Changelog

All notable changes to this project. Each entry links to its full per-version file in changelog/.

0.5.0 — 2026-10-28

Publishes the workflows-guide skill over MCP, shows caller and workflow text literally in tool notices, and moves to mcp-ts-core 0.13.18, taking the 0.13.17 fix that stops the HTTP transport retaining memory per request under Bun.

0.4.2 — 2026-10-25

Workflow metadata renders as literal text, watcher delays reject invalid timer values, and the framework upgrade adds tool-argument repairs.

0.4.1 — 2026-10-07 · 🛡️ Security

Delete confirmations are bound to the caller who was asked, and the mcp-ts-core ^0.13.6 → ^0.13.13 upgrade adds a request ID to every error result and keeps stack traces and request context out of error data.

0.4.0 — 2026-09-23 · ⚠️ Breaking

workflow_delete now confirms the resolved target with the user before deleting, requiring a stateful HTTP session; temporary drafts persist until deleted instead of expiring; and workflow identity (version, name, filename) is canonicalized and hashed, fixing lookup, storage, and concurrency bugs across all five tools.

0.3.3 — 2026-09-19

The workflow index's fs.watch handle and debounce timer are released on shutdown so no ref'd handle outlives teardown, and createApp declares a stateless session posture in src/. Adopts mcp-ts-core 0.13.6, which adds a reason and a recovery hint to every rejected tool argument and normalizes argument keys before validation.

0.3.2 — 2026-09-13

The development skill tree moves out of the plugin-loaded skills/ path, and MCPB and plugin installers now collect the workflow directory, instructions path, debounce, and log level. Adopts mcp-ts-core 0.13.0; the Bun engines floor rises to 1.4.0.

0.3.1 — 2026-09-04

Server identity now resolves from the served package instead of the caller's working directory, pre-init logs are no longer dropped, and MCP_SESSION_MODE settles to stateless. mcp-ts-core bumps to 0.12.5, zod to 4.5.4.

0.3.0 — 2026-08-21 · ⚠️ Breaking

MCP SDK v2 maintenance with strict tool inputs, modern advertised schemas, TypeScript 7, Bun 1.4, supply-chain guards, and refreshed packaging and agent guidance.

0.2.0 — 2026-06-30

Completes library CRUD with a workflow_delete tool (by name + optional version) and adds a workflow_list keyword query filter over name and description. Tool descriptions rewritten client-facing, empty list results echo the applied filters, and the README documents the versioned per-name@version storage path.

0.1.4 — 2026-06-30

Two first-run fixes: WorkflowIndexService.init() now creates a missing WORKFLOWS_DIR before rebuild/watch so the snapshot writes and the watcher stays live, and the bundled research-visualization seed workflow declares its category so it stops warning at boot and matches category-filtered workflow_list.

0.1.3 — 2026-06-30 · 🛡️ Security

Security patch: clears 9 transitive bun audit advisories via the mcp-ts-core 0.10.10 bump, plus four workflow_create hardening fixes — cross-category duplicate guard, full semver validation, empty-slug category reject, and yaml.stringify serialization so created workflows round-trip through the index.

0.1.2 — 2026-06-11

Maintenance: @cyanheads/mcp-ts-core ^0.9.11 → ^0.10.6; bad-input write paths recode to ValidationError; server name/title identity; post-pack bundle cleaner; .mcpbignore dev-dir re-anchor.

0.1.1 — 2026-05-28 · ⚠️ Breaking

First real release — complete rewrite on @cyanheads/mcp-ts-core; 4 tools, YAML-backed index, filesystem watcher, semver-aware retrieval, scoped npm package @cyanheads/workflows-mcp-server

0.1.0 — 2026-05-28

Initial release — workflow library MCP server with 4 tools, YAML-backed index, filesystem watcher, and semver-aware retrieval