@papi-ai/server 0.7.10 → 0.7.12

package/dist/index.js

@@ -1453,7 +1453,12 @@ var init_dist2 = __esm({
       research: 2,
       spike: 2,
       idea: 3,
-      discovery: 1
+      discovery: 1,
+      // Non-code brief types for non-technical Owners (AD-12)
+      "design-brief": 1,
+      "research-brief": 1,
+      "marketing-brief": 1,
+      "ops-brief": 1
     };
     VALID_EFFORT_SIZES = /* @__PURE__ */ new Set(["XS", "S", "M", "L", "XL"]);
     SECTION_HEADERS = [
@@ -1575,11 +1580,13 @@ ${TABLE_SEPARATOR}
       }
       /** Prepend a new cycle log entry at the top of the Cycle Log section. */
       async writeCycleLogEntry(entry) {
-        if (!entry.uuid) {
-          entry = { ...entry, uuid: randomUUID6() };
-        }
+        const patched = {
+          ...entry,
+          uuid: entry.uuid || randomUUID6(),
+          date: entry.date ?? (/* @__PURE__ */ new Date()).toISOString()
+        };
         const content = await this.read("SPRINT_LOG.md");
-        await this.write("SPRINT_LOG.md", prependCycleLogEntry(entry, content));
+        await this.write("SPRINT_LOG.md", prependCycleLogEntry(patched, content));
       }
       /** Write a strategy review — for md adapter, delegates to cycle log. */
       async writeStrategyReview(review) {
@@ -3708,7 +3715,7 @@ var init_connection = __esm({
 
 // ../../node_modules/postgres/src/subscribe.js
 function Subscribe(postgres2, options) {
-  const subscribers = /* @__PURE__ */ new Map(), slot = "postgresjs_" + Math.random().toString(36).slice(2), state = {};
+  const subscribers = /* @__PURE__ */ new Map(), slot = "postgresjs_" + Math.random().toString(36).slice(2), state2 = {};
   let connection2, stream, ended = false;
   const sql = subscribe.sql = postgres2({
     ...options,
@@ -3725,7 +3732,7 @@ function Subscribe(postgres2, options) {
       if (ended)
         return;
       stream = null;
-      state.pid = state.secret = void 0;
+      state2.pid = state2.secret = void 0;
       connected(await init(sql, slot, options.publications));
       subscribers.forEach((event) => event.forEach(({ onsubscribe }) => onsubscribe()));
     },
@@ -3756,13 +3763,13 @@ function Subscribe(postgres2, options) {
       connected(x);
       onsubscribe();
       stream && stream.on("error", onerror);
-      return { unsubscribe, state, sql };
+      return { unsubscribe, state: state2, sql };
     });
   }
   function connected(x) {
     stream = x.stream;
-    state.pid = x.state.pid;
-    state.secret = x.state.secret;
+    state2.pid = x.state.pid;
+    state2.secret = x.state.secret;
   }
   async function init(sql2, slot2, publications) {
     if (!publications)
@@ -3774,7 +3781,7 @@ function Subscribe(postgres2, options) {
     const stream2 = await sql2.unsafe(
       `START_REPLICATION SLOT ${slot2} LOGICAL ${x.consistent_point} (proto_version '1', publication_names '${publications}')`
     ).writable();
-    const state2 = {
+    const state3 = {
       lsn: Buffer.concat(x.consistent_point.split("/").map((x2) => Buffer.from(("00000000" + x2).slice(-8), "hex")))
     };
     stream2.on("data", data);
@@ -3786,9 +3793,9 @@ function Subscribe(postgres2, options) {
     }
     function data(x2) {
       if (x2[0] === 119) {
-        parse(x2.subarray(25), state2, sql2.options.parsers, handle, options.transform);
+        parse(x2.subarray(25), state3, sql2.options.parsers, handle, options.transform);
       } else if (x2[0] === 107 && x2[17]) {
-        state2.lsn = x2.subarray(1, 9);
+        state3.lsn = x2.subarray(1, 9);
         pong();
       }
     }
@@ -3804,7 +3811,7 @@ function Subscribe(postgres2, options) {
     function pong() {
       const x2 = Buffer.alloc(34);
       x2[0] = "r".charCodeAt(0);
-      x2.fill(state2.lsn, 1);
+      x2.fill(state3.lsn, 1);
       x2.writeBigInt64BE(BigInt(Date.now() - Date.UTC(2e3, 0, 1)) * BigInt(1e3), 25);
       stream2.write(x2);
     }
@@ -3816,12 +3823,12 @@ function Subscribe(postgres2, options) {
 function Time(x) {
   return new Date(Date.UTC(2e3, 0, 1) + Number(x / BigInt(1e3)));
 }
-function parse(x, state, parsers2, handle, transform) {
+function parse(x, state2, parsers2, handle, transform) {
   const char = (acc, [k, v]) => (acc[k.charCodeAt(0)] = v, acc);
   Object.entries({
     R: (x2) => {
       let i = 1;
-      const r = state[x2.readUInt32BE(i)] = {
+      const r = state2[x2.readUInt32BE(i)] = {
         schema: x2.toString("utf8", i += 4, i = x2.indexOf(0, i)) || "pg_catalog",
         table: x2.toString("utf8", i + 1, i = x2.indexOf(0, i + 1)),
         columns: Array(x2.readUInt16BE(i += 2)),
@@ -3848,12 +3855,12 @@ function parse(x, state, parsers2, handle, transform) {
     },
     // Origin
     B: (x2) => {
-      state.date = Time(x2.readBigInt64BE(9));
-      state.lsn = x2.subarray(1, 9);
+      state2.date = Time(x2.readBigInt64BE(9));
+      state2.lsn = x2.subarray(1, 9);
     },
     I: (x2) => {
       let i = 1;
-      const relation = state[x2.readUInt32BE(i)];
+      const relation = state2[x2.readUInt32BE(i)];
       const { row } = tuples(x2, relation.columns, i += 7, transform);
       handle(row, {
         command: "insert",
@@ -3862,7 +3869,7 @@ function parse(x, state, parsers2, handle, transform) {
     },
     D: (x2) => {
       let i = 1;
-      const relation = state[x2.readUInt32BE(i)];
+      const relation = state2[x2.readUInt32BE(i)];
       i += 4;
       const key = x2[i] === 75;
       handle(
@@ -3876,7 +3883,7 @@ function parse(x, state, parsers2, handle, transform) {
     },
     U: (x2) => {
       let i = 1;
-      const relation = state[x2.readUInt32BE(i)];
+      const relation = state2[x2.readUInt32BE(i)];
       i += 4;
       const key = x2[i] === 75;
       const xs = key || x2[i] === 79 ? tuples(x2, relation.columns, i += 3, transform) : null;
@@ -4612,6 +4619,7 @@ function rowToCycleLogEntry(row) {
   if (row.notes != null) entry.notes = row.notes;
   if (row.task_count != null) entry.taskCount = row.task_count;
   if (row.effort_points != null) entry.effortPoints = row.effort_points;
+  if (row.updated_at != null) entry.date = row.updated_at;
   return entry;
 }
 function rowToPhase(row) {
@@ -6276,7 +6284,7 @@ EXCEPTION WHEN duplicate_object THEN NULL; END $$;
       async getCycleLog(limit) {
         if (limit != null) {
           const rows2 = await this.sql`
-        SELECT id, cycle_number, title, content, carry_forward, notes, task_count, effort_points
+        SELECT id, cycle_number, title, content, carry_forward, notes, task_count, effort_points, updated_at
         FROM planning_log_entries
         WHERE project_id = ${this.projectId}
         ORDER BY cycle_number DESC
@@ -6285,7 +6293,7 @@ EXCEPTION WHEN duplicate_object THEN NULL; END $$;
           return rows2.map(rowToCycleLogEntry);
         }
         const rows = await this.sql`
-      SELECT id, cycle_number, title, content, carry_forward, notes, task_count, effort_points
+      SELECT id, cycle_number, title, content, carry_forward, notes, task_count, effort_points, updated_at
       FROM planning_log_entries
       WHERE project_id = ${this.projectId}
       ORDER BY cycle_number DESC
@@ -6295,7 +6303,7 @@ EXCEPTION WHEN duplicate_object THEN NULL; END $$;
       }
       async getCycleLogSince(cycleNumber) {
         const rows = await this.sql`
-      SELECT id, cycle_number, title, content, carry_forward, notes, task_count, effort_points
+      SELECT id, cycle_number, title, content, carry_forward, notes, task_count, effort_points, updated_at
       FROM planning_log_entries
       WHERE project_id = ${this.projectId}
         AND cycle_number >= ${cycleNumber}
@@ -6346,7 +6354,8 @@ ${newParts.join("\n")}` : newParts.join("\n");
         carry_forward = EXCLUDED.carry_forward,
         notes = EXCLUDED.notes,
         task_count = EXCLUDED.task_count,
-        effort_points = EXCLUDED.effort_points
+        effort_points = EXCLUDED.effort_points,
+        updated_at = now()
     `;
       }
       async writeStrategyReview(review) {
@@ -6724,14 +6733,21 @@ ${newParts.join("\n")}` : newParts.join("\n");
       // Board (Tasks)
       // -------------------------------------------------------------------------
       async queryBoard(options) {
-        if (!options) {
-          const rows2 = await this.sql`
-        SELECT id, project_id, display_id, title, status, priority, complexity, module, epic, phase, owner, reviewed, cycle, created_cycle, created_at, why, depends_on, notes, closure_reason, state_history, build_handoff, build_report, task_type, maturity, stage_id, doc_ref, source, opportunity, updated_at
-        FROM cycle_tasks
-        WHERE project_id = ${this.projectId}
-        ORDER BY display_id
-        LIMIT 2000 -- hard ceiling; single project task count won't approach this
-      `;
+        const compact = options?.compact === true;
+        if (!options || Object.keys(options).length === 1 && compact) {
+          const rows2 = compact ? await this.sql`
