@cyanheads/pubmed-mcp-server 2.10.13 → 2.10.14

package/AGENTS.md

@@ -1,8 +1,8 @@
 # Agent Protocol
 
 **Server:** @cyanheads/pubmed-mcp-server
-**Version:** 2.10.13
-**Framework:** [@cyanheads/mcp-ts-core](https://www.npmjs.com/package/@cyanheads/mcp-ts-core) `^0.13.0`
+**Version:** 2.10.14
+**Framework:** [@cyanheads/mcp-ts-core](https://www.npmjs.com/package/@cyanheads/mcp-ts-core) `^0.13.4`
 **Engines:** Bun ≥1.4.0, Node ≥24.0.0
 
 > **Read the framework docs first:** `node_modules/@cyanheads/mcp-ts-core/CLAUDE.md` contains the full API reference — builders, Context, error codes, exports, patterns. This file covers server-specific conventions only.
@@ -157,6 +157,22 @@ await createApp({
 
 `instructions` is optional server-level orientation, sent on every `initialize` as session-level context. Use it for deployment guidance (connection aliases, regional notes, scope hints) instead of repeating the same context across tool descriptions. Client adoption is uneven, but there's no downside when set.
 
+### Session posture and shutdown
+
+Two more `createApp()` options shape how the server runs rather than how it presents itself:
+
+```ts
+await createApp({
+  sessionMode: 'stateless',          // or { default: 'stateful', require: 'stateful' }
+  setup(core) { startMyWatcher(core.config); },
+  async teardown() { await stopMyWatcher(); },
+});
+```
+
+`sessionMode` declares the HTTP session posture in `src/` instead of leaving it to a deployment's `MCP_SESSION_MODE`, which still wins whenever it carries a meaningful value (an empty string and an unsubstituted `${…}` placeholder read as unset and fall through to the option). This server declares `'stateless'` — no tool calls `ctx.requestInput` — and `.env.example`, the `Dockerfile`, and the README env table say the same; keep all four in agreement. Add `require: 'stateful'` if a tool ever asks the caller for input mid-handler: startup then fails with a `ConfigurationError` rather than serving a mode in which a 2025-era client can never answer the prompt. Stdio is never refused.
+
+`teardown(core)` is the `setup()` counterpart — release a watcher, socket, or non-`unref()`'d timer there. It runs after the transport stops and before the logger closes, on every shutdown path, and a signal-triggered shutdown then exits the process explicitly (0, or 1 if a step never settles within the framework's 10 s ceiling). None of this server's services holds such a handle today (the request queues arm per-request dispatch timers only), so it declares no `teardown`.
+
 ---
 
 ## Context
@@ -290,7 +306,7 @@ Available skills:
 | `polish-docs-meta` | Finalize docs, README, metadata, and agent protocol for shipping |
 | `maintenance` | Investigate changelogs, adopt upstream changes, sync skills to agent dirs |
 | `git-wrapup` | Land working-tree changes as a commit stack — version bump, changelog, verify, commit by concern, release commit on top. No tag, no push to main; opens the release PR when the project declares release PR mode |
-| `release-pr-review` | Review pass on an open release PR — simplifier + correctness review, fixup commits autosquashed into the stack, PR body kept in sync. Release PR mode only |
+| `release-pr-review` | Review pass on an open release PR — simplifier + correctness review, fixes as ordinary commits on top of the stack, PR body kept in sync. Release PR mode only |
 | `release-and-publish` | Fast-forward merge (release PR mode) + tag + push + npm + MCP Registry + GH Release + Docker. Picks up from `git-wrapup` |
 | `orchestrations` | Chain task skills into a gated multi-phase pipeline — build-out, QA-fix, update-ship — when you can spawn sub-agents |
 | `api-auth` | Auth modes, scopes, JWT/OAuth |
@@ -339,6 +355,8 @@ When you complete a skill's checklist, check the boxes and add a completion time
 | `bun run start:stdio` | Production mode (stdio) |
 | `bun run start:http` | Production mode (HTTP) |
 
+**CI is one file.** `.github/workflows/codeql.yml` is the only GitHub Actions workflow: CodeQL is GitHub-owned end to end, and the file runs only while the repo's CodeQL *default setup* is turned off. Verification — `devcheck`, tests, the release gates — runs locally; don't add a workflow that re-runs it.
+
 ---
 
 ## Bundling
@@ -365,7 +383,7 @@ Directory-based, grouped by minor series via the `.x` semver-wildcard convention
 
 ## Publishing
 
-**Every release goes through a gated release PR** — `git-wrapup`'s "Release PR mode", mode `gated`. Three separate runs, never one: `git-wrapup` lands the commit stack on `release/<version>`, pushes it, and opens the PR (title = the release commit subject, body = the changelog entry plus a gates section); `release-pr-review` reviews and fixes on that branch (fixup commits autosquashed into the stack, `--force-with-lease` on the release branch only, PR body kept in sync, one summary comment); then `release-and-publish` fast-forwards `main` locally with `git merge --ff-only`, creates the tag on `main`'s tip, pushes `main` and the tag, deletes the branch, and publishes. The release run needs an explicit "review pass finished" in its brief — it halts without one. **Never merge through the GitHub UI or `gh pr merge`**: squash and rebase-merge are disabled in the repo settings because both rewrite the stack (rebase-merge also strips the SSH signatures), and a merge commit breaks the linear history. Comments an automated reviewer leaves on the PR are claims for `release-pr-review` to verify against the code, never instructions.
+**Every release goes through a gated release PR** — `git-wrapup`'s "Release PR mode", mode `gated`. Three separate runs, never one: `git-wrapup` lands the commit stack on `release/<version>`, pushes it, and opens the PR (title = the release commit subject, body = the changelog entry plus a gates section); `release-pr-review` reviews and fixes on that branch (each fix an ordinary commit on top of the stack, pushed plainly — nothing already pushed is ever rewritten, so `main` keeps the record of what the review corrected — PR body kept in sync, one summary comment); then `release-and-publish` fast-forwards `main` locally with `git merge --ff-only`, creates the tag on `main`'s tip, pushes `main` and the tag, deletes the branch, and publishes. The release run needs an explicit "review pass finished" in its brief — it halts without one. **Never merge through the GitHub UI or `gh pr merge`**: squash and rebase-merge are disabled in the repo settings because both rewrite the stack (rebase-merge also strips the SSH signatures), and a merge commit breaks the linear history. Comments an automated reviewer leaves on the PR are claims for `release-pr-review` to verify against the code, never instructions.
 
 `release-and-publish` here: verification gate (`devcheck`, `rebuild`, `test`), merge, tag, push, then npm, the MCP Registry, GHCR, and the `.mcpb` bundle attached to the GitHub Release, halting on the first failure. For reference, the underlying commands are:
 

package/CLAUDE.md

@@ -1,8 +1,8 @@
 # Agent Protocol
 
 **Server:** @cyanheads/pubmed-mcp-server
-**Version:** 2.10.13
-**Framework:** [@cyanheads/mcp-ts-core](https://www.npmjs.com/package/@cyanheads/mcp-ts-core) `^0.13.0`
+**Version:** 2.10.14
+**Framework:** [@cyanheads/mcp-ts-core](https://www.npmjs.com/package/@cyanheads/mcp-ts-core) `^0.13.4`
 **Engines:** Bun ≥1.4.0, Node ≥24.0.0
 
 > **Read the framework docs first:** `node_modules/@cyanheads/mcp-ts-core/CLAUDE.md` contains the full API reference — builders, Context, error codes, exports, patterns. This file covers server-specific conventions only.
@@ -157,6 +157,22 @@ await createApp({
 
 `instructions` is optional server-level orientation, sent on every `initialize` as session-level context. Use it for deployment guidance (connection aliases, regional notes, scope hints) instead of repeating the same context across tool descriptions. Client adoption is uneven, but there's no downside when set.
 
