@withpica/mcp-server-directory 1.2.0 → 1.4.0

package/src/server.ts

@@ -16,13 +16,21 @@ import { ToolRegistry } from "./tools/index.js";
 import { PromptRegistry } from "./prompts/index.js";
 import { logError } from "./utils/errors.js";
 import { DIRECTORY_PRIMER } from "./resources/llms-primer.js";
+import { CHANGELOG_MD } from "./lib/changelog.generated.js";
+import { SkillsRegistry } from "./skills/index.js";
 
 export class DirectoryMcpServer {
   private server: Server;
   private client: DirectoryClient;
   private toolRegistry: ToolRegistry;
   private promptRegistry: PromptRegistry;
+  private skillsRegistry: SkillsRegistry;
   private config: ServerConfig;
+  // Logged once after the MCP `initialize` handshake completes so each
+  // session prints a single client-attribution breadcrumb to stderr
+  // (Railway logs / Sentry breadcrumbs). Directory MCP has no DB audit
+  // pipeline today; this is provenance-only.
+  private clientAttributionLogged = false;
 
   constructor(config: ServerConfig) {
     this.config = config;
@@ -48,6 +56,7 @@ export class DirectoryMcpServer {
 
     this.toolRegistry = new ToolRegistry(this.client);
     this.promptRegistry = new PromptRegistry();
+    this.skillsRegistry = new SkillsRegistry();
     this.setupHandlers();
   }
 
@@ -60,17 +69,43 @@ export class DirectoryMcpServer {
     });
 
     this.server.setRequestHandler(ListResourcesRequestSchema, async () => {
-      return {
-        resources: [
-          {
-            uri: "llms://primer",
-            name: "PICA Domain Primer",
-            description:
-              "Plain-language description of PICA's domain model, entity relationships, and recommended agent workflows. Read this first.",
-            mimeType: "text/markdown",
-          },
-        ],
-      };
+      const resources: Array<{
+        uri: string;
+        name: string;
+        description: string;
+        mimeType: string;
+      }> = [
+        {
+          uri: "llms://primer",
+          name: "PICA Domain Primer",
+          description:
+            "Plain-language description of PICA's domain model, entity relationships, and recommended agent workflows. Read this first.",
+          mimeType: "text/markdown",
+        },
+        {
+          uri: "skill://withpica/index.json",
+          name: "PICA Directory Skills Index",
+          description:
+            "Enumeration of downloadable directory skill methodologies (SEP-2640 bridge). Each entry maps a kebab-case name to its skill:// URI, description, and trigger phrases.",
+          mimeType: "application/json",
+        },
+        {
+          uri: "release-notes://withpica/mcp-server-directory/latest",
+          name: "Release Notes — @withpica/mcp-server-directory",
+          description:
+            "Full CHANGELOG.md for the PICA directory MCP server. For just the last few releases, agents can call directory_release_notes.",
+          mimeType: "text/markdown",
+        },
+      ];
+      for (const summary of this.skillsRegistry.listSkills()) {
+        resources.push({
+          uri: `skill://withpica/${summary.name}/SKILL.md`,
+          name: `Skill — ${summary.name}`,
+          description: summary.description,
+          mimeType: "text/markdown",
+        });
+      }
+      return { resources };
     });
 
     this.server.setRequestHandler(
@@ -88,6 +123,20 @@ export class DirectoryMcpServer {
             ],
           };
         }
+        if (uri === "release-notes://withpica/mcp-server-directory/latest") {
+          return {
+            contents: [
+              {
+                uri,
+                mimeType: "text/markdown",
+                text: CHANGELOG_MD,
+              },
+            ],
+          };
+        }
+        if (uri.startsWith("skill://withpica/")) {
+          return this.readSkillResource(uri);
+        }
         throw new Error(`Resource not found: ${uri}`);
       },
     );
@@ -104,6 +153,8 @@ export class DirectoryMcpServer {
     this.server.setRequestHandler(CallToolRequestSchema, async (request) => {
       const { name, arguments: args } = request.params;
 
