tododdle-mcp 3.0.0 → 3.0.1

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "tododdle",
-  "version": "3.0.0",
+  "version": "3.0.1",
   "description": "Disciplined agent workflows for projects managed in ToDoddle.",
   "author": {
     "name": "ToDoddle",

package/README.md

@@ -205,8 +205,12 @@ Notes are organization-scoped and unavailable to project-only connections.
 
 Each tool accepts either an approved local `filePath` or an HTTPS `sourceUrl`. Local paths are disabled until `TODODDLE_UPLOAD_ROOTS` is configured. Files stream directly from this local MCP process to ToDoddle's short-lived Bunny upload URL; file bodies are never placed in MCP JSON messages.
 
+If an agent copies a source file into a dedicated ToDoddle upload directory only to satisfy the local path restriction, it should remove that temporary copy after the tool confirms success. It should retain the copy after a failed or uncertain upload so the upload can be retried. It must never remove the original source or a pre-existing file. Temporary files that the MCP creates for HTTPS sources are removed automatically.
+
 Use `get_document_download_url` with a `projectId` and `documentId` returned by `list_project_documents` to obtain a five-minute tokenized URL. The URL grants access only to that ready document and should not be stored in comments or other durable project context. Video documents return a protected stream URL when the workspace subscription permits playback.
 
+For attachment review, request a fresh URL, download the asset into a private `mktemp -d` directory without printing or persisting the URL, and inspect the local file with the appropriate tool. Use a browser only when local download or rendering is unavailable. Remove only the agent-created temporary files and directory after successful inspection; never remove an original or pre-existing user file.
+
 The server also provides ticket, project, and project-artifact resource templates plus `triage_work` and `daily_status` prompts.
 
 ## Permissions

package/dist/compatibility.d.ts

@@ -1,9 +1,9 @@
-export declare const MCP_PACKAGE_VERSION = "3.0.0";
+export declare const MCP_PACKAGE_VERSION = "3.0.1";
 export declare const MCP_COMPATIBILITY_LEVEL = 3;
 export declare const MCP_VERSION_HEADER = "x-tododdle-mcp-version";
 export declare const MCP_COMPATIBILITY_HEADER = "x-tododdle-mcp-compatibility";
 export declare const MCP_REQUEST_HEADERS: {
-    readonly "x-tododdle-mcp-version": "3.0.0";
+    readonly "x-tododdle-mcp-version": "3.0.1";
     readonly "x-tododdle-mcp-compatibility": string;
 };
 export declare function formatMcpUpdateRequiredMessage(message: string, details: unknown): string;

package/dist/compatibility.js

@@ -1,4 +1,4 @@
-export const MCP_PACKAGE_VERSION = '3.0.0';
+export const MCP_PACKAGE_VERSION = '3.0.1';
 export const MCP_COMPATIBILITY_LEVEL = 3;
 export const MCP_VERSION_HEADER = 'x-tododdle-mcp-version';
 export const MCP_COMPATIBILITY_HEADER = 'x-tododdle-mcp-compatibility';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tododdle-mcp",
-  "version": "3.0.0",
+  "version": "3.0.1",
   "description": "Agent-first task, project context, and time tracking for ToDoddle",
   "type": "module",
   "main": "dist/index.js",

package/skills/tododdle-workflow/SKILL.md

@@ -45,6 +45,22 @@ Keep list requests bounded and paginate rather than requesting an entire organiz
 
 Do not create bookkeeping churn for tiny exploratory actions. Prefer one useful checkpoint over a stream of narration.
 
+## Upload Files Safely
+
+- Use `upload_project_document` or `attach_file_to_ticket` for approved files.
+- If a source file is outside `TODODDLE_UPLOAD_ROOTS`, copy it to a temporary staging file inside the dedicated ToDoddle upload directory. Do not move or alter the original.
+- After the upload tool confirms success, delete only the temporary staging file that the agent created. Remove an empty staging directory when it was also created for that upload.
+- Keep the staging file when the upload fails or the result is uncertain so it remains available for retry and diagnosis. Report the retained path without exposing private content.
+- Never delete the user's original source file, a pre-existing file, or any file outside the managed staging location.
+
+## Review Attachments Safely
+
+- Request a fresh tokenized URL with `get_document_download_url` for each attachment review.
+- Create a private temporary directory with `mktemp -d`, download the asset there without printing, logging, or persisting the URL, and inspect the local file with the appropriate image or document tool.
+- Use a browser only when local download or rendering is unavailable.
+- After successful inspection, delete only the temporary files and directory that the agent created. Never delete an original or pre-existing user file.
+- Never persist an expiring download URL in comments, Context, logs, handoffs, or repository files.
+
 ## Finish Work
 
 1. Run the verification appropriate to the work.