@papi-ai/server 0.7.43 → 0.7.44

package/dist/backfill-cycle-metrics.js

@@ -1060,7 +1060,9 @@ var init_telemetry = __esm({
 // src/proxy-adapter.ts
 var proxy_adapter_exports = {};
 __export(proxy_adapter_exports, {
-  ProxyPapiAdapter: () => ProxyPapiAdapter
+  ProxyPapiAdapter: () => ProxyPapiAdapter,
+  createProxyAdapter: () => createProxyAdapter,
+  wrapWithForwarding: () => wrapWithForwarding
 });
 function snakeToCamel(str) {
   return str.replace(/_([a-z0-9])/g, (_, c) => c.toUpperCase());
@@ -1099,7 +1101,22 @@ function fixDisplayIdEntities(data) {
   if (data && typeof data === "object") return fixDisplayIdEntity(data);
   return data;
 }
-var JSONB_PASSTHROUGH_KEYS, DISPLAY_ID_METHODS, ProxyPapiAdapter;
+function wrapWithForwarding(instance) {
+  return new Proxy(instance, {
+    get(target, prop, receiver) {
+      const existing = Reflect.get(target, prop, receiver);
+      if (existing !== void 0) return existing;
+      if (typeof prop !== "string" || prop === "then" || prop.startsWith("_") || NO_FORWARD.has(prop)) {
+        return existing;
+      }
+      return (...args) => target.forward(prop, args);
+    }
+  });
+}
+function createProxyAdapter(config) {
+  return wrapWithForwarding(new ProxyPapiAdapter(config));
+}
+var JSONB_PASSTHROUGH_KEYS, DISPLAY_ID_METHODS, NO_FORWARD, ProxyPapiAdapter;
 var init_proxy_adapter = __esm({
   "src/proxy-adapter.ts"() {
     "use strict";
@@ -1123,6 +1140,30 @@ var init_proxy_adapter = __esm({
       "getRecentReviews",
       "getActiveDecisions"
     ]);
+    NO_FORWARD = /* @__PURE__ */ new Set([
+      // (1) local-only
+      "close",
+      "initRls",
+      // (2) not-yet-wired hosted gaps — shrink as data-proxy handlers land (task-2390).
+      // getToolCallCount + updatePhaseStatus are ABSENT: they now have edge handlers and
+      // are served through the forwarder (getToolCallCount = SUP-2026-026 handler #1).
+      "createOwnerAction",
+      "findPendingDocActionsForTask",
+      "getContributorRole",
+      "getDecisionScorePatterns",
+      "getModuleEstimationStats",
+      "correctLatestBuildReportEffort",
+      "recordContributorReleasePr",
+      "setContributorReleasePrStatus",
+      "listContributorReleasePrs",
+      "resolveLearningsForDoneTasks",
+      "markCycleLearningResolved",
+      "updateStageExitCriteria",
+      "updateDocAction",
+      "claimReview",
+      "getSiblingAds",
+      "getSiblingRepoTasks"
+    ]);
     ProxyPapiAdapter = class _ProxyPapiAdapter {
       endpoint;
       apiKey;
@@ -1144,11 +1185,11 @@ var init_proxy_adapter = __esm({
        * data-proxy's validateProjectAccess re-checks server-side regardless.
        */
       withProject(projectId) {
-        return new _ProxyPapiAdapter({
+        return wrapWithForwarding(new _ProxyPapiAdapter({
           endpoint: this.endpoint,
           apiKey: this.apiKey,
           projectId
-        });
+        }));
       }
       /**
        * Ensure the authenticated user has a project. If none exists, auto-creates one.
@@ -1260,6 +1301,17 @@ Check PAPI_PROJECT_ID in your .mcp.json config. Find your project ID in the PAPI
         }
         return result;
       }
+      /**
+       * Generic forward for the allowlist-driven proxy trap (SUP-2026-026). Any
+       * PapiAdapter method with no explicit wrapper here — and not in NO_FORWARD — is
+       * served through this single path, so a NEW adapter method needs only a data-proxy
+       * case handler, never a hand-written wrapper. Routes through invoke() so the
+       * transformKeys / DISPLAY_ID fixups apply identically to wrapped methods. This is
+       * the structural cure for the pg→proxy drift that caused SUP-2026-026.
+       */
+      forward(method, args) {
+        return this.invoke(method, args);
+      }
       /** Check if the proxy is reachable. */
       async probeConnection() {
         try {
@@ -4346,7 +4398,7 @@ async function createAdapter(optionsOrType, maybePapiDir) {
       return adapter;
     }
     case "proxy": {
-      const { ProxyPapiAdapter: ProxyPapiAdapter2 } = await Promise.resolve().then(() => (init_proxy_adapter(), proxy_adapter_exports));
+      const { ProxyPapiAdapter: ProxyPapiAdapter2, wrapWithForwarding: wrapWithForwarding2 } = await Promise.resolve().then(() => (init_proxy_adapter(), proxy_adapter_exports));
       const dashboardUrl = process.env["PAPI_DASHBOARD_URL"] || "https://getpapi.ai";
       const projectId = process.env["PAPI_PROJECT_ID"];
       const dataApiKey = process.env["PAPI_DATA_API_KEY"];
@@ -4449,7 +4501,7 @@ Check PAPI_PROJECT_ID in your .mcp.json config. Find your project ID in the PAPI
           console.error("[papi] Set PAPI_PROJECT_ID in .mcp.json to connect to an existing project.");
         }
       }
-      return adapter;
+      return wrapWithForwarding2(adapter);
     }
     default: {
       const _exhaustive = adapterType;