+      this.logClientAttributionOnce();
+
       if (this.config.debug) {
         console.error(`[Directory MCP] Executing tool: ${name}`, args);
       }
@@ -117,6 +168,86 @@ export class DirectoryMcpServer {
     });
   }
 
+  /**
+   * Emit a single stderr line per session naming the client that handshook
+   * with us — sourced from `clientInfo` on the MCP `initialize` request.
+   * Self-declared, NOT authenticated; treat as provenance metadata only.
+   *
+   * Directory MCP is unauthenticated and writes no audit rows, so this
+   * stderr breadcrumb is the only attribution surface today. When/if a
+   * directory audit pipeline lands, fold these values into McpAuditEntry
+   * (the wire shape already carries optional client_name + client_version).
+   */
+  private logClientAttributionOnce(): void {
+    if (this.clientAttributionLogged) return;
+    const info = this.server.getClientVersion?.();
+    if (!info) return;
+    this.clientAttributionLogged = true;
+    console.error(
+      `[Directory MCP] client: ${info.name ?? "unknown"} v${info.version ?? "unknown"}`,
+    );
+  }
+
+  /**
+   * Resolve a skill:// URI. ADR-140 Phase 2b — SEP-2640 bridge pattern.
+   * Two URI shapes:
+   *   - skill://withpica/index.json
+   *   - skill://withpica/<name>/SKILL.md
+   */
+  private readSkillResource(uri: string): {
+    contents: Array<{ uri: string; mimeType: string; text: string }>;
+  } {
+    if (uri === "skill://withpica/index.json") {
+      const index = this.skillsRegistry.listSkills().map((s) => ({
+        name: s.name,
+        uri: `skill://withpica/${s.name}/SKILL.md`,
+        description: s.description,
+        triggers: s.triggers,
+        audience: s.audience,
+      }));
+      return {
+        contents: [
+          {
+            uri,
+            mimeType: "application/json",
+            text: JSON.stringify({ skills: index }, null, 2),
+          },
+        ],
+      };
+    }
+    const match = uri.match(/^skill:\/\/withpica\/([a-z0-9-]+)\/SKILL\.md$/);
+    if (!match) {
+      throw new Error(`Malformed skill URI: ${uri}`);
+    }
+    const name = match[1];
+    if (!this.skillsRegistry.has(name)) {
+      throw new Error(`Skill not found: ${name}`);
+    }
+    const skill = this.skillsRegistry.getSkill(name);
+    const frontmatter = [
+      "---",
+      `name: ${skill.name}`,
+      `description: ${skill.description}`,
+      "triggers:",
+      ...skill.triggers.map((t) => `  - ${t}`),
+      `audience: ${skill.audience}`,
+      "tools_required:",
+      ...skill.tools_required.map((t) => `  - ${t}`),
+      `output: ${skill.output}`,
+      "---",
+      "",
+    ].join("\n");
+    return {
+      contents: [
+        {
+          uri,
+          mimeType: "text/markdown",
+          text: frontmatter + skill.body,
+        },
+      ],
+    };
+  }
+
   async start(): Promise<void> {
     const transport = new StdioServerTransport();
     await this.server.connect(transport);

