@papi-ai/server 0.7.5 → 0.7.6

package/dist/index.js

@@ -4747,18 +4747,20 @@ var init_dist3 = __esm({
       }
       async getProject(id) {
         const [row] = await this.sql`
-      SELECT * FROM projects WHERE id = ${id}
+      SELECT id, slug, name, repo_url, papi_dir, user_id, created_at, updated_at FROM projects WHERE id = ${id}
     `;
         return row ?? null;
       }
       async listProjects(filter) {
         if (filter?.slug) {
           return this.sql`
-        SELECT * FROM projects WHERE slug = ${filter.slug} ORDER BY created_at
+        SELECT id, slug, name, repo_url, papi_dir, user_id, created_at, updated_at FROM projects WHERE slug = ${filter.slug} ORDER BY created_at
+        LIMIT 200 -- bounded: project list per user
       `;
         }
         return this.sql`
-      SELECT * FROM projects ORDER BY created_at
+      SELECT id, slug, name, repo_url, papi_dir, user_id, created_at, updated_at FROM projects ORDER BY created_at
+      LIMIT 200 -- bounded: project list per user
     `;
       }
       async updateProject(id, updates) {
@@ -4818,7 +4820,7 @@ var init_dist3 = __esm({
       }
       async getSharedDecision(id) {
         const [row] = await this.sql`
-      SELECT * FROM shared_decisions WHERE id = ${id}
+      SELECT id, display_id, title, decision, confidence, status, origin_project_id, evidence, superseded_by_id, created_at, updated_at, archived_at FROM shared_decisions WHERE id = ${id}
     `;
         return row ?? null;
       }
@@ -4838,7 +4840,8 @@ var init_dist3 = __esm({
         }
         if (conditions.length === 0) {
           return this.sql`
-        SELECT * FROM shared_decisions WHERE archived_at IS NULL ORDER BY created_at
+        SELECT id, display_id, title, decision, confidence, status, origin_project_id, evidence, superseded_by_id, created_at, updated_at, archived_at FROM shared_decisions WHERE archived_at IS NULL ORDER BY created_at
+        LIMIT 200 -- cross-project shared decisions; 200 is ample
       `;
         }
         let where = conditions[0];
@@ -4846,7 +4849,8 @@ var init_dist3 = __esm({
           where = this.sql`${where} AND ${conditions[i]}`;
         }
         return this.sql`
-      SELECT * FROM shared_decisions WHERE ${where} ORDER BY created_at
+      SELECT id, display_id, title, decision, confidence, status, origin_project_id, evidence, superseded_by_id, created_at, updated_at, archived_at FROM shared_decisions WHERE ${where} ORDER BY created_at
+      LIMIT 200
     `;
       }
       async updateSharedDecision(id, updates) {
@@ -4915,7 +4919,7 @@ var init_dist3 = __esm({
       }
       async getAcknowledgement(id) {
         const [row] = await this.sql`
-      SELECT * FROM acknowledgements WHERE id = ${id}
+      SELECT id, decision_id, project_id, status, comments, responded_at, created_at, updated_at FROM acknowledgements WHERE id = ${id}
     `;
         return row ?? null;
       }
@@ -4932,7 +4936,8 @@ var init_dist3 = __esm({
         }
         if (conditions.length === 0) {
           return this.sql`
-        SELECT * FROM acknowledgements ORDER BY created_at
+        SELECT id, decision_id, project_id, status, comments, responded_at, created_at, updated_at FROM acknowledgements ORDER BY created_at
+        LIMIT 500 -- acknowledgements grow with decisions × projects
       `;
         }
         let where = conditions[0];
@@ -4940,7 +4945,8 @@ var init_dist3 = __esm({
           where = this.sql`${where} AND ${conditions[i]}`;
         }
         return this.sql`
-      SELECT * FROM acknowledgements WHERE ${where} ORDER BY created_at
+      SELECT id, decision_id, project_id, status, comments, responded_at, created_at, updated_at FROM acknowledgements WHERE ${where} ORDER BY created_at
+      LIMIT 500
     `;
       }
       // -------------------------------------------------------------------------
@@ -4956,7 +4962,7 @@ var init_dist3 = __esm({
       }
       async getSharedMilestone(id) {
         const [row] = await this.sql`
-      SELECT * FROM shared_milestones WHERE id = ${id}
+      SELECT id, title, description, status, target_date, completed_at, created_at, updated_at, archived_at FROM shared_milestones WHERE id = ${id}
     `;
         return row ?? null;
       }
@@ -4970,7 +4976,8 @@ var init_dist3 = __esm({
         }
         if (conditions.length === 0) {
           return this.sql`
-        SELECT * FROM shared_milestones WHERE archived_at IS NULL ORDER BY created_at
+        SELECT id, title, description, status, target_date, completed_at, created_at, updated_at, archived_at FROM shared_milestones WHERE archived_at IS NULL ORDER BY created_at
+        LIMIT 200
       `;
         }
         let where = conditions[0];
@@ -4978,7 +4985,8 @@ var init_dist3 = __esm({
           where = this.sql`${where} AND ${conditions[i]}`;
         }
         return this.sql`
-      SELECT * FROM shared_milestones WHERE ${where} ORDER BY created_at
+      SELECT id, title, description, status, target_date, completed_at, created_at, updated_at, archived_at FROM shared_milestones WHERE ${where} ORDER BY created_at
+      LIMIT 200
