1.6.2

Dyad v1.6.2 improves macOS saved secret protection and recovery, adds a dedicated Plugins page for managing MCP servers, improves pnpm install and migration handling, and includes fixes for version restore and TypeScript checks.

Highlights

Improved protection and recovery for saved secrets on macOS

Dyad now has stronger protection for saved secrets on macOS, including AI provider keys, GitHub tokens, and other encrypted settings.

This release improves how Dyad handles encrypted secrets when macOS Keychain access changes or when a secret cannot be decrypted during startup. Instead of dropping unreadable secrets and potentially saving over them, Dyad now preserves the encrypted value so it is not lost during future settings writes.

Dyad also improves recovery for secrets that were encrypted under earlier Keychain identities. This particularly helps users affected by the v1.6.0 saved-settings regression and makes future upgrades safer.

New Plugins page for MCP server management

MCP server management has moved to a new Plugins page.

This gives MCP servers a clearer home in Dyad and makes plugin-style integrations easier to find and manage. Instead of configuring MCP servers from the previous settings area, you can now manage them from a dedicated page built for connected tools and integrations.

The new page helps keep app and provider settings cleaner while making MCP setup more discoverable.

Enhancements

• Added a consent-based Migrate to pnpm 11 app upgrade for apps that need a pnpm lockfile or package manager update.
• Added a startup nudge when an app may need pnpm migration, pointing users to the App Upgrades flow instead of silently changing the app.
• Improved pnpm install handling so ignored build scripts are automatically denied when needed, helping apps avoid getting stuck on ERR_PNPM_IGNORED_BUILDS.
• Added self-healing for some pnpm ignored-build failures during custom install, Capacitor, and dependency flows.
• Improved package install messages so Dyad can note when build scripts were denied for safety.
• Improved TypeScript check handling when type checking is unavailable, with clearer guidance instead of unexpected failures.
• Added a one-click path to ask the agent to add TypeScript support when type checks cannot run because TypeScript is not configured.
• Fixed version restore when restoring older versions after browsing history on a non-main branch.
• Improved macOS Keychain recovery lookup for legacy encrypted secrets.
• Added a more reliable in-process macOS Keychain reader for saved-secret recovery.

Feedback

If you run into issues or have suggestions, please help us improve by reporting a bug or uploading a chat session.