+            SELECT id, project_id, display_id, title, status, priority, complexity, module, epic, phase, owner, reviewed, cycle, created_cycle, created_at, why, depends_on, notes, closure_reason, task_type, maturity, stage_id, doc_ref, source, opportunity, updated_at
+            FROM cycle_tasks
+            WHERE project_id = ${this.projectId}
+            ORDER BY display_id
+            LIMIT 2000
+          ` : await this.sql`
+            SELECT id, project_id, display_id, title, status, priority, complexity, module, epic, phase, owner, reviewed, cycle, created_cycle, created_at, why, depends_on, notes, closure_reason, state_history, build_handoff, build_report, task_type, maturity, stage_id, doc_ref, source, opportunity, updated_at
+            FROM cycle_tasks
+            WHERE project_id = ${this.projectId}
+            ORDER BY display_id
+            LIMIT 2000 -- hard ceiling; single project task count won't approach this
+          `;
           return rows2.map(rowToTask);
         }
         const conditions = [
@@ -6766,11 +6782,15 @@ ${newParts.join("\n")}` : newParts.join("\n");
         for (let i = 1; i < conditions.length; i++) {
           where = this.sql`${where} AND ${conditions[i]}`;
         }
-        const rows = await this.sql`
-      SELECT id, project_id, display_id, title, status, priority, complexity, module, epic, phase, owner, reviewed, cycle, created_cycle, created_at, why, depends_on, notes, closure_reason, state_history, build_handoff, build_report, task_type, maturity, stage_id, doc_ref, source, opportunity, updated_at
-      FROM cycle_tasks WHERE ${where} ORDER BY display_id
-      LIMIT 2000 -- matches no-options path ceiling
-    `;
+        const rows = compact ? await this.sql`
+          SELECT id, project_id, display_id, title, status, priority, complexity, module, epic, phase, owner, reviewed, cycle, created_cycle, created_at, why, depends_on, notes, closure_reason, task_type, maturity, stage_id, doc_ref, source, opportunity, updated_at
+          FROM cycle_tasks WHERE ${where} ORDER BY display_id
+          LIMIT 2000
+        ` : await this.sql`
+          SELECT id, project_id, display_id, title, status, priority, complexity, module, epic, phase, owner, reviewed, cycle, created_cycle, created_at, why, depends_on, notes, closure_reason, state_history, build_handoff, build_report, task_type, maturity, stage_id, doc_ref, source, opportunity, updated_at
+          FROM cycle_tasks WHERE ${where} ORDER BY display_id
+          LIMIT 2000 -- matches no-options path ceiling
+        `;
         return rows.map(rowToTask);
       }
       async getTask(id) {
@@ -7802,7 +7822,8 @@ ${r.content}` + (r.carry_forward ? `
         await this.sql`
       INSERT INTO plan_runs (
         project_id, cycle_number, context_bytes, duration_ms,
-        task_count_in, task_count_out, backlog_depth, notes
+        task_count_in, task_count_out, backlog_depth, notes,
+        token_usage, source
       ) VALUES (
         ${this.projectId},
         ${entry.cycleNumber},
@@ -7811,7 +7832,9 @@ ${r.content}` + (r.carry_forward ? `
         ${entry.taskCountIn ?? null},
         ${entry.taskCountOut ?? null},
         ${entry.backlogDepth ?? null},
-        ${entry.notes ?? null}
+        ${entry.notes ?? null},
+        ${entry.tokenUsage ? this.sql.json(entry.tokenUsage) : null},
+        ${entry.source ?? null}
       )
     `;
       }
@@ -7822,7 +7845,7 @@ ${r.content}` + (r.carry_forward ? `
         const [row] = await this.sql`
       INSERT INTO bug_reports (project_id, user_id, description, diagnostics, status)
       VALUES (
-        ${report.projectId},
+        ${this.projectId},
         ${report.userId ?? null},
         ${report.description},
         ${JSON.stringify(report.diagnostics)},
@@ -7832,7 +7855,7 @@ ${r.content}` + (r.carry_forward ? `
     `;
         return {
           id: row.id,
-          projectId: report.projectId,
+          projectId: this.projectId,
           userId: report.userId,
           description: report.description,
           diagnostics: report.diagnostics,
@@ -7947,7 +7970,8 @@ ${r.content}` + (r.carry_forward ? `
           title = EXCLUDED.title,
           content = EXCLUDED.content,
           carry_forward = EXCLUDED.carry_forward,
-          notes = EXCLUDED.notes
+          notes = EXCLUDED.notes,
+          updated_at = now()
       `;
           if (payload.healthUpdates.boardHealth != null || payload.healthUpdates.strategicDirection != null) {
             const [latest] = await tx`
@@ -9223,9 +9247,9 @@ var init_git = __esm({
 });
 
 // src/index.ts
-import { readFileSync as readFileSync4 } from "fs";
+import { readFileSync as readFileSync6 } from "fs";
 import { createServer as createHttpServer } from "http";
-import { dirname as dirname2, join as join11 } from "path";
+import { dirname as dirname2, join as join13 } from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
@@ -9257,7 +9281,17 @@ function loadConfig() {
   const dataEndpoint = process.env.PAPI_DATA_ENDPOINT;
   const databaseUrl = process.env.DATABASE_URL;
   const explicitAdapter = process.env.PAPI_ADAPTER;
-  const adapterType = papiEndpoint ? "pg" : databaseUrl && explicitAdapter === "pg" ? "pg" : dataEndpoint ? "proxy" : explicitAdapter ? explicitAdapter : databaseUrl ? "pg" : "proxy";
+  const projectId = process.env.PAPI_PROJECT_ID;
+  let adapterType = papiEndpoint ? "pg" : databaseUrl && explicitAdapter === "pg" ? "pg" : dataEndpoint ? "proxy" : explicitAdapter ? explicitAdapter : databaseUrl ? "pg" : "proxy";
+  if (projectId && !databaseUrl && !papiEndpoint && adapterType === "md") {
+    adapterType = "proxy";
+    console.error("[papi] PAPI_PROJECT_ID detected \u2014 switching to proxy adapter (md adapter blocked for external users).");
+  }
+  if (!projectId && !databaseUrl && !papiEndpoint && adapterType === "md") {
+    throw new Error(
+      "PAPI_PROJECT_ID is required to connect to your project.\n\nGet yours at https://getpapi.ai/setup\n\nAlready have one? Make sure PAPI_PROJECT_ID is set in your .mcp.json env config."
+    );
+  }
   return {
     projectRoot,
     papiDir: path.join(projectRoot, ".papi"),
@@ -9471,8 +9505,9 @@ Check PAPI_PROJECT_ID in your .mcp.json config. Find your project ID in the PAPI
 }
 
 // src/server.ts
+import { readFileSync as readFileSync5 } from "fs";
 import { access as access4, readdir as readdir2, readFile as readFile5 } from "fs/promises";
-import { join as join10, dirname } from "path";
+import { join as join12, dirname } from "path";
 import { fileURLToPath } from "url";
 import { Server } from "@modelcontextprotocol/sdk/server/index.js";
 import {
@@ -9678,6 +9713,17 @@ ${formatted}`;
   }
   return sections.join("\n\n");
 }
+function formatCandidateTaskFullNotes(tasks) {
+  const candidates = tasks.filter((t) => !PLAN_EXCLUDED_STATUSES.has(t.status)).filter((t) => (t.notes?.length ?? 0) > PLAN_NOTES_MAX_LENGTH);
+  if (candidates.length === 0) return void 0;
+  const lines = candidates.map((t) => `**${t.id}** \u2014 ${t.title}
+${t.notes}`);
+  return [
+    `${candidates.length} candidate task(s) have notes longer than ${PLAN_NOTES_MAX_LENGTH} chars. Full untruncated notes below \u2014 reference these when generating BUILD HANDOFFs so submitter context, constraints, and reasoning are preserved. The Board section above uses truncated notes for concise task selection; this section supplies the missing detail for tasks you choose to schedule.`,
+    "",
+    ...lines
+  ].join("\n\n");
+}
 function formatBoardForReview(tasks) {
   if (tasks.length === 0) return "No tasks on the board.";
   return tasks.map(
@@ -10495,9 +10541,11 @@ Standard planning cycle with full board review.
    - Add a \`boardCorrections\` entry for the dependent task with \`updates.dependsOn\` set to the comma-separated upstream IDs \u2014 this persists the dependency so the builder's runtime can reuse the upstream branch.
    - Keep the SCOPE sections independent (each task still has its own deliverable) but note the ordering in "Why now" \u2014 e.g. "depends on task-123 completing the adapter method".
    Do NOT invent dependencies where tasks merely share a module \u2014 only real build-order coupling counts. Linear chains only \u2014 do not attempt to resolve multi-level graphs. When in doubt, omit the dependency and let the builder discover it.
+   **Dependency Chain section (Part 1 markdown):** When intra-cycle dependencies are detected, include a visible **## Dependency Chain** section in Part 1 markdown immediately before the first BUILD HANDOFF block. List each dependency as an arrow chain with a brief reason: \`task-A \u2192 task-B (B calls the adapter method A creates)\`. Then show the full recommended build sequence for all cycle tasks, including standalone tasks: e.g. \`Build order: task-A \u2192 task-B; task-C standalone; task-D standalone\`. Flag circular dependencies with \u26A0\uFE0F and a note. Omit this section entirely when no intra-cycle dependencies exist \u2014 do not include an empty section.
