snipara-companion 3.2.23 → 3.2.25

package/CHANGELOG.md

@@ -2,6 +2,32 @@
 
 Release notes for `snipara-companion`, newest first.
 
+## New In 3.2.25
+
+- Adds `snipara-companion context-control plan` and `apply` for local,
+  Terraform-style previews of Project Intelligence context mutations. Plans are
+  content-hashed, pinned to the current Git base by default, and apply only
+  bounded writes under `.snipara/context-control/`.
+- Adds `snipara-companion context-control drift` as a read-only project drift
+  report across Git state, managed workflow state, pending Decision Requests,
+  saved context-control plans, and ProjectContext manifests.
+- Adds `snipara-companion context-control validate --manifest
+snipara.project-context.json` for Context as Code V0. The JSON manifest
+  declares project context sources, tiers, authority, tags, owners, and review
+  policies without uploading content or mutating hosted state.
+
+## New In 3.2.24
+
+- Adds a validated full `commitSha` to successful commit, amend, revert, and
+  cherry-pick `tool_result` events so Outcome Intelligence can mature commit
+  evidence without parsing raw command text.
+- Keeps the signal fail-closed: non-commit commands, failed or no-op results,
+  quiet or masked results without the current SHA prefix, reflog mismatches,
+  and invalid object IDs emit no commit SHA.
+- Rejects compound or shell-ambiguous commit commands and redacts bounded
+  command previews, including named environment tokens and secrets, before an
+  automation event leaves the process.
+
 ## New In 3.2.23
 
 - Preserves the canonical project profile and the authenticated owner operating

package/README.md

@@ -88,11 +88,65 @@ These commands are useful without hosted Snipara:
 | `workflow producer-triage`                                                            | Ask for human review of unreviewed Producer Loop samples                     |
 | `workflow producer-report`                                                            | Local Producer Loop adoption and calibration report                          |
 | `workflow producer-review`                                                            | Mark local Producer Loop samples reviewed or rejected                        |
+| `context-control plan` / `apply` / `drift` / `validate`                               | Preview/apply local context mutations, report drift, and validate manifests  |
 | `context-pack`                                                                        | Reversible local packs for long logs, diffs, and tool output                 |
 | `judgment-card`, `verify`, `lead-plan`, `agent-readiness`                             | Local review artifacts and delegation contracts                              |
 | `intelligence ledger-export`                                                          | Structured redacted ledger JSON for replay and review                        |
 | `stuck-guard`, `memory-guard`, `pre-tool`, `post-tool`                                | Fail-soft local guards and hook helpers                                      |
 
+### Context Control
+
+`context-control` is the local trust layer for Project Intelligence state. It
+borrows Terraform's useful product grammar without copying Terraform: preview a
+bounded context mutation, inspect drift, then apply only the exact reviewed
+plan.
+
+```bash
+npx -y snipara-companion context-control plan \
+  --operation write_file \
+  --target demo.json \
+  --content '{"ok":true}' \
+  --summary "record reviewed context state" \
+  --output .snipara/context-control/plans/demo.json
+
+npx -y snipara-companion context-control apply \
+  --plan .snipara/context-control/plans/demo.json
+
+npx -y snipara-companion context-control drift
+```
+
+For Context as Code V0, add `snipara.project-context.json` and validate it
+locally:
+
+```json
+{
+  "schemaVersion": "snipara.project_context_manifest.v0",
+  "sources": [
+    {
+      "path": "docs/architecture.md",
+      "authority": "canonical",
+      "tier": "HOT",
+      "tags": ["architecture"]
+    }
+  ],
+  "policies": [
+    {
+      "id": "review-context-changes",
+      "description": "Human review required before changing canonical context",
+      "reviewRequired": true
+    }
+  ]
+}
+```
+
+```bash
+npx -y snipara-companion context-control validate --manifest snipara.project-context.json
+npx -y snipara-companion context-control plan --manifest snipara.project-context.json
+```
+
+The manifest is declarative metadata only. Validation and local reconciliation
+do not upload documents, approve memory, or mutate hosted Snipara state.
+
 ### Local Worker Registry
 
