@papi-ai/server 0.7.37 → 0.7.40

package/dist/backfill-cycle-metrics.js

@@ -43,6 +43,7 @@ __export(git_exports, {
   getStagedFiles: () => getStagedFiles,
   getTagTarget: () => getTagTarget,
   getTaskIdsOnBranch: () => getTaskIdsOnBranch,
+  getTrackedModifiedFiles: () => getTrackedModifiedFiles,
   getUnmergedBranches: () => getUnmergedBranches,
   getUntrackedFiles: () => getUntrackedFiles,
   gitPull: () => gitPull,
@@ -175,6 +176,25 @@ function getModifiedFiles(cwd) {
     return [];
   }
 }
+function getTrackedModifiedFiles(cwd) {
+  try {
+    const out = execFileSync("git", ["status", "--porcelain"], {
+      cwd,
+      encoding: "utf-8"
+    }).replace(/\n+$/, "");
+    if (!out) return [];
+    const paths = /* @__PURE__ */ new Set();
+    for (const line of out.split("\n")) {
+      if (line.length < 4) continue;
+      if (line.startsWith("??")) continue;
+      const path3 = line.slice(3).trim();
+      if (path3) paths.add(path3);
+    }
+    return Array.from(paths);
+  } catch {
+    return [];
+  }
+}
 function getUntrackedFiles(cwd) {
   try {
     const out = execFileSync("git", ["ls-files", "--others", "--exclude-standard"], {
@@ -1324,6 +1344,33 @@ Check PAPI_PROJECT_ID in your .mcp.json config. Find your project ID in the PAPI
       appendToolMetric(metric) {
         return this.invoke("appendToolMetric", [metric]);
       }
+      /**
+       * task-2288 (C308): emit a telemetry event via the proxy's /telemetry endpoint
+       * using THIS adapter's per-request bearer (this.apiKey) — the same credential
+       * invoke() uses. This is the fix for the hosted-transport blackout: on the
+       * multi-tenant Railway pod there is no PAPI_DATA_API_KEY env var, so the
+       * env-var emitTelemetryEvent path (lib/telemetry.ts) dropped every event since
+       * 2026-06-16. Fire-and-forget — never throws, never blocks the tool response.
+       * Not routed through invoke() because /telemetry is a distinct endpoint and a
+       * telemetry failure must never surface as a tool error.
+       */
+      emitTelemetry(event) {
+        fetch(`${this.endpoint}/telemetry`, {
+          method: "POST",
+          headers: {
+            "Content-Type": "application/json",
+            "Authorization": `Bearer ${this.apiKey}`
+          },
+          body: JSON.stringify({
+            projectId: event.projectId,
+            toolName: event.toolName,
+            eventType: event.eventType,
+            metadata: event.metadata ?? {}
+          }),
+          signal: AbortSignal.timeout(5e3)
+        }).catch(() => {
+        });
+      }
       readToolMetrics() {
         return this.invoke("readToolMetrics");
       }
@@ -1475,6 +1522,15 @@ Check PAPI_PROJECT_ID in your .mcp.json config. Find your project ID in the PAPI
       submitBugReport(report) {
         return this.invoke("submitBugReport", [report]);
       }
+      // task-2270: notify-back. The data-proxy ignores the client-supplied userId
+      // and scopes to the bearer-validated caller (same pattern as the owner-action
+      // counts), so a user can only ever read/mark their OWN resolved submissions.