    **Security section guidance:** Each handoff includes a SECURITY CONSIDERATIONS section. Populate it when the task involves: data exposure risks (PII, secrets in logs/storage), secrets or credentials handling (API keys, tokens, env vars), auth/access control changes, or dependency security risks (new packages, version changes). For pure refactoring, documentation, prompt-text, or UI-only tasks, write "None \u2014 no security-relevant changes".
    **Estimation calibration:** Estimate **XS** for: copy/text-only changes, single string replacements, config tweaks, and any task where the scope is "change words in an existing file" with no logic changes. Estimate **S** for: wiring existing adapter methods, adding API routes following established patterns, modifying prompts, or documentation-only changes. Default to S for pattern-following work. Only use M when genuine new architecture, new DB tables, or multi-file architectural changes are needed. Historical data shows systematic over-estimation (198 over vs 8 under out of 528 tasks) \u2014 when in doubt, estimate smaller. If an "Estimation Calibration (Historical)" section is provided in the context below, use its data to adjust your estimates \u2014 it shows how often each estimated size matched the actual effort. Pay special attention to systematic over/under-estimation patterns (e.g. if M\u2192S happens frequently, estimate S instead of M for similar work).
    **Reference docs:** If a task's notes include a \`Reference:\` path (e.g. \`Reference: docs/architecture/papi-brain-v1.md\`), include a REFERENCE DOCS section in the BUILD HANDOFF with those paths. This tells the builder to read the referenced doc for background context before implementing. Do NOT omit or summarise the reference \u2014 pass it through so the builder can access the full document. Only tasks with explicit \`Reference:\` paths in their notes should have this section.
+   **Full notes lookup:** Notes in the Board section are truncated to 300 chars for concise task selection. When generating a BUILD HANDOFF for a task, check the "Full Notes for Candidate Tasks" section (if present in context) for that task's complete untruncated notes before writing SCOPE, SCOPE BOUNDARY, and PRE-MORTEM. Submitter context, constraints, and reasoning often live past the 300-char cutoff and must not be dropped from the handoff.
    **Pre-build verification:** EVERY handoff MUST include a PRE-BUILD VERIFICATION section listing 2-5 specific file paths the builder should read before implementing. Derive these from FILES LIKELY TOUCHED \u2014 pick the files most likely to already contain the target functionality. This is the #1 prevention mechanism for wasted build slots (C120, C125, C126 all scheduled already-shipped work). If the builder finds >80% of the scope already implemented, they report "already built" instead of re-implementing.
    **Pre-mortem:** For projects with 10+ cycles, include a PRE-MORTEM section in every BUILD HANDOFF with 1-3 bullet points: (a) most likely technical blocker based on module history, (b) integration risk with adjacent systems, (c) scope creep signal \u2014 what the builder might be tempted to expand beyond scope. Draw from \`dead_ends\` and \`surprises\` in recent build reports for the same module. Omit this section entirely for projects with fewer than 10 cycles.
    **Build order in cycle log:** If any intra-cycle dependencies were detected in this cycle, include a "Build Order" paragraph in \`cycleLogNotes\` showing the recommended build sequence as arrow chains (e.g. "Build order: task-123 \u2192 task-124; task-130 standalone"). Skip this paragraph when no dependencies exist.
@@ -10589,6 +10637,38 @@ var PLAN_FRAGMENT_SPIKE = `
      - **DONE CONDITION:** "Question answered OR time-box hit, whichever comes first."
    - Keep SCOPE BOUNDARY, SECURITY CONSIDERATIONS, and PRE-BUILD VERIFICATION as normal.
    - Spikes should be estimated conservatively: XS or S. If a spike needs M+ effort, it's not a spike \u2014 reclassify as a research task.`;
+var PLAN_FRAGMENT_DESIGN_BRIEF = `
+   **Design brief task detection:** When a task's task type is "design-brief", generate a DESIGN BRIEF handoff. Replace the standard SCOPE (DO THIS) section with these type-specific sections:
+   - AUDIENCE: Who this design is for \u2014 persona and context of use (e.g. "non-technical Owner, first dashboard visit")
+   - BRAND CONSTRAINTS: Palette, typography, tone \u2014 pull from \`.impeccable.md\` and \`docs/design/brand-system.md\` if present. If neither exists, state "No brand doc \u2014 Owner should define constraints before starting."
+   - DELIVERABLE FORMAT: What the output looks like \u2014 Claude Design handoff package / annotated mockup / style spec. Be specific so the person doing the work knows what "done" means.
+   - REVIEW POINTS: What the Owner must approve before the design is considered done (e.g. layout, copy, colour, imagery).
+   Keep SCOPE BOUNDARY, ACCEPTANCE CRITERIA, SECURITY CONSIDERATIONS, and PRE-BUILD VERIFICATION sections as normal.
+   Add to ACCEPTANCE CRITERIA: "[ ] Deliverable format confirmed with Owner before starting" and "[ ] Design output is self-contained \u2014 includes enough context for a developer to implement without further clarification."`;
+var PLAN_FRAGMENT_RESEARCH_BRIEF = `
+   **Research brief task detection:** When a task's task type is "research-brief", generate a RESEARCH BRIEF handoff. Replace the standard SCOPE (DO THIS) section with:
+   - GOAL: The specific question this research answers \u2014 one sentence, phrased as a question (e.g. "What onboarding patterns do our top 3 competitors use?")
+   - TIME-BOX: Maximum effort allowed \u2014 XS or S. Stop when the time-box is hit and report what was found, even if incomplete.
+   - OUTPUT: Where findings land \u2014 a doc at \`docs/research/[topic]-findings.md\` or inline in the build report. State the path.
+   - FOLLOW-UP PROTOCOL: Do NOT submit follow-up backlog tasks until the Owner reviews and confirms the findings are actionable.
+   Keep SCOPE BOUNDARY, ACCEPTANCE CRITERIA, SECURITY CONSIDERATIONS, and PRE-BUILD VERIFICATION as normal.
+   Add to ACCEPTANCE CRITERIA: "[ ] Question answered OR time-box hit \u2014 whichever comes first" and "[ ] Findings doc saved before any follow-up tasks are submitted."`;
+var PLAN_FRAGMENT_MARKETING_BRIEF = `
+   **Marketing brief task detection:** When a task's task type is "marketing-brief", generate a MARKETING BRIEF handoff. Replace the standard SCOPE (DO THIS) section with:
+   - AUDIENCE: Who this marketing content targets \u2014 persona, awareness level, channel context (e.g. "cold Discord visitor, zero PAPI context")
+   - CHANNEL: Where this content lives \u2014 Discord, landing page, email, social, etc.
+   - MESSAGE FRAME: The core message to land \u2014 one sentence. What does the reader need to believe after seeing this? (e.g. "PAPI makes AI-assisted building systematic, not chaotic.")
+   - SUCCESS SIGNAL: How the Owner knows the content worked \u2014 clicks, signups, replies, saves, DMs. Be specific.
+   Keep SCOPE BOUNDARY, ACCEPTANCE CRITERIA, SECURITY CONSIDERATIONS, and PRE-BUILD VERIFICATION as normal.
+   Add to ACCEPTANCE CRITERIA: "[ ] Message Frame confirmed with Owner before drafting" and "[ ] Final content reviewed by Owner before publishing."`;
+var PLAN_FRAGMENT_OPS_BRIEF = `
+   **Ops brief task detection:** When a task's task type is "ops-brief", generate an OPS BRIEF handoff. Replace the standard SCOPE (DO THIS) section with:
+   - SYSTEM: Which system or service this ops task touches \u2014 Vercel, Railway, Supabase, GitHub Actions, DNS, etc.
+   - RISK: What could go wrong \u2014 data loss, downtime, broken deployments. Include estimated blast radius (e.g. "affects all authenticated users").
+   - ROLLBACK PLAN: Exact steps to undo the change if something breaks. Must be specific enough to execute under pressure.
+   - DONE CONDITION: The specific observable state that confirms the task is complete \u2014 a health check URL, a metric, a log line, a manual verification step.
+   Keep SCOPE BOUNDARY, ACCEPTANCE CRITERIA, SECURITY CONSIDERATIONS, and PRE-BUILD VERIFICATION as normal.
+   Add to ACCEPTANCE CRITERIA: "[ ] Rollback plan confirmed before executing" and "[ ] Done condition verified after completing."`;
 var PLAN_FRAGMENT_UI = `
    **UI/visual task detection:** Apply these additions ONLY to tasks whose PRIMARY scope is frontend visual work \u2014 the task's main deliverable must be a UI change, new component, visual design, or page. Do NOT apply to backend tasks, DB migrations, or prompt/config changes that merely mention a dashboard or page in passing. Signal: the task would fail if no .tsx/.css files were changed. If uncertain, skip the UI additions.
    When a task IS a UI task (primary scope is visual/frontend):
@@ -10696,6 +10776,7 @@ Standard planning cycle with full board review.
    **Security section guidance:** Each handoff includes a SECURITY CONSIDERATIONS section. Populate it when the task involves: data exposure risks (PII, secrets in logs/storage), secrets or credentials handling (API keys, tokens, env vars), auth/access control changes, or dependency security risks (new packages, version changes). For pure refactoring, documentation, prompt-text, or UI-only tasks, write "None \u2014 no security-relevant changes".
    **Estimation calibration:** Estimate **XS** for: copy/text-only changes, single string replacements, config tweaks, and any task where the scope is "change words in an existing file" with no logic changes. Estimate **S** for: wiring existing adapter methods, adding API routes following established patterns, modifying prompts, or documentation-only changes. Default to S for pattern-following work. Only use M when genuine new architecture, new DB tables, or multi-file architectural changes are needed. Historical data shows systematic over-estimation (198 over vs 8 under out of 528 tasks) \u2014 when in doubt, estimate smaller. If an "Estimation Calibration (Historical)" section is provided in the context below, use its data to adjust your estimates \u2014 it shows how often each estimated size matched the actual effort. Pay special attention to systematic over/under-estimation patterns (e.g. if M\u2192S happens frequently, estimate S instead of M for similar work).