     `;
       }
       async updateSharedMilestone(id, updates) {
@@ -5016,7 +5024,7 @@ var init_dist3 = __esm({
       }
       async listMilestoneDependencies(milestoneId) {
         return this.sql`
-      SELECT * FROM milestone_dependencies WHERE milestone_id = ${milestoneId}
+      SELECT id, milestone_id, depends_on_id FROM milestone_dependencies WHERE milestone_id = ${milestoneId}
     `;
       }
       async deleteMilestoneDependency(id) {
@@ -5045,7 +5053,7 @@ var init_dist3 = __esm({
       }
       async getProjectContribution(id) {
         const [row] = await this.sql`
-      SELECT * FROM project_contributions WHERE id = ${id}
+      SELECT id, milestone_id, project_id, status, required_phases, notes, delivered_at, created_at, updated_at FROM project_contributions WHERE id = ${id}
     `;
         return row ?? null;
       }
@@ -5062,7 +5070,8 @@ var init_dist3 = __esm({
         }
         if (conditions.length === 0) {
           return this.sql`
-        SELECT * FROM project_contributions ORDER BY created_at
+        SELECT id, milestone_id, project_id, status, required_phases, notes, delivered_at, created_at, updated_at FROM project_contributions ORDER BY created_at
+        LIMIT 500
       `;
         }
         let where = conditions[0];
@@ -5070,7 +5079,8 @@ var init_dist3 = __esm({
           where = this.sql`${where} AND ${conditions[i]}`;
         }
         return this.sql`
-      SELECT * FROM project_contributions WHERE ${where} ORDER BY created_at
+      SELECT id, milestone_id, project_id, status, required_phases, notes, delivered_at, created_at, updated_at FROM project_contributions WHERE ${where} ORDER BY created_at
+      LIMIT 500
     `;
       }
       async updateProjectContribution(id, updates) {
@@ -5108,7 +5118,7 @@ var init_dist3 = __esm({
       }
       async getActiveNorthStar(projectId) {
         const [row] = await this.sql`
-      SELECT * FROM north_stars
+      SELECT id, project_id, statement, set_at, superseded_by_id, superseded_at, created_at FROM north_stars
       WHERE project_id = ${projectId}
         AND superseded_by_id IS NULL
       ORDER BY created_at DESC
@@ -5126,7 +5136,8 @@ var init_dist3 = __esm({
         }
         if (conditions.length === 0) {
           return this.sql`
-        SELECT * FROM north_stars ORDER BY created_at
+        SELECT id, project_id, statement, set_at, superseded_by_id, superseded_at, created_at FROM north_stars ORDER BY created_at
+        LIMIT 200
       `;
         }
         let where = conditions[0];
@@ -5134,7 +5145,8 @@ var init_dist3 = __esm({
           where = this.sql`${where} AND ${conditions[i]}`;
         }
         return this.sql`
-      SELECT * FROM north_stars WHERE ${where} ORDER BY created_at
+      SELECT id, project_id, statement, set_at, superseded_by_id, superseded_at, created_at FROM north_stars WHERE ${where} ORDER BY created_at
+      LIMIT 200
     `;
       }
       /**
@@ -5148,7 +5160,7 @@ var init_dist3 = __esm({
         return this.sql.begin(async (_tx) => {
           const tx = _tx;
           const [old] = await tx`
-        SELECT * FROM north_stars WHERE id = ${id}
+        SELECT id, project_id, statement, set_at, superseded_by_id, superseded_at, created_at FROM north_stars WHERE id = ${id}
       `;
           if (!old) {
             throw new Error(`NorthStar not found: ${id}`);
@@ -5191,7 +5203,7 @@ var init_dist3 = __esm({
       }
       async getConflictAlert(id) {
         const [row] = await this.sql`
-      SELECT * FROM conflict_alerts WHERE id = ${id}
+      SELECT id, conflict_type, title, description, status, decision_a_id, decision_b_id, north_star_id, resolution_decision_id, raised_by, created_at, updated_at, resolved_at FROM conflict_alerts WHERE id = ${id}
     `;
         return row ?? null;
       }
@@ -5205,7 +5217,8 @@ var init_dist3 = __esm({
         }
         if (conditions.length === 0) {
           return this.sql`
-        SELECT * FROM conflict_alerts ORDER BY created_at
+        SELECT id, conflict_type, title, description, status, decision_a_id, decision_b_id, north_star_id, resolution_decision_id, raised_by, created_at, updated_at, resolved_at FROM conflict_alerts ORDER BY created_at
+        LIMIT 200
       `;
         }
         let where = conditions[0];
@@ -5213,7 +5226,8 @@ var init_dist3 = __esm({
           where = this.sql`${where} AND ${conditions[i]}`;
         }
         return this.sql`
-      SELECT * FROM conflict_alerts WHERE ${where} ORDER BY created_at
+      SELECT id, conflict_type, title, description, status, decision_a_id, decision_b_id, north_star_id, resolution_decision_id, raised_by, created_at, updated_at, resolved_at FROM conflict_alerts WHERE ${where} ORDER BY created_at
+      LIMIT 200
     `;
       }
       async updateConflictAlert(id, updates) {
@@ -6176,19 +6190,23 @@ EXCEPTION WHEN duplicate_object THEN NULL; END $$;
       }
       async getActiveDecisions() {
         const rows = await this.sql`
-      SELECT * FROM active_decisions
+      SELECT id, display_id, title, confidence, superseded, superseded_by, created_cycle, modified_cycle, body, outcome, revision_count
