snipara-companion 3.5.2 → 3.5.4

package/CHANGELOG.md

@@ -2,6 +2,26 @@
 
 Release notes for `snipara-companion`, newest first.
 
+## New In 3.5.4
+
+- Makes `reality-check` auto-link bounded reviewed Team Sync decisions, keyword
+  document context, managed workflow receipts, and current verification
+  evidence while preserving explicit CLI inputs and failing open when hosted
+  context is unavailable.
+- Keeps the evidence used by Reality Check inspectable in JSON and Markdown
+  findings instead of using verification only as a hidden severity signal.
+- Gives `query` a 30-second default timeout plus explicit search-mode,
+  Answer Pack, decomposition, and shared-context controls for fast recovery.
+
+## New In 3.5.3
+
+- Propagates the configured Companion `sessionId` as
+  `X-Snipara-Session-Id` on Hosted MCP calls.
+- Labels supported retrieval calls as `snipara-companion` while preserving an
+  explicit caller-provided client label and correlation context.
+- Keeps correlation telemetry-only and project-scoped; authentication and
+  ranking promotion remain separate contracts.
+
 ## New In 3.5.2
 
 - Replaces the retired Windsurf preset with Kimi Code CLI across setup,

package/README.md

@@ -60,6 +60,10 @@ same value as `correlation_context.session_id` on retrieval tools.
 
 The identifier is opaque, project-scoped telemetry. It does not grant access or
 change authorization, and explicit per-call correlation remains authoritative.
+Companion also forwards its configured `sessionId` automatically on every
+Hosted MCP call and labels supported retrieval traffic as
+`snipara-companion`, unless the caller supplied an explicit client label. This
+improves join coverage without inventing a second server-side identity.
 
 Example output excerpt:
 
@@ -90,7 +94,7 @@ These commands are useful without hosted Snipara:
 | ------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------- |
 | `source init` / `source sync` / `source status`                                       | Local source snapshot, document preview, and code overlay                    |
 | `impact` / `code impact`                                                              | File-level blast-radius from the local code overlay                          |
-| `reality-check`                                                                       | Intent Ledger, Unknown Registry, and verification checks                     |
+| `reality-check`                                                                       | Intent Ledger, Unknown Registry, auto-linked context, and inspectable proof  |
 | `code callers` / `imports` / `neighbors` / `shortest-path`                            | Structural repo questions from local files                                   |
 | `workflow start` / `phase-start` / `phase-commit` / `resume`                          | Agent continuity that survives compaction                                    |
 | `workflow timeline` / `workflow session`                                              | Append-only local activity log and Session Snapshot V0                       |

package/dist/index.d.ts

@@ -269,6 +269,19 @@ interface ContextQueryResult {
     graph_hybrid_used?: boolean;
     graph_context_tool?: string;
     graph_context_summary?: string;
+    search_mode?: ContextQuerySearchMode;
+    timing?: Record<string, number>;
+    retrieval_diagnostics?: Record<string, unknown>;
+}
+type ContextQuerySearchMode = "keyword" | "semantic" | "hybrid";
+interface ContextQueryOptions {
+    searchMode?: ContextQuerySearchMode;
+    includeMetadata?: boolean;
+    includeAnswerPack?: boolean;
+    autoDecompose?: boolean;
+    includeSharedContext?: boolean;
+    includeAllTiers?: boolean;
+    returnReferences?: boolean;
 }
 interface AnswerPackSource {
     title?: string;
@@ -1222,7 +1235,7 @@ declare class RLMClient {
     /**
      * Query for optimized context using snipara_context_query
      */
-    queryContext(query: string, maxTokens?: number): Promise<ContextQueryResult>;
+    queryContext(query: string, maxTokens?: number, options?: ContextQueryOptions): Promise<ContextQueryResult>;
     sharedContext(options?: {
         maxTokens?: number;
         categories?: string[];
@@ -2183,12 +2196,24 @@ interface RealityCheckCommandOptions {
     decision?: string[];
     document?: string[];
     verification?: string[];
+    autoContext?: boolean;
+    autoContextTimeoutMs?: number;
     includeDirty?: boolean;
     enforce?: boolean;
     dir?: string;
     json?: boolean;
 }
+interface RealityCheckAutoContextClient {
+    queryContext(query: string, maxTokens?: number, options?: ContextQueryOptions): Promise<ContextQueryResult>;
+    getTeamSyncWhatChanged(args: {
+        limit?: number;
+        branch?: string;
+        paths?: string[];
+        recentFiles?: string[];
+    }): Promise<TeamSyncChangesResponse>;
+}
 declare function buildLocalProjectRealityCheck(options: RealityCheckCommandOptions): ProjectRealityCheckResult;
+declare function buildLocalProjectRealityCheckWithAutoContext(options: RealityCheckCommandOptions, clientOverride?: RealityCheckAutoContextClient): Promise<ProjectRealityCheckResult>;
 declare function realityCheckCommand(options: RealityCheckCommandOptions): Promise<void>;
 
 interface DecisionRequestWriteResult {
@@ -4906,4 +4931,4 @@ declare function installAutomationBundle(args: {
 }): Promise<AutomationInstallResult>;
 declare function getAutomationStatus(projectDir?: string): AutomationStatusResult;
 