    **Reference docs:** If a task's notes include a \`Reference:\` path (e.g. \`Reference: docs/architecture/papi-brain-v1.md\`), include a REFERENCE DOCS section in the BUILD HANDOFF with those paths. This tells the builder to read the referenced doc for background context before implementing. Do NOT omit or summarise the reference \u2014 pass it through so the builder can access the full document. Only tasks with explicit \`Reference:\` paths in their notes should have this section.
+   **Full notes lookup:** Notes in the Board section are truncated to 300 chars for concise task selection. When generating a BUILD HANDOFF for a task, check the "Full Notes for Candidate Tasks" section (if present in context) for that task's complete untruncated notes before writing SCOPE, SCOPE BOUNDARY, and PRE-MORTEM. Submitter context, constraints, and reasoning often live past the 300-char cutoff and must not be dropped from the handoff.
    **Pre-build verification:** EVERY handoff MUST include a PRE-BUILD VERIFICATION section listing 2-5 specific file paths the builder should read before implementing. Derive these from FILES LIKELY TOUCHED \u2014 pick the files most likely to already contain the target functionality. This is the #1 prevention mechanism for wasted build slots (C120, C125, C126 all scheduled already-shipped work). If the builder finds >80% of the scope already implemented, they report "already built" instead of re-implementing.
    **Pre-mortem:** For projects with 10+ cycles, include a PRE-MORTEM section in every BUILD HANDOFF with 1-3 bullet points: (a) most likely technical blocker based on module history, (b) integration risk with adjacent systems, (c) scope creep signal \u2014 what the builder might be tempted to expand beyond scope. Draw from \`dead_ends\` and \`surprises\` in recent build reports for the same module. Omit this section entirely for projects with fewer than 10 cycles.
    **Intra-cycle dependency detection:** After selecting cycle tasks, check every pair for build-order dependencies. Two tasks A and B have an intra-cycle dependency when A must be built before B because B consumes an artifact A creates \u2014 e.g. A adds a new adapter method that B calls, A creates a DB migration B depends on, A introduces a new shared type B imports, A refactors a utility B modifies. Signals: same module + adjacent scope (one is "add X", another is "use X"), or notes explicitly reference the other task. For each dependency detected: (a) populate the DEPENDS ON section in the dependent task's BUILD HANDOFF with the upstream task ID(s); (b) add a \`boardCorrections\` entry for the dependent task with \`updates.dependsOn\` set to the comma-separated upstream IDs \u2014 this persists the dependency so the builder's runtime can reuse the upstream branch; (c) keep SCOPE sections independent but note the ordering in "Why now". Do NOT invent dependencies where tasks merely share a module \u2014 only real build-order coupling counts. Linear chains only \u2014 no multi-level graph resolution. When in doubt, omit.
@@ -10705,6 +10786,10 @@ Standard planning cycle with full board review.
   if (flags.hasIdeaTasks) parts.push(PLAN_FRAGMENT_IDEA);
   if (flags.hasSpikeTasks) parts.push(PLAN_FRAGMENT_SPIKE);
   if (flags.hasTaskTasks) parts.push(PLAN_FRAGMENT_TASK);
+  if (flags.hasDesignBriefTasks) parts.push(PLAN_FRAGMENT_DESIGN_BRIEF);
+  if (flags.hasResearchBriefTasks) parts.push(PLAN_FRAGMENT_RESEARCH_BRIEF);
+  if (flags.hasMarketingBriefTasks) parts.push(PLAN_FRAGMENT_MARKETING_BRIEF);
+  if (flags.hasOpsBriefTasks) parts.push(PLAN_FRAGMENT_OPS_BRIEF);
   if (flags.hasUITasks) parts.push(PLAN_FRAGMENT_UI);
   parts.push(`
 11. **New Tasks (max 3 per cycle)** \u2014 Actively mine the Recent Build Reports for task candidates. For each report, check:
@@ -10795,6 +10880,9 @@ function buildPlanUserMessage(ctx) {
     if (ctx.board) {
       parts.push("### Board", "", ctx.board, "");
     }
+    if (ctx.candidateTaskFullNotes) {
+      parts.push("### Full Notes for Candidate Tasks", "", ctx.candidateTaskFullNotes, "");
+    }
     if (ctx.preAssignedTasks) {
       parts.push("### Pre-Assigned Tasks", "", ctx.preAssignedTasks, "");
     }
@@ -11961,6 +12049,10 @@ function detectBoardFlags(tasks) {
   let hasSpikeTasks = false;
   let hasTaskTasks = false;
   let hasUITasks = false;
+  let hasDesignBriefTasks = false;
+  let hasResearchBriefTasks = false;
+  let hasMarketingBriefTasks = false;
+  let hasOpsBriefTasks = false;
   const uiKeywords = /\b(visual|design|UI|styling|refresh|frontend|landing page|hero|carousel|theme|layout|cockpit|dashboard|page)\b/i;
   for (const t of tasks) {
     if (t.taskType === "bug" || /^(Bug:|Fix:)/i.test(t.title)) hasBugTasks = true;
@@ -11968,9 +12060,13 @@ function detectBoardFlags(tasks) {
     if (t.taskType === "idea") hasIdeaTasks = true;
     if (t.taskType === "spike" || /^Spike:/i.test(t.title)) hasSpikeTasks = true;
     if (t.taskType === "task") hasTaskTasks = true;
+    if (t.taskType === "design-brief") hasDesignBriefTasks = true;
+    if (t.taskType === "research-brief") hasResearchBriefTasks = true;
+    if (t.taskType === "marketing-brief") hasMarketingBriefTasks = true;
+    if (t.taskType === "ops-brief") hasOpsBriefTasks = true;
     if (uiKeywords.test(t.title) || uiKeywords.test(t.notes ?? "")) hasUITasks = true;
   }
-  return { hasBugTasks, hasResearchTasks, hasIdeaTasks, hasSpikeTasks, hasTaskTasks, hasUITasks };
+  return { hasBugTasks, hasResearchTasks, hasIdeaTasks, hasSpikeTasks, hasTaskTasks, hasUITasks, hasDesignBriefTasks, hasResearchBriefTasks, hasMarketingBriefTasks, hasOpsBriefTasks };
 }
 function detectBoardFlagsFromText(boardText) {
   return {
@@ -11979,7 +12075,11 @@ function detectBoardFlagsFromText(boardText) {
     hasIdeaTasks: /\bidea\b/i.test(boardText),
     hasSpikeTasks: /\b(spike|Spike:)\b/i.test(boardText),
     hasTaskTasks: /\btask\b/i.test(boardText),
-    hasUITasks: /\b(visual|design|UI|styling|refresh|frontend|landing page|hero|carousel|theme|layout|cockpit|dashboard|page)\b/i.test(boardText)
+    hasUITasks: /\b(visual|design|UI|styling|refresh|frontend|landing page|hero|carousel|theme|layout|cockpit|dashboard|page)\b/i.test(boardText),
+    hasDesignBriefTasks: /\bdesign-brief\b/i.test(boardText),
+    hasResearchBriefTasks: /\bresearch-brief\b/i.test(boardText),
+    hasMarketingBriefTasks: /\bmarketing-brief\b/i.test(boardText),
+    hasOpsBriefTasks: /\bops-brief\b/i.test(boardText)
   };
 }
 function hashSection(content) {
@@ -12125,7 +12225,7 @@ async function assembleContext(adapter2, mode, _config, filters, focus) {
       ]),
       adapter2.searchDocs?.({ status: "active", limit: 5 }),
       adapter2.getCycleLog(5),
-      adapter2.queryBoard({ status: ["Backlog", "In Cycle", "Ready"] }),
+      adapter2.queryBoard({ status: ["Backlog", "In Cycle", "Ready"], compact: true }),
       Promise.resolve(leanBuildReports.slice(0, 10)),
       adapter2.getContextHashes?.(health.totalCycles) ?? Promise.resolve(null)
     ]);
@@ -12178,6 +12278,10 @@ ${lines.join("\n")}`;
     if (reportsForCapsResult.status === "fulfilled") {
       recentlyShippedLean = formatRecentlyShippedCapabilities(reportsForCapsResult.value);
     }
+    let candidateTaskFullNotesLean;
+    if (preAssignedResult.status === "fulfilled") {
+      candidateTaskFullNotesLean = formatCandidateTaskFullNotes(preAssignedResult.value);
+    }
     logDataSourceSummary("plan (lean)", [
       { label: "cycleHealth", hasData: !!health },
       { label: "productBrief", hasData: warnIfEmpty("productBrief", productBrief) },
@@ -12215,7 +12319,8 @@ ${lines.join("\n")}`;
       carryForwardStaleness: carryForwardStalenessLean,
       preAssignedTasks: preAssignedTextLean,
       recentlyShippedCapabilities: recentlyShippedLean,
-      strategyReviewCadence
+      strategyReviewCadence,
+      candidateTaskFullNotes: candidateTaskFullNotesLean
     };
     const { label: leanTierLabel } = applyContextTier(ctx2, health.totalCycles);
     ctx2.contextTier = leanTierLabel;
@@ -12235,7 +12340,7 @@ ${lines.join("\n")}`;
     adapter2.getActiveDecisions(),
     adapter2.getBuildReportsSince(health.totalCycles ?? 0),
     adapter2.getCycleLog(3),
-    adapter2.queryBoard({ status: ["Backlog", "In Cycle", "Ready", "In Progress", "In Review", "Blocked"], contextTier: 2 }),
+    adapter2.queryBoard({ status: ["Backlog", "In Cycle", "Ready", "In Progress", "In Review", "Blocked"], contextTier: 2, compact: true }),
     adapter2.readCycleMetrics(),
     adapter2.getRecentReviews(5),
     adapter2.readPhases(),
@@ -12259,7 +12364,7 @@ ${lines.join("\n")}`;
     adapter2.getPendingRecommendations(),
     assembleDiscoveryCanvasText(adapter2),
     assembleTaskComments(adapter2),
-    adapter2.searchDocs?.({ status: "active", limit: 5 }),
+    adapter2.searchDocs?.({ status: "active", limit: 15 }),
