snipara-companion 3.2.17 → 3.2.19

package/README.md

@@ -68,24 +68,24 @@ your current checkout in seconds, before an agent edits the wrong thing.
 
 These commands are useful without hosted Snipara:
 
-| Command                                                      | What it gives you locally                                    |
-| ------------------------------------------------------------ | ------------------------------------------------------------ |
-| `source init` / `source sync` / `source status`              | Local source snapshot, document preview, and code overlay    |
-| `impact` / `code impact`                                     | File-level blast-radius from the local code overlay          |
-| `reality-check`                                              | Intent Ledger, Unknown Registry, and verification checks     |
-| `code callers` / `imports` / `neighbors` / `shortest-path`   | Structural repo questions from local files                   |
-| `workflow start` / `phase-start` / `phase-commit` / `resume` | Agent continuity that survives compaction                    |
-| `workflow timeline` / `workflow session`                     | Append-only local activity log and Session Snapshot V0       |
-| `workflow decisions` / `workflow decide`                     | Local human decision requests and response receipts          |
-| `workflow policy-ledger`                                     | Project Policy decisions for agent review and audit          |
-| `run --emit-policy-decisions`                                | Project Policy review requests in the agent workflow         |
-| `workflow producer-triage`                                   | Ask for human review of unreviewed Producer Loop samples     |
-| `workflow producer-report`                                   | Local Producer Loop adoption and calibration report          |
-| `workflow producer-review`                                   | Mark local Producer Loop samples reviewed or rejected        |
-| `context-pack`                                               | Reversible local packs for long logs, diffs, and tool output |
-| `judgment-card`, `verify`, `lead-plan`, `agent-readiness`    | Local review artifacts and delegation contracts              |
-| `intelligence ledger-export`                                 | Structured redacted ledger JSON for replay and review        |
-| `stuck-guard`, `memory-guard`, `pre-tool`, `post-tool`       | Fail-soft local guards and hook helpers                      |
+| Command                                                                               | What it gives you locally                                                    |
+| ------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------- |
+| `source init` / `source sync` / `source status`                                       | Local source snapshot, document preview, and code overlay                    |
+| `impact` / `code impact`                                                              | File-level blast-radius from the local code overlay                          |
+| `reality-check`                                                                       | Intent Ledger, Unknown Registry, and verification checks                     |
+| `code callers` / `imports` / `neighbors` / `shortest-path`                            | Structural repo questions from local files                                   |
+| `workflow start` / `phase-start` / `phase-commit` / `resume`                          | Agent continuity that survives compaction                                    |
+| `workflow timeline` / `workflow session`                                              | Append-only local activity log and Session Snapshot V0                       |
+| `workflow decisions` / `workflow decide`                                              | Local human decision requests and response receipts                          |
+| `workflow policy-ledger` / `workflow apply-decisions` / `workflow sync-policy-ledger` | Project Policy review ledger, explicit apply pipeline, and hosted audit sync |
+| `run --emit-policy-decisions`                                                         | Project Policy review requests in the agent workflow                         |
+| `workflow producer-triage`                                                            | Ask for human review of unreviewed Producer Loop samples                     |
+| `workflow producer-report`                                                            | Local Producer Loop adoption and calibration report                          |
+| `workflow producer-review`                                                            | Mark local Producer Loop samples reviewed or rejected                        |
+| `context-pack`                                                                        | Reversible local packs for long logs, diffs, and tool output                 |
+| `judgment-card`, `verify`, `lead-plan`, `agent-readiness`                             | Local review artifacts and delegation contracts                              |
+| `intelligence ledger-export`                                                          | Structured redacted ledger JSON for replay and review                        |
+| `stuck-guard`, `memory-guard`, `pre-tool`, `post-tool`                                | Fail-soft local guards and hook helpers                                      |
 