-export { AUTOMATION_MANIFEST_RELATIVE_PATH, AutomationInstallConflictError, AutomationUnsupportedHookBundleError, CODING_INTELLIGENCE_LEDGER_VERSION, COLLABORATION_STATE_RELATIVE_PATH, ENGINEERING_LEAD_EXECUTION_RECEIPT_STAGES, ENGINEERING_LEAD_EXECUTION_RECEIPT_STATUSES, ENGINEERING_LEAD_POSTURES, ENGINEERING_LEAD_PROOF_VERIFICATION_SOURCES, ENGINEERING_LEAD_PROOF_VERIFICATION_STATUSES, ENGINEERING_LEAD_ROUTING_MODES, ENGINEERING_LEAD_STATUSES, ENGINEERING_LEAD_SUPERVISION_STATUSES, ENGINEERING_LEAD_WORKER_ROLES, ENGINEERING_LEAD_WORK_PACKAGE_STATUSES, FINAL_COMMIT_REPORT_RELATIVE_PATH, FINAL_COMMIT_REPORT_VERSION, ORCHESTRATOR_HANDOFF_RELATIVE_PATH, POLICY_LEDGER_SYNC_REPORT_VERSION, PRODUCER_LOOP_ARTIFACT_VERSION, PRODUCER_LOOP_RELATIVE_DIR, PRODUCER_LOOP_REPORT_VERSION, TEAM_SYNC_STATE_RELATIVE_PATH, WHY_OUTCOME_CAPTURE_VERSION, WORKFLOW_PLANS_RELATIVE_DIR, WORKFLOW_STATE_RELATIVE_PATH, addLocalWorker, agentReadinessAuditCommand, appendActivityEvent, applyLocalContextMutationPlan, archiveInactiveTeamSyncWork, attachLocalContextPackReceipts, autoArchiveTeamSyncState, buildAdaptiveWorkRoutingRecommendation, buildAgentReadinessAuditReport, buildAgenticHandoffMarkdown, buildAgenticTimeline, buildAgenticWorkStatus, buildAutomationInstallPlan, buildCanonicalEvent, buildCodeHooksInstallPlan, buildCodePromotionResult, buildCodeStatusResult, buildCodeSyncResult, buildCodingIntelligenceLedger, buildCollaborationActor, buildCollaborationGuardActionCards, buildCollaborationHooksInstallPlan, buildCommitResultMetadata, buildCompanionEngineeringLeadPlanReport, buildContextPackStats, buildEvalCaseArtifact, buildFinalCommitReport, buildGeneratedWorkflowPlanDocument, buildHostedCodeOverlayUploadPayload, buildHostedGuardPayload, buildJournalCheckpointEntry, buildLocalCallersResult, buildLocalCodeOverlay, buildLocalContextMutationPlan, buildLocalContextPackReceipt, buildLocalContextPackReceipts, buildLocalImpactResult, buildLocalImportsResult, buildLocalNeighborsResult, buildLocalProjectContextValidationReport, buildLocalProjectDriftReport, buildLocalProjectRealityCheck, buildLocalShortestPathResult, buildLocalSourceSnapshot, buildLocalSourceStatus, buildLocalSourceSyncResult, buildMemoryAudit, buildOnboardFolderManifest, buildOrchestratorHandoff, buildPolicyLedgerSyncReport, buildProducerLoopReport, buildProjectIntelligenceBrief, buildProjectIntelligenceRun, buildProjectJudgmentCard, buildSessionBootstrapBrief, buildSessionBootstrapQuality, buildSessionSnapshot, buildSyncDocumentsDryRun, buildTeamSyncHandoffRecord, buildTeamSyncStartWorkRecord, buildTeamSyncSummary, buildToolCallPayload, buildToolResultPayload, buildVerificationPlan, buildWhyOutcomeCaptureReport, buildWorkerTrustCandidates, buildWorkflowImpactGate, buildWorkflowPhaseCommitReceipt, buildWorkflowPhaseCommitSummary, buildWorkflowPlanScaffold, categoryFromGuardTag, classifyToolResult, cleanContextPacks, codingLedgerExportCommand, collaborationIdeStatusCommand, collectAgentReadinessLocalSignals, collectPolicyLedgerSyncArtifacts, collectSyncDocuments, collectSyncDocumentsInput, compactHostedGuardResources, compareLocalSourceSnapshots, completeTeamSyncStateFromEvidence, completeTeamSyncWorkFromEvidence, contextControlApplyCommand, contextControlDriftCommand, contextControlHostedApplyCommand, contextControlHostedDiffCommand, contextControlPlanCommand, contextControlValidateCommand, contextPackCleanCommand, contextPackPackCommand, contextPackRetrieveCommand, contextPackStatsCommand, controlledWorkerExecuteCommand, createClient, createEmptyCollaborationState, createEmptyTeamSyncState, createLocalQueryCache, deriveLocalCollaborationResourcesFromFiles, detectReleaseSurfacesFromFiles, detectRuntimeEnvironment, evalExportCommand, evalRunCommand, evaluateProjectPolicyGates, extractCommandFromToolInput, extractFilesFromToolInput, formatAgentReadinessAuditReport, formatCompanionEngineeringLeadPlanReport, formatFinalCommitReport, formatOrchestratorRecommendationReason, formatPolicyGateDecision, formatProjectJudgmentCard, formatStuckGuardDecision, getAutomationManifestPath, getAutomationStatus, getCollaborationStatePath, getConfigPath, getContextPackStoragePaths, getLocalCodeOverlayCachePath, getLocalCodePromotionStatePath, getLocalSourceSnapshotPath, getOrchestratorRecommendation, getPlanStepDisplayTitle, getStagedFiles, getStuckGuardInjection, getTeamSyncStatePath, hashWorkerProfile, ingestReferences, installAutomationBundle, leadPlanCommand, listProjectsForApiKey, loadAutomationManifest, loadCollaborationState, loadConfig, loadTeamSyncState, memoryAuditCommand, memoryCleanCandidatesCommand, memoryCompactCommand, memoryHealthCommand, memoryLocalCommand, memoryReviewsCommand, normalizeCollaborationFiles, normalizeGuardTag, normalizeWorkflowPlanInput, outcomeCapturePreviewCommand, packContext, parseCollaborationResources, projectIntelligenceBriefCommand, projectIntelligenceRunCommand, readActivityTimeline, readLocalCodeOverlayCache, readLocalCodePromotionState, readLocalSourceSnapshot, readLocalWorkersConfig, readSessionSnapshot, readWorkerTrustEvent, realityCheckCommand, referencesIngestCommand, referencesScanCommand, resolveAutoWorkflowMode, resolveContextPackRecord, resolveFullWorkflowTokenBudget, resolveLocalWorkerRoutingDefaults, resolveQueryFromToolInput, retrieveContextPack, runMemoryGuardCheck, saveCollaborationState, saveConfig, saveTeamSyncState, scanReferences, shouldFailCollaborationGuard, shouldSuggestOrchestratorForWorkflow, shouldSuggestRuntimeForWorkflow, summarizeLocalCodeOverlay, teamSyncSweepCommand, validatePlanResult, verifyCommand, workerTrustCandidateCommand, workerTrustReviewCommand, workerTrustStatusCommand, workersLocalAddCommand, workersLocalListCommand, workersLocalProbePrintCommand, workersLocalRemoveCommand, workersLocalStatusCommand, workflowSyncPolicyLedgerCommand, writeFinalCommitReport, writeLocalCodeOverlayCache, writeLocalCodePromotionState, writeLocalSourceSnapshot, writeOrchestratorHandoff, writeProducerLoopArtifact, writeSessionSnapshot };
+export { AUTOMATION_MANIFEST_RELATIVE_PATH, AutomationInstallConflictError, AutomationUnsupportedHookBundleError, CODING_INTELLIGENCE_LEDGER_VERSION, COLLABORATION_STATE_RELATIVE_PATH, ENGINEERING_LEAD_EXECUTION_RECEIPT_STAGES, ENGINEERING_LEAD_EXECUTION_RECEIPT_STATUSES, ENGINEERING_LEAD_POSTURES, ENGINEERING_LEAD_PROOF_VERIFICATION_SOURCES, ENGINEERING_LEAD_PROOF_VERIFICATION_STATUSES, ENGINEERING_LEAD_ROUTING_MODES, ENGINEERING_LEAD_STATUSES, ENGINEERING_LEAD_SUPERVISION_STATUSES, ENGINEERING_LEAD_WORKER_ROLES, ENGINEERING_LEAD_WORK_PACKAGE_STATUSES, FINAL_COMMIT_REPORT_RELATIVE_PATH, FINAL_COMMIT_REPORT_VERSION, ORCHESTRATOR_HANDOFF_RELATIVE_PATH, POLICY_LEDGER_SYNC_REPORT_VERSION, PRODUCER_LOOP_ARTIFACT_VERSION, PRODUCER_LOOP_RELATIVE_DIR, PRODUCER_LOOP_REPORT_VERSION, TEAM_SYNC_STATE_RELATIVE_PATH, WHY_OUTCOME_CAPTURE_VERSION, WORKFLOW_PLANS_RELATIVE_DIR, WORKFLOW_STATE_RELATIVE_PATH, addLocalWorker, agentReadinessAuditCommand, appendActivityEvent, applyLocalContextMutationPlan, archiveInactiveTeamSyncWork, attachLocalContextPackReceipts, autoArchiveTeamSyncState, buildAdaptiveWorkRoutingRecommendation, buildAgentReadinessAuditReport, buildAgenticHandoffMarkdown, buildAgenticTimeline, buildAgenticWorkStatus, buildAutomationInstallPlan, buildCanonicalEvent, buildCodeHooksInstallPlan, buildCodePromotionResult, buildCodeStatusResult, buildCodeSyncResult, buildCodingIntelligenceLedger, buildCollaborationActor, buildCollaborationGuardActionCards, buildCollaborationHooksInstallPlan, buildCommitResultMetadata, buildCompanionEngineeringLeadPlanReport, buildContextPackStats, buildEvalCaseArtifact, buildFinalCommitReport, buildGeneratedWorkflowPlanDocument, buildHostedCodeOverlayUploadPayload, buildHostedGuardPayload, buildJournalCheckpointEntry, buildLocalCallersResult, buildLocalCodeOverlay, buildLocalContextMutationPlan, buildLocalContextPackReceipt, buildLocalContextPackReceipts, buildLocalImpactResult, buildLocalImportsResult, buildLocalNeighborsResult, buildLocalProjectContextValidationReport, buildLocalProjectDriftReport, buildLocalProjectRealityCheck, buildLocalProjectRealityCheckWithAutoContext, buildLocalShortestPathResult, buildLocalSourceSnapshot, buildLocalSourceStatus, buildLocalSourceSyncResult, buildMemoryAudit, buildOnboardFolderManifest, buildOrchestratorHandoff, buildPolicyLedgerSyncReport, buildProducerLoopReport, buildProjectIntelligenceBrief, buildProjectIntelligenceRun, buildProjectJudgmentCard, buildSessionBootstrapBrief, buildSessionBootstrapQuality, buildSessionSnapshot, buildSyncDocumentsDryRun, buildTeamSyncHandoffRecord, buildTeamSyncStartWorkRecord, buildTeamSyncSummary, buildToolCallPayload, buildToolResultPayload, buildVerificationPlan, buildWhyOutcomeCaptureReport, buildWorkerTrustCandidates, buildWorkflowImpactGate, buildWorkflowPhaseCommitReceipt, buildWorkflowPhaseCommitSummary, buildWorkflowPlanScaffold, categoryFromGuardTag, classifyToolResult, cleanContextPacks, codingLedgerExportCommand, collaborationIdeStatusCommand, collectAgentReadinessLocalSignals, collectPolicyLedgerSyncArtifacts, collectSyncDocuments, collectSyncDocumentsInput, compactHostedGuardResources, compareLocalSourceSnapshots, completeTeamSyncStateFromEvidence, completeTeamSyncWorkFromEvidence, contextControlApplyCommand, contextControlDriftCommand, contextControlHostedApplyCommand, contextControlHostedDiffCommand, contextControlPlanCommand, contextControlValidateCommand, contextPackCleanCommand, contextPackPackCommand, contextPackRetrieveCommand, contextPackStatsCommand, controlledWorkerExecuteCommand, createClient, createEmptyCollaborationState, createEmptyTeamSyncState, createLocalQueryCache, deriveLocalCollaborationResourcesFromFiles, detectReleaseSurfacesFromFiles, detectRuntimeEnvironment, evalExportCommand, evalRunCommand, evaluateProjectPolicyGates, extractCommandFromToolInput, extractFilesFromToolInput, formatAgentReadinessAuditReport, formatCompanionEngineeringLeadPlanReport, formatFinalCommitReport, formatOrchestratorRecommendationReason, formatPolicyGateDecision, formatProjectJudgmentCard, formatStuckGuardDecision, getAutomationManifestPath, getAutomationStatus, getCollaborationStatePath, getConfigPath, getContextPackStoragePaths, getLocalCodeOverlayCachePath, getLocalCodePromotionStatePath, getLocalSourceSnapshotPath, getOrchestratorRecommendation, getPlanStepDisplayTitle, getStagedFiles, getStuckGuardInjection, getTeamSyncStatePath, hashWorkerProfile, ingestReferences, installAutomationBundle, leadPlanCommand, listProjectsForApiKey, loadAutomationManifest, loadCollaborationState, loadConfig, loadTeamSyncState, memoryAuditCommand, memoryCleanCandidatesCommand, memoryCompactCommand, memoryHealthCommand, memoryLocalCommand, memoryReviewsCommand, normalizeCollaborationFiles, normalizeGuardTag, normalizeWorkflowPlanInput, outcomeCapturePreviewCommand, packContext, parseCollaborationResources, projectIntelligenceBriefCommand, projectIntelligenceRunCommand, readActivityTimeline, readLocalCodeOverlayCache, readLocalCodePromotionState, readLocalSourceSnapshot, readLocalWorkersConfig, readSessionSnapshot, readWorkerTrustEvent, realityCheckCommand, referencesIngestCommand, referencesScanCommand, resolveAutoWorkflowMode, resolveContextPackRecord, resolveFullWorkflowTokenBudget, resolveLocalWorkerRoutingDefaults, resolveQueryFromToolInput, retrieveContextPack, runMemoryGuardCheck, saveCollaborationState, saveConfig, saveTeamSyncState, scanReferences, shouldFailCollaborationGuard, shouldSuggestOrchestratorForWorkflow, shouldSuggestRuntimeForWorkflow, summarizeLocalCodeOverlay, teamSyncSweepCommand, validatePlanResult, verifyCommand, workerTrustCandidateCommand, workerTrustReviewCommand, workerTrustStatusCommand, workersLocalAddCommand, workersLocalListCommand, workersLocalProbePrintCommand, workersLocalRemoveCommand, workersLocalStatusCommand, workflowSyncPolicyLedgerCommand, writeFinalCommitReport, writeLocalCodeOverlayCache, writeLocalCodePromotionState, writeLocalSourceSnapshot, writeOrchestratorHandoff, writeProducerLoopArtifact, writeSessionSnapshot };