 Use `workers local` when you want Companion to route bounded work to a local

package/dist/index.d.ts

@@ -1,8 +1,26 @@
 #!/usr/bin/env node
-import { ProjectIntentDetectionResult, ProjectPolicyDecision, ProjectRealityCheckResult, ProjectIntelligenceEngineeringLeadPlanSummary, ProjectPolicyRule, DecisionRequest, OutcomeIntelligenceCalibration, ControlledWorkerExecutionMode, ControlledWorkerExecutionReceipt, UnifiedReceiptEnvelope } from '@snipara/project-intelligence-contracts';
+import { AdvisorInfluenceLifecycle, ProjectIntentDetectionResult, ProjectPolicyDecision, ProjectRealityCheckResult, ContextMutationPlan, ContextMutationApplyReceipt, ProjectContextValidationReport, ProjectDriftReport, ProjectIntelligenceEngineeringLeadPlanSummary, ProjectPolicyRule, DecisionRequest, AdvisorInfluenceLifecycleState, OutcomeIntelligenceCalibration, ControlledWorkerExecutionMode, ControlledWorkerExecutionReceipt, UnifiedReceiptEnvelope } from '@snipara/project-intelligence-contracts';
 
 declare function resolveQueryFromToolInput(toolInput?: string, tool?: string): string | null;
 
+/**
+ * Return the only extra metadata allowed for a successful commit-like result.
+ *
+ * The command is used only as a local classification hint and is never copied
+ * into this metadata. Git is invoked without a shell, the reflog must confirm
+ * the requested operation, the current result must contain HEAD's SHA prefix,
+ * and the emitted SHA must be a full commit object id.
+ */
+declare function buildCommitResultMetadata(options: {
+    tool?: string;
+    toolInput?: string;
+    result?: string;
+    exitCode?: number;
+    status?: string;
+    cwd?: string;
+}): {
+    commitSha?: string;
+};
 declare function extractFilesFromToolInput(toolInput?: string): string[];
 
 type ContextPackKind = "tool_output" | "log" | "diff" | "file" | "text" | "note";
@@ -567,7 +585,7 @@ interface EmitEventResult {
     events: AutomationCheckpointSummary[];
 }
 type AdvisorInfluenceAgentDecision = "accepted" | "modified" | "ignored" | "blocked";
-type AdvisorInfluenceOutcomeLinkStatus = "pending" | "linked" | "missed" | "unevaluated";
+type AdvisorInfluenceReceiptCreationOutcomeLinkStatus = "pending";
 interface AdvisorInfluenceRecommendationInput {
     id: string;
     version?: "advisor-recommendation-v0";
@@ -589,7 +607,7 @@ interface RecordAdvisorInfluenceReceiptInput {
     agentDecision: AdvisorInfluenceAgentDecision;
     behaviorChange: string;
     verificationExecuted: string[];
-    outcomeLinkStatus?: AdvisorInfluenceOutcomeLinkStatus;
+    outcomeLinkStatus?: AdvisorInfluenceReceiptCreationOutcomeLinkStatus;
     metadata?: AdvisorInfluenceReceiptMetadataInput;
 }
 interface AdvisorInfluenceReceiptMetadataInput extends Record<string, unknown> {
@@ -598,6 +616,7 @@ interface AdvisorInfluenceReceiptMetadataInput extends Record<string, unknown> {
     planBefore?: string | null;
     planAfter?: string | null;
     changedBecauseOfRecommendation?: boolean | null;
+    advisorInfluenceLifecycle?: AdvisorInfluenceLifecycle;
     filesAffected?: string[];
     toolActions?: string[];
     humanOverride?: string | null;
@@ -2097,6 +2116,59 @@ interface RealityCheckCommandOptions {
 declare function buildLocalProjectRealityCheck(options: RealityCheckCommandOptions): ProjectRealityCheckResult;
 declare function realityCheckCommand(options: RealityCheckCommandOptions): Promise<void>;
 
