@papi-ai/server 0.7.11 → 0.7.12

package/README.md

@@ -39,6 +39,14 @@ That's it. You're planning.
 
 PAPI collects anonymous usage data (tool name, duration, project UUID — no code or task content). To opt out, add `PAPI_TELEMETRY=off` to your `.mcp.json` env block.
 
+### md mode warning
+
+If you start the server without `DATABASE_URL` (or with `PAPI_ADAPTER=md`), you'll see a stderr warning: *"PAPI is running in md mode — your cycles are not visible on the hosted dashboard."* This is intentional. md mode stores everything locally in `.papi/` files, but the hosted dashboard at [getpapi.ai](https://getpapi.ai/) only sees projects backed by the database adapter.
+
+When the warning fires, PAPI emits an anonymous install-level ping (random UUID stored at `~/.papi/install-id.json`, chmod 600) per tool call so we can count installs that haven't connected yet. The ping contains: install UUID, tool name, server version, duration. **No project content, no file paths, no user identifiers.** Setting `PAPI_TELEMETRY=off` disables both the hosted-dashboard telemetry and the md-mode ping.
+
+The warning is informational, not an error — md mode is a fully supported way to self-host PAPI without the hosted backend.
+
 ## License
 
 [Elastic License 2.0](https://www.elastic.co/licensing/elastic-license) — free to use, self-host, and modify. Commercial hosting requires a license.

package/dist/index.js

@@ -1453,7 +1453,12 @@ var init_dist2 = __esm({
       research: 2,
       spike: 2,
       idea: 3,
-      discovery: 1
+      discovery: 1,
+      // Non-code brief types for non-technical Owners (AD-12)
+      "design-brief": 1,
+      "research-brief": 1,
+      "marketing-brief": 1,
+      "ops-brief": 1
     };
     VALID_EFFORT_SIZES = /* @__PURE__ */ new Set(["XS", "S", "M", "L", "XL"]);
     SECTION_HEADERS = [
@@ -1575,11 +1580,13 @@ ${TABLE_SEPARATOR}
       }
       /** Prepend a new cycle log entry at the top of the Cycle Log section. */
       async writeCycleLogEntry(entry) {
-        if (!entry.uuid) {
-          entry = { ...entry, uuid: randomUUID6() };
-        }
+        const patched = {
+          ...entry,
+          uuid: entry.uuid || randomUUID6(),
+          date: entry.date ?? (/* @__PURE__ */ new Date()).toISOString()
+        };
         const content = await this.read("SPRINT_LOG.md");
-        await this.write("SPRINT_LOG.md", prependCycleLogEntry(entry, content));
+        await this.write("SPRINT_LOG.md", prependCycleLogEntry(patched, content));
       }
       /** Write a strategy review — for md adapter, delegates to cycle log. */
       async writeStrategyReview(review) {
@@ -3708,7 +3715,7 @@ var init_connection = __esm({
 
