@withpica/mcp-server-directory 1.4.1 → 1.5.0

package/package.json

@@ -1,15 +1,19 @@
 {
   "name": "@withpica/mcp-server-directory",
-  "version": "1.4.1",
+  "version": "1.5.0",
   "description": "MCP Server for the withPICA Public Directory — enables AI assistants to search verified works and creators",
+  "homepage": "https://withpica.com/connect",
+  "bugs": {
+    "email": "support@withpica.com"
+  },
   "type": "module",
   "main": "dist/index.js",
   "bin": {
-    "pica-directory-mcp": "./dist/index.js"
+    "pica-directory-mcp": "dist/index.js"
   },
   "scripts": {
     "prebuild": "tsx scripts/build-changelog.ts && tsx scripts/build-skills.ts",
-    "build": "tsc",
+    "build": "rm -rf dist && tsc -p tsconfig.build.json",
     "dev": "tsx src/index.ts",
     "start": "node dist/index.js",
     "test": "NODE_OPTIONS=--experimental-vm-modules jest",
@@ -25,11 +29,11 @@
   },
   "devDependencies": {
     "@types/jest": "^29.5.14",
-    "@types/node": "^20.10.0",
+    "@types/node": "^20.19.43",
     "jest": "^29.7.0",
     "ts-jest": "^29.4.5",
     "tsx": "^4.7.0",
-    "typescript": "^5.3.3"
+    "typescript": "^6.0.3"
   },
   "engines": {
     "node": ">=18.0.0"

package/scripts/build-changelog.ts

@@ -1,4 +1,4 @@
-// Copyright (c) 2024-2026 Withpica Ltd. All rights reserved.
+// Copyright (c) 2025-2026 Withpica Ltd. All rights reserved.
 
 import { readFileSync, writeFileSync } from "fs";
 import { resolve, dirname } from "path";
@@ -15,7 +15,7 @@ const escaped = JSON.stringify(md);
 
 writeFileSync(
   outPath,
-  `// Copyright (c) 2024-2026 Withpica Ltd. All rights reserved.\n` +
+  `// Copyright (c) 2025-2026 Withpica Ltd. All rights reserved.\n` +
     `// Generated by scripts/build-changelog.ts — do not edit.\n\n` +
     `export const CHANGELOG_MD = ${escaped};\n` +
     `export const PACKAGE_NAME = ${JSON.stringify(pkg.name)};\n` +

package/scripts/build-skills.ts

@@ -1,4 +1,4 @@
-// Copyright (c) 2024-2026 Withpica Ltd. All rights reserved.
+// Copyright (c) 2025-2026 Withpica Ltd. All rights reserved.
 
 /**
  * ADR-140 Phase 2b — generator for `skills.generated.ts` (directory MCP).
@@ -91,7 +91,9 @@ function parseFrontmatter(src: string, sourceFile: string): ParsedSkill {
   ];
   for (const field of required) {
     if (!(field in fm)) {
-      throw new Error(`${sourceFile}: missing required frontmatter field "${field}"`);
+      throw new Error(
+        `${sourceFile}: missing required frontmatter field "${field}"`,
+      );
     }
   }
   if (!Array.isArray(fm.triggers) || fm.triggers.length === 0) {
@@ -136,7 +138,7 @@ function discoverSkills(): ParsedSkill[] {
 }
 
 function emit(skills: ParsedSkill[]): string {
-  const header = `// Copyright (c) 2024-2026 Withpica Ltd. All rights reserved.
+  const header = `// Copyright (c) 2025-2026 Withpica Ltd. All rights reserved.
 
