@papi-ai/server 0.7.98 → 0.7.103

package/dist/backfill-cycle-metrics.js

@@ -189,6 +189,7 @@ __export(git_exports, {
   checkoutBranch: () => checkoutBranch,
   commitSinglePath: () => commitSinglePath,
   commitStagedOnly: () => commitStagedOnly,
+  computeAheadBehind: () => computeAheadBehind,
   createAndCheckoutBranch: () => createAndCheckoutBranch,
   createPullRequest: () => createPullRequest,
   createTag: () => createTag,
@@ -199,8 +200,10 @@ __export(git_exports, {
   detectUnrecordedCommits: () => detectUnrecordedCommits,
   ensureLatestDevelop: () => ensureLatestDevelop,
   ensureTagAtHead: () => ensureTagAtHead,
+  fetchBaseBranch: () => fetchBaseBranch,
   findContributorReleasePullRequests: () => findContributorReleasePullRequests,
   findTaskCommitsOnBase: () => findTaskCommitsOnBase,
+  getBaseDivergence: () => getBaseDivergence,
   getBranchDiff: () => getBranchDiff,
   getCommitFiles: () => getCommitFiles,
   getCommitsSinceTag: () => getCommitsSinceTag,
@@ -235,6 +238,7 @@ __export(git_exports, {
   hasUnpushedCommits: () => hasUnpushedCommits,
   isBranchContentAlreadyInBase: () => isBranchContentAlreadyInBase,
   isBranchMergedInto: () => isBranchMergedInto,
+  isCommitReachable: () => isCommitReachable,
   isGhAvailable: () => isGhAvailable,
   isGitAvailable: () => isGitAvailable,
   isGitRepo: () => isGitRepo,
@@ -1297,6 +1301,19 @@ function isBranchMergedInto(cwd, branch, baseBranch) {
     return false;
   }
 }
+function isCommitReachable(cwd, commit, baseBranch) {
+  const recordedCommit = commit.trim();
+  if (!recordedCommit) return false;
+  try {
+    execFileSync("git", ["merge-base", "--is-ancestor", recordedCommit, baseBranch], {
+      cwd,
+      stdio: "ignore"
+    });
+    return true;
+  } catch {
+    return false;
+  }
+}
 function isBranchContentAlreadyInBase(cwd, branch, baseBranch) {
   const resolveCommit = (ref) => {
     try {
@@ -1323,6 +1340,55 @@ function isBranchContentAlreadyInBase(cwd, branch, baseBranch) {
     return false;
   }
 }
+function fetchBaseBranch(cwd, baseBranch, timeoutMs = GIT_FETCH_TIMEOUT_MS) {
+  if (!isGitAvailable() || !isGitRepo(cwd) || !hasRemote(cwd)) {
+    return { fetched: false, compareRef: baseBranch };
+  }
+  const result = spawnSync("git", ["fetch", "--quiet", "origin", baseBranch], {
+    cwd,
+    encoding: "utf-8",
+    timeout: timeoutMs
+  });
+  if (result.error || result.status !== 0) {
+    const raw = result.error?.message ?? ((result.stderr || "").trim() || `git exited ${result.status}`);
+    const isTimeout = result.signal === "SIGTERM" || /ETIMEDOUT/.test(raw);
+    return {
+      fetched: false,
+      compareRef: baseBranch,
+      warning: isTimeout ? `Fetch from origin timed out after ${Math.round(timeoutMs / 1e3)}s \u2014 comparing against the local '${baseBranch}' ref, which may be stale.` : `Fetch from origin failed \u2014 comparing against the local '${baseBranch}' ref, which may be stale. (${raw})`
+    };
+  }
+  return { fetched: true, compareRef: `origin/${baseBranch}` };
+}
+function computeAheadBehind(cwd, compareRef, ref = "HEAD") {
+  try {
+    const out = execFileSync(
+      "git",
+      ["rev-list", "--left-right", "--count", `${compareRef}...${ref}`],
+      { cwd, encoding: "utf-8", stdio: ["ignore", "pipe", "ignore"] }
+    ).trim();
+    const [behindStr, aheadStr] = out.split(/\s+/);
+    const behind = parseInt(behindStr, 10);
+    const ahead = parseInt(aheadStr, 10);
+    if (Number.isNaN(behind) || Number.isNaN(ahead)) return null;
+    return { ahead, behind };
+  } catch {
+    return null;
+  }
+}
+function getBaseDivergence(cwd, preferredBase, opts) {
+  const baseBranch = resolveBaseBranch(cwd, preferredBase);
+  const fetch2 = fetchBaseBranch(cwd, baseBranch, opts?.timeoutMs);
+  const divergence = computeAheadBehind(cwd, fetch2.compareRef, opts?.ref ?? "HEAD");
+  return {
+    baseBranch,
+    compareRef: fetch2.compareRef,
+    fetched: fetch2.fetched,
+    ahead: divergence?.ahead ?? null,
+    behind: divergence?.behind ?? null,
+    warning: fetch2.warning
+  };
+}
 function pickModuleCycleBranch(candidates, cycleNumber, module, memberSlug) {
   if (candidates.length === 0) return void 0;
   const expected = cycleBranchName(cycleNumber, module, memberSlug);
@@ -1427,7 +1493,7 @@ function getRemoteBranchFiles(cwd, branch, baseBranch) {
     return [];
   }
 }
-var AUTO_WRITTEN_PATHS, GIT_NETWORK_TIMEOUT_MS, MERGE_RETRY_DELAY_MS, MERGE_MAX_RETRIES;
+var AUTO_WRITTEN_PATHS, GIT_NETWORK_TIMEOUT_MS, MERGE_RETRY_DELAY_MS, MERGE_MAX_RETRIES, GIT_FETCH_TIMEOUT_MS;
 var init_git = __esm({
   "src/lib/git.ts"() {
     "use strict";
@@ -1435,6 +1501,7 @@ var init_git = __esm({
     GIT_NETWORK_TIMEOUT_MS = 6e4;
     MERGE_RETRY_DELAY_MS = 2e3;
     MERGE_MAX_RETRIES = 3;
+    GIT_FETCH_TIMEOUT_MS = 5e3;
   }
 });
 