     adapter2.getContextHashes?.(health.totalCycles) ?? Promise.resolve(null)
   ]);
   timings["parallelAdvisory"] = t();
@@ -12287,10 +12392,31 @@ ${lines.join("\n")}`;
   const taskCommentsTextFull = taskCommentsResultFull.status === "fulfilled" ? taskCommentsResultFull.value : void 0;
   let registeredDocsTextFull;
   if (docsResultFull.status === "fulfilled" && docsResultFull.value && docsResultFull.value.length > 0) {
-    const docs = docsResultFull.value;
-    const lines = docs.map((d) => `- **${d.title}** (${d.type}) \u2014 ${d.summary}`);
-    registeredDocsTextFull = `${docs.length} active research doc(s):
+    const allDocs = docsResultFull.value;
+    const taskModules = new Set(plannerTasks.map((t2) => t2.module?.toLowerCase()).filter(Boolean));
+    const taskEpics = new Set(plannerTasks.map((t2) => t2.epic?.toLowerCase()).filter(Boolean));
+    const HIGH_VALUE_TYPES = /* @__PURE__ */ new Set(["architecture", "guide", "research"]);
+    const scored = allDocs.map((d) => {
+      let score = 0;
+      const docTags = d.tags.map((tag) => tag.toLowerCase());
+      const docType = d.type?.toLowerCase() ?? "";
+      for (const tag of docTags) {
+        if (taskModules.has(tag) || taskEpics.has(tag)) score += 2;
+      }
+      if (HIGH_VALUE_TYPES.has(docType)) score += 1;
+      if (d.actions?.some((a) => a.status === "pending")) score += 3;
+      const age = health.totalCycles - (d.cycleUpdated ?? d.cycleCreated ?? 0);
+      if (age <= 3) score += 1;
+      return { doc: d, score };
+    });
+    scored.sort((a, b2) => b2.score - a.score);
+    const selected = scored.slice(0, 5);
+    const lines = selected.map(({ doc, score }) => `- **${doc.title}** (${doc.type}) \u2014 ${doc.summary}`);
+    registeredDocsTextFull = `${selected.length} active research doc(s):
 ${lines.join("\n")}`;
+    const logLines = selected.map(({ doc, score }) => `  ${doc.title} [score=${score}]`).join("\n");
+    console.error(`[plan-perf] doc intelligence: selected ${selected.length}/${allDocs.length} docs by relevance:
+${logLines}`);
   }
   logDataSourceSummary("plan (full)", [
     { label: "cycleHealth", hasData: !!health },
@@ -12315,8 +12441,18 @@ ${lines.join("\n")}`;
   const strippedTasks = stripTasksForPlan(tasks);
   const boardFlagsFull = detectBoardFlags(tasks);
   const horizonCtx = buildHorizonContext(phases, tasks) ?? void 0;
+  const ACTIVE_STATUSES2 = /* @__PURE__ */ new Set(["In Progress", "In Review", "Blocked"]);
+  const p3Excluded = strippedTasks.filter(
+    (t2) => t2.priority === "P3 Low" && !ACTIVE_STATUSES2.has(t2.status)
+  );
+  const plannerTasks = strippedTasks.filter(
+    (t2) => t2.priority !== "P3 Low" || ACTIVE_STATUSES2.has(t2.status)
+  );
+  if (p3Excluded.length > 0) {
+    console.error(`[plan-perf] board tiering: excluded ${p3Excluded.length} P3 Low tasks from planner context`);
+  }
   const targetCycle = health.totalCycles + 1;
-  const preAssigned = strippedTasks.filter((t2) => t2.cycle === targetCycle);
+  const preAssigned = plannerTasks.filter((t2) => t2.cycle === targetCycle);
   const preAssignedText = formatPreAssignedTasks(preAssigned, targetCycle);
   const gapFull = health.cyclesSinceLastStrategyReview;
   const lastReviewCycleFull = health.totalCycles - gapFull;
@@ -12328,7 +12464,7 @@ ${lines.join("\n")}`;
     activeDecisions: formatActiveDecisionsForPlan(decisions),
     recentBuildReports: formatBuildReports(cappedReports),
     cycleLog: formatCycleLog(log),
-    board: formatBoardForPlan(strippedTasks, filters, health.totalCycles),
+    board: formatBoardForPlan(plannerTasks, filters, health.totalCycles),
     northStar,
     methodologyMetrics: formatCycleMetrics(metricsSnapshots),
     recentReviews: formatReviews(reviews),
@@ -12345,7 +12481,8 @@ ${lines.join("\n")}`;
     carryForwardStaleness: computeCarryForwardStaleness(log),
     preAssignedTasks: preAssignedText,
     recentlyShippedCapabilities: formatRecentlyShippedCapabilities(reports),
-    strategyReviewCadence: strategyReviewCadenceFull
+    strategyReviewCadence: strategyReviewCadenceFull,
+    candidateTaskFullNotes: formatCandidateTaskFullNotes(plannerTasks)
   };
   const { label: fullTierLabel } = applyContextTier(ctx, health.totalCycles);
   ctx.contextTier = fullTierLabel;
@@ -12356,6 +12493,9 @@ ${lines.join("\n")}`;
   if (savedBytes > 0) {
     console.error(`[plan-perf] context diff saved ${savedBytes} bytes`);
   }
+  const boardChars = ctx.board?.length ?? 0;
+  const totalChars = Object.values(ctx).reduce((sum, v) => sum + (typeof v === "string" ? v.length : 0), 0);
+  console.error(`[plan-perf] context budget: board=${boardChars} chars, total fields=${totalChars} chars (excl. system prompt)`);
   return { context: ctx, contextHashes: newHashes };
 }
 async function transactionalWriteBack(adapter2, cycleNumber, data, contextHashes) {
@@ -12393,7 +12533,7 @@ ${cleanContent}`;
   };
   let dedupedNewTasks = data.newTasks ?? [];
   if (dedupedNewTasks.length > 0) {
-    const existingTasks = await adapter2.queryBoard();
+    const existingTasks = await adapter2.queryBoard({ compact: true });
     const normalise = (s) => s.toLowerCase().replace(/[^a-z0-9]+/g, " ").trim();
     const existingTitles = existingTasks.map((t) => normalise(t.title));
     const MIN_SUBSTRING_LEN = 20;
@@ -12475,7 +12615,7 @@ ${cleanContent}`;
   try {
     const [cycles, boardTasks] = await Promise.all([
       adapter2.readCycles(),
-      adapter2.queryBoard({ status: ["In Cycle", "Backlog", "In Progress", "In Review"] })
+      adapter2.queryBoard({ status: ["In Cycle", "Backlog", "In Progress", "In Review"], compact: true })
     ]);
     const newCycle = cycles.find((s) => s.number === newCycleNumber);
     if (!newCycle) {
@@ -12551,7 +12691,7 @@ ${cleanContent}`;
   const newTaskIdMap = /* @__PURE__ */ new Map();
   const createTasksPromise = (async () => {
     if (!data.newTasks || data.newTasks.length === 0) return;
-    const existingTasks = await adapter2.queryBoard();
+    const existingTasks = await adapter2.queryBoard({ compact: true });
     const normalise = (s) => s.toLowerCase().replace(/[^a-z0-9]+/g, " ").trim();
     const existingTitles = existingTasks.map((t) => normalise(t.title));
     for (let i = 0; i < data.newTasks.length; i++) {
@@ -12786,7 +12926,8 @@ async function validateAndPrepare(adapter2, force) {
     mode = determineMode(health.totalCycles);
     if (health.latestCycleStatus && health.latestCycleStatus !== "complete" && health.latestCycleStatus !== "released" && !force) {
       const activeTasks = await adapter2.queryBoard({
-        status: ["In Progress", "In Review"]
+        status: ["In Progress", "In Review"],
+        compact: true
       });
       const taskNote = activeTasks.length > 0 ? ` ${activeTasks.length} task(s) still active: ${activeTasks.map((t) => t.id).join(", ")}.` : "";
       throw new Error(
@@ -12797,7 +12938,8 @@ Run \`release\` first, or pass \`force: true\` to bypass this block.`
     }
     if (!force) {
       const inReviewTasks = await adapter2.queryBoard({
-        status: ["In Review"]
+        status: ["In Review"],
+        compact: true
       });
       const staleTasks = inReviewTasks.filter(
         (t) => t.cycle !== void 0 && t.cycle <= cycleNumber - 2
@@ -12871,7 +13013,9 @@ async function processLlmOutput(adapter2, config2, rawOutput, mode, cycleNumber,
           durationMs,
           taskCountIn: planRunMeta?.taskCountIn,
           taskCountOut: (writeSummary?.handoffs ?? 0) + (writeSummary?.newTasks ?? 0),
-          backlogDepth: planRunMeta?.backlogDepth
+          backlogDepth: planRunMeta?.backlogDepth,
+          tokenUsage: planRunMeta?.tokenUsage,
+          source: planRunMeta?.source ?? "mcp-server"
         }).catch(() => {
         });
       }
@@ -12968,7 +13112,7 @@ async function preparePlan(adapter2, config2, filters, focus, force, handoffsOnl
   if (skipHandoffs) context.skipHandoffs = true;
   t = startTimer();
   try {
-    const scanTasks = await adapter2.queryBoard({ status: ["Backlog", "In Cycle", "Ready"] });
+    const scanTasks = await adapter2.queryBoard({ status: ["Backlog", "In Cycle", "Ready"], compact: true });
     const candidates = scanTasks.filter((task) => task.priority !== "P3 Low").slice(0, 15).map((task) => ({ id: task.id, title: task.title, notes: task.notes }));
     const scanResult = scanCodebaseForTasks(config2.projectRoot, candidates);
     if (scanResult) context.codebaseScan = scanResult;
@@ -13122,7 +13266,7 @@ function formatPhaseChanges(changes) {
 async function propagatePhaseStatus(adapter2) {
   const [phases, tasks] = await Promise.all([
     adapter2.readPhases(),
-    adapter2.queryBoard()
+    adapter2.queryBoard({ compact: true })
   ]);
   if (phases.length === 0) return [];
   const horizons = await adapter2.readHorizons?.() ?? [];
