@papi-ai/server 0.7.10 → 0.7.11

package/dist/index.js

@@ -6724,14 +6724,21 @@ ${newParts.join("\n")}` : newParts.join("\n");
       // Board (Tasks)
       // -------------------------------------------------------------------------
       async queryBoard(options) {
-        if (!options) {
-          const rows2 = await this.sql`
-        SELECT id, project_id, display_id, title, status, priority, complexity, module, epic, phase, owner, reviewed, cycle, created_cycle, created_at, why, depends_on, notes, closure_reason, state_history, build_handoff, build_report, task_type, maturity, stage_id, doc_ref, source, opportunity, updated_at
-        FROM cycle_tasks
-        WHERE project_id = ${this.projectId}
-        ORDER BY display_id
-        LIMIT 2000 -- hard ceiling; single project task count won't approach this
-      `;
+        const compact = options?.compact === true;
+        if (!options || Object.keys(options).length === 1 && compact) {
+          const rows2 = compact ? await this.sql`
+            SELECT id, project_id, display_id, title, status, priority, complexity, module, epic, phase, owner, reviewed, cycle, created_cycle, created_at, why, depends_on, notes, closure_reason, task_type, maturity, stage_id, doc_ref, source, opportunity, updated_at
+            FROM cycle_tasks
+            WHERE project_id = ${this.projectId}
+            ORDER BY display_id
+            LIMIT 2000
+          ` : await this.sql`
+            SELECT id, project_id, display_id, title, status, priority, complexity, module, epic, phase, owner, reviewed, cycle, created_cycle, created_at, why, depends_on, notes, closure_reason, state_history, build_handoff, build_report, task_type, maturity, stage_id, doc_ref, source, opportunity, updated_at
+            FROM cycle_tasks
+            WHERE project_id = ${this.projectId}
+            ORDER BY display_id
+            LIMIT 2000 -- hard ceiling; single project task count won't approach this
+          `;
           return rows2.map(rowToTask);
         }
         const conditions = [
@@ -6766,11 +6773,15 @@ ${newParts.join("\n")}` : newParts.join("\n");
         for (let i = 1; i < conditions.length; i++) {
           where = this.sql`${where} AND ${conditions[i]}`;
         }
-        const rows = await this.sql`
-      SELECT id, project_id, display_id, title, status, priority, complexity, module, epic, phase, owner, reviewed, cycle, created_cycle, created_at, why, depends_on, notes, closure_reason, state_history, build_handoff, build_report, task_type, maturity, stage_id, doc_ref, source, opportunity, updated_at
-      FROM cycle_tasks WHERE ${where} ORDER BY display_id
-      LIMIT 2000 -- matches no-options path ceiling
-    `;
+        const rows = compact ? await this.sql`
+          SELECT id, project_id, display_id, title, status, priority, complexity, module, epic, phase, owner, reviewed, cycle, created_cycle, created_at, why, depends_on, notes, closure_reason, task_type, maturity, stage_id, doc_ref, source, opportunity, updated_at
+          FROM cycle_tasks WHERE ${where} ORDER BY display_id
+          LIMIT 2000
+        ` : await this.sql`
+          SELECT id, project_id, display_id, title, status, priority, complexity, module, epic, phase, owner, reviewed, cycle, created_cycle, created_at, why, depends_on, notes, closure_reason, state_history, build_handoff, build_report, task_type, maturity, stage_id, doc_ref, source, opportunity, updated_at
+          FROM cycle_tasks WHERE ${where} ORDER BY display_id
+          LIMIT 2000 -- matches no-options path ceiling
+        `;
         return rows.map(rowToTask);
       }
       async getTask(id) {
@@ -7822,7 +7833,7 @@ ${r.content}` + (r.carry_forward ? `
         const [row] = await this.sql`
       INSERT INTO bug_reports (project_id, user_id, description, diagnostics, status)
       VALUES (
-        ${report.projectId},
+        ${this.projectId},
         ${report.userId ?? null},
         ${report.description},
         ${JSON.stringify(report.diagnostics)},
@@ -7832,7 +7843,7 @@ ${r.content}` + (r.carry_forward ? `
     `;
         return {
           id: row.id,
-          projectId: report.projectId,
+          projectId: this.projectId,
           userId: report.userId,
           description: report.description,
           diagnostics: report.diagnostics,
@@ -10495,6 +10506,7 @@ Standard planning cycle with full board review.
    - Add a \`boardCorrections\` entry for the dependent task with \`updates.dependsOn\` set to the comma-separated upstream IDs \u2014 this persists the dependency so the builder's runtime can reuse the upstream branch.
    - Keep the SCOPE sections independent (each task still has its own deliverable) but note the ordering in "Why now" \u2014 e.g. "depends on task-123 completing the adapter method".
    Do NOT invent dependencies where tasks merely share a module \u2014 only real build-order coupling counts. Linear chains only \u2014 do not attempt to resolve multi-level graphs. When in doubt, omit the dependency and let the builder discover it.
+   **Dependency Chain section (Part 1 markdown):** When intra-cycle dependencies are detected, include a visible **## Dependency Chain** section in Part 1 markdown immediately before the first BUILD HANDOFF block. List each dependency as an arrow chain with a brief reason: \`task-A \u2192 task-B (B calls the adapter method A creates)\`. Then show the full recommended build sequence for all cycle tasks, including standalone tasks: e.g. \`Build order: task-A \u2192 task-B; task-C standalone; task-D standalone\`. Flag circular dependencies with \u26A0\uFE0F and a note. Omit this section entirely when no intra-cycle dependencies exist \u2014 do not include an empty section.
    **Security section guidance:** Each handoff includes a SECURITY CONSIDERATIONS section. Populate it when the task involves: data exposure risks (PII, secrets in logs/storage), secrets or credentials handling (API keys, tokens, env vars), auth/access control changes, or dependency security risks (new packages, version changes). For pure refactoring, documentation, prompt-text, or UI-only tasks, write "None \u2014 no security-relevant changes".
