snipara-companion 3.0.12 → 3.0.13

package/README.md

@@ -77,6 +77,9 @@ redacted Coding Intelligence Ledger, not automatic durable memory, worker
 execution, calibrated confidence, or server-side attestation. Use
 `workflow producer-report` to inspect local adoption, reason-code counts, sample
 size, invalid artifacts, and calibration caveats before any future hard gate.
+The report also recognizes exported PR Answer Pack decision-capture artifacts
+with producer kind `pr_answer_pack_decision_capture`, so calibration can track
+more than the workflow producer once those artifacts are present locally.
 
 ## Local First, Hosted When Useful
 

package/dist/index.d.ts

@@ -2794,7 +2794,7 @@ declare const WORKFLOW_PLANS_RELATIVE_DIR: string;
 declare const PRODUCER_LOOP_ARTIFACT_VERSION: "snipara.producer_loop_artifact.v0";
 declare const PRODUCER_LOOP_REPORT_VERSION: "snipara.producer_loop_report.v0";
 declare const PRODUCER_LOOP_RELATIVE_DIR: string;
-type ProducerLoopProducerKind = "workflow_phase_commit" | "workflow_final_commit";
+type ProducerLoopProducerKind = "workflow_phase_commit" | "workflow_final_commit" | "pr_answer_pack_decision_capture";
 interface ProducerLoopArtifactWriteResult {
     status: "written" | "error";
     schemaVersion: typeof PRODUCER_LOOP_ARTIFACT_VERSION;

package/dist/index.js

@@ -14603,7 +14603,7 @@ function countStringOccurrences(values) {
   }, {});
 }
 function isProducerLoopProducerKind(value) {
-  return value === "workflow_phase_commit" || value === "workflow_final_commit";
+  return value === "workflow_phase_commit" || value === "workflow_final_commit" || value === "pr_answer_pack_decision_capture";
 }
 function isTaskCommitOutcome(value) {
   return ["completed", "partial", "blocked", "abandoned"].includes(value ?? "");
@@ -14711,7 +14711,7 @@ function buildProducerLoopReport(options = {}) {
   const latestArtifact = artifacts[artifacts.length - 1];
   const calibrationStatus = producerLoopCalibrationStatus(artifacts.length, minReviewSampleSize);
   const recommendedActions = [
-    artifacts.length === 0 ? "Run workflow phase-commit or final-commit with a current snipara-companion build to create Producer Loop samples." : void 0,
+    artifacts.length === 0 ? "Run a current Producer Loop producer, such as workflow phase-commit/final-commit or PR Answer Pack decision capture, to create samples." : void 0,
     artifacts.length > 0 && artifacts.length < minReviewSampleSize ? `Collect and review at least ${minReviewSampleSize} local workflow samples before considering any hard gate.` : void 0,
     invalidArtifacts.length > 0 ? "Inspect invalid Producer Loop artifacts before trusting adoption counts." : void 0,
     "Review false positives, missing outcomes, and reason-code drift before any future enforcement."
@@ -14741,7 +14741,7 @@ function buildProducerLoopReport(options = {}) {
       minReviewSampleSize,
       hardGateReady: false,
       notes: [
-        "Producer Loop V0 reports local workflow samples only.",
+        "Producer Loop V0 reports local or exported producer samples only.",
         "Samples are unreviewed unless an operator separately audits them.",
         "hardGateReady remains false in V0 even when enough samples exist."
       ]
@@ -14750,7 +14750,7 @@ function buildProducerLoopReport(options = {}) {
     caveats: [
       "Local report only; this is not server-side compliance attestation.",
       "Reason-code counts describe observed artifacts, not calibrated probabilities.",
-      "Producer Loop V0 does not prove command execution beyond the workflow evidence embedded in each artifact."
+      "Producer Loop V0 does not prove command execution beyond the evidence embedded in each artifact."
     ]
   };
 }
@@ -21702,6 +21702,9 @@ function renderProjectRealityCheckMarkdown(result) {
   return lines.join("\n");
 }
 
+// ../project-intelligence-contracts/src/producer-loop.ts
+var import_node_crypto4 = require("crypto");
+
 // src/commands/execution-receipts.ts
 var ENGINEERING_LEAD_PROOF_VERIFICATION_MAX_AGE_MS = 14 * 24 * 60 * 60 * 1e3;
 function proofVerificationHasSourceEvidence(verification) {
@@ -23161,7 +23164,7 @@ async function leadPlanCommand(options) {
 // src/commands/outcome-capture.ts
 var fs23 = __toESM(require("fs"));
 var path22 = __toESM(require("path"));
-var import_node_crypto4 = require("crypto");
+var import_node_crypto5 = require("crypto");
 var WHY_OUTCOME_CAPTURE_VERSION = "snipara.why_outcome_capture.v1";
 var DEFAULT_MAX_CANDIDATES = 20;
 var MAX_EVENTS = 50;
@@ -23491,7 +23494,7 @@ function readEventsFromFile(filePath) {
   return [];
 }
 function stableHash2(parts) {
-  return (0, import_node_crypto4.createHash)("sha256").update(parts.join("\0")).digest("hex");
+  return (0, import_node_crypto5.createHash)("sha256").update(parts.join("\0")).digest("hex");
 }
 function uniqueStrings10(values) {
   return Array.from(new Set(values.filter(Boolean)));
@@ -26548,7 +26551,7 @@ async function projectIntelligenceRunCommand(options) {
 