 // ../../node_modules/postgres/src/subscribe.js
 function Subscribe(postgres2, options) {
-  const subscribers = /* @__PURE__ */ new Map(), slot = "postgresjs_" + Math.random().toString(36).slice(2), state = {};
+  const subscribers = /* @__PURE__ */ new Map(), slot = "postgresjs_" + Math.random().toString(36).slice(2), state2 = {};
   let connection2, stream, ended = false;
   const sql = subscribe.sql = postgres2({
     ...options,
@@ -3725,7 +3732,7 @@ function Subscribe(postgres2, options) {
       if (ended)
         return;
       stream = null;
-      state.pid = state.secret = void 0;
+      state2.pid = state2.secret = void 0;
       connected(await init(sql, slot, options.publications));
       subscribers.forEach((event) => event.forEach(({ onsubscribe }) => onsubscribe()));
     },
@@ -3756,13 +3763,13 @@ function Subscribe(postgres2, options) {
       connected(x);
       onsubscribe();
       stream && stream.on("error", onerror);
-      return { unsubscribe, state, sql };
+      return { unsubscribe, state: state2, sql };
     });
   }
   function connected(x) {
     stream = x.stream;
-    state.pid = x.state.pid;
-    state.secret = x.state.secret;
+    state2.pid = x.state.pid;
+    state2.secret = x.state.secret;
   }
   async function init(sql2, slot2, publications) {
     if (!publications)
@@ -3774,7 +3781,7 @@ function Subscribe(postgres2, options) {
     const stream2 = await sql2.unsafe(
       `START_REPLICATION SLOT ${slot2} LOGICAL ${x.consistent_point} (proto_version '1', publication_names '${publications}')`
     ).writable();
-    const state2 = {
+    const state3 = {
       lsn: Buffer.concat(x.consistent_point.split("/").map((x2) => Buffer.from(("00000000" + x2).slice(-8), "hex")))
     };
     stream2.on("data", data);
@@ -3786,9 +3793,9 @@ function Subscribe(postgres2, options) {
     }
     function data(x2) {
       if (x2[0] === 119) {
-        parse(x2.subarray(25), state2, sql2.options.parsers, handle, options.transform);
+        parse(x2.subarray(25), state3, sql2.options.parsers, handle, options.transform);
       } else if (x2[0] === 107 && x2[17]) {
-        state2.lsn = x2.subarray(1, 9);
+        state3.lsn = x2.subarray(1, 9);
         pong();
       }
     }
@@ -3804,7 +3811,7 @@ function Subscribe(postgres2, options) {
     function pong() {
       const x2 = Buffer.alloc(34);
       x2[0] = "r".charCodeAt(0);
-      x2.fill(state2.lsn, 1);
+      x2.fill(state3.lsn, 1);
       x2.writeBigInt64BE(BigInt(Date.now() - Date.UTC(2e3, 0, 1)) * BigInt(1e3), 25);
       stream2.write(x2);
     }
@@ -3816,12 +3823,12 @@ function Subscribe(postgres2, options) {
 function Time(x) {
   return new Date(Date.UTC(2e3, 0, 1) + Number(x / BigInt(1e3)));
 }
-function parse(x, state, parsers2, handle, transform) {
+function parse(x, state2, parsers2, handle, transform) {
   const char = (acc, [k, v]) => (acc[k.charCodeAt(0)] = v, acc);
   Object.entries({
     R: (x2) => {
       let i = 1;
-      const r = state[x2.readUInt32BE(i)] = {
+      const r = state2[x2.readUInt32BE(i)] = {
         schema: x2.toString("utf8", i += 4, i = x2.indexOf(0, i)) || "pg_catalog",
         table: x2.toString("utf8", i + 1, i = x2.indexOf(0, i + 1)),
         columns: Array(x2.readUInt16BE(i += 2)),
@@ -3848,12 +3855,12 @@ function parse(x, state, parsers2, handle, transform) {
     },
     // Origin
     B: (x2) => {
-      state.date = Time(x2.readBigInt64BE(9));
-      state.lsn = x2.subarray(1, 9);
+      state2.date = Time(x2.readBigInt64BE(9));
+      state2.lsn = x2.subarray(1, 9);
     },
     I: (x2) => {
       let i = 1;
-      const relation = state[x2.readUInt32BE(i)];
+      const relation = state2[x2.readUInt32BE(i)];
       const { row } = tuples(x2, relation.columns, i += 7, transform);
       handle(row, {
         command: "insert",
@@ -3862,7 +3869,7 @@ function parse(x, state, parsers2, handle, transform) {
     },
     D: (x2) => {
       let i = 1;
-      const relation = state[x2.readUInt32BE(i)];
+      const relation = state2[x2.readUInt32BE(i)];
       i += 4;
       const key = x2[i] === 75;
       handle(
@@ -3876,7 +3883,7 @@ function parse(x, state, parsers2, handle, transform) {
     },
     U: (x2) => {
       let i = 1;
-      const relation = state[x2.readUInt32BE(i)];
+      const relation = state2[x2.readUInt32BE(i)];
       i += 4;
       const key = x2[i] === 75;
       const xs = key || x2[i] === 79 ? tuples(x2, relation.columns, i += 3, transform) : null;
@@ -4612,6 +4619,7 @@ function rowToCycleLogEntry(row) {
   if (row.notes != null) entry.notes = row.notes;
   if (row.task_count != null) entry.taskCount = row.task_count;
   if (row.effort_points != null) entry.effortPoints = row.effort_points;
+  if (row.updated_at != null) entry.date = row.updated_at;
   return entry;
 }
 function rowToPhase(row) {
@@ -6276,7 +6284,7 @@ EXCEPTION WHEN duplicate_object THEN NULL; END $$;
       async getCycleLog(limit) {
         if (limit != null) {
           const rows2 = await this.sql`
-        SELECT id, cycle_number, title, content, carry_forward, notes, task_count, effort_points
+        SELECT id, cycle_number, title, content, carry_forward, notes, task_count, effort_points, updated_at
         FROM planning_log_entries
         WHERE project_id = ${this.projectId}
         ORDER BY cycle_number DESC
@@ -6285,7 +6293,7 @@ EXCEPTION WHEN duplicate_object THEN NULL; END $$;
           return rows2.map(rowToCycleLogEntry);
         }
         const rows = await this.sql`
-      SELECT id, cycle_number, title, content, carry_forward, notes, task_count, effort_points
+      SELECT id, cycle_number, title, content, carry_forward, notes, task_count, effort_points, updated_at
       FROM planning_log_entries
       WHERE project_id = ${this.projectId}
       ORDER BY cycle_number DESC
@@ -6295,7 +6303,7 @@ EXCEPTION WHEN duplicate_object THEN NULL; END $$;
       }
       async getCycleLogSince(cycleNumber) {
         const rows = await this.sql`
-      SELECT id, cycle_number, title, content, carry_forward, notes, task_count, effort_points
+      SELECT id, cycle_number, title, content, carry_forward, notes, task_count, effort_points, updated_at
       FROM planning_log_entries
       WHERE project_id = ${this.projectId}
         AND cycle_number >= ${cycleNumber}
@@ -6346,7 +6354,8 @@ ${newParts.join("\n")}` : newParts.join("\n");
         carry_forward = EXCLUDED.carry_forward,
         notes = EXCLUDED.notes,
         task_count = EXCLUDED.task_count,
-        effort_points = EXCLUDED.effort_points
+        effort_points = EXCLUDED.effort_points,
+        updated_at = now()
     `;
       }
       async writeStrategyReview(review) {
@@ -7813,7 +7822,8 @@ ${r.content}` + (r.carry_forward ? `
         await this.sql`
       INSERT INTO plan_runs (
         project_id, cycle_number, context_bytes, duration_ms,
-        task_count_in, task_count_out, backlog_depth, notes
+        task_count_in, task_count_out, backlog_depth, notes,
+        token_usage, source
       ) VALUES (
         ${this.projectId},
         ${entry.cycleNumber},
@@ -7822,7 +7832,9 @@ ${r.content}` + (r.carry_forward ? `
         ${entry.taskCountIn ?? null},
         ${entry.taskCountOut ?? null},
         ${entry.backlogDepth ?? null},
-        ${entry.notes ?? null}
+        ${entry.notes ?? null},
+        ${entry.tokenUsage ? this.sql.json(entry.tokenUsage) : null},
+        ${entry.source ?? null}
       )
     `;
       }
@@ -7958,7 +7970,8 @@ ${r.content}` + (r.carry_forward ? `
           title = EXCLUDED.title,
           content = EXCLUDED.content,
           carry_forward = EXCLUDED.carry_forward,
-          notes = EXCLUDED.notes
+          notes = EXCLUDED.notes,
+          updated_at = now()
       `;
           if (payload.healthUpdates.boardHealth != null || payload.healthUpdates.strategicDirection != null) {
             const [latest] = await tx`
@@ -9234,9 +9247,9 @@ var init_git = __esm({
 });
 
 // src/index.ts
-import { readFileSync as readFileSync4 } from "fs";
+import { readFileSync as readFileSync6 } from "fs";
 import { createServer as createHttpServer } from "http";
-import { dirname as dirname2, join as join11 } from "path";
+import { dirname as dirname2, join as join13 } from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
@@ -9268,7 +9281,17 @@ function loadConfig() {
   const dataEndpoint = process.env.PAPI_DATA_ENDPOINT;
   const databaseUrl = process.env.DATABASE_URL;
   const explicitAdapter = process.env.PAPI_ADAPTER;
-  const adapterType = papiEndpoint ? "pg" : databaseUrl && explicitAdapter === "pg" ? "pg" : dataEndpoint ? "proxy" : explicitAdapter ? explicitAdapter : databaseUrl ? "pg" : "proxy";
+  const projectId = process.env.PAPI_PROJECT_ID;
+  let adapterType = papiEndpoint ? "pg" : databaseUrl && explicitAdapter === "pg" ? "pg" : dataEndpoint ? "proxy" : explicitAdapter ? explicitAdapter : databaseUrl ? "pg" : "proxy";
+  if (projectId && !databaseUrl && !papiEndpoint && adapterType === "md") {
+    adapterType = "proxy";
+    console.error("[papi] PAPI_PROJECT_ID detected \u2014 switching to proxy adapter (md adapter blocked for external users).");
+  }
+  if (!projectId && !databaseUrl && !papiEndpoint && adapterType === "md") {
+    throw new Error(
+      "PAPI_PROJECT_ID is required to connect to your project.\n\nGet yours at https://getpapi.ai/setup\n\nAlready have one? Make sure PAPI_PROJECT_ID is set in your .mcp.json env config."
+    );
+  }
   return {
     projectRoot,
     papiDir: path.join(projectRoot, ".papi"),
@@ -9482,8 +9505,9 @@ Check PAPI_PROJECT_ID in your .mcp.json config. Find your project ID in the PAPI
 }
 