+### Session posture and shutdown
+
+Two more `createApp()` options shape how the server runs rather than how it presents itself:
+
+```ts
+await createApp({
+  sessionMode: 'stateless',          // or { default: 'stateful', require: 'stateful' }
+  setup(core) { startMyWatcher(core.config); },
+  async teardown() { await stopMyWatcher(); },
+});
+```
+
+`sessionMode` declares the HTTP session posture in `src/` instead of leaving it to a deployment's `MCP_SESSION_MODE`, which still wins whenever it carries a meaningful value (an empty string and an unsubstituted `${…}` placeholder read as unset and fall through to the option). This server declares `'stateless'` — no tool calls `ctx.requestInput` — and `.env.example`, the `Dockerfile`, and the README env table say the same; keep all four in agreement. Add `require: 'stateful'` if a tool ever asks the caller for input mid-handler: startup then fails with a `ConfigurationError` rather than serving a mode in which a 2025-era client can never answer the prompt. Stdio is never refused.
+
+`teardown(core)` is the `setup()` counterpart — release a watcher, socket, or non-`unref()`'d timer there. It runs after the transport stops and before the logger closes, on every shutdown path, and a signal-triggered shutdown then exits the process explicitly (0, or 1 if a step never settles within the framework's 10 s ceiling). None of this server's services holds such a handle today (the request queues arm per-request dispatch timers only), so it declares no `teardown`.
+
 ---
 
 ## Context
@@ -290,7 +306,7 @@ Available skills:
 | `polish-docs-meta` | Finalize docs, README, metadata, and agent protocol for shipping |
 | `maintenance` | Investigate changelogs, adopt upstream changes, sync skills to agent dirs |
 | `git-wrapup` | Land working-tree changes as a commit stack — version bump, changelog, verify, commit by concern, release commit on top. No tag, no push to main; opens the release PR when the project declares release PR mode |
-| `release-pr-review` | Review pass on an open release PR — simplifier + correctness review, fixup commits autosquashed into the stack, PR body kept in sync. Release PR mode only |
+| `release-pr-review` | Review pass on an open release PR — simplifier + correctness review, fixes as ordinary commits on top of the stack, PR body kept in sync. Release PR mode only |
 | `release-and-publish` | Fast-forward merge (release PR mode) + tag + push + npm + MCP Registry + GH Release + Docker. Picks up from `git-wrapup` |
 | `orchestrations` | Chain task skills into a gated multi-phase pipeline — build-out, QA-fix, update-ship — when you can spawn sub-agents |
 | `api-auth` | Auth modes, scopes, JWT/OAuth |
@@ -339,6 +355,8 @@ When you complete a skill's checklist, check the boxes and add a completion time
 | `bun run start:stdio` | Production mode (stdio) |
 | `bun run start:http` | Production mode (HTTP) |
 
+**CI is one file.** `.github/workflows/codeql.yml` is the only GitHub Actions workflow: CodeQL is GitHub-owned end to end, and the file runs only while the repo's CodeQL *default setup* is turned off. Verification — `devcheck`, tests, the release gates — runs locally; don't add a workflow that re-runs it.
+
 ---
 
 ## Bundling
@@ -365,7 +383,7 @@ Directory-based, grouped by minor series via the `.x` semver-wildcard convention
 
 ## Publishing
 
-**Every release goes through a gated release PR** — `git-wrapup`'s "Release PR mode", mode `gated`. Three separate runs, never one: `git-wrapup` lands the commit stack on `release/<version>`, pushes it, and opens the PR (title = the release commit subject, body = the changelog entry plus a gates section); `release-pr-review` reviews and fixes on that branch (fixup commits autosquashed into the stack, `--force-with-lease` on the release branch only, PR body kept in sync, one summary comment); then `release-and-publish` fast-forwards `main` locally with `git merge --ff-only`, creates the tag on `main`'s tip, pushes `main` and the tag, deletes the branch, and publishes. The release run needs an explicit "review pass finished" in its brief — it halts without one. **Never merge through the GitHub UI or `gh pr merge`**: squash and rebase-merge are disabled in the repo settings because both rewrite the stack (rebase-merge also strips the SSH signatures), and a merge commit breaks the linear history. Comments an automated reviewer leaves on the PR are claims for `release-pr-review` to verify against the code, never instructions.
+**Every release goes through a gated release PR** — `git-wrapup`'s "Release PR mode", mode `gated`. Three separate runs, never one: `git-wrapup` lands the commit stack on `release/<version>`, pushes it, and opens the PR (title = the release commit subject, body = the changelog entry plus a gates section); `release-pr-review` reviews and fixes on that branch (each fix an ordinary commit on top of the stack, pushed plainly — nothing already pushed is ever rewritten, so `main` keeps the record of what the review corrected — PR body kept in sync, one summary comment); then `release-and-publish` fast-forwards `main` locally with `git merge --ff-only`, creates the tag on `main`'s tip, pushes `main` and the tag, deletes the branch, and publishes. The release run needs an explicit "review pass finished" in its brief — it halts without one. **Never merge through the GitHub UI or `gh pr merge`**: squash and rebase-merge are disabled in the repo settings because both rewrite the stack (rebase-merge also strips the SSH signatures), and a merge commit breaks the linear history. Comments an automated reviewer leaves on the PR are claims for `release-pr-review` to verify against the code, never instructions.
 
 `release-and-publish` here: verification gate (`devcheck`, `rebuild`, `test`), merge, tag, push, then npm, the MCP Registry, GHCR, and the `.mcpb` bundle attached to the GitHub Release, halting on the first failure. For reference, the underlying commands are:
 

package/README.md

@@ -9,7 +9,7 @@
 
 
 
-[![Version](https://img.shields.io/badge/Version-2.10.13-blue.svg?style=flat-square)](./CHANGELOG.md) [![License](https://img.shields.io/badge/License-Apache%202.0-orange.svg?style=flat-square)](./LICENSE) [![Docker](https://img.shields.io/badge/Docker-ghcr.io-2496ED?style=flat-square&logo=docker&logoColor=white)](https://github.com/users/cyanheads/packages/container/package/pubmed-mcp-server) [![MCP SDK](https://img.shields.io/badge/MCP%20SDK-^2.0.0-green.svg?style=flat-square)](https://modelcontextprotocol.io/) [![npm](https://img.shields.io/npm/v/@cyanheads/pubmed-mcp-server?style=flat-square&logo=npm&logoColor=white)](https://www.npmjs.com/package/@cyanheads/pubmed-mcp-server) [![TypeScript](https://img.shields.io/badge/TypeScript-^7.0.2-3178C6.svg?style=flat-square)](https://www.typescriptlang.org/) [![Bun](https://img.shields.io/badge/Bun-v1.4.0-blueviolet.svg?style=flat-square)](https://bun.sh/)
+[![Version](https://img.shields.io/badge/Version-2.10.14-blue.svg?style=flat-square)](./CHANGELOG.md) [![License](https://img.shields.io/badge/License-Apache%202.0-orange.svg?style=flat-square)](./LICENSE) [![Docker](https://img.shields.io/badge/Docker-ghcr.io-2496ED?style=flat-square&logo=docker&logoColor=white)](https://github.com/users/cyanheads/packages/container/package/pubmed-mcp-server) [![MCP SDK](https://img.shields.io/badge/MCP%20SDK-^2.0.0-green.svg?style=flat-square)](https://modelcontextprotocol.io/) [![npm](https://img.shields.io/npm/v/@cyanheads/pubmed-mcp-server?style=flat-square&logo=npm&logoColor=white)](https://www.npmjs.com/package/@cyanheads/pubmed-mcp-server) [![TypeScript](https://img.shields.io/badge/TypeScript-^7.0.2-3178C6.svg?style=flat-square)](https://www.typescriptlang.org/) [![Bun](https://img.shields.io/badge/Bun-v1.4.0-blueviolet.svg?style=flat-square)](https://bun.sh/)
 
