From a2161aef636b40c4b560f0caefaf1faba325d3da Mon Sep 17 00:00:00 2001
From: Danila Poyarkov <dev@dannote.net>
Date: Wed, 19 Aug 2026 16:49:21 +0300
Subject: [PATCH] fix(desktop): narrow MCP discovery permissions

- Limit text reads and existence checks to platform discovery files
- Drop unused create and open capabilities
- Document restored desktop automation reconnection
---
 CHANGELOG.md                      |  1 +
 desktop/capabilities/default.json | 22 ++++++++++++----------
 2 files changed, 13 insertions(+), 10 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 11fc898d7..df1a3bd32 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -58,6 +58,7 @@
 
 ### Fixed
 
+- Reconnect desktop automation to an already-running MCP server by allowing access to its discovery file. (#546)
 - Keep text-editing carets, hit testing, and selection highlights aligned with vertically centered or bottom-aligned text. (#539)
 - Match AI chat code-block syntax colors and backgrounds to the active light or dark theme. (#537)
 - Let desktop users select and copy AI chat text without replacing it with the selected canvas layers. (#538)
diff --git a/desktop/capabilities/default.json b/desktop/capabilities/default.json
index ab0a53aaf..57d4a5bd7 100644
--- a/desktop/capabilities/default.json
+++ b/desktop/capabilities/default.json
@@ -20,7 +20,12 @@
     },
     {
       "identifier": "fs:allow-read-text-file",
-      "allow": [{ "path": "**" }]
+      "allow": [
+        { "path": "$HOME/Library/Application Support/OpenPencil/mcp.json" },
+        { "path": "$LOCALDATA/OpenPencil/mcp.json" },
+        { "path": "$RUNTIME/openpencil/mcp.json" },
+        { "path": "$HOME/.openpencil/mcp.json" }
+      ]
     },
     {
       "identifier": "fs:allow-write-file",
@@ -28,15 +33,12 @@
     },
     {
       "identifier": "fs:allow-exists",
-      "allow": [{ "path": "**" }]
-    },
-    {
-      "identifier": "fs:allow-create",
-      "allow": [{ "path": "**" }]
-    },
-    {
-      "identifier": "fs:allow-open",
-      "allow": [{ "path": "**" }]
+      "allow": [
+        { "path": "$HOME/Library/Application Support/OpenPencil/mcp.json" },
+        { "path": "$LOCALDATA/OpenPencil/mcp.json" },
+        { "path": "$RUNTIME/openpencil/mcp.json" },
+        { "path": "$HOME/.openpencil/mcp.json" }
+      ]
     },
     {
       "identifier": "fs:allow-mkdir",