+interface ContextControlPlanCommandOptions {
+    summary?: string;
+    target?: string;
+    manifest?: string;
+    output?: string;
+    projectId?: string;
+    expiresAt?: string;
+    approvalRequired?: boolean;
+    json?: boolean;
+}
+interface ContextControlApplyCommandOptions {
+    plan: string;
+    allowStaleBase?: boolean;
+    json?: boolean;
+}
+interface ContextControlDriftCommandOptions {
+    json?: boolean;
+}
+interface ContextControlValidateCommandOptions {
+    manifest?: string;
+    json?: boolean;
+}
+interface LocalContextMutationPlanResult {
+    plan: ContextMutationPlan;
+    planPath?: string;
+}
+interface LocalContextMutationApplyResult {
+    plan: ContextMutationPlan;
+    receipt: ContextMutationApplyReceipt;
+    receiptPath?: string;
+    writtenFiles: string[];
+}
+declare function buildLocalProjectContextValidationReport(options?: ContextControlValidateCommandOptions & {
+    cwd?: string;
+    now?: Date;
+}): ProjectContextValidationReport;
+declare function buildLocalContextMutationPlan(options?: ContextControlPlanCommandOptions & {
+    cwd?: string;
+    now?: Date;
+}): LocalContextMutationPlanResult;
+declare function applyLocalContextMutationPlan(options: ContextControlApplyCommandOptions & {
+    cwd?: string;
+    now?: Date;
+}): LocalContextMutationApplyResult;
+declare function buildLocalProjectDriftReport(options?: ContextControlDriftCommandOptions & {
+    cwd?: string;
+    now?: Date;
+}): ProjectDriftReport;
+declare function contextControlPlanCommand(options: ContextControlPlanCommandOptions): Promise<void>;
+declare function contextControlApplyCommand(options: ContextControlApplyCommandOptions): Promise<void>;
+declare function contextControlDriftCommand(options: ContextControlDriftCommandOptions): Promise<void>;
+declare function contextControlValidateCommand(options: ContextControlValidateCommandOptions): Promise<void>;
+
 interface DecisionRequestWriteResult {
     status: "written" | "duplicate_pending" | "duplicate_resolved";
     requestId: string;
@@ -2494,6 +2566,9 @@ interface ProjectRunCommandOptions {
     skipPackageReview?: boolean;
     servedJudgmentId?: string;
     skipAdvisorReceipts?: boolean;
+    advisorPlanBefore?: string;
+    advisorPlanAfter?: string;
+    advisorRecommendationId?: string;
     outcomeReceiptFiles?: string[];
     emitPolicyDecisions?: boolean;
     json?: boolean;
@@ -2518,6 +2593,7 @@ interface ProjectRunAdvisorReceiptWrite {
     status: "recorded" | "skipped" | "error";
     agentDecision?: AdvisorInfluenceAgentDecision;
     changedBecauseOfRecommendation?: boolean;
+    lifecycleState?: AdvisorInfluenceLifecycleState;
     result?: RecordAdvisorInfluenceReceiptResult;
     reason?: ProjectRunAdvisorReceiptSkipReason;
     error?: string;
@@ -4428,4 +4504,4 @@ declare function installAutomationBundle(args: {
 }): Promise<AutomationInstallResult>;
 declare function getAutomationStatus(projectDir?: string): AutomationStatusResult;
 
