rename: Teams -> Server across product naming, build tags, and UI

Rename the multi-user edition from "MCPProxy Teams" to "MCPProxy Server"
to avoid Microsoft Teams confusion and align with the cloud/LAN deployment
model.

Changes:
- Edition string: "teams" -> "server" (version output, API /status)
- Build tag: //go:build teams -> //go:build server (all 58 Go files)
- Build flag: -tags teams -> -tags server (Makefile, Dockerfile, CI)
- Binary: mcpproxy-teams -> mcpproxy-server
- Make target: build-teams -> build-server
- Docker image: mcpproxy-teams -> mcpproxy-server
- UI: "MCPProxy Teams" -> "MCPProxy Server", badge text
- Frontend edition check: edition === 'teams' -> edition === 'server'
- All comments, log messages, and docs updated
- CLAUDE.md fully updated with new naming

Internal package names (internal/teams/), struct names (TeamsConfig),
and config JSON key ("teams") are preserved to avoid breaking changes.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: claude

.github/workflows/release.yml

@@ -225,21 +225,21 @@ jobs:
             cgo: "1"
             name: mcpproxy-darwin-arm64
             archive_format: tar.gz
-          # Teams edition (Linux only) — uncomment when teams MVP is ready
+          # Server edition (Linux only) — uncomment when server MVP is ready
           # - os: ubuntu-latest
           #   goos: linux
           #   goarch: amd64
           #   cgo: "0"
-          #   name: mcpproxy-teams-linux-amd64
+          #   name: mcpproxy-server-linux-amd64
           #   archive_format: tar.gz
-          #   edition: teams
+          #   edition: server
           # - os: ubuntu-latest
           #   goos: linux
           #   goarch: arm64
           #   cgo: "0"
-          #   name: mcpproxy-teams-linux-arm64
+          #   name: mcpproxy-server-linux-arm64
           #   archive_format: tar.gz
-          #   edition: teams
+          #   edition: server
 
     runs-on: ${{ matrix.os }}
 
@@ -389,9 +389,9 @@ jobs:
           # Determine clean binary name and build flags
           EDITION="${{ matrix.edition }}"
           BUILD_TAGS=""
-          if [ "$EDITION" = "teams" ]; then
-            CLEAN_BINARY="mcpproxy-teams"
-            BUILD_TAGS="-tags teams"
+          if [ "$EDITION" = "server" ]; then
+            CLEAN_BINARY="mcpproxy-server"
+            BUILD_TAGS="-tags server"
           elif [ "${{ matrix.goos }}" = "windows" ]; then
             CLEAN_BINARY="mcpproxy.exe"
           else
@@ -402,7 +402,7 @@ jobs:
           go build ${BUILD_TAGS} -ldflags "${LDFLAGS}" -o ${CLEAN_BINARY} ./cmd/mcpproxy
 
           # Build tray binary for platforms with GUI support (macOS and Windows, personal only)
-          if [ "$EDITION" != "teams" ] && { [ "${{ matrix.goos }}" = "darwin" ] || [ "${{ matrix.goos }}" = "windows" ]; }; then
+          if [ "$EDITION" != "server" ] && { [ "${{ matrix.goos }}" = "darwin" ] || [ "${{ matrix.goos }}" = "windows" ]; }; then
             echo "Building mcpproxy-tray for ${{ matrix.goos }}..."
 
             # Determine tray binary name
@@ -988,7 +988,7 @@ jobs:
   build-docker:
     runs-on: ubuntu-latest
     needs: [build]
-    # Disabled until teams MVP is ready — uncomment to enable
+    # Disabled until server MVP is ready — uncomment to enable
     if: false && startsWith(github.ref, 'refs/tags/v')
     permissions:
       contents: read
@@ -1010,11 +1010,11 @@ jobs:
             COMMIT=${{ github.sha }}
             BUILD_DATE=${{ github.event.head_commit.timestamp }}
           tags: |
-            ghcr.io/smart-mcp-proxy/mcpproxy-teams:${{ github.ref_name }}
-            ghcr.io/smart-mcp-proxy/mcpproxy-teams:latest
+            ghcr.io/smart-mcp-proxy/mcpproxy-server:${{ github.ref_name }}
+            ghcr.io/smart-mcp-proxy/mcpproxy-server:latest
 
   release:
-    needs: [build, sign-windows, generate-notes]  # add build-docker when teams MVP is ready
+    needs: [build, sign-windows, generate-notes]  # add build-docker when server MVP is ready
     runs-on: ubuntu-latest
     environment: production
 

CLAUDE.md

@@ -28,23 +28,30 @@ Only halt execution and ask a human IF:
 
 MCPProxy is a Go-based desktop application that acts as a smart proxy for AI agents using the Model Context Protocol (MCP). It provides intelligent tool discovery, massive token savings, and built-in security quarantine against malicious MCP servers.
 
