@papi-ai/server 0.7.84 → 0.7.98

package/dist/backfill-cycle-metrics.js

@@ -30,7 +30,6 @@ function resolveDeploymentProfile(env) {
     dataEndpoint: cleanUrl(env.dataEndpoint) ?? (hostedSupabaseUrl ? `${hostedSupabaseUrl}/functions/v1/data-proxy` : void 0) ?? (selfHosted ? void 0 : `${HOSTED_SUPABASE_URL}/functions/v1/data-proxy`),
     providers: {
       vercel: optionalBoolean(env.vercelEnabled, !selfHosted),
-      railway: optionalBoolean(env.railwayEnabled, !selfHosted),
       managedSupabase: optionalBoolean(env.managedSupabaseEnabled, !selfHosted)
     },
     auth: {
@@ -100,6 +99,21 @@ var init_dist = __esm({
   "../shared/dist/index.js"() {
     "use strict";
     CAPABILITY_REGISTRY = [
+      // task-3384: the PLAN step. The landing page has advertised these three since
+      // the v5 control beat (components/marketing/landing/ControlC.tsx) with a code
+      // comment reading "shipping soon, shown now" — the registry had no plan-step
+      // entry at all, so the Planning group rendered empty and was dropped. These
+      // are NOT new behaviour: each one gates a section of the planner instructions
+      // that already runs on every full-mode plan, so ON reproduces today exactly.
+      //
+      // All three default ON. Turning one off removes its step from the planner
+      // prompt, which is the whole mechanism — the planner does what the prompt
+      // tells it to, so an omitted step is genuinely not performed (and the matching
+      // plan-prepare progress checkpoint is not recorded, so the hub does not claim
+      // a step that never ran).
+      { key: "planHealthCheck", label: "Health check", description: "Flags cycle gaps, stale tasks and AD conflicts before planning.", step: "plan" },
+      { key: "backlogTriage", label: "Backlog triage", description: "Cleans up and prioritises unreviewed backlog items during planning.", step: "plan" },
+      { key: "buildOrder", label: "Build order", description: "Detects intra-cycle dependencies and sequences the build.", step: "plan" },
       { key: "prReviewer", label: "Auto code review", description: "Runs a code review of the branch diff before accepting.", step: "review" },
       { key: "securityScan", label: "Security scan", description: "Flags a security pass on risk-tier changes at review time.", step: "review" },
       { key: "changelog", label: "Changelog & cycle update", description: "Curates a cycle-update post when a release ships.", step: "release" },
@@ -135,12 +149,26 @@ var init_dist = __esm({
       { key: "autoBranch", label: "Auto branch", description: "Creates a feature branch per task/cycle at build start.", step: "build" },
       { key: "autoCommit", label: "Auto commit", description: "Commits your work automatically when a build completes.", step: "build" },
       { key: "autoPush", label: "Auto push & PR", description: "Pushes the branch and opens a pull request on build complete.", step: "build" },
-      { key: "papiMetaFraming", label: "PAPI self-referential framing", description: "Includes PAPI-meta build-discipline framing in handoff output.", step: "build" }
+      { key: "papiMetaFraming", label: "PAPI self-referential framing", description: "Includes PAPI-meta build-discipline framing in handoff output.", step: "build" },
+      // Editor-equal release. Two legitimate team shapes need opposite answers, so
+      // this is a PROJECT policy rather than a global rule:
+      //
+      //   OFF (default) — an editor's release opens a CONTRIBUTOR PR and PAPI records
+      //     the release when GitHub merges it. Right for an open//multi-contributor
+      //     product where the project owner is the last gate before production.
+      //   ON — an editor releases on exactly the owner's path. Right for a small team
+      //     of trusted peers who each run whole cycles end to end, where routing every
+      //     close back through one person is the bottleneck, not the safeguard.
+      //
+      // Defaults OFF so existing projects are byte-identical, and because widening who
+      // can ship to production must be a deliberate choice, never a silent upgrade.
+      // A VIEWER is denied either way — this moves the editor line only.