 /**
  * GENERATED FILE — DO NOT EDIT BY HAND.
@@ -156,7 +158,10 @@ export interface Skill {
 }
 
 `;
-  const lines: string[] = [header, "export const SKILLS: Record<string, Skill> = {"];
+  const lines: string[] = [
+    header,
+    "export const SKILLS: Record<string, Skill> = {",
+  ];
   for (const skill of skills) {
     lines.push(`  ${JSON.stringify(skill.name)}: {`);
     lines.push(`    name: ${JSON.stringify(skill.name)},`);

package/src/__tests__/prompts/index.test.ts

@@ -1,4 +1,4 @@
-// Copyright (c) 2024-2026 Withpica Ltd. All rights reserved.
+// Copyright (c) 2025-2026 Withpica Ltd. All rights reserved.
 
 /**
  * Directory Prompt Registry Tests

package/src/__tests__/prompts/prompt-eval-harness.test.ts

@@ -1,4 +1,4 @@
-// Copyright (c) 2024-2026 Withpica Ltd. All rights reserved.
+// Copyright (c) 2025-2026 Withpica Ltd. All rights reserved.
 
 /**
  * Directory Prompt Eval Harness — ADR-140 Phase 3
@@ -273,10 +273,11 @@ describe("Prompt Eval Harness — Directory MCP", () => {
       expect(noTools).toEqual([]);
     });
 
-    it("directory-autopilot is read-only (no create/modify language)", async () => {
+    it("directory-autopilot says the catalogue is read-only and the one write needs the user's say-so", async () => {
       const result = await registry.getPrompt("directory-autopilot");
       const text = result.messages[0].content.text;
-      expect(text).toMatch(/read-only/i);
+      expect(text).toMatch(/catalogue is read-only/i);
+      expect(text).toMatch(/only if you ask/i);
     });
   });
 });

package/src/__tests__/skills/skills-registry.test.ts

@@ -1,4 +1,4 @@
-// Copyright (c) 2024-2026 Withpica Ltd. All rights reserved.
+// Copyright (c) 2025-2026 Withpica Ltd. All rights reserved.
 
 /**
  * Directory SkillsRegistry test suite — ADR-140 Phase 2b
@@ -9,10 +9,7 @@
  */
 
 import { describe, it, expect } from "@jest/globals";
-import {
-  SkillsRegistry,
-  SkillNotFoundError,
-} from "../../skills/index.js";
+import { SkillsRegistry, SkillNotFoundError } from "../../skills/index.js";
 
 describe("Directory SkillsRegistry", () => {
   const registry = new SkillsRegistry();

package/src/__tests__/skills/skills-tools.test.ts

@@ -1,4 +1,4 @@
-// Copyright (c) 2024-2026 Withpica Ltd. All rights reserved.
+// Copyright (c) 2025-2026 Withpica Ltd. All rights reserved.
 
 /**
  * Directory skills tools test suite — ADR-140 Phase 2b
@@ -38,15 +38,11 @@ describe("DirectorySkillsTools", () => {
     const summaries = result.structuredContent!.skills as Array<{
       name: string;
     }>;
-    expect(summaries.map((s) => s.name)).toContain(
-      "find-music-for-sync-brief",
-    );
+    expect(summaries.map((s) => s.name)).toContain("find-music-for-sync-brief");
   });
 
   it("directory_skill_get returns the methodology body", async () => {
-    const get = tools.find(
-      (t) => t.definition.name === "directory_skill_get",
-    )!;
+    const get = tools.find((t) => t.definition.name === "directory_skill_get")!;
     const result = await get.executor({ name: "find-music-for-sync-brief" });
     expect(result.isError).toBeFalsy();
     const textBlock = result.content.find((c: any) => c.type === "text") as
@@ -57,17 +53,13 @@ describe("DirectorySkillsTools", () => {
   });
 
   it("directory_skill_get returns isError for unknown skill", async () => {
-    const get = tools.find(
-      (t) => t.definition.name === "directory_skill_get",
-    )!;
+    const get = tools.find((t) => t.definition.name === "directory_skill_get")!;
     const result = await get.executor({ name: "not-a-real-skill" });
     expect(result.isError).toBe(true);
   });
 