+      FROM active_decisions
       WHERE project_id = ${this.projectId}
       ORDER BY display_id
+      LIMIT 200 -- bounded: ADs are bounded by project lifecycle, 200 is a safe ceiling
     `;
         return rows.map(rowToActiveDecision);
       }
       async getSiblingAds(projectIds) {
         if (projectIds.length === 0) return [];
         const rows = await this.sql`
-      SELECT *, project_id FROM active_decisions
+      SELECT id, display_id, title, confidence, superseded, superseded_by, created_cycle, modified_cycle, body, outcome, revision_count, project_id
+      FROM active_decisions
       WHERE project_id = ANY(${projectIds}::uuid[])
         AND superseded = false
       ORDER BY project_id, display_id
+      LIMIT 500 -- cross-project query: 500 covers up to 10 projects × 50 ADs each
     `;
         return rows.map((row) => ({
           ...rowToActiveDecision(row),
@@ -6198,7 +6216,8 @@ EXCEPTION WHEN duplicate_object THEN NULL; END $$;
       async getCycleLog(limit) {
         if (limit != null) {
           const rows2 = await this.sql`
-        SELECT * FROM planning_log_entries
+        SELECT id, cycle_number, title, content, carry_forward, notes, task_count, effort_points
+        FROM planning_log_entries
         WHERE project_id = ${this.projectId}
         ORDER BY cycle_number DESC
         LIMIT ${limit}
@@ -6206,18 +6225,22 @@ EXCEPTION WHEN duplicate_object THEN NULL; END $$;
           return rows2.map(rowToCycleLogEntry);
         }
         const rows = await this.sql`
-      SELECT * FROM planning_log_entries
+      SELECT id, cycle_number, title, content, carry_forward, notes, task_count, effort_points
+      FROM planning_log_entries
       WHERE project_id = ${this.projectId}
       ORDER BY cycle_number DESC
+      LIMIT 500 -- 500 cycles is ~years of history, sufficient ceiling
     `;
         return rows.map(rowToCycleLogEntry);
       }
       async getCycleLogSince(cycleNumber) {
         const rows = await this.sql`
-      SELECT * FROM planning_log_entries
+      SELECT id, cycle_number, title, content, carry_forward, notes, task_count, effort_points
+      FROM planning_log_entries
       WHERE project_id = ${this.projectId}
         AND cycle_number >= ${cycleNumber}
       ORDER BY cycle_number DESC
+      LIMIT 500 -- bounded by cycle range, 500 is a safe ceiling
     `;
         return rows.map(rowToCycleLogEntry);
       }
@@ -6449,7 +6472,8 @@ ${newParts.join("\n")}` : newParts.join("\n");
         const sinceCycle = input.sinceCycle ?? 0;
         const hasPending = input.hasPendingActions ?? false;
         const rows = await this.sql`
-      SELECT * FROM doc_registry
+      SELECT id, title, type, path, status, summary, tags, cycle_created, cycle_updated, superseded_by, actions, created_at, updated_at
+      FROM doc_registry
       WHERE project_id = ${this.projectId}
         AND (${matchAllStatuses} OR status = ${status})
         AND (${input.type ?? null}::text IS NULL OR type = ${input.type ?? null})
@@ -6479,9 +6503,11 @@ ${newParts.join("\n")}` : newParts.join("\n");
       async getDoc(idOrPath) {
         const isUuid = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(idOrPath);
         const rows = isUuid ? await this.sql`
-          SELECT * FROM doc_registry WHERE id = ${idOrPath} AND project_id = ${this.projectId}
+          SELECT id, title, type, path, status, summary, tags, cycle_created, cycle_updated, superseded_by, actions, created_at, updated_at
+          FROM doc_registry WHERE id = ${idOrPath} AND project_id = ${this.projectId}
         ` : await this.sql`
-          SELECT * FROM doc_registry WHERE path = ${idOrPath} AND project_id = ${this.projectId}
+          SELECT id, title, type, path, status, summary, tags, cycle_created, cycle_updated, superseded_by, actions, created_at, updated_at
+          FROM doc_registry WHERE path = ${idOrPath} AND project_id = ${this.projectId}
         `;
         if (rows.length === 0) return null;
         const r = rows[0];
@@ -6640,9 +6666,11 @@ ${newParts.join("\n")}` : newParts.join("\n");
       async queryBoard(options) {
         if (!options) {
           const rows2 = await this.sql`
-        SELECT * FROM cycle_tasks
+        SELECT id, project_id, display_id, title, status, priority, complexity, module, epic, phase, owner, reviewed, cycle, created_cycle, created_at, why, depends_on, notes, closure_reason, state_history, build_handoff, build_report, task_type, maturity, stage_id, doc_ref, source, updated_at
+        FROM cycle_tasks
         WHERE project_id = ${this.projectId}
         ORDER BY display_id
+        LIMIT 2000 -- hard ceiling; single project task count won't approach this
       `;
           return rows2.map(rowToTask);
         }
@@ -6679,22 +6707,28 @@ ${newParts.join("\n")}` : newParts.join("\n");
           where = this.sql`${where} AND ${conditions[i]}`;
         }
         const rows = await this.sql`
-      SELECT * FROM cycle_tasks WHERE ${where} ORDER BY display_id