package/dist/index.js

@@ -99,6 +99,7 @@ __export(index_exports, {
   buildLocalProjectContextValidationReport: () => buildLocalProjectContextValidationReport,
   buildLocalProjectDriftReport: () => buildLocalProjectDriftReport,
   buildLocalProjectRealityCheck: () => buildLocalProjectRealityCheck,
+  buildLocalProjectRealityCheckWithAutoContext: () => buildLocalProjectRealityCheckWithAutoContext,
   buildLocalShortestPathResult: () => buildLocalShortestPathResult,
   buildLocalSourceSnapshot: () => buildLocalSourceSnapshot,
   buildLocalSourceStatus: () => buildLocalSourceStatus,
@@ -522,6 +523,27 @@ function readGitRemote(cwd) {
 }
 
 // src/api/client.ts
+var CORRELATED_RETRIEVAL_TOOL_NAMES = /* @__PURE__ */ new Set([
+  "snipara_context_query",
+  "snipara_ask",
+  "snipara_search",
+  "snipara_recall",
+  "snipara_get_chunk",
+  "rlm_context_query",
+  "rlm_ask",
+  "rlm_search",
+  "rlm_recall",
+  "rlm_get_chunk"
+]);
+function withCompanionRetrievalClient(toolName, args) {
+  if (!CORRELATED_RETRIEVAL_TOOL_NAMES.has(toolName) || args.client !== void 0) {
+    return args;
+  }
+  return {
+    ...args,
+    client: "snipara-companion"
+  };
+}
 function getSniparaTokenStorePath() {
   return path3.join(os2.homedir(), ".snipara", "tokens.json");
 }
@@ -743,7 +765,7 @@ var RLMClient = class {
       method: "tools/call",
       params: {
         name: toolName,
-        arguments: args
+        arguments: withCompanionRetrievalClient(toolName, args)
       }
     };
     const controller = new AbortController();
@@ -754,7 +776,8 @@ var RLMClient = class {
         {
           method: "POST",
           headers: {
-            "Content-Type": "application/json"
+            "Content-Type": "application/json",
+            ...this.config.sessionId ? { "X-Snipara-Session-Id": this.config.sessionId } : {}
           },
           body: JSON.stringify(payload),
           signal: controller.signal
@@ -783,13 +806,17 @@ var RLMClient = class {
   /**
    * Query for optimized context using snipara_context_query
    */
-  async queryContext(query, maxTokens = 8e3) {
+  async queryContext(query, maxTokens = 8e3, options = {}) {
     const result = await this.mcpCall("snipara_context_query", {
       query,
       max_tokens: maxTokens,
-      search_mode: "hybrid",
-      include_metadata: true,
-      include_answer_pack: true
+      search_mode: options.searchMode ?? "hybrid",
+      include_metadata: options.includeMetadata ?? true,
+      include_answer_pack: options.includeAnswerPack ?? true,
+      auto_decompose: options.autoDecompose,
+      include_shared_context: options.includeSharedContext,
+      include_all_tiers: options.includeAllTiers,
+      return_references: options.returnReferences
     });
     return {
       sections: (result.sections || []).map((s) => ({
@@ -818,7 +845,10 @@ var RLMClient = class {
       recommended_tool_arguments: result.recommended_tool_arguments || {},
       graph_hybrid_used: result.graph_hybrid_used,
       graph_context_tool: result.graph_context_tool,
-      graph_context_summary: result.graph_context_summary
+      graph_context_summary: result.graph_context_summary,
+      search_mode: result.search_mode,
+      timing: result.timing,
+      retrieval_diagnostics: result.retrieval_diagnostics
     };
   }
   async sharedContext(options = {}) {
@@ -9519,6 +9549,9 @@ function buildDocumentIntentEntry(doc, policy) {
     doc.intent?.freshnessHorizonDays ?? doc.freshnessHorizonDays ?? sectionIntent.freshnessHorizonDays,
     policy
   );
+  const affectedAnchors = uniqueStrings3(
+    doc.affectedAnchors && doc.affectedAnchors.length > 0 ? doc.affectedAnchors : [doc.path]
+  );
   return {
     id: `intent:doc:${doc.path}`,
     title: doc.title || doc.path,
@@ -9546,7 +9579,7 @@ function buildDocumentIntentEntry(doc, policy) {
       structuredSections: sectionIntent,
       fallbackUsed: goal === doc.path || goal === doc.title
     }),
-    affectedAnchors: [doc.path],
+    affectedAnchors,
     owner: doc.intent?.owner ?? sectionIntent.owner ?? doc.owner ?? null,
     evidence: [
       {
@@ -10174,6 +10207,23 @@ function decisionEvidence(decisions) {
     strength: decision.confidenceScore ?? 0.8
   }));
 }
+function verificationEvidence(input) {
+  return (input.verificationChecklist ?? []).slice(0, 8).map((item, index) => ({
+    kind: /test|spec|vitest|pytest|e2e|smoke|lint|type.?check|build|health|ready|migration|schema|pack/i.test(
+      item
+    ) ? "test" : "manual",
+    label: item,
+    sourceRef: `verification:${index + 1}`,
+    strength: 0.75
+  }));
+}
+function uniqueEvidence(evidence) {
+  return [
+    ...new Map(
+      evidence.map((item) => [`${item.kind}:${item.sourceRef ?? item.label}`, item])
+    ).values()
+  ];
+}
 function buildProjectRealityCheck(input) {
   const changedFiles = uniqueStrings3(input.changedFiles);
   const dirtyFiles = uniqueStrings3(input.dirtyFiles ?? []);
@@ -10181,7 +10231,17 @@ function buildProjectRealityCheck(input) {
   const tests = testFiles(changedFiles);
   const findings = [];
   const decisions = input.decisions ?? [];
-  const contextEvidence2 = [...docEvidence(input), ...symbolEvidence(input)];
+  const verificationRefs = verificationEvidence(input);
+  const contextEvidence2 = uniqueEvidence([
+    ...docEvidence(input),
+    ...symbolEvidence(input),
+    ...input.evidence ?? []
+  ]);
+  const allEvidence = uniqueEvidence([
+    ...decisionEvidence(decisions),
+    ...verificationRefs,
+    ...contextEvidence2
+  ]).slice(0, 20);
   const intentLedger = buildProjectIntentLedger(input, changedFiles);
   for (const surface of SENSITIVE_SURFACES) {
     const files = surfaceFiles(surface, changedFiles);
@@ -10210,7 +10270,11 @@ function buildProjectRealityCheck(input) {
       summary: `${files.length} changed file(s) touch ${surface.label.toLowerCase()} with ${relatedDecisions.length > 0 ? `${relatedDecisions.length} linked decision(s)` : "no linked decision"} and ${hasVerification ? "some verification evidence" : "no obvious verification evidence"}.`,
       changedFiles: files.slice(0, 12),
       decisionIds: relatedDecisions.map((decision) => decision.id).slice(0, 8),
-      evidence: [...decisionEvidence(relatedDecisions), ...contextEvidence2].slice(0, 8),
+      evidence: uniqueEvidence([
+        ...decisionEvidence(relatedDecisions),
+        ...verificationRefs,
+        ...contextEvidence2
+      ]).slice(0, 8),
       reasonCodes: reasonCodes2,
       recommendedActions,
       caveats: [
@@ -10232,7 +10296,7 @@ function buildProjectRealityCheck(input) {
       summary: "This change spans architectural boundaries. Verify that the dependency direction and runtime ownership still match the intended architecture.",
       changedFiles: files.slice(0, 12),
       decisionIds: [],
-      evidence: contextEvidence2.slice(0, 6),
+      evidence: uniqueEvidence([...verificationRefs, ...contextEvidence2]).slice(0, 8),
       reasonCodes: [rule.key, "cross_boundary_change"],
       recommendedActions: [
         "Check that the changed modules do not introduce a forbidden runtime dependency.",
@@ -10331,6 +10395,7 @@ function buildProjectRealityCheck(input) {
     findings,
     intentLedger,
     unknownRegistry,
+    evidence: allEvidence,
     requiredActions,
     watchItems,
     reasonCodes: uniqueStrings3([
@@ -10399,11 +10464,24 @@ function renderProjectRealityCheckMarkdown(result) {
       if (finding.decisionIds.length > 0) {
         lines.push(`  Decisions: ${finding.decisionIds.join(", ")}`);
       }
+      if (finding.evidence.length > 0) {
+        lines.push(
+          `  Evidence: ${finding.evidence.slice(0, 4).map((item) => `${item.kind}:${item.label}`).join("; ")}`
+        );
+      }
       if (finding.recommendedActions.length > 0) {
         lines.push(`  Action: ${finding.recommendedActions[0]}`);
       }
     }
   }
+  if (result.evidence.length > 0) {
+    lines.push("", "Evidence:");
+    lines.push(
+      ...result.evidence.slice(0, 10).map(
+        (item) => `- ${item.kind}: ${item.label}${item.sourceRef ? ` (${item.sourceRef})` : ""}`
+      )
+    );
+  }
   if (result.requiredActions.length > 0) {
     lines.push("", "Required actions:");
     lines.push(...result.requiredActions.map((action) => `- ${action}`));
@@ -26096,8 +26174,18 @@ function printRecallResult(result) {
 }
 async function queryCommand(options) {
   ensureConfigured();
-  const client = createClient(15e3);
-  const result = await client.queryContext(options.query, options.maxTokens || 8e3);
+  const searchMode = options.searchMode ?? "hybrid";
+  if (!["keyword", "semantic", "hybrid"].includes(searchMode)) {
+    throw new Error("--search-mode must be keyword, semantic, or hybrid");
+  }
+  const timeoutMs = Math.max(1e3, Math.min(options.timeoutMs ?? 3e4, 12e4));
+  const client = createClient(timeoutMs);
+  const result = await client.queryContext(options.query, options.maxTokens || 8e3, {
+    searchMode,
+    includeAnswerPack: options.includeAnswerPack,
+    autoDecompose: options.autoDecompose,
+    includeSharedContext: options.includeSharedContext
+  });
   const recommendedExecution = options.followRecommendation && result.recommended_tool ? await runRecommendedTool(result) : null;
   if (options.json) {
     printJson2(
@@ -34828,6 +34916,7 @@ async function projectIntelligenceBriefCommand(options) {
 
