tododdle-mcp 3.5.1

Fixes the dependency audit failure in 3.5.0 by updating fast-uri, hono and qs. Keeps native private image previews through get_document_image.

Publishing now enforces the dependency audit in the workflow and prepublish lifecycle. Quality passed on this exact commit before release: https://github.com/krffl/tododdle-mcp/actions/runs/34486325889

Validation: 59 tests, coverage, TypeScript, formatting, API parity and package review pass. npm audit reports zero vulnerabilities.

tododdle-mcp 3.5.0

Adds get_document_image(projectId, documentId, size?) so agents can inspect authorized private images as native MCP image content. Supports standard and large previews without exposing signed URLs or duplicating base64 data in text.

Validation: 59 tests pass; coverage, TypeScript, formatting, API parity and package-content review pass. The matching web endpoint is deployed. No database migration or new environment settings are required.

Update the plugin or restart clients using the latest npm package to load the new tool. Hosted MCP rollout remains subject to its separate OAuth refresh validation.

tododdle-mcp 3.4.0

Changes

• Add connection-level content-safety guidance before retrieved ToDoddle content is processed.
• Send bounded Agent Run headers from supported MCP tools.
• Distribute the supervised ToDoddle Factory skill.
• Keep package, Codex plugin, and Claude plugin versions aligned.

Verification

• 57 tests passed.
• Coverage: 95.94% lines, 83.58% branches, 91.22% functions.
• External API parity passed with no missing or extra methods.
• npm audit reported no vulnerabilities.

tododdle-mcp 3.3.1

Expose optional nullable parentArtifactId in create_project_artifact and update_project_artifact so agents can create and edit true Context hierarchies.

tododdle-mcp 3.3.0

Full Changelog: v3.2.9...v3.3.0

tododdle-mcp 3.2.9

Adds compact federated project search across tickets, boards, lanes, Notes, Context, and documents. Updates the workflow skill to use search for discovery and avoid repeated hierarchy scans.

tododdle-mcp 3.2.8

Uses the ToDoddle application origin for API calls by default and rejects legacy marketing-site origins with a clear configuration error.\n\nAll formatting, TypeScript, coverage, API parity, audit, and package checks passed.

tododdle-mcp 3.2.7

Adds support case tools and distributes the canonical ToDoddle workflow as a Claude Code plugin.

All formatting, TypeScript, coverage, API parity, audit, and package checks passed.

tododdle-mcp 3.2.6

Local MCP uploads now use private zero-config staging under the operating system temporary directory. Optional approved upload roots remain available for Docker and sandbox use. Managed staging files are removed only after confirmed upload completion.

tododdle-mcp 3.2.5

Adds bounded optional review request tools, compact response contracts, stable retry keys, optimistic concurrency, hosted policy parity, and updated workflow guidance.