@withpica/mcp-server 2.97.3 → 2.97.5

package/CHANGELOG.md

@@ -11,6 +11,47 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [2.97.5] - 2026-09-18
+
+### Added
+
+- **`pica_export_song_dossiers` — everything PICA holds about a chosen set of
+  songs, as one ZIP.** Pass 1 to 60 `work_ids`; the ZIP holds each work's song
+  dossier as a PDF and as JSON (the work, its recordings with credits and
+  ISRCs, the releases those recordings appear on, people and identifiers,
+  provenance, AI disclosure, consent), a manifest with a SHA-256 hash of every
+  file, and a README. Returns the signed-URL envelope the other exports return,
+  plus `works[]` saying per work whether it was included: a work that is not in
+  the catalogue comes back `included: false` rather than vanishing, and a list
+  past 60 or a malformed id is refused rather than truncated. The
+  credential needs `write:files` (the floor on every export write) and
+  `write:catalog` (the route's own requirement). It downloads a file for the catalogue owner and sends nothing
+  to anyone.
+
+### Changed
+
+- **`pica_works_inspect` no longer says the dossier PDF is only on the web
+  UI**, in its `sections` description and in the dossier summary line — both
+  now name `pica_export_song_dossiers`.
+- **`pica_export_snapshot` stops claiming "export everything about this
+  work"** as one of its phrases — the snapshot is a ranked what-to-fix view
+  and carries no recordings or releases; that phrase now routes to
+  `pica_export_song_dossiers`, which the snapshot's description names.
+
+## [2.97.4] - 2026-09-17
+
+### Fixed
+
+- **Both CAR tools now declare the scope the platform actually requires.**
+  `pica_export_catalog_asset_report` asked for `write:catalog` and
+  `pica_car_preview` for `read:catalog`, but every write under
+  `/api/admin/exports/*` is floored at `write:files` in proxy.ts, so a
+  credential holding exactly what the tools advertised was refused 403
+  before the route ran (measured against the develop preview, 2026-09-17).
+  `pica_car_preview` is also `tier: "write"` now: it creates an S3 object and
+  a `pica_exports` row, and was advertised read-only.
+  Credentials that need a catalog asset report must carry `write:files`.
+
 ## [2.97.3] - 2026-09-17
 
 ### Fixed

package/README.md

@@ -65,7 +65,7 @@ Read tools are annotated read-only and are safe to call freely. Write tools repo
 
 ## Tools
 
-336 tools, grouped below by the taxonomy `pica_discover` uses. The server's own `tools/list` is authoritative — not every registered tool is filed under a category yet, so the names below are a map, not a census.
+337 tools, grouped below by the taxonomy `pica_discover` uses. The server's own `tools/list` is authoritative — not every registered tool is filed under a category yet, so the names below are a map, not a census.
 
 **works** — manage your musical works
 
@@ -129,7 +129,7 @@ Read tools are annotated read-only and are safe to call freely. Write tools repo
 
 **export** — export catalog data in various formats
 
-`pica_export_catalog_csv`, `pica_export_song_registration`, `pica_export_industry_ready`, `pica_export_catalog_asset_report`, `pica_export_ai_consent`, `pica_export_snapshot`, `pica_export_ownership_record`, `pica_export_rights_proof`, `pica_export_diligence_pack`, `pica_download`, `pica_export_my_data`
+`pica_export_catalog_csv`, `pica_export_song_registration`, `pica_export_industry_ready`, `pica_export_catalog_asset_report`, `pica_export_ai_consent`, `pica_export_snapshot`, `pica_export_song_dossiers`, `pica_export_ownership_record`, `pica_export_rights_proof`, `pica_export_diligence_pack`, `pica_download`, `pica_export_my_data`
 
 **search** — search across the catalog and discover content
 
@@ -289,4 +289,4 @@ Read tools are annotated read-only and are safe to call freely. Write tools repo
 
 ---
 
-Generated for `@withpica/mcp-server@2.97.2`. © 2024-2026 Withpica Ltd. All rights reserved. MIT licensed.
+Generated for `@withpica/mcp-server@2.97.5`. © 2024-2026 Withpica Ltd. All rights reserved. MIT licensed.