-export { AUTOMATION_MANIFEST_RELATIVE_PATH, AutomationInstallConflictError, AutomationUnsupportedHookBundleError, CODING_INTELLIGENCE_LEDGER_VERSION, COLLABORATION_STATE_RELATIVE_PATH, ENGINEERING_LEAD_EXECUTION_RECEIPT_STAGES, ENGINEERING_LEAD_EXECUTION_RECEIPT_STATUSES, ENGINEERING_LEAD_POSTURES, ENGINEERING_LEAD_PROOF_VERIFICATION_SOURCES, ENGINEERING_LEAD_PROOF_VERIFICATION_STATUSES, ENGINEERING_LEAD_ROUTING_MODES, ENGINEERING_LEAD_STATUSES, ENGINEERING_LEAD_SUPERVISION_STATUSES, ENGINEERING_LEAD_WORKER_ROLES, ENGINEERING_LEAD_WORK_PACKAGE_STATUSES, ORCHESTRATOR_HANDOFF_RELATIVE_PATH, POLICY_LEDGER_SYNC_REPORT_VERSION, PRODUCER_LOOP_ARTIFACT_VERSION, PRODUCER_LOOP_RELATIVE_DIR, PRODUCER_LOOP_REPORT_VERSION, TEAM_SYNC_STATE_RELATIVE_PATH, WHY_OUTCOME_CAPTURE_VERSION, WORKFLOW_PLANS_RELATIVE_DIR, WORKFLOW_STATE_RELATIVE_PATH, addLocalWorker, agentReadinessAuditCommand, appendActivityEvent, archiveInactiveTeamSyncWork, attachLocalContextPackReceipts, autoArchiveTeamSyncState, buildAdaptiveWorkRoutingRecommendation, buildAgentReadinessAuditReport, buildAgenticHandoffMarkdown, buildAgenticTimeline, buildAgenticWorkStatus, buildAutomationInstallPlan, buildCanonicalEvent, buildCodeHooksInstallPlan, buildCodePromotionResult, buildCodeStatusResult, buildCodeSyncResult, buildCodingIntelligenceLedger, buildCollaborationActor, buildCollaborationGuardActionCards, buildCollaborationHooksInstallPlan, buildCompanionEngineeringLeadPlanReport, buildContextPackStats, buildEvalCaseArtifact, buildGeneratedWorkflowPlanDocument, buildHostedCodeOverlayUploadPayload, buildHostedGuardPayload, buildJournalCheckpointEntry, buildLocalCallersResult, buildLocalCodeOverlay, buildLocalContextPackReceipt, buildLocalContextPackReceipts, buildLocalImpactResult, buildLocalImportsResult, buildLocalNeighborsResult, buildLocalProjectRealityCheck, buildLocalShortestPathResult, buildLocalSourceSnapshot, buildLocalSourceStatus, buildLocalSourceSyncResult, buildMemoryAudit, buildOnboardFolderManifest, buildOrchestratorHandoff, buildPolicyLedgerSyncReport, buildProducerLoopReport, buildProjectIntelligenceBrief, buildProjectIntelligenceRun, buildProjectJudgmentCard, buildSessionBootstrapBrief, buildSessionBootstrapQuality, buildSessionSnapshot, buildSyncDocumentsDryRun, buildTeamSyncHandoffRecord, buildTeamSyncStartWorkRecord, buildTeamSyncSummary, buildToolCallPayload, buildToolResultPayload, buildVerificationPlan, buildWhyOutcomeCaptureReport, buildWorkflowImpactGate, buildWorkflowPhaseCommitSummary, buildWorkflowPlanScaffold, categoryFromGuardTag, classifyToolResult, cleanContextPacks, codingLedgerExportCommand, collaborationIdeStatusCommand, collectAgentReadinessLocalSignals, collectPolicyLedgerSyncArtifacts, collectSyncDocuments, collectSyncDocumentsInput, compactHostedGuardResources, compareLocalSourceSnapshots, completeTeamSyncStateFromEvidence, completeTeamSyncWorkFromEvidence, contextPackCleanCommand, contextPackPackCommand, contextPackRetrieveCommand, contextPackStatsCommand, controlledWorkerExecuteCommand, createClient, createEmptyCollaborationState, createEmptyTeamSyncState, createLocalQueryCache, deriveLocalCollaborationResourcesFromFiles, detectReleaseSurfacesFromFiles, detectRuntimeEnvironment, evalExportCommand, evalRunCommand, evaluateProjectPolicyGates, extractCommandFromToolInput, extractFilesFromToolInput, formatAgentReadinessAuditReport, formatCompanionEngineeringLeadPlanReport, formatOrchestratorRecommendationReason, formatPolicyGateDecision, formatProjectJudgmentCard, formatStuckGuardDecision, getAutomationManifestPath, getAutomationStatus, getCollaborationStatePath, getConfigPath, getContextPackStoragePaths, getLocalCodeOverlayCachePath, getLocalCodePromotionStatePath, getLocalSourceSnapshotPath, getOrchestratorRecommendation, getPlanStepDisplayTitle, getStagedFiles, getStuckGuardInjection, getTeamSyncStatePath, ingestReferences, installAutomationBundle, leadPlanCommand, listProjectsForApiKey, loadAutomationManifest, loadCollaborationState, loadConfig, loadTeamSyncState, memoryAuditCommand, memoryCleanCandidatesCommand, memoryCompactCommand, memoryHealthCommand, memoryLocalCommand, memoryReviewsCommand, normalizeCollaborationFiles, normalizeGuardTag, normalizeWorkflowPlanInput, outcomeCapturePreviewCommand, packContext, parseCollaborationResources, projectIntelligenceBriefCommand, projectIntelligenceRunCommand, readActivityTimeline, readLocalCodeOverlayCache, readLocalCodePromotionState, readLocalSourceSnapshot, readLocalWorkersConfig, readSessionSnapshot, realityCheckCommand, referencesIngestCommand, referencesScanCommand, resolveAutoWorkflowMode, resolveContextPackRecord, resolveFullWorkflowTokenBudget, resolveLocalWorkerRoutingDefaults, resolveQueryFromToolInput, retrieveContextPack, runMemoryGuardCheck, saveCollaborationState, saveConfig, saveTeamSyncState, scanReferences, shouldFailCollaborationGuard, shouldSuggestOrchestratorForWorkflow, shouldSuggestRuntimeForWorkflow, summarizeLocalCodeOverlay, teamSyncSweepCommand, validatePlanResult, verifyCommand, workersLocalAddCommand, workersLocalListCommand, workersLocalProbePrintCommand, workersLocalRemoveCommand, workersLocalStatusCommand, workflowSyncPolicyLedgerCommand, writeLocalCodeOverlayCache, writeLocalCodePromotionState, writeLocalSourceSnapshot, writeOrchestratorHandoff, writeProducerLoopArtifact, writeSessionSnapshot };
+export { AUTOMATION_MANIFEST_RELATIVE_PATH, AutomationInstallConflictError, AutomationUnsupportedHookBundleError, CODING_INTELLIGENCE_LEDGER_VERSION, COLLABORATION_STATE_RELATIVE_PATH, ENGINEERING_LEAD_EXECUTION_RECEIPT_STAGES, ENGINEERING_LEAD_EXECUTION_RECEIPT_STATUSES, ENGINEERING_LEAD_POSTURES, ENGINEERING_LEAD_PROOF_VERIFICATION_SOURCES, ENGINEERING_LEAD_PROOF_VERIFICATION_STATUSES, ENGINEERING_LEAD_ROUTING_MODES, ENGINEERING_LEAD_STATUSES, ENGINEERING_LEAD_SUPERVISION_STATUSES, ENGINEERING_LEAD_WORKER_ROLES, ENGINEERING_LEAD_WORK_PACKAGE_STATUSES, ORCHESTRATOR_HANDOFF_RELATIVE_PATH, POLICY_LEDGER_SYNC_REPORT_VERSION, PRODUCER_LOOP_ARTIFACT_VERSION, PRODUCER_LOOP_RELATIVE_DIR, PRODUCER_LOOP_REPORT_VERSION, TEAM_SYNC_STATE_RELATIVE_PATH, WHY_OUTCOME_CAPTURE_VERSION, WORKFLOW_PLANS_RELATIVE_DIR, WORKFLOW_STATE_RELATIVE_PATH, addLocalWorker, agentReadinessAuditCommand, appendActivityEvent, applyLocalContextMutationPlan, archiveInactiveTeamSyncWork, attachLocalContextPackReceipts, autoArchiveTeamSyncState, buildAdaptiveWorkRoutingRecommendation, buildAgentReadinessAuditReport, buildAgenticHandoffMarkdown, buildAgenticTimeline, buildAgenticWorkStatus, buildAutomationInstallPlan, buildCanonicalEvent, buildCodeHooksInstallPlan, buildCodePromotionResult, buildCodeStatusResult, buildCodeSyncResult, buildCodingIntelligenceLedger, buildCollaborationActor, buildCollaborationGuardActionCards, buildCollaborationHooksInstallPlan, buildCommitResultMetadata, buildCompanionEngineeringLeadPlanReport, buildContextPackStats, buildEvalCaseArtifact, buildGeneratedWorkflowPlanDocument, buildHostedCodeOverlayUploadPayload, buildHostedGuardPayload, buildJournalCheckpointEntry, buildLocalCallersResult, buildLocalCodeOverlay, buildLocalContextMutationPlan, buildLocalContextPackReceipt, buildLocalContextPackReceipts, buildLocalImpactResult, buildLocalImportsResult, buildLocalNeighborsResult, buildLocalProjectContextValidationReport, buildLocalProjectDriftReport