snipara-companion 3.4.1 → 3.5.0

package/CHANGELOG.md

@@ -2,6 +2,13 @@
 
 Release notes for `snipara-companion`, newest first.
 
+## New In 3.5.0
+
+- Adds an explicit `workflow run --strong-repair` handoff contract for one
+  bounded strong-adapter repair after local proof or output failure.
+- Keeps Companion recommendation-only: it records final authority, proof,
+  scope, and `main_agent` fallback without silently launching workers.
+
 ## New In 3.4.1
 
 - Declares provider API keys by environment-variable name and supports

package/dist/index.d.ts

@@ -3238,6 +3238,14 @@ interface AdaptiveRoutingResolution {
     warnings?: string[];
     rejectedReasons?: Record<string, string[]>;
 }
+interface AdaptiveStrongRepairContract {
+    enabled: boolean;
+    maxAttempts: 1;
+    finalAuthority: "strong_adapter";
+    proofRequired: true;
+    scopePreserved: true;
+    fallback: "main_agent";
+}
 interface AdaptiveWorkRoutingRecommendation {
     workProfile: AdaptiveWorkProfile;
     requirements: AdaptiveModelRequirements;
@@ -3245,6 +3253,7 @@ interface AdaptiveWorkRoutingRecommendation {
     gateway?: AdaptiveRoutingGatewayStatus;
     runtimeCatalog?: AdaptiveRoutingRuntimeCatalog;
     resolution?: AdaptiveRoutingResolution;
+    strongRepair?: AdaptiveStrongRepairContract;
 }
 interface AdaptiveWorkRoutingOptions {
     query: string;
@@ -3259,6 +3268,7 @@ interface AdaptiveWorkRoutingOptions {
     catalogLimit?: number;
     dailyBudgetCents?: number;
     monthlyBudgetCents?: number;
+    strongRepair?: boolean;
 }
 interface OrchestratorHandoffArtifact {
     schemaVersion: "snipara.orchestrator.handoff.v1";
@@ -3289,6 +3299,7 @@ interface OrchestratorHandoffArtifact {
         gateway?: AdaptiveRoutingGatewayStatus;
         runtimeCatalog?: AdaptiveRoutingRuntimeCatalog;
         resolution?: AdaptiveRoutingResolution;
+        strongRepair?: AdaptiveStrongRepairContract;
     };
     task: {
         title: string;

