@withpica/mcp-server 2.95.0 → 2.95.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (141) hide show
  1. package/CHANGELOG.md +19 -0
  2. package/dist/apps/download.js +1 -1
  3. package/dist/apps/release.js +1 -1
  4. package/dist/apps/shared.js +1 -1
  5. package/dist/apps/upload.js +1 -1
  6. package/dist/config.js +1 -1
  7. package/dist/index.js +1 -1
  8. package/dist/lib/changelog.generated.d.ts +2 -2
  9. package/dist/lib/changelog.generated.d.ts.map +1 -1
  10. package/dist/lib/changelog.generated.js +3 -3
  11. package/dist/lib/changelog.generated.js.map +1 -1
  12. package/dist/lib/changelog.js +1 -1
  13. package/dist/prompts/creator-question-atlas.js +1 -1
  14. package/dist/prompts/index.js +1 -1
  15. package/dist/resources/agent-guide.js +1 -1
  16. package/dist/resources/index.js +1 -1
  17. package/dist/resources/llms-primer.js +1 -1
  18. package/dist/resources/release-notes.js +1 -1
  19. package/dist/resources/required-schemas.generated.js +1 -1
  20. package/dist/resources/required-schemas.source.js +1 -1
  21. package/dist/resources/welcome.js +1 -1
  22. package/dist/server-instructions.js +1 -1
  23. package/dist/server.js +1 -1
  24. package/dist/skills/index.js +1 -1
  25. package/dist/skills/skills.generated.js +1 -1
  26. package/dist/tools/access-simulate.js +1 -1
  27. package/dist/tools/agent-hygiene.js +1 -1
  28. package/dist/tools/agent-identity.js +1 -1
  29. package/dist/tools/agreement-types.js +1 -1
  30. package/dist/tools/agreements.js +1 -1
  31. package/dist/tools/analytics.js +1 -1
  32. package/dist/tools/app-tools.js +1 -1
  33. package/dist/tools/approvals.js +1 -1
  34. package/dist/tools/assets.js +1 -1
  35. package/dist/tools/audio-files.js +1 -1
  36. package/dist/tools/audit.js +1 -1
  37. package/dist/tools/auth.d.ts.map +1 -1
  38. package/dist/tools/auth.js +13 -3
  39. package/dist/tools/auth.js.map +1 -1
  40. package/dist/tools/bookings.d.ts.map +1 -1
  41. package/dist/tools/bookings.js +1 -1
  42. package/dist/tools/bookings.js.map +1 -1
  43. package/dist/tools/bulk.js +1 -1
  44. package/dist/tools/calendar.js +1 -1
  45. package/dist/tools/collaborations.js +1 -1
  46. package/dist/tools/collaborators.js +1 -1
  47. package/dist/tools/comparisons.js +1 -1
  48. package/dist/tools/credits.js +1 -1
  49. package/dist/tools/custody-hints.js +1 -1
  50. package/dist/tools/custody.js +1 -1
  51. package/dist/tools/dashboard.d.ts +10 -1
  52. package/dist/tools/dashboard.d.ts.map +1 -1
  53. package/dist/tools/dashboard.js +19 -3
  54. package/dist/tools/dashboard.js.map +1 -1
  55. package/dist/tools/deprecations.js +1 -1
  56. package/dist/tools/directory.js +1 -1
  57. package/dist/tools/discovery.js +1 -1
  58. package/dist/tools/disputes.js +1 -1
  59. package/dist/tools/documents.d.ts.map +1 -1
  60. package/dist/tools/documents.js +21 -3
  61. package/dist/tools/documents.js.map +1 -1
  62. package/dist/tools/duplicates.js +2 -2
  63. package/dist/tools/duplicates.js.map +1 -1
  64. package/dist/tools/enrichment.js +1 -1
  65. package/dist/tools/explainability.js +1 -1
  66. package/dist/tools/exports.js +1 -1
  67. package/dist/tools/feedback.js +1 -1
  68. package/dist/tools/files.js +1 -1
  69. package/dist/tools/forbidden-keywords.js +1 -1
  70. package/dist/tools/gap-hints.js +1 -1
  71. package/dist/tools/groups.js +1 -1
  72. package/dist/tools/import-documents.js +1 -1
