectId; must match exactly one project)",
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 120
+          },
           "workspaceId": {
             "type": "string",
             "minLength": 1,
@@ -1232,6 +1274,12 @@
             "type": "string",
             "pattern": "^prj_[0-9a-hjkmnp-tv-z]{8,64}$"
           },
+          "targetProject": {
+            "description": "Owner-registered project NAME to target (alternative to targetProjectId; must match exactly one project)",
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 120
+          },
           "workspaceId": {
             "type": "string",
             "minLength": 1,
@@ -1393,6 +1441,12 @@
             "type": "string",
             "pattern": "^prj_[0-9a-hjkmnp-tv-z]{8,64}$"
           },
+          "targetProject": {
+            "description": "Owner-registered project NAME to target (alternative to targetProjectId; must match exactly one project)",
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 120
+          },
           "workspaceId": {
             "type": "string",
             "minLength": 1,
@@ -1575,6 +1629,12 @@
             "type": "string",
             "pattern": "^prj_[0-9a-hjkmnp-tv-z]{8,64}$"
           },
+          "targetProject": {
+            "description": "Owner-registered project NAME to target (alternative to targetProjectId; must match exactly one project)",
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 120
+          },
           "workspaceId": {
             "type": "string",
             "minLength": 1,
@@ -1775,6 +1835,12 @@
             "type": "string",
             "pattern": "^prj_[0-9a-hjkmnp-tv-z]{8,64}$"
           },
+          "targetProject": {
+            "description": "Owner-registered project NAME to target (alternative to targetProjectId; must match exactly one project)",
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 120
+          },
           "workspaceId": {
             "type": "string",
             "minLength": 1,
@@ -1968,6 +2034,12 @@
             "type": "string",
             "pattern": "^prj_[0-9a-hjkmnp-tv-z]{8,64}$"
           },
+          "targetProject": {
+            "description": "Owner-registered project NAME to target (alternative to targetProjectId; must match exactly one project)",
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 120
+          },
           "workspaceId": {
             "type": "string",
             "minLength": 1,
@@ -2146,6 +2218,12 @@
             "type": "string",
             "pattern": "^prj_[0-9a-hjkmnp-tv-z]{8,64}$"
           },
+          "targetProject": {
+            "description": "Owner-registered project NAME to target (alternative to targetProjectId; must match exactly one project)",
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 120
+          },
           "workspaceId": {
             "type": "string",
             "minLength": 1,
@@ -2308,6 +2386,12 @@
             "type": "string",
             "pattern": "^prj_[0-9a-hjkmnp-tv-z]{8,64}$"
           },
+          "targetProject": {
+            "description": "Owner-registered project NAME to target (alternative to targetProjectId; must match exactly one project)",
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 120
+          },
           "workspaceId": {
             "type": "string",
             "minLength": 1,
@@ -2467,6 +2551,12 @@
             "type": "string",
             "pattern": "^prj_[0-9a-hjkmnp-tv-z]{8,64}$"
           },
+          "targetProject": {
+            "description": "Owner-registered project NAME to target (alternative to targetProjectId; must match exactly one project)",
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 120
+          },
           "workspaceId": {
             "type": "string",
             "minLength": 1,
@@ -2625,6 +2715,12 @@
             "type": "string",
             "pattern": "^prj_[0-9a-hjkmnp-tv-z]{8,64}$"
           },
+          "targetProject": {
+            "description": "Owner-registered project NAME to target (alternative to targetProjectId; must match exactly one project)",
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 120
+          },
           "workspaceId": {
             "type": "string",
             "minLength": 1,
@@ -2783,6 +2879,12 @@
             "type": "string",
             "pattern": "^prj_[0-9a-hjkmnp-tv-z]{8,64}$"
           },
+          "targetProject": {
+            "description": "Owner-registered project NAME to target (alternative to targetProjectId; must match exactly one project)",
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 120
+          },
           "workspaceId": {
             "type": "string",
             "minLength": 1,
@@ -2941,6 +3043,12 @@
             "type": "string",
             "pattern": "^prj_[0-9a-hjkmnp-tv-z]{8,64}$"
           },
+          "targetProject": {
+            "description": "Owner-registered project NAME to target (alternative to targetProjectId; must match exactly one project)",
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 120
+          },
           "workspaceId": {
             "type": "string",
             "minLength": 1,
@@ -3099,6 +3207,12 @@
             "type": "string",
             "pattern": "^prj_[0-9a-hjkmnp-tv-z]{8,64}$"
           },
+          "targetProject": {
+            "description": "Owner-registered project NAME to target (alternative to targetProjectId; must match exactly one project)",
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 120
+          },
           "workspaceId": {
             "type": "string",
             "minLength": 1,
@@ -3269,6 +3383,12 @@
             "type": "string",
             "pattern": "^prj_[0-9a-hjkmnp-tv-z]{8,64}$"
           },
+          "targetProject": {
+            "description": "Owner-registered project NAME to target (alternative to targetProjectId; must match exactly one project)",
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 120
+          },
           "workspaceId": {
             "type": "string",
             "minLength": 1,