@withpica/mcp-server 2.9.0 → 2.11.0

package/CHANGELOG.md

@@ -0,0 +1,222 @@
+# Changelog
+
+All notable changes to `@withpica/mcp-server` will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+> **Rule of the road:** every version bump to this package MUST land with a
+> matching entry here in the same commit. See the project's "npm publish
+> discipline" memory entry for the enforcement rationale.
+
+## [Unreleased]
+
+## [2.11.0] — 2026-04-13
+
+### Changed
+
+- **ADR-171: Prompts replaced with workflow-level skills.**
+  11 prompts → 10 skills, each with decision trees, domain knowledge,
+  enrichment source priority, and the shared preamble (tone, prerequisite
+  check, summary pattern). Deployed as upgraded prompts; will convert to
+  MCP skills format when the spec extension ships.
+
+  New skills: `workspace-autopilot`, `establish-identity`,
+  `catalog-your-music`, `upload-and-analyse`, `close-the-loop`,
+  `manage-collaborators`, `establish-ownership`, `production-assets`,
+  `stay-connected`, `export-and-report`.
+
+  Retired prompts: `analyze-catalog`, `find-duplicates`,
+  `enrich-metadata`, `verify-works`, `assess-catalog-health`,
+  `audit-credits`, `new-catalog-setup`, `register-my-works`,
+  `prepare-for-sync`. Functionality folded into new skills —
+  see design spec for mapping.
+
+  - `workspace-autopilot` now routes through the full journey sequence
+    (identity → catalog → audio → gaps → collaborators → ownership →
+    notifications → exports) instead of the old 5-condition router.
+  - `close-the-loop` absorbs 7 former prompts and adds the enrichment
+    cascade decision tree (MLC first if IPI, MusicBrainz second, Spotify
+    third) and inline duplicate detection.
+  - `export-and-report` absorbs `analyze-catalog`, `register-my-works`,
+    and `prepare-for-sync` into a single export/report skill with CAR,
+    CWR, CSV, provenance, sync readiness, and carbon footprint paths.
+
+## [2.10.0] — 2026-04-11
+
+### Added
+
+- **ADR-163: Tier B enrichment proposal review tools.**
+  - `pica_enrichment_proposals_list` — list pending proposals
+    awaiting review. Filters: `entity_type`, `entity_id`,
+    `rule_id`, `source`, `limit` (1..100, default 20), `offset`.
+    Only `status='pending'` rows are returned. Backed by
+    `GET /api/admin/enrichment-proposals`.
+  - `pica_enrichment_proposal_apply` — apply a pending proposal.
+    For update proposals, runs drift detection first: if the
+    entity has changed since the proposal was created, returns
+    `{ status: 'drift_detected', conflicts }` without writing.
+    Agents surface conflicts to the user before retrying with
+    `force=true`. For create proposals (`artist_title_to_youtube`),
+    a uniqueness check runs instead and cannot be forced. Backed
+    by `POST /api/admin/enrichment-proposals/:id/apply`.
+  - `pica_enrichment_proposal_reject` — reject a pending proposal
+    with an optional `resolution_note`. Content-hash suppression
+    (ADR-163) permanently blocks re-proposal of identical content
+    — no cooldown, no timer. Backed by
+    `POST /api/admin/enrichment-proposals/:id/reject`.
+
+- **ADR-166: YouTube import as a recording-version source.**
+  - `pica_import_youtube_link` MCP tool wraps the Phase 3 orchestrator.
+    Takes a YouTube URL, returns a preview (items + classification +