package/dist/index.js

@@ -850,7 +850,7 @@ var init_dist = __esm({
       { key: "editorRelease", label: "Editors release like the owner", description: "Lets editors run a full release instead of opening a contributor PR.", step: "release", defaultEnabled: false }
     ];
     CAPABILITY_KEYS = CAPABILITY_REGISTRY.map((c) => c.key);
-    ASSIGNABLE_CONTRIBUTOR_ROLES = ["editor", "viewer"];
+    ASSIGNABLE_CONTRIBUTOR_ROLES = ["release_manager", "editor", "viewer"];
     SENSITIVE_CHANGELOG_PATTERNS = [
       // ── Test-user machinery ────────────────────────────────────────────────
       /@test\.papi\.dev/i,
@@ -948,6 +948,7 @@ __export(git_exports, {
   checkoutBranch: () => checkoutBranch,
   commitSinglePath: () => commitSinglePath,
   commitStagedOnly: () => commitStagedOnly,
+  computeAheadBehind: () => computeAheadBehind,
   createAndCheckoutBranch: () => createAndCheckoutBranch,
   createPullRequest: () => createPullRequest,
   createTag: () => createTag,
@@ -958,8 +959,10 @@ __export(git_exports, {
   detectUnrecordedCommits: () => detectUnrecordedCommits,
   ensureLatestDevelop: () => ensureLatestDevelop,
   ensureTagAtHead: () => ensureTagAtHead,
+  fetchBaseBranch: () => fetchBaseBranch,
   findContributorReleasePullRequests: () => findContributorReleasePullRequests,
   findTaskCommitsOnBase: () => findTaskCommitsOnBase,
+  getBaseDivergence: () => getBaseDivergence,
   getBranchDiff: () => getBranchDiff,
   getCommitFiles: () => getCommitFiles,
   getCommitsSinceTag: () => getCommitsSinceTag,
@@ -994,6 +997,7 @@ __export(git_exports, {
   hasUnpushedCommits: () => hasUnpushedCommits,
   isBranchContentAlreadyInBase: () => isBranchContentAlreadyInBase,
   isBranchMergedInto: () => isBranchMergedInto,
+  isCommitReachable: () => isCommitReachable,
   isGhAvailable: () => isGhAvailable,
   isGitAvailable: () => isGitAvailable,
   isGitRepo: () => isGitRepo,
@@ -2056,6 +2060,19 @@ function isBranchMergedInto(cwd, branch, baseBranch) {
     return false;
   }
 }
+function isCommitReachable(cwd, commit, baseBranch) {
+  const recordedCommit = commit.trim();
+  if (!recordedCommit) return false;
+  try {
+    execFileSync("git", ["merge-base", "--is-ancestor", recordedCommit, baseBranch], {
+      cwd,
+      stdio: "ignore"
+    });
+    return true;
+  } catch {
+    return false;
+  }
+}
 function isBranchContentAlreadyInBase(cwd, branch, baseBranch) {
   const resolveCommit = (ref) => {
     try {
@@ -2082,6 +2099,55 @@ function isBranchContentAlreadyInBase(cwd, branch, baseBranch) {
     return false;
   }
 }
+function fetchBaseBranch(cwd, baseBranch, timeoutMs = GIT_FETCH_TIMEOUT_MS) {
+  if (!isGitAvailable() || !isGitRepo(cwd) || !hasRemote(cwd)) {
+    return { fetched: false, compareRef: baseBranch };
+  }
+  const result = spawnSync("git", ["fetch", "--quiet", "origin", baseBranch], {
+    cwd,
+    encoding: "utf-8",
+    timeout: timeoutMs
+  });
+  if (result.error || result.status !== 0) {
+    const raw = result.error?.message ?? ((result.stderr || "").trim() || `git exited ${result.status}`);
+    const isTimeout = result.signal === "SIGTERM" || /ETIMEDOUT/.test(raw);
+    return {
+      fetched: false,
+      compareRef: baseBranch,
+      warning: isTimeout ? `Fetch from origin timed out after ${Math.round(timeoutMs / 1e3)}s \u2014 comparing against the local '${baseBranch}' ref, which may be stale.` : `Fetch from origin failed \u2014 comparing against the local '${baseBranch}' ref, which may be stale. (${raw})`
+    };
+  }
+  return { fetched: true, compareRef: `origin/${baseBranch}` };
+}
+function computeAheadBehind(cwd, compareRef, ref = "HEAD") {
+  try {
+    const out = execFileSync(
+      "git",
+      ["rev-list", "--left-right", "--count", `${compareRef}...${ref}`],
+      { cwd, encoding: "utf-8", stdio: ["ignore", "pipe", "ignore"] }
+    ).trim();
+    const [behindStr, aheadStr] = out.split(/\s+/);
+    const behind = parseInt(behindStr, 10);
+    const ahead = parseInt(aheadStr, 10);
+    if (Number.isNaN(behind) || Number.isNaN(ahead)) return null;
+    return { ahead, behind };
+  } catch {
+    return null;
+  }
+}
+function getBaseDivergence(cwd, preferredBase, opts) {
+  const baseBranch = resolveBaseBranch(cwd, preferredBase);
+  const fetch2 = fetchBaseBranch(cwd, baseBranch, opts?.timeoutMs);
+  const divergence = computeAheadBehind(cwd, fetch2.compareRef, opts?.ref ?? "HEAD");
+  return {
+    baseBranch,
+    compareRef: fetch2.compareRef,
+    fetched: fetch2.fetched,
+    ahead: divergence?.ahead ?? null,
+    behind: divergence?.behind ?? null,
+    warning: fetch2.warning
+  };
+}
 function pickModuleCycleBranch(candidates, cycleNumber, module, memberSlug) {
   if (candidates.length === 0) return void 0;
   const expected = cycleBranchName(cycleNumber, module, memberSlug);
@@ -2186,7 +2252,7 @@ function getRemoteBranchFiles(cwd, branch, baseBranch) {
     return [];
   }
 }
-var AUTO_WRITTEN_PATHS, GIT_NETWORK_TIMEOUT_MS, MERGE_RETRY_DELAY_MS, MERGE_MAX_RETRIES;
+var AUTO_WRITTEN_PATHS, GIT_NETWORK_TIMEOUT_MS, MERGE_RETRY_DELAY_MS, MERGE_MAX_RETRIES, GIT_FETCH_TIMEOUT_MS;
 var init_git = __esm({
   "src/lib/git.ts"() {
     "use strict";
@@ -2194,6 +2260,7 @@ var init_git = __esm({
     GIT_NETWORK_TIMEOUT_MS = 6e4;
     MERGE_RETRY_DELAY_MS = 2e3;
     MERGE_MAX_RETRIES = 3;
+    GIT_FETCH_TIMEOUT_MS = 5e3;
   }
 });
 