    **Estimation calibration:** Estimate **XS** for: copy/text-only changes, single string replacements, config tweaks, and any task where the scope is "change words in an existing file" with no logic changes. Estimate **S** for: wiring existing adapter methods, adding API routes following established patterns, modifying prompts, or documentation-only changes. Default to S for pattern-following work. Only use M when genuine new architecture, new DB tables, or multi-file architectural changes are needed. Historical data shows systematic over-estimation (198 over vs 8 under out of 528 tasks) \u2014 when in doubt, estimate smaller. If an "Estimation Calibration (Historical)" section is provided in the context below, use its data to adjust your estimates \u2014 it shows how often each estimated size matched the actual effort. Pay special attention to systematic over/under-estimation patterns (e.g. if M\u2192S happens frequently, estimate S instead of M for similar work).
    **Reference docs:** If a task's notes include a \`Reference:\` path (e.g. \`Reference: docs/architecture/papi-brain-v1.md\`), include a REFERENCE DOCS section in the BUILD HANDOFF with those paths. This tells the builder to read the referenced doc for background context before implementing. Do NOT omit or summarise the reference \u2014 pass it through so the builder can access the full document. Only tasks with explicit \`Reference:\` paths in their notes should have this section.
@@ -10589,6 +10601,38 @@ var PLAN_FRAGMENT_SPIKE = `
      - **DONE CONDITION:** "Question answered OR time-box hit, whichever comes first."
    - Keep SCOPE BOUNDARY, SECURITY CONSIDERATIONS, and PRE-BUILD VERIFICATION as normal.
    - Spikes should be estimated conservatively: XS or S. If a spike needs M+ effort, it's not a spike \u2014 reclassify as a research task.`;
+var PLAN_FRAGMENT_DESIGN_BRIEF = `
+   **Design brief task detection:** When a task's task type is "design-brief", generate a DESIGN BRIEF handoff. Replace the standard SCOPE (DO THIS) section with these type-specific sections:
+   - AUDIENCE: Who this design is for \u2014 persona and context of use (e.g. "non-technical Owner, first dashboard visit")
+   - BRAND CONSTRAINTS: Palette, typography, tone \u2014 pull from \`.impeccable.md\` and \`docs/design/brand-system.md\` if present. If neither exists, state "No brand doc \u2014 Owner should define constraints before starting."
+   - DELIVERABLE FORMAT: What the output looks like \u2014 Claude Design handoff package / annotated mockup / style spec. Be specific so the person doing the work knows what "done" means.
+   - REVIEW POINTS: What the Owner must approve before the design is considered done (e.g. layout, copy, colour, imagery).
+   Keep SCOPE BOUNDARY, ACCEPTANCE CRITERIA, SECURITY CONSIDERATIONS, and PRE-BUILD VERIFICATION sections as normal.
+   Add to ACCEPTANCE CRITERIA: "[ ] Deliverable format confirmed with Owner before starting" and "[ ] Design output is self-contained \u2014 includes enough context for a developer to implement without further clarification."`;
+var PLAN_FRAGMENT_RESEARCH_BRIEF = `
+   **Research brief task detection:** When a task's task type is "research-brief", generate a RESEARCH BRIEF handoff. Replace the standard SCOPE (DO THIS) section with:
+   - GOAL: The specific question this research answers \u2014 one sentence, phrased as a question (e.g. "What onboarding patterns do our top 3 competitors use?")
+   - TIME-BOX: Maximum effort allowed \u2014 XS or S. Stop when the time-box is hit and report what was found, even if incomplete.
+   - OUTPUT: Where findings land \u2014 a doc at \`docs/research/[topic]-findings.md\` or inline in the build report. State the path.
+   - FOLLOW-UP PROTOCOL: Do NOT submit follow-up backlog tasks until the Owner reviews and confirms the findings are actionable.
+   Keep SCOPE BOUNDARY, ACCEPTANCE CRITERIA, SECURITY CONSIDERATIONS, and PRE-BUILD VERIFICATION as normal.
+   Add to ACCEPTANCE CRITERIA: "[ ] Question answered OR time-box hit \u2014 whichever comes first" and "[ ] Findings doc saved before any follow-up tasks are submitted."`;
+var PLAN_FRAGMENT_MARKETING_BRIEF = `
+   **Marketing brief task detection:** When a task's task type is "marketing-brief", generate a MARKETING BRIEF handoff. Replace the standard SCOPE (DO THIS) section with:
+   - AUDIENCE: Who this marketing content targets \u2014 persona, awareness level, channel context (e.g. "cold Discord visitor, zero PAPI context")
+   - CHANNEL: Where this content lives \u2014 Discord, landing page, email, social, etc.
+   - MESSAGE FRAME: The core message to land \u2014 one sentence. What does the reader need to believe after seeing this? (e.g. "PAPI makes AI-assisted building systematic, not chaotic.")
+   - SUCCESS SIGNAL: How the Owner knows the content worked \u2014 clicks, signups, replies, saves, DMs. Be specific.
+   Keep SCOPE BOUNDARY, ACCEPTANCE CRITERIA, SECURITY CONSIDERATIONS, and PRE-BUILD VERIFICATION as normal.
+   Add to ACCEPTANCE CRITERIA: "[ ] Message Frame confirmed with Owner before drafting" and "[ ] Final content reviewed by Owner before publishing."`;
+var PLAN_FRAGMENT_OPS_BRIEF = `
+   **Ops brief task detection:** When a task's task type is "ops-brief", generate an OPS BRIEF handoff. Replace the standard SCOPE (DO THIS) section with:
+   - SYSTEM: Which system or service this ops task touches \u2014 Vercel, Railway, Supabase, GitHub Actions, DNS, etc.
+   - RISK: What could go wrong \u2014 data loss, downtime, broken deployments. Include estimated blast radius (e.g. "affects all authenticated users").
+   - ROLLBACK PLAN: Exact steps to undo the change if something breaks. Must be specific enough to execute under pressure.
+   - DONE CONDITION: The specific observable state that confirms the task is complete \u2014 a health check URL, a metric, a log line, a manual verification step.
+   Keep SCOPE BOUNDARY, ACCEPTANCE CRITERIA, SECURITY CONSIDERATIONS, and PRE-BUILD VERIFICATION as normal.