 ### Local Worker Registry
 
@@ -147,6 +147,8 @@ npx -y snipara-companion workflow producer-triage
 npx -y snipara-companion workflow decisions
 npx -y snipara-companion workflow policy-ledger
 npx -y snipara-companion workflow decide decision-abc123 --choose accept_all --reviewer alice
+npx -y snipara-companion workflow apply-decisions --dry-run
+npx -y snipara-companion workflow sync-policy-ledger
 npx -y snipara-companion workflow timeline
 npx -y snipara-companion workflow timeline --export md
 npx -y snipara-companion workflow session --json
@@ -199,6 +201,15 @@ it still uses manual apply instructions and never writes policy automatically.
 approved, refused, modified, and deferred Project Policy decision artifacts,
 plus the exact pending requests it should ask the human about. It is read-only
 and does not apply policy edits.
+After the human resolves a request, `workflow apply-decisions --dry-run` previews
+local follow-up actions for resolved Project Policy receipts. Running
+`workflow apply-decisions` writes only idempotent review artifacts such as local
+policy drafts under `.snipara/policies/drafts/`; it does not activate canonical
+Project Policy silently.
+Run `workflow sync-policy-ledger` after local review to upload Decision Request,
+resolution, apply receipt, and policy draft artifacts into the hosted Project
+Policy ledger. The sync is audit-only and does not approve, refuse, activate, or
+edit canonical Project Policy.
 Other producers such as `outcome-capture preview --emit-decisions`,
 `memory reviews --emit-decisions`, `workflow decision-producer memory`, and
 `workflow decision-producer context-risk` emit requests with their existing apply

package/dist/index.d.ts

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { ProjectIntentDetectionResult, ProjectPolicyDecision, ProjectRealityCheckResult, ProjectIntelligenceEngineeringLeadPlanSummary, ProjectPolicyRule, DecisionRequest, OutcomeIntelligenceCalibration, ControlledWorkerExecutionMode, ControlledWorkerExecutionReceipt } from '@snipara/project-intelligence-contracts';
+import { ProjectIntentDetectionResult, ProjectPolicyDecision, ProjectRealityCheckResult, ProjectIntelligenceEngineeringLeadPlanSummary, ProjectPolicyRule, DecisionRequest, OutcomeIntelligenceCalibration, ControlledWorkerExecutionMode, ControlledWorkerExecutionReceipt, UnifiedReceiptEnvelope } from '@snipara/project-intelligence-contracts';
 
 declare function resolveQueryFromToolInput(toolInput?: string, tool?: string): string | null;
 
@@ -360,6 +360,22 @@ interface SyncDocumentInput {
     language?: string | null;
     metadata?: Record<string, unknown>;
 }
+type ProjectPolicyLedgerSyncArtifactKind = "decision_request" | "decision_resolution" | "apply_receipt" | "policy_draft";
+type ProjectPolicyLedgerSyncStatus = "pending" | "approved" | "refused" | "superseded" | "modified";
+type ProjectPolicyLedgerSyncApplyState = "needs_apply" | "applied" | "manual_follow_up_required" | "no_apply";
+interface ProjectPolicyLedgerSyncArtifactInput {
+    kind: ProjectPolicyLedgerSyncArtifactKind;
+    requestId: string;
+    fingerprint?: string;
+    title?: string;
+    status?: ProjectPolicyLedgerSyncStatus;
+    applyState?: ProjectPolicyLedgerSyncApplyState;
+    humanChoice?: string;
+    summary?: string;
+    sourcePath?: string;
+    updatedAt?: string;
+    payload: Record<string, unknown>;
+}
 type BusinessCollectionPreset = "business_response_playbook" | "business_library" | "offer_templates" | "company_presentations" | "reference_diagrams";
 interface UploadDocumentOptions {
     kind?: "DOC" | "BINARY";
@@ -1346,6 +1362,7 @@ declare class RLMClient {
     listClientProjects(options?: ListClientProjectsOptions): Promise<Record<string, unknown>>;
     createClientProject(options: CreateClientProjectOptions): Promise<Record<string, unknown>>;
     syncDocuments(documents: SyncDocumentInput[], deleteMissing?: boolean): Promise<Record<string, unknown>>;
+    syncProjectPolicyLedger(artifacts: ProjectPolicyLedgerSyncArtifactInput[]): Promise<Record<string, unknown>>;
     reindex(options: {
         kind?: "doc" | "code";
         mode?: "incremental" | "full";
@@ -3701,6 +3718,8 @@ interface ControlledWorkerExecuteOptions {
     acceptance?: string[];
     proof?: string[];
     output?: string;
+    projectId?: string;
+    unifiedOutput?: string;
     dir?: string;
     json?: boolean;
 }
@@ -3708,7 +3727,9 @@ interface ControlledWorkerExecuteResult {
     executed: boolean;
     blocked: boolean;
     receiptPath: string;
+    unifiedReceiptPath: string | null;
     receipt: ControlledWorkerExecutionReceipt;
+    unifiedReceipt: UnifiedReceiptEnvelope<ControlledWorkerExecutionReceipt> | null;
 }
 declare function controlledWorkerExecuteCommand(options: ControlledWorkerExecuteOptions): ControlledWorkerExecuteResult;
 