@@ -10193,7 +10260,7 @@ function isProjectOwner(callerUserId, ownerUserId) {
   if (caller.length === 0 || owner.length === 0) return false;
   return caller === owner;
 }
-var CYCLE_ROLES = ["owner", "editor"];
+var CYCLE_ROLES = ["owner", "release_manager", "editor"];
 async function resolveCycleGate(adapter2, gate) {
   if (!gate.enforced) return { allowed: true, role: null };
   if (gate.callerIsOwner) return { allowed: true, role: "owner" };
@@ -10218,6 +10285,13 @@ async function resolveCycleGate(adapter2, gate) {
     };
   }
 }
+function formatOwnerGateResolutionError(gate) {
+  if (!gate.resolutionError) return null;
+  if (gate.transport === "proxy") {
+    return "Hosted bearer identity could not be verified. Retry once connectivity is restored.";
+  }
+  return `Identity resolution failed (${gate.resolutionError}) \u2014 the gate fails closed. Retry once connectivity is restored.`;
+}
 async function resolveCallerUserId(adapter2, config2) {
   const gate = await resolveOwnerGate(adapter2, config2);
   if (gate.enforced && !gate.callerUserId) {
@@ -10229,7 +10303,7 @@ async function resolveOwnerGate(adapter2, config2) {
   if (adapterSupports(adapter2, "getOwnerIdentity")) {
     try {
       const identity = await adapter2.getOwnerIdentity();
-      const callerUserId = identity.callerUserId ?? config2.userId ?? null;
+      const callerUserId = identity.callerUserId ?? null;
       return {
         enforced: true,
         callerIsOwner: isProjectOwner(callerUserId, identity.ownerUserId),
@@ -10241,7 +10315,7 @@ async function resolveOwnerGate(adapter2, config2) {
       return {
         enforced: true,
         callerIsOwner: false,
-        callerUserId: config2.userId ?? null,
+        callerUserId: null,
         ownerUserId: null,
         resolutionError: err instanceof Error ? err.message : String(err),
         transport: "proxy"
@@ -12193,11 +12267,11 @@ ${cleanContent}`;
       if (!task.buildHandoff) {
         await adapter2.updateTask?.(taskId, {
           buildHandoff: h.buildHandoff,
-          cycle: cycleNumber
+          cycle: newCycleNumber
         });
         repairedHandoffs.push(taskId);
-      } else if (task.cycle !== cycleNumber) {
-        await adapter2.updateTask?.(taskId, { cycle: cycleNumber });
+      } else if (task.cycle !== newCycleNumber) {
+        await adapter2.updateTask?.(taskId, { cycle: newCycleNumber });
         repairedCycles.push(taskId);
       }
     } catch {
@@ -20948,6 +21022,27 @@ async function resolveCycleToClose(adapter2, version, callerUserId) {
   }
   return inferCycleFromVersion(version);
 }
+async function findUnreachableDoneTaskCommits(config2, adapter2, cycleNumber, baseBranch) {
+  if (cycleNumber <= 0 || !adapter2.getBuildReportsSince) return { unreachable: [] };
+  const [tasks, reports] = await Promise.all([
+    adapter2.queryBoard({ cycleSince: cycleNumber, compact: true }),
+    adapter2.getBuildReportsSince(cycleNumber)
+  ]);
+  const doneTasks = tasks.filter((task) => task.cycle === cycleNumber && task.status === "Done");
+  const cycleReports = reports.filter((report) => report.cycle === cycleNumber && report.completed === "Yes");
+  const fetch2 = fetchBaseBranch(config2.projectRoot, baseBranch);
+  const unreachable = doneTasks.flatMap((task) => {
+    const report = cycleReports.filter((candidate) => candidate.taskId === task.id || candidate.taskId === task.displayId || candidate.displayId === task.displayId).filter((candidate) => Boolean(candidate.commitSha?.trim())).sort((a, b2) => {
+      const aDate = a.createdAt ?? a.date;
+      const bDate = b2.createdAt ?? b2.date;
+      return aDate.localeCompare(bDate);
+    }).at(-1);
+    const commitSha = report?.commitSha?.trim();
+    if (!commitSha || isCommitReachable(config2.projectRoot, commitSha, fetch2.compareRef)) return [];
+    return [{ taskId: task.displayId, commitSha }];
+  });
+  return { unreachable, fetchWarning: fetch2.warning };
+}
 async function closeCycleState(config2, adapter2, version, cycleNum, options) {
   const warnings = [];
   const force = options?.force ?? false;
@@ -21143,7 +21238,7 @@ async function contributorAutoPrRelease(config2, adapter2, version, productionBa
     const title = `Release ${version}: ${branch}`;
     const body = `Contributor release PR for cycle ${cycleNum || "?"} (\`${branch}\`).
 