 // src/server.ts
+import { readFileSync as readFileSync5 } from "fs";
 import { access as access4, readdir as readdir2, readFile as readFile5 } from "fs/promises";
-import { join as join10, dirname } from "path";
+import { join as join12, dirname } from "path";
 import { fileURLToPath } from "url";
 import { Server } from "@modelcontextprotocol/sdk/server/index.js";
 import {
@@ -9689,6 +9713,17 @@ ${formatted}`;
   }
   return sections.join("\n\n");
 }
+function formatCandidateTaskFullNotes(tasks) {
+  const candidates = tasks.filter((t) => !PLAN_EXCLUDED_STATUSES.has(t.status)).filter((t) => (t.notes?.length ?? 0) > PLAN_NOTES_MAX_LENGTH);
+  if (candidates.length === 0) return void 0;
+  const lines = candidates.map((t) => `**${t.id}** \u2014 ${t.title}
+${t.notes}`);
+  return [
+    `${candidates.length} candidate task(s) have notes longer than ${PLAN_NOTES_MAX_LENGTH} chars. Full untruncated notes below \u2014 reference these when generating BUILD HANDOFFs so submitter context, constraints, and reasoning are preserved. The Board section above uses truncated notes for concise task selection; this section supplies the missing detail for tasks you choose to schedule.`,
+    "",
+    ...lines
+  ].join("\n\n");
+}
 function formatBoardForReview(tasks) {
   if (tasks.length === 0) return "No tasks on the board.";
   return tasks.map(
@@ -10510,6 +10545,7 @@ Standard planning cycle with full board review.
    **Security section guidance:** Each handoff includes a SECURITY CONSIDERATIONS section. Populate it when the task involves: data exposure risks (PII, secrets in logs/storage), secrets or credentials handling (API keys, tokens, env vars), auth/access control changes, or dependency security risks (new packages, version changes). For pure refactoring, documentation, prompt-text, or UI-only tasks, write "None \u2014 no security-relevant changes".
    **Estimation calibration:** Estimate **XS** for: copy/text-only changes, single string replacements, config tweaks, and any task where the scope is "change words in an existing file" with no logic changes. Estimate **S** for: wiring existing adapter methods, adding API routes following established patterns, modifying prompts, or documentation-only changes. Default to S for pattern-following work. Only use M when genuine new architecture, new DB tables, or multi-file architectural changes are needed. Historical data shows systematic over-estimation (198 over vs 8 under out of 528 tasks) \u2014 when in doubt, estimate smaller. If an "Estimation Calibration (Historical)" section is provided in the context below, use its data to adjust your estimates \u2014 it shows how often each estimated size matched the actual effort. Pay special attention to systematic over/under-estimation patterns (e.g. if M\u2192S happens frequently, estimate S instead of M for similar work).
    **Reference docs:** If a task's notes include a \`Reference:\` path (e.g. \`Reference: docs/architecture/papi-brain-v1.md\`), include a REFERENCE DOCS section in the BUILD HANDOFF with those paths. This tells the builder to read the referenced doc for background context before implementing. Do NOT omit or summarise the reference \u2014 pass it through so the builder can access the full document. Only tasks with explicit \`Reference:\` paths in their notes should have this section.
+   **Full notes lookup:** Notes in the Board section are truncated to 300 chars for concise task selection. When generating a BUILD HANDOFF for a task, check the "Full Notes for Candidate Tasks" section (if present in context) for that task's complete untruncated notes before writing SCOPE, SCOPE BOUNDARY, and PRE-MORTEM. Submitter context, constraints, and reasoning often live past the 300-char cutoff and must not be dropped from the handoff.
    **Pre-build verification:** EVERY handoff MUST include a PRE-BUILD VERIFICATION section listing 2-5 specific file paths the builder should read before implementing. Derive these from FILES LIKELY TOUCHED \u2014 pick the files most likely to already contain the target functionality. This is the #1 prevention mechanism for wasted build slots (C120, C125, C126 all scheduled already-shipped work). If the builder finds >80% of the scope already implemented, they report "already built" instead of re-implementing.
    **Pre-mortem:** For projects with 10+ cycles, include a PRE-MORTEM section in every BUILD HANDOFF with 1-3 bullet points: (a) most likely technical blocker based on module history, (b) integration risk with adjacent systems, (c) scope creep signal \u2014 what the builder might be tempted to expand beyond scope. Draw from \`dead_ends\` and \`surprises\` in recent build reports for the same module. Omit this section entirely for projects with fewer than 10 cycles.
    **Build order in cycle log:** If any intra-cycle dependencies were detected in this cycle, include a "Build Order" paragraph in \`cycleLogNotes\` showing the recommended build sequence as arrow chains (e.g. "Build order: task-123 \u2192 task-124; task-130 standalone"). Skip this paragraph when no dependencies exist.
@@ -10740,6 +10776,7 @@ Standard planning cycle with full board review.
    **Security section guidance:** Each handoff includes a SECURITY CONSIDERATIONS section. Populate it when the task involves: data exposure risks (PII, secrets in logs/storage), secrets or credentials handling (API keys, tokens, env vars), auth/access control changes, or dependency security risks (new packages, version changes). For pure refactoring, documentation, prompt-text, or UI-only tasks, write "None \u2014 no security-relevant changes".
