@withpica/mcp-server 2.85.0 → 2.86.0

package/.claude/settings.local.json

@@ -0,0 +1,5 @@
+{
+  "disabledMcpjsonServers": [
+    "pica-directory"
+  ]
+}

package/CHANGELOG.md

@@ -9,21 +9,38 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 > matching entry here in the same commit. See the project's "npm publish
 > discipline" memory entry for the enforcement rationale.
 
-## [2.85.0] - 2026-07-01
+## [Unreleased]
 
-### Added
+## [2.86.0] - 2026-07-02
 
-- ADR-286 Phase 0 royalty-reconciliation tools: `pica_royalties_unmatched`, `pica_royalties_attribute`.
-- `pica_documents_delete` (clear a failed-to-parse / superseded document + its storage object).
+### Changed
 
-## [Unreleased]
+- **`pica_merge_duplicates`** — now `approvalMode:"human"` (ADR-288): a
+  delegated-agent caller (OAuth connector / `pica_grant_*`) no longer gets
+  refused — the call freezes into a pending human approval, the org owner
+  approves out-of-band, and PICA replays the frozen merge server-side.
+  Blocked merges (custody provenance, distinct-ISRC losers, tunecode
+  collision) fail the approval cleanly with the blocking reason and zero
+  partial mutation. Resource scope corrected `admin` → `write:catalog`
+  (matching the backing route) so catalog-scoped delegated agents can
+  propose; first-party callers still need the destructive tier as before.
+
+## [2.85.1] - 2026-07-01
+
+### Changed
+
+- **`pica_releases_create_with_tracks`** — accept `parent_label` on the nested
+  `release` object, completing the `parent_label` write path (create + update
+  landed in 2.85.0). The RPC and service already persisted it; the tool schema
+  omitted it, so the atomic-create path silently dropped the field (agent
+  feedback `eee77119`).
+
+## [2.85.0] - 2026-07-01
 
 ### Added
 
-- **`pica_documents_delete`** — delete an uploaded document and its underlying
-  storage object (parity with `pica_audio_delete` / `pica_releases_delete`).
-  Clears a failed-to-parse (`parsing_status:'failed'`) or superseded document so
-  a clean copy can be re-uploaded (agent feedback `30889bf2`).
+- ADR-286 Phase 0 royalty-reconciliation tools: `pica_royalties_unmatched`, `pica_royalties_attribute`.
+- `pica_documents_delete` (clear a failed-to-parse / superseded document + its storage object).
 
 ### Changed