What's New in v1.2.0
π Auth β Per-Session Login Gate
- Real session model in
STATE.json (session + sessionPolicy), schema bumped 1.1.0 β 1.2.0
enforceSession: idle timeout (default 60m) clears activeMember/activeAgents/session and refuses stale or wrong-actor sessions across all mop-core commands
login starts a fresh session; setup seeds one; new logout + whoami/session verify
autosycn refuses commit/push unless the actor holds a valid, matching session
- Gate docs updated (
PROTOCOL / CLAUDE / AGENTS / GEMINI): every new chat = unauthenticated; activeMember is only a hint, never proof; re-login on idle; verify before push
π Update β STATE Migration on --force
install --force now migrates STATE.json instead of overwriting it
- Preserves user data: members, ledger, agentRoster, identities, deployment, workflow progress
- Refreshes system config: agentCatalog, workflow phases, policies, sessionPolicy, schema
- Backup written to
.MOP/STATE.json.bak before migration
- Copy filter also protects
team.json, config/members, and memory from --force
β
Verified
validate --strict β
- Smoke tests 6/6 β
doctor ready β
- Migration test: schema
1.1.0 β 1.2.0, agentCatalog 3 β 37, user data intact β
Upgrade
npx burhan-mop install --force