+      getUnnotifiedResolvedFeedback(userId) {
+        return this.invoke("getUnnotifiedResolvedFeedback", [userId]);
+      }
+      markFeedbackNotified(ids, userId) {
+        return this.invoke("markFeedbackNotified", [ids, userId]);
+      }
       // --- Doc Registry ---
       registerDoc(entry) {
         return this.invoke("registerDoc", [entry]);

package/dist/index.js

@@ -44,6 +44,7 @@ __export(git_exports, {
   getStagedFiles: () => getStagedFiles,
   getTagTarget: () => getTagTarget,
   getTaskIdsOnBranch: () => getTaskIdsOnBranch,
+  getTrackedModifiedFiles: () => getTrackedModifiedFiles,
   getUnmergedBranches: () => getUnmergedBranches,
   getUntrackedFiles: () => getUntrackedFiles,
   gitPull: () => gitPull,
@@ -176,6 +177,25 @@ function getModifiedFiles(cwd) {
     return [];
   }
 }
+function getTrackedModifiedFiles(cwd) {
+  try {
+    const out = execFileSync("git", ["status", "--porcelain"], {
+      cwd,
+      encoding: "utf-8"
+    }).replace(/\n+$/, "");
+    if (!out) return [];
+    const paths = /* @__PURE__ */ new Set();
+    for (const line of out.split("\n")) {
+      if (line.length < 4) continue;
+      if (line.startsWith("??")) continue;
+      const path7 = line.slice(3).trim();
+      if (path7) paths.add(path7);
+    }
+    return Array.from(paths);
+  } catch {
+    return [];
+  }
+}
 function getUntrackedFiles(cwd) {
   try {
     const out = execFileSync("git", ["ls-files", "--others", "--exclude-standard"], {
@@ -1325,6 +1345,33 @@ Check PAPI_PROJECT_ID in your .mcp.json config. Find your project ID in the PAPI
       appendToolMetric(metric) {
         return this.invoke("appendToolMetric", [metric]);
       }
+      /**
+       * task-2288 (C308): emit a telemetry event via the proxy's /telemetry endpoint
+       * using THIS adapter's per-request bearer (this.apiKey) — the same credential
+       * invoke() uses. This is the fix for the hosted-transport blackout: on the
+       * multi-tenant Railway pod there is no PAPI_DATA_API_KEY env var, so the
+       * env-var emitTelemetryEvent path (lib/telemetry.ts) dropped every event since
+       * 2026-06-16. Fire-and-forget — never throws, never blocks the tool response.
+       * Not routed through invoke() because /telemetry is a distinct endpoint and a
+       * telemetry failure must never surface as a tool error.
+       */
+      emitTelemetry(event) {
+        fetch(`${this.endpoint}/telemetry`, {
+          method: "POST",
+          headers: {
+            "Content-Type": "application/json",
+            "Authorization": `Bearer ${this.apiKey}`
+          },
+          body: JSON.stringify({
+            projectId: event.projectId,
+            toolName: event.toolName,
+            eventType: event.eventType,
+            metadata: event.metadata ?? {}
+          }),
+          signal: AbortSignal.timeout(5e3)
+        }).catch(() => {
+        });
+      }
       readToolMetrics() {
         return this.invoke("readToolMetrics");
       }
@@ -1476,6 +1523,15 @@ Check PAPI_PROJECT_ID in your .mcp.json config. Find your project ID in the PAPI
       submitBugReport(report) {
         return this.invoke("submitBugReport", [report]);
       }
+      // task-2270: notify-back. The data-proxy ignores the client-supplied userId
+      // and scopes to the bearer-validated caller (same pattern as the owner-action
+      // counts), so a user can only ever read/mark their OWN resolved submissions.
+      getUnnotifiedResolvedFeedback(userId) {
+        return this.invoke("getUnnotifiedResolvedFeedback", [userId]);
+      }
+      markFeedbackNotified(ids, userId) {
+        return this.invoke("markFeedbackNotified", [ids, userId]);
+      }
       // --- Doc Registry ---
       registerDoc(entry) {
         return this.invoke("registerDoc", [entry]);
@@ -12583,6 +12639,7 @@ function formatPlanResult(result) {
     );
   }
   const lines = [];
+  if (result.projectBanner) lines.push(`> ${result.projectBanner}`, "");
   lines.push(`${result.strategyReviewWarning}${pullLine}**${modeLabel} Mode \u2014 ${cycleLabel}**`);
   if (result.writeSummary) {
     const ws = result.writeSummary;
@@ -12692,7 +12749,9 @@ async function handlePlan(adapter2, config2, args) {
         source: "mcp-server",
         confirmCancellations: args.confirm_cancellations === true
       }, tracker);
-      const response = formatPlanResult({ ...result, contextUtilisation: utilisation, contextBytes, skipHandoffs });
