dodo-mcp 1.3.2 → 1.4.1

package/docs/RELEASE_NOTES.md

@@ -1,5 +1,19 @@
 # DODO MCP — Release Notes
 
+## 1.4.1 — Immediate Upgrade Unblock, Full Edit Defaults & Concurrent Multi-Project UI
+
+- Automatically clears pre-existing write blocks (`recovery_required` changesets, `PREPARING` snapshots, `recovery_drift`, strict `recovery_policies`, `read`/`inspect` defaults, and read-only OAuth grants/tokens) immediately upon upgrading and opening `state.db`.
+- Sets default permissions across projects, OAuth consent/token verification fallbacks, and AI profiles to full edit/write/exec (`full`, `dodo:read dodo:write dodo:exec`), and ensures `edit_file` honors `relaxExpectedHash`.
+- Propagates `runMode` across concurrent project runtimes and auto-loads the active project in the Projects workbench with a Multi-Project Switcher and always-visible File Access & Secret Policy controls on both local and `/config` links.
+- See [upgrade details](RELEASE_1.4.1.md) and [Recovery usage](RECOVERY.md).
+
+## 1.4.0 — Non-blocking Recovery, Git Recovery & Configurable File Access Policy
+
+- Recovery is now non-blocking by default (`strictEnforcement: false`, `skipSecretContentFiles: true`), automatically skipping credential-like example files and generated framework directories (`.next`, `.nuxt`, `.svelte-kit`, `.turbo`, etc.) instead of locking projects in `BLOCKED (SECRET_PATH_DENIED)`.
+- Added native Git Recovery mode (`auto`, `git`, `snapshot`, `off`) with private Git checkpoint refs (`refs/dodo/checkpoints/*`), diff preview, and 1-click restore in the web UI.
+- Added live-configurable File Access & Secret Policy (`standard`, `off` / Allow All, `strict`) with `secretAllow` / `secretDeny` quick-add chips, `relaxEpochCheck`, `relaxExpectedHash`, 1-click stuck changeset resolution, and categorized Project sub-tabs.
+- See [upgrade details](RELEASE_1.4.0.md) and [Recovery usage](RECOVERY.md).
+
 ## 1.3.2 — Recovery storage management
 
 Adds owner-reviewed checkpoint cleanup, pending-file retry, project quotas and

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dodo-mcp",
-  "version": "1.3.2",
+  "version": "1.4.1",
   "author": "Arthittakun",
   "description": "DODO — local-first MCP server with multi-project coding, AI providers, sub-agents, context, memory, media and workflow tools; embedded OAuth and workspace permissions.",
   "type": "module",
@@ -54,6 +54,8 @@
     "docs/RELEASE_1.3.0.md",
     "docs/RELEASE_1.3.1.md",
     "docs/RELEASE_1.3.2.md",
+    "docs/RELEASE_1.4.0.md",
+    "docs/RELEASE_1.4.1.md",
     "docs/RELEASE_NOTES.md",
     "docs/SCHEDULES.md",
     "docs/SECURITY.md",

package/schemas/global-config.schema.json

@@ -290,6 +290,23 @@
         "maxLength": 256
       }
     },
+    "secretPolicyMode": {
+      "default": "standard",
+      "type": "string",
+      "enum": [
+        "standard",
+        "strict",
+        "off"
+      ]
+    },
+    "relaxEpochCheck": {
+      "default": false,
+      "type": "boolean"
+    },
+    "relaxExpectedHash": {
+      "default": false,
+      "type": "boolean"
+    },
     "commandSandbox": {
       "default": "off",
       "type": "string",
@@ -520,6 +537,9 @@
     "secretDeny",
     "searchBackend",
     "secretAllow",
+    "secretPolicyMode",
+    "relaxEpochCheck",
+    "relaxExpectedHash",
     "commandSandbox",
     "sandboxWritablePaths",
     "allowWebFetch",