Changelog

v1.56.0

Invoices:

• Bill your clients straight from TaskView. Create an invoice for a project, tick the tasks with an income amount or add lines by hand, pick the currency and payment terms, and download a ready PDF. Your companies and your clients are saved once and reused.
• An invoice moves from draft to issued to paid; it can also be voided or corrected with a replacement invoice. Overdue invoices are flagged automatically. Available to organization owners and admins.

Sign in with TaskView (OAuth 2.1):

• TaskView is now an OAuth 2.1 authorization server. Any third-party app can ask for access to your account: you sign in, choose which projects and permissions the app gets, and can disconnect it any time from Account Settings. The app receives its own token with exactly those rights and works against the full TaskView API.
• This is how ChatGPT, Claude and other cloud AI assistants connect to the MCP server - no more pasting API tokens into a chat. API tokens keep working for scripts, CI and local tools.
• Apps register themselves on your instance (dynamic client registration). It is off by default: set OAUTH_DYNAMIC_REGISTRATION=true on the API to allow it - see the MCP docs.

Improvements:

• Long task notes now collapse with an "Expand" button, and the notes editor has a full-screen mode.
• Task dependencies are shown and managed right in the task panel.
• The default view (tasks, kanban, graph, sprints) can be set for all projects, not only the default one (#106).
• Brazilian Portuguese interface - thanks to murilorosa for the translation.
• The project graph renders noticeably faster on large projects.

Security:

• Outgoing webhooks may only target public addresses; private and internal ranges are refused. On a self-hosted instance whose receivers live on the same network, set WEBHOOKS_ALLOW_PRIVATE_URLS=true.
• API tokens and OAuth apps can now be restricted from managing the organization, its members, SSO and webhooks - previously a token could do all of that regardless of its permissions.
• Task and list updates only accept the fields you are meant to change; project permission checks are applied consistently across collaboration and kanban endpoints; connecting a git integration is protected against request forgery.

Fixes:

• Blocked accounts can no longer sign in through SSO and see a clear message instead.
• SSO sign-in works with identity providers that send the email only as the SAML NameID, and SSO can be switched on and off from organization settings.
• Editing a time-tracking entry saved the wrong values in some cases.
• Adding a task from the main screen works before the first project is created.
• Mobile app: custom server URLs are normalized, so a trailing slash or missing scheme no longer breaks the connection.

Migration notes:

• Run the database migration container.
• docker-compose.yml no longer exposes PostgreSQL on host port 5433. If you connected to the database from the host, add the port mapping back yourself.
• Webhooks pointing to private addresses stop delivering until you set WEBHOOKS_ALLOW_PRIVATE_URLS=true.
• New ChatGPT and Claude connections need OAUTH_DYNAMIC_REGISTRATION=true; existing connections keep working.

v1.52.0

Gitea integration:

• Gitea joins GitHub and GitLab as a supported git provider - sync issues from your self-hosted Gitea as TaskView tasks, kept up to date both ways via webhooks, with your own OAuth app credentials.

MCP over HTTP:

• The MCP server is now available as a docker container (gimanhead/taskview-ce-mcp) serving the Streamable HTTP transport - run it next to your instance and AI assistants like Claude Code, Cursor, and VS Code connect to a URL, no Node.js or npx on user machines. Each request authenticates with the caller's own scoped API token, so permissions stay exactly what your token allows. The local stdio mode via npx taskview-mcp keeps working as before - see the MCP docs.

Registration control:

• New ALLOW_PUBLIC_REGISTRATION flag: turn it off and accounts are created by invitation only - sign-in works as usual for existing users, while strangers see a clear "registration is disabled" message.
• People invited to a project now receive a localized email with a link to it. Opt-in via INVITE_EMAIL_ENABLED; INVITE_EMAIL_HOURLY_LIMIT caps how many invite emails one user may trigger per hour (default 30), and the same address is never emailed about the same project more than once per 24 hours.

Self-hosted administration:

• New API_PUBLIC_URL variable for instances behind a reverse proxy: the SSO callback/ACS URL and the SCIM endpoint shown in organization settings are now built from the public address of your API - no more internal hostnames your identity provider cannot reach.
• Tune API workers and database connections with PM2_INSTANCES and DB_POOL_MAX. The API previously spawned one worker per CPU core, which exhausted PostgreSQL connections on many-core hosts (#88 - thanks to Codycody31 for the report). The default is now a safe fixed worker count, the docs explain the connection budget, and the API warns at startup when the estimate gets close to the PostgreSQL limit.