+      const planProjectInfo = adapter2.getProjectInfo ? await adapter2.getProjectInfo().catch(() => null) : null;
+      const projectBanner = planProjectInfo ? getProjectConnectionBanner(planProjectInfo.name, planProjectInfo.slug) ?? void 0 : void 0;
+      const response = formatPlanResult({ ...result, contextUtilisation: utilisation, contextBytes, skipHandoffs, projectBanner });
       return {
         ...response,
         ...contextBytes !== void 0 ? { _contextBytes: contextBytes } : {},
@@ -16335,6 +16394,9 @@ function substitute(template, vars) {
   }
   return result;
 }
+function shouldWriteClaudeMd(clientName) {
+  return !clientName || /claude/i.test(clientName);
+}
 async function scaffoldPapiDir(adapter2, config2, input, collector) {
   const isPg = config2.adapterType === "pg" || config2.adapterType === "proxy";
   const vars = {
@@ -16400,9 +16462,9 @@ async function scaffoldPapiDir(adapter2, config2, input, collector) {
   if (!docsIndexExists) {
     scaffoldFiles[docsIndexPath] = substitute(DOCS_INDEX_TEMPLATE, vars);
   }
-  if (!claudeMdExists) {
+  if (!claudeMdExists && shouldWriteClaudeMd(input.clientName)) {
     scaffoldFiles[claudeMdPath] = substitute(CLAUDE_MD_STUB, vars);
-  } else {
+  } else if (claudeMdExists) {
     try {
       const existing = await readFile4(claudeMdPath, "utf-8");
       if (!existing.includes("AGENTS.md")) {
@@ -16581,7 +16643,7 @@ async function applySetupOutputs(adapter2, config2, input, collector, briefText,
       }
     }
   }
-  if (conventionsText?.trim()) {
+  if (conventionsText?.trim() && shouldWriteClaudeMd(input.clientName)) {
     const conventionsBlock = `${CONVENTIONS_SENTINEL}
 ${conventionsText.trim()}
 `;
@@ -17004,6 +17066,10 @@ async function applySetup(adapter2, config2, input, briefText, adSeedText, conve
             priority: task.priority || "P2 Medium",
             complexity: task.complexity || "Small",
             module: task.module || "Core",
+            // epic is NOT NULL in cycle_tasks; default starter tasks to the
+            // 'Platform' epic (matches the idea tool) rather than leaving it
+            // unset (SUP-2026-020 — omitting it tripped a 23502 on every seed).
+            epic: task.epic || "Platform",
             phase: task.phase || "Phase 1",
             owner: "TBD",
             reviewed: false,
@@ -17022,7 +17088,7 @@ async function applySetup(adapter2, config2, input, briefText, adSeedText, conve
       }
     }
   }
-  {
+  if (shouldWriteClaudeMd(input.clientName)) {
     const dogfoodSection = [
       "",
       "## Dogfood Logging",
@@ -17256,7 +17322,8 @@ function extractInput(args) {
     codebaseScan: args.codebase_scan && typeof args.codebase_scan === "object" ? args.codebase_scan : void 0
   };
 }
-function formatSuccessResponse(result, constraints) {
+function formatSuccessResponse(result, constraints, writesClaudeMd = true) {
+  const harnessFiles = writesClaudeMd ? "AGENTS.md, CLAUDE.md" : "AGENTS.md";
   const prefix = result.createdProject ? `PAPI project "${result.projectName}" initialised and ` : "";
   const briefRegenNote = result.briefRegenerated ? `
 
@@ -17273,7 +17340,7 @@ ${result.seededAds} Active Decision${result.seededAds > 1 ? "s" : ""} seeded bas
 ${[created, skipped].filter(Boolean).join(", ")}.${idea}`;
   })() : '\n\nNo starter tasks yet. Describe what you want to build, or seed the board with `idea "<what you want to build>"`, so your first `plan` has something to work from.';
   const constraintsHint = !constraints ? '\n\nTip: consider adding `constraints` (e.g. "must use PostgreSQL", "HIPAA compliant", "offline-first") to improve Active Decision seeding.' : "";
-  const editorNote = result.cursorScaffolded ? "\n\nCursor detected \u2014 `.cursor/rules/papi.mdc` scaffolded alongside CLAUDE.md." : "";
+  const editorNote = result.cursorScaffolded ? "\n\nCursor detected \u2014 `.cursor/rules/papi.mdc` scaffolded alongside your `AGENTS.md` harness." : "";
   const gitignoreNote = result.gitignoreNote ? `
 
 \u{1F512} ${result.gitignoreNote}` : "";
@@ -17285,7 +17352,7 @@ ${result.warnings.map((w) => `- ${w}`).join("\n")}` : "";
   return textResponse(
     `${prefix}Product Brief generated and saved.${briefRegenNote}${adNote}${taskNote}${constraintsHint}${editorNote}${gitignoreNote}${warningsNote}
 
-**Important:** Setup created/modified files (CLAUDE.md, .claude/settings.json, docs/). Commit these changes before running \`build_execute\` \u2014 it requires a clean working directory.