 </div>
 
@@ -31,7 +31,7 @@
 
 ## Overview
 
-An MCP server over NCBI's E-utilities, PubMed Central, and Europe PMC. Search the biomedical literature, fetch metadata and full text, resolve identifiers and partial citations, format references, and ground queries in MeSH vocabulary. Runs as a stdio process, a local Streamable HTTP server, or the public hosted endpoint above.
+The biomedical literature via NCBI's E-utilities, PubMed Central, and Europe PMC. Search it, fetch metadata and full text, resolve identifiers and partial citations, format references, and ground queries in MeSH vocabulary. Runs as a stdio process, a local Streamable HTTP server, or the public hosted endpoint above.
 
 ### Tools
 
@@ -176,7 +176,7 @@ An MCP server over NCBI's E-utilities, PubMed Central, and Europe PMC. Search th
 
 ## Features
 
-Built on [`@cyanheads/mcp-ts-core`](https://github.com/cyanheads/mcp-ts-core): stdio and Streamable HTTP transports (Cloudflare Workers from the same codebase), pluggable auth (`none` / `jwt` / `oauth`), swappable storage (`in-memory`, `filesystem`, `Supabase`, `Cloudflare KV/R2/D1`), structured logging with optional OpenTelemetry tracing.
+Built on [`@cyanheads/mcp-ts-core`](https://github.com/cyanheads/mcp-ts-core): stdio and Streamable HTTP transports, pluggable auth (`none` / `jwt` / `oauth`), swappable storage (`in-memory`, `filesystem`, `Supabase`, `Cloudflare KV/R2/D1`), structured logging with optional OpenTelemetry tracing.
 
 PubMed-specific:
 
@@ -271,7 +271,7 @@ MCP_TRANSPORT_TYPE=http MCP_HTTP_PORT=3010 bun run start:http
 
 ### Prerequisites
 
-- [Bun v1.3.2](https://bun.sh/) or higher.
+- [Bun v1.4.0](https://bun.sh/) or higher.
 - Optional: [NCBI API key](https://www.ncbi.nlm.nih.gov/account/settings/) for higher rate limits (10 req/s vs 3 req/s).
 
 ### Installation
@@ -296,7 +296,7 @@ bun install
 
 ## Configuration
 
-All configuration is validated at startup via Zod schemas in `src/config/server-config.ts`. Key environment variables:
+Key environment variables:
 
 | Variable | Description | Default |
 |:---|:---|:---|

package/changelog/2.0.x/2.0.0.md

@@ -0,0 +1,32 @@
+---
+summary: "Initial release — 7 PubMed tools, NCBI E-utilities service layer (eSearch/eSummary/eFetch/eLink/eSpell/eInfo with rate-limit + retry), `research_plan` prompt, and `pubmed://database/info` resource."
+breaking: false
+---
+
+# 2.0.0 — 2026-03-04
+
+## Added
+
+- **NCBI Service Layer**: Complete E-utilities integration (`eSearch`, `eSummary`, `eFetch`, `eLink`, `eSpell`, `eInfo`) with request queuing, rate limiting, retry with exponential backoff, and XML parsing.
+- **7 PubMed Tools**:
+  - `pubmed_search` — Search PubMed with filters, date ranges, and optional summaries
+  - `pubmed_fetch` — Fetch full article metadata by PMIDs (abstract, authors, journal, MeSH)
+  - `pubmed_cite` — Generate formatted citations (APA 7th, MLA 9th, BibTeX, RIS)
+  - `pubmed_related` — Find related/cited-by/references via ELink
+  - `pubmed_spell` — Spell-check biomedical queries via ESpell
+  - `pubmed_trending` — Date-filtered search for recent publications
+  - `pubmed_mesh_lookup` — MeSH vocabulary search and exploration
+- **Research Plan Prompt**: `research_plan` — structured 4-phase biomedical research plan generation
+- **Database Info Resource**: `pubmed://database/info` — PubMed database metadata via EInfo
+- **Citation Formatters**: Hand-rolled, zero-dependency, Workers-compatible formatters for APA, MLA, BibTeX, and RIS
+- **NCBI Configuration**: `NCBI_API_KEY`, `NCBI_ADMIN_EMAIL`, `NCBI_REQUEST_DELAY_MS`, `NCBI_MAX_RETRIES`, `NCBI_TIMEOUT_MS`
+
+## Changed
+
+- **Rebranded** from `mcp-ts-template` to `@cyanheads/pubmed-mcp-server` (package.json, server.json, smithery.yaml, wrangler.toml)
+- **Architecture**: Built on mcp-ts-template 3.0 with DI container, typed tokens, Zod-validated config, OpenTelemetry, and multi-transport support (stdio, HTTP, Cloudflare Workers)
+
+## Removed
+
+- All template example tools, resources, prompts, and services (graph, LLM, speech)
+- `openai`, `@modelcontextprotocol/ext-apps` dependencies

package/changelog/2.0.x/2.0.1.md

@@ -0,0 +1,32 @@
+---
+summary: "`pubmed_search` gains field filters, offset pagination, and PMC URLs; `pubmed_mesh_lookup` exact-heading sort; `pubmed_trending` removed; six tool and config defaults revised."
+breaking: false
+---
+
+# 2.0.1 — 2026-03-04
+
+## Added
+
+- **Search filters**: `pubmed_search` gained field-specific filters (`author`, `journal`, `meshTerms`, `language`, `hasAbstract`, `freeFullText`, `species`) and pagination via `offset`
+- **PMC links**: `pubmed_fetch` and `pubmed_search` summaries now include `pmcId`, `pubmedUrl`, and `pmcUrl` for direct article access
+- **Affiliation deduplication**: article parser collects affiliations into a single array with per-author index references, reducing payload size for multi-center papers
+- **Exact MeSH heading search**: `pubmed_mesh_lookup` runs a parallel `[MH]` exact-heading search and stable-sorts exact matches to the top
+
+## Changed
+
+- **`pubmed_search`**: renamed `includeSummaries` to `summaryCount`; date range format changed from `YYYY/MM/DD` to `YYYY-MM-DD` (auto-converted internally)
+- **`pubmed_cite`**: max PMIDs raised from 20 to 50
+- **`pubmed_related`**: simplified to use `cmd=neighbor` for all relationship types instead of `neighbor_history` + WebEnv for cited_by/references
+- **`pubmed_mesh_lookup`**: `includeDetails` now defaults to `true`; switched from eFetch to eSummary for detail retrieval (MeSH eFetch returns plain text, not XML)
+- **NCBI response handler**: demoted `eSearchResult.ErrorList` (PhraseNotFound, FieldNotFound) from errors to warnings — NCBI populates these on valid zero-result queries; enabled `processEntities` and `htmlEntities` in XML parser
+- **Config defaults**: HTTP port 3010 → 3017, transport default `http` → `stdio`, storage default `filesystem` → `in-memory`
+
+## Fixed
+
+- **Auth factory tests**: JWT strategy tests now provide `mcpAuthSecretKey` and restore it on teardown
+- **Response handler tests**: updated assertions to match ErrorList demotion (PhraseNotFound is a warning, not a thrown error)
+- **Conformance tests**: removed `pubmed_trending` from expected tools list
+
+## Removed
+
+- **`pubmed_trending` tool**: removed — its functionality is fully covered by `pubmed_search` with date range and `pub_date` sort