   it("directory_skill_get returns isError when name is missing", async () => {
-    const get = tools.find(
-      (t) => t.definition.name === "directory_skill_get",
-    )!;
+    const get = tools.find((t) => t.definition.name === "directory_skill_get")!;
     const result = await get.executor({});
     expect(result.isError).toBe(true);
   });

package/src/__tests__/tools/chain.test.ts

@@ -1,4 +1,4 @@
-// Copyright (c) 2024-2026 Withpica Ltd. All rights reserved.
+// Copyright (c) 2025-2026 Withpica Ltd. All rights reserved.
 
 import {
   jest,

package/src/__tests__/tools/composability-chains.test.ts

@@ -1,4 +1,4 @@
-// Copyright (c) 2024-2026 Withpica Ltd. All rights reserved.
+// Copyright (c) 2025-2026 Withpica Ltd. All rights reserved.
 
 /**
  * Directory MCP — Composability Chain Tests
@@ -6,33 +6,22 @@
  */
 
 import { describe, it, expect, beforeAll } from "@jest/globals";
-import { DirectoryWorksTools } from "../../tools/works";
-import { DirectoryPeopleTools } from "../../tools/people";
-import { DirectorySearchTools } from "../../tools/search";
-import { DirectoryRecordingsTools } from "../../tools/recordings";
-import { DirectoryChainTools } from "../../tools/chain";
+import { ToolRegistry } from "../../tools/index";
 
 const nullClient = null as any;
 
+/**
+ * 2026-08-24 — derived from the REAL registry, not a local class list. The
+ * previous fixed five-class list here missed DirectorySkillsTools and
+ * DirectoryReleaseNotesTools, so "all 8 tools are registered" passed while
+ * the server advertised 11 — a fixed list cannot see the class nobody
+ * listed (same failure family as the shows-trust-floor guard).
+ */
 function getAllTools() {
-  const classes = [
-    new DirectoryWorksTools(nullClient),
-    new DirectoryPeopleTools(nullClient),
-    new DirectorySearchTools(nullClient),
-    new DirectoryRecordingsTools(nullClient),
-    new DirectoryChainTools(nullClient),
-  ];
-
-  const tools: Array<{ name: string; description: string }> = [];
-  for (const cls of classes) {
-    for (const tool of cls.getTools()) {
-      tools.push({
-        name: tool.definition.name,
-        description: tool.definition.description,
-      });
-    }
-  }
-  return tools;
+  return new ToolRegistry(nullClient).listTools().map((definition) => ({
+    name: definition.name,
+    description: definition.description,
+  }));
 }
 
 function parseChains(description: string): string[] {
@@ -50,8 +39,8 @@ describe("Directory Composability Chains", () => {
     allNames = new Set(allTools.map((t) => t.name));
   });
 
-  it("all 8 tools are registered", () => {
-    expect(allTools).toHaveLength(8);
+  it("all 12 tools are registered (parity with lib/constants/mcp-surface.ts is enforced by tool-count-parity.test.ts)", () => {
+    expect(allTools).toHaveLength(12);
   });
 