+**Important:** Setup created/modified files (${harnessFiles}, .claude/settings.json, docs/). Commit these changes before running \`build_execute\` \u2014 it requires a clean working directory.
 
 Tip: See \`docs/templates/example-project-brief.md\` for an example of a well-written brief.
 
@@ -17294,7 +17361,7 @@ Tip: See \`docs/templates/example-project-brief.md\` for an example of a well-wr
 Next step: run \`plan\` to start your first planning cycle.${filesToWriteSection}`
   );
 }
-async function handleSetup(adapter2, config2, args) {
+async function handleSetup(adapter2, config2, args, clientName) {
   const toolMode = args.mode;
   const REQUIRED_FIELDS = ["project_name"];
   const missing = REQUIRED_FIELDS.filter((f) => !args[f] || typeof args[f] === "string" && !args[f].trim());
@@ -17306,6 +17373,8 @@ PAPI needs the project name. Description and target users are optional \u2014 th
     );
   }
   const input = extractInput(args);
+  input.clientName = clientName;
+  const writesClaudeMd = !clientName || /claude/i.test(clientName);
   const tracker = new ProgressTracker(toolMode === "apply" ? "apply_validate" : "prepare_validate");
   try {
     if (toolMode === "apply") {
@@ -17317,7 +17386,7 @@ PAPI needs the project name. Description and target users are optional \u2014 th
       tracker.mark("apply_setup_writeback");
       const result = await applySetup(adapter2, config2, input, briefResponse, adSeedResponse, conventionsResponse, initialTasksResponse);
       tracker.mark("apply_format_response");
-      return formatSuccessResponse(result, args.constraints);
+      return formatSuccessResponse(result, args.constraints, writesClaudeMd);
     }
     {
       tracker.mark("prepare_setup");
@@ -17918,6 +17987,64 @@ To override, pass force=true (emits a telemetry warning).`
   }
   return { resolvedCycleNum, warnings, force, skipVersion };
 }
+async function contributorAutoPrRelease(config2, adapter2, version, productionBaseBranch, options) {
+  if (!isGhAvailable()) {
+    throw new Error(
+      `Release blocked \u2014 opening a release PR needs the GitHub CLI (\`gh\`) authenticated locally. Install and \`gh auth login\`, then re-run \`release\`. (As a contributor you cannot release to ${productionBaseBranch} directly; the owner merges your PR.)`
+    );
+  }
+  const cycleNum = await resolveCycleToClose(adapter2, version, options?.callerUserId);
+  const branches = listGroupedCycleBranches(config2.projectRoot, cycleNum, productionBaseBranch);
+  if (branches.length === 0) {
+    throw new Error(
+      `Release blocked \u2014 no cycle branch found to open a PR from (cycle ${cycleNum || "?"}). Make sure your work is committed on a \`feat/cycle-\u2026\` branch and pushed, then re-run \`release\`.`
+    );
+  }
+  const prs = [];
+  for (const branch of branches) {
+    const push = gitPush(config2.projectRoot, branch);
+    if (!push.success) {
+      prs.push({ branch, url: null, error: `push failed: ${push.message}` });
+      continue;
+    }
+    const existing = getPullRequestUrl(config2.projectRoot, branch);
+    if (existing) {
+      prs.push({ branch, url: existing });
+      continue;
+    }
+    const title = `Release ${version}: ${branch}`;
+    const body = `Contributor release PR for cycle ${cycleNum || "?"} (\`${branch}\`).
