@papi-ai/server 0.7.47 → 0.7.48

package/dist/index.js

@@ -8714,7 +8714,7 @@ REFERENCE DOCS
 [Optional \u2014 paths to docs/ files that provide background context for this task. Include only when the task originated from research or scoping work and the doc contains context the builder will need beyond what is in this handoff. Omit this section entirely for tasks that don't need supplementary context.]
 
 PRE-BUILD VERIFICATION
-[List 2-5 specific file paths the builder should read BEFORE implementing to check if the functionality already exists. Derive these from FILES LIKELY TOUCHED \u2014 pick the files most likely to already contain the target functionality. If >80% of the scope is already implemented, the builder should report "already built" instead of re-implementing. Include this section for EVERY task \u2014 it prevents wasted build slots on already-shipped code.]
+[List 2-5 specific file paths the builder should read BEFORE implementing to check if the functionality already exists. Derive these from FILES LIKELY TOUCHED \u2014 pick the files most likely to already contain the target functionality. ALSO mandate a docs sweep, not just file-existence (task-2161): name any docs the builder should check via doc_search or the docs index \u2014 a design/research/status:final doc or a prior task may already cover the work. If >80% of the scope is already implemented, the builder should report "already built" instead of re-implementing. Include this section for EVERY task \u2014 it prevents wasted build slots on already-shipped code.]
 
 FILES LIKELY TOUCHED
 [files]
@@ -10805,7 +10805,8 @@ async function resolveOwnerGate(adapter2, config2) {
         enforced: true,
         callerIsOwner: isProjectOwner(callerUserId, identity.ownerUserId),
         callerUserId,
-        ownerUserId: identity.ownerUserId
+        ownerUserId: identity.ownerUserId,
+        transport: "proxy"
       };
     } catch (err) {
       return {
@@ -10813,7 +10814,8 @@ async function resolveOwnerGate(adapter2, config2) {
         callerIsOwner: false,
         callerUserId: config2.userId ?? null,
         ownerUserId: null,
-        resolutionError: err instanceof Error ? err.message : String(err)
+        resolutionError: err instanceof Error ? err.message : String(err),
+        transport: "proxy"
       };
     }
   }
@@ -10831,14 +10833,16 @@ async function resolveOwnerGate(adapter2, config2) {
       callerIsOwner: isProjectOwner(callerUserId, ownerUserId),
       callerUserId,
       ownerUserId,
-      ...resolutionError !== void 0 ? { resolutionError } : {}
+      ...resolutionError !== void 0 ? { resolutionError } : {},
+      transport: "pg"
     };
   }
   return {
     enforced: false,
     callerIsOwner: true,
     callerUserId: config2.userId ?? null,
-    ownerUserId: null
+    ownerUserId: null,
+    transport: "md"
   };
 }
 
@@ -19414,10 +19418,22 @@ async function handleRelease(adapter2, config2, args) {
         const resolutionNote = gate.resolutionError ? `
 
 Identity resolution failed (${gate.resolutionError}) \u2014 the gate fails closed. Retry once connectivity is restored.` : "";
+        if (gate.transport === "pg" && gate.callerUserId === null) {
+          return errorResponse(
+            `Release needs to know who you are, and this setup has no PAPI_USER_ID yet.
+
+Add it to the papi server's env block in .mcp.json \u2014 the value is your account UUID (getpapi.ai \u2192 Settings \u2192 Account):
+
+  "env": { "PAPI_USER_ID": "<your-account-uuid>", ... }
+
+Then reconnect your AI tool and run release again. (Direct/pg setups read identity from this variable; hosted setups resolve it from the API key automatically.)`
+          );
+        }
         tracker.mark("contributor-role-gate");
         const callerRole = adapter2.getContributorRole && gate.callerUserId ? await adapter2.getContributorRole(gate.callerUserId).catch(() => null) : null;
         if (callerRole !== "editor") {
-          const roleNote = callerRole === "viewer" ? `Your role on this project is "viewer", which cannot release. Ask the owner (or an editor) to release, or ask for editor access.` : `Your identity does not match this project's owner, and you do not have an editor role to open a release PR. If you are a contributor, ask the owner for editor access (or push your branch and open a PR manually). If you ARE the owner on a local (pg) setup, set PAPI_USER_ID to your account UUID in .mcp.json; on the hosted/proxy setup your identity comes from your API key \u2014 check you are using YOUR key for YOUR project.`;
+          const ownerHint = gate.transport === "pg" ? `If you ARE the owner, set PAPI_USER_ID to your account UUID in .mcp.json (getpapi.ai \u2192 Settings \u2192 Account).` : `If you ARE the owner, your identity comes from your API key \u2014 check you are using YOUR key for YOUR project.`;
+          const roleNote = callerRole === "viewer" ? `Your role on this project is "viewer", which cannot release. Ask the owner (or an editor) to release, or ask for editor access.` : `Your identity does not match this project's owner, and you do not have an editor role to open a release PR. If you are a contributor, ask the owner for editor access (or push your branch and open a PR manually). ` + ownerHint;
           return errorResponse(
             `Release to ${productionBaseBranch} is restricted to the project owner.
 