   it("all tools have composability chains", () => {

package/src/__tests__/tools/enquiries.test.ts

@@ -0,0 +1,135 @@
+// Copyright (c) 2025-2026 Withpica Ltd. All rights reserved.
+
+/**
+ * directory_send_licensing_enquiry — agents browsing the public directory had
+ * no way to reach an owner; the sync skill told them to "contact the rights
+ * holder via the credits summary" (brief 2026-09-25).
+ */
+
+import { jest, describe, it, expect, beforeEach } from "@jest/globals";
+import { DirectoryEnquiryTools } from "../../tools/enquiries";
+import { DirectoryClient } from "../../client";
+
+const WORK = "11111111-2222-4333-8444-555555555555";
+
+describe("directory_send_licensing_enquiry", () => {
+  let client: jest.Mocked<DirectoryClient>;
+  let tool: ReturnType<DirectoryEnquiryTools["getTools"]>[number];
+
+  beforeEach(() => {
+    client = {
+      sendLicensingEnquiry: jest.fn(),
+      workPageUrl: jest.fn(
+        (id: string) => `https://withpica.com/directory/works/${id}`,
+      ),
+    } as any;
+    tool = new DirectoryEnquiryTools(client).getTools()[0];
+  });
+
+  const args = {
+    work_id: WORK,
+    contact_name: "Jane Doe",
+    contact_email: "jane@films.test",
+    project_type: "film",
+    project_description: "opening titles",
+  };
+
+  it("is the one write-tier directory tool and requires the user's own details", () => {
+    expect(tool.definition.tier).toBe("write");
+    expect(tool.definition.inputSchema.required).toEqual([
+      "work_id",
+      "contact_name",
+      "contact_email",
+      "project_type",
+      "project_description",
+    ]);
+    expect(tool.definition.inputSchema.required).not.toContain("budget_amount");
+    expect(tool.definition.description).toMatch(/ONLY call after the user/);
+  });
+
+  it("maps to the public enquiry body, says 'not specified' for what the user didn't give, and returns the work page", async () => {
+    client.sendLicensingEnquiry.mockResolvedValue({
+      status: 200,
+      json: { success: true, data: { id: "enq-1", status: "pending" } },
+    });
+
+    const result = await tool.executor(args);
+
+    expect(client.sendLicensingEnquiry).toHaveBeenCalledWith(
+      expect.objectContaining({
+        workId: WORK,
+        contactName: "Jane Doe",
+        contactEmail: "jane@films.test",
+        territory: "not specified",
+        duration: "not specified",
+        proposedBudgetAmount: null,
+        proposedBudgetCurrency: "GBP",
+      }),
+    );
+    expect(result.isError).toBeUndefined();
+    expect(result.structuredContent).toEqual({
+      sent: true,
+      enquiry_id: "enq-1",
+      status: "pending",
+      work_page_url: `https://withpica.com/directory/works/${WORK}`,
+    });
+    expect(result.content[0].text).toContain("nothing has been agreed");
+  });
+
+  it.each([
+    [403, /not taking licensing enquiries/],
+    [404, /not listed in the public directory/],
+    [429, /Too many enquiries/],
+  ])("reports HTTP %i as not sent, with the reason", async (status, text) => {
+    client.sendLicensingEnquiry.mockResolvedValue({
+      status,
+      json: { success: false, error: { code: "X", message: "x" } },
+    });
+    const result = await tool.executor(args);
+    expect(result.isError).toBe(true);
+    expect(result.structuredContent).toMatchObject({
+      sent: false,
+      http_status: status,
+    });
+    expect(result.content[0].text).toMatch(text);
+  });
+
+  // Review finding: the route stores, THEN emails. A 5xx or a lost answer can
+  // follow a stored enquiry, so "not sent" would invite a duplicate.
+  it.each([500, 502])(
+    "reports HTTP %i as an unknown outcome, not 'not sent'",
+    async (status) => {
+      client.sendLicensingEnquiry.mockResolvedValue({ status, json: null });
+      const result = await tool.executor(args);
+      expect(result.structuredContent).toMatchObject({
+        sent: null,
+        outcome: "unknown",
+      });
+      expect(result.content[0].text).toMatch(/Do not resend/);
+      expect(result.content[0].text).not.toMatch(/^Not sent/);
+    },
+  );
+
+  it("reports a timeout as an unknown outcome", async () => {
+    client.sendLicensingEnquiry.mockRejectedValue(
+      new Error("Request timed out after 15000ms: POST x"),
+    );
+    const result = await tool.executor(args);
+    expect(result.structuredContent).toMatchObject({ outcome: "unknown" });
+  });
+
+  it("passes a 400's own message through", async () => {
+    client.sendLicensingEnquiry.mockResolvedValue({
+      status: 400,
+      json: {
+        success: false,
+        error: {
+          code: "ENQUIRY_EMAIL_INVALID",
+          message: "Invalid email format",
+        },
+      },
+    });
+    const result = await tool.executor(args);
+    expect(result.content[0].text).toContain("Invalid email format");
+  });
+});