package/changelog/2.1.x/2.1.0.md

@@ -0,0 +1,17 @@
+---
+summary: "Adds `pubmed_pmc_fetch` tool — fetch full-text articles from PubMed Central via NCBI EFetch, with a JATS XML parser returning structured body sections, metadata, and references."
+breaking: false
+---
+
+# 2.1.0 — 2026-03-04
+
+## Added
+
+- **`pubmed_pmc_fetch` tool**: Fetch full-text articles from PubMed Central (PMC) via NCBI EFetch with `db=pmc`. Accepts PMC IDs directly or PubMed IDs (auto-resolved to PMCIDs via ELink). Returns structured body sections, subsections, metadata, and optional references parsed from JATS XML.
+- **PMC article parser**: JATS XML parser (`pmc-article-parser.ts`) extracts metadata (authors, affiliations, journal, keywords, publication date, abstract), recursive body sections, and back-matter references from PMC EFetch responses.
+- **PMC types**: JATS XML element types and parsed PMC result types (`XmlJatsArticle`, `ParsedPmcArticle`, etc.) in `src/services/ncbi/types.ts`.
+
+## Changed
+
+- **NCBI response handler**: Added PMC JATS-specific jpaths (`pmc-articleset.article`, `contrib-group.contrib`, `body.sec`, `ref-list.ref`, etc.) to the `isArray` set for consistent XML parsing.
+- **README**: Added `pubmed_pmc_fetch` tool documentation, updated server description to mention full-text fetch.

package/changelog/2.1.x/2.1.1.md

@@ -0,0 +1,29 @@
+---
+summary: "Bug fixes across response handler, PMC/article parsers, and citation formatter — plus comprehensive test coverage for NCBI service and parser edge cases."
+breaking: false
+---
+
+# 2.1.1 — 2026-03-04
+
+## Fixed
+
+- **Response handler**: `extractTextValues` now handles numeric and boolean primitives emitted by fast-xml-parser when `parseTagValue` is enabled
+- **Response handler**: Error detection uses shared `ERROR_PATHS` constant to stay in sync with error message extraction
+- **PMC article parser**: Empty PMCID no longer produces a bare "PMC" prefix — returns empty string instead
+- **Article parser**: Eliminated redundant `getText()` calls for month, day, and medlineDate in `extractJournalInfo`
+- **Citation formatter**: `formatAuthorApa` no longer produces "undefined." when firstName contains consecutive spaces
+- **Citation formatter**: Reordered `formatAuthorApa` logic so authors with only initials (no lastName) return formatted initials instead of empty string
+
+## Changed
+
+- **Citation formatter**: `escapeBibtex` refactored from chained `.replace()` calls to a single regex with switch — fixes ordering bug where backslash-then-brace sequences were double-escaped
+- **Citation formatter**: `splitPages` simplified with destructuring
+
+## Added
+
+- Comprehensive test coverage for NCBI service edge cases: eSearch non-numeric fields, eSpell fallbacks, eSummary retmode logic, eFetch POST behavior
+- Response handler tests: `CannotRetrievePMID` error path, numeric error values, DOCTYPE stripping, `returnRawXml` error passthrough
+- Citation formatter tests: BibTeX special character escaping, APA author formatting edge cases, author-count boundaries (1/3/20/21), page splitting with en-dash/em-dash, minimal article formatting
+- Article parser tests: PMC ID extraction from `ArticleIdList`, ORCID extraction, ISSN type classification, MedlineDate without year, empty AffiliationInfo handling
+- ESummary parser tests: nested Author objects, string authors, PMC ID from ArticleIds, FullJournalName fallback
+- PMC article parser tests: `pmc-uid` fallback, empty PMCID, affiliations, page ranges, pub-date priority (epub > ppub > pub)

package/changelog/2.1.x/2.1.2.md

@@ -0,0 +1,18 @@
+---
+summary: "`pmc_fetch` renamed to `pubmed_pmc_fetch`; log directory path resolution switched to `node:path` for cross-platform correctness ([#9](https://github.com/cyanheads/pubmed-mcp-server/pull/9))."
+breaking: false
+---
+
+# 2.1.2 — 2026-03-04
+
+## Changed
+
+- **Tool rename**: `pmc_fetch` renamed to `pubmed_pmc_fetch` for consistency with the `pubmed_*` naming convention across all tools
+
+## Fixed
+
+- **Config**: Path resolution for logs directory now uses `node:path` utilities (`dirname`, `join`, `isAbsolute`) instead of URL-based arithmetic for cross-platform correctness ([#9](https://github.com/cyanheads/pubmed-mcp-server/pull/9))
+
+## Updated
+
+- `@cloudflare/workers-types` to `4.20260305.1`

package/changelog/2.1.x/2.1.3.md

@@ -0,0 +1,10 @@
+---
+summary: "Fix: OpenTelemetry NodeSDK now initializes on Bun — `isBun` guard removed, manual spans, custom metrics, and OTLP export all work correctly."
+breaking: false
+---
+
+# 2.1.3 — 2026-03-04
+
+## Fixed
+
+- **Telemetry**: Enable OpenTelemetry NodeSDK on Bun — the `isBun` guard was unnecessarily blocking initialization when manual spans, custom metrics, and OTLP export all work correctly

package/changelog/2.1.x/2.1.4.md

@@ -0,0 +1,12 @@
+---
+summary: "`pubmed_fetch` gains `affiliations` and `articleDates` fields; public hosted endpoint added to README; new output-schema coverage tests prevent strict-client rejections."
+breaking: false
+---
+
+# 2.1.4 — 2026-03-04
+
+## Added
+
+- **pubmed_fetch**: `affiliations` (deduplicated author affiliations) and `articleDates` (electronic publication, received, accepted dates) now included in article output
+- **Public hosted instance**: Added public Streamable HTTP endpoint (`https://pubmed.caseyjhand.com/mcp`) to README — no installation required
+- **Output schema coverage tests**: New test suite validates that tool output schemas cover every field returned by parsers at runtime, preventing strict-client rejections from `additionalProperties: false`

package/changelog/2.1.x/2.1.5.md

@@ -0,0 +1,18 @@
+---
+summary: "NCBI config now logged at startup (API key status, delay, retries, timeout). Dep bumps: `@biomejs/biome` 2.4.6, `jose` 6.2.0, `@types/node` 25.3.5."
+breaking: false
+---
+
+# 2.1.5 — 2026-03-06
+
+## Added
+
+- **Startup logging**: NCBI configuration (API key status, email, request delay, max retries, timeout) now logged at initialization for easier debugging
+
+## Updated
+
+- `@biomejs/biome` to 2.4.6
+- `@cloudflare/workers-types` to 4.20260307.1
+- `@types/node` to 25.3.5
+- `@types/sanitize-html` to 2.16.1
+- `jose` to 6.2.0