 // src/commands/collaboration.ts
 var import_node_child_process10 = require("child_process");
-var import_node_crypto5 = require("crypto");
+var import_node_crypto6 = require("crypto");
 var fs26 = __toESM(require("fs"));
 var os6 = __toESM(require("os"));
 var path26 = __toESM(require("path"));
@@ -28053,7 +28056,7 @@ function printGuardActionCards(cards) {
   }
 }
 function buildLocalSessionId(context, task, files) {
-  const hash = (0, import_node_crypto5.createHash)("sha1").update([context.actor.actorId, context.branch ?? "", task ?? "", files.join(",")].join("\n")).digest("hex").slice(0, 12);
+  const hash = (0, import_node_crypto6.createHash)("sha1").update([context.actor.actorId, context.branch ?? "", task ?? "", files.join(",")].join("\n")).digest("hex").slice(0, 12);
   return `local_${hash}`;
 }
 function normalizeFiles2(files) {

package/docs/FULL_REFERENCE.md

@@ -214,9 +214,10 @@ snipara-companion workflow resume --include-session-context
   of upstream but not pushed. It does not push, and dirty working-tree files are
   reported separately from the committed diff.
 - `workflow producer-report` scans local Producer Loop artifacts emitted by
-  workflow phase/final commits and reports adoption, producer kinds, workflow
-  ids, reason-code counts, invalid artifacts, sample size, and calibration
-  caveats with `hardGateReady=false`.
+  workflow phase/final commits or exported PR Answer Pack decision-capture
+  producers, then reports adoption, producer kinds, workflow ids, reason-code
+  counts, invalid artifacts, sample size, and calibration caveats with
+  `hardGateReady=false`.
 - `workflow run --adaptive-routing-dry-run` prints an Adaptive Work Routing
   card. Add `--route-local-workers` when a strong planner should keep deep
   reasoning while a local worker handles scoped execution.
@@ -999,10 +1000,12 @@ each section, and keeps caveats explicit: the artifact is structured review
 data, not approved memory, causal proof, or a full evidence dump.
 
 Workflow `phase-commit` and `final-commit` use the same ledger model to produce
-local Producer Loop artifacts automatically during real agent work. Use
-`workflow producer-report` to inspect whether those samples exist, how many are
-valid, which reason codes appear, and whether the sample set is still too small
-for future enforcement.
+local Producer Loop artifacts automatically during real agent work. PR Answer
+Pack decision capture can use the same artifact schema with producer kind
+`pr_answer_pack_decision_capture`. Use `workflow producer-report` to inspect
+whether those samples exist locally, how many are valid, which producer kinds and
+reason codes appear, and whether the sample set is still too small for future
+enforcement.
 
 Use top-level `run` when the agent should make a production-oriented go/no-go
 judgment in one pass:
@@ -1068,7 +1071,7 @@ Semantics:
 - `snipara-companion workflow phase-start` = marks the current phase and prints the required Snipara context gate plus code-impact / symbol-card gates; runtime-marked phases also get a stable Snipara Sandbox session binding
 - `snipara-companion workflow runtime-checkpoint` = captures a resume-ready Snipara Sandbox checkpoint for one phase using local workflow state plus a hosted automation event when configured
 - `snipara-companion workflow phase-commit` = calls hosted `snipara_end_of_task_commit` for that phase, updates local state, and advances the next phase; if the hosted commit times out or hits a transient network failure, local workflow state still advances with an explicit local fallback record
-- `snipara-companion workflow phase-commit` and `workflow final-commit` also emit local Producer Loop V0 artifacts under `.snipara/producer-loop/`, backed by the redacted Coding Intelligence Ledger. These artifacts are local review evidence only: they do not launch workers, approve durable memory, claim calibrated confidence, or provide server-side attestation.
+- `snipara-companion workflow phase-commit` and `workflow final-commit` also emit local Producer Loop V0 artifacts under `.snipara/producer-loop/`, backed by the redacted Coding Intelligence Ledger. PR Answer Pack decision capture uses the same schema with producer kind `pr_answer_pack_decision_capture` when the artifact is exported or embedded by the hosted PR pack producer. These artifacts are review evidence only: they do not launch workers, approve durable memory, claim calibrated confidence, or provide server-side attestation.
 - `snipara-companion workflow producer-report` = scans local Producer Loop artifacts and reports adoption, producer kinds, workflow ids, latest artifact, reason-code counts, invalid artifacts, sample size, and calibration caveats with `hardGateReady=false`
 - `snipara-companion workflow phase-commit` and `workflow final-commit` complete matching local Team Sync active work when the workflow is completed. Matching is conservative: exact workflow goal/summary text wins, and file overlap plus meaningful token overlap handles slug-like workflow goals without closing unrelated active work.
 - `snipara-companion workflow impact-gate` = local pre-push gate for completed workflow phases in `upstream..HEAD`; it keeps dirty files out of the committed impact analysis and reports phase/file coverage before hosted reindex catches up

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "snipara-companion",
-  "version": "3.0.12",
+  "version": "3.0.13",
   "description": "Local-first CLI that asks your repo what breaks before an AI coding agent edits it.",
   "main": "dist/index.js",
   "bin": {