package/src/skills/find-music-for-sync-brief/SKILL.md

@@ -0,0 +1,89 @@
+<!-- Copyright (c) 2024-2026 Withpica Ltd. All rights reserved. -->
+---
+name: find-music-for-sync-brief
+description: Find music in the PICA public directory for a sync brief — translate a mood/vibe/scene description into audio search parameters, run the search, and return a rights-aware shortlist with credit details for licensing.
+triggers:
+  - find music for a sync brief
+  - find me a track for a film scene
+  - music for this brief
+  - find an uplifting indie folk track
+  - I need music that sounds like
+audience: sync supervisor / music library / ad agency / film & TV music team
+tools_required:
+  - directory_search_recordings
+  - directory_lookup_work
+  - directory_lookup_person
+output: A rights-aware shortlist — each result with title, artist, audio characteristics (BPM, key, energy), credits summary for licensing contact, and any flags (unattested credits, low registration score, missing ISRC).
+---
+
+# find-music-for-sync-brief
+
+Help the user find music in PICA's public directory for a sync brief. Translate their description (mood, vibe, scene, era, vocal style) into search parameters, run the search, and return a shortlist that includes the information they need to license — not just the track.
+
+This is a public skill — any AI agent connected to the directory MCP can use it. The directory only contains works from organisations that have opted in.
+
+## Step 1 — Translate the brief
+
+Most sync briefs are described in natural language. Translate before searching:
+
+| User says | Search parameters |
+|---|---|
+| upbeat / uplifting / driving | `min_energy: 0.6`, `min_danceability: 0.5` |
+| dark / moody / brooding | `max_energy: 0.4`, `key_mode: minor` |
+| chill / ambient / background | `max_energy: 0.4`, `max_bpm: 100` |
+| epic / cinematic | `min_energy: 0.7`, often longer durations |
+| specific BPM ("around 120bpm") | `min_bpm: 115`, `max_bpm: 125` |
+| acoustic / sparse | typically lower `danceability` and `energy` |
+| vocal / instrumental | filter on `has_vocals` if available |
+
+If the user gives an artist or song reference ("something like X"), look up that reference first via `directory_lookup_work` or `directory_search_recordings` by title — then mimic its audio profile in the new search.
+
+## Step 2 — Search
+
+Call `directory_search_recordings` with the parameters from step 1. Default limit is fine for an initial scan.
+
+If the brief is vague, do two searches with slightly different parameters and compare. If too many results, narrow on BPM or key. If too few, widen the BPM range first, then drop key_mode.
+
+## Step 3 — Lookup full details
+
+For the top 5-10 promising results, call `directory_lookup_work` to get:
+
+- **Who wrote it** — credits with IPI numbers (essential for the licensing contact path)
+- **Whether credits are attested** — an unattested credit means the ownership claim hasn't been verified; flag this
+- **DSP links** (Spotify, Apple Music) — the user wants to listen before shortlisting
+- **Registration score** — higher score = cleaner rights chain = easier to license
+
+For high-value matches where the user wants to know more about the creator, call `directory_lookup_person` with the IPI to see the writer's broader catalog and collaborator network.
+
+## Step 4 — Present the shortlist
+
+Present each shortlisted track with:
+
+- **Title, artist** — what the user listens for
+- **Audio profile** — BPM, key, energy (one line, the supervisor's quick filter)
+- **Credits summary** — writers with IPI, publisher if known (this is the licensing path)
+- **DSP links** — so the user can listen
+- **Flags** — unattested credits, low registration score, missing ISRC, multiple writers (= multi-party clearance needed)
+
+If a track has all green flags (attested credits, high registration score, ISRC present, single or low-count writers), call it out as "clean to clear."
+
+## Step 5 — If no results
+
+If the search returns nothing, walk the user back through the brief:
+- Widen the BPM range first (most supervisors don't actually mind ±10 BPM)
+- Drop the key filter (key matching matters less than mood for most placements)
+- Drop the energy bounds and search by genre/mood text only
+- Suggest the user expand to adjacent moods ("uplifting" → also try "warm" or "hopeful")
+
+Be honest if the directory is small for a specific style — PICA's directory grows with org opt-ins; some niches are sparse.
+
+## What not to do
+
+- Don't claim to license tracks — this skill returns a shortlist, not a license. The user contacts the rights holder via the credits summary.
+- Don't speculate about pricing — sync fees are negotiated per-placement
+- Don't return results from outside the directory (no general web search, no Spotify metadata directly) — the directory is the source of truth for this skill
+- Don't return tracks with no attested credits without flagging them as "rights chain unverified"
+
+## Follow-on skills
+
+- `due-diligence-on-creator` (Stage 2 candidate) — for deeper research on a specific writer before reaching out