 // src/commands/reality-check.ts
 var import_node_child_process14 = require("child_process");
+var import_node_fs2 = __toESM(require("fs"));
 var import_node_path2 = __toESM(require("path"));
 var import_chalk12 = __toESM(require("chalk"));
 function runGit2(args, cwd, options = {}) {
@@ -34922,8 +35011,263 @@ function parseDocument(value) {
     contentPreview: rest.join(":").trim() || null
   };
 }
-function buildLocalProjectRealityCheck(options) {
-  const scope = buildLocalGitScope(options);
+function emptyAutoContext() {
+  return {
+    decisions: [],
+    documents: [],
+    evidence: [],
+    verification: [],
+    caveats: []
+  };
+}
+function isRecord19(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function stringValue14(value) {
+  return typeof value === "string" && value.trim() ? value.trim() : void 0;
+}
+function stringList3(value) {
+  return Array.isArray(value) ? unique5(value.map((item) => typeof item === "string" ? item : void 0)) : [];
+}
+function readJsonRecord3(filePath) {
+  try {
+    const parsed = JSON.parse(import_node_fs2.default.readFileSync(filePath, "utf8"));
+    return isRecord19(parsed) ? parsed : void 0;
+  } catch {
+    return void 0;
+  }
+}
+var GENERIC_SCOPE_TOKENS = /* @__PURE__ */ new Set([
+  "apps",
+  "packages",
+  "src",
+  "test",
+  "tests",
+  "index",
+  "server",
+  "project",
+  "snipara",
+  "file",
+  "files",
+  "change",
+  "changed"
+]);
+function scopeTokens(value) {
+  const tokens = new Set(
+    (value.toLowerCase().match(/[a-z0-9][a-z0-9_-]{2,}/g) ?? []).flatMap((token) => token.split(/[-_]/g)).filter((token) => token.length >= 3 && !GENERIC_SCOPE_TOKENS.has(token))
+  );
+  if (/packages\/cli\//i.test(value)) {
+    tokens.add("cli");
+    tokens.add("companion");
+  }
+  if (/project-intelligence-contracts/i.test(value)) {
+    tokens.add("intelligence");
+    tokens.add("intent");
+    tokens.add("reality");
+  }
+  if (/mcp-server/i.test(value)) {
+    tokens.add("mcp");
+    tokens.add("context");
+    tokens.add("retrieval");
+  }
+  if (/prisma|migration|document_chunks/i.test(value)) {
+    tokens.add("database");
+    tokens.add("schema");
+    tokens.add("pgvector");
+  }
+  return tokens;
+}
+function matchingAnchors(text, changedFiles) {
+  const textTokens = scopeTokens(text);
+  return changedFiles.filter((file) => {
+    const fileTokens = scopeTokens(file);
+    return [...fileTokens].some((token) => textTokens.has(token));
+  });
+}
+function hasFileOverlap(left, right) {
+  const rightSet = new Set(right);
+  return left.some((item) => rightSet.has(item));
+}
+function collectLocalReceiptContext(scope) {
+  const context = emptyAutoContext();
+  const workflowRef = ".snipara/workflow/current.json";
+  const workflow2 = readJsonRecord3(import_node_path2.default.join(scope.root, workflowRef));
+  if (workflow2) {
+    const workflowId = stringValue14(workflow2.workflowId) ?? "managed workflow";
+    const phases = Array.isArray(workflow2.phases) ? workflow2.phases.filter(isRecord19) : [];
+    for (const phase of phases) {
+      const phaseFiles = stringList3(phase.files);
+      if (!hasFileOverlap(phaseFiles, scope.changedFiles)) continue;
+      const title = stringValue14(phase.title) ?? stringValue14(phase.id) ?? "workflow phase";
+      const status = stringValue14(phase.status) ?? "unknown";
+      context.evidence.push({
+        kind: "workflow",
+        label: `${workflowId}: ${title} (${status})`,
+        sourceRef: workflowRef,
+        strength: status === "completed" ? 0.78 : 0.62
+      });
+    }
+  }
+  const finalReportRef = ".snipara/workflow/final-report.json";
+  const finalReport = readJsonRecord3(import_node_path2.default.join(scope.root, finalReportRef));
+  const changed = isRecord19(finalReport?.changed) ? finalReport.changed : void 0;
+  const reportFiles = stringList3(changed?.files);
+  const overlappingFiles = reportFiles.filter((file) => scope.changedFiles.includes(file));
+  if (finalReport && overlappingFiles.length > 0) {
+    const workflowId = stringValue14(finalReport.workflowId) ?? "completed workflow";
+    const outcome = stringValue14(finalReport.outcome) ?? "unknown";
+    context.evidence.push({
+      kind: "workflow",
+      label: `${workflowId}: final report (${outcome})`,
+      sourceRef: finalReportRef,
+      strength: outcome === "completed" ? 0.82 : 0.6
+    });
+    const repository = isRecord19(changed?.repository) ? changed.repository : void 0;
+    const reportHead = stringValue14(repository?.head);
+    const dirtyOverlap = hasFileOverlap(scope.dirtyFiles, overlappingFiles);
+    const receiptMatchesCurrentHead = Boolean(reportHead && reportHead === scope.headRef);
+    const evidence = isRecord19(finalReport.evidence) ? finalReport.evidence : void 0;
+    const items = Array.isArray(evidence?.items) ? evidence.items.filter(isRecord19) : [];
+    if (receiptMatchesCurrentHead && !dirtyOverlap) {
+      for (const [index, item] of items.entries()) {
+        if (stringValue14(item.status)?.toLowerCase() !== "passed") continue;
+        const label = stringValue14(item.text);
+        if (!label) continue;
+        context.verification.push(label);
+        context.evidence.push({
+          kind: "test",
+          label,
+          sourceRef: `${finalReportRef}#evidence-${index + 1}`,
+          strength: 0.88
+        });
+      }
+    } else if (items.length > 0) {
+      context.caveats.push(
+        "A prior workflow report overlaps this scope, but its passed checks were not counted as current verification because the receipt does not cover the current dirty/HEAD state."
+      );
+    }
+  }
+  return context;
+}
+function isReviewedDecisionSignal(signal) {
+  const status = signal.status.toUpperCase();
+  if (!["ACTIVE", "APPROVED", "ACCEPTED", "CONFIRMED"].includes(status)) return false;
+  const tags = signal.tags.map((tag) => tag.toLowerCase());
+  if (tags.some(
+    (tag) => tag === "workflow-phase" || tag === "release" || tag === "auto-captured" || tag === "review-pending" || tag.startsWith("journal:")
+  )) {
+    return false;
+  }
+  return /decision/i.test(signal.recommendedAction);
+}
+function decisionsFromTeamSync(response, changedFiles) {
+  const decisions = [];
+  for (const signal of response.whatChanged.decisions.filter(isReviewedDecisionSignal)) {
+    const affectedAnchors = matchingAnchors(
+      [signal.title, signal.summary, ...signal.tags].join(" "),
+      changedFiles
+    );
+    if (affectedAnchors.length === 0) continue;
+    decisions.push({
+      id: signal.id,
+      title: signal.title,
+      decision: signal.summary,
+      status: "approved",
+      confidenceScore: signal.impact?.toUpperCase() === "HIGH" ? 0.9 : 0.84,
+      affectedAnchors,
+      evidence: [
+        {
+          kind: "decision",
+          label: `${signal.id}: ${signal.title}`,
+          sourceRef: signal.id,
+          strength: signal.impact?.toUpperCase() === "HIGH" ? 0.9 : 0.84
+        }
+      ]
+    });
+  }
+  return decisions.slice(0, 8);
+}
+function contextQueryText(options, scope) {
+  const task = options.task?.trim() || "Project Reality Check governing intent";
+  const tokens = unique5([
+    ...scopeTokens(task),
+    ...scope.changedFiles.slice(0, 12).flatMap((file) => [...scopeTokens(file)]),
+    "decision",
+    "constraint"
+  ]).slice(0, 8);
+  return tokens.join(" ");
+}
+function documentsFromContext(result, changedFiles) {
+  return result.sections.filter((section) => section.file && section.file !== "(unknown)").map((section) => ({
+    path: section.file,
+    title: section.title,
+    contentPreview: section.content.slice(0, 1600),
+    kind: /adr|decision/i.test(`${section.file} ${section.title}`) ? "ADR" : "DOC",
+    sourceRef: `${section.file}#L${section.lines[0]}-L${section.lines[1]}`,
+    affectedAnchors: matchingAnchors(
+      `${section.file} ${section.title} ${section.content.slice(0, 800)}`,
+      changedFiles
+    )
+  })).slice(0, 8);
+}
+async function collectHostedAutoContext(client, options, scope) {
+  const context = emptyAutoContext();
+  const [teamSync2, documents] = await Promise.allSettled([
+    client.getTeamSyncWhatChanged({
+      limit: 50,
+      branch: scope.branch,
+      paths: scope.changedFiles.slice(0, 20),
+      recentFiles: scope.changedFiles.slice(0, 10)
+    }),
+    client.queryContext(contextQueryText(options, scope), 1200, {
+      searchMode: "keyword",
+      includeMetadata: true,
+      includeAnswerPack: false,
+      autoDecompose: false,
+      includeSharedContext: false,
+      includeAllTiers: false
+    })
+  ]);
+  if (teamSync2.status === "fulfilled") {
+    context.decisions = decisionsFromTeamSync(teamSync2.value, scope.changedFiles);
+  } else {
+    context.caveats.push(
+      "Hosted reviewed-decision auto-linking was unavailable; explicit --decision inputs remain authoritative."
+    );
+  }
+  if (documents.status === "fulfilled") {
+    context.documents = documentsFromContext(documents.value, scope.changedFiles);
+  } else {
+    context.caveats.push(
+      "Hosted document auto-context was unavailable; Reality Check continued with local and explicit evidence."
+    );
+  }
+  return context;
+}
+function mergeAutoContext(local, hosted) {
+  return {
+    decisions: [...local.decisions, ...hosted.decisions],
+    documents: [...local.documents, ...hosted.documents],
+    evidence: [...local.evidence, ...hosted.evidence],
+    verification: unique5([...local.verification, ...hosted.verification]),
+    caveats: unique5([...local.caveats, ...hosted.caveats])
+  };
+}
+function buildProjectRealityCheckForScope(options, scope, autoContext = emptyAutoContext()) {
+  const decisionsById = new Map(
+    autoContext.decisions.map((decision) => [decision.id, decision])
+  );
+  for (const [index, value] of (options.decision ?? []).entries()) {
+    const decision = parseDecision(value, index);
+    decisionsById.set(decision.id, decision);
+  }
+  const documentsByPath = new Map(
+    autoContext.documents.map((document) => [document.path, document])
+  );
+  for (const value of options.document ?? []) {
+    const document = parseDocument(value);
+    documentsByPath.set(document.path, document);
+  }
   const result = buildProjectRealityCheck({
     source: "local",
     task: options.task,
@@ -34933,17 +35277,35 @@ function buildLocalProjectRealityCheck(options) {
     changedFiles: scope.changedFiles,
     dirtyFiles: scope.dirtyFiles,
     diffSummary: scope.diffSummary,
-    decisions: (options.decision ?? []).map(parseDecision),
-    documents: (options.document ?? []).map(parseDocument),
-    verificationChecklist: options.verification ?? []
+    decisions: [...decisionsById.values()],
+    documents: [...documentsByPath.values()],
+    evidence: autoContext.evidence,
+    verificationChecklist: unique5([...autoContext.verification, ...options.verification ?? []])
   });
-  if (scope.caveats.length === 0) {
-    return result;
+  const caveats = unique5([...result.caveats, ...scope.caveats, ...autoContext.caveats]);
+  return { ...result, caveats };
+}
+function buildLocalProjectRealityCheck(options) {
+  const scope = buildLocalGitScope(options);
+  return buildProjectRealityCheckForScope(options, scope);
+}
+async function buildLocalProjectRealityCheckWithAutoContext(options, clientOverride) {
+  const scope = buildLocalGitScope(options);
+  let autoContext = collectLocalReceiptContext(scope);
+  const configured = Boolean(clientOverride) || isConfigured({ cwd: scope.root });
+  if (configured) {
+    const timeoutMs = Math.max(1e3, Math.min(options.autoContextTimeoutMs ?? 12e3, 3e4));
+    const client = clientOverride ?? createClient(timeoutMs, { cwd: scope.root });
+    autoContext = mergeAutoContext(
+      autoContext,
+      await collectHostedAutoContext(client, options, scope)
+    );
+  } else {
+    autoContext.caveats.push(
+      "Hosted auto-context was skipped because this workspace is not configured; use --decision, --document, and --verification for explicit evidence."
+    );
   }
-  return {
-    ...result,
-    caveats: [...result.caveats, ...scope.caveats]
-  };
+  return buildProjectRealityCheckForScope(options, scope, autoContext);
 }
 function printRealityCheck(result) {
   console.log(import_chalk12.default.bold("Project Reality Check"));
@@ -34955,7 +35317,7 @@ function printRealityCheck(result) {
   console.log(renderProjectRealityCheckMarkdown(result));
 }
 async function realityCheckCommand(options) {
-  const result = buildLocalProjectRealityCheck(options);
+  const result = options.autoContext === false ? buildLocalProjectRealityCheck(options) : await buildLocalProjectRealityCheckWithAutoContext(options);
   if (options.json) {
     console.log(JSON.stringify(result, null, 2));
   } else {
@@ -34967,7 +35329,7 @@ async function realityCheckCommand(options) {
 }
 