+      { key: "editorRelease", label: "Editors release like the owner", description: "Lets editors run a full release instead of opening a contributor PR.", step: "release", defaultEnabled: false }
     ];
     CAPABILITY_KEYS = CAPABILITY_REGISTRY.map((c) => c.key);
     HOSTED_APP_URL = "https://getpapi.ai";
     HOSTED_MCP_URL = "https://mcp.getpapi.ai";
-    HOSTED_SUPABASE_URL = "https://guewgygcpcmrcoppihzx.supabase.co";
+    HOSTED_SUPABASE_URL = "https://api.getpapi.ai";
     WAB_WINDOW_DAYS = 7;
     WAB_WEEK_MS = WAB_WINDOW_DAYS * 24 * 60 * 60 * 1e3;
     EFFORT_SCALE = {
@@ -171,6 +199,7 @@ __export(git_exports, {
   detectUnrecordedCommits: () => detectUnrecordedCommits,
   ensureLatestDevelop: () => ensureLatestDevelop,
   ensureTagAtHead: () => ensureTagAtHead,
+  findContributorReleasePullRequests: () => findContributorReleasePullRequests,
   findTaskCommitsOnBase: () => findTaskCommitsOnBase,
   getBranchDiff: () => getBranchDiff,
   getCommitFiles: () => getCommitFiles,
@@ -188,6 +217,7 @@ __export(git_exports, {
   getOriginRepoSlug: () => getOriginRepoSlug,
   getOriginUrl: () => getOriginUrl,
   getPathsDifferingFrom: () => getPathsDifferingFrom,
+  getPullRequestState: () => getPullRequestState,
   getPullRequestUrl: () => getPullRequestUrl,
   getRemoteBranchFiles: () => getRemoteBranchFiles,
   getRootCommitHash: () => getRootCommitHash,
@@ -1151,6 +1181,56 @@ function getPullRequestUrl(cwd, branch) {
     return null;
   }
 }
+function getPullRequestState(cwd, prUrl) {
+  try {
+    const output = execFileSync(
+      "gh",
+      ["pr", "view", prUrl, "--json", "url,state,mergedAt"],
+      { cwd, encoding: "utf-8" }
+    ).trim();
+    if (!output) return null;
+    const parsed = JSON.parse(output);
+    if (!parsed.url || !["OPEN", "CLOSED", "MERGED"].includes(parsed.state ?? "")) return null;
+    return {
+      url: parsed.url,
+      state: parsed.state,
+      mergedAt: parsed.mergedAt ?? null
+    };
+  } catch {
+    return null;
+  }
+}
+function findContributorReleasePullRequests(cwd, cycle) {
+  if (!Number.isInteger(cycle) || cycle <= 0) return [];
+  try {
+    const output = execFileSync(
+      "gh",
+      [
+        "pr",
+        "list",
+        "--state",
+        "all",
+        "--limit",
+        "20",
+        "--search",
+        `"Contributor release PR for cycle ${cycle}" in:body`,
+        "--json",
+        "url,state,mergedAt,headRefName"
+      ],
+      { cwd, encoding: "utf-8" }
+    ).trim();
+    if (!output) return [];
+    const parsed = JSON.parse(output);
+    return parsed.flatMap((pr) => pr.url && pr.headRefName && ["OPEN", "CLOSED", "MERGED"].includes(pr.state ?? "") ? [{
+      url: pr.url,
+      state: pr.state,
+      mergedAt: pr.mergedAt ?? null,
+      branch: pr.headRefName
+    }] : []);
+  } catch {
+    return [];
+  }
+}
 function squashMergePullRequest(cwd, branch) {
   const repo = getOriginRepoSlug(cwd);
   const baseArgs = ["pr", "merge", branch, "--squash", "--delete-branch"];
@@ -1405,6 +1485,16 @@ __export(proxy_adapter_exports, {
   createProxyAdapter: () => createProxyAdapter,
   wrapWithForwarding: () => wrapWithForwarding
 });
+function formatRateLimitError(route, response, errorBody, displayMessage = errorBody) {
+  let reason;
+  try {
+    const parsed = JSON.parse(errorBody);
+    if (typeof parsed.reason === "string") reason = parsed.reason;
+  } catch {
+  }
+  const retryAfter = response.headers.get("Retry-After");
+  return `Proxy rate limit on ${route}${reason ? ` (${reason})` : ""}${retryAfter ? `; retry after ${retryAfter}s` : ""}: ${displayMessage}`;