package/src/__tests__/tools/people.test.ts

@@ -1,4 +1,4 @@
-// Copyright (c) 2024-2026 Withpica Ltd. All rights reserved.
+// Copyright (c) 2025-2026 Withpica Ltd. All rights reserved.
 
 import {
   jest,

package/src/__tests__/tools/search.test.ts

@@ -1,4 +1,4 @@
-// Copyright (c) 2024-2026 Withpica Ltd. All rights reserved.
+// Copyright (c) 2025-2026 Withpica Ltd. All rights reserved.
 
 import {
   jest,

package/src/__tests__/tools/tool-count-parity.test.ts

@@ -0,0 +1,63 @@
+// Copyright (c) 2025-2026 Withpica Ltd. All rights reserved.
+
+/**
+ * Directory tool-count parity tripwire — sister of
+ * mcp-server/src/__tests__/tools/tool-count-parity.test.ts.
+ *
+ * MCP_DIRECTORY_TOOL_COUNT in `lib/constants/mcp-surface.ts` is published
+ * live at /.well-known/mcp.json and /.well-known/mcp/server-card.json. It
+ * was documented as "small, hand-verified" and drifted exactly as
+ * hand-verified numbers do: it read 9 while this registry served 11
+ * (directory_search_recordings and directory_release_notes landed without a
+ * bump). This test builds the REAL registry and fails when the constant
+ * drifts — update the constant in the same PR as any directory tool
+ * addition, removal, or retirement.
+ *
+ * The constant is read from the file as text (not imported) — the app and
+ * this package are deliberately isolated builds; a source-text read keeps
+ * the tripwire without coupling them.
+ */
+
+import { describe, it, expect } from "@jest/globals";
+import { readFileSync, existsSync } from "node:fs";
+import { resolve } from "node:path";
+import { ToolRegistry } from "../../tools/index";
+
+function readDeclaredCount(): { count: number; source: string } {
+  // jest runs with cwd = mcp-server-directory (package script) but tolerate
+  // a repo-root cwd too.
+  const candidates = [
+    resolve(process.cwd(), "..", "lib", "constants", "mcp-surface.ts"),
+    resolve(process.cwd(), "lib", "constants", "mcp-surface.ts"),
+  ];
+  const source = candidates.find((p) => existsSync(p));
+  if (!source) {
+    throw new Error(
+      `lib/constants/mcp-surface.ts not found from cwd=${process.cwd()} — the app-side directory tool-count constant is missing`,
+    );
+  }
+  const text = readFileSync(source, "utf8");
+  const match = text.match(/MCP_DIRECTORY_TOOL_COUNT\s*=\s*(\d+)/);
+  if (!match) {
+    throw new Error(`MCP_DIRECTORY_TOOL_COUNT not declared in ${source}`);
+  }
+  return { count: Number(match[1]), source };
+}
+
+describe("directory tool-count parity — app constant vs real registry", () => {
+  it("MCP_DIRECTORY_TOOL_COUNT equals the registry's advertised surface", () => {
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    const registry = new ToolRegistry(null as any);
+    const advertised = registry.listTools().length;
+    const declared = readDeclaredCount();
+
+    if (advertised !== declared.count) {
+      throw new Error(
+        `Directory tool count drifted: registry advertises ${advertised} tools, ` +
+          `but MCP_DIRECTORY_TOOL_COUNT in ${declared.source} declares ${declared.count}. ` +
+          `Update the constant in the same PR as the tool change.`,
+      );
+    }
+    expect(advertised).toBe(declared.count);
+  });
+});

package/src/__tests__/tools/works.test.ts

@@ -1,4 +1,4 @@
-// Copyright (c) 2024-2026 Withpica Ltd. All rights reserved.
+// Copyright (c) 2025-2026 Withpica Ltd. All rights reserved.
 