@@ -13306,7 +13450,6 @@ async function handlePlan(adapter2, config2, args) {
       lastPrepareContextBytes = void 0;
       lastPrepareCycleNumber = void 0;
       lastPrepareSkipHandoffs = void 0;
-      const result = await applyPlan(adapter2, config2, llmResponse, planMode, cycleNumber, strategyReviewWarning, contextHashes, { contextBytes: contextBytes ?? void 0, skipHandoffs: skipHandoffs || void 0 });
       let utilisation;
       if (inputContext) {
         try {
@@ -13314,6 +13457,12 @@ async function handlePlan(adapter2, config2, args) {
         } catch {
         }
       }
+      const result = await applyPlan(adapter2, config2, llmResponse, planMode, cycleNumber, strategyReviewWarning, contextHashes, {
+        contextBytes: contextBytes ?? void 0,
+        skipHandoffs: skipHandoffs || void 0,
+        tokenUsage: utilisation !== void 0 ? { utilisation } : void 0,
+        source: "mcp-server"
+      });
       const response = formatPlanResult({ ...result, contextUtilisation: utilisation, contextBytes, skipHandoffs });
       return {
         ...response,
@@ -20941,21 +21090,94 @@ async function handleDocScan(adapter2, config2, args) {
   return textResponse(lines.join("\n"));
 }
 
+// src/services/session-guidance.ts
+import { existsSync as existsSync6 } from "fs";
+import { join as join9 } from "path";
+var state = {
+  toolCallCount: 0,
+  lastOrientAt: null,
+  releaseSinceLastOrient: false,
+  sessionStartedAt: Date.now()
+};
+var CONTEXT_BLOAT_CALL_THRESHOLD = 40;
+var ORIENT_GAP_MS = 3 * 60 * 60 * 1e3;
+function recordToolCall(name) {
+  state.toolCallCount++;
+  if (name === "release") state.releaseSinceLastOrient = true;
+}
+function markOrient() {
+  state.lastOrientAt = Date.now();
+  state.releaseSinceLastOrient = false;
+}
+async function buildSessionGuidance(adapter2, projectRoot) {
+  const signals = [];
+  try {
+    if (adapter2.searchDocs) {
+      const researchDir = join9(projectRoot, "docs", "research");
+      if (existsSync6(researchDir)) {
+        const files = scanMdFiles(researchDir, projectRoot);
+        if (files.length > 0) {
+          const registered = await adapter2.searchDocs({ limit: 500, status: "all" });
+          const registeredPaths = new Set(registered.map((d) => d.path));
+          const unregistered = files.filter((f) => !registeredPaths.has(f));
+          if (unregistered.length > 0) {
+            signals.push(
+              `${unregistered.length} research doc(s) in docs/research/ not registered \u2014 run \`doc_register\` so the planner can surface them.`
+            );
+          }
+        }
+      }
+    }
+  } catch {
+  }
+  if (state.toolCallCount > CONTEXT_BLOAT_CALL_THRESHOLD) {
+    signals.push(
+      `${state.toolCallCount} tool calls this session \u2014 context may be bloated. Consider starting a fresh window.`
+    );
+  }
+  if (state.lastOrientAt && Date.now() - state.lastOrientAt > ORIENT_GAP_MS) {
+    const hours = Math.round((Date.now() - state.lastOrientAt) / (60 * 60 * 1e3));
+    signals.push(
+      `${hours}h since last orient \u2014 session may be stale. Consider a fresh window for best results.`
+    );
+  }
+  if (state.releaseSinceLastOrient) {
+    signals.push(
+      "Release just ran \u2014 start a fresh session before the next `plan` to keep planning context clean."
+    );
+  }
+  return signals.slice(0, 3);
+}
+
 // src/tools/orient.ts
 import { execFileSync as execFileSync3 } from "child_process";
-import { readFileSync as readFileSync3, writeFileSync, existsSync as existsSync6 } from "fs";
-import { join as join9 } from "path";
+import { readFileSync as readFileSync3, writeFileSync, existsSync as existsSync7 } from "fs";
+import { join as join10 } from "path";
+var GIT_DEPENDENT_ENVS = /* @__PURE__ */ new Set(["cowork", "api"]);
+var VALID_ENVS = /* @__PURE__ */ new Set(["claude-code", "cowork", "api", "unknown"]);
+function normaliseEnvironment(raw) {
+  if (typeof raw === "string" && VALID_ENVS.has(raw)) {
+    return raw;
+  }
+  return "unknown";
+}
 var orientTool = {
   name: "orient",
-  description: "Session orientation \u2014 run this FIRST at session start before any other tool. Single call that replaces build_list + health. Returns: cycle number, task counts by status, in-progress/in-review tasks, strategy review cadence, velocity snapshot, recommended next action, and a release reminder when all cycle tasks are Done but release has not run. Read-only, does not modify any files.",
+  description: "Session orientation \u2014 run this FIRST at session start before any other tool. Single call that replaces build_list + health. Returns: cycle number, task counts by status, in-progress/in-review tasks, strategy review cadence, velocity snapshot, recommended next action, and a release reminder when all cycle tasks are Done but release has not run. Read-only, does not modify any files. Pass `environment` to qualify git-dependent recommendations (build_execute, release, review_submit) for non-Claude-Code callers.",
   annotations: { readOnlyHint: true, destructiveHint: false },
   inputSchema: {
     type: "object",
-    properties: {},
+    properties: {
+      environment: {
+        type: "string",
+        enum: ["claude-code", "cowork", "api", "unknown"],
+        description: 'Caller environment. "claude-code" (local CLI with git) sees all recommendations unchanged. "cowork" or "api" (hosted/remote, no local git) suppresses/qualifies build_execute, release, and review_submit recommendations because those require a local Claude Code session to execute. Default "unknown" = show everything (safe default).'
+      }
+    },
     required: []
   }
 };
-function formatOrientSummary(health, buildInfo, hierarchy, latestTag, projectRoot) {
+function formatOrientSummary(health, buildInfo, hierarchy, latestTag, projectRoot, environment = "unknown") {
   const lines = [];
   const cycleIsComplete = health.latestCycleStatus === "complete";
   const tagSuffix = latestTag ? ` \u2014 ${latestTag}` : "";
@@ -20973,7 +21195,13 @@ function formatOrientSummary(health, buildInfo, hierarchy, latestTag, projectRoo
     }
     lines.push("");
   }
-  lines.push(`> **Next action:** ${health.recommendedMode}`);
+  const isGitDependentRec = /\*\*(Build|Review)\*\*/.test(health.recommendedMode);
+  if (GIT_DEPENDENT_ENVS.has(environment) && isGitDependentRec) {
+    lines.push(`> **Next action:** ${health.recommendedMode}`);
+    lines.push(`> _Note: \`build_execute\`, \`review_submit\`, and \`release\` require a local Claude Code session with git access. From \`${environment}\` you can view state, log ideas, and edit the board \u2014 but the build/review/release loop must run through Claude Code._`);
+  } else {
+    lines.push(`> **Next action:** ${health.recommendedMode}`);
+  }
   lines.push("");
   lines.push(`**Strategy Review:** ${health.reviewWarning}`);
   lines.push("");
@@ -21124,7 +21352,7 @@ function getLatestGitTag(projectRoot) {
 }
 function checkNpmVersionDrift() {
   try {
-    const pkgPath = join9(new URL(".", import.meta.url).pathname, "..", "..", "package.json");
+    const pkgPath = join10(new URL(".", import.meta.url).pathname, "..", "..", "package.json");
     const pkg = JSON.parse(readFileSync3(pkgPath, "utf-8"));
     const localVersion = pkg.version;
     const packageName = pkg.name;
@@ -21141,7 +21369,8 @@ function checkNpmVersionDrift() {
     return null;
   }
 }
-async function handleOrient(adapter2, config2) {
+async function handleOrient(adapter2, config2, args = {}) {
+  const environment = normaliseEnvironment(args.environment);
   try {
     try {
       await propagatePhaseStatus(adapter2);
@@ -21250,7 +21479,7 @@ ${versionDrift}` : "";
     let unregisteredDocsNote = "";
     try {
       if (adapter2.searchDocs) {
-        const docsDir = join9(config2.projectRoot, "docs");
+        const docsDir = join10(config2.projectRoot, "docs");
         const docsFiles = scanMdFiles(docsDir, config2.projectRoot);
         if (docsFiles.length > 0) {
           const registered = await adapter2.searchDocs({ limit: 500, status: "all" });
@@ -21264,6 +21493,49 @@ ${versionDrift}` : "";
       }
     } catch {
     }
+    let researchSignalsNote = "";
+    try {
+      if (adapter2.searchDocs) {
+        const cycleHealth = await adapter2.getCycleHealth();
+        const lastReviewCycle = Math.max(0, cycleHealth.totalCycles - cycleHealth.cyclesSinceLastStrategyReview);
+        const researchDocs = await adapter2.searchDocs({
+          type: "research",
+          hasPendingActions: true,
+          sinceCycle: lastReviewCycle,
+          limit: 10
+        });
+        if (researchDocs.length > 0) {
+          let activeAds = [];
+          try {
+            activeAds = (await adapter2.getActiveDecisions()).filter((a) => !a.superseded);
+          } catch {
+          }
