picked 0.0.108 → 0.0.109

package/docs/reference/dashboard/content/content-entries.mdx

@@ -74,6 +74,19 @@ A reference field reports an error when its target does not exist, or when the t
 belongs to the wrong Model. Fix every error before you publish, because Picked serves
 valid content only.
 
+## Size limit
+
+The data of one entry can hold 1,000,000 bytes at most, as JSON in UTF-8.
+
+| Change | Result when the data is larger |
+| --- | --- |
+| Create or edit an entry | The save stops. |
+| Change the schema of a Model | The change stops, and the error names the entry. |
+| Import a workspace | Picked imports nothing, and the error names the entry. |
+
+The error gives the size of the data, and it names the largest top-level field. Make that
+field smaller, or move some of its data into a different entry.
+
 ## Delete rules
 
 Picked does not delete an entry while something still points at it.

package/docs/reference/dashboard/labels.md

@@ -23,11 +23,11 @@ one label for each namespace and key.
 
 ## Owners
 
-| Owner        | Where the labels stay                                                                                        | Scope to read the labels     | Scope to set and remove the labels |
-| ------------ | ------------------------------------------------------------------------------------------------------------ | ---------------------------- | ---------------------------------- |
-| Lead         | Until you delete the lead. Picked deletes the labels of a lead with the lead.                                | `ORGANIZATION_LEADS_READ`    | `ORGANIZATION_LEADS_UPDATE`        |
-| Project      | Picked keeps the labels when you delete the project. These labels hold data for all the runs of the project. | `ORGANIZATION_PROJECTS_READ` | `ORGANIZATION_PROJECTS_UPDATE`     |
-| Workflow run | With the run. Picked does not delete a run.                                                                  | `ORGANIZATION_PROJECTS_READ` | `ORGANIZATION_PROJECTS_UPDATE`     |
+| Owner        | Where the labels stay                                                                                        | Scope to read the labels      | Scope to set and remove the labels |
+| ------------ | ------------------------------------------------------------------------------------------------------------ | ----------------------------- | ---------------------------------- |
+| Lead         | Until you delete the lead. Picked deletes the labels of a lead with the lead.                                | `ORGANIZATION_LEADS_READ`     | `ORGANIZATION_LEADS_UPDATE`        |
+| Project      | Picked keeps the labels when you delete the project. These labels hold data for all the runs of the project. | `ORGANIZATION_PROJECTS_READ`  | `ORGANIZATION_PROJECTS_UPDATE`     |
+| Workflow run | With the run. Picked does not delete a run.                                                                  | `ORGANIZATION_WORKSPACE_READ` | `ORGANIZATION_PROJECTS_UPDATE`     |
 
 A run reads, sets and removes its own labels without a scope.
 

package/docs/reference/dashboard/workflow-runs.md

@@ -131,7 +131,7 @@ The **Workflow runs** card shows 20 runs. **Show older runs** adds the next 20.
 | Surface                          | Scopes                                                                                                                                                                        |
 | -------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
 | Runs, Run                        | `ORGANIZATION_WORKSPACE_READ` and `ORGANIZATION_PROJECTS_READ`                                                                                                                |
-| The labels of a run              | `ORGANIZATION_PROJECTS_READ` to read them, and `ORGANIZATION_PROJECTS_UPDATE` to change them                                                                                  |
+| The labels of a run              | `ORGANIZATION_WORKSPACE_READ` to read them, and `ORGANIZATION_PROJECTS_UPDATE` to change them                                                                                 |
 | The **Runs** tab of the workflow | `ORGANIZATION_WORKSPACE_READ` and `ORGANIZATION_PROJECTS_READ`. Without these scopes, the workflow does not show the **Runs** tab.                                            |
 | Workflow runs card               | `ORGANIZATION_LEADS_READ` for the lead, and `ORGANIZATION_WORKSPACE_READ` and `ORGANIZATION_PROJECTS_READ` for its runs. Without the last two scopes, the card does not show. |
 