Fixes:

• Logging out now fully clears the previous session's data - switching accounts on a shared browser no longer shows stale state.
• Tasks no longer appear duplicated in the list when created while the list was still loading.
• Fixed a race where a user with a saved session could get stuck on the login page after opening the app.

v1.51.0

Repeat after completion:

• A new "After completion" option for recurring tasks: instead of a fixed calendar schedule, the next occurrence is created one interval after you actually complete the current task. Perfect for routines where dates drift with real life - "every 3 days after the last time", not "every Monday no matter what".
• The recurrence preview shows approximate dates in this mode, since the real ones depend on when you finish.

v1.50.2

Mobile widgets:

• A Today widget for iOS and Android home screens - see today's tasks at a glance without opening the app, in light and dark themes.

Self-hosted administration:

• Change the default admin's credentials right from account settings - no more editing config files.
• Password change for accounts, confirmed by a one-time e-mail code.
• Choose which login methods your instance offers (magic link, SSO, social) via AUTH_LOGIN_METHODS.
• The web app can take its API base URL from an environment variable, and TRUST_PROXY makes running behind a reverse proxy work correctly (including OIDC callbacks).

Quality of life:

• Choose a default project and a default view (tasks, kanban, graph, or sprints) - it is pinned in the sidebar and opens right after login.
• Every task now shows its ID with one-click copy, and search finds tasks by ID.

Fixes:

• SSO and social logins no longer fail on instances where magic-link login is disabled.

v1.49.0

Slack & Telegram:

• Link your personal account and get direct messages about your tasks - created, assigned, status changed, completed.
• Connect a project to a Slack channel or Telegram group and the whole team sees that project's events, with a per-connection choice of which events to post.
• Create a task straight from a connected channel or group with the /task command.
• In Slack, act without leaving the messenger: Done, Reopen, and Assign buttons right on the notification.
• A per-channel "post content" switch controls whether task descriptions and assignees are broadcast to the channel or only the title and link.
• Self-hosted installs supply their own bot credentials via environment variables - same code, your bot.

Fixes:

• OIDC login fixes.

v1.48.7

UI refresh:

• Redesigned main screen: tasks are grouped into collapsible sections with quick add right in place.
• Unified dropdowns, selects, and date controls across the app, and a cleaner mobile bottom navigation.

Inbox:

• Every organization now has an Inbox - a built-in place for quick capture. Create a task without picking a project and it lands in the Inbox; sort it out later.

Claude Code plugin:

• A TaskView plugin for Claude Code: the MCP server plus slash commands to list projects, browse and create tasks, and log finished work as a task - without leaving the terminal.

Fixes:

• iPad safe-area issues resolved; the app refreshes stale data when it becomes active again.

v1.45.0

Sprints:

• Plan work in sprints: create a sprint with start and end dates, pull tasks in, and see what was completed versus what carried over when the sprint closes.
• Set the sprint capacity and watch the planned total against it while planning - overload is highlighted before the sprint starts. The estimate unit is configurable per project.
• Sprint cadence: define a rhythm (e.g. every two weeks) and TaskView creates the upcoming sprints automatically - you activate them when ready.
• Burndown and velocity charts show sprint progress and team throughput.
• Run a retrospective on a finished sprint to capture what went well and what didn't.
• New RBAC permissions control who can view sprints, manage them, assign tasks to them, and see sprint analytics. Webhooks fire on sprint events.

Recurring tasks:

• Make any task repeat on a schedule - daily, weekly, monthly, or yearly with flexible rules. Each occurrence is created as a real task with the template's assignees and tags, and individual dates can be skipped.

Calendar settings:

• Choose the first day of the week - every calendar in the app (deadlines, sprint dates, time reports) respects it.

Shareable filtered views:

• Kanban and graph filters are now reflected in the URL - copy the link to share the exact filtered view with a teammate.

v1.44.0

Task sorting:

• The task list view now lets you sort tasks by creation date or priority, with a direction toggle (newest/oldest, highest/lowest). The sort field and direction are grouped into a single control in the toolbar.
• list_tasks (MCP) gained sortBy (date/priority) and descending parameters; taskview-api exposes a matching sortBy option.

UI customization:

• Drag-and-drop to rearrange analytics blocks on the dashboard.
• Drag-and-drop to reorder fields in the task dialog — arrange the task layout to your liking. Your layout is saved per user.

Better MCP guidance for AI agents:

• Server instructions now clarify that a "goal" is a project, describe the data model (Organization → Project → List → Task), and note that IDs must be resolved via the list_* tools.

v1.43.0

Time tracking:

• Track work time directly on tasks: start a timer with one click or log entries manually after the fact, mark entries as billable, and view summary reports by project, by member, and by day.