@@ -3797,6 +3818,33 @@ declare function ingestReferences(options?: IngestReferencesOptions): Promise<In
 declare function referencesScanCommand(options: ScanReferencesOptions): Promise<void>;
 declare function referencesIngestCommand(options: IngestReferencesOptions): Promise<void>;
 
+declare const POLICY_LEDGER_SYNC_REPORT_VERSION: "snipara.workflow_policy_ledger_sync.v0";
+interface PolicyLedgerSyncSummary {
+    total: number;
+    pendingRequests: number;
+    resolvedDecisions: number;
+    applyReceipts: number;
+    policyDrafts: number;
+}
+interface PolicyLedgerSyncReport {
+    version: typeof POLICY_LEDGER_SYNC_REPORT_VERSION;
+    generatedAt: string;
+    dryRun: boolean;
+    summary: PolicyLedgerSyncSummary;
+    artifacts: ProjectPolicyLedgerSyncArtifactInput[];
+    hosted?: Record<string, unknown>;
+    caveats: string[];
+}
+declare function buildPolicyLedgerSyncReport(options?: {
+    cwd?: string;
+    dryRun?: boolean;
+}): PolicyLedgerSyncReport;
+declare function workflowSyncPolicyLedgerCommand(options: {
+    dryRun?: boolean;
+    json?: boolean;
+}): Promise<void>;
+declare function collectPolicyLedgerSyncArtifacts(cwd?: string): ProjectPolicyLedgerSyncArtifactInput[];
+
 type CacheStrategy = "exact" | "nearby" | "warm";
 interface QueryCacheScope {
     cwd?: string;
@@ -4335,4 +4383,4 @@ declare function buildOrchestratorHandoff(options: OrchestratorHandoffOptions):
 declare function buildAdaptiveWorkRoutingRecommendation(options: AdaptiveWorkRoutingOptions): AdaptiveWorkRoutingRecommendation;
 declare function writeOrchestratorHandoff(options: OrchestratorHandoffOptions): WrittenOrchestratorHandoff;
 