  73. package/dist/tools/import.js +1 -1
  74. package/dist/tools/index.d.ts.map +1 -1
  75. package/dist/tools/index.js +12 -8
  76. package/dist/tools/index.js.map +1 -1
  77. package/dist/tools/integrity-hints.js +1 -1
  78. package/dist/tools/integrity.d.ts.map +1 -1
  79. package/dist/tools/integrity.js +2 -1
  80. package/dist/tools/integrity.js.map +1 -1
  81. package/dist/tools/labels.js +1 -1
  82. package/dist/tools/licensing.d.ts.map +1 -1
  83. package/dist/tools/licensing.js +3 -2
  84. package/dist/tools/licensing.js.map +1 -1
  85. package/dist/tools/memory.js +1 -1
  86. package/dist/tools/metadata.js +1 -1
  87. package/dist/tools/multimedia.js +1 -1
  88. package/dist/tools/my-recent-questions.js +1 -1
  89. package/dist/tools/my-reported-issues.js +1 -1
  90. package/dist/tools/notes.js +1 -1
  91. package/dist/tools/notifications.js +1 -1
  92. package/dist/tools/onboarding.js +1 -1
  93. package/dist/tools/party-claims.js +1 -1
  94. package/dist/tools/people.js +1 -1
  95. package/dist/tools/projects.js +1 -1
  96. package/dist/tools/public-filter.js +1 -1
  97. package/dist/tools/publishers.js +1 -1
  98. package/dist/tools/purchases.js +1 -1
  99. package/dist/tools/recording-attribution-hints.js +1 -1
  100. package/dist/tools/recording-custody.js +1 -1
  101. package/dist/tools/recording-samples.js +1 -1
  102. package/dist/tools/recordings.js +1 -1
  103. package/dist/tools/recovery-hints.js +1 -1
  104. package/dist/tools/register.js +1 -1
  105. package/dist/tools/release-notes.js +1 -1
  106. package/dist/tools/release-rich.js +1 -1
  107. package/dist/tools/releases.js +1 -1
  108. package/dist/tools/report-issue.js +1 -1
  109. package/dist/tools/royalties.js +1 -1
  110. package/dist/tools/search.js +1 -1
  111. package/dist/tools/send.js +1 -1
  112. package/dist/tools/sessions.js +1 -1
  113. package/dist/tools/settings.js +1 -1
  114. package/dist/tools/share-links.js +1 -1
  115. package/dist/tools/share-send.js +1 -1
  116. package/dist/tools/sharing.js +1 -1
  117. package/dist/tools/signup.js +1 -1
  118. package/dist/tools/skills.js +1 -1
  119. package/dist/tools/split-sheets.js +1 -1
  120. package/dist/tools/statements.js +1 -1
  121. package/dist/tools/storage-config.js +1 -1
  122. package/dist/tools/subscription.js +1 -1
  123. package/dist/tools/sync-placements.js +1 -1
  124. package/dist/tools/telegram.d.ts.map +1 -1
  125. package/dist/tools/telegram.js +1 -1
  126. package/dist/tools/telegram.js.map +1 -1
  127. package/dist/tools/uploads.js +1 -1
  128. package/dist/tools/users.js +1 -1
  129. package/dist/tools/version-guard.d.ts.map +1 -1
  130. package/dist/tools/version-guard.js +38 -7
  131. package/dist/tools/version-guard.js.map +1 -1
  132. package/dist/tools/works.js +2 -2
  133. package/dist/tools/works.js.map +1 -1
  134. package/jest.global-setup.cjs +1 -1
  135. package/package.json +1 -1
  136. package/scripts/build-changelog.ts +2 -2
  137. package/scripts/build-required-schemas.ts +2 -2
  138. package/scripts/build-skills.ts +2 -2
  139. package/scripts/bundle-apps.ts +1 -1
  140. package/scripts/refresh-schema-mirror.ts +1 -1
  141. package/server.json +2 -2
package/CHANGELOG.md CHANGED
@@ -9,6 +9,25 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
9
9
  > matching entry here in the same commit. See the project's "npm publish
10
10
  > discipline" memory entry for the enforcement rationale.