package/dist/index.js

@@ -14207,7 +14207,8 @@ function buildOrchestratorHandoff(options) {
         routingCard: options.adaptiveRouting.routingCard,
         ...options.adaptiveRouting.gateway ? { gateway: options.adaptiveRouting.gateway } : {},
         ...options.adaptiveRouting.runtimeCatalog ? { runtimeCatalog: options.adaptiveRouting.runtimeCatalog } : {},
-        ...options.adaptiveRouting.resolution ? { resolution: options.adaptiveRouting.resolution } : {}
+        ...options.adaptiveRouting.resolution ? { resolution: options.adaptiveRouting.resolution } : {},
+        ...options.adaptiveRouting.strongRepair ? { strongRepair: options.adaptiveRouting.strongRepair } : {}
       } : {}
     },
     task: {
@@ -14324,7 +14325,17 @@ function buildAdaptiveWorkRoutingRecommendation(options) {
   return {
     workProfile,
     requirements,
-    routingCard
+    routingCard,
+    ...options.strongRepair ? {
+      strongRepair: {
+        enabled: true,
+        maxAttempts: 1,
+        finalAuthority: "strong_adapter",
+        proofRequired: true,
+        scopePreserved: true,
+        fallback: "main_agent"
+      }
+    } : {}
   };
 }
 function inferAdaptiveTaskType(query, changedFiles) {
@@ -25167,6 +25178,10 @@ function printAdaptiveRoutingRecommendation(routing) {
   if (routing.requirements.plannerRetainsReasoning) {
     printKeyValue2("Planner retains reasoning:", "yes");
   }
+  if (routing.strongRepair?.enabled) {
+    printKeyValue2("Strong repair:", "one bounded attempt after proof/output failure");
+    printKeyValue2("Repair authority:", routing.strongRepair.finalAuthority);
+  }
   if (routing.gateway) {
     printKeyValue2(
       routing.gateway.source === "local_orchestrator" ? "Local route:" : "Hosted catalog:",
@@ -27501,7 +27516,7 @@ async function workflowRunCommand(options) {
 }
 function shouldBuildAdaptiveRouting(options) {
   return Boolean(
-    options.adaptiveRoutingDryRun || options.routeLocalWorkers || options.routingLocalWorker || options.routingWorkerRole || options.routingPreferredEndpoints?.length || options.routingAllowedEndpoints?.length || options.routingLocalBaseUrl || options.routingLocalModel || options.routingLocalPreferModel || options.routingLocalProvider || options.routingLocalApiKeyEnv || options.plannerRetainsReasoning
+    options.adaptiveRoutingDryRun || options.routeLocalWorkers || options.routingLocalWorker || options.routingWorkerRole || options.routingPreferredEndpoints?.length || options.routingAllowedEndpoints?.length || options.routingLocalBaseUrl || options.routingLocalModel || options.routingLocalPreferModel || options.routingLocalProvider || options.routingLocalApiKeyEnv || options.plannerRetainsReasoning || options.strongRepair
   );
 }
 function buildWorkflowAdaptiveRouting(options, policy = null, intentWarnings = []) {
@@ -27545,6 +27560,7 @@ function buildWorkflowAdaptiveRouting(options, policy = null, intentWarnings = [
     allowedEndpointTypes,
     workerRole,
     plannerRetainsReasoning: options.plannerRetainsReasoning ?? policy?.plannerRetainsReasoning ?? (options.routeLocalWorkers ? true : void 0),
+    strongRepair: options.strongRepair,
     catalogLimit: policy?.catalogLimit ?? DEFAULT_ADAPTIVE_ROUTING_CATALOG_LIMIT,
     dailyBudgetCents: policy?.dailyBudgetCents,
     monthlyBudgetCents: policy?.monthlyBudgetCents
@@ -38959,6 +38975,9 @@ workflow.command("run").description("Run a LITE/STANDARD/FULL/orchestrate workfl
 ).option(
   "--planner-retains-reasoning",
   "Mark the main planner as retaining deep reasoning while the worker executes scoped work"
+).option(
+  "--strong-repair",
+  "Allow one bounded strong-adapter repair after local proof or output validation fails"
 ).option("--write-plan-file <file>", "Write the generated FULL-mode plan as workflow JSON").option(
   "--start-workflow-from-plan",
   "Start a local managed workflow from the generated FULL-mode plan"
@@ -38987,6 +39006,7 @@ workflow.command("run").description("Run a LITE/STANDARD/FULL/orchestrate workfl
     routingLocalApiKeyEnv: options.routingLocalApiKeyEnv,
     routingLocalApiKeyHeader: options.routingLocalApiKeyHeader,
     plannerRetainsReasoning: options.plannerRetainsReasoning ? true : void 0,
+    strongRepair: Boolean(options.strongRepair),
     writePlanFile: options.writePlanFile,
     startWorkflowFromPlan: Boolean(options.startWorkflowFromPlan),
     workflowId: options.workflowId,

package/docs/FULL_REFERENCE.md

@@ -421,6 +421,7 @@ snipara-companion workflow run \
   --routing-allowed-endpoint local \
   --routing-allowed-endpoint cloud \
   --planner-retains-reasoning \
+  --strong-repair \
   "Update documentation for the new gateway"
 ```
 
@@ -523,6 +524,12 @@ routing/handoff contract: Companion resolves the local candidate through
 `snipara-orchestrator`, records metadata, and leaves execution plus proof review
 to the supervising agent workflow.
 
+Add `--strong-repair` when the supervising workflow should permit one strong
+adapter repair after a local proof or output failure. The handoff records the
+contract (`maxAttempts: 1`, same scope and proof, strong adapter as final
+authority, `main_agent` fallback); Companion remains recommendation-only and
+does not launch the worker.
+
 Use Qwen for reflection, architecture, and documentation:
 
 ```bash
@@ -576,6 +583,21 @@ snipara-orchestrator host run \
   --write-scope docs/** --proof "git diff --check" --execute
 ```
 
+For a loopback local worker with one explicit strong repair attempt:
+
+```bash
+snipara-orchestrator host run \
+  --adapter openai_compatible --base-url http://127.0.0.1:1234 \
+  --model local/coder --task "Bounded task" --workspace . \
+  --write-scope docs/** --proof "git diff --check" \
+  --strong-repair --repair-adapter codex_app_server --execute
+```
+
+The repair reuses the approval envelope when approval is required, reruns the
+same proof, and records redacted repair metrics in the durable host receipt.
+Scope violations, unavailable repair hosts, skipped proof, or a failed repair
+escalate without a retry loop.
+
 Native host proof commands run automatically after dispatch. Use
 `--no-run-proof` only when a reviewer will validate the receipt; the state then
 remains `verification_required`. Use `--require-approval` with both an approval

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "snipara-companion",
-  "version": "3.4.1",
+  "version": "3.5.0",
   "description": "Local-first CLI that asks your repo what breaks before an AI coding agent edits it.",
   "main": "dist/index.js",
   "bin": {