@withpica/mcp-server 2.96.2 → 2.97.1

package/CHANGELOG.md

@@ -11,6 +11,111 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [2.97.1] - 2026-09-08
+
+### Added
+
+- **`pica_catalog_health_fix` accepts `selections: [{actionId, chosenPersonId}]`**
+  — the human choice a `resolve_person` action needs (one of its
+  `preview.candidates[].personId`). A selection accepts its action; a choice
+  the plan never offered is skipped `guard_blocked` with the reason. Until now
+  the applier required a chosen person the tool had no way to pass, so every
+  accepted `resolve_person` came back `stale` (feedback 2026-09-05).
+- **`pica_find_duplicates` sees identifier-less copies.** Recordings group on
+  title + artist and releases on title + equal track count when the ISRC/UPC
+  pass cannot see them (`match_kind: "title_artist"`, keep-separate default);
+  a UPC shared by releases with different titles is reported as
+  `shared_upc_different_title` — the decision is "correct the UPC", with no
+  fold option (feedback 2026-09-05).
+
+### Fixed
+
+- **`pica_works_update {collaborators}` is refused with a redirect** to
+  `pica_credits_update` / `pica_credit_add`. `works.collaborators` is a
+  legacy jsonb mirror; the write showed correct splits on inspect while the
+  `work_collaborators` rows every health check reads still disagreed, and the
+  health plan then proposed "fixing" them (feedback 2026-09-05).
+- **Accepting a held finding is a typed 409, not `INTERNAL_ERROR`.** The
+  apply route now maps every "is already <status>" refusal to
+  `PROPOSAL_ALREADY_CLOSED`, and a held one carries the unlock sentence
+  (`pica_billing_pay`, offer `unlock`, `entity_id` the work) — a ChatGPT user
+  hit "internal server error" three times on 2026-09-04.
+- **`pica_credit_add` never invents a share.** An omitted `share_pct` on a
+  composition credit is stored as NULL (unknown), not 0 — a 0 read as a real
+  share, so the health plan rescaled the other writer to 100 and the second
+  writer's stake vanished (holdout lock, 2026-09-06). For `credit_type:
+"owner"` the share is now REQUIRED (`OWNER_SHARE_REQUIRED`, 422): master
+  ownership is recorded as given, never assumed to be 100.
+- **`pica_releases_update` documents the UPC backfill trigger** — it fires
+  only on a write to `spotify_album_id`, so re-sending the existing id is the
+  way to backfill a UPC (ops issue 9f33cc59).
+
+- **`pica_subscription_status` is callable on the hosted connector.** It was
+  declared `scope: admin`, `audiences: ["stdio"]` while `pica_billing_pay` was
+  `read:catalog` on both surfaces, so a connected agent could mint a pay link
+  but not read the plan it would be paying for (`callable_on_this_surface:
+false` on claude.ai, 2026-09-04). Both now share the catalogue-read floor;
+  `pica_subscription_manage` stays stdio + admin.
+- **The pay path is visible to an agent that never calls `pica_discover`.**
+  The server instructions name `pica_subscription_status` and
+  `pica_billing_pay` with the exact `pica_execute` shape inside the first
+  2,000 characters (the observed cut on the claude.ai connector), and the
+  `pica_discover` description lists "how do i pay pica" among its example
+  queries for clients that surface tool descriptions but not instructions.
+
+PR #2118 (`fix/avatar-import-path-2026-09-03`) is merged into the release branch, so its changes ship in the version below; publish in the order mcp-utils → mcp-sdk → mcp-server.
+
+## [2.97.0] - 2026-09-04
+
+⚠️ Publish order: `@withpica/mcp-sdk` 3.14.0 and `@withpica/mcp-utils` 1.29.0
+must be on npm before this release — the dependency floors are now
+`^3.14.0` / `^1.29.0` (this release imports `pageEnvelope`, which only
+exists from mcp-utils 1.29.0; a clean install against 1.28.0 breaks at
+runtime — the 2.96.2 uninstallable incident).
+
+### Added
+
+- `pica_multimedia_import_url` accepts `person_id` (sets the person's profile image) and its summary names the outcome — `Imported from URL (via)`, profile-image set/NOT set, work link (PR #2118, merged into this release). Page URLs are followed to their `og:image`.
+
+- **Per-tool argument aliasing for `pica_execute`** (`arg-aliases.ts`, D1
+  2026-09-03) — `applyArgAliases` renames a tool's OWN entity id (or an
+  explicit `TOOL_ARG_ALIASES` entry, e.g. `pica_skill_get`'s `skill` /
+  `skill_name`) to the schema's real required field name, structurally by
+  domain (`DOMAIN_ID_ALIASES`) — never a foreign entity's id, never
+  overwriting a value already present, and left untouched when more than
+  one candidate is present. Fixes the wrong diagnosis `pica_execute` gave in
+  all 36 logged cases since July, where an agent sent e.g. `audio_file_id`
+  to `pica_audio_update` and was told the client had dropped the field in
+  transit.
+- **Shared `WRAPPED_ARGS_MISSING` envelope builder**
+  (`wrapped-args-envelope.ts`) — both guards that can reject a
+  `pica_execute` call before dispatch (the plain `required`-list guard, and
+  the `requiredOneOf` one-of-N guard covering `*_inspect` / `pica_search` /
+  bookings / licensing / shows / royalties tools) now build their message
+  and `structuredContent` through one function, naming
+  `unrecognised_fields` and `aliases_applied` in **both** the text block and
+  `structuredContent` instead of asserting "client-side transport loss" for
+  a non-empty args object. Empty args still name transport loss — there's
+  nothing else an empty resolved-args object could be.
+- **`offset` on `pica_audio_query`, `pica_notes_query`, `pica_sessions_query`**
+  (Task 10), each returning a `page` envelope built with
+  `@withpica/mcp-utils`'s `pageEnvelope()`. Audio and sessions fall back to
+  "page was full" (no total available); notes uses the route's real
+  `COUNT` for an exact `has_more`. A new `query-offset-parity` registry
+  guard test pins which remaining `_query` tools still lack `offset` so
+  each can be fixed and measured in isolation.
+
+### Changed
+
+- **Duplicate-release recovery hints point at a fix, not a dead end.**
+  `RELEASE_ALREADY_EXISTS` on `pica_releases_create` /
+  `pica_releases_create_with_tracks` now names `pica_releases_update` /
+  `pica_releases_attach_track` (the message already carries the existing
+  release's id) instead of `pica_releases_query`; `pica_releases_attach_track`'s
+  own `RELEASE_ALREADY_EXISTS` (a different release already holds the UPC)
+  points at `pica_releases_inspect`.
+- **Deprecated alias removal deferred to 2.98.0** — see `metadata.ts`.
+
 ## [2.96.2] - 2026-09-02
 