+   Add to ACCEPTANCE CRITERIA: "[ ] Rollback plan confirmed before executing" and "[ ] Done condition verified after completing."`;
 var PLAN_FRAGMENT_UI = `
    **UI/visual task detection:** Apply these additions ONLY to tasks whose PRIMARY scope is frontend visual work \u2014 the task's main deliverable must be a UI change, new component, visual design, or page. Do NOT apply to backend tasks, DB migrations, or prompt/config changes that merely mention a dashboard or page in passing. Signal: the task would fail if no .tsx/.css files were changed. If uncertain, skip the UI additions.
    When a task IS a UI task (primary scope is visual/frontend):
@@ -10705,6 +10749,10 @@ Standard planning cycle with full board review.
   if (flags.hasIdeaTasks) parts.push(PLAN_FRAGMENT_IDEA);
   if (flags.hasSpikeTasks) parts.push(PLAN_FRAGMENT_SPIKE);
   if (flags.hasTaskTasks) parts.push(PLAN_FRAGMENT_TASK);
+  if (flags.hasDesignBriefTasks) parts.push(PLAN_FRAGMENT_DESIGN_BRIEF);
+  if (flags.hasResearchBriefTasks) parts.push(PLAN_FRAGMENT_RESEARCH_BRIEF);
+  if (flags.hasMarketingBriefTasks) parts.push(PLAN_FRAGMENT_MARKETING_BRIEF);
+  if (flags.hasOpsBriefTasks) parts.push(PLAN_FRAGMENT_OPS_BRIEF);
   if (flags.hasUITasks) parts.push(PLAN_FRAGMENT_UI);
   parts.push(`
 11. **New Tasks (max 3 per cycle)** \u2014 Actively mine the Recent Build Reports for task candidates. For each report, check:
@@ -11961,6 +12009,10 @@ function detectBoardFlags(tasks) {
   let hasSpikeTasks = false;
   let hasTaskTasks = false;
   let hasUITasks = false;
+  let hasDesignBriefTasks = false;
+  let hasResearchBriefTasks = false;
+  let hasMarketingBriefTasks = false;
+  let hasOpsBriefTasks = false;
   const uiKeywords = /\b(visual|design|UI|styling|refresh|frontend|landing page|hero|carousel|theme|layout|cockpit|dashboard|page)\b/i;
   for (const t of tasks) {
     if (t.taskType === "bug" || /^(Bug:|Fix:)/i.test(t.title)) hasBugTasks = true;
@@ -11968,9 +12020,13 @@ function detectBoardFlags(tasks) {
     if (t.taskType === "idea") hasIdeaTasks = true;
     if (t.taskType === "spike" || /^Spike:/i.test(t.title)) hasSpikeTasks = true;
     if (t.taskType === "task") hasTaskTasks = true;
+    if (t.taskType === "design-brief") hasDesignBriefTasks = true;
+    if (t.taskType === "research-brief") hasResearchBriefTasks = true;
+    if (t.taskType === "marketing-brief") hasMarketingBriefTasks = true;
+    if (t.taskType === "ops-brief") hasOpsBriefTasks = true;
     if (uiKeywords.test(t.title) || uiKeywords.test(t.notes ?? "")) hasUITasks = true;
   }
-  return { hasBugTasks, hasResearchTasks, hasIdeaTasks, hasSpikeTasks, hasTaskTasks, hasUITasks };
+  return { hasBugTasks, hasResearchTasks, hasIdeaTasks, hasSpikeTasks, hasTaskTasks, hasUITasks, hasDesignBriefTasks, hasResearchBriefTasks, hasMarketingBriefTasks, hasOpsBriefTasks };
 }
 function detectBoardFlagsFromText(boardText) {
   return {
@@ -11979,7 +12035,11 @@ function detectBoardFlagsFromText(boardText) {
     hasIdeaTasks: /\bidea\b/i.test(boardText),
     hasSpikeTasks: /\b(spike|Spike:)\b/i.test(boardText),
     hasTaskTasks: /\btask\b/i.test(boardText),
-    hasUITasks: /\b(visual|design|UI|styling|refresh|frontend|landing page|hero|carousel|theme|layout|cockpit|dashboard|page)\b/i.test(boardText)
+    hasUITasks: /\b(visual|design|UI|styling|refresh|frontend|landing page|hero|carousel|theme|layout|cockpit|dashboard|page)\b/i.test(boardText),
+    hasDesignBriefTasks: /\bdesign-brief\b/i.test(boardText),
+    hasResearchBriefTasks: /\bresearch-brief\b/i.test(boardText),
+    hasMarketingBriefTasks: /\bmarketing-brief\b/i.test(boardText),
+    hasOpsBriefTasks: /\bops-brief\b/i.test(boardText)
   };
 }
 function hashSection(content) {
@@ -12125,7 +12185,7 @@ async function assembleContext(adapter2, mode, _config, filters, focus) {
       ]),
       adapter2.searchDocs?.({ status: "active", limit: 5 }),
       adapter2.getCycleLog(5),
-      adapter2.queryBoard({ status: ["Backlog", "In Cycle", "Ready"] }),
+      adapter2.queryBoard({ status: ["Backlog", "In Cycle", "Ready"], compact: true }),
       Promise.resolve(leanBuildReports.slice(0, 10)),
       adapter2.getContextHashes?.(health.totalCycles) ?? Promise.resolve(null)
     ]);
@@ -12235,7 +12295,7 @@ ${lines.join("\n")}`;
     adapter2.getActiveDecisions(),
     adapter2.getBuildReportsSince(health.totalCycles ?? 0),
     adapter2.getCycleLog(3),
-    adapter2.queryBoard({ status: ["Backlog", "In Cycle", "Ready", "In Progress", "In Review", "Blocked"], contextTier: 2 }),
+    adapter2.queryBoard({ status: ["Backlog", "In Cycle", "Ready", "In Progress", "In Review", "Blocked"], contextTier: 2, compact: true }),
     adapter2.readCycleMetrics(),
     adapter2.getRecentReviews(5),
     adapter2.readPhases(),
@@ -12259,7 +12319,7 @@ ${lines.join("\n")}`;
     adapter2.getPendingRecommendations(),
     assembleDiscoveryCanvasText(adapter2),
     assembleTaskComments(adapter2),
-    adapter2.searchDocs?.({ status: "active", limit: 5 }),
+    adapter2.searchDocs?.({ status: "active", limit: 15 }),
     adapter2.getContextHashes?.(health.totalCycles) ?? Promise.resolve(null)
   ]);
   timings["parallelAdvisory"] = t();
@@ -12287,10 +12347,31 @@ ${lines.join("\n")}`;
   const taskCommentsTextFull = taskCommentsResultFull.status === "fulfilled" ? taskCommentsResultFull.value : void 0;
   let registeredDocsTextFull;
   if (docsResultFull.status === "fulfilled" && docsResultFull.value && docsResultFull.value.length > 0) {
-    const docs = docsResultFull.value;