+}
 function snakeToCamel(str) {
   return str.replace(/_([a-z0-9])/g, (_, c) => c.toUpperCase());
 }
@@ -1446,7 +1536,7 @@ function wrapWithForwarding(instance) {
   return new Proxy(instance, {
     get(target, prop, receiver) {
       const existing = Reflect.get(target, prop, receiver);
-      if (existing !== void 0) return existing;
+      if (Reflect.has(target, prop)) return existing;
       if (typeof prop !== "string" || prop === "then" || prop.startsWith("_") || NO_FORWARD.has(prop)) {
         return existing;
       }
@@ -1518,6 +1608,10 @@ var init_proxy_adapter = __esm({
       "dismissRecommendation",
       "findPendingDocActionsForTask",
       "getActiveDecisions",
+      "getContributorRole",
+      "listContributorReleasePrs",
+      "recordContributorReleasePr",
+      "setContributorReleasePrStatus",
       "getActiveStage",
       "getBuildReportCountForTask",
       "getBuildReportsSince",
@@ -1574,8 +1668,14 @@ var init_proxy_adapter = __esm({
       "linkPhasesToStage",
       "listContributors",
       "listConventions",
+      "listDecisionPositions",
+      "upsertDecisionPosition",
+      "proposeDecision",
+      "resolveDecisionState",
+      "getUserEmailsByIds",
       "listMyBugReports",
       "listOwnerActionsForBlockerScan",
+      "listOwnerActionsForOwner",
       "logEntityReferences",
       "markAgendaTopicsAddressed",
       "markCycleLearningResolved",
@@ -1639,6 +1739,12 @@ var init_proxy_adapter = __esm({
       // (1) local-only
       "close",
       "initRls",
+      // task-3667: the exit-criteria evaluators probe adapter.sql to pick their
+      // transport branch (direct SQL vs adapter reads). Forwarding `sql` to the
+      // edge 403'd INSIDE sqlOf — every SQL-backed evaluator then threw
+      // 'evaluator failed' instead of engaging its hosted branch or degrading to
+      // an honest unevaluated reason. `sql` is local-only by definition.
+      "sql",
       // task-3207 (C357): commitBuildComplete, commitReviewSubmit, commitRelease have no
       // edge case handler and no ALLOWED_METHODS entry — forwarding them 403s at the edge
       // with no try/catch at the call site, crashing build_execute/review_submit/release
@@ -1657,7 +1763,7 @@ var init_proxy_adapter = __esm({
       "applyActiveDecisionUpdates",
       // getToolCallCount + updatePhaseStatus are ABSENT: they now have edge handlers and
       // are served through the forwarder (getToolCallCount = SUP-2026-026 handler #1).
-      "getContributorRole",
+      // getContributorRole is edge-wired and binds identity from the bearer.
       // task-3018 (C356): storeDocBody + getDocBodyUsage are now WIRED — edge case
       // handlers + ALLOWED_METHODS/WRITE_METHODS entries exist, so they forward and
       // hosted callers get body storage. Removed from this list, as task-3017 required.
@@ -1665,9 +1771,6 @@ var init_proxy_adapter = __esm({
       // of the owner-action queue. Six readers were wired C329 (task-2412) but the
       // producer stayed here, so the hosted Owner Action Queue was structurally empty
       // (AD-74 inverted). Now forwards; the edge binds user_id to the bearer ([C]).
-      "recordContributorReleasePr",
-      "setContributorReleasePrStatus",
-      "listContributorReleasePrs",
       "claimReview",
       "getSiblingAds",
       "getSiblingRepoTasks",
@@ -1728,6 +1831,15 @@ var init_proxy_adapter = __esm({
         this.projectId = config.projectId ?? "";
         this.onAuthRejected = config.onAuthRejected;
       }
+      /**
+       * Headers shared by every authenticated proxy route.