package/src/skills/index.ts

@@ -0,0 +1,63 @@
+// Copyright (c) 2024-2026 Withpica Ltd. All rights reserved.
+
+/**
+ * Skills Registry — directory MCP, ADR-140 Phase 2b
+ *
+ * Sister of mcp-server/src/skills/index.ts. Same shape, scoped to the public
+ * directory MCP. Body bytes are generated at build time by
+ * `scripts/build-skills.ts` and inlined into `skills.generated.ts`.
+ *
+ * Public/anonymous surface — every skill body must clear the IP-protection
+ * lint (scripts/lint-mcp-tools.ts Rule 14) before publishing. Directory MCP
+ * skills MUST NOT quote from trade-secret directories listed in
+ * `.claude/rules/ip-protection.md`.
+ */
+
+import { SKILLS, SKILL_NAMES, type Skill } from "./skills.generated.js";
+
+export interface SkillSummary {
+  name: string;
+  description: string;
+  triggers: string[];
+  audience: string;
+}
+
+export class SkillsRegistry {
+  listNames(): ReadonlyArray<string> {
+    return SKILL_NAMES;
+  }
+
+  listSkills(): SkillSummary[] {
+    return SKILL_NAMES.map((name) => {
+      const skill = SKILLS[name];
+      return {
+        name: skill.name,
+        description: skill.description,
+        triggers: skill.triggers,
+        audience: skill.audience,
+      };
+    });
+  }
+
+  getSkill(name: string): Skill {
+    const skill = SKILLS[name];
+    if (!skill) {
+      throw new SkillNotFoundError(name);
+    }
+    return skill;
+  }
+
+  has(name: string): boolean {
+    return name in SKILLS;
+  }
+}
+
+export class SkillNotFoundError extends Error {
+  constructor(public readonly skillName: string) {
+    super(`Skill not found: ${skillName}`);
+    this.name = "SkillNotFoundError";
+  }
+}
+
+export { SKILLS, SKILL_NAMES };
+export type { Skill };