, buildLocalProjectRealityCheck, buildLocalShortestPathResult, buildLocalSourceSnapshot, buildLocalSourceStatus, buildLocalSourceSyncResult, buildMemoryAudit, buildOnboardFolderManifest, buildOrchestratorHandoff, buildPolicyLedgerSyncReport, buildProducerLoopReport, buildProjectIntelligenceBrief, buildProjectIntelligenceRun, buildProjectJudgmentCard, buildSessionBootstrapBrief, buildSessionBootstrapQuality, buildSessionSnapshot, buildSyncDocumentsDryRun, buildTeamSyncHandoffRecord, buildTeamSyncStartWorkRecord, buildTeamSyncSummary, buildToolCallPayload, buildToolResultPayload, buildVerificationPlan, buildWhyOutcomeCaptureReport, buildWorkflowImpactGate, buildWorkflowPhaseCommitSummary, buildWorkflowPlanScaffold, categoryFromGuardTag, classifyToolResult, cleanContextPacks, codingLedgerExportCommand, collaborationIdeStatusCommand, collectAgentReadinessLocalSignals, collectPolicyLedgerSyncArtifacts, collectSyncDocuments, collectSyncDocumentsInput, compactHostedGuardResources, compareLocalSourceSnapshots, completeTeamSyncStateFromEvidence, completeTeamSyncWorkFromEvidence, contextControlApplyCommand, contextControlDriftCommand, contextControlPlanCommand, contextControlValidateCommand, contextPackCleanCommand, contextPackPackCommand, contextPackRetrieveCommand, contextPackStatsCommand, controlledWorkerExecuteCommand, createClient, createEmptyCollaborationState, createEmptyTeamSyncState, createLocalQueryCache, deriveLocalCollaborationResourcesFromFiles, detectReleaseSurfacesFromFiles, detectRuntimeEnvironment, evalExportCommand, evalRunCommand, evaluateProjectPolicyGates, extractCommandFromToolInput, extractFilesFromToolInput, formatAgentReadinessAuditReport, formatCompanionEngineeringLeadPlanReport, formatOrchestratorRecommendationReason, formatPolicyGateDecision, formatProjectJudgmentCard, formatStuckGuardDecision, getAutomationManifestPath, getAutomationStatus, getCollaborationStatePath, getConfigPath, getContextPackStoragePaths, getLocalCodeOverlayCachePath, getLocalCodePromotionStatePath, getLocalSourceSnapshotPath, getOrchestratorRecommendation, getPlanStepDisplayTitle, getStagedFiles, getStuckGuardInjection, getTeamSyncStatePath, ingestReferences, installAutomationBundle, leadPlanCommand, listProjectsForApiKey, loadAutomationManifest, loadCollaborationState, loadConfig, loadTeamSyncState, memoryAuditCommand, memoryCleanCandidatesCommand, memoryCompactCommand, memoryHealthCommand, memoryLocalCommand, memoryReviewsCommand, normalizeCollaborationFiles, normalizeGuardTag, normalizeWorkflowPlanInput, outcomeCapturePreviewCommand, packContext, parseCollaborationResources, projectIntelligenceBriefCommand, projectIntelligenceRunCommand, readActivityTimeline, readLocalCodeOverlayCache, readLocalCodePromotionState, readLocalSourceSnapshot, readLocalWorkersConfig, readSessionSnapshot, realityCheckCommand, referencesIngestCommand, referencesScanCommand, resolveAutoWorkflowMode, resolveContextPackRecord, resolveFullWorkflowTokenBudget, resolveLocalWorkerRoutingDefaults, resolveQueryFromToolInput, retrieveContextPack, runMemoryGuardCheck, saveCollaborationState, saveConfig, saveTeamSyncState, scanReferences, shouldFailCollaborationGuard, shouldSuggestOrchestratorForWorkflow, shouldSuggestRuntimeForWorkflow, summarizeLocalCodeOverlay, teamSyncSweepCommand, validatePlanResult, verifyCommand, workersLocalAddCommand, workersLocalListCommand, workersLocalProbePrintCommand, workersLocalRemoveCommand, workersLocalStatusCommand, workflowSyncPolicyLedgerCommand, writeLocalCodeOverlayCache, writeLocalCodePromotionState, writeLocalSourceSnapshot, writeOrchestratorHandoff, writeProducerLoopArtifact, writeSessionSnapshot };