+       */
+      authenticatedHeaders() {
+        return {
+          "Content-Type": "application/json",
+          "Authorization": `Bearer ${this.apiKey}`
+        };
+      }
       /**
        * Does the hosted path genuinely serve `name`? (task-3022, C362)
        *
@@ -1766,10 +1878,7 @@ var init_proxy_adapter = __esm({
         try {
           const response = await fetch(`${this.endpoint}/project-list`, {
             method: "POST",
-            headers: {
-              "Content-Type": "application/json",
-              "Authorization": `Bearer ${this.apiKey}`
-            },
+            headers: this.authenticatedHeaders(),
             body: "{}",
             signal: AbortSignal.timeout(5e3)
           });
@@ -1808,10 +1917,7 @@ var init_proxy_adapter = __esm({
         const url = `${this.endpoint}/ensure-project`;
         const response = await fetch(url, {
           method: "POST",
-          headers: {
-            "Content-Type": "application/json",
-            "Authorization": `Bearer ${this.apiKey}`
-          },
+          headers: this.authenticatedHeaders(),
           body: JSON.stringify({
             ...projectName ? { projectName } : {},
             ...repoUrl ? { repoUrl } : {},
@@ -1831,6 +1937,9 @@ var init_proxy_adapter = __esm({
           } catch {
             message = errorBody;
           }
+          if (response.status === 429) {
+            throw new Error(formatRateLimitError("ensureProject", response, errorBody, message));
+          }
           throw new Error(`Auto-provision failed (${response.status}): ${message}`);
         }
         const body = await response.json();
@@ -1851,10 +1960,7 @@ var init_proxy_adapter = __esm({
         try {
           response = await fetch(url, {
             method: "POST",
-            headers: {
-              "Content-Type": "application/json",
-              "Authorization": `Bearer ${this.apiKey}`
-            },
+            headers: this.authenticatedHeaders(),
             body: JSON.stringify({
               projectId: this.projectId,
               method,
@@ -1897,6 +2003,9 @@ Check PAPI_PROJECT_ID in your .mcp.json config. Find your project ID in the PAPI
 (${response.status} on ${method}: ${message})`
             );
           }
+          if (response.status === 429) {
+            throw new Error(formatRateLimitError(method, response, errorBody, message));
+          }
           throw new Error(`Proxy error (${response.status}) on ${method}: ${message}`);
         }
         const body = await response.json();
@@ -1958,10 +2067,7 @@ Check PAPI_PROJECT_ID in your .mcp.json config. Find your project ID in the PAPI
         try {
           const response = await fetch(`${this.endpoint}/invoke`, {
             method: "POST",
-            headers: {
-              "Content-Type": "application/json",
-              "Authorization": `Bearer ${this.apiKey}`
-            },
+            headers: this.authenticatedHeaders(),
             body: JSON.stringify({ projectId, method: "projectExists", args: [] }),
             signal: AbortSignal.timeout(5e3)
           });
@@ -1992,8 +2098,8 @@ Check PAPI_PROJECT_ID in your .mcp.json config. Find your project ID in the PAPI
       writeCycleLogEntry(entry) {
         return this.invoke("writeCycleLogEntry", [entry]);
       }
-      updateActiveDecision(id, body, cycleNumber) {
-        return this.invoke("updateActiveDecision", [id, body, cycleNumber]);
+      updateActiveDecision(id, body, cycleNumber, action) {
+        return this.invoke("updateActiveDecision", [id, body, cycleNumber, action]);
       }
       upsertActiveDecision(id, body, title, confidence, cycleNumber) {
         return this.invoke("upsertActiveDecision", [id, body, title, confidence, cycleNumber]);
@@ -2120,7 +2226,7 @@ Check PAPI_PROJECT_ID in your .mcp.json config. Find your project ID in the PAPI
        * task-2288 (C308): emit a telemetry event via the proxy's /telemetry endpoint
        * using THIS adapter's per-request bearer (this.apiKey) — the same credential
        * invoke() uses. This is the fix for the hosted-transport blackout: on the
-       * multi-tenant Railway pod there is no PAPI_DATA_API_KEY env var, so the
+       * multi-tenant server has no PAPI_DATA_API_KEY env var, so the
        * env-var emitTelemetryEvent path (lib/telemetry.ts) dropped every event since
        * 2026-06-16. Fire-and-forget — never throws, never blocks the tool response.