    **Estimation calibration:** Estimate **XS** for: copy/text-only changes, single string replacements, config tweaks, and any task where the scope is "change words in an existing file" with no logic changes. Estimate **S** for: wiring existing adapter methods, adding API routes following established patterns, modifying prompts, or documentation-only changes. Default to S for pattern-following work. Only use M when genuine new architecture, new DB tables, or multi-file architectural changes are needed. Historical data shows systematic over-estimation (198 over vs 8 under out of 528 tasks) \u2014 when in doubt, estimate smaller. If an "Estimation Calibration (Historical)" section is provided in the context below, use its data to adjust your estimates \u2014 it shows how often each estimated size matched the actual effort. Pay special attention to systematic over/under-estimation patterns (e.g. if M\u2192S happens frequently, estimate S instead of M for similar work).
    **Reference docs:** If a task's notes include a \`Reference:\` path (e.g. \`Reference: docs/architecture/papi-brain-v1.md\`), include a REFERENCE DOCS section in the BUILD HANDOFF with those paths. This tells the builder to read the referenced doc for background context before implementing. Do NOT omit or summarise the reference \u2014 pass it through so the builder can access the full document. Only tasks with explicit \`Reference:\` paths in their notes should have this section.
+   **Full notes lookup:** Notes in the Board section are truncated to 300 chars for concise task selection. When generating a BUILD HANDOFF for a task, check the "Full Notes for Candidate Tasks" section (if present in context) for that task's complete untruncated notes before writing SCOPE, SCOPE BOUNDARY, and PRE-MORTEM. Submitter context, constraints, and reasoning often live past the 300-char cutoff and must not be dropped from the handoff.
    **Pre-build verification:** EVERY handoff MUST include a PRE-BUILD VERIFICATION section listing 2-5 specific file paths the builder should read before implementing. Derive these from FILES LIKELY TOUCHED \u2014 pick the files most likely to already contain the target functionality. This is the #1 prevention mechanism for wasted build slots (C120, C125, C126 all scheduled already-shipped work). If the builder finds >80% of the scope already implemented, they report "already built" instead of re-implementing.
    **Pre-mortem:** For projects with 10+ cycles, include a PRE-MORTEM section in every BUILD HANDOFF with 1-3 bullet points: (a) most likely technical blocker based on module history, (b) integration risk with adjacent systems, (c) scope creep signal \u2014 what the builder might be tempted to expand beyond scope. Draw from \`dead_ends\` and \`surprises\` in recent build reports for the same module. Omit this section entirely for projects with fewer than 10 cycles.
    **Intra-cycle dependency detection:** After selecting cycle tasks, check every pair for build-order dependencies. Two tasks A and B have an intra-cycle dependency when A must be built before B because B consumes an artifact A creates \u2014 e.g. A adds a new adapter method that B calls, A creates a DB migration B depends on, A introduces a new shared type B imports, A refactors a utility B modifies. Signals: same module + adjacent scope (one is "add X", another is "use X"), or notes explicitly reference the other task. For each dependency detected: (a) populate the DEPENDS ON section in the dependent task's BUILD HANDOFF with the upstream task ID(s); (b) add a \`boardCorrections\` entry for the dependent task with \`updates.dependsOn\` set to the comma-separated upstream IDs \u2014 this persists the dependency so the builder's runtime can reuse the upstream branch; (c) keep SCOPE sections independent but note the ordering in "Why now". Do NOT invent dependencies where tasks merely share a module \u2014 only real build-order coupling counts. Linear chains only \u2014 no multi-level graph resolution. When in doubt, omit.
@@ -10843,6 +10880,9 @@ function buildPlanUserMessage(ctx) {
     if (ctx.board) {
       parts.push("### Board", "", ctx.board, "");
     }
+    if (ctx.candidateTaskFullNotes) {
+      parts.push("### Full Notes for Candidate Tasks", "", ctx.candidateTaskFullNotes, "");
+    }
     if (ctx.preAssignedTasks) {
       parts.push("### Pre-Assigned Tasks", "", ctx.preAssignedTasks, "");
     }
@@ -12238,6 +12278,10 @@ ${lines.join("\n")}`;
     if (reportsForCapsResult.status === "fulfilled") {
       recentlyShippedLean = formatRecentlyShippedCapabilities(reportsForCapsResult.value);
     }
+    let candidateTaskFullNotesLean;
+    if (preAssignedResult.status === "fulfilled") {
+      candidateTaskFullNotesLean = formatCandidateTaskFullNotes(preAssignedResult.value);
+    }
     logDataSourceSummary("plan (lean)", [
       { label: "cycleHealth", hasData: !!health },
       { label: "productBrief", hasData: warnIfEmpty("productBrief", productBrief) },
@@ -12275,7 +12319,8 @@ ${lines.join("\n")}`;
       carryForwardStaleness: carryForwardStalenessLean,
       preAssignedTasks: preAssignedTextLean,
       recentlyShippedCapabilities: recentlyShippedLean,
-      strategyReviewCadence
+      strategyReviewCadence,
+      candidateTaskFullNotes: candidateTaskFullNotesLean
     };
     const { label: leanTierLabel } = applyContextTier(ctx2, health.totalCycles);
     ctx2.contextTier = leanTierLabel;
@@ -12436,7 +12481,8 @@ ${logLines}`);
     carryForwardStaleness: computeCarryForwardStaleness(log),
     preAssignedTasks: preAssignedText,
     recentlyShippedCapabilities: formatRecentlyShippedCapabilities(reports),
-    strategyReviewCadence: strategyReviewCadenceFull
+    strategyReviewCadence: strategyReviewCadenceFull,
+    candidateTaskFullNotes: formatCandidateTaskFullNotes(plannerTasks)
   };
   const { label: fullTierLabel } = applyContextTier(ctx, health.totalCycles);
   ctx.contextTier = fullTierLabel;
@@ -21044,21 +21090,94 @@ async function handleDocScan(adapter2, config2, args) {
   return textResponse(lines.join("\n"));
 }
 
