@withpica/mcp-server 2.64.0 → 2.66.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (37) hide show
  1. package/CHANGELOG.md +18 -0
  2. package/dist/apps/generated/shared-bundle.d.ts +1 -1
  3. package/dist/apps/generated/shared-bundle.d.ts.map +1 -1
  4. package/dist/apps/generated/shared-bundle.js +1 -1
  5. package/dist/apps/generated/shared-bundle.js.map +1 -1
  6. package/dist/lib/changelog.generated.d.ts +2 -2
  7. package/dist/lib/changelog.generated.d.ts.map +1 -1
  8. package/dist/lib/changelog.generated.js +2 -2
  9. package/dist/lib/changelog.generated.js.map +1 -1
  10. package/dist/tools/agreements.d.ts +1 -0
  11. package/dist/tools/agreements.d.ts.map +1 -1
  12. package/dist/tools/agreements.js +69 -0
  13. package/dist/tools/agreements.js.map +1 -1
  14. package/dist/tools/approvals.d.ts +29 -0
  15. package/dist/tools/approvals.d.ts.map +1 -0
  16. package/dist/tools/approvals.js +99 -0
  17. package/dist/tools/approvals.js.map +1 -0
  18. package/dist/tools/discovery.d.ts.map +1 -1
  19. package/dist/tools/discovery.js +8 -2
  20. package/dist/tools/discovery.js.map +1 -1
  21. package/dist/tools/index.d.ts +13 -0
  22. package/dist/tools/index.d.ts.map +1 -1
  23. package/dist/tools/index.js +6 -0
  24. package/dist/tools/index.js.map +1 -1
  25. package/dist/tools/metadata.d.ts.map +1 -1
  26. package/dist/tools/metadata.js +12 -0
  27. package/dist/tools/metadata.js.map +1 -1
  28. package/dist/tools/people.d.ts.map +1 -1
  29. package/dist/tools/people.js +9 -1
  30. package/dist/tools/people.js.map +1 -1
  31. package/dist/tools/recovery-hints.d.ts.map +1 -1
  32. package/dist/tools/recovery-hints.js +17 -0
  33. package/dist/tools/recovery-hints.js.map +1 -1
  34. package/dist/tools/team.js +1 -1
  35. package/dist/tools/team.js.map +1 -1
  36. package/package.json +3 -3
  37. package/server.json +2 -2
package/CHANGELOG.md CHANGED
@@ -11,6 +11,24 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
11
11
 
12
12
  ## [Unreleased]
13
13
 
14
+ ## [2.66.0] - 2026-06-01
15
+
16
+ ADR-250 human-in-the-loop approval goes live, plus the close-out batch carried by this release.
17
+
18
+ ### Added
19
+
20
+ - **`pica_approval_status`** — read-only poll for an out-of-band human approval. When a delegated-agent destructive write is deferred, the dispatcher returns a `human_approval_required` envelope carrying an `approval_reference`; pass that as `approval_id` to check whether the grant owner has decided (`pending` / `approved` / `denied` / `expired` / `executed` / `failed`) and when/how. Ownership is enforced server-side — a foreign approval comes back as `not_found`, never a leak. ADR-250 PR-c.
21
+
22
+ ### Changed
23
+
24
+ - **ADR-250 human-in-the-loop approval gate is active.** `pica_people_bulk_delete` now carries `approvalMode: "human"`: a delegated-agent caller proposes the deletion, the grant owner approves out-of-band, and PICA replays the frozen params server-side. Session and first-party-key callers fall through to the existing `dry_run`/destructive path unchanged. The tool stays connector-reachable rather than blanket-excluded.
25
+
26
+ ## [2.65.0] - 2026-05-30
27
+
28
+ ### Added
29
+
30
+ - **`pica_agreement_source_splits`** — reconcile the per-party splits you extracted from an uploaded agreement against a work's composition credits and source them if they match (±0.5% tolerance, 0.8 confidence gate). Outcomes: `sourced`, `needs_confirmation` (re-call with `confirm:true`), `discrepancy` (a finding, surfaced on `/inspect`). Split-source provenance phase 2. Requires `@withpica/mcp-sdk` ^1.35.0.
31
+
14
32
  ## [2.64.0] - 2026-05-30
15
33
 
16
34
  ADR-252 WS-A surface alignment + the ADR-247 agent-hygiene crash fix. Requires `@withpica/mcp-sdk@^1.34.0`.