@@ -19794,7 +19810,10 @@ function triggerSurfaceHitsOnBranch(projectRoot, baseRef = "origin/main") {
 function selectAutostashPaths(modified, untracked) {
   const untrackedSet = new Set(untracked);
   const isDocsPath = (p) => p === "docs" || p.startsWith("docs/");
-  const trackedDirty = modified.filter((p) => !untrackedSet.has(p));
+  const isUntrackedDirEntry = (p) => p.endsWith("/") && untracked.some((u) => u.startsWith(p));
+  const trackedDirty = modified.filter(
+    (p) => !untrackedSet.has(p) && !isUntrackedDirEntry(p)
+  );
   const preservedDocs = untracked.filter(isDocsPath);
   const stashableUntracked = untracked.filter((p) => !isDocsPath(p));
   return { toStash: [...trackedDirty, ...stashableUntracked], preservedDocs };
@@ -20114,6 +20133,17 @@ async function describeTask(adapter2, taskId) {
 function shouldBlockDirtyBranchSwitch(opts) {
   return opts.trackedDirtyCount > 0 && opts.currentBranch !== opts.baseBranch && opts.currentBranch !== opts.featureBranch;
 }
+async function persistBranchName(adapter2, taskId, branch) {
+  try {
+    await adapter2.updateTask(taskId, { branchName: branch });
+    return true;
+  } catch (err) {
+    console.error(
+      `[build] branch_name persist skipped for ${taskId} (non-fatal): ` + (err instanceof Error ? err.message : String(err))
+    );
+    return false;
+  }
+}
 async function startBuild(adapter2, config2, taskId, options = {}, clientName) {
   const task = await adapter2.getTask(taskId);
   if (!task) {
@@ -20330,6 +20360,10 @@ async function startBuild(adapter2, config2, taskId, options = {}, clientName) {
   if (task.status !== "In Progress") {
     await adapter2.updateTaskStatus(taskId, "In Progress");
   }
+  const startedBranch = taskBranchMap.get(taskId);
+  if (startedBranch) {
+    await persistBranchName(adapter2, taskId, startedBranch);
+  }
   buildStartTimes.set(taskId, (/* @__PURE__ */ new Date()).toISOString());
   if (isGitAvailable() && isGitRepo(config2.projectRoot)) {
     const startSha = getHeadCommitSha(config2.projectRoot);
@@ -21438,7 +21472,7 @@ var buildExecuteTool = {
       },
       dead_ends: {
         type: "string",
-        description: `Approaches tried and rejected during the build, with WHY they failed. Example: "Tried using Supabase realtime subscriptions but Edge Functions can't hold persistent connections \u2014 switched to polling." Include whenever you abandoned an approach. Future builds and plans reference this to avoid repeating blind alleys.`
+        description: `CONTRACT: send this on every complete. List approaches you tried and RULED OUT during this build, with why each failed. Example: "Tried Supabase realtime but Edge Functions can't hold persistent connections \u2014 switched to polling." Send "None" ONLY if you genuinely tried nothing that failed. Ruled-out paths are first-class intelligence \u2014 future builds and plans read them to avoid repeating blind alleys.`
       },
       brief_implications: {
         type: "array",
@@ -21683,7 +21717,8 @@ async function handleBuildExecute(adapter2, config2, args, clientName) {
 **PRE-BUILD VERIFICATION:** Before writing any code, read these files and check if the functionality already exists:
 ${verificationFiles.map((f) => `- ${f}`).join("\n")}
 If >80% of the scope is already implemented, call \`build_execute\` with completed="yes" and note "already built" in surprises instead of re-implementing.` : "";
-    const chainInstruction = '\n\n---\n\n**IMPORTANT:** After implementing this task, immediately call `build_execute` again with report fields (`completed`, `effort`, `estimated_effort`, `surprises`, `discovered_issues`, `architecture_notes`) to complete the build. Do not wait for user confirmation.\n\n**Build Report Quality Bar:**\n- **surprises**: What was DIFFERENT from expected \u2014 wrong assumptions, scope changes, missing infrastructure. NOT implementation mechanics ("used X library").\n- **discovered_issues**: Bugs/gaps OUTSIDE this task\'s scope, with severity (P0-P3). NOT "had to install a dependency".\n- **architecture_notes**: Patterns/decisions that AFFECT FUTURE WORK. NOT "used React hooks".\n- If nothing meaningful to report for a field, use "None" \u2014 empty signal is better than noise.';
+    const chainInstruction = '\n\n---\n\n**IMPORTANT:** After implementing this task, immediately call `build_execute` again with report fields (`completed`, `effort`, `estimated_effort`, `surprises`, `discovered_issues`, `architecture_notes`) to complete the build. Do not wait for user confirmation.\n\n**Build Report Quality Bar:**\n- **surprises**: What was DIFFERENT from expected \u2014 wrong assumptions, scope changes, missing infrastructure. NOT implementation mechanics ("used X library").\n- **discovered_issues**: Bugs/gaps OUTSIDE this task\'s scope, with severity (P0-P3). NOT "had to install a dependency".\n- **architecture_notes**: Patterns/decisions that AFFECT FUTURE WORK. NOT "used React hooks".\n- If nothing meaningful to report for a field, use "None" \u2014 empty signal is better than noise.\n- **dead_ends**: approaches you tried and RULED OUT (with why). Ruled-out paths are first-class intelligence \u2014 send "None" only if nothing you tried failed.';