 The MPP pay rail (spec 2026-08-24 WS-B): a new tool that mints a pay link,

package/README.md

@@ -65,7 +65,7 @@ Read tools are annotated read-only and are safe to call freely. Write tools repo
 
 ## Tools
 
-330 tools, grouped below by the taxonomy `pica_discover` uses. The server's own `tools/list` is authoritative — not every registered tool is filed under a category yet, so the names below are a map, not a census.
+335 tools, grouped below by the taxonomy `pica_discover` uses. The server's own `tools/list` is authoritative — not every registered tool is filed under a category yet, so the names below are a map, not a census.
 
 **works** — manage your musical works
 
@@ -235,6 +235,10 @@ Read tools are annotated read-only and are safe to call freely. Write tools repo
 
 `pica_royalties_summary`, `pica_royalties_list`, `pica_royalties_get`, `pica_statements_query`, `pica_statements_inspect`, `pica_ingest_statement`, `pica_statements_pending`, `pica_statement_ingest_document`, `pica_royalties_unmatched`, `pica_royalties_attribute`
 
+**selections** — save, recall, and resolve named catalog selections — persisted predicates over the catalogue with an honest coverage report
+
+`pica_selections_create`, `pica_selections_query`, `pica_selections_inspect`, `pica_selections_update`, `pica_selections_delete`
+
 **share links** — create, inspect, update, and delete share links for catalog content
 
 `pica_share_links_create`, `pica_share_links_query`, `pica_share_links_inspect`, `pica_share_links_update`, `pica_share_links_delete`
@@ -285,4 +289,4 @@ Read tools are annotated read-only and are safe to call freely. Write tools repo
 
 ---
 
-Generated for `@withpica/mcp-server@2.96.2`. © 2024-2026 Withpica Ltd. All rights reserved. MIT licensed.
+Generated for `@withpica/mcp-server@2.97.0`. © 2024-2026 Withpica Ltd. All rights reserved. MIT licensed.