package/docs/reference/management-api/schema/index.md

@@ -190,7 +190,7 @@ An operation with `@auth` needs a caller that has authenticated. `@auth(only: US
 | [`workflowCreate`](/reference/management-api/schema/workflow#workflowcreate) | Mutation | Creates a workflow in a workspace. The caller must hold the scopes the tools of the graph need, as `Workflow.scopes` describes. Scope: `ORGANIZATION_WORKSPACE_UPDATE`. |
 | [`workflowDelete`](/reference/management-api/schema/workflow#workflowdelete) | Mutation | Deletes a workflow. Published versions keep their copy, and an action that started it can start another workflow. Scope: `ORGANIZATION_WORKSPACE_UPDATE`. |
 | [`workflowGraphUpdate`](/reference/management-api/schema/workflow#workflowgraphupdate) | Mutation | Updates the graph of a workflow with a change set, all or nothing. A refused change set writes nothing and comes back in `errors`. Scope: `ORGANIZATION_WORKSPACE_UPDATE`. |
-| [`workflowRun`](/reference/management-api/schema/workflow-run#workflowrun) | Query | Reads a workflow run. Scope: `ORGANIZATION_PROJECTS_READ`. |
+| [`workflowRun`](/reference/management-api/schema/workflow-run#workflowrun) | Query | Reads a workflow run. Scope: `ORGANIZATION_WORKSPACE_READ`. |
 | [`workflowRunRerun`](/reference/management-api/schema/workflow-run#workflowrunrerun) | Mutation | Reruns a workflow run that has ended as a new run of the whole workflow, on the version chosen. Every step runs again, so leads are created and outbound requests are sent again, and an `action_response` answers nobody. The caller must also hold every scope the workflow of the chosen version acts with. Scope: `ORGANIZATION_WORKSPACE_UPDATE`. |
 | [`workflows`](/reference/management-api/schema/workflow#workflows) | Query | Lists the workflows in a workspace. `search` matches a case-insensitive substring of the name. Scope: `ORGANIZATION_WORKSPACE_READ`. |
 | [`workflowTestRun`](/reference/management-api/schema/workflow#workflowtestrun) | Mutation | Tests a workflow by walking its draft graph once, holding back every write. Nothing is stored, and the caller must also hold every scope in `Workflow.scopes`. Scope: `ORGANIZATION_WORKSPACE_UPDATE`. |

package/docs/reference/management-api/schema/label.md

@@ -60,7 +60,7 @@ The kind of entity a label is on. Each kind is read and written under its own sc
 | --- | --- | --- |
 | `LEAD` | `ORGANIZATION_LEADS_READ` | `ORGANIZATION_LEADS_UPDATE` |
 | `PROJECT` | `ORGANIZATION_PROJECTS_READ` | `ORGANIZATION_PROJECTS_UPDATE` |
-| `WORKFLOW_RUN` | `ORGANIZATION_PROJECTS_READ` | `ORGANIZATION_PROJECTS_UPDATE` |
+| `WORKFLOW_RUN` | `ORGANIZATION_WORKSPACE_READ` | `ORGANIZATION_PROJECTS_UPDATE` |
 
 A workflow run reads and writes its own labels without a scope.
 """

package/docs/reference/management-api/schema/lead.md

@@ -68,7 +68,7 @@ type Lead {
   operations(first: Int, after: String, sortKey: OperationSortKeys = OCCURRED_AT, reverse: Boolean = true): LeadOperationConnection! @auth
   """
   The workflow runs that created or changed the lead, each once, newest first.
-  Scope: `ORGANIZATION_LEADS_READ` and `ORGANIZATION_PROJECTS_READ`.
+  Scope: `ORGANIZATION_LEADS_READ` and `ORGANIZATION_WORKSPACE_READ`.
   """
   workflowRuns(first: Int, after: String, last: Int, before: String, reverse: Boolean = true): WorkflowRunConnection! @auth
   """

package/docs/reference/management-api/schema/project.md

@@ -142,6 +142,11 @@ type Project {
   AI agents read it. Null until set.
   """
   context: String
+  """
+  The analytics brief in Markdown: metric definitions, key events, segments, reporting conventions.
+  Picked's AI agents read it when they query or explain analytics. Null until set.
+  """
+  analyticsContext: String
   """The organisation the project belongs to."""
   organization: Organization!
   """
@@ -612,6 +617,8 @@ input ProjectUpdateInput {
   name: String
   """The project brief in Markdown. An empty string clears it."""
   context: String
+  """The project analytics brief in Markdown. An empty string clears it."""
+  analyticsContext: String
 }
 ```
 

package/docs/reference/management-api/schema/workflow-run.md

@@ -13,7 +13,7 @@ See [Management API schema](/reference/management-api/schema) for every domain,
 ### `workflowRun`
 
 Reads a workflow run.
-Scope: `ORGANIZATION_PROJECTS_READ`.
+Scope: `ORGANIZATION_WORKSPACE_READ`.
 