+      SELECT id, project_id, display_id, title, status, priority, complexity, module, epic, phase, owner, reviewed, cycle, created_cycle, created_at, why, depends_on, notes, closure_reason, state_history, build_handoff, build_report, task_type, maturity, stage_id, doc_ref, source, updated_at
+      FROM cycle_tasks WHERE ${where} ORDER BY display_id
+      LIMIT 2000 -- matches no-options path ceiling
     `;
         return rows.map(rowToTask);
       }
       async getTask(id) {
         const [row] = await this.sql`
-      SELECT * FROM cycle_tasks
+      SELECT id, project_id, display_id, title, status, priority, complexity, module, epic, phase, owner, reviewed, cycle, created_cycle, created_at, why, depends_on, notes, closure_reason, state_history, build_handoff, build_report, task_type, maturity, stage_id, doc_ref, source, updated_at
+      FROM cycle_tasks
       WHERE project_id = ${this.projectId} AND display_id = ${id}
+      LIMIT 1
     `;
         return row ? rowToTask(row) : null;
       }
       async getTasks(ids) {
         if (ids.length === 0) return [];
         const rows = await this.sql`
-      SELECT * FROM cycle_tasks
+      SELECT id, project_id, display_id, title, status, priority, complexity, module, epic, phase, owner, reviewed, cycle, created_cycle, created_at, why, depends_on, notes, closure_reason, state_history, build_handoff, build_report, task_type, maturity, stage_id, doc_ref, source, updated_at
+      FROM cycle_tasks
       WHERE project_id = ${this.projectId} AND display_id = ANY(${ids})
+      LIMIT 2000 -- matches board ceiling; ids[] won't exceed this in practice
     `;
         return rows.map(rowToTask);
       }
@@ -6804,7 +6838,8 @@ ${newParts.join("\n")}` : newParts.join("\n");
         completed, actual_effort, estimated_effort, scope_accuracy,
         surprises, discovered_issues, architecture_notes,
         commit_sha, files_changed, related_decisions, handoff_accuracy,
-        corrections_count, brief_implications, dead_ends
+        corrections_count, brief_implications, dead_ends,
+        started_at, completed_at, tool_call_count
       ) VALUES (
         ${this.projectId}, ${displayId}, ${report.taskId}, ${report.taskName},
         ${report.date}, ${report.cycle}, ${report.completed},
@@ -6814,13 +6849,15 @@ ${newParts.join("\n")}` : newParts.join("\n");
         ${report.handoffAccuracy ? this.sql.json(report.handoffAccuracy) : null},
         ${report.correctionsCount ?? 0},
         ${report.briefImplications ? this.sql.json(report.briefImplications) : null},
-        ${report.deadEnds ?? null}
+        ${report.deadEnds ?? null},
+        ${report.startedAt ?? null}, ${report.completedAt ?? null}, ${report.toolCallCount ?? 0}
       )
     `;
       }
       async getRecentBuildReports(count) {
         const rows = await this.sql`
-      SELECT * FROM build_reports
+      SELECT id, display_id, task_id, task_name, date, cycle, completed, actual_effort, estimated_effort, scope_accuracy, surprises, discovered_issues, architecture_notes, commit_sha, files_changed, related_decisions, corrections_count, handoff_accuracy, brief_implications, dead_ends, created_at
+      FROM build_reports
       WHERE project_id = ${this.projectId}
       ORDER BY created_at DESC
       LIMIT ${count}
@@ -6836,9 +6873,11 @@ ${newParts.join("\n")}` : newParts.join("\n");
       }
       async getBuildReportsSince(cycleNumber) {
         const rows = await this.sql`
-      SELECT * FROM build_reports
+      SELECT id, display_id, task_id, task_name, date, cycle, completed, actual_effort, estimated_effort, scope_accuracy, surprises, discovered_issues, architecture_notes, commit_sha, files_changed, related_decisions, corrections_count, handoff_accuracy, brief_implications, dead_ends, created_at
+      FROM build_reports
       WHERE project_id = ${this.projectId} AND cycle >= ${cycleNumber}
       ORDER BY created_at
+      LIMIT 1000 -- bounded by cycle range; 1000 covers ~200 cycles × 5 tasks
     `;
         return rows.map(rowToBuildReport);
       }
@@ -6865,25 +6904,29 @@ ${newParts.join("\n")}` : newParts.join("\n");
         let rows;
         if (opts?.cycleNumber && opts?.category) {
           rows = await this.sql`
-        SELECT * FROM cycle_learnings
+        SELECT id, project_id, task_id, cycle_number, category, severity, summary, detail, tags, related_decision, action_taken, action_ref, created_at
+        FROM cycle_learnings
         WHERE project_id = ${this.projectId} AND cycle_number = ${opts.cycleNumber} AND category = ${opts.category}
         ORDER BY created_at DESC LIMIT ${limit}
       `;
         } else if (opts?.cycleNumber) {
           rows = await this.sql`
-        SELECT * FROM cycle_learnings
+        SELECT id, project_id, task_id, cycle_number, category, severity, summary, detail, tags, related_decision, action_taken, action_ref, created_at
+        FROM cycle_learnings
         WHERE project_id = ${this.projectId} AND cycle_number = ${opts.cycleNumber}
         ORDER BY created_at DESC LIMIT ${limit}
       `;
         } else if (opts?.category) {
           rows = await this.sql`
-        SELECT * FROM cycle_learnings