Analytics:

• A new analytics dashboard with KPI cards and charts grouped into productivity, workload, quality, usage, and financial views. Available sections:
  • KPIs - created tasks, completed tasks, overdue, income, expense, net profit, planned income/expense, amount coverage.
  • Productivity - created vs completed, priority mix over time.
  • Workload - workload by assignee, tasks blocked by dependencies.
  • Quality - overdue by age, stale tasks.
  • Usage - status distribution, active vs dead projects.
  • Financial - income and expense per month, per project, and per tag, plus top projects by amount.

v1.42.5

New features:

• SSO - SAML 2.0 & OpenID Connect - connect your identity provider (Okta, Azure AD, Google Workspace, Keycloak) and let your team sign in with existing corporate credentials. Supports metadata URL auto-sync, request signing, and email domain routing. One domain = one SSO config.
• SCIM 2.0 provisioning - automatically add and remove users when they join or leave your identity provider. No manual user management needed. Bearer token authentication with SHA-256 hashed storage.
• Organizations & multi-tenancy - create multiple organizations on a single TaskView instance. Each org has its own projects, members, and settings. Switch between orgs instantly. Three roles: Owner, Admin, Member.
• MCP server - Model Context Protocol server for AI integration. Connect Claude Desktop, Cursor, or Claude Code to TaskView. Create tasks, list projects, manage work - all from your AI assistant using natural language. Ships as an npm package (taskview-mcp).
• Webhooks - get notified when tasks, projects, or lists change. Send events to Slack, Discord, or your own services. Webhook secrets are encrypted at rest.

Documentation:

• Added SSO documentation (/docs/features/sso) - SAML 2.0 and OIDC setup guides, email domain routing, user provisioning, replay attack protection, API reference.
• Added Organizations documentation (/docs/features/organizations) - creation, member management, roles, multi-tenancy.
• Updated Environment Variables (/docs/configuration/environment-variables) - ENCRYPTION_KEY now required for SSO and integrations.

v1.41.0

New features:

• API tokens - create tokens for programmatic API access with tvk_ prefix and SHA-256 hashed storage. Tokens support permission scoping (restrict which operations a token can perform), project scoping (restrict access to specific projects), and optional expiration. Manage tokens from Account Settings. The full token is shown only once at creation. Tokens cannot manage other tokens. Available as both UI and API (/module/api-tokens).
• Session management - users can view all active sessions with device name, IP and timestamps, revoke individual sessions, or sign out of all other devices at once.
• Real-time project sync - projects update instantly via Centrifugo when a user is added to, removed from, or has roles changed in a project. Built on a new RealtimeDispatcher with typed frontend event handler map, designed to scale for future real-time features. Auto-redirect to home when the current project becomes inaccessible.

Fixes:

• Collaboration user lookup case mismatch - adding a user to a project by email failed if the registered email had uppercase characters. Email is now lowercased before resolving the auth user.
• List changing issue https://github.com/Gimanh/taskview-community/issues/41

Documentation:

• Added API Tokens documentation (/docs/features/api-tokens) - token format, authentication, permission scoping, project restrictions, usage example with taskview-api package.
• Added Sessions & Devices documentation (/docs/features/sessions) - session lifecycle, device listing, remote logout.

Migration notes:

• Run database migration container.

v1.32.0

New features:

• Webhooks - receive HTTP POST notifications when events happen in your projects. Configure webhook URLs, select events (task.created, task.updated, task.deleted, task.assigneesChanged), and verify payloads with HMAC-SHA256 signatures. Includes automatic retries (3 attempts with exponential backoff), delivery history with payload viewer, status filtering, manual retry for failed deliveries, secret rotation, and test delivery. Webhooks auto-deactivate after 10 consecutive failures.
• Kanban & Graph filters - filter tasks by lists and assignees on both Kanban board and Graph views. Multiple lists and multiple users can be selected simultaneously. Filters are applied server-side for Kanban (query params on API) and client-side for Graph. Filter toolbar with reset button, responsive layout (inline on desktop, separate row on mobile).
• Markdown rendering in notes - task notes from GitHub/GitLab integrations now render as formatted markdown instead of plain text with raw symbols. Uses Nuxt UI Editor with content-type="markdown" when task has a sourceUrl.
• Centrifugo v6 support - updated real-time notification configuration for Centrifugo v6 nested config format. Replaced CENTRIFUGO_PUBLIC_PORT with CENTRIFUGO_PUBLIC_URL for flexible WebSocket URL configuration, enabling nginx proxy setup without exposing separate ports.