 ```graphql
 workflowRun(id: ID!): WorkflowRun @auth
@@ -148,24 +148,24 @@ type WorkflowRun {
   rerun: Boolean!
   """
   The tasks of the run, one per visit of a node, in the order the run reached them.
-  Scope: `ORGANIZATION_PROJECTS_READ`.
+  Scope: `ORGANIZATION_WORKSPACE_READ`.
   """
   tasks(first: Int, after: String, sortKey: WorkflowTaskSortKeys = STARTED_AT, reverse: Boolean = false): WorkflowTaskConnection! @auth
   """
   The live labels on the run, ordered by namespace, then key. `labelsSet` with `ownerType:
   WORKFLOW_RUN` writes them.
-  Scope: `ORGANIZATION_PROJECTS_READ`.
+  Scope: `ORGANIZATION_WORKSPACE_READ`.
   """
   labels: [Label!]! @auth
   """
   The run the chain of a rerun started from. Null when the run is not a rerun.
-  Scope: `ORGANIZATION_PROJECTS_READ`.
+  Scope: `ORGANIZATION_WORKSPACE_READ`.
   """
   rerunRoot: WorkflowRun @auth
   """
   The reruns of the run, latest first. A rerun of a rerun is listed under the run its chain
   started from, so the list is empty on a rerun.
-  Scope: `ORGANIZATION_PROJECTS_READ`.
+  Scope: `ORGANIZATION_WORKSPACE_READ`.
   """
   reruns(first: Int, after: String, last: Int, before: String, reverse: Boolean = true): WorkflowRunConnection! @auth
   """
@@ -263,7 +263,7 @@ type WorkflowTask {
   run: WorkflowRun!
   """
   The creates, updates and deletes the task made to leads and labels, newest first.
-  Scope: `ORGANIZATION_PROJECTS_READ`.
+  Scope: `ORGANIZATION_WORKSPACE_READ`.
   """
   operations(first: Int, after: String, sortKey: OperationSortKeys = OCCURRED_AT, reverse: Boolean = true): OperationConnection! @auth
 }
@@ -331,7 +331,7 @@ type WorkflowTaskEdge {
 extend type Workflow {
   """
   The runs of the workflow, oldest first.
-  Scope: `ORGANIZATION_PROJECTS_READ`.
+  Scope: `ORGANIZATION_WORKSPACE_READ`.
   """
   runs(first: Int, after: String, last: Int, before: String, sortKey: WorkflowRunSortKeys = STARTED_AT, reverse: Boolean = false): WorkflowRunConnection! @auth
 }
@@ -408,7 +408,7 @@ extend type Subscription {
   Pushes a workflow run's progress: its state, its tasks from the one `from` names, then each
   change. The last message's `end` says why the stream ended and when to subscribe again, and a
   run that has already finished sends only that message. Served only at `/api/graphql/stream`.
-  Scope: `ORGANIZATION_PROJECTS_READ`.
+  Scope: `ORGANIZATION_WORKSPACE_READ`.
   """
   workflowRunProgress(
     id: ID!

package/docs/reference/tools/mcp.md

@@ -19,6 +19,13 @@ Each tool has its own section. Link to a tool with its name as the anchor, for e
 
 Lists your organizations and projects. Call it first: each other tool needs a project ID or a workspace ID.
 
+#### `get_my_permissions`
+
+Lists the permissions that you hold in each organization. A tool call fails with the
+permission that it needs when you do not hold it. Call this tool before a change, or to
+find out why a call failed. Give `organization_id` to see one organization. Give
+`project_id` with it to see your permissions at that project.
+
 #### `list_workspaces`
 
 Lists the workspaces in a project.
@@ -31,10 +38,29 @@ Reads the live version of the project, and the draft of a workspace with its exp
 
 Reads the brief that the project owner wrote about the project, its goals and its entry points.
 
+#### `update_project_context`
+
+Replaces the project brief. Read the brief first with `get_project_context`, change it,
+and send the whole document back. An empty value clears the brief. You must have
+permission to edit project settings.
+
+#### `get_project_analytics_context`
+
+Reads the analytics brief that the project owner wrote: the metric definitions, the key
+events, the segments and the report rules. Read it before you query or explain
+analytics.
+
+#### `update_project_analytics_context`
+
+Replaces the analytics brief. Read the brief first with `get_project_analytics_context`,
+change it, and send the whole document back. An empty value clears the brief. You must
+have permission to edit project settings.
+
 #### `get_project_settings`
 
-Gives the name, the time zone, and the stored settings of a project, with the link to the
-project settings page. You change the settings in the dashboard.
+Gives the name, the time zone, and the stored settings of a project. Also gives the country where
+the project keeps its analytics data, and the link to the project settings page. You change the
+settings in the dashboard.
 
 #### `guide_create_organisation`
 
@@ -470,10 +496,6 @@ Gives the arguments and the result of each tool that you name, for use in `picke
 
 Sends a report about a problem in the MCP server to the Picked team.
 
-:::note
-A PickedQL query is not available through the MCP server at this time.
-:::
-
 ## Example prompts
 
 - "List my Picked projects and show me the options on each one"

package/package.json

@@ -1,13 +1,13 @@
 {
   "name": "picked",
   "description": "The Picked SDK front door: the client, the picked.config helpers, and the picked CLI in one install",
-  "version": "0.0.108",
+  "version": "0.0.109",
   "bin": {
     "picked": "dist/esm/bin.js"
   },
   "dependencies": {
-    "@picked/cli": "0.0.108",
-    "@picked/config": "0.0.108"
+    "@picked/cli": "0.0.109",
+    "@picked/config": "0.0.109"
   },
   "devDependencies": {
     "@picked/client": "workspace:*",
@@ -64,7 +64,7 @@
   "main": "./dist/cjs/index.js",
   "module": "./dist/esm/index.js",
   "peerDependencies": {
-    "@picked/client": "0.0.108"
+    "@picked/client": "0.0.109"
   },
   "private": false,
   "publishConfig": {