+    work match), then `confirm: true` executes the import as a new
+    recording on an existing or newly-created work. Supports
+    `selectedVideoIds`, `targetWorkId`, and `overrideVersionType`
+    for fine-grained agent control. Landed in `78da58344`
+    (feat(adr-166): phase 4 — pica_import_youtube_link MCP tool + SDK
+    methods).
+
+### Changed
+
+- `pica_cascade_health` outcome bucket list extended to include
+  the ADR-163 Phase 1 `proposed` and `suppressed` outcomes. Tool
+  description now reads `wrote / no_match / already_enriched /
+error / proposed / suppressed`. Counters populate automatically
+  from `cascadeOutcomeCounter` — no schema change required for
+  existing `/api/admin/cascade-health` or
+  `/api/internal/cascade-health` consumers.
+
+- Several mcp-server source files got minor reformatting from ADR-165's
+  flattener strip (removing `work_spotify_data` + `work_album_metadata`
+  fields from the Work shape) and ADR-166's cascade rule rewrites.
+  These are consumer-invisible at the MCP tool surface — the tools
+  still accept the same inputs and return the same outputs — but the
+  underlying `PicaClient.works` reads + writes now route through the
+  ADR-165 overlay. See the ADR-165 and ADR-166 implementation records
+  for details.
+
+### Fixed
+
+- `pica_run_person_cascade` tool description had a dangling
+  `→ then: pica_people_inspect` chain with no parenthetical reason hint,
+  which the `composability-chains.test.ts` linter caught as a content
+  bug. Description updated to `→ then: pica_people_inspect (see what
+the cascade wrote)`. Fixed in `3a2843636` (test(mcp-server): fix 10
+  pre-existing test failures across 8 suites).
+
+### Notes
+
+- Backwards-compatible minor bump. Three new tools, one widened
+  description, no removals or signature changes.
+- Depends on `@withpica/mcp-sdk@^1.4.0` for the new
+  `EnrichmentResource.listEnrichmentProposals` /
+  `applyEnrichmentProposal` / `rejectEnrichmentProposal` methods.
+- Source additions landed across ADR-163 Phase 3d (`ff9cf265a`) and
+  Phase 6 (`ff97faa56`).
+- Registry: https://www.npmjs.com/package/@withpica/mcp-server/v/2.10.0
+- Published alongside `@withpica/mcp-sdk@1.4.0` and
+  `@withpica/mcp-server-business@1.3.0` in ADR-163 Phase 6.
+
+## [2.9.0] — 2026-04-11
+
+### Added
+
+- **ADR-164 audit follow-up: three new cascade MCP tools**
+  - `pica_run_work_cascade(work_id)` — manually re-evaluate a work
+    against every ADR-164 cascade rule and fire those whose
+    preconditions are satisfied. Idempotent. Fire-and-forget. Backed by
+    `POST /api/admin/works/:id/cascade-run`.
+  - `pica_run_person_cascade(person_id)` — same for people. Fires
+    `ipi_to_mlc_works` (MLC writer/publisher splits),
+    `mbid_to_wikidata_crosswalk`, `isni_to_wikidata_crosswalk`,
+    `wikidata_to_awards`, `wikidata_to_biography`, and
+    `google_contact_suggest`. Backed by
+    `POST /api/admin/people/:id/cascade-run`.
+  - `pica_cascade_health` — snapshot of in-process cascade counters
+    (ADR-164 Decision 5). Org-auth twin of the operator-only
+    `/api/internal/cascade-health` endpoint. Returns per-rule failure
+    counts bucketed by reason + outcome totals. Process-global, not
+    persistent across serverless cold starts — treat as a spot-check.
+
+### Notes
+
+- Source additions landed in `38901f281` (ADR-164 audit follow-ups).