        * Not routed through invoke() because /telemetry is a distinct endpoint and a
@@ -2136,10 +2242,7 @@ Check PAPI_PROJECT_ID in your .mcp.json config. Find your project ID in the PAPI
         if (event.projectId) payload["projectId"] = event.projectId;
         fetch(`${this.endpoint}/telemetry`, {
           method: "POST",
-          headers: {
-            "Content-Type": "application/json",
-            "Authorization": `Bearer ${this.apiKey}`
-          },
+          headers: this.authenticatedHeaders(),
           body: JSON.stringify(payload),
           signal: AbortSignal.timeout(5e3)
         }).then((res) => {
@@ -2226,6 +2329,19 @@ Check PAPI_PROJECT_ID in your .mcp.json config. Find your project ID in the PAPI
       getLatestDecisionScores() {
         return this.invoke("getLatestDecisionScores");
       }
+      // --- Decision lifecycle — propose / resolve / positions (task-3408, C366) ---
+      proposeDecision(id, decisionType, proposedByUserId, cycleNumber) {
+        return this.invoke("proposeDecision", [id, decisionType, proposedByUserId, cycleNumber]);
+      }
+      resolveDecisionState(id, state, actorUserId, cycleNumber) {
+        return this.invoke("resolveDecisionState", [id, state, actorUserId, cycleNumber]);
+      }
+      listDecisionPositions(decisionId) {
+        return this.invoke("listDecisionPositions", [decisionId]);
+      }
+      upsertDecisionPosition(decisionId, userId, status, comments) {
+        return this.invoke("upsertDecisionPosition", [decisionId, userId, status, comments ?? null]);
+      }
       logEntityReferences(refs) {
         return this.invoke("logEntityReferences", [refs]);
       }
@@ -2383,8 +2499,8 @@ Check PAPI_PROJECT_ID in your .mcp.json config. Find your project ID in the PAPI
       getCycleLearningPatterns() {
         return this.invoke("getCycleLearningPatterns", []);
       }
-      updateCycleLearningActionRef(learningId, taskDisplayId) {
-        return this.invoke("updateCycleLearningActionRef", [learningId, taskDisplayId]);
+      updateCycleLearningActionRef(learningId, taskDisplayId, opts) {
+        return this.invoke("updateCycleLearningActionRef", [learningId, taskDisplayId, opts ?? {}]);
       }
       // --- Strategy Review Drafts ---
       savePendingReviewResponse(cycleNumber, rawResponse) {
@@ -2421,7 +2537,18 @@ Check PAPI_PROJECT_ID in your .mcp.json config. Find your project ID in the PAPI
       }
       // --- Project metadata (path-identity guardrail) ---
       async getProjectInfo() {
-        return this.invoke("getProjectInfo", []);
+        const raw = await this.invoke("getProjectInfo", []);
+        if (!raw) return null;
+        return {
+          name: raw.name,
+          slug: raw.slug,
+          papi_dir: raw.papi_dir ?? raw.papiDir ?? null,
+          repo_url: raw.repo_url ?? raw.repoUrl ?? null,
+          capabilities: raw.capabilities ?? {},
+          discord_channel_id: raw.discord_channel_id ?? raw.discordChannelId ?? null,
+          decision_resolution_mode: raw.decision_resolution_mode ?? raw.decisionResolutionMode ?? "owner",
+          decision_type_resolvers: raw.decision_type_resolvers ?? raw.decisionTypeResolvers ?? {}
+        };
       }
       /**
        * task-2052 (C288): owner-gate identity for the proxy transport. Both sides
@@ -2461,10 +2588,7 @@ Check PAPI_PROJECT_ID in your .mcp.json config. Find your project ID in the PAPI
       async postRoute(route, payload) {
         const response = await fetch(`${this.endpoint}/${route}`, {
           method: "POST",
-          headers: {
-            "Content-Type": "application/json",
-            "Authorization": `Bearer ${this.apiKey}`
-          },
+          headers: this.authenticatedHeaders(),
           body: JSON.stringify(payload),
           signal: AbortSignal.timeout(15e3)