+
+Opened by a non-owner editor via \`release\` (task-2244). The project owner reviews and merges this into \`${productionBaseBranch}\`; the contributor's own cycle is already marked complete in PAPI.`;
+    const created = createPullRequest(config2.projectRoot, branch, productionBaseBranch, title, body);
+    prs.push(
+      created.success ? { branch, url: created.message.trim() || getPullRequestUrl(config2.projectRoot, branch) } : { branch, url: null, error: created.message }
+    );
+  }
+  if (!prs.some((p) => p.url)) {
+    const detail = prs.map((p) => `${p.branch}: ${p.error ?? "no PR url returned"}`).join("; ");
+    throw new Error(`Release blocked \u2014 could not open any release PR. ${detail}`);
+  }
+  if (adapter2?.recordContributorReleasePr) {
+    for (const p of prs) {
+      if (!p.url) continue;
+      try {
+        await adapter2.recordContributorReleasePr({
+          prUrl: p.url,
+          branch: p.branch,
+          cycle: cycleNum > 0 ? cycleNum : null,
+          contributorUserId: options?.callerUserId ?? null
+        });
+      } catch (err) {
+        console.error(
+          `[release] recordContributorReleasePr failed for ${p.url} (non-blocking): ${err instanceof Error ? err.message : String(err)}`
+        );
+      }
+    }
+  }
+  const closed = await closeCycleState(config2, adapter2, version, void 0, options);
+  return { prs, cycleClosed: closed.resolvedCycleNum, warnings: closed.warnings };
+}
 async function createRelease(config2, branch, version, adapter2, cycleNum, options) {
   const collector = new FileWriteCollector();
   if (!isGitAvailable()) {
@@ -18292,11 +18419,50 @@ async function handleRelease(adapter2, config2, args) {
         const resolutionNote = gate.resolutionError ? `
 
 Identity resolution failed (${gate.resolutionError}) \u2014 the gate fails closed. Retry once connectivity is restored.` : "";
-        return errorResponse(
-          `Release to ${productionBaseBranch} is restricted to the project owner.
+        tracker.mark("contributor-role-gate");
+        const callerRole = adapter2.getContributorRole && gate.callerUserId ? await adapter2.getContributorRole(gate.callerUserId).catch(() => null) : null;
+        if (callerRole !== "editor") {
+          const roleNote = callerRole === "viewer" ? `Your role on this project is "viewer", which cannot release. Ask the owner (or an editor) to release, or ask for editor access.` : `Your identity does not match this project's owner, and you do not have an editor role to open a release PR. If you are a contributor, ask the owner for editor access (or push your branch and open a PR manually). If you ARE the owner on a local (pg) setup, set PAPI_USER_ID to your account UUID in .mcp.json; on the hosted/proxy setup your identity comes from your API key \u2014 check you are using YOUR key for YOUR project.`;
+          return errorResponse(
+            `Release to ${productionBaseBranch} is restricted to the project owner.
 
-Your identity does not match this project's owner. If you are a contributor, push your branch and open a PR for the owner to release. If you ARE the owner on a local (pg) setup, set PAPI_USER_ID to your account UUID in .mcp.json; on the hosted/proxy setup your identity comes from your API key \u2014 check you are using YOUR key for YOUR project. Releasing to a non-base branch (e.g. dev) is unaffected.` + resolutionNote
-        );
+` + roleNote + `
+
+Releasing to a non-base branch (e.g. dev) is unaffected.` + resolutionNote
+          );
+        }
+        tracker.mark("contributor-auto-pr");
+        try {
+          const cr = await contributorAutoPrRelease(config2, adapter2, version, productionBaseBranch, {
+            force: force ?? false,
+            callerUserId: gate.callerUserId
+          });
+          const opened = cr.prs.filter((p) => p.url);
+          const failed = cr.prs.filter((p) => !p.url);
+          const cyclePart = cr.cycleClosed > 0 ? `Cycle ${cr.cycleClosed}` : "Your cycle";
+          const prLines = opened.map((p) => `- \`${p.branch}\` \u2192 ${p.url}`);
+          const failLines = failed.map((p) => `- \`${p.branch}\` \u2014 \u26A0\uFE0F ${p.error ?? "no PR opened"}`);
+          const warnBlock = cr.warnings.length > 0 ? `
+\u26A0\uFE0F Warnings: ${cr.warnings.join("; ")}
+` : "";
+          return textResponse(
+            `## Release ${version} \u2014 PR opened for owner review
+
+You released as an **editor**, so PAPI opened a pull request to \`${productionBaseBranch}\` instead of merging directly. The owner reviews and merges it.
