@withpica/mcp-server 2.60.0 → 2.62.0

package/CHANGELOG.md

@@ -11,6 +11,31 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [2.62.0] - 2026-05-24
+
+ADR-247 (Agent Hygiene) sprint. After this version, every OAuth-Bearer / raw-API-key caller must declare itself via `pica_introduce_self` on first use, and every successful write-tier tool call is durably recorded in `workflow_outcomes` (the symmetric counterpart to `ops_issues` for errors).
+
+### Added
+
+- **`pica_introduce_self`** — first-call identity declaration. Required for OAuth-Bearer and raw-API-key callers; cookie + `pica_grant_*` callers are carved out at the router (their identity is on file at the auth boundary). `tier: "write"`. Inputs: `agent_name` (required), `agent_role`, `on_behalf_of`, `model_hint`. Declaration is valid 24h per credential; the router's hard introduction gate returns `412 IDENTITY_REQUIRED` until this lands. Backed by `AgentIntroductionsResource.declare` in `@withpica/mcp-sdk@1.33.0`.
+- **`pica_outcome_log`** — agent-explicit workflow / milestone log. `tier: "write"`. Inputs: `kind` (required free-form — typical: 'workflow_completed' / 'milestone_hit'), optional `entity_refs[]` (UUID-validated server-side), `summary`, `agent_summary`. Throws on failure (unlike the auto-fire path which is fire-and-forget) so the agent gets useful feedback. Backed by `WorkflowOutcomesResource.log`.
+- **`pica_outcomes_recent`** — read recent workflow outcomes for the current org. `tier: "read"`. Returns rows ordered by `last_seen_at DESC`, signature-deduped (repeat workflows collapse with `occurrence_count` incrementing). Captures both the auto-fire path (every write-tier MCP success) and the agent-explicit path (`pica_outcome_log` calls). Optional `kind` / `source` filters. Default limit 20, max 100.
+
+### Changed
+
+- **`pica_dashboard_briefing` response gains an `agent_velocity` block** when the org has workflow_outcomes activity in the trailing 7d. Shape: `{window_days: 7, count_7d, by_kind, top_tools: [{tool_name, count}]}`. Coherence contract: `count_7d == sum(by_kind values)`. Complements the existing `agent_activity` block (which is mcp_audit_log call counts by tier) — same window, different lens: `agent_activity` is "how many calls", `agent_velocity` is "what workflows actually completed / refused / nudged".
+- **`pica_dashboard_pulse` deprecated.** Still callable (backwards-compat for N+2 releases) but `vernacular_kind` dropped from `creator-entry` to `specialist`. The Creator Question Atlas resolver for "give me the pulse" / "how's my catalog" now routes to `pica_dashboard_briefing` instead. Tool description prefixed with the deprecation notice + redirect. Deadlines/revenue/background-task signals pulse uniquely carried will land as `pica_dashboard_velocity` in a future ADR.
+
+## [2.61.0] - 2026-05-23
+
+### Changed
+
+- **`pica_provenance_certificate` is now actually callable.** The tool's description has always been "Generate a provenance certificate", but the underlying SDK call did `GET /admin/works/[id]/certificate`, which 404s on any work without a pre-existing certificate. After bumping `@withpica/mcp-sdk@1.32.0`, the tool's executor POSTs to the same path and generates the certificate row. Closes ops_issues c3e64ee2 (NOT_FOUND, 2 events) and b2dddfee (AUTHENTICATION_ERROR, same caller, pre-OAuth-refresh flake). Description updated to disclose that each call writes a new row.
+
+### Added
+
+- **`pica_provenance_certificate_get`** — companion tool for the read path. `tier: "read"`, `risk: "safe"`, fetches an existing certificate row without regenerating. Returns 404 NOT_FOUND if no certificate has been generated yet; callers fall back to `pica_provenance_certificate` in that case. Registered alongside the existing generator in `analytics`, `metadata`, `recovery-hints`, `discovery`, and `public-filter`.
+
 ## [2.60.0] - 2026-05-23
 
 Exports release. The four catalog export tools accept per-work scope, the catalog export tool's schema matches what the backend actually validates, and `pica_execute` is forgiving of the three call shapes agents emit in the wild.