-## Editions (Personal & Teams)
+## Editions (Personal & Server)
 
 MCPProxy is built in two editions from the same codebase using Go build tags:
 
 | Edition | Build Command | Binary | Distribution |
 |---------|--------------|--------|-------------|
 | **Personal** (default) | `go build ./cmd/mcpproxy` | `mcpproxy` | macOS DMG, Windows installer, Linux tar.gz |
-| **Teams** | `go build -tags teams ./cmd/mcpproxy` | `mcpproxy-teams` | Docker image, .deb package, Linux tar.gz |
+| **Server** | `go build -tags server ./cmd/mcpproxy` | `mcpproxy-server` | Docker image, .deb package, Linux tar.gz |
+
+> Every feature decision should ask: "Does this make the personal edition so good that developers tell their teammates about it?"
 
 ### Key Directories
 
 | Directory | Purpose |
 |-----------|---------|
 | `cmd/mcpproxy/edition.go` | Default edition = "personal" |
-| `cmd/mcpproxy/edition_teams.go` | Build-tagged override for teams |
-| `cmd/mcpproxy/teams_register.go` | Teams feature registration entry point |
-| `internal/teams/` | Teams-only code (all files have `//go:build teams`) |
+| `cmd/mcpproxy/edition_teams.go` | Build-tagged override for server edition |
+| `cmd/mcpproxy/teams_register.go` | Server feature registration entry point |
+| `internal/teams/` | Server-only code (all files have `//go:build server`) |
+| `internal/teams/auth/` | OAuth authentication, session management, JWT tokens, middleware |
+| `internal/teams/users/` | User/session models, BBolt store, user server management |
+| `internal/teams/workspace/` | Per-user workspace manager for personal upstream servers |
+| `internal/teams/multiuser/` | Multi-user router, tool filtering, activity isolation |
+| `internal/teams/api/` | Server REST API endpoints (user, admin, auth) |
 | `native/macos/` | Future Swift tray app (placeholder) |
 | `native/windows/` | Future C# tray app (placeholder) |
 
@@ -54,6 +61,66 @@ The binary self-identifies its edition:
 - `mcpproxy version` → `MCPProxy v0.21.0 (personal) darwin/arm64`
 - `/api/v1/status` → `{"edition": "personal", ...}`
 
+## Server Multi-User Authentication (Spec 024)
+
+Server edition supports OAuth-based multi-user authentication with Google, GitHub, or Microsoft identity providers.
+
+### Server Configuration
+
+```json
+{
+  "teams": {
+    "enabled": true,
+    "admin_emails": ["admin@company.com"],
+    "oauth": {
+      "provider": "google",
+      "client_id": "xxx.apps.googleusercontent.com",
+      "client_secret": "GOCSPX-xxx",
+      "tenant_id": "",
+      "allowed_domains": ["company.com"]
+    },
+    "session_ttl": "24h",
+    "bearer_token_ttl": "24h",
+    "workspace_idle_timeout": "30m",
+    "max_user_servers": 20
+  }
+}
+```
+
+### Server API Endpoints
+
+| Endpoint | Auth | Description |
+|----------|------|-------------|
+| `GET /api/v1/auth/login` | Public | Initiate OAuth login flow |
+| `GET /api/v1/auth/callback` | Public | OAuth callback (creates session) |
+| `GET /api/v1/auth/me` | Session/JWT | Get current user profile |
+| `POST /api/v1/auth/token` | Session | Generate JWT bearer token for MCP |
+| `POST /api/v1/auth/logout` | Session | Invalidate session |
+| `GET /api/v1/user/servers` | Session/JWT | List user's servers (personal + shared) |
+| `POST /api/v1/user/servers` | Session/JWT | Add personal upstream server |
+| `GET /api/v1/user/activity` | Session/JWT | User's activity log |
+| `GET /api/v1/user/diagnostics` | Session/JWT | Server health for user's servers |
+| `GET /api/v1/admin/users` | Admin | List all users |
+| `POST /api/v1/admin/users/{id}/disable` | Admin | Disable a user |
+| `GET /api/v1/admin/activity` | Admin | All users' activity logs |
+| `GET /api/v1/admin/sessions` | Admin | List active sessions |
+
+### Server Architecture
+
+- **Auth flow**: OAuth 2.0 + PKCE → Session cookie (Web UI) + JWT bearer (MCP/API)
+- **Server types**: Shared (config file, single connection) + Personal (DB, per-user connections)
+- **Isolation**: Users see only shared + own personal servers. Activity logs user-scoped.
+- **Admin**: Identified by `admin_emails` config. Sees all activity, manages users.
+- **Build tag**: All server code behind `//go:build server`. Personal edition unaffected.
+
+### Server Testing
+
+```bash
+go test -tags server ./internal/teams/... -v -race  # All server unit + integration tests
+go build -tags server ./cmd/mcpproxy                # Build server edition
+go build ./cmd/mcpproxy                            # Verify personal edition unaffected
+```
+
 ## Architecture: Core + Tray Split
 