+  Version bump + rebuilt dist + publish tagged in `edfbcb07b`.
+- Minor bump per semver — new tools, no removed or renamed surface.
+- Registry URL:
+  https://www.npmjs.com/package/@withpica/mcp-server/v/2.9.0
+- Tarball verified post-publish by pulling
+  `withpica-mcp-server-2.9.0.tgz` from the registry and grepping for
+  all three new tool names in `package/dist/tools/enrichment.js`.
+
+## [2.8.0] — 2026-04-10
+
+### Changed
+
+- **ADR-162: subscription-based billing, credit gating disabled.**
+  `withCreditGate` is now a pass-through — all tools are free for
+  active subscribers. The MPP (Micropayment Protocol) machinery is
+  retained in `@withpica/mcp-utils` for a future pay-per-credit
+  re-enable but is dormant. Version bump carried in `7c4f5d24a`
+  (`chore(adr-162): version bumps for npm publish`).
+
+## [2.7.0] — 2026-04-08
+
+### Added
+
+- **ADR-158c custody tool release.** Six `pica_custody_*` tools go
+  live: claim, accept, decline, dispute, incoming list, history.
+  Version bump in `91dd1c275` (`chore(adr-158c): version bumps for
+custody tool release (Phase 6b)`).
+
+## [2.6.2] — pre-2026-04-08
+
+### Fixed
+
+- Stale version constant in the boot banner — the banner was still
+  reporting an older version after an earlier bump. Fixed in
+  `980dabc02` (`fix(mcp-server): correct stale version constant in
+boot banner (2.6.2)`).
+
+## [2.6.1] — pre-2026-04-08
+
+### Fixed
+
+- MCP server now emits `tools/list_changed` + `resources/list_changed`
+  notifications after sign-in and sign-out, so clients refresh the
+  tool list without a reconnect. Fixed in `f1ba2a211`.
+
+## [2.6.0] — 2026-04-07
+
+### Changed
+
+- **ADR-155 launch — publish 6 packages.** Catalog server rebaselined
+  from the broken `3.0.0` publish (deprecated + unpublished from npm
+  because `file:` deps had been baked into the tarball, leaving every
+  fresh installer dead) to `2.6.0`. Five new sibling packages
+  (`@withpica/mcp-sdk`, `@withpica/mcp-utils`,
+  `@withpica/mcp-server-business`, `-enrichment`, `-settings`)
+  published at `1.0.0` alongside with real semver deps so `npm
+install` actually resolves on user machines.
+- `connect.withpica.com` leads with the no-api-key lobby-mode flow.
+  Landed in `e235aed40` (`feat(mcp): ADR-155 launch — publish 6
+packages, lobby-mode connect copy`).
+
+## Pre-2.6.0 — pre-changelog era
+
+Earlier versions (`2.0.0` through `2.5.x`) covered the pre-ADR-155
+monolithic MCP server. Version history for that era is reconstructable
+via `git log --follow -- mcp-server/package.json`. Notable milestones:
+
+- `2.5.x` — MCP Apps prebuild script + ext-apps devDependency added
+- `2.4.x` — build/publish polish, `.vercel/` excluded from tarball
+- `~2.0.0` — ADR-149 agentic hardening (write tiers, ProposedAction,
+  confirmation, audit, annotations)
+
+[Unreleased]: https://github.com/withpica/pica/compare/edfbcb07b...HEAD
+[2.9.0]: https://github.com/withpica/pica/compare/7c4f5d24a...edfbcb07b
+[2.8.0]: https://github.com/withpica/pica/compare/91dd1c275...7c4f5d24a
+[2.7.0]: https://github.com/withpica/pica/compare/980dabc02...91dd1c275
+[2.6.2]: https://github.com/withpica/pica/compare/f1ba2a211...980dabc02
+[2.6.1]: https://github.com/withpica/pica/compare/e235aed40...f1ba2a211
+[2.6.0]: https://github.com/withpica/pica/commit/e235aed40