 import {
   jest,
@@ -18,6 +18,9 @@ describe("DirectoryWorksTools", () => {
   beforeEach(() => {
     mockClient = {
       request: jest.fn(),
+      workPageUrl: jest.fn(
+        (id: string) => `https://withpica.com/directory/works/${id}`,
+      ),
     } as any;
 
     worksTools = new DirectoryWorksTools(mockClient);

package/src/__tests__/utils/errors.test.ts

@@ -0,0 +1,68 @@
+// Copyright (c) 2025-2026 Withpica Ltd. All rights reserved.
+
+import { describe, it, expect } from "@jest/globals";
+import { formatError, McpServerError } from "../../utils/errors.js";
+
+describe("directory-mcp formatError structured-body decode", () => {
+  it("keeps McpServerError code + message", () => {
+    const result = formatError(
+      new McpServerError("Tool blew up", "TOOL_EXECUTION_ERROR"),
+    );
+    const parsed = JSON.parse(result.text);
+    expect(parsed.error).toBe("TOOL_EXECUTION_ERROR");
+    expect(parsed.message).toBe("Tool blew up");
+  });
+
+  // PICA's api-response.ts errorResponse() emits a nested body where `error`
+  // is an OBJECT: { success: false, error: { code, message, details } }. The
+  // mcp-sdk wraps it as `ApiError("API request failed: <status> <body>")`.
+  // Without decoding, the whole thing collapsed to UNKNOWN_ERROR.
+  it("surfaces code+message from a wrapped nested { error: { code, message } } body", () => {
+    const error = {
+      status: 404,
+      message:
+        "API 404 not found: " +
+        JSON.stringify({
+          success: false,
+          error: {
+            code: "WORK_NOT_FOUND",
+            message: "no work matches that ISWC",
+          },
+        }),
+    };
+    const result = formatError(error);
+    const parsed = JSON.parse(result.text);
+    expect(parsed.error).toBe("WORK_NOT_FOUND");
+    expect(parsed.message).toBe("no work matches that ISWC");
+  });
+
+  it("surfaces code+message from the flat { code, error } convention", () => {
+    const error = {
+      message: JSON.stringify({ code: "BAD_INPUT", error: "nope" }),
+    };
+    const result = formatError(error);
+    const parsed = JSON.parse(result.text);
+    expect(parsed.error).toBe("BAD_INPUT");
+    expect(parsed.message).toBe("nope");
+  });
+
+  it("recovers the real message from a coded-less body (no UNKNOWN noise)", () => {
+    const error = {
+      message: JSON.stringify({
+        success: false,
+        error: { message: "name required" },
+      }),
+    };
+    const result = formatError(error);
+    const parsed = JSON.parse(result.text);
+    expect(parsed.error).toBe("UNKNOWN_ERROR");
+    expect(parsed.message).toBe("name required");
+  });
+
+  it("falls through to UNKNOWN_ERROR for a plain non-JSON error", () => {
+    const result = formatError(new Error("some weird thing"));
+    const parsed = JSON.parse(result.text);
+    expect(parsed.error).toBe("UNKNOWN_ERROR");
+    expect(parsed.message).toBe("some weird thing");
+  });
+});

package/src/client.ts

@@ -1,4 +1,4 @@
-// Copyright (c) 2024-2026 Withpica Ltd. All rights reserved.
+// Copyright (c) 2025-2026 Withpica Ltd. All rights reserved.
 