-Opened by a non-owner editor via \`release\` (task-2244). The project owner reviews and merges this into \`${productionBaseBranch}\`; the contributor's own cycle is already marked complete in PAPI.`;
+Opened by a non-owner release-capable member via \`release\` (task-2244). The project owner reviews and merges this into \`${productionBaseBranch}\`; the contributor's own cycle is already marked complete in PAPI.`;
     const created = createPullRequest(config2.projectRoot, branch, productionBaseBranch, title, body);
     prs.push(
       created.success ? { branch, url: created.message.trim() || getPullRequestUrl(config2.projectRoot, branch) } : { branch, url: null, error: created.message }
@@ -21244,6 +21339,25 @@ async function createRelease(config2, branch, version, adapter2, cycleNum, optio
       }
     }
   }
+  if (adapter2 && resolvedCycleNum > 0) {
+    const resolvedBase = resolveBaseBranch(config2.projectRoot, branch);
+    const { unreachable, fetchWarning } = await findUnreachableDoneTaskCommits(
+      config2,
+      adapter2,
+      resolvedCycleNum,
+      resolvedBase
+    );
+    if (fetchWarning) warnings.push(fetchWarning);
+    if (unreachable.length > 0) {
+      const details = unreachable.map(({ taskId, commitSha }) => `  - ${taskId}: ${commitSha}`).join("\n");
+      throw new Error(
+        `Release blocked \u2014 ${unreachable.length} Done task implementation commit(s) are not reachable from ${resolvedBase}:
+${details}
+
+Merge the recorded commit into the release branch, or correct the build receipt before retrying release.`
+      );
+    }
+  }
   if (adapter2 && resolvedCycleNum > 0) {
     try {
       const stampedAt = (/* @__PURE__ */ new Date()).toISOString();
@@ -21589,6 +21703,7 @@ function sanitiseBranchSuffix(branch) {
   return branch.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "");
 }
 var CYCLE_UPDATES_CHANNEL_ENV = "DISCORD_CYCLE_UPDATES_CHANNEL_ID";
+var RELEASE_CAPABLE_ROLES = /* @__PURE__ */ new Set(["editor", "release_manager"]);
 function buildCycleUpdateCurationDirective(version, cycleClosed, projectChannelId) {
   const channelId = projectChannelId?.trim() || process.env[CYCLE_UPDATES_CHANNEL_ENV]?.trim();
   if (!channelId) return null;
@@ -21772,9 +21887,10 @@ async function handleRelease(adapter2, config2, args, clientName) {
       const editorsReleaseLikeOwner = isCapabilityEnabled(releaseCaps, "editorRelease");
       const cycleGate = editorsReleaseLikeOwner ? await resolveCycleGate(adapter2, gate) : { allowed: gate.callerIsOwner, role: gate.callerIsOwner ? "owner" : null };
       if (gate.enforced && !cycleGate.allowed) {
-        const resolutionNote = gate.resolutionError ? `
+        const resolutionMessage = formatOwnerGateResolutionError(gate);
+        const resolutionNote = resolutionMessage ? `
 
-Identity resolution failed (${gate.resolutionError}) \u2014 the gate fails closed. Retry once connectivity is restored.` : "";
+${resolutionMessage}` : "";
         if (gate.transport === "pg" && gate.callerUserId === null) {
           return errorResponse(
             `Release needs to know who you are, and this setup has no PAPI_USER_ID yet.
@@ -21788,17 +21904,18 @@ Then reconnect your AI tool and run release again. (Direct/pg setups read identi
         }
         tracker.mark("contributor-role-gate");
         const callerRole = adapter2.getContributorRole && gate.callerUserId ? await adapter2.getContributorRole(gate.callerUserId).catch(() => null) : null;
-        if (callerRole !== "editor") {
+        if (!RELEASE_CAPABLE_ROLES.has(callerRole ?? "")) {
           const ownerHint = gate.transport === "pg" ? `If you ARE the owner, set PAPI_USER_ID to your account UUID in .mcp.json (getpapi.ai \u2192 Settings \u2192 Account).` : `If you ARE the owner, your identity comes from your API key \u2014 check you are using YOUR key for YOUR project.`;
-          const roleNote = callerRole === "viewer" ? `Your role on this project is "viewer", which cannot release. Ask the owner (or an editor) to release, or ask for editor access.` : `Your identity does not match this project's owner, and you do not have an editor role to open a release PR. If you are a contributor, ask the owner for editor access (or push your branch and open a PR manually). ` + ownerHint;
+          const roleNote = callerRole === "viewer" ? `Your role on this project is "viewer", which cannot release. Ask the owner (or an editor or release manager) to release, or ask for release access.` : `Your identity does not match this project's owner, and you do not have an editor or release_manager role to open a release PR. If you are a contributor, ask the owner for editor or release_manager access (or push your branch and open a PR manually). ` + ownerHint;
           return errorResponse(
-            `Release to ${productionBaseBranch} needs an owner or editor role.
+            `Release to ${productionBaseBranch} needs an owner, editor, or release_manager role.
 