Fixes:

• Kanban order conflict on task move - fixed unique constraint violation (goal_id, kanban_order) when moving tasks between columns from the task detail panel. The server now assigns a new unique kanbanOrder when statusId changes.
• Kanban order conflict on drag to filtered empty column - when filters made a column appear empty, dragging a task into it could assign a conflicting kanbanOrder. Fixed by calculating order based on the entire project scope, not just the visible column.
• Task not moving between kanban columns - when changing a task's column from the task detail overlay, the kanban board didn't reflect the change until page reload. syncTask now detects column changes and moves the task between columns in the local store.
• Subtask description reverting on completion - toggling a subtask's completion checkbox could revert its description to the original text from creation. Fixed by updating the full subtask object from server response instead of only the complete field, and by correctly updating subtask descriptions in the parent task's subtasks array.
• Goal lists not loading on kanban page - the list filter dropdown was empty on kanban because useProjectDataLoader didn't fetch goal lists. Added goalListsStore.fetchLists() to the shared data loader.
• Centrifugo connection token crash - CentrifugoClient.generateConnectionToken() used dynamic require('jsonwebtoken') which wasn't included in the production bundle. Replaced with static import.

Infrastructure:

• Added Dispatcher interface for event dispatchers - standardized register() and registerWorkers() contract. Both NotificationDispatcher and WebhooksDispatcher implement it. New dispatchers are registered via a single array in all-events.ts.
• Added goalId to task.deleted event in EventBus for webhook delivery routing.
• Docker Compose configuration for Centrifugo with nginx WebSocket proxy setup.

Documentation:

• Added webhooks documentation (/docs/features/webhooks) - setup, payload format, signature verification with code example, retry behavior, auto-deactivation, secret rotation, local testing script.
• Updated notifications documentation with CENTRIFUGO_PUBLIC_URL and Centrifugo v6 config format.
• Updated environment variables documentation with Centrifugo v6 config example and nginx proxy setup.

Migration notes:

• Run database migration 1.32.0 - creates tasks.webhooks and tasks.webhook_deliveries tables.
• Replace CENTRIFUGO_PUBLIC_PORT with CENTRIFUGO_PUBLIC_URL in .env.taskview (e.g. wss://api.example.com/centrifugo/connection/websocket).
• If using Centrifugo, update config to v6 format (nested keys: client.token.hmac_secret_key, http_api.key, client.allowed_origins).

v1.24.0

New features:

• GitHub & GitLab integrations — connect repositories to your projects and sync issues as tasks. Supports OAuth authorization, webhook-based updates, and issue-to-task mapping. Works with GitHub Enterprise and self-hosted GitLab instances.
• Date quick actions — new "This week" and "This month" shortcuts when setting task deadlines
• Server-side graph permissions — dependency graph operations are now checked on the server, not just in the UI

Fixes:

• Fixed task completion checkbox being disabled on the main screen when no project is selected
• Fixed task detail panel showing lists from the wrong project
• Various UI improvements and polish

v1.20.7

Fixes:

• Fixed subtask duplication when adding subtasks in certain scenarios
• Fixed Kanban board not loading root tasks correctly for columns

v1.20.4

New features:

• Login with Apple — sign in with your Apple ID
• Redesigned web client — migrated to Nuxt UI for a modern, polished interface
• Mobile app improvements — fixed build issues and updated iOS and Android versions

Fixes:

• Fixed external auth redirect handling
• Fixed locale not being saved between sessions
• Fixed tag validation — tags and tasks now properly checked for same-project membership
• Fixed start screen loading issues
• Various type fixes and URL corrections

v1.19.6

Fixes and improvements:

• Fixed cookie handling for authentication sessions
• Added Docker build script for easier image management
• Extended app internals for better customization support
• Updated dependencies

v1.19.0

New features:

• Login with Google — sign in with your Google account via OAuth
• Login with GitHub — sign in with your GitHub account via OAuth

Both providers work alongside the existing email/password login. Configure them in your .env file — see the Authentication docs for setup instructions.

v1.18.2

Bug fix: History records for related entities (goals, goal lists, tasks) are now properly deleted when an entity is removed. Previously, removing a goal or list could leave orphaned history entries in the database.

v1.18.0 — Public Launch

TaskView is now publicly available. The source code has been published on GitHub, and Docker images are available on Docker Hub.

This is the first public release, and it includes everything you need to run a self-hosted task management platform:

• Projects, lists, tasks, and subtasks
• Kanban boards with custom statuses
• Task dependency graphs
• Role-based access control with granular permissions
• Team collaboration with user invitations
• Dashboard with smart widgets
• Dark mode
• Mobile apps for iOS and Android
• Web app available at app.taskview.tech
• Docker deployment with automated migrations