package/dist/index.js

@@ -1177,7 +1177,9 @@ var init_telemetry = __esm({
 // src/proxy-adapter.ts
 var proxy_adapter_exports = {};
 __export(proxy_adapter_exports, {
-  ProxyPapiAdapter: () => ProxyPapiAdapter
+  ProxyPapiAdapter: () => ProxyPapiAdapter,
+  createProxyAdapter: () => createProxyAdapter,
+  wrapWithForwarding: () => wrapWithForwarding
 });
 function snakeToCamel(str) {
   return str.replace(/_([a-z0-9])/g, (_, c) => c.toUpperCase());
@@ -1216,7 +1218,22 @@ function fixDisplayIdEntities(data) {
   if (data && typeof data === "object") return fixDisplayIdEntity(data);
   return data;
 }
-var JSONB_PASSTHROUGH_KEYS, DISPLAY_ID_METHODS, ProxyPapiAdapter;
+function wrapWithForwarding(instance) {
+  return new Proxy(instance, {
+    get(target, prop, receiver) {
+      const existing = Reflect.get(target, prop, receiver);
+      if (existing !== void 0) return existing;
+      if (typeof prop !== "string" || prop === "then" || prop.startsWith("_") || NO_FORWARD.has(prop)) {
+        return existing;
+      }
+      return (...args) => target.forward(prop, args);
+    }
+  });
+}
+function createProxyAdapter(config2) {
+  return wrapWithForwarding(new ProxyPapiAdapter(config2));
+}
+var JSONB_PASSTHROUGH_KEYS, DISPLAY_ID_METHODS, NO_FORWARD, ProxyPapiAdapter;
 var init_proxy_adapter = __esm({
   "src/proxy-adapter.ts"() {
     "use strict";
@@ -1240,6 +1257,30 @@ var init_proxy_adapter = __esm({
       "getRecentReviews",
       "getActiveDecisions"
     ]);
+    NO_FORWARD = /* @__PURE__ */ new Set([
+      // (1) local-only
+      "close",
+      "initRls",
+      // (2) not-yet-wired hosted gaps — shrink as data-proxy handlers land (task-2390).
+      // getToolCallCount + updatePhaseStatus are ABSENT: they now have edge handlers and
+      // are served through the forwarder (getToolCallCount = SUP-2026-026 handler #1).
+      "createOwnerAction",
+      "findPendingDocActionsForTask",
+      "getContributorRole",
+      "getDecisionScorePatterns",
+      "getModuleEstimationStats",
+      "correctLatestBuildReportEffort",
+      "recordContributorReleasePr",
+      "setContributorReleasePrStatus",
+      "listContributorReleasePrs",
+      "resolveLearningsForDoneTasks",
+      "markCycleLearningResolved",
+      "updateStageExitCriteria",
+      "updateDocAction",
+      "claimReview",
+      "getSiblingAds",
+      "getSiblingRepoTasks"
+    ]);
     ProxyPapiAdapter = class _ProxyPapiAdapter {
       endpoint;
       apiKey;
@@ -1261,11 +1302,11 @@ var init_proxy_adapter = __esm({
        * data-proxy's validateProjectAccess re-checks server-side regardless.
        */
       withProject(projectId) {
-        return new _ProxyPapiAdapter({
+        return wrapWithForwarding(new _ProxyPapiAdapter({
           endpoint: this.endpoint,
           apiKey: this.apiKey,
           projectId
-        });
+        }));
       }
       /**
        * Ensure the authenticated user has a project. If none exists, auto-creates one.
@@ -1377,6 +1418,17 @@ Check PAPI_PROJECT_ID in your .mcp.json config. Find your project ID in the PAPI
         }
         return result;
       }
+      /**
+       * Generic forward for the allowlist-driven proxy trap (SUP-2026-026). Any
+       * PapiAdapter method with no explicit wrapper here — and not in NO_FORWARD — is
+       * served through this single path, so a NEW adapter method needs only a data-proxy
+       * case handler, never a hand-written wrapper. Routes through invoke() so the
+       * transformKeys / DISPLAY_ID fixups apply identically to wrapped methods. This is
+       * the structural cure for the pg→proxy drift that caused SUP-2026-026.
+       */
+      forward(method, args) {
+        return this.invoke(method, args);
+      }
       /** Check if the proxy is reachable. */
       async probeConnection() {
         try {
@@ -7841,7 +7893,7 @@ async function createAdapter(optionsOrType, maybePapiDir) {
       return adapter2;
     }
     case "proxy": {
-      const { ProxyPapiAdapter: ProxyPapiAdapter2 } = await Promise.resolve().then(() => (init_proxy_adapter(), proxy_adapter_exports));
+      const { ProxyPapiAdapter: ProxyPapiAdapter2, wrapWithForwarding: wrapWithForwarding2 } = await Promise.resolve().then(() => (init_proxy_adapter(), proxy_adapter_exports));
       const dashboardUrl = process.env["PAPI_DASHBOARD_URL"] || "https://getpapi.ai";
       const projectId = process.env["PAPI_PROJECT_ID"];
       const dataApiKey = process.env["PAPI_DATA_API_KEY"];
@@ -7944,7 +7996,7 @@ Check PAPI_PROJECT_ID in your .mcp.json config. Find your project ID in the PAPI
           console.error("[papi] Set PAPI_PROJECT_ID in .mcp.json to connect to an existing project.");
         }
       }
-      return adapter2;
+      return wrapWithForwarding2(adapter2);
     }
     default: {
       const _exhaustive = adapterType;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@papi-ai/server",
-  "version": "0.7.43",
+  "version": "0.7.44",
   "description": "PAPI MCP server — AI-powered sprint planning, build execution, and strategy review for software projects",
   "license": "Elastic-2.0",
   "mcpName": "io.github.cathalos92/papi",