 const DEFAULT_TIMEOUT_MS = 15_000;
 const MAX_RETRIES = 2;
@@ -37,7 +37,9 @@ export class DirectoryClient {
       return await fetch(url, { ...init, signal: controller.signal });
     } catch (err: any) {
       if (err.name === "AbortError") {
-        throw new Error(`Request timed out after ${timeoutMs}ms: GET ${url}`);
+        throw new Error(
+          `Request timed out after ${timeoutMs}ms: ${init.method ?? "GET"} ${url}`,
+        );
       }
       throw err;
     } finally {
@@ -45,6 +47,40 @@ export class DirectoryClient {
     }
   }
 
+  /** The public page for a directory work, for a human to open. */
+  workPageUrl(workId: string): string {
+    return `${this.baseUrl}/directory/works/${encodeURIComponent(workId)}`;
+  }
+
+  /**
+   * Send a licensing enquiry through the public enquiry route (the same one
+   * the directory's web form uses). ONE attempt, never retried: a retry after
+   * a timeout or a 5xx could store the enquiry twice and email the owner
+   * twice. Resolves with the status and parsed body for every HTTP answer,
+   * so the caller can tell a refusal (400/403/404/429) from a failure;
+   * throws only when no answer arrived.
+   */
+  async sendLicensingEnquiry(
+    body: Record<string, unknown>,
+  ): Promise<{ status: number; json: any }> {
+    const url = `${this.baseUrl}/api/shop/license-enquiries`;
+    if (this.debug) console.error(`[Directory MCP] POST ${url}`);
+    const response = await this.fetchWithTimeout(
+      url,
+      {
+        method: "POST",
+        headers: {
+          Accept: "application/json",
+          "Content-Type": "application/json",
+        },
+        body: JSON.stringify(body),
+      },
+      DEFAULT_TIMEOUT_MS,
+    );
+    const json: any = await response.json().catch(() => null);
+    return { status: response.status, json };
+  }
+
   async request<T>(path: string, params?: Record<string, string>): Promise<T> {
     const url = new URL(`${this.baseUrl}/api/public/directory${path}`);
     if (params) {

package/src/config.ts

@@ -1,4 +1,4 @@
-// Copyright (c) 2024-2026 Withpica Ltd. All rights reserved.
+// Copyright (c) 2025-2026 Withpica Ltd. All rights reserved.
 
 export interface ServerConfig {
   directoryUrl: string;

package/src/index.ts

@@ -1,6 +1,5 @@
 #!/usr/bin/env node
-// Copyright (c) 2024-2026 Withpica Ltd. All rights reserved.
-
+// Copyright (c) 2025-2026 Withpica Ltd. All rights reserved.
 
 import { loadConfig, validateConfig } from "./config.js";
 import { DirectoryMcpServer } from "./server.js";

package/src/lib/changelog.ts

@@ -1,4 +1,4 @@
-// Copyright (c) 2024-2026 Withpica Ltd. All rights reserved.
+// Copyright (c) 2025-2026 Withpica Ltd. All rights reserved.
 
 /**
  * Runtime CHANGELOG parser. Mirrors scripts/parse-changelog.ts but takes

package/src/prompts/index.ts

@@ -1,4 +1,4 @@
-// Copyright (c) 2024-2026 Withpica Ltd. All rights reserved.
+// Copyright (c) 2025-2026 Withpica Ltd. All rights reserved.
 
 /**
  * Prompt Registry for Directory MCP Server
@@ -197,7 +197,7 @@ If I want to BROWSE what's in the directory:
 
 Tell me which workflow you chose and why, in one sentence. Offer alternatives.
 
-Important: This is a read-only public directory. I can search and look up, but I can't create or modify anything. Only works from organisations that opted into the directory are visible.`,
+Important: The directory's catalogue is read-only: I can search and look up, but I can't create or modify anything in it. The one thing I can send, and only if you ask, is a licensing enquiry to a work's owner, with your own name and email. Only works from organisations that opted into the directory are visible.`,
           },
         },
       ],