v2.0.5 — trust & funnel
Public-surface and reliability release. No breaking changes.
Docs & trust
- README restructured shorter and funnel-first; security section now claims the npm OIDC provenance and signed tags that ship since v2.0.4 (verify with
npm audit signatures). - Quick start documents the restart-after-install step and the
/flatten→/resumereload loop; pinned-version install is primary. - Added SECURITY.md, CHANGELOG.md, CONTRIBUTING.md.
Reliability
- CI now runs the test suite on every push/PR and gates publishing on it (Node 18/20/22).
- Fixed: unquoted
flatten-mcp-session flatten last 5silently flattened only one session (#9). - Hardened:
retrieve_flattenedvalidatessession_idbefore building the backup path (#10).
Plugin
- The Claude Code plugin now registers the MCP server (previously it installed only the
/flattencommand).
Full changelog: https://github.com/shayaShav/flatten-mcp/blob/main/CHANGELOG.md