+        SELECT id, project_id, task_id, cycle_number, category, severity, summary, detail, tags, related_decision, action_taken, action_ref, created_at
+        FROM cycle_learnings
         WHERE project_id = ${this.projectId} AND category = ${opts.category}
         ORDER BY created_at DESC LIMIT ${limit}
       `;
         } else {
           rows = await this.sql`
-        SELECT * FROM cycle_learnings
+        SELECT id, project_id, task_id, cycle_number, category, severity, summary, detail, tags, related_decision, action_taken, action_ref, created_at
+        FROM cycle_learnings
         WHERE project_id = ${this.projectId}
         ORDER BY created_at DESC LIMIT ${limit}
       `;
@@ -6937,7 +6980,8 @@ ${newParts.join("\n")}` : newParts.join("\n");
       async getRecentReviews(count) {
         const limit = count ?? 20;
         const rows = await this.sql`
-      SELECT * FROM reviews
+      SELECT id, display_id, task_id, stage, reviewer, verdict, cycle, date, comments, handoff_revision, build_commit_sha, auto_review
+      FROM reviews
       WHERE project_id = ${this.projectId}
       ORDER BY created_at DESC
       LIMIT ${limit}
@@ -7071,9 +7115,11 @@ ${newParts.join("\n")}` : newParts.join("\n");
       // -------------------------------------------------------------------------
       async readPhases() {
         const rows = await this.sql`
-      SELECT * FROM phases
+      SELECT id, slug, label, description, status, sort_order, stage_id
+      FROM phases
       WHERE project_id = ${this.projectId}
       ORDER BY sort_order
+      LIMIT 200 -- phases are bounded by project structure
     `;
         return rows.map(rowToPhase);
       }
@@ -7123,21 +7169,24 @@ ${newParts.join("\n")}` : newParts.join("\n");
       INSERT INTO tool_call_metrics (
         project_id, timestamp, tool, duration_ms,
         input_tokens, output_tokens, estimated_cost_usd, model, cycle_number,
-        context_bytes, context_utilisation
+        context_bytes, context_utilisation, success
       ) VALUES (
         ${this.projectId}, ${metric.timestamp}, ${metric.tool}, ${metric.durationMs},
         ${metric.inputTokens ?? null}, ${metric.outputTokens ?? null},
         ${metric.estimatedCostUsd ?? null}, ${metric.model ?? null},
         ${metric.cycleNumber ?? null},
-        ${metric.contextBytes ?? null}, ${metric.contextUtilisation ?? null}
+        ${metric.contextBytes ?? null}, ${metric.contextUtilisation ?? null},
+        ${metric.success ?? true}
       )
     `;
       }
       async readToolMetrics() {
         const rows = await this.sql`
-      SELECT * FROM tool_call_metrics
+      SELECT timestamp, tool, duration_ms, input_tokens, output_tokens, estimated_cost_usd, model, cycle_number, context_bytes, context_utilisation
+      FROM tool_call_metrics
       WHERE project_id = ${this.projectId}
       ORDER BY timestamp
+      LIMIT 5000 -- metrics are high-volume; task-1189 adds pagination for dashboard
     `;
         return rows.map(rowToToolCallMetric);
       }
@@ -7146,10 +7195,12 @@ ${newParts.join("\n")}` : newParts.join("\n");
       // -------------------------------------------------------------------------
       async getCostSummary(cycleNumber) {
         const metrics = cycleNumber != null ? await this.sql`
-          SELECT * FROM tool_call_metrics
+          SELECT timestamp, tool, duration_ms, input_tokens, output_tokens, estimated_cost_usd, model, cycle_number, context_bytes, context_utilisation
+          FROM tool_call_metrics
           WHERE project_id = ${this.projectId} AND cycle_number = ${cycleNumber}
         ` : await this.sql`
-          SELECT * FROM tool_call_metrics
+          SELECT timestamp, tool, duration_ms, input_tokens, output_tokens, estimated_cost_usd, model, cycle_number, context_bytes, context_utilisation
+          FROM tool_call_metrics
           WHERE project_id = ${this.projectId}
         `;
         let totalCostUsd = 0;
@@ -7186,7 +7237,8 @@ ${newParts.join("\n")}` : newParts.join("\n");
       }
       async getCostSnapshots() {
         const rows = await this.sql`
-      SELECT * FROM cost_snapshots
+      SELECT cycle, date, total_cost_usd, total_input_tokens, total_output_tokens, total_calls
+      FROM cost_snapshots
       WHERE project_id = ${this.projectId}
       ORDER BY cycle
     `;
@@ -7213,9 +7265,11 @@ ${newParts.join("\n")}` : newParts.join("\n");
       }
       async readCycleMetrics() {
         const rows = await this.sql`
-      SELECT * FROM cycle_metrics_snapshots
+      SELECT cycle, date, accuracy, velocity
+      FROM cycle_metrics_snapshots
       WHERE project_id = ${this.projectId}
       ORDER BY cycle
+      LIMIT 500 -- one row per cycle; 500 is ~years of history
     `;
         return rows.map(rowToCycleMetrics);
       }
@@ -7224,9 +7278,11 @@ ${newParts.join("\n")}` : newParts.join("\n");
       // -------------------------------------------------------------------------
       async readCycles() {
         const rows = await this.sql`
-      SELECT * FROM cycles
+      SELECT id, number, status, start_date, end_date, goals, board_health, task_ids