package/changelog/2.1.x/2.1.6.md

@@ -0,0 +1,15 @@
+---
+summary: "Fix: `structuredContent` removed from error responses (valid for success only); `fast-check` → 4.6.0, `jose` → 6.2.1."
+breaking: false
+---
+
+# 2.1.6 — 2026-03-09
+
+## Fixed
+
+- **Error responses**: Removed `structuredContent` from error responses in tool handler factory — `structuredContent` is only valid for successful results, not error payloads
+
+## Updated
+
+- `fast-check` to 4.6.0
+- `jose` to 6.2.1

package/changelog/2.10.x/2.10.0.md

@@ -0,0 +1,17 @@
+---
+summary: "New pubmed_europepmc_fetch tool (11th tool) resolves full Europe PMC records by source + epmcId; pubmed_fetch_fulltext gains maxCharacters/maxCharactersPerSection/overflowMode budget controls; a shared surrogate-pair-safe slice helper backs both."
+breaking: false
+security: false
+---
+
+# 2.10.0 — 2026-07-26
+
+## Added
+
+- **`pubmed_europepmc_fetch` tool** — new 11th tool. Resolves specific Europe PMC records by `source` + `epmcId` and returns each one's complete, untruncated abstract, up to 25 records per call resolved in a single Europe PMC request; unresolved pairs come back in `notFound` instead of failing the batch. This is the retrieval path for preprint (`PPR`), patent (`PAT`), and Agricola (`AGR`) records, which frequently carry no PMID and no DOI. Backed by a new `EuropePmcService.fetchRecords()` method that OR-joins `(EXT_ID:<id> AND SRC:<source>)` clauses into one search query. ([#83](https://github.com/cyanheads/pubmed-mcp-server/issues/83))
+- **`pubmed_fetch_fulltext` character budgets** — new `maxCharacters`, `maxCharactersPerSection`, and `overflowMode` (`truncate` | `outline`) inputs cap body text per article. `truncate` fills sections in document order so early sections stay whole; `outline` spreads the budget evenly across sections so every heading survives with an excerpt. Applies to `source=pmc` section/subsection text and the `source=unpaywall` body; titles, abstracts, identifiers, and references are never counted or cut. A new `truncation` output object reports per-article and per-section character counts whenever a budget shortened the response, and a matching `ctx.enrich.notice()` names what was spent. ([#81](https://github.com/cyanheads/pubmed-mcp-server/issues/81))
+- **`pubmed_europepmc_search` `abstractTruncated`** — new boolean alongside `abstractSnippet` (capped at 400 characters) marking whether the snippet was cut; pass the hit's `source` and `epmcId` to `pubmed_europepmc_fetch` for the full text. ([#83](https://github.com/cyanheads/pubmed-mcp-server/issues/83))
+
+## Fixed
+
+- **Character cuts could split a UTF-16 surrogate pair** — `pubmed_fetch_fulltext`'s new budget cuts and `pubmed_europepmc_search`'s `abstractSnippet` cut now back off one code unit when the boundary lands mid-pair, via a new shared `sliceCodeUnits` helper (`src/mcp-server/tools/definitions/_text.ts`). Budgets remain a code-unit ceiling; reported character counts are measured off the text actually returned, never assumed from the requested allowance. ([#93](https://github.com/cyanheads/pubmed-mcp-server/issues/93))

package/changelog/2.10.x/2.10.1.md

@@ -0,0 +1,14 @@
+---
+summary: "eSearch upstream failures now throw instead of masking as zero-hit searches; pubmed_search_articles surfaces ignored field tags, unmatched phrases, and dropped partial dateRange filters via notice; the summaryCount cap message points at pubmed_fetch_articles when maxed; research_plan's includeAgentPrompts is now correctly advertised as optional."
+breaking: false
+security: false
+---
+
+# 2.10.1 — 2026-07-26
+
+## Fixed
+
+- **`eSearchResult.ERROR` was missing from `ERROR_PATHS`** — an upstream eSearch failure parsed as a zero-hit success instead of throwing. `pubmed_search_articles`'s `offset` is now bounded at 9998 (`OFFSET_MAX`), matching PubMed's `retstart` ceiling, and the ceiling is stated in its `.describe()`. `pubmed_lookup_mesh`'s `offset` is left unbounded — `db=mesh` has no equivalent `retstart` ceiling. ([#95](https://github.com/cyanheads/pubmed-mcp-server/issues/95))
+- **eSearch `ErrorList`/`WarningList` never reached the caller** — `pubmed_search_articles` now reads both off the eSearch result and surfaces them through the `notice` enrichment: an unrecognized field tag fires independently of hit count, and an unmatched phrase names the exact clause instead of the generic empty-result guidance. `NcbiService.eSearch` normalizes every list member to `string[]` — NCBI collapses a single-entry member to a scalar, which the declared type didn't account for. ([#96](https://github.com/cyanheads/pubmed-mcp-server/issues/96))
+- **Partial `dateRange` and the `summaryCount` cap were both undisclosed** — a `dateRange` with exactly one bound filled now fires a notice naming the supplied bound and a sentinel for an open-ended range, instead of silently dropping the filter. The `summaryCount` cap message now points at `pubmed_fetch_articles` with the remaining PMIDs when already at its maximum, instead of advising a raise that isn't possible. `buildNotice()` now collects every applicable signal and joins them, rather than returning the first of two mutually exclusive branches. ([#97](https://github.com/cyanheads/pubmed-mcp-server/issues/97))
+- **`research_plan`'s `includeAgentPrompts` was advertised as a required prompt argument** — the SDK derives `prompts/list`'s `required` flag from schema optionality, and a `ZodDefault` doesn't read as optional. Changed from `.default('false')` to `.optional()`; `buildPlan`'s `=== 'true'` check behaves identically for an omitted value. ([#98](https://github.com/cyanheads/pubmed-mcp-server/issues/98))