 ` + roleNote + `
 
 Releasing to a non-base branch (e.g. dev) is unaffected.` + resolutionNote
           );
         }
+        const releaseRole = callerRole === "release_manager" ? "release manager" : "editor";
         tracker.mark("contributor-pr-reconciliation");
         try {
           const reconciled = await reconcileContributorReleasePrs(config2, adapter2, gate.callerUserId, cycleToClose);
@@ -21833,7 +21950,7 @@ ${buildHostedGitDirective({
             return textResponse(
               `## Release ${version} \u2014 contributor PR merged
 
-PAPI detected that ${latest.prUrl} was merged on GitHub and reconciled the contributor release. GitHub granted the merge permission; your PAPI **editor** role granted the release workflow.
+PAPI detected that ${latest.prUrl} was merged on GitHub and reconciled the contributor release. GitHub granted the merge permission; your PAPI **${releaseRole}** role granted the release workflow.
 
 ${latest.cycle ? `Cycle ${latest.cycle}` : "The contributor cycle"} remains **complete**, and the release is now recorded as **released** in PAPI.` + localHandoff + `
 
@@ -21847,7 +21964,7 @@ Next: run \`plan\` to start your next cycle.`
 
 ${prLines}
 
-Your PAPI **editor** role allowed this release PR. Merge permission is controlled separately by GitHub: if GitHub lets you merge, review and merge it there; otherwise a repository maintainer must merge it.
+Your PAPI **${releaseRole}** role allowed this release PR. Merge permission is controlled separately by GitHub: if GitHub lets you merge, review and merge it there; otherwise a repository maintainer must merge it.
 
 After it is merged, run \`release\` again so PAPI can detect the merge and finish the release record.`
             );
@@ -21857,7 +21974,7 @@ After it is merged, run \`release\` again so PAPI can detect the merge and finis
         }
         if (isHostedTransport()) {
           return errorResponse(
-            `Release blocked \u2014 your PAPI editor role is valid, but this hosted connection cannot access your local checkout or GitHub CLI to open the release PR. Run release from a workspace-connected MCP client for this repository, or ask the project owner to release it.`
+            `Release blocked \u2014 your PAPI ${releaseRole} role is valid, but this hosted connection cannot access your local checkout or GitHub CLI to open the release PR. Run release from a workspace-connected MCP client for this repository, or ask the project owner to release it.`
           );
         }
         tracker.mark("contributor-auto-pr");
@@ -21877,7 +21994,7 @@ After it is merged, run \`release\` again so PAPI can detect the merge and finis
           return textResponse(
             `## Release ${version} \u2014 contributor PR opened
 
-You released as an **editor**, so PAPI opened a pull request to \`${productionBaseBranch}\` instead of merging directly. GitHub merge permission is separate from your PAPI role: merge it yourself if GitHub allows, otherwise a repository maintainer must merge it.
+You released as a **${releaseRole}**, so PAPI opened a pull request to \`${productionBaseBranch}\` instead of merging directly. GitHub merge permission is separate from your PAPI role: merge it yourself if GitHub allows, otherwise a repository maintainer must merge it.
 
 **Pull request(s):**
 ${prLines.join("\n")}
@@ -22929,13 +23046,18 @@ async function startBuild(adapter2, config2, taskId, options = {}, clientName) {
   if (!task) {
     throw new Error(`Task "${taskId}" not found on the Cycle Board.`);
   }
+  const branchLines = [];
+  const gate = await resolveOwnerGate(adapter2, config2);
   if (task.assigneeId) {
-    const gate = await resolveOwnerGate(adapter2, config2);
     if (!gate.callerUserId || gate.callerUserId !== task.assigneeId) {
       throw new Error(
         `Task "${taskId}" (${task.title}) is claimed by another member \u2014 only its assignee can build it. Have the claimer build it, or run \`task_unclaim\` to release it first.`
       );
     }
+  } else if (gate.enforced) {
+    branchLines.push(
+      `\u2139\uFE0F **${taskId}** has no assignee \u2014 this is an unclaimed pool task, buildable by anyone. Run \`task_claim\` first for exclusive ownership while you build it. (Not blocking.)`
+    );
   }
   if (task.status === "Done" || task.status === "Archived") {
     throw new Error(`Task "${taskId}" (${task.title}) is already ${task.status}. Cannot execute a completed task.`);
@@ -22973,7 +23095,6 @@ async function startBuild(adapter2, config2, taskId, options = {}, clientName) {
     err.unresolvedDeps = unresolvedDeps;
     throw err;
   }
-  const branchLines = [];
   const startCaps = adapter2.getProjectInfo ? (await adapter2.getProjectInfo().catch(() => null))?.capabilities ?? {} : {};
   const autoBranchEnabled = isCapabilityEnabled(startCaps, "autoBranch");
   if (options.light) {
@@ -27490,11 +27611,17 @@ async function recordAdHoc(adapter2, input) {
   const promoted = targetCycle !== null;
   const landInReview = held || promoted && input.stage === "release";
   let task;
+  const warnings = [];
   if (input.taskId) {
     const existing = await adapter2.getTask(input.taskId);
     if (!existing) {
       throw new Error(`Task "${input.taskId}" not found on the board. Check the task ID and try again.`);
     }
+    if (!existing.assigneeId) {
+      warnings.push(
+        `\u2139\uFE0F ${input.taskId} has no assignee \u2014 recording ad-hoc work against an unclaimed pool task. If someone else might be building it too, check for an open PR/branch on the same files before merging.`
+      );
+    }
     const updatePayload = {
       notes: existing.notes ? `${existing.notes}
 [ad-hoc] ${input.notes || "Work recorded via ad_hoc"}` : `[ad-hoc] ${input.notes || "Work recorded via ad_hoc"}`
@@ -27565,7 +27692,7 @@ async function recordAdHoc(adapter2, input) {
     scopeAccuracy: "accurate"
   };
   await adapter2.appendBuildReport(report);
-  return { task, report };
+  return { task, report, warnings: warnings.length > 0 ? warnings : void 0 };
 }
 