 - **Core Server** (`mcpproxy`): Headless HTTP API server with MCP proxy functionality
@@ -66,11 +133,11 @@ The binary self-identifies its edition:
 ### Build
 ```bash
 go build -o mcpproxy ./cmd/mcpproxy                     # Core server (personal)
-go build -tags teams -o mcpproxy-teams ./cmd/mcpproxy   # Core server (teams)
+go build -tags server -o mcpproxy-server ./cmd/mcpproxy   # Core server (server edition)
 GOOS=darwin CGO_ENABLED=1 go build -o mcpproxy-tray ./cmd/mcpproxy-tray  # Tray app
 make build                                               # Frontend and backend (personal)
-make build-teams                                         # Frontend and backend (teams)
-make build-docker                                        # Teams Docker image
+make build-server                                        # Frontend and backend (server)
+make build-docker                                        # Server Docker image
 ./scripts/build.sh                                       # Cross-platform build
 ```
 
@@ -546,6 +613,8 @@ See `docs/prerelease-builds.md` for download instructions.
 - `~/.mcpproxy/mcp_config.json` (config file), `~/.mcpproxy/config.db` (BBolt - not directly used) (027-status-command)
 - Go 1.24 (toolchain go1.24.10) + Cobra (CLI), Chi router (HTTP), BBolt (storage), Zap (logging), mcp-go (MCP protocol), crypto/hmac + crypto/sha256 (token hashing) (028-agent-tokens)
 - BBolt database (`~/.mcpproxy/config.db`) — new `agent_tokens` bucket (028-agent-tokens)
+- Go 1.24 (toolchain go1.24.10) + TypeScript 5.9 / Vue 3.5 + Chi router, BBolt, Zap logging, mcp-go, golang-jwt/jwt/v5, Vue 3, Pinia, DaisyUI (024-teams-multiuser-oauth)
+- BBolt database (`~/.mcpproxy/config.db`) - new buckets for users, sessions, user servers (024-teams-multiuser-oauth)
 
 ## Recent Changes
 - 001-update-version-display: Added Go 1.24 (toolchain go1.24.10)

Dockerfile

@@ -13,12 +13,12 @@ COPY . .
 RUN cd frontend && npm ci && npm run build
 RUN mkdir -p web/frontend && cp -r frontend/dist web/frontend/
 
-# Build teams binary
+# Build server edition binary
 ARG VERSION=dev
 ARG COMMIT=unknown
 ARG BUILD_DATE=unknown
 RUN CGO_ENABLED=0 go build \
-    -tags teams \
+    -tags server \
     -ldflags "-X main.version=${VERSION} -X main.commit=${COMMIT} -X main.date=${BUILD_DATE} -X github.com/smart-mcp-proxy/mcpproxy-go/internal/httpapi.buildVersion=${VERSION} -s -w" \
     -o /mcpproxy ./cmd/mcpproxy
 

Makefile

@@ -1,6 +1,6 @@
 # MCPProxy Makefile
 
-.PHONY: help build build-teams build-docker build-deb swagger swagger-verify frontend-build frontend-dev backend-dev clean test test-coverage test-e2e test-e2e-oauth lint dev-setup docs-setup docs-dev docs-build docs-clean
+.PHONY: help build build-server build-docker build-deb swagger swagger-verify frontend-build frontend-dev backend-dev clean test test-coverage test-e2e test-e2e-oauth lint dev-setup docs-setup docs-dev docs-build docs-clean
 
 SWAGGER_BIN ?= $(HOME)/go/bin/swag
 SWAGGER_OUT ?= oas
@@ -23,10 +23,10 @@ help:
 	@echo "  make lint            - Run linter"
 	@echo "  make dev-setup       - Install development dependencies (swag, frontend, Playwright)"
 	@echo ""
-	@echo "Teams Edition:"
-	@echo "  make build-teams     - Build Teams edition binary (with -tags teams)"
-	@echo "  make build-docker    - Build Teams Docker image"
-	@echo "  make build-deb       - Build Teams .deb package (TODO)"
+	@echo "Server Edition:"
+	@echo "  make build-server    - Build Server edition binary (with -tags server)"
+	@echo "  make build-docker    - Build Server Docker image"
+	@echo "  make build-deb       - Build Server .deb package (TODO)"
 	@echo ""
 	@echo "Documentation Commands:"
 	@echo "  make docs-setup      - Install documentation dependencies"
@@ -91,28 +91,28 @@ backend-dev:
 	@echo "🚀 Run: ./mcpproxy-dev serve"
 	@echo "🌐 In dev mode, make sure frontend dev server is running on port 3000"
 