package/changelog/2.10.x/2.10.10.md

@@ -0,0 +1,22 @@
+---
+summary: "pubmed_fetch_fulltext renders JATS block content at its own position and returns figures and supplementary material as a structured assets[] field, pubmed_find_related's OpenAlex fallback pages to the full requested window, and the query tools reject a blank query instead of forwarding it to NCBI."
+breaking: false
+security: false
+---
+
+# 2.10.10 — 2026-09-10
+
+## Added
+
+- **`pubmed_fetch_fulltext` `assets[]`** — every `<fig>` and `<supplementary-material>` a PMC article carries, with `assetType`, `label`, `caption`, `id`, `sectionTitle`, and the deposit-relative `href` pointer; each lifted asset leaves a `[Figure: <label>]` / `[Supplementary: <label>]` marker at its position. New `includeAssets` input (default `true`) mirrors `includeTables`. ([#130](https://github.com/cyanheads/pubmed-mcp-server/issues/130))
+- **`pubmed_find_related` `coverageFailures`** — when the Europe PMC or OpenAlex reference-coverage fallback throws, an entry naming `provider`, `reason`, and `retryable` is added instead of folding the failure into a false "no references" answer. ([#118](https://github.com/cyanheads/pubmed-mcp-server/issues/118))
+
+## Fixed
+
+- **JATS block content (lists, definition lists, quotes, boxed text, preformatted text, formulae) dropped or fused into surrounding prose** — each now renders inline at its position instead of vanishing or gluing onto a paragraph's sentence, and an article whose entire body is one such block (e.g. a legacy OCR `<preformat>` deposit) is no longer reported as having no body. A caption's own title no longer runs into the sentence that follows it — on tables as well as on figures and supplementary material — and a caption or label hung directly on a `<media>`/`<graphic>` pointer is now read. ([#130](https://github.com/cyanheads/pubmed-mcp-server/issues/130))
+- **`pubmed_fetch_fulltext` returned the first serialized `<abstract>` regardless of `@abstract-type`** — the untyped abstract is now preferred over a typed one (e.g. `graphical`, `executive-summary`), and content within the selected abstract renders through the same block-aware walk as body text, so an embedded figure caption reaches `assets[]` instead of the prose. ([#134](https://github.com/cyanheads/pubmed-mcp-server/issues/134))
+- **`pubmed_find_related`'s OpenAlex fallback stalled after its first upstream page** — `cited_by`, `references`, and `similar` now page (or batch-resolve, for the latter two) until the requested window is filled, upstream is exhausted, or a 10-page/batch cap is reached, with `totalCount` reporting the exact PubMed-addressable count once exhausted. This also fixes an HTTP 400 the `references` path threw once `offset + maxResults` reached 34, from a candidate filter of up to 200 values against OpenAlex's 100-value OR-clause ceiling. ([#117](https://github.com/cyanheads/pubmed-mcp-server/issues/117))
+- **A failed Europe PMC/OpenAlex reference-coverage fallback was reported as a genuine empty answer** — a thrown fallback now surfaces via `coverageFailures` and a distinct notice instead of being folded into NCBI's "no reference list" wording, and a provider disabled by configuration is marked non-retryable with no retry guidance offered. ([#118](https://github.com/cyanheads/pubmed-mcp-server/issues/118))
+- **A failed DOI backfill lookup was misreported as `no-doi`** — a new `doi-lookup-failed` reason (added to `UnavailableReasonSchema` and `TierOutcomeSchema`) now distinguishes an errored lookup from a record that genuinely has none. A DOI Europe PMC already returned is also now carried forward to Unpaywall instead of being discarded, skipping a redundant PubMed round-trip. ([#119](https://github.com/cyanheads/pubmed-mcp-server/issues/119))
+- **`pubmed_search_articles` accepted a blank query and forwarded it to NCBI as a blank term** — a whitespace-only or sanitized-to-empty query was previously retried as a misclassified transient outage across seven attempts and roughly a minute of backoff; it now fails immediately with a declared `blank_query` reason (`ValidationError`, non-retryable). ([#122](https://github.com/cyanheads/pubmed-mcp-server/issues/122))
+- **`pubmed_spell_check` and `pubmed_lookup_mesh` accepted blank queries and returned a false empty success** — both now reject the same `blank_query` reason before calling NCBI, instead of reporting a checked-but-empty result for a query that was never searched. ([#133](https://github.com/cyanheads/pubmed-mcp-server/issues/133))

package/changelog/2.10.x/2.10.11.md

@@ -0,0 +1,21 @@
+---
+summary: "pubmed_fetch_articles and pubmed_format_citations return NCBI Bookshelf chapters and books instead of reporting them unavailable, journal article locators are preserved through metadata and every citation style, and pubmed_convert_ids and pubmed_lookup_citation reject inputs that could shift NCBI's own field parsing."
+breaking: false
+security: false
+---
+
+# 2.10.11 — 2026-09-10
+
+## Added
+
+- **NCBI Bookshelf records** (`PubmedBookArticle`) are now first-class: `pubmed_fetch_articles` and `pubmed_format_citations` return a `recordType` discriminator (`journal-article`, `book-chapter`, `book`) and a `book` object — title, publisher, place, dates, medium, edition, series, ISBNs, book DOI, editors, Bookshelf accession — instead of reporting a Bookshelf PMID unavailable. ([#114](https://github.com/cyanheads/pubmed-mcp-server/issues/114))
+- **Citation styles gained a book form** — Vancouver's `In: … editors.` pattern, APA's chapter-in-edited-book, MLA's `edited by`, BibTeX `@incollection`/`@book`, RIS `CHAP`/`BOOK` — and an edited book that credits no authors of its own is cited from the editor position instead, which APA marks `(Ed.)`/`(Eds.)`. `pubmed_search_articles`/`pubmed_find_related` report a book's `bookTitle`, `publisherName`, `docType`, and `editors` in place of the empty journal source ESummary leaves on these records; `pubmed_find_related` requests ESummary `version=2.0` to reach them, since the version 1 DocSum format carries no book elements at all. ([#114](https://github.com/cyanheads/pubmed-mcp-server/issues/114))
+- **Electronic article locators** — `journalInfo.elocationId`/`elocationIdType`, and the JATS equivalent on `pubmed_fetch_fulltext` — preserve a journal's publisher-assigned article number when it carries no page range, rendered in each style's own convention: Vancouver's trailing `pii:` note, APA's `Article <n>`, MLA's `art. <n>`, BibTeX's `eid`, RIS's `C7`. ([#121](https://github.com/cyanheads/pubmed-mcp-server/issues/121))
+
+## Fixed
+
+- **`pubmed_convert_ids` accepted an `ids` element packed with a comma-joined list of identifiers** and returned more records than were submitted; each element is now checked against its declared `idType` before the request, with a new `malformed_id` error reason naming the offending value. `pubmed_fetch_fulltext`'s `dois` and `pmcids` inputs carry the same per-element constraint. ([#120](https://github.com/cyanheads/pubmed-mcp-server/issues/120))
+- **`pubmed_lookup_citation` let a `|` in the caller's `key`** (or in `journal`, `year`, `volume`, `firstPage`, `authorName`) shift ECitMatch's pipe-delimited field layout, turning a real match into `not_found`; the wire now submits each citation's positional index rather than its label, and the five bibliographic fields reject `|`, `\r`, and `\n` at the schema. ([#125](https://github.com/cyanheads/pubmed-mcp-server/issues/125))
+- **`pubmed_lookup_citation` rendered identical `content[]` headings for citations sharing a `key`**; each heading now leads with the citation's 1-based submission index, so no two can collide regardless of what `key` contains. ([#128](https://github.com/cyanheads/pubmed-mcp-server/issues/128))
+- **A chapter no longer cites its containing book's DOI** — that identifier resolves to the book, so a chapter falls back to the Bookshelf URL instead; `Book/ELocationID`'s DOI is a fallback on a whole-book record only. `®`/`™` inside an EFetch `<sup>` — `Book/BookTitle` arrives as `GeneReviews<sup>&#xae;</sup>` — no longer render with a stray `^` (e.g. `GeneReviews^®`), and `Book/Isbn` leading zeros are preserved instead of being coerced away as a number. ([#114](https://github.com/cyanheads/pubmed-mcp-server/issues/114))
+- **`unavailablePmids` and the empty-result notices on `pubmed_fetch_articles` and `pubmed_format_citations`** no longer claim a missing PMID "may be invalid, unpublished, or withdrawn" — PubMed omits an unrecognized PMID silently, with no error and no reason, so the wording now says only that. ([#114](https://github.com/cyanheads/pubmed-mcp-server/issues/114))