11
11
 
12
+ ## [Unreleased]
13
+
14
+ ## [2.95.1] - 2026-07-27
15
+
16
+ ### Added
17
+
18
+ - `pica_works_bulk_move_to_performances` now carries the `http` audience, matching its sibling `pica_works_bulk_delete` — the tool becomes reachable on the hosted connector surface at the next release. No auth change: the backing route already gated on `write:catalog` + `destructive:*`, identical to bulk-delete, and `risk: "destructive"` keeps it off unauthenticated public discovery. (Lands the branch parked 2026-07-13 to fold the connector-surface change into a batch; the WS5 batch shipped in 2.95.0, expiring the parking condition.)
19
+
20
+ ### Fixed
21
+
22
+ - **Bulk reads over the 100KB cap now return complete records plus a real
23
+ resume cursor, never a mid-record cut** (ops 41ff656c / 893e3e29). The
24
+ dispatcher routes every result through `guardToolResult`
25
+ (`@withpica/mcp-utils@1.27.0`): oversized LIST responses are trimmed to
26
+ whole items and stamped with `truncated`, `items_dropped`, `next_offset`
27
+ (offset-paging tools) and `recovery_hint` — in both the text view (still
28
+ valid JSON) and `structuredContent`, which previously escaped the cap
29
+ entirely. Non-list shapes keep the legacy text truncation.
30
+
12
31
  ## [2.95.0] - 2026-07-24
13
32
 
14
33
  ### Added
@@ -1,4 +1,4 @@
1
- // Copyright (c) 2024-2026 Withpica Ltd. All rights reserved.
1
+ // Copyright (c) 2025-2026 Withpica Ltd. All rights reserved.
2
2
  /**
3
3
  * pica_download MCP App card — file delivery.
4
4
  *
@@ -1,4 +1,4 @@
1
- // Copyright (c) 2024-2026 Withpica Ltd. All rights reserved.
1
+ // Copyright (c) 2025-2026 Withpica Ltd. All rights reserved.
2
2
  /**
3
3
  * pica_release_show MCP App card — Phase 3 stub render.
4
4
  *
@@ -1,4 +1,4 @@
1
- // Copyright (c) 2024-2026 Withpica Ltd. All rights reserved.
1
+ // Copyright (c) 2025-2026 Withpica Ltd. All rights reserved.
2
2
  import { INSTRUMENT_SERIF_REGULAR_BASE64, INSTRUMENT_SERIF_ITALIC_BASE64, GEIST_SANS_LIGHT_BASE64, APP_BRIDGE_JS, } from "./generated/shared-bundle.js";
3
3
  // ---------------------------------------------------------------------------
4
4
  // Design system CSS — embedded fonts + full PICA dark/light theme
@@ -1,4 +1,4 @@
1
- // Copyright (c) 2024-2026 Withpica Ltd. All rights reserved.
1
+ // Copyright (c) 2025-2026 Withpica Ltd. All rights reserved.
2
2
  /**
3
3
  * pica_upload MCP App card — generic drop zone.
4
4
  *
package/dist/config.js CHANGED
@@ -1,4 +1,4 @@
1
- // Copyright (c) 2024-2026 Withpica Ltd. All rights reserved.
1
+ // Copyright (c) 2025-2026 Withpica Ltd. All rights reserved.
2
2
  /**
3
3
  * MCP Server Configuration
4
4
  */
package/dist/index.js CHANGED
@@ -1,5 +1,5 @@
1
1
  #!/usr/bin/env node
2
- // Copyright (c) 2024-2026 Withpica Ltd. All rights reserved.
2
+ // Copyright (c) 2025-2026 Withpica Ltd. All rights reserved.
3
3
  /**
4
4
  * PICA MCP Server
5
5
  * Entry point for the Model Context Protocol server