-    const lines = docs.map((d) => `- **${d.title}** (${d.type}) \u2014 ${d.summary}`);
-    registeredDocsTextFull = `${docs.length} active research doc(s):
+    const allDocs = docsResultFull.value;
+    const taskModules = new Set(plannerTasks.map((t2) => t2.module?.toLowerCase()).filter(Boolean));
+    const taskEpics = new Set(plannerTasks.map((t2) => t2.epic?.toLowerCase()).filter(Boolean));
+    const HIGH_VALUE_TYPES = /* @__PURE__ */ new Set(["architecture", "guide", "research"]);
+    const scored = allDocs.map((d) => {
+      let score = 0;
+      const docTags = d.tags.map((tag) => tag.toLowerCase());
+      const docType = d.type?.toLowerCase() ?? "";
+      for (const tag of docTags) {
+        if (taskModules.has(tag) || taskEpics.has(tag)) score += 2;
+      }
+      if (HIGH_VALUE_TYPES.has(docType)) score += 1;
+      if (d.actions?.some((a) => a.status === "pending")) score += 3;
+      const age = health.totalCycles - (d.cycleUpdated ?? d.cycleCreated ?? 0);
+      if (age <= 3) score += 1;
+      return { doc: d, score };
+    });
+    scored.sort((a, b2) => b2.score - a.score);
+    const selected = scored.slice(0, 5);
+    const lines = selected.map(({ doc, score }) => `- **${doc.title}** (${doc.type}) \u2014 ${doc.summary}`);
+    registeredDocsTextFull = `${selected.length} active research doc(s):
 ${lines.join("\n")}`;
+    const logLines = selected.map(({ doc, score }) => `  ${doc.title} [score=${score}]`).join("\n");
+    console.error(`[plan-perf] doc intelligence: selected ${selected.length}/${allDocs.length} docs by relevance:
+${logLines}`);
   }
   logDataSourceSummary("plan (full)", [
     { label: "cycleHealth", hasData: !!health },
@@ -12315,8 +12396,18 @@ ${lines.join("\n")}`;
   const strippedTasks = stripTasksForPlan(tasks);
   const boardFlagsFull = detectBoardFlags(tasks);
   const horizonCtx = buildHorizonContext(phases, tasks) ?? void 0;
+  const ACTIVE_STATUSES2 = /* @__PURE__ */ new Set(["In Progress", "In Review", "Blocked"]);
+  const p3Excluded = strippedTasks.filter(
+    (t2) => t2.priority === "P3 Low" && !ACTIVE_STATUSES2.has(t2.status)
+  );
+  const plannerTasks = strippedTasks.filter(
+    (t2) => t2.priority !== "P3 Low" || ACTIVE_STATUSES2.has(t2.status)
+  );
+  if (p3Excluded.length > 0) {
+    console.error(`[plan-perf] board tiering: excluded ${p3Excluded.length} P3 Low tasks from planner context`);
+  }
   const targetCycle = health.totalCycles + 1;
-  const preAssigned = strippedTasks.filter((t2) => t2.cycle === targetCycle);
+  const preAssigned = plannerTasks.filter((t2) => t2.cycle === targetCycle);
   const preAssignedText = formatPreAssignedTasks(preAssigned, targetCycle);
   const gapFull = health.cyclesSinceLastStrategyReview;
   const lastReviewCycleFull = health.totalCycles - gapFull;
@@ -12328,7 +12419,7 @@ ${lines.join("\n")}`;
     activeDecisions: formatActiveDecisionsForPlan(decisions),
     recentBuildReports: formatBuildReports(cappedReports),
     cycleLog: formatCycleLog(log),
-    board: formatBoardForPlan(strippedTasks, filters, health.totalCycles),
+    board: formatBoardForPlan(plannerTasks, filters, health.totalCycles),
     northStar,
     methodologyMetrics: formatCycleMetrics(metricsSnapshots),
     recentReviews: formatReviews(reviews),
@@ -12356,6 +12447,9 @@ ${lines.join("\n")}`;
   if (savedBytes > 0) {
     console.error(`[plan-perf] context diff saved ${savedBytes} bytes`);
   }
+  const boardChars = ctx.board?.length ?? 0;
+  const totalChars = Object.values(ctx).reduce((sum, v) => sum + (typeof v === "string" ? v.length : 0), 0);
+  console.error(`[plan-perf] context budget: board=${boardChars} chars, total fields=${totalChars} chars (excl. system prompt)`);
   return { context: ctx, contextHashes: newHashes };
 }
 async function transactionalWriteBack(adapter2, cycleNumber, data, contextHashes) {
@@ -12393,7 +12487,7 @@ ${cleanContent}`;
   };
   let dedupedNewTasks = data.newTasks ?? [];
   if (dedupedNewTasks.length > 0) {
-    const existingTasks = await adapter2.queryBoard();
+    const existingTasks = await adapter2.queryBoard({ compact: true });
     const normalise = (s) => s.toLowerCase().replace(/[^a-z0-9]+/g, " ").trim();
     const existingTitles = existingTasks.map((t) => normalise(t.title));
     const MIN_SUBSTRING_LEN = 20;
@@ -12475,7 +12569,7 @@ ${cleanContent}`;
   try {
     const [cycles, boardTasks] = await Promise.all([
       adapter2.readCycles(),
-      adapter2.queryBoard({ status: ["In Cycle", "Backlog", "In Progress", "In Review"] })
+      adapter2.queryBoard({ status: ["In Cycle", "Backlog", "In Progress", "In Review"], compact: true })
     ]);
     const newCycle = cycles.find((s) => s.number === newCycleNumber);
     if (!newCycle) {
@@ -12551,7 +12645,7 @@ ${cleanContent}`;
   const newTaskIdMap = /* @__PURE__ */ new Map();
   const createTasksPromise = (async () => {
     if (!data.newTasks || data.newTasks.length === 0) return;
-    const existingTasks = await adapter2.queryBoard();
+    const existingTasks = await adapter2.queryBoard({ compact: true });
     const normalise = (s) => s.toLowerCase().replace(/[^a-z0-9]+/g, " ").trim();
     const existingTitles = existingTasks.map((t) => normalise(t.title));
     for (let i = 0; i < data.newTasks.length; i++) {
@@ -12786,7 +12880,8 @@ async function validateAndPrepare(adapter2, force) {
     mode = determineMode(health.totalCycles);
     if (health.latestCycleStatus && health.latestCycleStatus !== "complete" && health.latestCycleStatus !== "released" && !force) {