package/changelog/2.10.x/2.10.12.md

@@ -0,0 +1,14 @@
+---
+summary: "pubmed_fetch_fulltext no longer emits LaTeX preambles or duplicate renderings for <alternatives>-wrapped formulas, APA citations for authorless records open on the title instead of the year, and internal NCBI response-parsing helpers are hardened against defects that were silently inert until now."
+breaking: false
+security: false
+---
+
+# 2.10.12 — 2026-09-11
+
+## Fixed
+
+- **`pubmed_fetch_fulltext` no longer emits the LaTeX preamble publishers wrap around every formula.** Publishers deposit `<tex-math>` as a complete document — `\documentclass[12pt]{minimal}\usepackage{amsmath}…\begin{document}$$…$$\end{document}` — and every character of it used to reach `sections[].text`, `tables[].rows`, and `content[]`, once per formula. Only the body between `\begin{document}` and `\end{document}` is kept now (delimiters included, so it still reads as math); a body deposited with no wrapper is unchanged, and a deposit that opens the document and never closes it still yields its expression. A JATS `<alternatives>` — offering, say, a TeX and a MathML rendering of the same formula — now contributes exactly one child instead of every rendering: its `<tex-math>` when that carries an expression, otherwise the first non-pointer child carrying text, otherwise a pointer's own text. On one *Scientific Reports* record carrying 312 of them this dropped the rendered section and table text from 168,009 to 92,505 bytes. ([#135](https://github.com/cyanheads/pubmed-mcp-server/issues/135))
+- **`pubmed_format_citations`'s APA style no longer opens a reference on the year for a record crediting no author.** APA 7 §9.12 moves the title into the author position instead — `Title. (Year). …` rather than `(Year). Title. …` — for a journal article, a whole book crediting neither authors nor editors, and a chapter with no authors of its own, whose book editors stay in the `In …` clause; an edited book still cites from the editor position (`Adam, M. P. (Ed.). (Year). …`), unchanged. NCBI Bookshelf records made the defect common, since a whole-book record frequently credits neither authors nor editors. ([#139](https://github.com/cyanheads/pubmed-mcp-server/issues/139))
+- **`getText`/`getAttribute` in the NCBI XML parsing helpers dropped the `string | undefined` overloads they could never satisfy** — a JavaScript default parameter fires on an explicit `undefined`, so both always returned a string and the type invited a `??` that could never take its right branch. Two new helpers, `getOptionalText`/`getOptionalAttribute`, report a missing *or empty* element as `undefined`. Every call site that depended on the old overload migrated, which also fixes a live defect in ESummary author parsing: an author with no `<AuthType>` now parses with no `authtype` key instead of `authtype: ''`, and `clusterid: ''` no longer appears on every author (the read looked for `ClusterId`/`clusterid` while NCBI ships `<ClusterID/>`, so it always missed and wrote the empty default anyway). ([#137](https://github.com/cyanheads/pubmed-mcp-server/issues/137))
+- **`NCBI_ARRAY_JPATHS` entries are now spelled as full root-relative paths.** The set is matched against fast-xml-parser's exact dotted path from the document root, and most entries named only their last segments, so they could never fire, and nothing depended on them: nearly every read site normalizes with `ensureArray` anyway. Entries are now grouped by E-utility under a header comment stating the convention. Three groups were removed rather than expanded: the JATS entries, which can never fire under any spelling because the ordered parser used for PMC full text declares no `isArray` callback at all; the dead duplicate `IdList.Id`; and `Link.Id`, which would have returned an empty PMID for every related record had it been made to fire, since `find-related` reads a link's id without `ensureArray`. `eLinkResult.LinkSet.LinkSetDb` was added, since `find-related` reads it as a list and it was absent; the recursively nested ESummary v1 `<Item>` is now covered by one root-anchored pattern instead of a fixed path list, since an item of type `List` or `Structure` holds further items and MeSH lookup walks three levels of them. `ensureArray` stays at every read site that has it. ([#138](https://github.com/cyanheads/pubmed-mcp-server/issues/138))

package/changelog/2.10.x/2.10.13.md

@@ -0,0 +1,28 @@
+---
+summary: "NCBI EFetch backend-timeout envelopes now retry instead of failing as invalid input. Adopts mcp-ts-core 0.13.0: the skill tree moves to framework-skills/, and blank/placeholder env values read as unset without a per-field guard."
+breaking: false
+security: false
+---
+
+# 2.10.13 — 2026-09-13
+
+## Changed
+
+- **Skill tree moved from `skills/` to `framework-skills/`.** Claude Code and Codex auto-load a plugin's root `skills/`, so a server shipping `.claude-plugin/` or `.codex-plugin/` handed its development skills to every installing agent. No tool behavior changed.
+- **`NCBI_API_KEY`, `NCBI_ADMIN_EMAIL`, `UNPAYWALL_EMAIL`, `EUROPEPMC_EMAIL` drop their per-field blank/placeholder guard** in favor of the framework's `parseEnvConfig`, which reads an empty, whitespace-only, or whole-value `${…}` placeholder value as unset.
+- **Bun engines floor raised to `>=1.4.0`.**
+- **Tooling and docs:** `devcheck` parses Bun 1.4 `bun audit` output, `lint:packaging` rejects empty plugin `env` values and checks MCPB `user_config` wiring, new `audit:fix` and `test:coverage` scripts, a restructured README capability reference, and new `.github/CONTRIBUTING.md` and `CODE_OF_CONDUCT.md` with refreshed issue templates.
+
+## Fixed
+
+- **NCBI EFetch backend-timeout envelopes are now retried instead of treated as invalid input.** The `<eFetchResult><ERROR>…Status: Timeout</ERROR></eFetchResult>` envelope arrives under both HTTP 400 (classified as caller error, skipping the retry policy) and HTTP 200 (parsed as a missing article); both now reclassify to a retryable `ServiceUnavailable`, while a genuine invalid-parameter 400 stays non-retryable. ([#153](https://github.com/cyanheads/pubmed-mcp-server/issues/153))
+- **A blank numeric or boolean setting (`NCBI_REQUEST_DELAY_MS`, `NCBI_TIMEOUT_MS`, `EUROPEPMC_ENABLED`, …) now takes its default instead of failing config validation.** A blank `NCBI_MAX_RETRIES` or `EUROPEPMC_MAX_RETRIES` no longer means zero retries, and with `NCBI_API_KEY` set a blank `NCBI_REQUEST_DELAY_MS` gets the 100ms keyed delay.
+- **`.claude-plugin/plugin.json` and `.codex-plugin/mcp.json` no longer set blank `NCBI_API_KEY`, `NCBI_ADMIN_EMAIL`, `UNPAYWALL_EMAIL` values**, which replaced a variable the user had already exported. Claude Code now collects them through `userConfig`; Codex forwards them through `env_vars`.
+
+## Dependencies
+
+- `@cyanheads/mcp-ts-core` ^0.12.8 → ^0.13.0
+- `zod` ^4.5.4 → ^4.6.1
+- `@biomejs/biome` ^2.5.12 → ^2.5.13
+- `@types/node` ^26.4.1 → ^26.5.1
+- `ignore` ^7.0.8 → ^7.0.9