+
+**Pull request(s):**
+${prLines.join("\n")}
+` + (failLines.length > 0 ? `
+**Could not open:**
+${failLines.join("\n")}
+` : "") + warnBlock + `
+${cyclePart} is now marked **complete** in PAPI \u2014 your work is shipped from your side. Any changes the owner requests come forward as a fast-follow in your next cycle; your closed cycle is not rewound.
+
+Next: run \`plan\` to start your next cycle.`
+          );
+        } catch (err) {
+          return errorResponse(err instanceof Error ? err.message : String(err));
+        }
       }
     }
     if (isHostedTransport()) {
@@ -18994,6 +19160,18 @@ async function startBuild(adapter2, config2, taskId, options = {}) {
         branchLines.push(`Reusing shared cycle branch for ${task.complexity} ${task.module} task.`);
       }
     } else {
+      const baseBranch = resolveBaseBranch(config2.projectRoot, config2.baseBranch);
+      if (baseBranch !== config2.baseBranch) {
+        branchLines.push(`Base branch '${config2.baseBranch}' not found \u2014 using '${baseBranch}'.`);
+      }
+      const trackedDirty = getTrackedModifiedFiles(config2.projectRoot);
+      if (trackedDirty.length > 0 && currentBranch !== baseBranch) {
+        const shown = trackedDirty.slice(0, 5).join(", ");
+        const more = trackedDirty.length > 5 ? ` (+${trackedDirty.length - 5} more)` : "";
+        throw new Error(
+          `build_execute won't switch branches: the working tree has uncommitted changes on '${currentBranch}' (this task targets '${featureBranch}'). Another session may be working there, and switching would revert those files. Commit or stash them first, or run build_execute from '${baseBranch}'. Dirty: ${shown}${more}.`
+        );
+      }
       if (hasUncommittedChanges(config2.projectRoot, AUTO_WRITTEN_PATHS)) {
         const { toStash, preservedDocs } = selectAutostashPaths(
           getModifiedFiles(config2.projectRoot),
@@ -19022,10 +19200,6 @@ async function startBuild(adapter2, config2, taskId, options = {}) {
           }
         }
       }
-      const baseBranch = resolveBaseBranch(config2.projectRoot, config2.baseBranch);
-      if (baseBranch !== config2.baseBranch) {
-        branchLines.push(`Base branch '${config2.baseBranch}' not found \u2014 using '${baseBranch}'.`);
-      }
       const featureBranchExistsLocally = branchExists(config2.projectRoot, featureBranch);
       const featureBranchOnOrigin = !!originCycleBranch && originCycleBranch === featureBranch;
       const featureBranchExists = featureBranchExistsLocally || featureBranchOnOrigin;
@@ -19987,7 +20161,12 @@ async function handleBuildExecute(adapter2, config2, args) {
     tracker.mark("start_decorate_handoff");
     const branchInfo = result.branchLines.length > 0 ? result.branchLines.map((l) => `> ${l}`).join("\n") + "\n\n" : "";
     const phaseNote = result.phaseChanges.length > 0 ? "\n\n" + result.phaseChanges.map((c) => `Phase auto-updated: ${c.phaseId} ${c.oldStatus} \u2192 ${c.newStatus}`).join("\n") : "";
-    const header = `${branchInfo}**Executing ${result.task.id}: ${result.task.title}** \u2014 marked In Progress.
+    const projectInfo = adapter2.getProjectInfo ? await adapter2.getProjectInfo().catch(() => null) : null;
+    const projectBanner = projectInfo ? getProjectConnectionBanner(projectInfo.name, projectInfo.slug) : null;
+    const projectLine = projectBanner ? `> ${projectBanner}
+
+` : "";
+    const header = `${projectLine}${branchInfo}**Executing ${result.task.id}: ${result.task.title}** \u2014 marked In Progress.
