@papi-ai/server 0.7.70 → 0.7.71

package/dist/backfill-cycle-metrics.js

@@ -1865,9 +1865,12 @@ Check PAPI_PROJECT_ID in your .mcp.json config. Find your project ID in the PAPI
         return this.invoke("getOwnerIdentity", []);
       }
       // --- Contributor cohort (task-2029, C288) ---
-      // Owner-only enforcement is BOTH tool-layer (resolveOwnerGate) and
-      // server-side in the edge function (auth-derived caller vs project owner) —
-      // defence in depth, since this client runs on the user's machine.
+      // Owner-only enforcement is BOTH tool-layer (resolveOwnerGate) and server-side
+      // in the edge function (auth-derived caller vs project owner). task-2442 (C351)
+      // added addContributorByEmail/removeContributorByEmail to the proxy WRITE_METHODS
+      // set too, so a viewer is now rejected at the role-gate wall before the handler —
+      // three layers of defence, since this client runs on the user's machine.
+      // listContributors stays a member-open read (task-2377).
       async listContributors() {
         return this.invoke("listContributors", []);
       }

package/dist/index.js

@@ -1982,9 +1982,12 @@ Check PAPI_PROJECT_ID in your .mcp.json config. Find your project ID in the PAPI
         return this.invoke("getOwnerIdentity", []);
       }
       // --- Contributor cohort (task-2029, C288) ---
-      // Owner-only enforcement is BOTH tool-layer (resolveOwnerGate) and
-      // server-side in the edge function (auth-derived caller vs project owner) —
-      // defence in depth, since this client runs on the user's machine.
+      // Owner-only enforcement is BOTH tool-layer (resolveOwnerGate) and server-side
+      // in the edge function (auth-derived caller vs project owner). task-2442 (C351)
+      // added addContributorByEmail/removeContributorByEmail to the proxy WRITE_METHODS
+      // set too, so a viewer is now rejected at the role-gate wall before the handler —
+      // three layers of defence, since this client runs on the user's machine.
+      // listContributors stays a member-open read (task-2377).
       async listContributors() {
         return this.invoke("listContributors", []);
       }
@@ -21089,6 +21092,18 @@ function clearBuildCheckpoint(key) {
   } catch {
   }
 }
+function writeBuildCheckpointIfLocal(input) {
+  if (!hasLocalWorkspace()) return;
+  writeBuildCheckpoint(input);
+}
+function readBuildCheckpointIfLocal(key) {
+  if (!hasLocalWorkspace()) return null;
+  return readBuildCheckpoint(key);
+}
+function clearBuildCheckpointIfLocal(key) {
+  if (!hasLocalWorkspace()) return;
+  clearBuildCheckpoint(key);
+}
 function formatResumeNote(cp) {
   const files = cp.modifiedFiles.filter((f) => f && f.trim());
   const fileList = files.length > 0 ? files.slice(0, 12).map((f) => `  - ${f}`).join("\n") + (files.length > 12 ? `
@@ -21858,7 +21873,7 @@ async function startBuild(adapter2, config2, taskId, options = {}, clientName) {
     );
   } catch {
   }
-  writeBuildCheckpoint({
+  writeBuildCheckpointIfLocal({
     cwd: config2.projectRoot,
     taskId,
     branch: getCurrentBranch(config2.projectRoot),
@@ -22362,12 +22377,14 @@ async function completeBuild(adapter2, config2, taskId, input, options = {}, cli
     }
   } catch {
   }
-  try {
-    clearActiveTaskScope(config2.projectRoot);
-  } catch {
+  if (hasLocalWorkspace()) {
+    try {
+      clearActiveTaskScope(config2.projectRoot);
+    } catch {
+    }
   }
   try {
-    clearBuildCheckpoint({ cwd: config2.projectRoot, taskId });
+    clearBuildCheckpointIfLocal({ cwd: config2.projectRoot, taskId });
   } catch {
   }
   return {
@@ -22393,7 +22410,7 @@ async function completeBuild(adapter2, config2, taskId, input, options = {}, cli
     localPreview
   };
 }
-async function cancelBuild(adapter2, taskId, reason) {
+async function cancelBuild(adapter2, taskId, reason, projectRoot) {
   const task = await adapter2.getTask(taskId);
   if (!task) {
     throw new Error(`Task "${taskId}" not found.`);
@@ -22402,6 +22419,18 @@ async function cancelBuild(adapter2, taskId, reason) {
     status: "Cancelled",
     closureReason: reason
   });
+  if (projectRoot) {
+    if (hasLocalWorkspace()) {
+      try {
+        clearActiveTaskScope(projectRoot);
+      } catch {
+      }
+    }
+    try {
+      clearBuildCheckpointIfLocal({ cwd: projectRoot, taskId });
+    } catch {
+    }
+  }
   return { task, reason };
 }
 
@@ -23318,7 +23347,7 @@ async function handleBuildExecute(adapter2, config2, args, clientName) {
     }
     let resumeNote = "";
     if (scopeTask?.status === "In Progress") {
-      const existing = readBuildCheckpoint({ cwd: config2.projectRoot, taskId });
+      const existing = readBuildCheckpointIfLocal({ cwd: config2.projectRoot, taskId });
       if (existing) resumeNote = formatResumeNote(existing);
     }
     await tracker.recordStep("started");
@@ -23739,7 +23768,7 @@ function formatCompleteResult(result) {
   }
   return lines.join("\n");
 }
-async function handleBuildCancel(adapter2, args) {
+async function handleBuildCancel(adapter2, config2, args) {
   const taskId = args.task_id;
   if (!taskId) {
     return errorResponse("task_id is required.");
@@ -23749,7 +23778,7 @@ async function handleBuildCancel(adapter2, args) {
     return errorResponse("reason is required.");
   }
   try {
-    const result = await cancelBuild(adapter2, taskId, reason);
+    const result = await cancelBuild(adapter2, taskId, reason, config2.projectRoot);
     return textResponse(`Cancelled **${result.task.id}** (${result.task.title}).
 
 Reason: ${result.reason}`);
@@ -31137,7 +31166,7 @@ function createServer(adapter2, config2) {
         case "build_execute":
           return handleBuildExecute(adapter2, config2, safeArgs, server2.getClientVersion()?.name);
         case "build_cancel":
-          return handleBuildCancel(adapter2, safeArgs);
+          return handleBuildCancel(adapter2, config2, safeArgs);
         case "idea":
           return handleIdea(adapter2, config2, safeArgs);
         case "backlog_import":

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@papi-ai/server",
-  "version": "0.7.70",
+  "version": "0.7.71",
   "description": "PAPI MCP server — AI-powered sprint planning, build execution, and strategy review for software projects",
   "license": "Elastic-2.0",
   "mcpName": "io.github.getpapi/papi",