+    const buildDisciplineNote = "\n\n---\n\n**BUILD DISCIPLINE:**\n- **Read before you claim.** Before asserting how something works \u2014 or that it is already done \u2014 read the actual code/state. Don't rely on memory or earlier context.\n- **Sweep existing material first.** Check the docs (`doc_search` or your docs index) and prior tasks, not just whether a file exists \u2014 the work may already be covered.\n- **Ranged reads.** For large or unfamiliar files, read the relevant range rather than the whole file.";
     let adSection = "";
     try {
       const allADs = await adapter2.getActiveDecisions();
@@ -21718,7 +21753,7 @@ ${entries}`;
       formatModelRecommendation(result.task.buildHandoff?.effort ?? result.task.complexity)
     ) ?? "";
     const gestaltNote = buildGestaltPreBuildDirective(caps) ?? "";
-    return textResponse(header + serializeBuildHandoff(result.task.buildHandoff) + modelNote + gestaltNote + adSection + moduleInstructions + moduleContext + dogfoodSection + verificationNote + chainInstruction + phaseNote + filesToWriteSection);
+    return textResponse(header + serializeBuildHandoff(result.task.buildHandoff) + modelNote + gestaltNote + adSection + moduleInstructions + moduleContext + dogfoodSection + verificationNote + buildDisciplineNote + chainInstruction + phaseNote + filesToWriteSection);
   } catch (err) {
     if (isNoHandoffError(err)) {
       const lines = [
@@ -21836,9 +21871,11 @@ async function handleExecuteComplete(adapter2, config2, taskId, args, light = fa
     tracker.mark("complete_format");
     tracker.setStreamScope({ taskId: result.task.displayId ?? result.task.id, cycle: result.cycleNumber });
     await tracker.recordStep("report_written");
-    await tracker.recordStep("issues_triaged", {
-      metadata: { autoTriagedCount: result.autoTriagedCount ?? 0 }
-    });
+    if ((result.autoTriagedCount ?? 0) > 0) {
+      await tracker.recordStep("issues_triaged", {
+        metadata: { autoTriagedCount: result.autoTriagedCount }
+      });
+    }
     if (resolvesLearnings && resolvesLearnings.length > 0 && adapter2.updateCycleLearningActionRef) {
       for (const learningId of resolvesLearnings) {
         try {
@@ -21847,9 +21884,11 @@ async function handleExecuteComplete(adapter2, config2, taskId, args, light = fa
         }
       }
     }
-    await tracker.recordStep("learnings", {
-      metadata: { learningsLinkedCount: result.learningsLinkedCount ?? 0 }
-    });
+    if ((result.learningsLinkedCount ?? 0) > 0) {
+      await tracker.recordStep("learnings", {
+        metadata: { learningsLinkedCount: result.learningsLinkedCount }
+      });
+    }
     await tracker.recordStep("moving-to-review", {
       metadata: { status: result.task.status }
     });
@@ -24548,7 +24587,12 @@ ${writeNote}
     const envVars = {
       PAPI_PROJECT_DIR: projectRoot,
       PAPI_ADAPTER: "pg",
-      DATABASE_URL: process.env.DATABASE_URL || "<YOUR_DATABASE_URL>"
+      DATABASE_URL: process.env.DATABASE_URL || "<YOUR_DATABASE_URL>",
+      // task-2508: pg/direct setups resolve caller identity from this var (the
+      // hosted path uses the bearer token instead). Without it the FIRST
+      // release hits the owner-gate with a null caller — ship it in the
+      // template so fresh pg projects are owner-resolvable out of the box.
+      PAPI_USER_ID: process.env.PAPI_USER_ID || "<YOUR_ACCOUNT_UUID>"
     };
     if (rootHash) {
       envVars.PAPI_RESOLUTION_METHOD = "root_hash";
@@ -24577,7 +24621,8 @@ ${writeNote}
       "## Next Steps",
       "",
       ...process.env.DATABASE_URL ? ["1. **Restart your MCP client** to pick up the new config."] : [`1. **Set your DATABASE_URL** \u2014 replace \`<YOUR_DATABASE_URL>\` in \`${target.displayPath}\` with your Supabase **session pooler** connection string (port **5432**, not 6543 \u2014 the transaction pooler wedges on interrupted calls).`],
-      "2. **Run `setup`** \u2014 this scaffolds your project with a Product Brief, Active Decisions, and CLAUDE.md."
+      ...process.env.PAPI_USER_ID ? [] : ["2. **Set your PAPI_USER_ID** \u2014 replace `<YOUR_ACCOUNT_UUID>` with your account UUID (getpapi.ai \u2192 Settings \u2192 Account). Release and reviews use it to recognise you as the owner."],
+      `${process.env.PAPI_USER_ID ? "2" : "3"}. **Run \`setup\`** \u2014 this scaffolds your project with a Product Brief, Active Decisions, and CLAUDE.md.`
     ].join("\n");
     return textResponse(output2 + formatFilesToWriteSection(collector));
   }
@@ -26093,7 +26138,7 @@ ${versionDrift}` : "";
     let enrichmentNote = "";
     const enrichmentCollector = new FileWriteCollector();
     try {
-      enrichmentNote = enrichClaudeMd(config2.projectRoot, healthResult.cycleNumber, config2.adapterType, enrichmentCollector);
+      enrichmentNote = enrichClaudeMd(config2.projectRoot, healthResult.cycleNumber, config2.adapterType, enrichmentCollector, clientName);
     } catch {
     }
     const enrichmentFilesSection = enrichmentCollector.isEmpty() ? "" : formatFilesToWriteSection(enrichmentCollector);
@@ -26154,7 +26199,8 @@ ${section}`;
     }));
   }
 }
-function enrichClaudeMd(projectRoot, cycleNumber, adapterType, collector) {
+function enrichClaudeMd(projectRoot, cycleNumber, adapterType, collector, clientName) {
+  if (!shouldWriteClaudeMd(clientName)) return "";
   if (adapterType === "proxy") {
     const additions2 = [];
     if (cycleNumber >= 6) additions2.push(CLAUDE_MD_TIER_1);