 // src/tools/ad-hoc.ts
@@ -27776,6 +27903,7 @@ async function handleAdHoc(adapter2, config2, args) {
     } catch {
     }
   }
+  const warningsNote = result.warnings?.length ? "\n\n" + result.warnings.map((w) => `> ${w}`).join("\n") : "";
   const truncateWarning = notesTruncated ? ` (notes truncated to ${MAX_NOTES_LENGTH} chars)` : "";
   const taskModule = result.task.module || "Core";
   const typeLabel = result.task.taskType || typeRaw;
@@ -27808,7 +27936,7 @@ async function handleAdHoc(adapter2, config2, args) {
     } catch {
     }
     return textResponse(
-      `**${result.task.id}:** "${result.task.title}" held for review (${effortRaw}, ${priorityRaw}, ${typeLabel}, ${taskModule})${overrideNote}.${truncateWarning}${promoNote} Build report attached.
+      `**${result.task.id}:** "${result.task.title}" held for review (${effortRaw}, ${priorityRaw}, ${typeLabel}, ${taskModule})${overrideNote}.${truncateWarning}${promoNote} Build report attached.` + warningsNote + `
 
 ## Held for the next cycle \u2014 branch + commit, do NOT merge
 The task is recorded **In Review** and pinned to **Cycle ${result.task.cycle}**, so the planner won't re-plan it and it rides that cycle's review \u2192 release bundled with planned work.
@@ -27826,7 +27954,7 @@ _To correct: board_edit ${result.task.id} with updated fields._` + await recordA
     );
   }
   return textResponse(
-    `**${result.task.id}:** "${result.task.title}" recorded (${effortRaw}, ${priorityRaw}, ${typeLabel}, ${taskModule})${overrideNote}.${truncateWarning}${promoNote} Build report attached.
+    `**${result.task.id}:** "${result.task.title}" recorded (${effortRaw}, ${priorityRaw}, ${typeLabel}, ${taskModule})${overrideNote}.${truncateWarning}${promoNote} Build report attached.` + warningsNote + `
 _To correct: board_edit ${result.task.id} with updated fields._` + await recordAdHocProposal(adapter2, args, { cycleNumber: result.task.cycle ?? 0, sourceTaskId: result.task.id }) + await adHocDecisionSection(target, result.task)
   );
 }
@@ -29226,14 +29354,14 @@ ${overlap}`;
         const roleGate = await resolveCycleGate(adapter2, gate);
         const callerMayRelease = editorReleaseEnabled ? roleGate.allowed : !gate.enforced || gate.callerIsOwner;
         if (cycleTasks.length > 0 && cycleTasks.every((t) => t.status === "Done") && !callerMayRelease) {
-          const why = roleGate.role === "viewer" ? `your role on this project is "viewer"` : roleGate.role === "editor" && !editorReleaseEnabled ? `your "editor" role is valid, but this project keeps auto-release owner-only because "Editors release like the owner" is off` : `your role on this project could not be confirmed`;
+          const why = roleGate.role === "viewer" ? `your role on this project is "viewer"` : (roleGate.role === "editor" || roleGate.role === "release_manager") && !editorReleaseEnabled ? `your "${roleGate.role}" role is valid, but this project keeps auto-release owner-only because "Editors release like the owner" is off` : `your role on this project could not be confirmed`;
           const resolutionNote = roleGate.resolutionError ? ` (Role resolution failed: ${roleGate.resolutionError} \u2014 the gate fails closed.)` : "";
-          const nextStep = roleGate.role === "editor" && !editorReleaseEnabled ? `Run \`release\` explicitly to open your contributor PR.` : `Push your branch and open a PR, or ask for editor access.`;
+          const nextStep = (roleGate.role === "editor" || roleGate.role === "release_manager") && !editorReleaseEnabled ? `Run \`release\` explicitly to open your contributor PR.` : `Push your branch and open a PR, or ask for editor or release manager access.`;
           autoReleaseNote = `
 