+// src/services/session-guidance.ts
+import { existsSync as existsSync6 } from "fs";
+import { join as join9 } from "path";
+var state = {
+  toolCallCount: 0,
+  lastOrientAt: null,
+  releaseSinceLastOrient: false,
+  sessionStartedAt: Date.now()
+};
+var CONTEXT_BLOAT_CALL_THRESHOLD = 40;
+var ORIENT_GAP_MS = 3 * 60 * 60 * 1e3;
+function recordToolCall(name) {
+  state.toolCallCount++;
+  if (name === "release") state.releaseSinceLastOrient = true;
+}
+function markOrient() {
+  state.lastOrientAt = Date.now();
+  state.releaseSinceLastOrient = false;
+}
+async function buildSessionGuidance(adapter2, projectRoot) {
+  const signals = [];
+  try {
+    if (adapter2.searchDocs) {
+      const researchDir = join9(projectRoot, "docs", "research");
+      if (existsSync6(researchDir)) {
+        const files = scanMdFiles(researchDir, projectRoot);
+        if (files.length > 0) {
+          const registered = await adapter2.searchDocs({ limit: 500, status: "all" });
+          const registeredPaths = new Set(registered.map((d) => d.path));
+          const unregistered = files.filter((f) => !registeredPaths.has(f));
+          if (unregistered.length > 0) {
+            signals.push(
+              `${unregistered.length} research doc(s) in docs/research/ not registered \u2014 run \`doc_register\` so the planner can surface them.`
+            );
+          }
+        }
+      }
+    }
+  } catch {
+  }
+  if (state.toolCallCount > CONTEXT_BLOAT_CALL_THRESHOLD) {
+    signals.push(
+      `${state.toolCallCount} tool calls this session \u2014 context may be bloated. Consider starting a fresh window.`
+    );
+  }
+  if (state.lastOrientAt && Date.now() - state.lastOrientAt > ORIENT_GAP_MS) {
+    const hours = Math.round((Date.now() - state.lastOrientAt) / (60 * 60 * 1e3));
+    signals.push(
+      `${hours}h since last orient \u2014 session may be stale. Consider a fresh window for best results.`
+    );
+  }
+  if (state.releaseSinceLastOrient) {
+    signals.push(
+      "Release just ran \u2014 start a fresh session before the next `plan` to keep planning context clean."
+    );
+  }
+  return signals.slice(0, 3);
+}
+
 // src/tools/orient.ts
 import { execFileSync as execFileSync3 } from "child_process";
-import { readFileSync as readFileSync3, writeFileSync, existsSync as existsSync6 } from "fs";
-import { join as join9 } from "path";
+import { readFileSync as readFileSync3, writeFileSync, existsSync as existsSync7 } from "fs";
+import { join as join10 } from "path";
+var GIT_DEPENDENT_ENVS = /* @__PURE__ */ new Set(["cowork", "api"]);
+var VALID_ENVS = /* @__PURE__ */ new Set(["claude-code", "cowork", "api", "unknown"]);
+function normaliseEnvironment(raw) {
+  if (typeof raw === "string" && VALID_ENVS.has(raw)) {
+    return raw;
+  }
+  return "unknown";
+}
 var orientTool = {
   name: "orient",
-  description: "Session orientation \u2014 run this FIRST at session start before any other tool. Single call that replaces build_list + health. Returns: cycle number, task counts by status, in-progress/in-review tasks, strategy review cadence, velocity snapshot, recommended next action, and a release reminder when all cycle tasks are Done but release has not run. Read-only, does not modify any files.",
+  description: "Session orientation \u2014 run this FIRST at session start before any other tool. Single call that replaces build_list + health. Returns: cycle number, task counts by status, in-progress/in-review tasks, strategy review cadence, velocity snapshot, recommended next action, and a release reminder when all cycle tasks are Done but release has not run. Read-only, does not modify any files. Pass `environment` to qualify git-dependent recommendations (build_execute, release, review_submit) for non-Claude-Code callers.",
   annotations: { readOnlyHint: true, destructiveHint: false },
   inputSchema: {
     type: "object",
-    properties: {},
+    properties: {
+      environment: {
+        type: "string",
+        enum: ["claude-code", "cowork", "api", "unknown"],
+        description: 'Caller environment. "claude-code" (local CLI with git) sees all recommendations unchanged. "cowork" or "api" (hosted/remote, no local git) suppresses/qualifies build_execute, release, and review_submit recommendations because those require a local Claude Code session to execute. Default "unknown" = show everything (safe default).'
+      }
+    },
     required: []
   }
 };
-function formatOrientSummary(health, buildInfo, hierarchy, latestTag, projectRoot) {
+function formatOrientSummary(health, buildInfo, hierarchy, latestTag, projectRoot, environment = "unknown") {
   const lines = [];
   const cycleIsComplete = health.latestCycleStatus === "complete";
   const tagSuffix = latestTag ? ` \u2014 ${latestTag}` : "";
@@ -21076,7 +21195,13 @@ function formatOrientSummary(health, buildInfo, hierarchy, latestTag, projectRoo
     }
     lines.push("");
   }
-  lines.push(`> **Next action:** ${health.recommendedMode}`);
+  const isGitDependentRec = /\*\*(Build|Review)\*\*/.test(health.recommendedMode);
+  if (GIT_DEPENDENT_ENVS.has(environment) && isGitDependentRec) {
+    lines.push(`> **Next action:** ${health.recommendedMode}`);
+    lines.push(`> _Note: \`build_execute\`, \`review_submit\`, and \`release\` require a local Claude Code session with git access. From \`${environment}\` you can view state, log ideas, and edit the board \u2014 but the build/review/release loop must run through Claude Code._`);
+  } else {
+    lines.push(`> **Next action:** ${health.recommendedMode}`);
+  }
   lines.push("");
   lines.push(`**Strategy Review:** ${health.reviewWarning}`);
   lines.push("");