         });
@@ -2476,6 +2600,9 @@ Check PAPI_PROJECT_ID in your .mcp.json config. Find your project ID in the PAPI
           } catch {
             message = errorBody;
           }
+          if (response.status === 429) {
+            throw new Error(formatRateLimitError(route, response, errorBody, message));
+          }
           if (response.status === 401) this.onAuthRejected?.();
           throw new Error(`Proxy error (${response.status}) on ${route}: ${message}`);
         }
@@ -2490,7 +2617,11 @@ Check PAPI_PROJECT_ID in your .mcp.json config. Find your project ID in the PAPI
        */
       async getMeteredUsage() {
         const body = await this.postRoute("metering", {});
-        return { tier: body.tier ?? "free", monthlyToolCalls: body.monthlyToolCalls ?? 0 };
+        return {
+          tier: body.tier ?? "free",
+          monthlyToolCalls: body.monthlyToolCalls ?? 0,
+          projectLimitOverride: body.projectLimitOverride ?? null
+        };
       }
       async listUserProjects() {
         const body = await this.postRoute("project-list", {});
@@ -2621,7 +2752,6 @@ function serverDeploymentProfile() {
     dataEndpoint: process.env["PAPI_DATA_ENDPOINT"],
     hostedSupabaseUrl: process.env["PAPI_HOSTED_SUPABASE_URL"],
     vercelEnabled: process.env["PAPI_ENABLE_VERCEL"],
-    railwayEnabled: process.env["PAPI_ENABLE_RAILWAY"],
     managedSupabaseEnabled: process.env["PAPI_ENABLE_MANAGED_SUPABASE"]
   });
 }
@@ -2792,16 +2922,21 @@ Fix the PAPI_PROJECT_ID in your .mcp.json (or unset it and let PAPI resolve the
             });
           }
         } else {
-          if (!existing.root_commit_hash && rootHash) {
+          if (!existing.root_commit_hash && rootHash || !existing.repo_url && originUrl) {
             try {
-              await pgAdapter.updateProject(projectId, {
-                root_commit_hash: rootHash,
-                repo_url: originUrl ?? void 0,
-                resolution_method: "root_hash"
-              });
+              const update = {};
+              if (!existing.root_commit_hash && rootHash) {
+                update.root_commit_hash = rootHash;
+                update.resolution_method = "root_hash";
+              }
+              if (!existing.repo_url && originUrl) {
+                update.repo_url = originUrl;
+                if (!update.resolution_method && !existing.resolution_method) update.resolution_method = "repo_url";
+              }
+              await pgAdapter.updateProject(projectId, update);
             } catch (err) {
               console.error(
-                `[papi] \u26A0 Failed to backfill root_commit_hash: ${err instanceof Error ? err.message : String(err)}`
+                `[papi] \u26A0 Failed to backfill project resolution signals: ${err instanceof Error ? err.message : String(err)}`
               );
             }
           }
@@ -2842,7 +2977,7 @@ Fix the PAPI_PROJECT_ID in your .mcp.json (or unset it and let PAPI resolve the
         } catch {
         }
       }
-      const adapter = new PgPapiAdapter(config, projectId);
+      const adapter = new PgPapiAdapter({ ...config, userId: resolveUserId }, projectId);
       try {
         await adapter.initRls();
       } catch {
@@ -2871,7 +3006,7 @@ Fix the PAPI_PROJECT_ID in your .mcp.json (or unset it and let PAPI resolve the
 Get started in 3 steps:
   1. Sign up at ${dashboardUrl ? `${dashboardUrl}/login` : "your configured PAPI dashboard"}
   2. Complete the onboarding wizard \u2014 it generates your .mcp.json config
-  3. Download the config, place it in your project root, and restart Claude Code
+  3. Download the config, place it in your project root, and restart your AI client
 
 Already have an account? Make sure PAPI_DATA_API_KEY is set in your .mcp.json env config.`
         );