       const activeTasks = await adapter2.queryBoard({
-        status: ["In Progress", "In Review"]
+        status: ["In Progress", "In Review"],
+        compact: true
       });
       const taskNote = activeTasks.length > 0 ? ` ${activeTasks.length} task(s) still active: ${activeTasks.map((t) => t.id).join(", ")}.` : "";
       throw new Error(
@@ -12797,7 +12892,8 @@ Run \`release\` first, or pass \`force: true\` to bypass this block.`
     }
     if (!force) {
       const inReviewTasks = await adapter2.queryBoard({
-        status: ["In Review"]
+        status: ["In Review"],
+        compact: true
       });
       const staleTasks = inReviewTasks.filter(
         (t) => t.cycle !== void 0 && t.cycle <= cycleNumber - 2
@@ -12871,7 +12967,9 @@ async function processLlmOutput(adapter2, config2, rawOutput, mode, cycleNumber,
           durationMs,
           taskCountIn: planRunMeta?.taskCountIn,
           taskCountOut: (writeSummary?.handoffs ?? 0) + (writeSummary?.newTasks ?? 0),
-          backlogDepth: planRunMeta?.backlogDepth
+          backlogDepth: planRunMeta?.backlogDepth,
+          tokenUsage: planRunMeta?.tokenUsage,
+          source: planRunMeta?.source ?? "mcp-server"
         }).catch(() => {
         });
       }
@@ -12968,7 +13066,7 @@ async function preparePlan(adapter2, config2, filters, focus, force, handoffsOnl
   if (skipHandoffs) context.skipHandoffs = true;
   t = startTimer();
   try {
-    const scanTasks = await adapter2.queryBoard({ status: ["Backlog", "In Cycle", "Ready"] });
+    const scanTasks = await adapter2.queryBoard({ status: ["Backlog", "In Cycle", "Ready"], compact: true });
     const candidates = scanTasks.filter((task) => task.priority !== "P3 Low").slice(0, 15).map((task) => ({ id: task.id, title: task.title, notes: task.notes }));
     const scanResult = scanCodebaseForTasks(config2.projectRoot, candidates);
     if (scanResult) context.codebaseScan = scanResult;
@@ -13122,7 +13220,7 @@ function formatPhaseChanges(changes) {
 async function propagatePhaseStatus(adapter2) {
   const [phases, tasks] = await Promise.all([
     adapter2.readPhases(),
-    adapter2.queryBoard()
+    adapter2.queryBoard({ compact: true })
   ]);
   if (phases.length === 0) return [];
   const horizons = await adapter2.readHorizons?.() ?? [];
@@ -13306,7 +13404,6 @@ async function handlePlan(adapter2, config2, args) {
       lastPrepareContextBytes = void 0;
       lastPrepareCycleNumber = void 0;
       lastPrepareSkipHandoffs = void 0;
-      const result = await applyPlan(adapter2, config2, llmResponse, planMode, cycleNumber, strategyReviewWarning, contextHashes, { contextBytes: contextBytes ?? void 0, skipHandoffs: skipHandoffs || void 0 });
       let utilisation;
       if (inputContext) {
         try {
@@ -13314,6 +13411,12 @@ async function handlePlan(adapter2, config2, args) {
         } catch {
         }
       }
+      const result = await applyPlan(adapter2, config2, llmResponse, planMode, cycleNumber, strategyReviewWarning, contextHashes, {
+        contextBytes: contextBytes ?? void 0,
+        skipHandoffs: skipHandoffs || void 0,
+        tokenUsage: utilisation !== void 0 ? { utilisation } : void 0,
+        source: "mcp-server"
+      });
       const response = formatPlanResult({ ...result, contextUtilisation: utilisation, contextBytes, skipHandoffs });
       return {
         ...response,
@@ -21264,6 +21367,49 @@ ${versionDrift}` : "";
       }
     } catch {
     }
+    let researchSignalsNote = "";
+    try {
+      if (adapter2.searchDocs) {
+        const cycleHealth = await adapter2.getCycleHealth();
+        const lastReviewCycle = Math.max(0, cycleHealth.totalCycles - cycleHealth.cyclesSinceLastStrategyReview);
+        const researchDocs = await adapter2.searchDocs({
+          type: "research",
+          hasPendingActions: true,
+          sinceCycle: lastReviewCycle,
+          limit: 10
+        });
+        if (researchDocs.length > 0) {
+          let activeAds = [];
+          try {
+            activeAds = (await adapter2.getActiveDecisions()).filter((a) => !a.superseded);
+          } catch {
+          }
+          const stopWords = /* @__PURE__ */ new Set(["about", "above", "after", "again", "being", "could", "doing", "during", "every", "first", "front", "going", "great", "helps", "large", "later", "level", "local", "makes", "model", "needs", "never", "other", "place", "right", "since", "small", "still", "there", "these", "thing", "those", "three", "under", "until", "using", "where", "which", "while", "would"]);
+          const lines = ["\n\n## Research Signals"];
+          for (const doc of researchDocs) {
+            const docText = [doc.title, doc.summary, ...doc.tags].join(" ").toLowerCase();
+            const relatedAds = activeAds.filter((ad) => {
+              const adWords = ad.title.toLowerCase().split(/\W+/).filter((w) => w.length >= 5 && !stopWords.has(w));
+              return adWords.some((w) => docText.includes(w));
+            });
+            const cycleLabel = `C${doc.cycleUpdated ?? doc.cycleCreated}`;
+            const adRef = relatedAds.length > 0 ? ` \u2014 may relate to ${relatedAds.map((a) => a.displayId).join(", ")}` : "";
+            const pendingActions = doc.actions?.filter((a) => a.status === "pending") ?? [];
+            lines.push(`- **${doc.title}** [${cycleLabel}${adRef}]`);
+            for (const action of pendingActions.slice(0, 2)) {