 // src/commands/context-control.ts
-var fs33 = __toESM(require("fs"));
+var fs34 = __toESM(require("fs"));
 var path33 = __toESM(require("path"));
 var import_node_child_process15 = require("child_process");
 var import_chalk13 = __toESM(require("chalk"));
@@ -35018,7 +35380,7 @@ function resolveGitDriftScopePaths(cwd) {
     path33.join(".snipara", "decisions")
   ];
   const manifestPath = resolveManifestPath(cwd);
-  if (!fs33.existsSync(manifestPath)) {
+  if (!fs34.existsSync(manifestPath)) {
     return normalizeScopePaths(scopePaths, cwd);
   }
   const manifestRead = readJsonFileSafe(manifestPath);
@@ -35068,12 +35430,12 @@ function receiptPathFor(receipt, cwd) {
   return path33.resolve(cwd, CONTEXT_CONTROL_APPLIED_RELATIVE_DIR, `${receipt.receiptId}.json`);
 }
 function writeStableJsonFile(filePath, value) {
-  fs33.mkdirSync(path33.dirname(filePath), { recursive: true });
-  fs33.writeFileSync(filePath, `${stableDecisionJsonStringify(value)}
+  fs34.mkdirSync(path33.dirname(filePath), { recursive: true });
+  fs34.writeFileSync(filePath, `${stableDecisionJsonStringify(value)}
 `, "utf8");
 }
 function readJsonFile4(filePath) {
-  return JSON.parse(fs33.readFileSync(filePath, "utf8"));
+  return JSON.parse(fs34.readFileSync(filePath, "utf8"));
 }
 function buildStateOperation(options) {
   const target = assertContextControlTarget(
@@ -35265,7 +35627,7 @@ function applyLocalContextMutationPlan(options) {
     baseRevisionAtApply: currentRevision
   });
   const receiptPath = receiptPathFor(pendingReceipt, cwd);
-  if (fs33.existsSync(receiptPath)) {
+  if (fs34.existsSync(receiptPath)) {
     const receipt2 = buildContextMutationApplyReceipt({
       plan,
       appliedAt: options.now,
@@ -35303,7 +35665,7 @@ function applyLocalContextMutationPlan(options) {
       continue;
     }
     const absoluteTarget = path33.resolve(cwd, target);
-    if (operation.mode === "create" && fs33.existsSync(absoluteTarget)) {
+    if (operation.mode === "create" && fs34.existsSync(absoluteTarget)) {
       throw new Error(`Refusing to overwrite existing context-control file: ${target}`);
     }
     writeStableJsonFile(absoluteTarget, operation.content ?? {});
@@ -35337,8 +35699,8 @@ function applyLocalContextMutationPlan(options) {
   };
 }
 function listJsonFiles2(dir) {
-  if (!fs33.existsSync(dir)) return [];
-  return fs33.readdirSync(dir).filter((name) => name.endsWith(".json")).map((name) => path33.join(dir, name)).sort((left, right) => left.localeCompare(right));
+  if (!fs34.existsSync(dir)) return [];
+  return fs34.readdirSync(dir).filter((name) => name.endsWith(".json")).map((name) => path33.join(dir, name)).sort((left, right) => left.localeCompare(right));
 }
 function readJsonFileSafe(filePath) {
   try {
@@ -35417,7 +35779,7 @@ function collectGitDriftSignals(cwd) {
 }
 function collectWorkflowDriftSignals(cwd) {
   const workflowPath = path33.join(cwd, ".snipara", "workflow", "current.json");
-  if (!fs33.existsSync(workflowPath)) {
+  if (!fs34.existsSync(workflowPath)) {
     return [
       {
         id: "workflow-state-missing",
@@ -35560,7 +35922,7 @@ function collectContextControlDriftSignals(cwd) {
 function collectProjectContextManifestDriftSignals(cwd) {
   const manifestPath = resolveManifestPath(cwd);
   const relative11 = toProjectRelativePath4(manifestPath, cwd);
-  if (!fs33.existsSync(manifestPath)) {
+  if (!fs34.existsSync(manifestPath)) {
     return [
       {
         id: "project-context-manifest-missing",
@@ -35763,23 +36125,23 @@ function resolveHostedContextSources(cwd, manifestPath, report) {
   if (!report.manifest || report.status === "invalid") {
     throw new Error("ProjectContext manifest is invalid; run context-control validate first.");
   }
-  const workspaceRoot2 = fs33.realpathSync(cwd);
+  const workspaceRoot2 = fs34.realpathSync(cwd);
   return report.manifest.sources.map((source2) => {
     const candidate = path33.resolve(cwd, source2.path);
-    if (!fs33.existsSync(candidate)) {
+    if (!fs34.existsSync(candidate)) {
       throw new Error(`ProjectContext source is missing: ${source2.path}`);
     }
-    if (fs33.lstatSync(candidate).isSymbolicLink()) {
+    if (fs34.lstatSync(candidate).isSymbolicLink()) {
       throw new Error(`ProjectContext source symlinks are not allowed: ${source2.path}`);
     }
-    const canonical = fs33.realpathSync(candidate);
+    const canonical = fs34.realpathSync(candidate);
     if (canonical !== workspaceRoot2 && !canonical.startsWith(`${workspaceRoot2}${path33.sep}`)) {
       throw new Error(`ProjectContext source escapes the workspace: ${source2.path}`);
     }
-    if (!fs33.statSync(canonical).isFile()) {
+    if (!fs34.statSync(canonical).isFile()) {
       throw new Error(`ProjectContext source must be a file: ${source2.path}`);
     }
-    const content = fs33.readFileSync(canonical, "utf8");
+    const content = fs34.readFileSync(canonical, "utf8");
     if (Buffer.byteLength(content, "utf8") > 1e6) {
       throw new Error(`ProjectContext source exceeds 1 MB: ${source2.path}`);
     }
@@ -35914,7 +36276,7 @@ function uniqueStrings22(values) {
 