-# Build Teams edition
-build-teams: swagger frontend-build
-	@echo "🔨 Building Teams edition binary (version: $(VERSION))..."
-	go build -tags teams -ldflags "$(LDFLAGS)" -o mcpproxy-teams ./cmd/mcpproxy
-	@echo "✅ Teams build completed! Run: ./mcpproxy-teams serve"
+# Build Server edition
+build-server: swagger frontend-build
+	@echo "🔨 Building Server edition binary (version: $(VERSION))..."
+	go build -tags server -ldflags "$(LDFLAGS)" -o mcpproxy-server ./cmd/mcpproxy
+	@echo "✅ Server build completed! Run: ./mcpproxy-server serve"
 
-# Build Teams Docker image
+# Build Server Docker image
 build-docker:
-	@echo "🐳 Building Teams Docker image (version: $(VERSION))..."
-	docker build --build-arg VERSION=$(VERSION) --build-arg COMMIT=$(COMMIT) --build-arg BUILD_DATE=$(BUILD_DATE) -t mcpproxy-teams:$(VERSION) -t mcpproxy-teams:latest .
-	@echo "✅ Docker image built: mcpproxy-teams:$(VERSION)"
+	@echo "🐳 Building Server Docker image (version: $(VERSION))..."
+	docker build --build-arg VERSION=$(VERSION) --build-arg COMMIT=$(COMMIT) --build-arg BUILD_DATE=$(BUILD_DATE) -t mcpproxy-server:$(VERSION) -t mcpproxy-server:latest .
+	@echo "✅ Docker image built: mcpproxy-server:$(VERSION)"
 
-# Build Teams .deb package (placeholder)
+# Build Server .deb package (placeholder)
 build-deb:
-	@echo "📦 Building Teams .deb package..."
+	@echo "📦 Building Server .deb package..."
 	@echo "⚠️  TODO: Implement deb package build (nfpm or dpkg-deb)"
 	@echo "   See: https://nfpm.goreleaser.com/"
 
 # Clean build artifacts
 clean:
 	@echo "🧹 Cleaning build artifacts..."
-	rm -f mcpproxy mcpproxy-dev mcpproxy-tray mcpproxy-teams
+	rm -f mcpproxy mcpproxy-dev mcpproxy-tray mcpproxy-server
 	rm -rf frontend/dist frontend/node_modules web/frontend
 	go clean
 	@echo "✅ Cleanup completed"

cmd/mcpproxy/edition_teams.go

@@ -1,7 +1,7 @@
-//go:build teams
+//go:build server
 
 package main
 
 func init() {
-	Edition = "teams"
+	Edition = "server"
 }

cmd/mcpproxy/status_cmd.go

@@ -367,7 +367,7 @@ func printStatusTable(info *StatusInfo) {
 
 	if info.TeamsInfo != nil {
 		fmt.Println()
-		fmt.Println("Teams")
+		fmt.Println("Server Edition")
 		fmt.Printf("  %-12s %s\n", "OAuth:", info.TeamsInfo.OAuthProvider)
 		fmt.Printf("  %-12s %s\n", "Admins:", strings.Join(info.TeamsInfo.AdminEmails, ", "))
 	}

cmd/mcpproxy/status_teams.go

@@ -1,4 +1,4 @@
-//go:build teams
+//go:build server
 
 package main
 

cmd/mcpproxy/status_teams_stub.go

@@ -1,4 +1,4 @@
-//go:build !teams
+//go:build !server
 
 package main
 

cmd/mcpproxy/teams_register.go

@@ -1,11 +1,11 @@
-//go:build teams
+//go:build server
 
 package main
 
-// Teams features are registered via init() functions in their respective
-// packages. The actual setup happens when the server calls teams.SetupAll()
-// during HTTP server initialization (see internal/server/teams_wire.go).
+// Server edition features are registered via init() functions in their
+// respective packages. The actual setup happens when the server calls
+// teams.SetupAll() during HTTP server initialization (see internal/server/teams_wire.go).
 //
 // This file imports the teams package for its init() side effects,
-// which register feature modules in the teams registry.
+// which register feature modules in the server registry.
 import _ "github.com/smart-mcp-proxy/mcpproxy-go/internal/teams"

frontend/src/App.vue

@@ -96,7 +96,7 @@ function handleAuthError(event: APIAuthEvent) {
 }
 
 onMounted(async () => {
-  // Initialize auth state (needed for teams edition role-based nav)
+  // Initialize auth state (needed for server edition role-based nav)
   await authStore.checkAuth()
 
   // Set up API error listener