+      FROM cycles
       WHERE project_id = ${this.projectId}
       ORDER BY number
+      LIMIT 500 -- one row per cycle; 500 is years of history
     `;
         return rows.map(rowToCycle);
       }
@@ -7273,25 +7329,31 @@ ${newParts.join("\n")}` : newParts.join("\n");
       // -------------------------------------------------------------------------
       async readHorizons() {
         const rows = await this.sql`
-      SELECT * FROM horizons
+      SELECT id, slug, label, description, status, sort_order, project_id, created_at, updated_at
+      FROM horizons
       WHERE project_id = ${this.projectId}
       ORDER BY sort_order, created_at
+      LIMIT 50 -- horizons are high-level; 50 is an ample ceiling
     `;
         return rows.map(rowToHorizon);
       }
       async readStages(horizonId) {
         if (horizonId) {
           const rows2 = await this.sql`
-        SELECT * FROM stages
+        SELECT id, slug, label, description, status, sort_order, horizon_id, project_id, exit_criteria, created_at, updated_at
+        FROM stages
         WHERE project_id = ${this.projectId} AND horizon_id = ${horizonId}
         ORDER BY sort_order, created_at
+        LIMIT 100 -- stages per horizon are bounded; 100 is ample
       `;
           return rows2.map(rowToStage);
         }
         const rows = await this.sql`
-      SELECT * FROM stages
+      SELECT id, slug, label, description, status, sort_order, horizon_id, project_id, exit_criteria, created_at, updated_at
+      FROM stages
       WHERE project_id = ${this.projectId}
       ORDER BY sort_order, created_at
+      LIMIT 200 -- all stages across horizons; 200 is a safe ceiling
     `;
         return rows.map(rowToStage);
       }
@@ -7321,7 +7383,8 @@ ${newParts.join("\n")}` : newParts.join("\n");
       }
       async getActiveStage() {
         const rows = await this.sql`
-      SELECT * FROM stages
+      SELECT id, slug, label, description, status, sort_order, horizon_id, project_id, exit_criteria, created_at, updated_at
+      FROM stages
       WHERE project_id = ${this.projectId} AND status = 'Active'
       ORDER BY sort_order
       LIMIT 1
@@ -7433,7 +7496,8 @@ ${newParts.join("\n")}` : newParts.join("\n");
       }
       async getDecisionEvents(decisionId, limit) {
         const rows = await this.sql`
-      SELECT * FROM decision_events
+      SELECT id, decision_id, event_type, cycle, source, source_ref, detail, created_at
+      FROM decision_events
       WHERE project_id = ${this.projectId} AND decision_id = ${decisionId}
       ORDER BY created_at DESC
       LIMIT ${limit ?? 50}
@@ -7442,9 +7506,11 @@ ${newParts.join("\n")}` : newParts.join("\n");
       }
       async getDecisionEventsSince(cycle) {
         const rows = await this.sql`
-      SELECT * FROM decision_events
+      SELECT id, decision_id, event_type, cycle, source, source_ref, detail, created_at
+      FROM decision_events
       WHERE project_id = ${this.projectId} AND cycle >= ${cycle}
       ORDER BY created_at
+      LIMIT 1000 -- bounded by cycle range; 1000 is ample
     `;
         return rows.map(rowToDecisionEvent);
       }
@@ -7471,7 +7537,8 @@ ${newParts.join("\n")}` : newParts.join("\n");
       }
       async getDecisionScores(decisionId) {
         const rows = await this.sql`
-      SELECT * FROM decision_scores
+      SELECT id, decision_id, cycle, effort, risk, reversibility, scale_cost, lock_in, total_score, rationale, created_at
+      FROM decision_scores
       WHERE project_id = ${this.projectId} AND decision_id = ${decisionId}
       ORDER BY cycle
     `;
@@ -7479,7 +7546,7 @@ ${newParts.join("\n")}` : newParts.join("\n");
       }
       async getLatestDecisionScores() {
         const rows = await this.sql`
-      SELECT DISTINCT ON (decision_id) *
+      SELECT DISTINCT ON (decision_id) id, decision_id, cycle, effort, risk, reversibility, scale_cost, lock_in, total_score, rationale, created_at
       FROM decision_scores
       WHERE project_id = ${this.projectId}
       ORDER BY decision_id, cycle DESC
@@ -8394,6 +8461,9 @@ Check PAPI_PROJECT_ID in your .mcp.json config. Find your project ID in the PAPI
       readToolMetrics() {
         return this.invoke("readToolMetrics");
       }
+      insertPlanRun(entry) {
+        return this.invoke("insertPlanRun", [entry]);
+      }
       getCostSummary(cycleNumber) {
         return this.invoke("getCostSummary", [cycleNumber]);
       }
@@ -8520,6 +8590,46 @@ Check PAPI_PROJECT_ID in your .mcp.json config. Find your project ID in the PAPI
       submitBugReport(report) {
         return this.invoke("submitBugReport", [report]);
       }
+      // --- Doc Registry ---
+      registerDoc(entry) {
+        return this.invoke("registerDoc", [entry]);
+      }
+      searchDocs(input) {
+        return this.invoke("searchDocs", [input]);
+      }
+      getDoc(idOrPath) {
+        return this.invoke("getDoc", [idOrPath]);
+      }
+      updateDocStatus(id, status, supersededBy) {
+        return this.invoke("updateDocStatus", [id, status, supersededBy]);
+      }
+      // --- Cycle Learnings ---
+      appendCycleLearnings(learnings) {