+              const desc = action.description.length > 100 ? `${action.description.slice(0, 97)}\u2026` : action.description;
+              lines.push(`  \u2192 ${desc}`);
+            }
+            if (pendingActions.length > 2) {
+              lines.push(`  \u2192 \u2026and ${pendingActions.length - 2} more`);
+            }
+          }
+          lines.push("_Factor into next `strategy_review` or run `doc_search` for details._");
+          researchSignalsNote = lines.join("\n");
+        }
+      }
+    } catch {
+    }
     let recsNote = "";
     try {
       const pendingRecs = await adapter2.getPendingRecommendations();
@@ -21314,7 +21460,7 @@ ${versionDrift}` : "";
       }
     } catch {
     }
-    return textResponse(formatOrientSummary(healthResult, buildInfo, hierarchy, latestTag, config2.projectRoot) + ttfvNote + reconciliationNote + unrecordedNote + unregisteredDocsNote + recsNote + pendingReviewNote + patternsNote + unactionedIssuesNote + versionNote + enrichmentNote);
+    return textResponse(formatOrientSummary(healthResult, buildInfo, hierarchy, latestTag, config2.projectRoot) + ttfvNote + reconciliationNote + unrecordedNote + unregisteredDocsNote + researchSignalsNote + recsNote + pendingReviewNote + patternsNote + unactionedIssuesNote + versionNote + enrichmentNote);
   } catch (err) {
     const message = err instanceof Error ? err.message : String(err);
     return errorResponse(`Orient failed: ${message}`);
@@ -22536,41 +22682,7 @@ if (httpPort) {
   if (!httpToken) {
     process.stderr.write("[papi] WARNING: PAPI_HTTP_TOKEN is not set. HTTP transport is unauthenticated \u2014 anyone with the URL can call your PAPI tools. Set PAPI_HTTP_TOKEN to a secret string.\n");
   }
-  const createServerForRequest = () => {
-    if (adapter && !setupError) {
-      return createServer(adapter, config);
-    }
-    const errorServer = new Server2(
-      { name: "papi", version: pkgVersion },
-      { capabilities: { tools: {} } }
-    );
-    const errorMessage = setupError || "Unknown startup error";
-    errorServer.setRequestHandler(ListToolsRequestSchema2, async () => ({
-      tools: [{
-        name: "setup",
-        description: "PAPI is not connected \u2014 run this tool for setup instructions.",
-        inputSchema: { type: "object", properties: {}, required: [] }
-      }]
-    }));
-    errorServer.setRequestHandler(CallToolRequestSchema2, async () => ({
-      content: [{
-        type: "text",
-        text: `# PAPI Connection Error
-
-${errorMessage}
-
-## Quick Fix
-
-If you haven't set up PAPI yet:
-1. Go to https://getpapi.ai/login and sign up
-2. Complete the onboarding wizard \u2014 it generates your config
-3. Copy the config to your project and restart your AI tool
-
-If you already have an account, check that both **PAPI_PROJECT_ID** and **PAPI_DATA_API_KEY** are set in your .mcp.json env config.`
-      }]
-    }));
-    return errorServer;
-  };
+  const httpTransport = new StreamableHTTPServerTransport({ sessionIdGenerator: void 0 });
   const httpServer = createHttpServer((req, res) => {
     if (req.method === "GET" && req.url === "/healthz") {
       res.writeHead(200, { "Content-Type": "text/plain" });
@@ -22579,26 +22691,14 @@ If you already have an account, check that both **PAPI_PROJECT_ID** and **PAPI_D
     }
     if (httpToken) {
       const authHeader = req.headers["authorization"] ?? "";
-      const bearerMatch = authHeader.startsWith("Bearer ") ? authHeader.slice(7) : "";
-      const urlMatch = req.url?.match(/^\/(mcp|sse)\/(.+)$/);
-      const urlToken = urlMatch?.[2];
-      if (bearerMatch === httpToken) {
-      } else if (urlToken === httpToken) {
-        req.url = `/${urlMatch[1]}`;
-      } else {
+      const provided = authHeader.startsWith("Bearer ") ? authHeader.slice(7) : "";
+      if (provided !== httpToken) {
         res.writeHead(401, { "Content-Type": "application/json" });
         res.end(JSON.stringify({ error: "Unauthorized" }));
         return;
       }
     }
     if (req.url === "/mcp" || req.url === "/sse") {
-      req.headers["accept"] = "application/json, text/event-stream";
-      const acceptIdx = req.rawHeaders.findIndex((h) => h.toLowerCase() === "accept");
-      if (acceptIdx >= 0) {
-        req.rawHeaders[acceptIdx + 1] = "application/json, text/event-stream";
-      } else {
-        req.rawHeaders.push("Accept", "application/json, text/event-stream");
-      }
       if (req.method === "POST") {
         const chunks = [];
         req.on("data", (chunk) => chunks.push(chunk));
@@ -22611,42 +22711,23 @@ If you already have an account, check that both **PAPI_PROJECT_ID** and **PAPI_D
             res.end(JSON.stringify({ error: "Invalid JSON body" }));
             return;
           }
-          (async () => {
-            const transport = new StreamableHTTPServerTransport({ sessionIdGenerator: void 0 });
-            const reqServer = createServerForRequest();
-            await reqServer.connect(transport);
-            await transport.handleRequest(req, res, parsedBody);
-            await reqServer.close();
-          })().catch((err) => {
+          httpTransport.handleRequest(req, res, parsedBody).catch((err) => {
             process.stderr.write(`[papi] HTTP transport error: ${err instanceof Error ? err.message : String(err)}
 `);
-            if (!res.headersSent) {
-              res.writeHead(500, { "Content-Type": "application/json" });
-              res.end(JSON.stringify({ error: "Internal server error" }));
-            }
           });
         });