 
 ---
 
@@ -23915,7 +24094,7 @@ function formatOrientSummary(health, buildInfo, hierarchy, latestTag, projectRoo
   const isGitDependentRec = /\*\*(Build|Review)\*\*/.test(health.recommendedMode);
   if (GIT_DEPENDENT_ENVS.has(environment) && isGitDependentRec) {
     lines.push(`> **Next action:** ${health.recommendedMode}`);
-    lines.push(`> _Note: \`build_execute\`, \`review_submit\`, and \`release\` require a local Claude Code session with git access. From \`${environment}\` you can view state, log ideas, and edit the board \u2014 but the build/review/release loop must run through Claude Code._`);
+    lines.push(`> _Note: \`build_execute\`, \`review_submit\`, and \`release\` require a local session in your AI coding tool with git access. From \`${environment}\` you can view state, log ideas, and edit the board \u2014 but the build/review/release loop must run through your local tool._`);
   } else {
     lines.push(`> **Next action:** ${health.recommendedMode}`);
   }
@@ -24201,6 +24380,22 @@ async function computeReleaseHistory(adapter2) {
   if (released.length === 0) return void 0;
   return `**Recent releases:** ${released.join(" \xB7 ")}`;
 }
+function formatResolvedFeedback(items) {
+  if (items.length === 0) return "";
+  const MAX = 5;
+  const shown = items.slice(0, MAX);
+  const lines = ["\n\n## \u2705 Your feedback shipped"];
+  for (const it of shown) {
+    const kind = it.type === "idea" ? "Idea" : "Bug";
+    const verb = it.status === "wont_fix" ? "closed" : "resolved";
+    const desc = it.description.length > 90 ? `${it.description.slice(0, 87)}\u2026` : it.description;
+    const note = it.resolutionNote?.trim() ? ` \u2014 ${it.resolutionNote.trim()}` : "";
+    lines.push(`- **${kind}** "${desc}" was ${verb}${note}`);
+  }
+  if (items.length > MAX) lines.push(`- \u2026and ${items.length - MAX} more`);
+  lines.push("_Thanks for the signal \u2014 it shaped what shipped._");
+  return lines.join("\n");
+}
 async function handleOrient(adapter2, config2, args = {}) {
   const environment = normaliseEnvironment(args.environment);
   const deepHousekeeping = args.deep_housekeeping === true;
@@ -24245,6 +24440,7 @@ async function handleOrient(adapter2, config2, args = {}) {
       backlogHandoffCount: allTasks.filter((t) => t.cycle !== currentCycle).length
     };
     const sharedActiveDecisionsPromise = adapter2.getActiveDecisions();
+    const resolvedFeedbackPromise = adapter2.getUnnotifiedResolvedFeedback ? adapter2.getUnnotifiedResolvedFeedback(config2.userId).catch(() => []) : Promise.resolve([]);
     const [
       proxyVersionOutcome,
       p1BacklogOutcome,
@@ -24623,6 +24819,12 @@ ${versionDrift}` : "";
     const projectName = projectBannerResult.name;
     const sessionGuidanceNote = sessionGuidanceOutcome.status === "fulfilled" ? sessionGuidanceOutcome.value : "";
     const deliveryShapeNote = deliveryShapeOutcome.status === "fulfilled" ? deliveryShapeOutcome.value : "";
+    const resolvedFeedback = await resolvedFeedbackPromise;
+    const feedbackResolvedNote = formatResolvedFeedback(resolvedFeedback);
+    if (resolvedFeedback.length > 0 && adapter2.markFeedbackNotified) {
+      void adapter2.markFeedbackNotified(resolvedFeedback.map((f) => f.id), config2.userId).catch(() => {
+      });
+    }
     const { reconciliationNote, unrecordedNote, unregisteredDocsNote, staleSkillsNote } = deepHousekeepingOutcome.status === "fulfilled" ? deepHousekeepingOutcome.value : { reconciliationNote: "", unrecordedNote: "", unregisteredDocsNote: "", staleSkillsNote: "" };
     let enrichmentNote = "";
     const enrichmentCollector = new FileWriteCollector();
@@ -24671,7 +24873,7 @@ ${section}`;
     ]);
     const teamSummary = [teamSummaryLine, releaseHistoryLine].filter(Boolean).join("\n") || void 0;