+        return this.invoke("appendCycleLearnings", [learnings]);
+      }
+      getCycleLearnings(opts) {
+        return this.invoke("getCycleLearnings", [opts]);
+      }
+      getCycleLearningPatterns() {
+        return this.invoke("getCycleLearningPatterns", []);
+      }
+      updateCycleLearningActionRef(learningId, taskDisplayId) {
+        return this.invoke("updateCycleLearningActionRef", [learningId, taskDisplayId]);
+      }
+      // --- Strategy Review Drafts ---
+      savePendingReviewResponse(cycleNumber, rawResponse) {
+        return this.invoke("savePendingReviewResponse", [cycleNumber, rawResponse]);
+      }
+      getPendingReviewResponse() {
+        return this.invoke("getPendingReviewResponse", []);
+      }
+      clearPendingReviewResponse() {
+        return this.invoke("clearPendingReviewResponse", []);
+      }
+      // --- Active Decisions ---
+      confirmPendingActiveDecisions(cycleNumber) {
+        return this.invoke("confirmPendingActiveDecisions", [cycleNumber]);
+      }
       // --- Atomic plan write-back ---
       async planWriteBack(payload) {
         const raw = await this.invoke("planWriteBack", [payload]);
@@ -8975,8 +9085,10 @@ function detectUnrecordedCommits(cwd, baseBranch) {
       // release commits
       /^[a-f0-9]+ Merge /,
       // merge commits from PRs
-      /chore\(task-/
+      /chore\(task-/,
       // task-related housekeeping
+      /chore: dogfood log/
+      // automated dogfood log entries post-release
     ];
     return output.split("\n").filter((line) => line.trim() && !CYCLE_PATTERNS.some((p) => p.test(line))).map((line) => {
       const spaceIdx = line.indexOf(" ");
@@ -10624,6 +10736,8 @@ You MUST cover these 5 sections. Each is mandatory.
    - Note any hierarchy/phase issues worth correcting (1-2 bullets max)
    - Delete ADs that are legacy, process-level, or redundant without discussion
 
+**Registered Documents:** If a "### Registered Documents" section is present in context, scan it for: (a) research findings that contradict current ADs or strategy, (b) unactioned research that should influence the next plan. Reference relevant docs by title in your review. If unregistered docs are listed, flag 1-2 that look strategically relevant and suggest registering them.
+
 ## CONDITIONAL SECTIONS (include only when genuinely useful \u2014 most reviews should have 0-2 of these)
 
 6. **Security Posture Review** \u2014 Only if \`[SECURITY]\` tags exist in recent cycle logs.
@@ -13610,21 +13724,6 @@ ${cleanContent}`;
     });
   } catch {
   }
-  try {
-    const cycleLog = await adapter2.getCycleLogSince(cycleNumber);
-    const currentEntry = cycleLog.find((e) => e.cycleNumber === cycleNumber);
-    if (currentEntry) {
-      const reviewCompleteText = `Strategy review completed Cycle ${cycleNumber}. Next due ~Cycle ${cycleNumber + 5}.`;
-      const existingCf = currentEntry.carryForward ?? "";
-      const updatedCf = existingCf ? existingCf.replace(/strategy review (?:due|available|overdue)[^.]*\.[^.]*/gi, reviewCompleteText).trim() : reviewCompleteText;
-      const finalCf = updatedCf === existingCf ? `${existingCf} ${reviewCompleteText}`.trim() : updatedCf;
-      await adapter2.writeCycleLogEntry({
-        ...currentEntry,
-        carryForward: finalCf
-      });
-    }
-  } catch {
-  }
   if (data.activeDecisionUpdates && data.activeDecisionUpdates.length > 0) {
     await Promise.all(data.activeDecisionUpdates.map(async (ad) => {
       if (ad.action === "delete" && adapter2.deleteActiveDecision) {
@@ -16454,6 +16553,7 @@ init_git();
 import { randomUUID as randomUUID9 } from "crypto";
 import { readdirSync as readdirSync3, existsSync as existsSync3, readFileSync } from "fs";
 import { join as join5 } from "path";
+var buildStartTimes = /* @__PURE__ */ new Map();
 function capitalizeCompleted(value) {
   const map = {
     yes: "Yes",
@@ -16659,6 +16759,7 @@ async function startBuild(adapter2, config2, taskId, options = {}) {
   if (task.status !== "In Progress") {
     await adapter2.updateTaskStatus(taskId, "In Progress");
   }
+  buildStartTimes.set(taskId, (/* @__PURE__ */ new Date()).toISOString());
   let phaseChanges = [];
   try {
     phaseChanges = await propagatePhaseStatus(adapter2);
@@ -16724,8 +16825,11 @@ async function completeBuild(adapter2, config2, taskId, input, options = {}) {
     correctionsCount: input.correctionsCount,
     briefImplications: input.briefImplications,
     deadEnds: input.deadEnds,
-    iterationCount
+    iterationCount,
+    startedAt: buildStartTimes.get(taskId) ?? void 0,
+    completedAt: now.toISOString()
   };
+  buildStartTimes.delete(taskId);
   if (input.relatedDecisions) {
     const adIds = input.relatedDecisions.split(",").map((s) => s.trim()).filter(Boolean);
     if (adIds.length > 0) report.relatedDecisions = adIds;
@@ -20362,7 +20466,7 @@ var hierarchyUpdateTool = {
       },
       status: {
         type: "string",
-        enum: ["active", "completed", "deferred"],
+        enum: ["Not Started", "In Progress", "Done", "Deferred"],
         description: "The new status to set."