         return;
       }
-      (async () => {
-        const transport = new StreamableHTTPServerTransport({ sessionIdGenerator: void 0 });
-        const reqServer = createServerForRequest();
-        await reqServer.connect(transport);
-        await transport.handleRequest(req, res);
-        await reqServer.close();
-      })().catch((err) => {
+      httpTransport.handleRequest(req, res).catch((err) => {
         process.stderr.write(`[papi] HTTP transport error: ${err instanceof Error ? err.message : String(err)}
 `);
-        if (!res.headersSent) {
-          res.writeHead(500, { "Content-Type": "application/json" });
-          res.end(JSON.stringify({ error: "Internal server error" }));
-        }
       });
       return;
     }
     res.writeHead(404, { "Content-Type": "text/plain" });
     res.end("Not found");
   });
+  await server.connect(httpTransport);
   httpServer.listen(httpPort, httpHost, () => {
     process.stderr.write(`[papi] HTTP transport listening on http://${httpHost}:${httpPort}/mcp
 `);

package/dist/prompts.js

@@ -241,6 +241,7 @@ Standard planning cycle with full board review.
    - Add a \`boardCorrections\` entry for the dependent task with \`updates.dependsOn\` set to the comma-separated upstream IDs \u2014 this persists the dependency so the builder's runtime can reuse the upstream branch.
    - Keep the SCOPE sections independent (each task still has its own deliverable) but note the ordering in "Why now" \u2014 e.g. "depends on task-123 completing the adapter method".
    Do NOT invent dependencies where tasks merely share a module \u2014 only real build-order coupling counts. Linear chains only \u2014 do not attempt to resolve multi-level graphs. When in doubt, omit the dependency and let the builder discover it.
+   **Dependency Chain section (Part 1 markdown):** When intra-cycle dependencies are detected, include a visible **## Dependency Chain** section in Part 1 markdown immediately before the first BUILD HANDOFF block. List each dependency as an arrow chain with a brief reason: \`task-A \u2192 task-B (B calls the adapter method A creates)\`. Then show the full recommended build sequence for all cycle tasks, including standalone tasks: e.g. \`Build order: task-A \u2192 task-B; task-C standalone; task-D standalone\`. Flag circular dependencies with \u26A0\uFE0F and a note. Omit this section entirely when no intra-cycle dependencies exist \u2014 do not include an empty section.
    **Security section guidance:** Each handoff includes a SECURITY CONSIDERATIONS section. Populate it when the task involves: data exposure risks (PII, secrets in logs/storage), secrets or credentials handling (API keys, tokens, env vars), auth/access control changes, or dependency security risks (new packages, version changes). For pure refactoring, documentation, prompt-text, or UI-only tasks, write "None \u2014 no security-relevant changes".
    **Estimation calibration:** Estimate **XS** for: copy/text-only changes, single string replacements, config tweaks, and any task where the scope is "change words in an existing file" with no logic changes. Estimate **S** for: wiring existing adapter methods, adding API routes following established patterns, modifying prompts, or documentation-only changes. Default to S for pattern-following work. Only use M when genuine new architecture, new DB tables, or multi-file architectural changes are needed. Historical data shows systematic over-estimation (198 over vs 8 under out of 528 tasks) \u2014 when in doubt, estimate smaller. If an "Estimation Calibration (Historical)" section is provided in the context below, use its data to adjust your estimates \u2014 it shows how often each estimated size matched the actual effort. Pay special attention to systematic over/under-estimation patterns (e.g. if M\u2192S happens frequently, estimate S instead of M for similar work).
    **Reference docs:** If a task's notes include a \`Reference:\` path (e.g. \`Reference: docs/architecture/papi-brain-v1.md\`), include a REFERENCE DOCS section in the BUILD HANDOFF with those paths. This tells the builder to read the referenced doc for background context before implementing. Do NOT omit or summarise the reference \u2014 pass it through so the builder can access the full document. Only tasks with explicit \`Reference:\` paths in their notes should have this section.
@@ -335,6 +336,38 @@ var PLAN_FRAGMENT_SPIKE = `
      - **DONE CONDITION:** "Question answered OR time-box hit, whichever comes first."
    - Keep SCOPE BOUNDARY, SECURITY CONSIDERATIONS, and PRE-BUILD VERIFICATION as normal.
    - Spikes should be estimated conservatively: XS or S. If a spike needs M+ effort, it's not a spike \u2014 reclassify as a research task.`;
+var PLAN_FRAGMENT_DESIGN_BRIEF = `
+   **Design brief task detection:** When a task's task type is "design-brief", generate a DESIGN BRIEF handoff. Replace the standard SCOPE (DO THIS) section with these type-specific sections:
+   - AUDIENCE: Who this design is for \u2014 persona and context of use (e.g. "non-technical Owner, first dashboard visit")
+   - BRAND CONSTRAINTS: Palette, typography, tone \u2014 pull from \`.impeccable.md\` and \`docs/design/brand-system.md\` if present. If neither exists, state "No brand doc \u2014 Owner should define constraints before starting."
+   - DELIVERABLE FORMAT: What the output looks like \u2014 Claude Design handoff package / annotated mockup / style spec. Be specific so the person doing the work knows what "done" means.