 // src/commands/references.ts
 var crypto6 = __toESM(require("crypto"));
-var fs34 = __toESM(require("fs"));
+var fs35 = __toESM(require("fs"));
 var path34 = __toESM(require("path"));
 var import_chalk14 = __toESM(require("chalk"));
 var MANIFEST_VERSION2 = "snipara.references.v1";
@@ -35998,13 +36360,13 @@ function toRelative(root, file) {
   return path34.relative(root, file).split(path34.sep).join("/");
 }
 function ensureParentDir(file) {
-  fs34.mkdirSync(path34.dirname(file), { recursive: true });
+  fs35.mkdirSync(path34.dirname(file), { recursive: true });
 }
 function walkFiles(root, extensions, maxFiles, files = []) {
   if (files.length >= maxFiles) {
     return files;
   }
-  for (const entry of fs34.readdirSync(root, { withFileTypes: true })) {
+  for (const entry of fs35.readdirSync(root, { withFileTypes: true })) {
     if (files.length >= maxFiles) {
       break;
     }
@@ -36025,7 +36387,7 @@ function collectReferenceItems(root, files, allowDomains, denyDomains) {
   const byUrl = /* @__PURE__ */ new Map();
   const discoveredAt = (/* @__PURE__ */ new Date()).toISOString();
   for (const file of files) {
-    const content = fs34.readFileSync(file, "utf-8");
+    const content = fs35.readFileSync(file, "utf-8");
     const lines = content.split(/\r?\n/);
     const markdownLink = /\[([^\]]+)\]\((https?:\/\/[^)\s]+)\)/g;
     const bareUrl = /https?:\/\/[^\s<>"'`]+/g;
@@ -36091,7 +36453,7 @@ function scanReferences(options = {}) {
     items
   };
   ensureParentDir(outputPath);
-  fs34.writeFileSync(outputPath, `${JSON.stringify(manifest, null, 2)}
+  fs35.writeFileSync(outputPath, `${JSON.stringify(manifest, null, 2)}
 `, "utf-8");
   return {
     manifest,
@@ -36105,7 +36467,7 @@ function scanReferences(options = {}) {
   };
 }
 function readManifest2(file) {
-  const manifest = JSON.parse(fs34.readFileSync(file, "utf-8"));
+  const manifest = JSON.parse(fs35.readFileSync(file, "utf-8"));
   if (manifest.version !== MANIFEST_VERSION2 || !Array.isArray(manifest.items)) {
     throw new Error(`${file} is not a ${MANIFEST_VERSION2} manifest`);
   }
@@ -36190,7 +36552,7 @@ async function fetchReference(item, outputDir, destinationPrefix, timeoutMs, max
       bodyHash: hash
     });
     ensureParentDir(snapshotPath);
-    fs34.writeFileSync(snapshotPath, markdown, "utf-8");
+    fs35.writeFileSync(snapshotPath, markdown, "utf-8");
     return {
       item,
       fetchedAt,
@@ -36300,7 +36662,7 @@ async function ingestReferences(options = {}) {
       });
     }
   }
-  fs34.writeFileSync(manifestPath, `${JSON.stringify(manifest, null, 2)}
+  fs35.writeFileSync(manifestPath, `${JSON.stringify(manifest, null, 2)}
 `, "utf-8");
   if (options.reindex && client) {
     await client.reindex({ kind: "doc", mode: "incremental" });
@@ -36354,7 +36716,7 @@ async function referencesIngestCommand(options) {
 // src/commands/run.ts
 var import_node_child_process16 = require("child_process");
 var import_node_crypto12 = require("crypto");
-var fs35 = __toESM(require("fs"));
+var fs36 = __toESM(require("fs"));
 var path35 = __toESM(require("path"));
 var import_chalk15 = __toESM(require("chalk"));
 