 ---
 
-\u2705 Verdict recorded. All cycle tasks are Done, but no release was cut \u2014 **auto-release needs an owner or editor role**, and ${why}. ${nextStep}${resolutionNote}`;
+\u2705 Verdict recorded. All cycle tasks are Done, but no release was cut \u2014 **auto-release needs an owner, editor, or release manager role**, and ${why}. ${nextStep}${resolutionNote}`;
         } else if (cycleTasks.length > 0 && cycleTasks.every((t) => t.status === "Done")) {
           let planRunCount = null;
           if (adapterSupports(adapter2, "countPlanRunsForCycle")) {
@@ -31347,6 +31475,7 @@ async function getHierarchyPosition(adapter2, projectId) {
   }
 }
 var GIT_TAG_TIMEOUT_MS = 2e3;
+var ORIGIN_FETCH_TIMEOUT_MS = 3e3;
 async function checkNpmVersionDrift() {
   try {
     const pkgPath = join18(new URL(".", import.meta.url).pathname, "..", "..", "package.json");
@@ -31563,6 +31692,17 @@ async function computePendingDecisionsWarning(adapter2, callerUserId, decisions)
   if (awaiting === 0) return void 0;
   return `\u{1F4CB} ${awaiting} decision${awaiting === 1 ? "" : "s"} awaiting your position \u2014 run \`ad_view\` then \`decision_resolve\` to agree/object/abstain.`;
 }
+function formatOriginDivergenceWarning(d) {
+  if (d.behind != null && d.behind > 0) {
+    const aheadNote = d.ahead && d.ahead > 0 ? ` (and ${d.ahead} ahead)` : "";
+    return `\u26A0\uFE0F This checkout is ${d.behind} commit${d.behind === 1 ? "" : "s"} behind \`origin/${d.baseBranch}\`${aheadNote} \u2014 pull before trusting "Done"/merged state here.`;
+  }
+  if (d.warning) return `\u2139\uFE0F ${d.warning}`;
+  if (d.fetched && d.behind == null) {
+    return `\u2139\uFE0F Could not determine how far this checkout is behind \`origin/${d.baseBranch}\` (e.g. a shallow clone) \u2014 treat "Done"/merged state here as unverified.`;
+  }
+  return void 0;
+}
 async function handleOrient(rawAdapter, config2, args = {}, clientName, serverVersion = "unknown") {
   let resolvedAdapter = rawAdapter;
   let projectOverrideNote = "";
@@ -31659,6 +31799,7 @@ async function handleOrient(rawAdapter, config2, args = {}, clientName, serverVe
       ttfvOutcome,
       latestTagOutcome,
       versionDriftOutcome,
+      originDivergenceOutcome,
       researchSignalsOutcome,
       recsOutcome,
       pendingReviewOutcome,
@@ -31813,6 +31954,18 @@ async function handleOrient(rawAdapter, config2, args = {}, clientName, serverVe
       // version-drift is enrichment, gated behind `full`/deep_housekeeping.
       tracked("git-tag", async () => getLatestTag(config2.projectRoot, GIT_TAG_TIMEOUT_MS)),
       tracked("npm-version-drift", async () => fullEnrichment ? checkNpmVersionDrift() : void 0),
+      // Nova/vibe-tycoon feedback (task-XXXX): how far is this checkout
+      // actually behind origin/<base>? Deliberately UNGATED by full/
+      // deep_housekeeping — runs on every orient call by default, because the
+      // fetch is bounded (ORIGIN_FETCH_TIMEOUT_MS) and fails soft. No remote
+      // configured is the common no-op case: zero network I/O, zero latency.
+      // Escape hatch mirrors PAPI_ORIENT_FANOUT_CONCURRENCY's env-var pattern,
+      // default ON (opposite polarity from deep_housekeeping's opt-in — this
+      // one must not require opting in).
+      tracked("origin-divergence", async () => {
+        if (!hasLocalWorkspace() || process.env.PAPI_ORIENT_ORIGIN_CHECK === "false") return void 0;
+        return getBaseDivergence(config2.projectRoot, config2.baseBranch, { timeoutMs: ORIGIN_FETCH_TIMEOUT_MS });
+      }),
       // Research Signals — research docs with pending actions since last strategy review.
       // task-2172: heavy (doc search + AD cross-reference) and rarely actioned
       // mid-session — gated behind `full`/deep_housekeeping to keep the default lean.
@@ -32010,6 +32163,9 @@ async function handleOrient(rawAdapter, config2, args = {}, clientName, serverVe
     if (proxyWarning) buildResult.warnings.push(proxyWarning);
     const p1Warning = p1BacklogOutcome.status === "fulfilled" ? p1BacklogOutcome.value : void 0;
     if (p1Warning) buildResult.warnings.push(p1Warning);
+    const originDivergence = originDivergenceOutcome.status === "fulfilled" ? originDivergenceOutcome.value : void 0;
+    const originDivergenceWarning = originDivergence ? formatOriginDivergenceWarning(originDivergence) : void 0;
+    if (originDivergenceWarning) buildResult.warnings.push(originDivergenceWarning);
     const pendingDecisionsWarning = pendingDecisionsOutcome.status === "fulfilled" ? pendingDecisionsOutcome.value : void 0;
     if (pendingDecisionsWarning) buildResult.warnings.push(pendingDecisionsWarning);
     const ownerActionsWarning = ownerActionsOutcome.status === "fulfilled" ? ownerActionsOutcome.value : void 0;
@@ -33350,7 +33506,7 @@ async function resolveDecisionAuthority(adapter2, gate, decisionType) {
     allowed: isQuorumEligible,
     role,
     isOwnerOverride: false,
-    ...isQuorumEligible ? {} : { resolutionError: "only owner/editor members participate in group resolution" }
+    ...isQuorumEligible ? {} : { resolutionError: "only owner/release_manager/editor members participate in group resolution" }
   };
 }
 function normaliseMode(value) {
@@ -33398,7 +33554,7 @@ var decisionResolveTool = {
       action: {
         type: "string",
         enum: ["agree", "object", "abstain", "resolve", "withdraw"],
-        description: 'agree/object/abstain cast your own position on a proposed decision. resolve/withdraw transition the decision itself and require authority \u2014 owner-only in "owner" mode, the configured resolver (or owner override) in "per_type" mode, or full owner/editor quorum (or an owner force-resolve) in "group" mode.'
+        description: 'agree/object/abstain cast your own position on a proposed decision. resolve/withdraw transition the decision itself and require authority \u2014 owner-only in "owner" mode, the configured resolver (or owner override) in "per_type" mode, or full owner/release_manager/editor quorum (or an owner force-resolve) in "group" mode.'
       },
       comment: { type: "string", description: "Optional note recorded alongside your position or transition." }
     },
@@ -33475,7 +33631,7 @@ async function handleDecisionResolve(adapter2, config2, args) {
           positions.map((p) => ({ userId: p.userId, status: p.status })),
           quorumMembersFrom(contributors)
         );
-        quorumNote = quorum.met ? '\n\nEvery owner/editor member has now agreed or abstained \u2014 this decision is ready to `decision_resolve action="resolve"`.' : `
+        quorumNote = quorum.met ? '\n\nEvery owner/release_manager/editor member has now agreed or abstained \u2014 this decision is ready to `decision_resolve action="resolve"`.' : `
 
 Still waiting on: ${quorum.missing.length > 0 ? quorum.missing.join(", ") : "nobody"}${quorum.objected.length > 0 ? `; objected: ${quorum.objected.join(", ")}` : ""}.`;
       } catch {
@@ -34027,7 +34183,7 @@ Mapping after: ${mappingAfter}`
 init_dist();
 var contributorAddTool = {
   name: "contributor_add",
-  description: `Add a contributor to a project by email, or change an existing member's role (owner-only). The person must already have a PAPI account. Grants membership on project_contributors. Pass role="editor" for a working teammate who needs to run the full cycle \u2014 the default, "viewer", cannot release. Calling it again with a different role promotes or demotes that member.`,
+  description: `Add a contributor to a project by email, or change an existing member's role (owner-only). The person must already have a PAPI account. Grants membership on project_contributors. Pass role="release_manager" for a teammate who owns approved releases, or role="editor" for a working teammate who needs to run the full cycle \u2014 the default, "viewer", is read-only. Calling it again with a different role promotes or demotes that member.`,
   annotations: { title: "Add Contributor", readOnlyHint: false, destructiveHint: false, openWorldHint: false },
   inputSchema: {
     type: "object",
@@ -34036,7 +34192,7 @@ var contributorAddTool = {
       role: {
         type: "string",
         enum: [...ASSIGNABLE_CONTRIBUTOR_ROLES],
-        description: `Membership role. "editor" can run the full build/review/release cycle; "viewer" has read-only visibility and is REFUSED by the release gate. Defaults to "viewer" for a new member; omit it when changing nothing to leave an existing member's role untouched. Project ownership cannot be granted here.`
+        description: `Membership role. "release_manager" can run the build/review cycle and carry approved releases through the release path; "editor" can run the full build/review/release cycle; "viewer" has read-only visibility. Defaults to "viewer" for a new member; omit it when changing nothing to leave an existing member's role untouched. Project ownership cannot be granted here.`
       },
       project: {
         type: "string",
@@ -34084,7 +34240,8 @@ async function denyUnlessOwner(adapter2, config2) {
   if (capDenied) return capDenied;
   const gate = await resolveOwnerGate(adapter2, config2);
   if (gate.enforced && !gate.callerIsOwner) {
-    const note = gate.resolutionError ? ` (Identity resolution failed: ${gate.resolutionError} \u2014 the gate fails closed; retry once connectivity is restored.)` : "";
+    const resolutionMessage = formatOwnerGateResolutionError(gate);
+    const note = resolutionMessage ? ` (${resolutionMessage})` : "";
     return `Contributor management is restricted to the project owner. Your identity does not match this project's owner.${note}`;
   }
   return null;
@@ -34097,7 +34254,8 @@ async function denyUnlessMember(adapter2, config2) {
   if (gate.callerIsOwner) return null;
   const callerRole = gate.callerUserId && adapterSupports(adapter2, "getContributorRole") ? await adapter2.getContributorRole(gate.callerUserId).catch(() => null) : null;
   if (callerRole) return null;
-  const note = gate.resolutionError ? ` (Identity resolution failed: ${gate.resolutionError} \u2014 the gate fails closed; retry once connectivity is restored.)` : "";
+  const resolutionMessage = formatOwnerGateResolutionError(gate);
+  const note = resolutionMessage ? ` (${resolutionMessage})` : "";
   return `Listing contributors is restricted to project members. Your identity does not match this project's owner or any contributor.${note}`;
 }
 var EMAIL_SHAPE = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
@@ -34132,7 +34290,7 @@ async function handleContributorAdd(adapter2, config2, args) {
 
 ${upsell}` : "";
     const where = overrideNote ? ` ${overrideNote}` : " on this project";
-    const roleLine = entry.role === "editor" ? `They can run the full cycle \u2014 plan, build, review and release.` : `**They are a "${entry.role}" and cannot run \`release\`.** Re-run with role="editor" if they are a working teammate rather than an observer.`;
+    const roleLine = entry.role === "release_manager" ? `They can run the build/review cycle and carry approved releases through the release path.` : entry.role === "editor" ? `They can run the full cycle \u2014 plan, build, review and release.` : `**They are a "${entry.role}" and cannot run \`release\`.** Re-run with role="editor" or role="release_manager" if they need to work on the project.`;
     return textResponse(
       `\u2705 **${entry.email ?? email}**${name} is now a **${entry.role}**${where}.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@papi-ai/server",
-  "version": "0.7.98",
+  "version": "0.7.103",
   "description": "PAPI MCP server \u2014 AI-powered sprint planning, build execution, and strategy review for software projects",
   "license": "Elastic-2.0",
   "mcpName": "io.github.getpapi/papi",