package/changelog/2.10.x/2.10.14.md

@@ -0,0 +1,28 @@
+---
+summary: "Adopts mcp-ts-core 0.13.4: argument rejections carry a Recovery hint, a mistyped key or JSON-stringified array is repaired before validation, and tool-argument copying is hardened against __proto__ injection."
+breaking: false
+security: true
+---
+
+# 2.10.14 — 2026-09-18
+
+## Changed
+
+- **Retry gates for NCBI, Europe PMC, and OpenAlex now use the framework's `defaultIsTransient`** in place of the server's own `retry-policy.ts` mirror (removed). Same retryable codes, same `retryable: false` opt-out — no behavior change.
+- **`createApp` declares `sessionMode: 'stateless'`** in `src/index.ts`, matching the existing `.env.example`/Dockerfile/README posture instead of leaving it to deployment config alone.
+- **Argument validation now repairs recoverable input before rejecting it** (mcp-ts-core 0.13.4). An undeclared key whose case-folded form names exactly one declared key is rewritten — `max_results` is accepted as `maxResults` on `pubmed_search_articles`. A JSON-stringified array is parsed after a failed direct match — `pmids` sent as `"[\"33300001\"]"` succeeds on `pubmed_fetch_articles`. Every tool's advertised `inputSchema`/`outputSchema` is unchanged.
+- **An argument rejection's error text now ends with `Recovery: <hint>`** (mcp-ts-core 0.13.3), e.g. naming a missing required field and the keys the tool accepts; `data.reason` carries `"invalid_arguments"`.
+- **A call unwound after its request is cancelled now classifies as `RequestCancelled` (-32011)** instead of a generic error (mcp-ts-core 0.13.3).
+- **Tooling and docs:** adds `.github/workflows/codeql.yml`, adds `changelog/` to the npm `files` allowlist, refreshes issue-template field guidance, and syncs `framework-skills/` to mcp-ts-core 0.13.4.
+
+## Security
+
+- **Tool-argument copying can no longer be re-prototyped via a caller-supplied `__proto__` key** (mcp-ts-core 0.13.4).
+
+## Dependencies
+
+- `@cyanheads/mcp-ts-core` ^0.13.0 → ^0.13.4
+- `zod` ^4.6.1 → ^4.6.5
+- `@vitest/coverage-istanbul` ^5.0.0 → ^5.0.1
+- `fast-check` ^4.9.0 → ^4.10.0
+- `tsc-alias` ^1.9.4 → ^1.9.5

package/changelog/2.10.x/2.10.2.md

@@ -0,0 +1,13 @@
+---
+summary: "Markup strip no longer eats statistical notation like P<0.001 in Europe PMC abstracts; pubmed_europepmc_fetch now resolves source: \"PMC\" refs for articles also indexed in PubMed; doi fields across the tool catalog disclose that casing differs by upstream."
+breaking: false
+security: false
+---
+
+# 2.10.2 — 2026-07-26
+
+## Fixed
+
+- **`MARKUP_TAG_RE` consumed abstract text between a stray `<` and the next real tag** — statistical notation like `P<0.001` opened a match that closed on the following tag's `>`, silently dropping everything in between. The pattern now requires a tag-name letter after the optional `/` and forbids a further `<` inside the tag body, so `toDisplayText()` (used by `pubmed_europepmc_search` and `pubmed_europepmc_fetch`) leaves such notation intact. ([#94](https://github.com/cyanheads/pubmed-mcp-server/issues/94))
+- **`pubmed_europepmc_fetch` couldn't resolve `source: "PMC"` for an article also indexed in PubMed** — `SRC:PMC` is Europe PMC's PMC-only corpus; a PubMed-indexed article's canonical record lives under `MED` with the PMCID as a field. `recordLookupQuery` now ORs in a bare `PMCID:<id>` clause for `PMC` refs, and the tool's response reconciliation registers a `PMC:<pmcid>` alias so such a record isn't reported in both `records` and `notFound`. The `notFound` notice now points a PMCID-shaped miss at `pubmed_fetch_fulltext`. ([#94](https://github.com/cyanheads/pubmed-mcp-server/issues/94))
+- **`doi` fields didn't disclose upstream casing differences** — DOIs are case-insensitive by spec and none of the tools normalize case, so the same DOI can arrive differently cased from NCBI versus Europe PMC. `pubmed_europepmc_fetch`, `pubmed_europepmc_search`, `pubmed_fetch_articles`, `pubmed_fetch_fulltext`, and `pubmed_convert_ids` now state this on their `doi` output field and name the sibling tool where the mismatch shows up. ([#94](https://github.com/cyanheads/pubmed-mcp-server/issues/94))

package/changelog/2.10.x/2.10.3.md

@@ -0,0 +1,26 @@
+---
+summary: "Adopts mcp-ts-core 0.12.3 and the v2 MCP SDK packages; pubmed_fetch_fulltext gains a truncated enrichment flag."
+breaking: false
+security: false
+---
+
+# 2.10.3 — 2026-08-21
+
+## Added
+
+- **`pubmed_fetch_fulltext` `enrichment.truncated`** — a boolean set when a character budget shortened at least one returned body, so a caller can detect truncation without reading the notice prose. Per-article accounting stays in `truncation`.
+
+## Changed
+
+- **Service log context** — the extra fields handed to `requestContextService.createRequestContext` now sit under `additionalContext`, and `esummary-parser` merges onto an existing context with `withExtra`. Emitted log payloads are unchanged.
+- **Production Docker image** — both `bun install` steps take `--omit=peer`, dropping the framework's optional peer tiers that nothing here imports at runtime; base image `oven/bun` 1.3.14 → 1.4.0.
+- **Test suite typechecking** — `tsconfig.json` now includes `tests/**` and emits nothing, with the `src`-only emit settings moved to `tsconfig.build.json`. New `tests/_helpers.ts` narrows the `ContentBlock` and `PromptMessage` unions the assertions read.
+- **Template scripts and skills re-synced** — `lint-packaging` follows the SDK's v2 package rename to `@modelcontextprotocol/server`, `lint-mcp` drops the `taskHandlers` branch from tool detection, and `tree` honors directory-only ignore patterns (which prunes `.storage/` and `announcements/` from `docs/tree.md`).
+- **Security contact** — `.github/SECURITY.md` directs vulnerability reports to `security@caseyjhand.com`.
+
+## Dependencies
+
+- `@cyanheads/mcp-ts-core` ^0.11.0 → ^0.12.3 — pulls the v2 MCP SDK (`@modelcontextprotocol/server` and `@modelcontextprotocol/client` ^2.0.0) in place of `@modelcontextprotocol/sdk` ^1.x
+- `bun` (packageManager) 1.3.14 → 1.4.0
+- `fast-xml-parser` ^5.10.1 → ^5.11.0, `sanitize-html` ^2.17.6 → ^2.17.7, `unpdf` ^1.6.2 → ^1.8.1
+- `@biomejs/biome` ^2.5.5 → ^2.5.9, `@types/node` ^26.1.1 → ^26.2.0, `@vitest/coverage-istanbul` and `vitest` ^4.1.10 → ^4.1.11, `tsc-alias` ^1.9.1 → ^1.9.2

package/changelog/2.10.x/2.10.4.md

@@ -0,0 +1,11 @@
+---
+summary: "Pins the Docker build stage to $BUILDPLATFORM so the multi-arch image publishes again — the emulated linux/amd64 leg aborted tsc."
+breaking: false
+security: false
+---
+
+# 2.10.4 — 2026-08-21
+
+## Fixed
+
+- **Docker build stage runs natively on the builder** — the stage is now `FROM --platform=$BUILDPLATFORM`. Under emulation the `linux/amd64` leg aborted `tsc` (`qemu: uncaught target signal 6`, exit 134), so no `linux/amd64,linux/arm64` image was published for 2.10.3. `dist/` is pure JavaScript and identical across targets; the production stage still builds per target and installs its own runtime dependencies there.