package/dist/prompts.js

@@ -66,7 +66,7 @@ REFERENCE DOCS
 [Optional \u2014 paths to docs/ files that provide background context for this task. Include only when the task originated from research or scoping work and the doc contains context the builder will need beyond what is in this handoff. Omit this section entirely for tasks that don't need supplementary context.]
 
 PRE-BUILD VERIFICATION
-[List 2-5 specific file paths the builder should read BEFORE implementing to check if the functionality already exists. Derive these from FILES LIKELY TOUCHED \u2014 pick the files most likely to already contain the target functionality. If >80% of the scope is already implemented, the builder should report "already built" instead of re-implementing. Include this section for EVERY task \u2014 it prevents wasted build slots on already-shipped code.]
+[List 2-5 specific file paths the builder should read BEFORE implementing to check if the functionality already exists. Derive these from FILES LIKELY TOUCHED \u2014 pick the files most likely to already contain the target functionality. ALSO mandate a docs sweep, not just file-existence (task-2161): name any docs the builder should check via doc_search or the docs index \u2014 a design/research/status:final doc or a prior task may already cover the work. If >80% of the scope is already implemented, the builder should report "already built" instead of re-implementing. Include this section for EVERY task \u2014 it prevents wasted build slots on already-shipped code.]
 
 FILES LIKELY TOUCHED
 [files]

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@papi-ai/server",
-  "version": "0.7.47",
+  "version": "0.7.48",
   "description": "PAPI MCP server \u2014 AI-powered sprint planning, build execution, and strategy review for software projects",
   "license": "Elastic-2.0",
   "mcpName": "io.github.getpapi/papi",