package/src/skills/skills.generated.ts

@@ -0,0 +1,33 @@
+// Copyright (c) 2024-2026 Withpica Ltd. All rights reserved.
+
+/**
+ * GENERATED FILE — DO NOT EDIT BY HAND.
+ *
+ * Regenerated by `scripts/build-skills.ts` from `src/skills/<name>/SKILL.md`.
+ * Runs in `prebuild`. See ADR-140 Phase 2b.
+ */
+
+export interface Skill {
+  name: string;
+  description: string;
+  triggers: string[];
+  audience: string;
+  tools_required: string[];
+  output: string;
+  body: string;
+}
+
+
+export const SKILLS: Record<string, Skill> = {
+  "find-music-for-sync-brief": {
+    name: "find-music-for-sync-brief",
+    description: "Find music in the PICA public directory for a sync brief — translate a mood/vibe/scene description into audio search parameters, run the search, and return a rights-aware shortlist with credit details for licensing.",
+    triggers: ["find music for a sync brief","find me a track for a film scene","music for this brief","find an uplifting indie folk track","I need music that sounds like"],
+    audience: "sync supervisor / music library / ad agency / film & TV music team",
+    tools_required: ["directory_search_recordings","directory_lookup_work","directory_lookup_person"],
+    output: "A rights-aware shortlist — each result with title, artist, audio characteristics (BPM, key, energy), credits summary for licensing contact, and any flags (unattested credits, low registration score, missing ISRC).",
+    body: "# find-music-for-sync-brief\n\nHelp the user find music in PICA's public directory for a sync brief. Translate their description (mood, vibe, scene, era, vocal style) into search parameters, run the search, and return a shortlist that includes the information they need to license — not just the track.\n\nThis is a public skill — any AI agent connected to the directory MCP can use it. The directory only contains works from organisations that have opted in.\n\n## Step 1 — Translate the brief\n\nMost sync briefs are described in natural language. Translate before searching:\n\n| User says | Search parameters |\n|---|---|\n| upbeat / uplifting / driving | `min_energy: 0.6`, `min_danceability: 0.5` |\n| dark / moody / brooding | `max_energy: 0.4`, `key_mode: minor` |\n| chill / ambient / background | `max_energy: 0.4`, `max_bpm: 100` |\n| epic / cinematic | `min_energy: 0.7`, often longer durations |\n| specific BPM (\"around 120bpm\") | `min_bpm: 115`, `max_bpm: 125` |\n| acoustic / sparse | typically lower `danceability` and `energy` |\n| vocal / instrumental | filter on `has_vocals` if available |\n\nIf the user gives an artist or song reference (\"something like X\"), look up that reference first via `directory_lookup_work` or `directory_search_recordings` by title — then mimic its audio profile in the new search.\n\n## Step 2 — Search\n\nCall `directory_search_recordings` with the parameters from step 1. Default limit is fine for an initial scan.\n\nIf the brief is vague, do two searches with slightly different parameters and compare. If too many results, narrow on BPM or key. If too few, widen the BPM range first, then drop key_mode.\n\n## Step 3 — Lookup full details\n\nFor the top 5-10 promising results, call `directory_lookup_work` to get:\n\n- **Who wrote it** — credits with IPI numbers (essential for the licensing contact path)\n- **Whether credits are attested** — an unattested credit means the ownership claim hasn't been verified; flag this\n- **DSP links** (Spotify, Apple Music) — the user wants to listen before shortlisting\n- **Registration score** — higher score = cleaner rights chain = easier to license\n\nFor high-value matches where the user wants to know more about the creator, call `directory_lookup_person` with the IPI to see the writer's broader catalog and collaborator network.\n\n## Step 4 — Present the shortlist\n\nPresent each shortlisted track with:\n\n- **Title, artist** — what the user listens for\n- **Audio profile** — BPM, key, energy (one line, the supervisor's quick filter)\n- **Credits summary** — writers with IPI, publisher if known (this is the licensing path)\n- **DSP links** — so the user can listen\n- **Flags** — unattested credits, low registration score, missing ISRC, multiple writers (= multi-party clearance needed)\n\nIf a track has all green flags (attested credits, high registration score, ISRC present, single or low-count writers), call it out as \"clean to clear.\"\n\n## Step 5 — If no results\n\nIf the search returns nothing, walk the user back through the brief:\n- Widen the BPM range first (most supervisors don't actually mind ±10 BPM)\n- Drop the key filter (key matching matters less than mood for most placements)\n- Drop the energy bounds and search by genre/mood text only\n- Suggest the user expand to adjacent moods (\"uplifting\" → also try \"warm\" or \"hopeful\")\n\nBe honest if the directory is small for a specific style — PICA's directory grows with org opt-ins; some niches are sparse.\n\n## What not to do\n\n- Don't claim to license tracks — this skill returns a shortlist, not a license. The user contacts the rights holder via the credits summary.\n- Don't speculate about pricing — sync fees are negotiated per-placement\n- Don't return results from outside the directory (no general web search, no Spotify metadata directly) — the directory is the source of truth for this skill\n- Don't return tracks with no attested credits without flagging them as \"rights chain unverified\"\n\n## Follow-on skills\n\n- `due-diligence-on-creator` (Stage 2 candidate) — for deeper research on a specific writer before reaching out\n",
+  },
+};
+
+export const SKILL_NAMES: ReadonlyArray<string> = ["find-music-for-sync-brief"];