@@ -21227,7 +21352,7 @@ function getLatestGitTag(projectRoot) {
 }
 function checkNpmVersionDrift() {
   try {
-    const pkgPath = join9(new URL(".", import.meta.url).pathname, "..", "..", "package.json");
+    const pkgPath = join10(new URL(".", import.meta.url).pathname, "..", "..", "package.json");
     const pkg = JSON.parse(readFileSync3(pkgPath, "utf-8"));
     const localVersion = pkg.version;
     const packageName = pkg.name;
@@ -21244,7 +21369,8 @@ function checkNpmVersionDrift() {
     return null;
   }
 }
-async function handleOrient(adapter2, config2) {
+async function handleOrient(adapter2, config2, args = {}) {
+  const environment = normaliseEnvironment(args.environment);
   try {
     try {
       await propagatePhaseStatus(adapter2);
@@ -21353,7 +21479,7 @@ ${versionDrift}` : "";
     let unregisteredDocsNote = "";
     try {
       if (adapter2.searchDocs) {
-        const docsDir = join9(config2.projectRoot, "docs");
+        const docsDir = join10(config2.projectRoot, "docs");
         const docsFiles = scanMdFiles(docsDir, config2.projectRoot);
         if (docsFiles.length > 0) {
           const registered = await adapter2.searchDocs({ limit: 500, status: "all" });
@@ -21443,13 +21569,35 @@ ${versionDrift}` : "";
       }
     } catch {
     }
+    let alertsNote = "";
     let unactionedIssuesNote = "";
     try {
-      const learnings = await adapter2.getCycleLearnings?.({ category: "issue", limit: 20 });
+      const learnings = await adapter2.getCycleLearnings?.({ category: "issue", limit: 30 });
       if (learnings) {
-        const unactioned = learnings.filter((l) => !l.actionTaken && l.severity && ["P0", "P1", "P2"].includes(l.severity)).slice(0, 5);
-        if (unactioned.length > 0) {
-          const lines = ["\n\n## Unactioned Issues"];
+        const byRecency = (a, b2) => (b2.createdAt ?? "").localeCompare(a.createdAt ?? "");
+        const unactionedAll = learnings.filter((l) => !l.actionTaken).map((l) => ({ ...l, severity: l.severity ?? "P3" }));
+        const allAlerts = unactionedAll.filter((l) => l.severity === "P0" || l.severity === "P1").sort(byRecency);
+        const allLowSev = unactionedAll.filter((l) => l.severity === "P2" || l.severity === "P3").sort(byRecency);
+        const totalP2 = allLowSev.filter((l) => l.severity === "P2").length;
+        const totalP3 = allLowSev.filter((l) => l.severity === "P3").length;
+        const ALERT_CAP = 10;
+        const UNACTIONED_CAP = 5;
+        const alerts = allAlerts.slice(0, ALERT_CAP);
+        const unactioned = allLowSev.slice(0, UNACTIONED_CAP);
+        if (allAlerts.length > 0) {
+          const header = allAlerts.length > ALERT_CAP ? `${allAlerts.length} P0/P1 discovered issues awaiting action (showing ${ALERT_CAP} most recent).` : `${allAlerts.length} P0/P1 discovered issue${allAlerts.length !== 1 ? "s" : ""} awaiting action.`;
+          const lines = ["\n\n## \u{1F6A8} Alerts", header];
+          for (const issue of alerts) {
+            const desc = issue.summary.length > 100 ? `${issue.summary.slice(0, 97)}\u2026` : issue.summary;
+            lines.push(`- **${issue.severity}** (C${issue.cycleNumber} / ${issue.taskId}): ${desc}`);
+          }
+          lines.push("_Escalate: run `idea` with P1 priority, or `board_edit` if already handled._");
+          alertsNote = lines.join("\n");
+        }
+        if (allLowSev.length > 0) {
+          const totalLow = totalP2 + totalP3;
+          const header = totalLow > UNACTIONED_CAP ? `${totalP2} P2 \xB7 ${totalP3} P3 (showing ${UNACTIONED_CAP} most recent)` : `${totalP2} P2 \xB7 ${totalP3} P3`;
+          const lines = ["\n\n## Unactioned Issues", header];
           for (const issue of unactioned) {
             const desc = issue.summary.length > 100 ? `${issue.summary.slice(0, 97)}\u2026` : issue.summary;
             lines.push(`- **${issue.severity}** (C${issue.cycleNumber} / ${issue.taskId}): ${desc}`);
@@ -21460,15 +21608,26 @@ ${versionDrift}` : "";
       }
     } catch {
     }
-    return textResponse(formatOrientSummary(healthResult, buildInfo, hierarchy, latestTag, config2.projectRoot) + ttfvNote + reconciliationNote + unrecordedNote + unregisteredDocsNote + researchSignalsNote + recsNote + pendingReviewNote + patternsNote + unactionedIssuesNote + versionNote + enrichmentNote);
+    let sessionGuidanceNote = "";
+    try {
+      const signals = await buildSessionGuidance(adapter2, config2.projectRoot);
+      if (signals.length > 0) {
+        const lines = ["\n\n## Session Guidance"];
+        for (const s of signals) lines.push(`- ${s}`);
+        sessionGuidanceNote = lines.join("\n");
+      }
+      markOrient();
+    } catch {
+    }
+    return textResponse(formatOrientSummary(healthResult, buildInfo, hierarchy, latestTag, config2.projectRoot, environment) + alertsNote + ttfvNote + reconciliationNote + unrecordedNote + unregisteredDocsNote + researchSignalsNote + recsNote + pendingReviewNote + patternsNote + unactionedIssuesNote + sessionGuidanceNote + versionNote + enrichmentNote);
   } catch (err) {
     const message = err instanceof Error ? err.message : String(err);
     return errorResponse(`Orient failed: ${message}`);
   }
 }
 function enrichClaudeMd(projectRoot, cycleNumber) {
-  const claudeMdPath = join9(projectRoot, "CLAUDE.md");
-  if (!existsSync6(claudeMdPath)) return "";
+  const claudeMdPath = join10(projectRoot, "CLAUDE.md");
+  if (!existsSync7(claudeMdPath)) return "";
   const content = readFileSync3(claudeMdPath, "utf-8");
   const additions = [];
   if (cycleNumber >= 6 && !content.includes(CLAUDE_MD_ENRICHMENT_SENTINEL_T1)) {
@@ -22250,6 +22409,47 @@ ${result.userMessage}
   }
 }
 