+   - REVIEW POINTS: What the Owner must approve before the design is considered done (e.g. layout, copy, colour, imagery).
+   Keep SCOPE BOUNDARY, ACCEPTANCE CRITERIA, SECURITY CONSIDERATIONS, and PRE-BUILD VERIFICATION sections as normal.
+   Add to ACCEPTANCE CRITERIA: "[ ] Deliverable format confirmed with Owner before starting" and "[ ] Design output is self-contained \u2014 includes enough context for a developer to implement without further clarification."`;
+var PLAN_FRAGMENT_RESEARCH_BRIEF = `
+   **Research brief task detection:** When a task's task type is "research-brief", generate a RESEARCH BRIEF handoff. Replace the standard SCOPE (DO THIS) section with:
+   - GOAL: The specific question this research answers \u2014 one sentence, phrased as a question (e.g. "What onboarding patterns do our top 3 competitors use?")
+   - TIME-BOX: Maximum effort allowed \u2014 XS or S. Stop when the time-box is hit and report what was found, even if incomplete.
+   - OUTPUT: Where findings land \u2014 a doc at \`docs/research/[topic]-findings.md\` or inline in the build report. State the path.
+   - FOLLOW-UP PROTOCOL: Do NOT submit follow-up backlog tasks until the Owner reviews and confirms the findings are actionable.
+   Keep SCOPE BOUNDARY, ACCEPTANCE CRITERIA, SECURITY CONSIDERATIONS, and PRE-BUILD VERIFICATION as normal.
+   Add to ACCEPTANCE CRITERIA: "[ ] Question answered OR time-box hit \u2014 whichever comes first" and "[ ] Findings doc saved before any follow-up tasks are submitted."`;
+var PLAN_FRAGMENT_MARKETING_BRIEF = `
+   **Marketing brief task detection:** When a task's task type is "marketing-brief", generate a MARKETING BRIEF handoff. Replace the standard SCOPE (DO THIS) section with:
+   - AUDIENCE: Who this marketing content targets \u2014 persona, awareness level, channel context (e.g. "cold Discord visitor, zero PAPI context")
+   - CHANNEL: Where this content lives \u2014 Discord, landing page, email, social, etc.
+   - MESSAGE FRAME: The core message to land \u2014 one sentence. What does the reader need to believe after seeing this? (e.g. "PAPI makes AI-assisted building systematic, not chaotic.")
+   - SUCCESS SIGNAL: How the Owner knows the content worked \u2014 clicks, signups, replies, saves, DMs. Be specific.
+   Keep SCOPE BOUNDARY, ACCEPTANCE CRITERIA, SECURITY CONSIDERATIONS, and PRE-BUILD VERIFICATION as normal.
+   Add to ACCEPTANCE CRITERIA: "[ ] Message Frame confirmed with Owner before drafting" and "[ ] Final content reviewed by Owner before publishing."`;
+var PLAN_FRAGMENT_OPS_BRIEF = `
+   **Ops brief task detection:** When a task's task type is "ops-brief", generate an OPS BRIEF handoff. Replace the standard SCOPE (DO THIS) section with:
+   - SYSTEM: Which system or service this ops task touches \u2014 Vercel, Railway, Supabase, GitHub Actions, DNS, etc.
+   - RISK: What could go wrong \u2014 data loss, downtime, broken deployments. Include estimated blast radius (e.g. "affects all authenticated users").
+   - ROLLBACK PLAN: Exact steps to undo the change if something breaks. Must be specific enough to execute under pressure.
+   - DONE CONDITION: The specific observable state that confirms the task is complete \u2014 a health check URL, a metric, a log line, a manual verification step.
+   Keep SCOPE BOUNDARY, ACCEPTANCE CRITERIA, SECURITY CONSIDERATIONS, and PRE-BUILD VERIFICATION as normal.
+   Add to ACCEPTANCE CRITERIA: "[ ] Rollback plan confirmed before executing" and "[ ] Done condition verified after completing."`;
 var PLAN_FRAGMENT_UI = `
    **UI/visual task detection:** Apply these additions ONLY to tasks whose PRIMARY scope is frontend visual work \u2014 the task's main deliverable must be a UI change, new component, visual design, or page. Do NOT apply to backend tasks, DB migrations, or prompt/config changes that merely mention a dashboard or page in passing. Signal: the task would fail if no .tsx/.css files were changed. If uncertain, skip the UI additions.
    When a task IS a UI task (primary scope is visual/frontend):
@@ -451,6 +484,10 @@ Standard planning cycle with full board review.
   if (flags.hasIdeaTasks) parts.push(PLAN_FRAGMENT_IDEA);
   if (flags.hasSpikeTasks) parts.push(PLAN_FRAGMENT_SPIKE);
   if (flags.hasTaskTasks) parts.push(PLAN_FRAGMENT_TASK);
+  if (flags.hasDesignBriefTasks) parts.push(PLAN_FRAGMENT_DESIGN_BRIEF);
+  if (flags.hasResearchBriefTasks) parts.push(PLAN_FRAGMENT_RESEARCH_BRIEF);
+  if (flags.hasMarketingBriefTasks) parts.push(PLAN_FRAGMENT_MARKETING_BRIEF);
+  if (flags.hasOpsBriefTasks) parts.push(PLAN_FRAGMENT_OPS_BRIEF);
   if (flags.hasUITasks) parts.push(PLAN_FRAGMENT_UI);
   parts.push(`
 11. **New Tasks (max 3 per cycle)** \u2014 Actively mine the Recent Build Reports for task candidates. For each report, check:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@papi-ai/server",
-  "version": "0.7.10",
+  "version": "0.7.11",
   "description": "PAPI MCP server — AI-powered sprint planning, build execution, and strategy review for software projects",
   "license": "Elastic-2.0",
   "type": "module",
@@ -44,7 +44,7 @@
     "node": ">=18.0.0"
   },
   "dependencies": {
-    "@anthropic-ai/sdk": "^0.79.0",
+    "@anthropic-ai/sdk": "^0.82.0",
     "@modelcontextprotocol/sdk": "^1.27.1",
     "js-yaml": "^4.1.0"
   },