1.5.0

What's Changed

• fix(pdf-server): translucent highlights, pinch to/from fullscreen, toolbar layout by @ochafik in #587
• fix(pdf-server): let zoom-out button go below fit-to-page by @ochafik in #589
• feat(pdf-server): get_viewer_state interact action by @ochafik in #590
• fix(pdf-server): import highlight/underline/strike from existing PDFs by @ochafik in #592
• fix(pdf-server): form-field save robustness by @ochafik in #591
• feat(pdf-server): rasterize imported annotations + form/save consistency follow-ups by @ochafik in #593

Full Changelog: v1.4.0...v1.5.0

1.4.0

Changes since 1.3.2:

SDK

• feat: add addEventListener/removeEventListener with DOM-model on* semantics (#573)

pdf-server

• feat: add save_as interact action (#580)
• feat: fit-to-page on fullscreen + pinch-to-zoom (#583)
• fix: npx DOMMatrix crash + broken MCPB bundle (#584)
• fix: viewer liveness, 1:1 batch results, fullscreen jitter (#579)
• fix: render page before O(numPages) annotation scans (#581)
• fix: radio + dropdown in fill_form/save (#577)

Dependencies

• chore: npm audit fix — sdk 1.29.0, systeminformation 5.31.5, +13 transitives (#585, #586)
• fix: bump path-to-regexp 8.3.0 → 8.4.1 to patch ReDoS CVEs (#576)

1.3.2

What's Changed

• Remove examples/pdf-server/plugin/ — canonical copy is upcoming in knowledge-work-plugins by @ochafik in #565
• Fix auto-resize destroying horizontal scroll positions by @mel-anthropic in #567
  • Revert fullscreen size-changed skip by @mel-anthropic in #570
• chore: bump ext-apps to 1.3.2 by @ochafik in #569

Full Changelog: v1.3.1...v1.3.2

1.3.1

What's Changed

• fix(pdf-server): detached-buffer on range re-request + stale e2e assertion by @ochafik in #561
• chore: bump ext-apps to 1.3.1 by @ochafik in #562

Full Changelog: v1.3.0...v1.3.1

1.3.0

What's Changed

• fix(examples): improve mobile support for map, pdf, and threejs examples by @mel-anthropic in #555
• pdf-server: annotations, interact tool, page extraction & prompt engineering by @ochafik in #506
• Add ui/notifications/request-close notification for UI to initiate termination by @fredericbarthelet in #215
• chore: bump ext-apps to 1.3.0 by @ochafik in #560

Full Changelog: v1.2.2...v1.3.0

1.2.2

What's Changed

• fix(schemas): import from zod/v4 to match SDK's zod API by @ochafik in #548
• chore: bump ext-apps to 1.2.2 by @ochafik in #549

Full Changelog: v1.2.1...v1.2.2

1.2.1

What's Changed

• test: exclude screenshot-gen from default E2E run; wire pdf-server tests by @ochafik in #537
• fix(build): copy schema.json to dist and externalize zod by @ochafik in #534
• ci: use npm ci with caching, validate typedoc links, align Node versions by @ochafik in #533
• fix: pre-commit stages only originally-staged files; add .npmrc by @ochafik in #538
• fix(deps): drop @hono/node-server override to patch GHSA-wc8c-qw6v-h7f6 by @ochafik in #535
• fix(ci): require maintainer association for /update-snapshots trigger by @ochafik in #532
• fix: skip debug log for high-frequency tool-input-partial notifications by @antonpk1 in #546
• fix: theme-aware README logo + docs preview CI by @localden in #545
• fix: bundle SDK+zod in react-with-deps (was byte-identical to ./react) by @ochafik in #539
• test(e2e): fix no-op security injection test via frames[] traversal by @ochafik in #540
• chore: bump ext-apps to 1.2.1 by @ochafik in #547

Full Changelog: v1.2.0...v1.2.1

1.2.0

Changes since 1.1.2:

Features

• feat: add readServerResource() and listServerResources() API to App (#470, #528)

Fixes

• fix: replace platform-specific optionalDependencies with bun devDependency (#518)
• fix: autoResize reporting viewport height when content is taller (#525)
• fix: remove duplicate --color-text-ghost from McpUiStyleVariableKey (#523)
• fix: examples servers' npm run start:stdio (#507)
• fix: work around tsx watch hang on Windows in quickstart (#428)

Refactors

• refactor: remove unnecessary type assertions (#471)
• refactor: replace deprecated RESOURCE_URI_META_KEY with modern format (#457)

Examples & Plugin

• pdf-server: ignore client roots by default (#510)
• plugin: refactor create-mcp-app skill to reference patterns.md (#416)

Docs

• docs: add Security documentation section and SEO improvements (#524)
• docs: add MCP client configuration examples to CONTRIBUTING.md (#508, #526)
• docs: use apps.extensions.modelcontextprotocol.io domain for docs URLs (#499)
• docs: add SECURITY.md with GitHub Security Advisories guidance (#472)

Full Changelog: v1.1.2...v1.2.0

1.1.2

What's Changed

• pdf-server: robust path validation + folder/file root support by @ochafik in #497
• feat: add ui/download-file method for host-mediated file downloads by @antonpk1 in #475
• ci: auto-fix prettier formatting in pre-commit hook and CI by @ochafik in #498
• fix: sync local SDK build into node_modules for examples by @ochafik in #504
• chore: bump ext-apps to 1.1.2 by @ochafik in #503

Full Changelog: v1.1.1...v1.1.2

1.1.1

What's Changed

• fix: add audio/video support for basic-host by @Avcharov in #460
• Adding ChatGPT to the readme by @conorkel in #486
• fix(pdf-server): remove page-loading overlay by @ochafik in #493
• pdf-server: remove domain allowlist, require HTTPS only by @ochafik in #487
• ci: add missing examples to deploy workflows by @ochafik in #494
• Add MCPB packaging and Claude Code plugin for pdf-server by @bryan-anthropic in #491
• ci: build and publish MCPB bundle for pdf-server by @ochafik in #495
• Set audioSession.type to playback in sheet music app by @mel-anthropic in #489
• chore: bump ext-apps to 1.1.1 by @ochafik in #496

Full Changelog: v1.1.0...v1.1.1