       },
       exit_criteria: {
@@ -20374,7 +20478,7 @@ var hierarchyUpdateTool = {
     required: ["level", "name"]
   }
 };
-var VALID_STATUSES3 = /* @__PURE__ */ new Set(["active", "completed", "deferred"]);
+var VALID_STATUSES3 = /* @__PURE__ */ new Set(["Not Started", "In Progress", "Done", "Deferred"]);
 async function handleHierarchyUpdate(adapter2, args) {
   const level = args.level;
   const name = args.name;
@@ -20390,7 +20494,7 @@ async function handleHierarchyUpdate(adapter2, args) {
     return errorResponse(`Invalid level "${level}". Must be "phase", "stage", or "horizon".`);
   }
   if (status && !VALID_STATUSES3.has(status)) {
-    return errorResponse(`Invalid status "${status}". Must be one of: active, completed, deferred.`);
+    return errorResponse(`Invalid status "${status}". Must be one of: Not Started, In Progress, Done, Deferred.`);
   }
   if (exitCriteria !== void 0 && level !== "stage") {
     return errorResponse("exit_criteria can only be set on stages.");
@@ -20989,7 +21093,7 @@ function extractTitle(filePath) {
 }
 async function handleDocScan(adapter2, config2, args) {
   if (!adapter2.searchDocs) {
-    return errorResponse("Doc registry not available \u2014 requires pg adapter.");
+    return errorResponse("Doc registry not available on this adapter.");
   }
   const includePlans = args.include_plans ?? false;
   const registered = await adapter2.searchDocs({ limit: 500, status: "all" });
@@ -21599,12 +21703,13 @@ function createServer(adapter2, config2) {
     delete result._usage;
     delete result._contextBytes;
     delete result._contextUtilisation;
-    if (contextBytes !== void 0 || contextUtilisation !== void 0) {
-      try {
-        const metric = buildMetric(name, elapsed, usage, void 0, contextBytes, contextUtilisation);
-        await adapter2.appendToolMetric(metric);
-      } catch {
-      }
+    const isError = result.content.some((c) => c.text.startsWith("Error:") || c.text.startsWith("\u274C"));
+    try {
+      const metric = buildMetric(name, elapsed, usage, void 0, contextBytes, contextUtilisation);
+      metric.success = !isError;
+      adapter2.appendToolMetric(metric).catch(() => {
+      });
+    } catch {
     }
     const telemetryProjectId = process.env["PAPI_PROJECT_ID"];
     if (telemetryProjectId) {
@@ -21612,7 +21717,6 @@ function createServer(adapter2, config2) {
         adapter_type: config2.adapterType
       });
       const isApplyMode = safeArgs.mode === "apply";
-      const isError = result.content.some((c) => c.text.startsWith("Error:") || c.text.startsWith("\u274C"));
       if (!isError) {
         if (name === "setup" && isApplyMode) {
           emitMilestone(telemetryProjectId, "setup_completed");

package/dist/prompts.js

@@ -754,6 +754,8 @@ You MUST cover these 5 sections. Each is mandatory.
    - Note any hierarchy/phase issues worth correcting (1-2 bullets max)
    - Delete ADs that are legacy, process-level, or redundant without discussion
 
+**Registered Documents:** If a "### Registered Documents" section is present in context, scan it for: (a) research findings that contradict current ADs or strategy, (b) unactioned research that should influence the next plan. Reference relevant docs by title in your review. If unregistered docs are listed, flag 1-2 that look strategically relevant and suggest registering them.
+
 ## CONDITIONAL SECTIONS (include only when genuinely useful \u2014 most reviews should have 0-2 of these)
 
 6. **Security Posture Review** \u2014 Only if \`[SECURITY]\` tags exist in recent cycle logs.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@papi-ai/server",
-  "version": "0.7.5",
+  "version": "0.7.6",
   "description": "PAPI MCP server — AI-powered sprint planning, build execution, and strategy review for software projects",
   "license": "Elastic-2.0",
   "type": "module",