From 47193859b12f3b96b476c5eafd94c97500d6437f Mon Sep 17 00:00:00 2001
From: byteworthy <scale@getbyteworthy.com>
Date: Thu, 14 May 2026 19:06:55 -0500
Subject: [PATCH] =?UTF-8?q?release:=20v0.2.0=20=E2=80=94=20published=20to?=
 =?UTF-8?q?=20npm?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Ships scan_claim path fix, compare_payers rewrite, fast-uri HIGH CVE
bump, get_aba_session_tracker docs, and .env.example. v0.1.0 was the
old single-file monorepo copy; v0.2.0 is the standalone multi-tool
rewrite which is now the canonical source.

npm package: https://www.npmjs.com/package/@upstream-intelligence/mcp

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
---
 CHANGELOG.md      | 59 +++++++++++++++++++++++++++++++++++++++++++++++
 package-lock.json |  4 ++--
 package.json      |  2 +-
 3 files changed, 62 insertions(+), 3 deletions(-)
 create mode 100644 CHANGELOG.md

diff --git a/CHANGELOG.md b/CHANGELOG.md
new file mode 100644
index 0000000..669ab5d
--- /dev/null
+++ b/CHANGELOG.md
@@ -0,0 +1,59 @@
+# Changelog
+
+All notable changes to `@upstream-intelligence/mcp` are documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [0.2.0] - 2026-05-14
+
+The 0.1.0 release shipped the original single-file MCP server from the
+`Upstream-Intelligence/upstream` monorepo at `packages/mcp-server/`. The 0.2.0
+release ships the new multi-file rewrite from the
+`Upstream-Intelligence/upstream-mcp` standalone repo, which is now the canonical
+source. The monorepo duplicate was removed in
+[upstream#346](https://github.com/Upstream-Intelligence/upstream/pull/346).
+
+### Fixed
+
+- **`scan_claim`**: path was hitting `/api/v1/public/claim-scan/` which 404s.
+  Corrected to `/api/v1/public/claim-review/` per the Django route at
+  `upstream/api/v1/public/claim_scanner.py:281`. Every prior invocation was
+  silently failing.
+- **`compare_payers` → `compare_practice_to_community`**: backend endpoint
+  `/api/v1/public/payer-scorecard/compare/` is an email-gated "compare YOUR
+  practice against the community" lead-capture endpoint, not a two-payer
+  comparison. Renamed tool and replaced schema to match: required `email`,
+  `payer`, `specialty`; optional `your_denial_rate`, `your_days_to_pay`,
+  `your_appeal_win_rate`.
+- **`fast-uri` HIGH CVE**: transitive through `@modelcontextprotocol/sdk → ajv`.
+  Bumped to a patched release. Clears GHSA-q3j6-qgpj-74h6 (path traversal via
+  percent-encoded dot segments) and GHSA-v39h-62p7-jpjc (host confusion via
+  percent-encoded authority delimiters). `npm audit` clean.
+
+### Added
+
+- **`get_aba_session_tracker`**: documented in README. Tool was already
+  registered in `src/index.ts` since the initial implementation but absent
+  from the public tool table.
+- **`.env.example`**: the README told users to `cp .env.example .env`, but the
+  file did not exist. Added with `UPSTREAM_API_KEY` and two optional knobs.
+
+## [0.1.0] - 2026-04-23
+
+Initial public release from `Upstream-Intelligence/upstream` monorepo.
+
+### Added
+
+- `lookup_carc` — decode any CARC code with plain-English meaning and appeal
+  strategy.
+- `check_ncci_edit` — check whether two CPT/HCPCS codes are subject to NCCI
+  bundling, MUE unit limits, or modifier-allowed overrides.
+- `fee_schedule_lookup` — CMS Medicare Physician Fee Schedule rates with RVU
+  components.
+- `payer_scorecard` — public Payer Behavior Scorecard with denial rate,
+  days-to-pay, overturn rate, top denial reasons.
+- `list_payer_scorecards` — list every tracked payer, filterable by vertical
+  (ABA, SNF, PT/OT, dental, etc.).
+- `compare_payers` — side-by-side comparison of 2-5 payers (replaced in 0.2.0
+  by `compare_practice_to_community` — see 0.2.0 notes).
diff --git a/package-lock.json b/package-lock.json
index b601b4d..1ce98db 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "@upstream-intelligence/mcp",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@upstream-intelligence/mcp",
-      "version": "0.1.0",
+      "version": "0.2.0",
       "dependencies": {
         "@modelcontextprotocol/sdk": "^1.0.0"
       },
diff --git a/package.json b/package.json
index 1cea7e0..c62601e 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@upstream-intelligence/mcp",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "MCP server for Upstream care intelligence",
   "type": "module",
   "main": "dist/index.js",