+// src/lib/install-id.ts
+import { randomUUID as randomUUID15 } from "crypto";
+import { mkdirSync, readFileSync as readFileSync4, writeFileSync as writeFileSync2, chmodSync } from "fs";
+import { homedir as homedir3 } from "os";
+import { join as join11 } from "path";
+var PAPI_HOME_DIR = join11(homedir3(), ".papi");
+var INSTALL_ID_FILE = join11(PAPI_HOME_DIR, "install-id.json");
+var cachedInstallId = null;
+function isValidUuid(s) {
+  return typeof s === "string" && /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(s);
+}
+function getInstallId() {
+  if (cachedInstallId) return cachedInstallId;
+  try {
+    const raw = readFileSync4(INSTALL_ID_FILE, "utf-8");
+    const parsed = JSON.parse(raw);
+    if (isValidUuid(parsed.install_id)) {
+      cachedInstallId = parsed.install_id;
+      return cachedInstallId;
+    }
+  } catch {
+  }
+  try {
+    mkdirSync(PAPI_HOME_DIR, { recursive: true, mode: 448 });
+    const id = randomUUID15();
+    const contents = {
+      install_id: id,
+      created_at: (/* @__PURE__ */ new Date()).toISOString()
+    };
+    writeFileSync2(INSTALL_ID_FILE, JSON.stringify(contents, null, 2), { mode: 384 });
+    try {
+      chmodSync(INSTALL_ID_FILE, 384);
+    } catch {
+    }
+    cachedInstallId = id;
+    return cachedInstallId;
+  } catch {
+    return null;
+  }
+}
+
 // src/lib/telemetry.ts
 var TELEMETRY_SUPABASE_URL = "https://guewgygcpcmrcoppihzx.supabase.co";
 var TELEMETRY_API_KEY = "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6Imd1ZXdneWdjcGNtcmNvcHBpaHp4Iiwicm9sZSI6ImFub24iLCJpYXQiOjE3NzI2Njk2NTMsImV4cCI6MjA4ODI0NTY1M30.V5Jw7wJgiMpSQPa2mt0ftjyye5ynG1qLlam00yPVNJY";
@@ -22288,6 +22488,29 @@ function emitToolCall(projectId, toolName, durationMs, extra) {
     metadata: { duration_ms: durationMs, ...extra }
   });
 }
+function emitMdAdapterPing(toolName, extra) {
+  if (!isEnabled()) return;
+  const installId = getInstallId();
+  if (!installId) return;
+  const body = {
+    install_id: installId,
+    tool_name: toolName,
+    papi_version: process.env["npm_package_version"] ?? null,
+    metadata: extra ?? {}
+  };
+  fetch(`${TELEMETRY_SUPABASE_URL}/rest/v1/md_adapter_pings`, {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/json",
+      "apikey": TELEMETRY_API_KEY,
+      "Authorization": `Bearer ${TELEMETRY_API_KEY}`,
+      "Prefer": "return=minimal"
+    },
+    body: JSON.stringify(body),
+    signal: AbortSignal.timeout(5e3)
+  }).catch(() => {
+  });
+}
 function emitMilestone(projectId, milestone, extra) {
   emitTelemetryEvent({
     project_id: projectId,
@@ -22322,13 +22545,26 @@ var TOOLS_REQUIRING_PAPI = /* @__PURE__ */ new Set([
   "handoff_generate"
 ]);
 function createServer(adapter2, config2) {
+  const __pkgFilename = fileURLToPath(import.meta.url);
+  const __pkgDir = dirname(__pkgFilename);
+  let serverVersion = "unknown";
+  try {
+    const pkg = JSON.parse(readFileSync5(join12(__pkgDir, "..", "package.json"), "utf-8"));
+    serverVersion = pkg.version ?? "unknown";
+  } catch {
+  }
   const server2 = new Server(
-    { name: "papi", version: "0.1.0" },
+    { name: "papi", version: serverVersion },
     { capabilities: { tools: {}, prompts: {} } }
   );
+  if (config2.adapterType === "md") {
+    process.stderr.write(
+      "\n\u26A0 PAPI is running in md mode \u2014 your cycles are not visible on the hosted dashboard.\n  Configure DATABASE_URL or sign up at https://getpapi.ai/setup to enable observability.\n\n"
+    );
+  }
   const __filename = fileURLToPath(import.meta.url);
   const __dirname2 = dirname(__filename);
-  const skillsDir = join10(__dirname2, "..", "skills");
+  const skillsDir = join12(__dirname2, "..", "skills");
   function parseSkillFrontmatter(content) {
     const match = content.match(/^---\n([\s\S]*?)\n---/);
     if (!match) return null;
@@ -22346,7 +22582,7 @@ function createServer(adapter2, config2) {
       const mdFiles = files.filter((f) => f.endsWith(".md"));
       const prompts = [];
       for (const file of mdFiles) {
-        const content = await readFile5(join10(skillsDir, file), "utf-8");
+        const content = await readFile5(join12(skillsDir, file), "utf-8");
         const meta = parseSkillFrontmatter(content);
         if (meta) {
           prompts.push({ name: meta.name, description: meta.description });
@@ -22362,7 +22598,7 @@ function createServer(adapter2, config2) {
     try {
       const files = await readdir2(skillsDir);
       for (const file of files.filter((f) => f.endsWith(".md"))) {
-        const content = await readFile5(join10(skillsDir, file), "utf-8");
+        const content = await readFile5(join12(skillsDir, file), "utf-8");
         const meta = parseSkillFrontmatter(content);
         if (meta?.name === name) {
           const body = content.replace(/^---\n[\s\S]*?\n---\n*/, "");
@@ -22435,6 +22671,7 @@ function createServer(adapter2, config2) {
       }
     }
     const timer2 = startTimer();
+    recordToolCall(name);
     let result;
     switch (name) {
       case "plan":
@@ -22498,7 +22735,7 @@ function createServer(adapter2, config2) {
         result = await handleInit(config2, safeArgs);
         break;
       case "orient":
-        result = await handleOrient(adapter2, config2);
+        result = await handleOrient(adapter2, config2, safeArgs);
         break;
       case "hierarchy_update":
         result = await handleHierarchyUpdate(adapter2, safeArgs);
@@ -22539,6 +22776,9 @@ function createServer(adapter2, config2) {
       });
     } catch {
     }
+    if (config2.adapterType === "md") {
+      emitMdAdapterPing(name, { duration_ms: elapsed, success: !isError });
+    }
     const telemetryProjectId = process.env["PAPI_PROJECT_ID"];
     if (telemetryProjectId) {
       emitToolCall(telemetryProjectId, name, elapsed, {
@@ -22566,7 +22806,7 @@ function createServer(adapter2, config2) {
 var __dirname = dirname2(fileURLToPath2(import.meta.url));
 var pkgVersion = "unknown";
 try {
-  const pkg = JSON.parse(readFileSync4(join11(__dirname, "..", "package.json"), "utf-8"));
+  const pkg = JSON.parse(readFileSync6(join13(__dirname, "..", "package.json"), "utf-8"));
   pkgVersion = pkg.version;
 } catch {
 }