package/src/tools/__tests__/release-notes.test.ts

@@ -0,0 +1,62 @@
+// Copyright (c) 2024-2026 Withpica Ltd. All rights reserved.
+
+import { DirectoryReleaseNotesTools } from "../release-notes.js";
+import type { DirectoryClient } from "../../client.js";
+
+describe("DirectoryReleaseNotesTools.directory_release_notes", () => {
+  const client = {} as DirectoryClient;
+  const tools = new DirectoryReleaseNotesTools(client).getTools();
+  const tool = tools.find(
+    (t: { definition: { name: string } }) =>
+      t.definition.name === "directory_release_notes",
+  )!;
+
+  it("registers as a single tool named directory_release_notes", () => {
+    expect(tools).toHaveLength(1);
+    expect(tool).toBeDefined();
+  });
+
+  it("returns the last 3 releases by default", async () => {
+    const result = await tool.executor({});
+    const data = JSON.parse(result.content[0].text);
+    expect(data.package).toBe("@withpica/mcp-server-directory");
+    expect(data.current_version).toMatch(/^\d+\.\d+\.\d+$/);
+    expect(Array.isArray(data.releases)).toBe(true);
+    expect(data.releases.length).toBeLessThanOrEqual(3);
+    expect(data.releases.length).toBeGreaterThan(0);
+    expect(data.resource_uri).toBe(
+      "release-notes://withpica/mcp-server-directory/latest",
+    );
+  });
+
+  it("respects since_version (strictly greater)", async () => {
+    const result = await tool.executor({ since_version: "0.0.1" });
+    const data = JSON.parse(result.content[0].text);
+    expect(data.releases.length).toBeGreaterThan(0);
+    for (const r of data.releases) {
+      expect(r.version).not.toBe("0.0.1");
+    }
+  });
+
+  it("filters to specified sections", async () => {
+    const result = await tool.executor({ sections: ["Added"] });
+    const data = JSON.parse(result.content[0].text);
+    for (const r of data.releases) {
+      for (const k of Object.keys(r.sections)) {
+        expect(k).toBe("Added");
+      }
+    }
+  });
+
+  it("returns empty releases array when since_version exceeds current_version", async () => {
+    const result = await tool.executor({ since_version: "99.0.0" });
+    const data = JSON.parse(result.content[0].text);
+    expect(data.releases).toEqual([]);
+  });
+
+  it("clamps limit to max 20", async () => {
+    const result = await tool.executor({ limit: 9999 });
+    const data = JSON.parse(result.content[0].text);
+    expect(data.releases.length).toBeLessThanOrEqual(20);
+  });
+});

package/src/tools/index.ts

@@ -6,6 +6,8 @@ import { DirectoryPeopleTools } from "./people.js";
 import { DirectorySearchTools } from "./search.js";
 import { DirectoryRecordingsTools } from "./recordings.js";
 import { DirectoryChainTools } from "./chain.js";
+import { DirectorySkillsTools } from "./skills.js";
+import { DirectoryReleaseNotesTools } from "./release-notes.js";
 import { formatError, logError, ToolExecutionError } from "../utils/errors.js";
 
 /**
@@ -25,6 +27,7 @@ export interface ToolDefinition {
     type: string;
     properties: Record<string, any>;
     required?: string[];
+    additionalProperties?: boolean;
   };
 }
 
@@ -51,6 +54,8 @@ export class ToolRegistry {
       new DirectorySearchTools(client),
       new DirectoryRecordingsTools(client),
       new DirectoryChainTools(client),
+      new DirectorySkillsTools(),
+      new DirectoryReleaseNotesTools(client),
     ];
 