package/dist/config.d.ts

@@ -1,13 +1,13 @@
 export interface ServerConfig {
-  picaApiKey: string | null;
-  picaApiUrl: string;
-  serverName: string;
-  version: string;
-  debug: boolean;
-  lobbyMode: boolean;
-  credentialsPath: string;
-  discoveryMode: boolean;
+    picaApiKey: string | null;
+    picaApiUrl: string;
+    serverName: string;
+    version: string;
+    debug: boolean;
+    lobbyMode: boolean;
+    credentialsPath: string;
+    discoveryMode: boolean;
 }
 export declare function loadConfig(): ServerConfig;
 export declare function validateConfig(config: ServerConfig): void;
-//# sourceMappingURL=config.d.ts.map
+//# sourceMappingURL=config.d.ts.map

package/dist/index.d.ts

@@ -1,3 +1,3 @@
 #!/usr/bin/env node
 export {};
-//# sourceMappingURL=index.d.ts.map
+//# sourceMappingURL=index.d.ts.map

package/dist/prompts/index.d.ts

@@ -1,78 +1,46 @@
 /**
- * Prompt Registry for MCP Server
- * Manages pre-configured prompts for common workflows
+ * Skill Registry for MCP Server
+ * Workflow-level skills with decision trees and domain knowledge.
+ * Deployed as upgraded prompts; will convert to MCP skills format
+ * when the spec extension ships (ADR-171).
  */
 export interface PromptDefinition {
-  name: string;
-  description: string;
-  arguments?: Array<{
     name: string;
     description: string;
-    required?: boolean;
-  }>;
+    arguments?: Array<{
+        name: string;
+        description: string;
+        required?: boolean;
+    }>;
 }
 export interface PromptMessage {
-  role: "user" | "assistant";
-  content: {
-    type: string;
-    text: string;
-  };
+    role: "user" | "assistant";
+    content: {
+        type: string;
+        text: string;
+    };
 }
 export interface PromptResult {
-  messages: PromptMessage[];
+    messages: PromptMessage[];
 }
 export declare class PromptRegistry {
-  /**
-   * List all available prompts
-   */
-  listPrompts(): PromptDefinition[];
-  /**
-   * Get a prompt by name
-   */
-  getPrompt(name: string, args?: Record<string, any>): Promise<any>;
-  /**
-   * Analyze catalog prompt
-   */
-  private getAnalyzeCatalogPrompt;
-  /**
-   * Find duplicates prompt
-   */
-  private getFindDuplicatesPrompt;
-  /**
-   * Enrich metadata prompt
-   */
-  private getEnrichMetadataPrompt;
-  /**
-   * Verify works prompt
-   */
-  private getVerifyWorksPrompt;
-  /**
-   * Assess catalog health prompt
-   */
-  private getAssessCatalogHealthPrompt;
-  /**
-   * Audit credits prompt
-   */
-  private getAuditCreditsPrompt;
-  /**
-   * New catalog setup prompt — first-time onboarding
-   */
-  private getNewCatalogSetupPrompt;
-  /**
-   * Close the loop — check a specific work's gaps and offer to fix each one
-   */
-  private getCloseTheLoopPrompt;
-  /**
-   * Register my works — check registration status and prepare for PRO submission
-   */
-  private getRegisterMyWorksPrompt;
-  /**
-   * Workspace autopilot — assess state and route to the right workflow
-   */
-  private getWorkspaceAutopilotPrompt;
-  /**
-   * Prepare for sync — get catalog sync-ready
-   */
-  private getPrepareForSyncPrompt;
+    /**
+     * List all available skills
+     */
+    listPrompts(): PromptDefinition[];
+    /**
+     * Get a skill by name
+     */
+    getPrompt(name: string, args?: Record<string, any>): Promise<any>;
+    private getWorkspaceAutopilotSkill;
+    private getEstablishIdentitySkill;
+    private getCatalogYourMusicSkill;
+    private getUploadAndAnalyseSkill;
+    private getCloseTheLoopSkill;
+    private getManageCollaboratorsSkill;
+    private getEstablishOwnershipSkill;
+    private getProductionAssetsSkill;
+    private getStayConnectedSkill;
+    private getExportAndReportSkill;
 }
-//# sourceMappingURL=index.d.ts.map
+//# sourceMappingURL=index.d.ts.map

package/dist/prompts/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/prompts/index.ts"],"names":[],"mappings":"AAEA;;;GAGG;AAEH,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,KAAK,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,EAAE,OAAO,CAAC;KACpB,CAAC,CAAC;CACJ;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,GAAG,WAAW,CAAC;IAC3B,OAAO,EAAE;QACP,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;CACH;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,aAAa,EAAE,CAAC;CAC3B;AAED,qBAAa,cAAc;IACzB;;OAEG;IACH,WAAW,IAAI,gBAAgB,EAAE;IA6EjC;;OAEG;IACG,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC;IAwCvE;;OAEG;IACH,OAAO,CAAC,uBAAuB;IA8B/B;;OAEG;IACH,OAAO,CAAC,uBAAuB;IA+B/B;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAgC/B;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAgC5B;;OAEG;IACH,OAAO,CAAC,4BAA4B;IA+BpC;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAkC7B;;OAEG;IACH,OAAO,CAAC,wBAAwB;IAsChC;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAuC7B;;OAEG;IACH,OAAO,CAAC,wBAAwB;IAmChC;;OAEG;IACH,OAAO,CAAC,2BAA2B;IA+CnC;;OAEG;IACH,OAAO,CAAC,uBAAuB;CAoChC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/prompts/index.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AAEH,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,KAAK,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,EAAE,OAAO,CAAC;KACpB,CAAC,CAAC;CACJ;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,GAAG,WAAW,CAAC;IAC3B,OAAO,EAAE;QACP,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;CACH;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,aAAa,EAAE,CAAC;CAC3B;AAkBD,qBAAa,cAAc;IACzB;;OAEG;IACH,WAAW,IAAI,gBAAgB,EAAE;IAuEjC;;OAEG;IACG,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC;IAqCvE,OAAO,CAAC,0BAA0B;IA2ElC,OAAO,CAAC,yBAAyB;IAwDjC,OAAO,CAAC,wBAAwB;IAsEhC,OAAO,CAAC,wBAAwB;IA4DhC,OAAO,CAAC,oBAAoB;IA2F5B,OAAO,CAAC,2BAA2B;IAsEnC,OAAO,CAAC,0BAA0B;IA0ElC,OAAO,CAAC,wBAAwB;IA2DhC,OAAO,CAAC,qBAAqB;IA8D7B,OAAO,CAAC,uBAAuB;CA+EhC"}