+          const stopWords = /* @__PURE__ */ new Set(["about", "above", "after", "again", "being", "could", "doing", "during", "every", "first", "front", "going", "great", "helps", "large", "later", "level", "local", "makes", "model", "needs", "never", "other", "place", "right", "since", "small", "still", "there", "these", "thing", "those", "three", "under", "until", "using", "where", "which", "while", "would"]);
+          const lines = ["\n\n## Research Signals"];
+          for (const doc of researchDocs) {
+            const docText = [doc.title, doc.summary, ...doc.tags].join(" ").toLowerCase();
+            const relatedAds = activeAds.filter((ad) => {
+              const adWords = ad.title.toLowerCase().split(/\W+/).filter((w) => w.length >= 5 && !stopWords.has(w));
+              return adWords.some((w) => docText.includes(w));
+            });
+            const cycleLabel = `C${doc.cycleUpdated ?? doc.cycleCreated}`;
+            const adRef = relatedAds.length > 0 ? ` \u2014 may relate to ${relatedAds.map((a) => a.displayId).join(", ")}` : "";
+            const pendingActions = doc.actions?.filter((a) => a.status === "pending") ?? [];
+            lines.push(`- **${doc.title}** [${cycleLabel}${adRef}]`);
+            for (const action of pendingActions.slice(0, 2)) {
+              const desc = action.description.length > 100 ? `${action.description.slice(0, 97)}\u2026` : action.description;
+              lines.push(`  \u2192 ${desc}`);
+            }
+            if (pendingActions.length > 2) {
+              lines.push(`  \u2192 \u2026and ${pendingActions.length - 2} more`);
+            }
+          }
+          lines.push("_Factor into next `strategy_review` or run `doc_search` for details._");
+          researchSignalsNote = lines.join("\n");
+        }
+      }
+    } catch {
+    }
     let recsNote = "";
     try {
       const pendingRecs = await adapter2.getPendingRecommendations();
@@ -21297,13 +21569,35 @@ ${versionDrift}` : "";
       }
     } catch {
     }
+    let alertsNote = "";
     let unactionedIssuesNote = "";
     try {
-      const learnings = await adapter2.getCycleLearnings?.({ category: "issue", limit: 20 });
+      const learnings = await adapter2.getCycleLearnings?.({ category: "issue", limit: 30 });
       if (learnings) {
-        const unactioned = learnings.filter((l) => !l.actionTaken && l.severity && ["P0", "P1", "P2"].includes(l.severity)).slice(0, 5);
-        if (unactioned.length > 0) {
-          const lines = ["\n\n## Unactioned Issues"];
+        const byRecency = (a, b2) => (b2.createdAt ?? "").localeCompare(a.createdAt ?? "");
+        const unactionedAll = learnings.filter((l) => !l.actionTaken).map((l) => ({ ...l, severity: l.severity ?? "P3" }));
+        const allAlerts = unactionedAll.filter((l) => l.severity === "P0" || l.severity === "P1").sort(byRecency);
+        const allLowSev = unactionedAll.filter((l) => l.severity === "P2" || l.severity === "P3").sort(byRecency);
+        const totalP2 = allLowSev.filter((l) => l.severity === "P2").length;
+        const totalP3 = allLowSev.filter((l) => l.severity === "P3").length;
+        const ALERT_CAP = 10;
+        const UNACTIONED_CAP = 5;
+        const alerts = allAlerts.slice(0, ALERT_CAP);
+        const unactioned = allLowSev.slice(0, UNACTIONED_CAP);
+        if (allAlerts.length > 0) {
+          const header = allAlerts.length > ALERT_CAP ? `${allAlerts.length} P0/P1 discovered issues awaiting action (showing ${ALERT_CAP} most recent).` : `${allAlerts.length} P0/P1 discovered issue${allAlerts.length !== 1 ? "s" : ""} awaiting action.`;
+          const lines = ["\n\n## \u{1F6A8} Alerts", header];
+          for (const issue of alerts) {
+            const desc = issue.summary.length > 100 ? `${issue.summary.slice(0, 97)}\u2026` : issue.summary;
+            lines.push(`- **${issue.severity}** (C${issue.cycleNumber} / ${issue.taskId}): ${desc}`);
+          }
+          lines.push("_Escalate: run `idea` with P1 priority, or `board_edit` if already handled._");
+          alertsNote = lines.join("\n");
+        }
+        if (allLowSev.length > 0) {
+          const totalLow = totalP2 + totalP3;
+          const header = totalLow > UNACTIONED_CAP ? `${totalP2} P2 \xB7 ${totalP3} P3 (showing ${UNACTIONED_CAP} most recent)` : `${totalP2} P2 \xB7 ${totalP3} P3`;
+          const lines = ["\n\n## Unactioned Issues", header];
           for (const issue of unactioned) {
             const desc = issue.summary.length > 100 ? `${issue.summary.slice(0, 97)}\u2026` : issue.summary;
             lines.push(`- **${issue.severity}** (C${issue.cycleNumber} / ${issue.taskId}): ${desc}`);
@@ -21314,15 +21608,26 @@ ${versionDrift}` : "";
       }
     } catch {
     }
-    return textResponse(formatOrientSummary(healthResult, buildInfo, hierarchy, latestTag, config2.projectRoot) + ttfvNote + reconciliationNote + unrecordedNote + unregisteredDocsNote + recsNote + pendingReviewNote + patternsNote + unactionedIssuesNote + versionNote + enrichmentNote);
+    let sessionGuidanceNote = "";
+    try {
+      const signals = await buildSessionGuidance(adapter2, config2.projectRoot);
+      if (signals.length > 0) {
+        const lines = ["\n\n## Session Guidance"];
+        for (const s of signals) lines.push(`- ${s}`);
+        sessionGuidanceNote = lines.join("\n");
+      }
+      markOrient();
+    } catch {
+    }
+    return textResponse(formatOrientSummary(healthResult, buildInfo, hierarchy, latestTag, config2.projectRoot, environment) + alertsNote + ttfvNote + reconciliationNote + unrecordedNote + unregisteredDocsNote + researchSignalsNote + recsNote + pendingReviewNote + patternsNote + unactionedIssuesNote + sessionGuidanceNote + versionNote + enrichmentNote);
   } catch (err) {
     const message = err instanceof Error ? err.message : String(err);
     return errorResponse(`Orient failed: ${message}`);
   }
 }
 function enrichClaudeMd(projectRoot, cycleNumber) {
-  const claudeMdPath = join9(projectRoot, "CLAUDE.md");
-  if (!existsSync6(claudeMdPath)) return "";
+  const claudeMdPath = join10(projectRoot, "CLAUDE.md");
+  if (!existsSync7(claudeMdPath)) return "";
   const content = readFileSync3(claudeMdPath, "utf-8");
   const additions = [];
   if (cycleNumber >= 6 && !content.includes(CLAUDE_MD_ENRICHMENT_SENTINEL_T1)) {
@@ -22104,6 +22409,47 @@ ${result.userMessage}
   }
 }
 
+// src/lib/install-id.ts
+import { randomUUID as randomUUID15 } from "crypto";
+import { mkdirSync, readFileSync as readFileSync4, writeFileSync as writeFileSync2, chmodSync } from "fs";
+import { homedir as homedir3 } from "os";
+import { join as join11 } from "path";
+var PAPI_HOME_DIR = join11(homedir3(), ".papi");
+var INSTALL_ID_FILE = join11(PAPI_HOME_DIR, "install-id.json");
+var cachedInstallId = null;
+function isValidUuid(s) {
+  return typeof s === "string" && /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(s);
+}
+function getInstallId() {
+  if (cachedInstallId) return cachedInstallId;
+  try {
+    const raw = readFileSync4(INSTALL_ID_FILE, "utf-8");
+    const parsed = JSON.parse(raw);
+    if (isValidUuid(parsed.install_id)) {
+      cachedInstallId = parsed.install_id;
+      return cachedInstallId;
+    }
+  } catch {
+  }
+  try {
+    mkdirSync(PAPI_HOME_DIR, { recursive: true, mode: 448 });
+    const id = randomUUID15();
+    const contents = {
+      install_id: id,
+      created_at: (/* @__PURE__ */ new Date()).toISOString()
+    };
+    writeFileSync2(INSTALL_ID_FILE, JSON.stringify(contents, null, 2), { mode: 384 });
+    try {
+      chmodSync(INSTALL_ID_FILE, 384);
+    } catch {
+    }
+    cachedInstallId = id;
+    return cachedInstallId;
+  } catch {
+    return null;
+  }
+}
+
 // src/lib/telemetry.ts
 var TELEMETRY_SUPABASE_URL = "https://guewgygcpcmrcoppihzx.supabase.co";
 var TELEMETRY_API_KEY = "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6Imd1ZXdneWdjcGNtcmNvcHBpaHp4Iiwicm9sZSI6ImFub24iLCJpYXQiOjE3NzI2Njk2NTMsImV4cCI6MjA4ODI0NTY1M30.V5Jw7wJgiMpSQPa2mt0ftjyye5ynG1qLlam00yPVNJY";
@@ -22142,6 +22488,29 @@ function emitToolCall(projectId, toolName, durationMs, extra) {
     metadata: { duration_ms: durationMs, ...extra }
   });
 }
+function emitMdAdapterPing(toolName, extra) {
+  if (!isEnabled()) return;
+  const installId = getInstallId();
+  if (!installId) return;
+  const body = {
+    install_id: installId,
+    tool_name: toolName,
+    papi_version: process.env["npm_package_version"] ?? null,
+    metadata: extra ?? {}
+  };
+  fetch(`${TELEMETRY_SUPABASE_URL}/rest/v1/md_adapter_pings`, {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/json",
+      "apikey": TELEMETRY_API_KEY,
+      "Authorization": `Bearer ${TELEMETRY_API_KEY}`,
+      "Prefer": "return=minimal"
+    },
+    body: JSON.stringify(body),
+    signal: AbortSignal.timeout(5e3)
+  }).catch(() => {
+  });
+}