package/dist/prompts.js

@@ -245,6 +245,7 @@ Standard planning cycle with full board review.
    **Security section guidance:** Each handoff includes a SECURITY CONSIDERATIONS section. Populate it when the task involves: data exposure risks (PII, secrets in logs/storage), secrets or credentials handling (API keys, tokens, env vars), auth/access control changes, or dependency security risks (new packages, version changes). For pure refactoring, documentation, prompt-text, or UI-only tasks, write "None \u2014 no security-relevant changes".
    **Estimation calibration:** Estimate **XS** for: copy/text-only changes, single string replacements, config tweaks, and any task where the scope is "change words in an existing file" with no logic changes. Estimate **S** for: wiring existing adapter methods, adding API routes following established patterns, modifying prompts, or documentation-only changes. Default to S for pattern-following work. Only use M when genuine new architecture, new DB tables, or multi-file architectural changes are needed. Historical data shows systematic over-estimation (198 over vs 8 under out of 528 tasks) \u2014 when in doubt, estimate smaller. If an "Estimation Calibration (Historical)" section is provided in the context below, use its data to adjust your estimates \u2014 it shows how often each estimated size matched the actual effort. Pay special attention to systematic over/under-estimation patterns (e.g. if M\u2192S happens frequently, estimate S instead of M for similar work).
    **Reference docs:** If a task's notes include a \`Reference:\` path (e.g. \`Reference: docs/architecture/papi-brain-v1.md\`), include a REFERENCE DOCS section in the BUILD HANDOFF with those paths. This tells the builder to read the referenced doc for background context before implementing. Do NOT omit or summarise the reference \u2014 pass it through so the builder can access the full document. Only tasks with explicit \`Reference:\` paths in their notes should have this section.
+   **Full notes lookup:** Notes in the Board section are truncated to 300 chars for concise task selection. When generating a BUILD HANDOFF for a task, check the "Full Notes for Candidate Tasks" section (if present in context) for that task's complete untruncated notes before writing SCOPE, SCOPE BOUNDARY, and PRE-MORTEM. Submitter context, constraints, and reasoning often live past the 300-char cutoff and must not be dropped from the handoff.
    **Pre-build verification:** EVERY handoff MUST include a PRE-BUILD VERIFICATION section listing 2-5 specific file paths the builder should read before implementing. Derive these from FILES LIKELY TOUCHED \u2014 pick the files most likely to already contain the target functionality. This is the #1 prevention mechanism for wasted build slots (C120, C125, C126 all scheduled already-shipped work). If the builder finds >80% of the scope already implemented, they report "already built" instead of re-implementing.
    **Pre-mortem:** For projects with 10+ cycles, include a PRE-MORTEM section in every BUILD HANDOFF with 1-3 bullet points: (a) most likely technical blocker based on module history, (b) integration risk with adjacent systems, (c) scope creep signal \u2014 what the builder might be tempted to expand beyond scope. Draw from \`dead_ends\` and \`surprises\` in recent build reports for the same module. Omit this section entirely for projects with fewer than 10 cycles.
    **Build order in cycle log:** If any intra-cycle dependencies were detected in this cycle, include a "Build Order" paragraph in \`cycleLogNotes\` showing the recommended build sequence as arrow chains (e.g. "Build order: task-123 \u2192 task-124; task-130 standalone"). Skip this paragraph when no dependencies exist.
@@ -475,6 +476,7 @@ Standard planning cycle with full board review.
    **Security section guidance:** Each handoff includes a SECURITY CONSIDERATIONS section. Populate it when the task involves: data exposure risks (PII, secrets in logs/storage), secrets or credentials handling (API keys, tokens, env vars), auth/access control changes, or dependency security risks (new packages, version changes). For pure refactoring, documentation, prompt-text, or UI-only tasks, write "None \u2014 no security-relevant changes".
    **Estimation calibration:** Estimate **XS** for: copy/text-only changes, single string replacements, config tweaks, and any task where the scope is "change words in an existing file" with no logic changes. Estimate **S** for: wiring existing adapter methods, adding API routes following established patterns, modifying prompts, or documentation-only changes. Default to S for pattern-following work. Only use M when genuine new architecture, new DB tables, or multi-file architectural changes are needed. Historical data shows systematic over-estimation (198 over vs 8 under out of 528 tasks) \u2014 when in doubt, estimate smaller. If an "Estimation Calibration (Historical)" section is provided in the context below, use its data to adjust your estimates \u2014 it shows how often each estimated size matched the actual effort. Pay special attention to systematic over/under-estimation patterns (e.g. if M\u2192S happens frequently, estimate S instead of M for similar work).
    **Reference docs:** If a task's notes include a \`Reference:\` path (e.g. \`Reference: docs/architecture/papi-brain-v1.md\`), include a REFERENCE DOCS section in the BUILD HANDOFF with those paths. This tells the builder to read the referenced doc for background context before implementing. Do NOT omit or summarise the reference \u2014 pass it through so the builder can access the full document. Only tasks with explicit \`Reference:\` paths in their notes should have this section.
+   **Full notes lookup:** Notes in the Board section are truncated to 300 chars for concise task selection. When generating a BUILD HANDOFF for a task, check the "Full Notes for Candidate Tasks" section (if present in context) for that task's complete untruncated notes before writing SCOPE, SCOPE BOUNDARY, and PRE-MORTEM. Submitter context, constraints, and reasoning often live past the 300-char cutoff and must not be dropped from the handoff.
    **Pre-build verification:** EVERY handoff MUST include a PRE-BUILD VERIFICATION section listing 2-5 specific file paths the builder should read before implementing. Derive these from FILES LIKELY TOUCHED \u2014 pick the files most likely to already contain the target functionality. This is the #1 prevention mechanism for wasted build slots (C120, C125, C126 all scheduled already-shipped work). If the builder finds >80% of the scope already implemented, they report "already built" instead of re-implementing.
    **Pre-mortem:** For projects with 10+ cycles, include a PRE-MORTEM section in every BUILD HANDOFF with 1-3 bullet points: (a) most likely technical blocker based on module history, (b) integration risk with adjacent systems, (c) scope creep signal \u2014 what the builder might be tempted to expand beyond scope. Draw from \`dead_ends\` and \`surprises\` in recent build reports for the same module. Omit this section entirely for projects with fewer than 10 cycles.
    **Intra-cycle dependency detection:** After selecting cycle tasks, check every pair for build-order dependencies. Two tasks A and B have an intra-cycle dependency when A must be built before B because B consumes an artifact A creates \u2014 e.g. A adds a new adapter method that B calls, A creates a DB migration B depends on, A introduces a new shared type B imports, A refactors a utility B modifies. Signals: same module + adjacent scope (one is "add X", another is "use X"), or notes explicitly reference the other task. For each dependency detected: (a) populate the DEPENDS ON section in the dependent task's BUILD HANDOFF with the upstream task ID(s); (b) add a \`boardCorrections\` entry for the dependent task with \`updates.dependsOn\` set to the comma-separated upstream IDs \u2014 this persists the dependency so the builder's runtime can reuse the upstream branch; (c) keep SCOPE sections independent but note the ordering in "Why now". Do NOT invent dependencies where tasks merely share a module \u2014 only real build-order coupling counts. Linear chains only \u2014 no multi-level graph resolution. When in doubt, omit.
@@ -578,6 +580,9 @@ function buildPlanUserMessage(ctx) {
     if (ctx.board) {
       parts.push("### Board", "", ctx.board, "");
     }
+    if (ctx.candidateTaskFullNotes) {
+      parts.push("### Full Notes for Candidate Tasks", "", ctx.candidateTaskFullNotes, "");
+    }
     if (ctx.preAssignedTasks) {
       parts.push("### Pre-Assigned Tasks", "", ctx.preAssignedTasks, "");
     }

package/package.json

@@ -1,6 +1,7 @@
 {
   "name": "@papi-ai/server",
-  "version": "0.7.11",
+  "version": "0.7.12",
+  "mcpName": "io.github.cathalos92/papi",
   "description": "PAPI MCP server — AI-powered sprint planning, build execution, and strategy review for software projects",
   "license": "Elastic-2.0",
   "type": "module",