@@ -36363,21 +36725,21 @@ var REGISTRY_VERSION = "project-intelligence.policy-gates.registry.v1";
 function normalizeChangedFiles(changedFiles) {
   return [...new Set((changedFiles ?? []).map((file) => file.trim()).filter(Boolean))];
 }
-function isRecord19(value) {
+function isRecord20(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
-function stringValue14(value) {
+function stringValue15(value) {
   return typeof value === "string" && value.trim() ? value.trim() : void 0;
 }
 function nestedRecord3(root, keys) {
   let current = root;
   for (const key of keys) {
-    if (!isRecord19(current) || !isRecord19(current[key])) {
+    if (!isRecord20(current) || !isRecord20(current[key])) {
       return {};
     }
     current = current[key];
   }
-  return isRecord19(current) ? current : {};
+  return isRecord20(current) ? current : {};
 }
 function combinedText(input) {
   return [input.task, input.diffSummary, ...input.changedFiles ?? []].filter(Boolean).join("\n").toLowerCase();
@@ -36547,7 +36909,7 @@ function evaluateProjectPolicyGates(input) {
     );
   }
   const guardEval = guardEvaluation2(input.guard?.payload);
-  const guardDecision = stringValue14(guardEval.decision)?.toUpperCase();
+  const guardDecision = stringValue15(guardEval.decision)?.toUpperCase();
   if (guardDecision === "BLOCKED" || input.release && input.guard?.status !== void 0 && input.guard.status !== 0) {
     gates.push(
       gate({
@@ -36785,8 +37147,8 @@ var GUARD_MAX_BUFFER_BYTES = 16 * 1024 * 1024;
 var RAW_OUTPUT_PREVIEW_BYTES = 64e3;
 var ADVISOR_RECEIPT_WRITE_LIMIT = 6;
 function buildProjectIntelligenceRunEnvelope(startedAt = /* @__PURE__ */ new Date()) {
-  const sniparaSessionId = stringValue15(process.env.SNIPARA_SESSION_ID)?.slice(0, 200);
-  const codexSessionId = stringValue15(process.env.CODEX_SESSION_ID)?.slice(0, 200);
+  const sniparaSessionId = stringValue16(process.env.SNIPARA_SESSION_ID)?.slice(0, 200);
+  const codexSessionId = stringValue16(process.env.CODEX_SESSION_ID)?.slice(0, 200);
   return {
     version: "project-intelligence.judgment-run-envelope.v1",
     runId: sniparaSessionId ?? codexSessionId ?? `judgment-run:${(0, import_node_crypto12.randomUUID)()}`,
@@ -36800,7 +37162,7 @@ function normalizeStringList6(values) {
 function uniqueStrings23(values) {
   return [...new Set(values.map((value) => value.trim()).filter(Boolean))];
 }
-function isRecord20(value) {
+function isRecord21(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function guardPayload(guard) {
@@ -36813,7 +37175,7 @@ function readOutcomeReceipts(files) {
   const receipts = [];
   for (const file of normalizeStringList6(files)) {
     const resolved = path35.resolve(process.cwd(), file);
-    const parsed = JSON.parse(fs35.readFileSync(resolved, "utf8"));
+    const parsed = JSON.parse(fs36.readFileSync(resolved, "utf8"));
     receipts.push(...outcomeReceiptsFromUnknown(parsed));
   }
   return receipts;
@@ -36822,13 +37184,13 @@ function outcomeReceiptsFromUnknown(value) {
   if (Array.isArray(value)) {
     return value.flatMap(outcomeReceiptsFromUnknown);
   }
-  if (!isRecord20(value)) {
+  if (!isRecord21(value)) {
     return [];
   }
   if (value.version === "snipara.outcome_intelligence.receipt.v0") {
     return [value];
   }
-  if (isRecord20(value.outcomeReceipt)) {
+  if (isRecord21(value.outcomeReceipt)) {
     return outcomeReceiptsFromUnknown(value.outcomeReceipt);
   }
   if (Array.isArray(value.outcomeReceipts)) {
@@ -36846,11 +37208,11 @@ function outputPreview(value) {
   return `${value.slice(0, RAW_OUTPUT_PREVIEW_BYTES)}
 ...[truncated]`;
 }
-function stringValue15(value) {
+function stringValue16(value) {
   return typeof value === "string" && value.trim().length > 0 ? value.trim() : void 0;
 }
 function servedJudgmentIdForRun(options, brief) {
-  return stringValue15(options.servedJudgmentId) ?? stringValue15(brief.servedJudgmentId) ?? servedJudgmentIdFromContext(brief.resumeContext) ?? servedJudgmentIdFromContext(brief.verificationPlan);
+  return stringValue16(options.servedJudgmentId) ?? stringValue16(brief.servedJudgmentId) ?? servedJudgmentIdFromContext(brief.resumeContext) ?? servedJudgmentIdFromContext(brief.verificationPlan);
 }
 function advisorMeasurementState(args) {
   if (args.agentDecision === "blocked") return "blocked";
@@ -36927,7 +37289,7 @@ function boundedLifecycleText(value, maxChars) {
   return value.trim().replace(/\s+/g, " ").slice(0, maxChars);
 }
 function advisorRecommendationPlanScope(args) {
-  const requestedRecommendationId = stringValue15(args.options.advisorRecommendationId) ?? null;
+  const requestedRecommendationId = stringValue16(args.options.advisorRecommendationId) ?? null;
   if (requestedRecommendationId) {
     const targeted = requestedRecommendationId === args.recommendationId;
     return {
@@ -37235,7 +37597,7 @@ async function recordFirstPartyAdvisorReceipts(args) {
     };
   }
   const client = createClient(1e4);
-  const verificationEvidence = args.verificationEvidence ?? [];
+  const verificationEvidence2 = args.verificationEvidence ?? [];
   const outcomeReceipts = args.outcomeReceipts ?? [];
   const selectedRecommendations = allRecommendations.slice(0, ADVISOR_RECEIPT_WRITE_LIMIT);
   const overflowWrites = allRecommendations.slice(ADVISOR_RECEIPT_WRITE_LIMIT).map((recommendation) => skippedAdvisorReceiptWrite(recommendation, "write_limit_exceeded"));
@@ -37293,7 +37655,7 @@ async function recordFirstPartyAdvisorReceipts(args) {
                 recommendation,
                 recommendationIndex,
                 totalRecommendations: allRecommendations.length,
-                verificationEvidence,
+                verificationEvidence: verificationEvidence2,
                 lifecycle,
                 planScope,
                 measurementState,
@@ -37379,7 +37741,7 @@ function runGuard(options, changedFiles) {
   let payload;
   try {
     const parsed = JSON.parse(result.stdout);
-    if (isRecord20(parsed)) {
+    if (isRecord21(parsed)) {
       payload = parsed;
     }
   } catch {
@@ -37500,7 +37862,7 @@ async function buildProjectIntelligenceRun(options) {
       decision: brief.projectPolicyDecision
     } : void 0
   });
-  const verificationEvidence = verificationEvidenceFromRun({
+  const verificationEvidence2 = verificationEvidenceFromRun({
     guard,
     packageReview,
     policyGates
@@ -37509,7 +37871,7 @@ async function buildProjectIntelligenceRun(options) {
     options,
     brief,
     judgmentCard,
-    verificationEvidence,
+    verificationEvidence: verificationEvidence2,
     outcomeReceipts,
     runEnvelope
   });
@@ -37572,10 +37934,10 @@ async function projectIntelligenceRunCommand(options) {
     if (result.guard) {
       console.log(import_chalk15.default.bold("Guard"));
       console.log(`Status: ${result.guard.status}`);
-      const actionCards = isRecord20(result.guard.payload) ? result.guard.payload.actionCards : [];
+      const actionCards = isRecord21(result.guard.payload) ? result.guard.payload.actionCards : [];
       if (Array.isArray(actionCards) && actionCards.length > 0) {
         for (const card of actionCards.slice(0, 6)) {
-          if (!isRecord20(card)) continue;
+          if (!isRecord21(card)) continue;
           console.log(`- ${card.kind}: ${card.title ?? card.reason ?? "guard action"}`);
         }
       }
@@ -37640,7 +38002,7 @@ async function projectIntelligenceRunCommand(options) {
 }
 