 function emitMilestone(projectId, milestone, extra) {
   emitTelemetryEvent({
     project_id: projectId,
@@ -22176,13 +22545,26 @@ var TOOLS_REQUIRING_PAPI = /* @__PURE__ */ new Set([
   "handoff_generate"
 ]);
 function createServer(adapter2, config2) {
+  const __pkgFilename = fileURLToPath(import.meta.url);
+  const __pkgDir = dirname(__pkgFilename);
+  let serverVersion = "unknown";
+  try {
+    const pkg = JSON.parse(readFileSync5(join12(__pkgDir, "..", "package.json"), "utf-8"));
+    serverVersion = pkg.version ?? "unknown";
+  } catch {
+  }
   const server2 = new Server(
-    { name: "papi", version: "0.1.0" },
+    { name: "papi", version: serverVersion },
     { capabilities: { tools: {}, prompts: {} } }
   );
+  if (config2.adapterType === "md") {
+    process.stderr.write(
+      "\n\u26A0 PAPI is running in md mode \u2014 your cycles are not visible on the hosted dashboard.\n  Configure DATABASE_URL or sign up at https://getpapi.ai/setup to enable observability.\n\n"
+    );
+  }
   const __filename = fileURLToPath(import.meta.url);
   const __dirname2 = dirname(__filename);
-  const skillsDir = join10(__dirname2, "..", "skills");
+  const skillsDir = join12(__dirname2, "..", "skills");
   function parseSkillFrontmatter(content) {
     const match = content.match(/^---\n([\s\S]*?)\n---/);
     if (!match) return null;
@@ -22200,7 +22582,7 @@ function createServer(adapter2, config2) {
       const mdFiles = files.filter((f) => f.endsWith(".md"));
       const prompts = [];
       for (const file of mdFiles) {
-        const content = await readFile5(join10(skillsDir, file), "utf-8");
+        const content = await readFile5(join12(skillsDir, file), "utf-8");
         const meta = parseSkillFrontmatter(content);
         if (meta) {
           prompts.push({ name: meta.name, description: meta.description });
@@ -22216,7 +22598,7 @@ function createServer(adapter2, config2) {
     try {
       const files = await readdir2(skillsDir);
       for (const file of files.filter((f) => f.endsWith(".md"))) {
-        const content = await readFile5(join10(skillsDir, file), "utf-8");
+        const content = await readFile5(join12(skillsDir, file), "utf-8");
         const meta = parseSkillFrontmatter(content);
         if (meta?.name === name) {
           const body = content.replace(/^---\n[\s\S]*?\n---\n*/, "");
@@ -22289,6 +22671,7 @@ function createServer(adapter2, config2) {
       }
     }
     const timer2 = startTimer();
+    recordToolCall(name);
     let result;
     switch (name) {
       case "plan":
@@ -22352,7 +22735,7 @@ function createServer(adapter2, config2) {
         result = await handleInit(config2, safeArgs);
         break;
       case "orient":
-        result = await handleOrient(adapter2, config2);
+        result = await handleOrient(adapter2, config2, safeArgs);
         break;
       case "hierarchy_update":
         result = await handleHierarchyUpdate(adapter2, safeArgs);
@@ -22393,6 +22776,9 @@ function createServer(adapter2, config2) {
       });
     } catch {
     }
+    if (config2.adapterType === "md") {
+      emitMdAdapterPing(name, { duration_ms: elapsed, success: !isError });
+    }
     const telemetryProjectId = process.env["PAPI_PROJECT_ID"];
     if (telemetryProjectId) {
       emitToolCall(telemetryProjectId, name, elapsed, {
@@ -22420,7 +22806,7 @@ function createServer(adapter2, config2) {
 var __dirname = dirname2(fileURLToPath2(import.meta.url));
 var pkgVersion = "unknown";
 try {
-  const pkg = JSON.parse(readFileSync4(join11(__dirname, "..", "package.json"), "utf-8"));
+  const pkg = JSON.parse(readFileSync6(join13(__dirname, "..", "package.json"), "utf-8"));
   pkgVersion = pkg.version;
 } catch {
 }
@@ -22536,41 +22922,7 @@ if (httpPort) {
   if (!httpToken) {
     process.stderr.write("[papi] WARNING: PAPI_HTTP_TOKEN is not set. HTTP transport is unauthenticated \u2014 anyone with the URL can call your PAPI tools. Set PAPI_HTTP_TOKEN to a secret string.\n");
   }
-  const createServerForRequest = () => {
-    if (adapter && !setupError) {
-      return createServer(adapter, config);
-    }
-    const errorServer = new Server2(
-      { name: "papi", version: pkgVersion },
-      { capabilities: { tools: {} } }
-    );
-    const errorMessage = setupError || "Unknown startup error";
-    errorServer.setRequestHandler(ListToolsRequestSchema2, async () => ({
-      tools: [{
-        name: "setup",
-        description: "PAPI is not connected \u2014 run this tool for setup instructions.",
-        inputSchema: { type: "object", properties: {}, required: [] }
-      }]
-    }));
-    errorServer.setRequestHandler(CallToolRequestSchema2, async () => ({
-      content: [{
-        type: "text",
-        text: `# PAPI Connection Error
-
-${errorMessage}
-
-## Quick Fix
-
-If you haven't set up PAPI yet:
-1. Go to https://getpapi.ai/login and sign up
-2. Complete the onboarding wizard \u2014 it generates your config
-3. Copy the config to your project and restart your AI tool
-
-If you already have an account, check that both **PAPI_PROJECT_ID** and **PAPI_DATA_API_KEY** are set in your .mcp.json env config.`
-      }]
-    }));
-    return errorServer;
-  };
+  const httpTransport = new StreamableHTTPServerTransport({ sessionIdGenerator: void 0 });
   const httpServer = createHttpServer((req, res) => {
     if (req.method === "GET" && req.url === "/healthz") {
       res.writeHead(200, { "Content-Type": "text/plain" });
@@ -22579,26 +22931,14 @@ If you already have an account, check that both **PAPI_PROJECT_ID** and **PAPI_D
     }
     if (httpToken) {
       const authHeader = req.headers["authorization"] ?? "";
-      const bearerMatch = authHeader.startsWith("Bearer ") ? authHeader.slice(7) : "";
-      const urlMatch = req.url?.match(/^\/(mcp|sse)\/(.+)$/);
-      const urlToken = urlMatch?.[2];
-      if (bearerMatch === httpToken) {
-      } else if (urlToken === httpToken) {
-        req.url = `/${urlMatch[1]}`;
-      } else {
+      const provided = authHeader.startsWith("Bearer ") ? authHeader.slice(7) : "";
+      if (provided !== httpToken) {
         res.writeHead(401, { "Content-Type": "application/json" });
         res.end(JSON.stringify({ error: "Unauthorized" }));
         return;
       }
     }
     if (req.url === "/mcp" || req.url === "/sse") {
-      req.headers["accept"] = "application/json, text/event-stream";
-      const acceptIdx = req.rawHeaders.findIndex((h) => h.toLowerCase() === "accept");
-      if (acceptIdx >= 0) {
-        req.rawHeaders[acceptIdx + 1] = "application/json, text/event-stream";
-      } else {
-        req.rawHeaders.push("Accept", "application/json, text/event-stream");
-      }
       if (req.method === "POST") {
         const chunks = [];
         req.on("data", (chunk) => chunks.push(chunk));
@@ -22611,42 +22951,23 @@ If you already have an account, check that both **PAPI_PROJECT_ID** and **PAPI_D
             res.end(JSON.stringify({ error: "Invalid JSON body" }));
             return;
           }
-          (async () => {
-            const transport = new StreamableHTTPServerTransport({ sessionIdGenerator: void 0 });
-            const reqServer = createServerForRequest();
-            await reqServer.connect(transport);
-            await transport.handleRequest(req, res, parsedBody);
-            await reqServer.close();
-          })().catch((err) => {
+          httpTransport.handleRequest(req, res, parsedBody).catch((err) => {
             process.stderr.write(`[papi] HTTP transport error: ${err instanceof Error ? err.message : String(err)}
 `);
-            if (!res.headersSent) {
-              res.writeHead(500, { "Content-Type": "application/json" });
-              res.end(JSON.stringify({ error: "Internal server error" }));
-            }
           });
         });
         return;
       }
-      (async () => {
-        const transport = new StreamableHTTPServerTransport({ sessionIdGenerator: void 0 });
-        const reqServer = createServerForRequest();
-        await reqServer.connect(transport);
-        await transport.handleRequest(req, res);
-        await reqServer.close();
-      })().catch((err) => {
+      httpTransport.handleRequest(req, res).catch((err) => {
         process.stderr.write(`[papi] HTTP transport error: ${err instanceof Error ? err.message : String(err)}
 `);
-        if (!res.headersSent) {
-          res.writeHead(500, { "Content-Type": "application/json" });
-          res.end(JSON.stringify({ error: "Internal server error" }));
-        }
       });
       return;
     }
     res.writeHead(404, { "Content-Type": "text/plain" });
     res.end("Not found");
   });
+  await server.connect(httpTransport);
   httpServer.listen(httpPort, httpHost, () => {
     process.stderr.write(`[papi] HTTP transport listening on http://${httpHost}:${httpPort}/mcp
 `);