@maanster/dreamaan-mcp 0.5.2 → 0.6.0

package/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## [0.6.0] - 2026-10-09
+
+- Add an MCP Apps asset upload picker, browser handoff and completion recovery without requiring the CLI.
+- Add accessible media URL imports backed by SSRF-protected managed upload sessions.
+- Add native Windows credential and upload-state protection with NTFS ACLs and platform CI.
+- Ship production skill 0.4.0 with cross-client upload guidance and checksum-based update discovery.
+
 ## [0.5.2] - 2026-10-09
 
 - Publish maintained skill files and ZIP through HTTP with version, compatibility, SHA-256 checksums and conditional downloads.

package/README.md

@@ -12,17 +12,23 @@ Connect your AI assistant to Dreamaan to work with projects, assets, generation
 
 Hosted and local connections have separate sign-in sessions. Installing the package does not grant access to Dreamaan projects.
 
+## Uploads in different clients
+
+Hosted users can upload without this package: the MCP upload tool opens an in-chat file picker in compatible clients, with a browser link for other clients. Accessible media URLs can be imported directly. Existing Dreamaan assets can be reused without another upload. A remote MCP connection does not expose private chat attachments or local computer paths; choose the original file in the picker instead.
+
+For local terminal workflows, `dreamaan upload` transfers the selected original and registers its asset/version. Read [upload workflows](docs/client/uploads.md) for recovery and file-size limits, and [client compatibility](docs/client/upload-clients.md) for what is verified.
+
 ## Requirements
 
 - Node.js 22 or later.
-- Linux or macOS for local credential and upload-state storage. Windows is currently unsupported.
+- Linux/macOS with POSIX private files, or Windows with a local NTFS filesystem and Windows PowerShell for user-restricted credential and upload-state storage. Hosted MCP requires neither Node.js nor the CLI.
 - A Dreamaan account and access to the projects you intend to use.
 - Your environment's API URL, including `/api`. Use the URL provided by your Dreamaan administrator; do not substitute a web-app or MCP URL.
 
 ## Install
 
 ```sh
-npm install --global @maanster/dreamaan-mcp@0.5.1
+npm install --global @maanster/dreamaan-mcp@0.6.0
 dreamaan-mcp --version
 dreamaan --help
 ```
@@ -109,7 +115,7 @@ OAuth logout revokes the CLI connection and removes its local profile. Uninstall
 
 ## Production skill and workflows
 
-The package includes the Dreamaan production skill (version 0.3.1): screenplay breakdown into sequences/plans/outputs, character/location/prop preparation and linking, version-pinned frames to videos, assignments/reviews and production budgeting.
+The package includes the Dreamaan production skill (version 0.4.0): screenplay breakdown into sequences/plans/outputs, character/location/prop preparation and linking, version-pinned frames to videos, assignments/reviews and production budgeting.
 
 Run `npm root --global`, then copy the complete `@maanster/dreamaan-mcp/skills/dreamaan` folder to your client's skills directory. Keep its reference guides with it and connect Dreamaan MCP. A skill-capable client can then use it for requests such as “Break this screenplay into plans and propose an asset checklist and budget” or “Create a reviewed frame-to-video pilot for this plan.”