     for (const group of groups) {

package/src/tools/release-notes.ts

@@ -0,0 +1,148 @@
+// Copyright (c) 2024-2026 Withpica Ltd. All rights reserved.
+
+/* eslint-disable @typescript-eslint/no-explicit-any -- ToolExecutor signature uses Record<string, any> */
+
+/**
+ * directory_release_notes — what shipped in the PICA directory MCP.
+ *
+ * Reads CHANGELOG.md embedded at build time via scripts/build-changelog.ts.
+ * Sister of pica_release_notes (creator MCP) and team_release_notes (team MCP).
+ *
+ * Public-facing MCP — no trade-secret content in the description (per
+ * .claude/rules/ip-protection.md). The CHANGELOG body is the same file
+ * shipped in the npm tarball, already vetted as public.
+ */
+
+import { DirectoryClient } from "../client.js";
+import { ToolDefinition, ToolExecutor, ToolResult } from "./index.js";
+import {
+  parseChangelogText,
+  type ChangelogSectionName,
+  CHANGELOG_SECTION_NAMES,
+} from "../lib/changelog.js";
+import {
+  CHANGELOG_MD,
+  PACKAGE_NAME,
+  PACKAGE_VERSION,
+} from "../lib/changelog.generated.js";
+
+const RESOURCE_URI = "release-notes://withpica/mcp-server-directory/latest";
+const DEFAULT_LIMIT = 3;
+const MAX_LIMIT = 20;
+
+function compareSemver(a: string, b: string): number {
+  const parse = (v: string) => v.split(".").map((n) => parseInt(n, 10) || 0);
+  const [a1, a2, a3] = parse(a);
+  const [b1, b2, b3] = parse(b);
+  if (a1 !== b1) return a1 - b1;
+  if (a2 !== b2) return a2 - b2;
+  return a3 - b3;
+}
+
+export class DirectoryReleaseNotesTools {
+  constructor(private client: DirectoryClient) {}
+
+  getTools(): Array<{ definition: ToolDefinition; executor: ToolExecutor }> {
+    return [
+      {
+        definition: {
+          name: "directory_release_notes",
+          tier: "read",
+          description:
+            "Use when the user asks: 'what's new in the directory mcp', " +
+            "'what changed in the directory', 'directory release notes', " +
+            "'what version is the directory on'. " +
+            "Returns recent releases of the PICA directory MCP server — " +
+            "what shipped in the public catalogue surface itself. " +
+            "NOT for catalogue content searches (use directory_search / " +
+            "directory_list_works / directory_chain for those). " +
+            "Returns { package, current_version, releases: [{ version, date, sections, markdown }], resource_uri }. " +
+            "Defaults to the last 3 releases; use `since_version` to bound the output " +
+            "or `sections` to filter to Added/Fixed/etc.",
+          inputSchema: {
+            type: "object",
+            properties: {
+              since_version: {
+                type: "string",
+                description:
+                  "If set, returns only releases strictly greater than this version " +
+                  "(semver-compared). Versions equal to since_version are excluded.",
+              },
+              limit: {
+                type: "number",
+                description: `Maximum number of releases to return. Default ${DEFAULT_LIMIT}, max ${MAX_LIMIT}.`,
+              },
+              sections: {
+                type: "array",
+                items: { type: "string", enum: [...CHANGELOG_SECTION_NAMES] },
+                description:
+                  "Filter each release's sections to only these names " +
+                  "(e.g. ['Added', 'Fixed']). Sections not in the list are omitted from output.",
+              },
+            },
+          },
+        },
+        executor: this.releaseNotes.bind(this),
+      },
+    ];
+  }
+
+  private releaseNotes: ToolExecutor = async (
+    args: Record<string, any>,
+  ): Promise<ToolResult> => {
+    const sinceVersion =
+      typeof args.since_version === "string" ? args.since_version : null;
+    const rawLimit =
+      typeof args.limit === "number" ? args.limit : DEFAULT_LIMIT;
+    const limit = Math.max(1, Math.min(MAX_LIMIT, Math.floor(rawLimit)));
+    const sectionFilter: ChangelogSectionName[] | null = Array.isArray(
+      args.sections,
+    )
+      ? args.sections.filter((s: unknown): s is ChangelogSectionName =>
+          CHANGELOG_SECTION_NAMES.includes(s as ChangelogSectionName),
+        )
+      : null;
+
+    const all = parseChangelogText(CHANGELOG_MD);
+
+    let filtered = all;
+    if (sinceVersion) {
+      filtered = all.filter((e) => compareSemver(e.version, sinceVersion) > 0);
+    }
+    filtered = filtered.slice(0, limit);
+
+    const releases = filtered.map((e) => {
+      const sections = sectionFilter
+        ? Object.fromEntries(
+            Object.entries(e.sections).filter(([k]) =>
+              sectionFilter.includes(k as ChangelogSectionName),
+            ),
+          )
+        : e.sections;
+      return {
+        version: e.version,
+        date: e.date,
+        sections,
+        markdown: e.markdown,
+      };
+    });
+
+    return {
+      content: [
+        {
+          type: "text",
+          text: JSON.stringify(
+            {
+              package: PACKAGE_NAME,
+              current_version: PACKAGE_VERSION,
+              releases,
+              resource_uri: RESOURCE_URI,
+            },
+            null,
+            2,
+          ),
+        },
+      ],
+    };
+  };
+}