     const deepHint = deepHousekeeping ? "" : "\n\n*Tip: pass `full: true` for Research Signals + version-drift, or `deep_housekeeping: true` to also check orphaned branches, unrecorded commits, unregistered docs, and stale skill forks (implies `full`).*";
-    return textResponse(projectBannerNote + formatOrientSummary(healthResult, buildInfo, hierarchy, latestTag, config2.projectRoot, environment, subAgents, projectName, teamSummary) + unblockNote + alertsNote + ttfvNote + reconciliationNote + unrecordedNote + unregisteredDocsNote + staleSkillsNote + researchSignalsNote + recsNote + pendingReviewNote + patternsNote + unactionedIssuesNote + skillProposalsNote + sessionGuidanceNote + versionNote + enrichmentNote + deliveryShapeNote + preBuildCheckNote + deepHint + enrichmentFilesSection);
+    return textResponse(projectBannerNote + formatOrientSummary(healthResult, buildInfo, hierarchy, latestTag, config2.projectRoot, environment, subAgents, projectName, teamSummary) + unblockNote + feedbackResolvedNote + alertsNote + ttfvNote + reconciliationNote + unrecordedNote + unregisteredDocsNote + staleSkillsNote + researchSignalsNote + recsNote + pendingReviewNote + patternsNote + unactionedIssuesNote + skillProposalsNote + sessionGuidanceNote + versionNote + enrichmentNote + deliveryShapeNote + preBuildCheckNote + deepHint + enrichmentFilesSection);
   } catch (err) {
     const message = err instanceof Error ? err.message : String(err);
     const isKnownFriendly = /^(Orient failed|Project not found|No project|Setup required)/i.test(message);
@@ -26713,7 +26915,7 @@ function createServer(adapter2, config2) {
         case "board_edit":
           return handleBoardEdit(adapter2, safeArgs);
         case "setup":
-          return handleSetup(adapter2, config2, safeArgs);
+          return handleSetup(adapter2, config2, safeArgs, server2.getClientVersion()?.name);
         case "build_list":
           return handleBuildList(adapter2, config2);
         case "build_describe":
@@ -26853,17 +27055,28 @@ ${usageLine(decision.usage)}`;
     }
     const telemetryProjectId = resolveTelemetryProjectId(config2);
     if (telemetryProjectId) {
-      emitToolCall(telemetryProjectId, name, elapsed, {
-        adapter_type: config2.adapterType
-      });
+      const adapterEmit = adapter2.emitTelemetry?.bind(adapter2) ?? null;
+      if (adapterEmit) {
+        adapterEmit({
+          projectId: telemetryProjectId,
+          toolName: name,
+          eventType: "tool_call",
+          metadata: { duration_ms: elapsed, adapter_type: config2.adapterType }
+        });
+      } else {
+        emitToolCall(telemetryProjectId, name, elapsed, {
+          adapter_type: config2.adapterType
+        });
+      }
       const isApplyMode = safeArgs.mode === "apply";
       if (!isError) {
-        if (name === "setup" && isApplyMode) {
-          emitMilestone(telemetryProjectId, "setup_completed");
-        } else if (name === "plan" && isApplyMode) {
-          emitMilestone(telemetryProjectId, "plan_completed");
-        } else if (name === "release") {
-          emitMilestone(telemetryProjectId, "release_completed");
+        const milestone = name === "setup" && isApplyMode ? "setup_completed" : name === "plan" && isApplyMode ? "plan_completed" : name === "release" ? "release_completed" : null;
+        if (milestone) {
+          if (adapterEmit) {
+            adapterEmit({ projectId: telemetryProjectId, toolName: milestone, eventType: "milestone" });
+          } else {
+            emitMilestone(telemetryProjectId, milestone);
+          }
         }
       }
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@papi-ai/server",
-  "version": "0.7.37",
+  "version": "0.7.40",
   "description": "PAPI MCP server — AI-powered sprint planning, build execution, and strategy review for software projects",
   "license": "Elastic-2.0",
   "mcpName": "io.github.cathalos92/papi",