 // src/commands/policy-ledger-sync.ts
-var fs36 = __toESM(require("fs"));
+var fs37 = __toESM(require("fs"));
 var path36 = __toESM(require("path"));
 var POLICY_LEDGER_SYNC_REPORT_VERSION = "snipara.workflow_policy_ledger_sync.v0";
 function buildPolicyLedgerSyncReport(options = {}) {
@@ -37788,12 +38150,12 @@ function statusForChoiceClass(choiceClass) {
   return "modified";
 }
 function readJsonFiles(directory, cwd) {
-  if (!fs36.existsSync(directory)) {
+  if (!fs37.existsSync(directory)) {
     return [];
   }
-  return fs36.readdirSync(directory).filter((fileName) => fileName.endsWith(".json")).sort().map((fileName) => {
+  return fs37.readdirSync(directory).filter((fileName) => fileName.endsWith(".json")).sort().map((fileName) => {
     const filePath = path36.join(directory, fileName);
-    const parsed = JSON.parse(fs36.readFileSync(filePath, "utf8"));
+    const parsed = JSON.parse(fs37.readFileSync(filePath, "utf8"));
     return { parsed, relativePath: toProjectRelativePath5(filePath, cwd) };
   });
 }
@@ -37998,7 +38360,11 @@ function collectOption(value, previous = []) {
   return [...previous, value];
 }
 function configureRealityCheckCommand(command) {
-  return command.description("Run a Project Reality Check against local or supplied change scope").option("--task <task>", "Task or change summary").option("--branch <branch>", "Branch to scope the check").option("--base <ref>", "Base ref for committed local changes (default: upstream)").option("--changed-files <files...>", "Changed files to analyze").option("--diff-summary <summary>", "Natural-language diff summary").option("--decision <decision...>", "Decision or intent in ID: text form").option("--document <document...>", "Document/context hint in path: preview form").option("--verification <item...>", "Verification evidence or checklist item").option("--no-include-dirty", "Exclude dirty working-tree files from local scope").option("--enforce", "Exit non-zero for review-required or blocking findings").option("-d, --dir <directory>", "Project directory (default: current)").option("--json", "Print raw JSON").action(async (options) => {
+  return command.description("Run a Project Reality Check against local or supplied change scope").option("--task <task>", "Task or change summary").option("--branch <branch>", "Branch to scope the check").option("--base <ref>", "Base ref for committed local changes (default: upstream)").option("--changed-files <files...>", "Changed files to analyze").option("--diff-summary <summary>", "Natural-language diff summary").option("--decision <decision...>", "Decision or intent in ID: text form").option("--document <document...>", "Document/context hint in path: preview form").option("--verification <item...>", "Verification evidence or checklist item").option("--no-auto-context", "Disable bounded hosted/local context auto-linking").option(
+    "--auto-context-timeout-ms <number>",
+    "Timeout for each hosted auto-context source",
+    "12000"
+  ).option("--no-include-dirty", "Exclude dirty working-tree files from local scope").option("--enforce", "Exit non-zero for review-required or blocking findings").option("-d, --dir <directory>", "Project directory (default: current)").option("--json", "Print raw JSON").action(async (options) => {
     await realityCheckCommand({
       task: options.task,
       branch: options.branch,
@@ -38008,6 +38374,8 @@ function configureRealityCheckCommand(command) {
       decision: options.decision,
       document: options.document,
       verification: options.verification,
+      autoContext: options.autoContext !== false,
+      autoContextTimeoutMs: Number.parseInt(options.autoContextTimeoutMs, 10),
       includeDirty: options.includeDirty,
       enforce: Boolean(options.enforce),
       dir: options.dir,
@@ -38487,13 +38855,18 @@ program.command("memory-guard").description(
 );
 program.command("query").description(
   "Search project documents, parsed files, and current truth through hosted Snipara context"
-).requiredOption("-q, --query <query>", "Search query").option("-m, --max-tokens <number>", "Maximum tokens", "8000").option(
+).requiredOption("-q, --query <query>", "Search query").option("-m, --max-tokens <number>", "Maximum tokens", "8000").option("--search-mode <mode>", "Search mode: keyword|semantic|hybrid", "hybrid").option("--timeout-ms <number>", "Hosted context query timeout in milliseconds", "30000").option("--no-answer-pack", "Skip Answer Pack generation").option("--no-auto-decompose", "Disable automatic query decomposition").option("--no-shared-context", "Exclude linked shared context").option(
   "--follow-recommendation",
   "Automatically execute the recommended structural tool when Snipara returns one"
 ).option("--json", "Print raw JSON").action(async (options) => {
   await queryCommand({
     query: options.query,
     maxTokens: parseInt(options.maxTokens, 10),
+    searchMode: options.searchMode,
+    timeoutMs: parseInt(options.timeoutMs, 10),
+    includeAnswerPack: options.answerPack !== false,
+    autoDecompose: options.autoDecompose !== false,
+    includeSharedContext: options.sharedContext !== false,
     followRecommendation: Boolean(options.followRecommendation),
     json: options.json
   });
@@ -40262,6 +40635,7 @@ if (require.main === module) {
   buildLocalProjectContextValidationReport,
   buildLocalProjectDriftReport,
   buildLocalProjectRealityCheck,
+  buildLocalProjectRealityCheckWithAutoContext,
   buildLocalShortestPathResult,
   buildLocalSourceSnapshot,
   buildLocalSourceStatus,

package/docs/FULL_REFERENCE.md

@@ -913,6 +913,12 @@ headers, pass the same value as `correlation_context.session_id` on
 `snipara_context_query`, `snipara_recall`, `snipara_search`, `snipara_ask`, and
 `snipara_get_chunk`.
 
+Companion's own Hosted MCP client always forwards the configured workspace
+`sessionId` as `X-Snipara-Session-Id`. For the five correlated retrieval tools,
+it also supplies `client: "snipara-companion"` when the caller did not provide a
+client label. The session value is telemetry-only: it never authenticates the
+request, changes project scope, or overrides explicit per-call correlation.
+
 OpenClaw hooks remain separate:
 
 ```bash
@@ -1044,6 +1050,7 @@ npx -y snipara-companion@latest plan --query "plan the auth refactor" --write-pl
 npx -y snipara-companion@latest task-commit --summary "Shipped auth refactor" --files apps/web/src/lib/auth.ts
 
 snipara-companion query --query "auth middleware"
+snipara-companion query --query "auth middleware" --search-mode keyword --no-answer-pack --timeout-ms 30000
 snipara-companion query --query "who calls src.mcp_transport.handle_call_tool" --follow-recommendation
 snipara-companion status
 snipara-companion brief --task "ship auth hardening" --changed-files apps/web/src/lib/auth.ts tests/auth.test.ts --diff-summary "auth hardening"
@@ -1266,7 +1273,13 @@ snipara-companion reality-check \
 
 The command reads the local Git scope by default, includes dirty files unless
 `--no-include-dirty` is set, and also accepts explicit `--changed-files` for
-hooks or CI collectors. `--enforce` exits non-zero for `review_required` or
+hooks or CI collectors. When the workspace is configured, bounded auto-context
+loads reviewed Team Sync decisions, a narrow keyword document query, and local
+workflow receipts in parallel. Explicit `--decision`, `--document`, and
+`--verification` values take precedence. Use `--no-auto-context` for a purely
+local/explicit run or `--auto-context-timeout-ms` to tighten the hosted budget.
+Verification and workflow sources are retained in each finding's `evidence`
+array and in the top-level evidence summary. `--enforce` exits non-zero for `review_required` or
 `blocking` findings, but should stay opt-in until the matched surfaces,
 verification signals, and project-specific thresholds have been calibrated.
 Intent can be supplied as structured sections inside `--decision` or
@@ -1455,7 +1468,7 @@ snipara-companion workflow scaffold \
 
 Semantics:
 
-- `snipara-companion query --follow-recommendation` = execute the hosted recommended structural tool instead of only printing it
+- `snipara-companion query --follow-recommendation` = execute the hosted recommended structural tool instead of only printing it; context retrieval defaults to a 30-second timeout and supports `--search-mode keyword|semantic|hybrid`, `--no-answer-pack`, `--no-auto-decompose`, and `--no-shared-context`
 - `snipara-companion workflow run --mode lite` = zero mandatory hosted calls for small known-file work
 - `snipara-companion workflow run --mode standard` = context query plus automatic `snipara_code_*` follow-up when Snipara recommends one
 - `snipara-companion workflow run --mode auto` = routes to lite, standard, full, or orchestrate from task intent
@@ -1467,7 +1480,7 @@ Semantics:
 - `snipara-companion status` = top-level agentic work status across local workflow state, git dirtiness, and Team Sync carryover
 - `snipara-companion source init|sync|status|snapshot|watch` = automatic local source activation for folders with or without Git metadata; writes `.snipara/source/latest.json`, previews document sync, and refreshes the local code overlay cache
 - `snipara-companion brief` = short alias for `snipara-companion intelligence brief`
-- `snipara-companion reality-check` = local Project Reality Check plus Intent Ledger and Unknown Registry coverage for supplied or Git-derived changed files; `--enforce` is an opt-in strict mode for calibrated hooks
+- `snipara-companion reality-check` = Project Reality Check plus Intent Ledger, Unknown Registry, bounded auto-context, and inspectable evidence for supplied or Git-derived changed files; `--no-auto-context` keeps it local/explicit and `--enforce` is an opt-in strict mode for calibrated hooks
 - `snipara-companion timeline` = local timeline of workflow starts, phase starts, phase commits, final commits, and Team Sync handoffs
 - `snipara-companion workflow timeline` = append-only activity timeline from `.snipara/activity/timeline.jsonl`, including workflow, Producer Loop, Decision Request, and Team Sync events emitted by Companion commands; add `--export md` for a redacted Markdown artifact
 - `snipara-companion workflow session` = writes and prints Session Snapshot V0 at `.snipara/activity/session.json` with latest activity, risk, touched files, next action, advisory Intent Detection V0 intent/confidence/signals/suggested mode, workflow/session counts, Producer Loop calibration, decision counts, Team Sync counts, and `hardRoutingAllowed=false`

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "snipara-companion",
-  "version": "3.5.2",
+  "version": "3.5.4",
   "description": "Local-first CLI that asks your repo what breaks before an AI coding agent edits it.",
   "main": "dist/index.js",
   "bin": {