@withpica/mcp-server 2.85.1 → 2.86.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md CHANGED
@@ -11,6 +11,20 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
11
11
 
12
12
  ## [Unreleased]
13
13
 
14
+ ## [2.86.0] - 2026-07-02
15
+
16
+ ### Changed
17
+
18
+ - **`pica_merge_duplicates`** — now `approvalMode:"human"` (ADR-288): a
19
+ delegated-agent caller (OAuth connector / `pica_grant_*`) no longer gets
20
+ refused — the call freezes into a pending human approval, the org owner
21
+ approves out-of-band, and PICA replays the frozen merge server-side.
22
+ Blocked merges (custody provenance, distinct-ISRC losers, tunecode
23
+ collision) fail the approval cleanly with the blocking reason and zero
24
+ partial mutation. Resource scope corrected `admin` → `write:catalog`
25
+ (matching the backing route) so catalog-scoped delegated agents can
26
+ propose; first-party callers still need the destructive tier as before.
27
+
14
28
  ## [2.85.1] - 2026-07-01
15
29
 
16
30
  ### Changed