-export { AUTOMATION_MANIFEST_RELATIVE_PATH, AutomationInstallConflictError, AutomationUnsupportedHookBundleError, CODING_INTELLIGENCE_LEDGER_VERSION, COLLABORATION_STATE_RELATIVE_PATH, ENGINEERING_LEAD_EXECUTION_RECEIPT_STAGES, ENGINEERING_LEAD_EXECUTION_RECEIPT_STATUSES, ENGINEERING_LEAD_POSTURES, ENGINEERING_LEAD_PROOF_VERIFICATION_SOURCES, ENGINEERING_LEAD_PROOF_VERIFICATION_STATUSES, ENGINEERING_LEAD_ROUTING_MODES, ENGINEERING_LEAD_STATUSES, ENGINEERING_LEAD_SUPERVISION_STATUSES, ENGINEERING_LEAD_WORKER_ROLES, ENGINEERING_LEAD_WORK_PACKAGE_STATUSES, ORCHESTRATOR_HANDOFF_RELATIVE_PATH, PRODUCER_LOOP_ARTIFACT_VERSION, PRODUCER_LOOP_RELATIVE_DIR, PRODUCER_LOOP_REPORT_VERSION, TEAM_SYNC_STATE_RELATIVE_PATH, WHY_OUTCOME_CAPTURE_VERSION, WORKFLOW_PLANS_RELATIVE_DIR, WORKFLOW_STATE_RELATIVE_PATH, addLocalWorker, agentReadinessAuditCommand, appendActivityEvent, archiveInactiveTeamSyncWork, attachLocalContextPackReceipts, autoArchiveTeamSyncState, buildAdaptiveWorkRoutingRecommendation, buildAgentReadinessAuditReport, buildAgenticHandoffMarkdown, buildAgenticTimeline, buildAgenticWorkStatus, buildAutomationInstallPlan, buildCanonicalEvent, buildCodeHooksInstallPlan, buildCodePromotionResult, buildCodeStatusResult, buildCodeSyncResult, buildCodingIntelligenceLedger, buildCollaborationActor, buildCollaborationGuardActionCards, buildCollaborationHooksInstallPlan, buildCompanionEngineeringLeadPlanReport, buildContextPackStats, buildEvalCaseArtifact, buildGeneratedWorkflowPlanDocument, buildHostedCodeOverlayUploadPayload, buildHostedGuardPayload, buildJournalCheckpointEntry, buildLocalCallersResult, buildLocalCodeOverlay, buildLocalContextPackReceipt, buildLocalContextPackReceipts, buildLocalImpactResult, buildLocalImportsResult, buildLocalNeighborsResult, buildLocalProjectRealityCheck, buildLocalShortestPathResult, buildLocalSourceSnapshot, buildLocalSourceStatus, buildLocalSourceSyncResult, buildMemoryAudit, buildOnboardFolderManifest, buildOrchestratorHandoff, buildProducerLoopReport, buildProjectIntelligenceBrief, buildProjectIntelligenceRun, buildProjectJudgmentCard, buildSessionBootstrapBrief, buildSessionBootstrapQuality, buildSessionSnapshot, buildSyncDocumentsDryRun, buildTeamSyncHandoffRecord, buildTeamSyncStartWorkRecord, buildTeamSyncSummary, buildToolCallPayload, buildToolResultPayload, buildVerificationPlan, buildWhyOutcomeCaptureReport, buildWorkflowImpactGate, buildWorkflowPhaseCommitSummary, buildWorkflowPlanScaffold, categoryFromGuardTag, classifyToolResult, cleanContextPacks, codingLedgerExportCommand, collaborationIdeStatusCommand, collectAgentReadinessLocalSignals, collectSyncDocuments, collectSyncDocumentsInput, compactHostedGuardResources, compareLocalSourceSnapshots, completeTeamSyncStateFromEvidence, completeTeamSyncWorkFromEvidence, contextPackCleanCommand, contextPackPackCommand, contextPackRetrieveCommand, contextPackStatsCommand, controlledWorkerExecuteCommand, createClient, createEmptyCollaborationState, createEmptyTeamSyncState, createLocalQueryCache, deriveLocalCollaborationResourcesFromFiles, detectReleaseSurfacesFromFiles, detectRuntimeEnvironment, evalExportCommand, evalRunCommand, evaluateProjectPolicyGates, extractCommandFromToolInput, extractFilesFromToolInput, formatAgentReadinessAuditReport, formatCompanionEngineeringLeadPlanReport, formatOrchestratorRecommendationReason, formatPolicyGateDecision, formatProjectJudgmentCard, formatStuckGuardDecision, getAutomationManifestPath, getAutomationStatus, getCollaborationStatePath, getConfigPath, getContextPackStoragePaths, getLocalCodeOverlayCachePath, getLocalCodePromotionStatePath, getLocalSourceSnapshotPath, getOrchestratorRecommendation, getPlanStepDisplayTitle, getStagedFiles, getStuckGuardInjection, getTeamSyncStatePath, ingestReferences, installAutomationBundle, leadPlanCommand, listProjectsForApiKey, loadAutomationManifest, loadCollaborationState, loadConfig, loadTeamSyncState, memoryAuditCommand, memoryCleanCandidatesCommand, memoryCompactCommand, memoryHealthCommand, memoryLocalCommand, memoryReviewsCommand, normalizeCollaborationFiles, normalizeGuardTag, normalizeWorkflowPlanInput, outcomeCapturePreviewCommand, packContext, parseCollaborationResources, projectIntelligenceBriefCommand, projectIntelligenceRunCommand, readActivityTimeline, readLocalCodeOverlayCache, readLocalCodePromotionState, readLocalSourceSnapshot, readLocalWorkersConfig, readSessionSnapshot, realityCheckCommand, referencesIngestCommand, referencesScanCommand, resolveAutoWorkflowMode, resolveContextPackRecord, resolveFullWorkflowTokenBudget, resolveLocalWorkerRoutingDefaults, resolveQueryFromToolInput, retrieveContextPack, runMemoryGuardCheck, saveCollaborationState, saveConfig, saveTeamSyncState, scanReferences, shouldSuggestOrchestratorForWorkflow, shouldSuggestRuntimeForWorkflow, summarizeLocalCodeOverlay, teamSyncSweepCommand, validatePlanResult, verifyCommand, workersLocalAddCommand, workersLocalListCommand, workersLocalProbePrintCommand, workersLocalRemoveCommand, workersLocalStatusCommand, writeLocalCodeOverlayCache, writeLocalCodePromotionState, writeLocalSourceSnapshot, writeOrchestratorHandoff, writeProducerLoopArtifact, writeSessionSnapshot };
+export { AUTOMATION_MANIFEST_RELATIVE_PATH, AutomationInstallConflictError, AutomationUnsupportedHookBundleError, CODING_INTELLIGENCE_LEDGER_VERSION, COLLABORATION_STATE_RELATIVE_PATH, ENGINEERING_LEAD_EXECUTION_RECEIPT_STAGES, ENGINEERING_LEAD_EXECUTION_RECEIPT_STATUSES, ENGINEERING_LEAD_POSTURES, ENGINEERING_LEAD_PROOF_VERIFICATION_SOURCES, ENGINEERING_LEAD_PROOF_VERIFICATION_STATUSES, ENGINEERING_LEAD_ROUTING_MODES, ENGINEERING_LEAD_STATUSES, ENGINEERING_LEAD_SUPERVISION_STATUSES, ENGINEERING_LEAD_WORKER_ROLES, ENGINEERING_LEAD_WORK_PACKAGE_STATUSES, ORCHESTRATOR_HANDOFF_RELATIVE_PATH, POLICY_LEDGER_SYNC_REPORT_VERSION, PRODUCER_LOOP_ARTIFACT_VERSION, PRODUCER_LOOP_RELATIVE_DIR, PRODUCER_LOOP_REPORT_VERSION, TEAM_SYNC_STATE_RELATIVE_PATH, WHY_OUTCOME_CAPTURE_VERSION, WORKFLOW_PLANS_RELATIVE_DIR, WORKFLOW_STATE_RELATIVE_PATH, addLocalWorker, agentReadinessAuditCommand, appendActivityEvent, archiveInactiveTeamSyncWork, attachLocalContextPackReceipts, autoArchiveTeamSyncState, buildAdaptiveWorkRoutingRecommendation, buildAgentReadinessAuditReport, buildAgenticHandoffMarkdown, buildAgenticTimeline, buildAgenticWorkStatus, buildAutomationInstallPlan, buildCanonicalEvent, buildCodeHooksInstallPlan, buildCodePromotionResult, buildCodeStatusResult, buildCodeSyncResult, buildCodingIntelligenceLedger, buildCollaborationActor, buildCollaborationGuardActionCards, buildCollaborationHooksInstallPlan, buildCompanionEngineeringLeadPlanReport, buildContextPackStats, buildEvalCaseArtifact, buildGeneratedWorkflowPlanDocument, buildHostedCodeOverlayUploadPayload, buildHostedGuardPayload, buildJournalCheckpointEntry, buildLocalCallersResult, buildLocalCodeOverlay, buildLocalContextPackReceipt, buildLocalContextPackReceipts, buildLocalImpactResult, buildLocalImportsResult, buildLocalNeighborsResult, buildLocalProjectRealityCheck, buildLocalShortestPathResult, buildLocalSourceSnapshot, buildLocalSourceStatus, buildLocalSourceSyncResult, buildMemoryAudit, buildOnboardFolderManifest, buildOrchestratorHandoff, buildPolicyLedgerSyncReport, buildProducerLoopReport, buildProjectIntelligenceBrief, buildProjectIntelligenceRun, buildProjectJudgmentCard, buildSessionBootstrapBrief, buildSessionBootstrapQuality, buildSessionSnapshot, buildSyncDocumentsDryRun, buildTeamSyncHandoffRecord, buildTeamSyncStartWorkRecord, buildTeamSyncSummary, buildToolCallPayload, buildToolResultPayload, buildVerificationPlan, buildWhyOutcomeCaptureReport, buildWorkflowImpactGate, buildWorkflowPhaseCommitSummary, buildWorkflowPlanScaffold, categoryFromGuardTag, classifyToolResult, cleanContextPacks, codingLedgerExportCommand, collaborationIdeStatusCommand, collectAgentReadinessLocalSignals, collectPolicyLedgerSyncArtifacts, collectSyncDocuments, collectSyncDocumentsInput, compactHostedGuardResources, compareLocalSourceSnapshots, completeTeamSyncStateFromEvidence, completeTeamSyncWorkFromEvidence, contextPackCleanCommand, contextPackPackCommand, contextPackRetrieveCommand, contextPackStatsCommand, controlledWorkerExecuteCommand, createClient, createEmptyCollaborationState, createEmptyTeamSyncState, createLocalQueryCache, deriveLocalCollaborationResourcesFromFiles, detectReleaseSurfacesFromFiles, detectRuntimeEnvironment, evalExportCommand, evalRunCommand, evaluateProjectPolicyGates, extractCommandFromToolInput, extractFilesFromToolInput, formatAgentReadinessAuditReport, formatCompanionEngineeringLeadPlanReport, formatOrchestratorRecommendationReason, formatPolicyGateDecision, formatProjectJudgmentCard, formatStuckGuardDecision, getAutomationManifestPath, getAutomationStatus, getCollaborationStatePath, getConfigPath, getContextPackStoragePaths, getLocalCodeOverlayCachePath, getLocalCodePromotionStatePath, getLocalSourceSnapshotPath, getOrchestratorRecommendation, getPlanStepDisplayTitle, getStagedFiles, getStuckGuardInjection, getTeamSyncStatePath, ingestReferences, installAutomationBundle, leadPlanCommand, listProjectsForApiKey, loadAutomationManifest, loadCollaborationState, loadConfig, loadTeamSyncState, memoryAuditCommand, memoryCleanCandidatesCommand, memoryCompactCommand, memoryHealthCommand, memoryLocalCommand, memoryReviewsCommand, normalizeCollaborationFiles, normalizeGuardTag, normalizeWorkflowPlanInput, outcomeCapturePreviewCommand, packContext, parseCollaborationResources, projectIntelligenceBriefCommand, projectIntelligenceRunCommand, readActivityTimeline, readLocalCodeOverlayCache, readLocalCodePromotionState, readLocalSourceSnapshot, readLocalWorkersConfig, readSessionSnapshot, realityCheckCommand, referencesIngestCommand, referencesScanCommand, resolveAutoWorkflowMode, resolveContextPackRecord, resolveFullWorkflowTokenBudget, resolveLocalWorkerRoutingDefaults, resolveQueryFromToolInput, retrieveContextPack, runMemoryGuardCheck, saveCollaborationState, saveConfig, saveTeamSyncState, scanReferences, shouldSuggestOrchestratorForWorkflow, shouldSuggestRuntimeForWorkflow, summarizeLocalCodeOverlay, teamSyncSweepCommand, validatePlanResult, verifyCommand, workersLocalAddCommand, workersLocalListCommand, workersLocalProbePrintCommand, workersLocalRemoveCommand, workersLocalStatusCommand, workflowSyncPolicyLedgerCommand, writeLocalCodeOverlayCache, writeLocalCodePromotionState, writeLocalSourceSnapshot, writeOrchestratorHandoff, writeProducerLoopArtifact, writeSessionSnapshot };