snipara-companion 3.5.6 → 3.5.8

package/CHANGELOG.md

@@ -2,6 +2,27 @@
 
 Release notes for `snipara-companion`, newest first.
 
+## New In 3.5.8
+
+- Preserves the exact collaboration actor identity on hosted lease heartbeat
+  and release requests, preventing owner-authenticated cleanup from falling
+  back to the API-key actor and returning a false `403`.
+
+## New In 3.5.7
+
+- Bounds the best-effort hosted judgment lookup in `run` to 8 seconds instead
+  of silently waiting for up to 30 seconds.
+- Exposes `hostedJudgment.status` as `linked`, `unlinked`, or `unavailable` in
+  JSON and prints one concise human-readable diagnostic without blocking the
+  local Judgment Card.
+- Compatibility note: hosted context queries now treat an explicit
+  `max_tokens` value as immutable. Small conceptual or multi-hop budgets may
+  return less context than older servers that silently enlarged the request;
+  increase the requested budget when more context is intentional.
+- Clarifies that references mode budgets the Answer Pack plus previews. Full
+  referenced chunks remain retrievable and their `token_count` is planning
+  metadata rather than initial response usage.
+
 ## New In 3.5.6
 
 - Adds a managed workflow Judgment V1 loop: `workflow judgment` serves and

package/dist/index.d.ts

@@ -1471,7 +1471,7 @@ declare class RLMClient {
         resources?: CollaborationResource[];
         metadata?: Record<string, unknown>;
     }): Promise<CollaborationLeaseResponse>;
-    updateCollaborationLease(leaseId: string, args: {
+    updateCollaborationLease(leaseId: string, args: CollaborationActorPayload & {
         action?: "heartbeat" | "release" | "override";
         reason?: string;
     }): Promise<CollaborationLeaseUpdateResponse>;
@@ -2773,12 +2773,20 @@ interface ProjectRunAdvisorReceiptCapture {
     measurement: ProjectRunAdvisorMeasurementCoverage;
     reason?: ProjectRunAdvisorReceiptSkipReason;
 }
+interface ProjectRunHostedJudgmentLink {
+    version: "project-intelligence.hosted-judgment-link.v1";
+    status: "linked" | "unlinked" | "unavailable";
+    timeoutMs: number;
+    servedJudgmentId?: string;
+    error?: string;
+}
 interface ProjectIntelligenceRunResult {
     version: "project-intelligence.production-run.v1";
     generatedAt: string;
     runEnvelope: ProjectIntelligenceRunEnvelope;
     release: boolean;
     brief: ProjectIntelligenceBrief;
+    hostedJudgment: ProjectRunHostedJudgmentLink;
     guard?: ProjectRunGuardResult;
     packageReview?: ProjectRunPackageReview;
     policyGates: ProjectPolicyGatesResult;

package/dist/index.js

@@ -12285,6 +12285,79 @@ function uniqueStrings12(values) {
   return [...new Set(values.map((value) => value.trim()).filter(Boolean))];
 }
 
+// ../project-intelligence-contracts/src/why-capture-confidence-v1.json
+var why_capture_confidence_v1_default = {
+  version: "why-capture-confidence-v1",
+  base: 0.72,
+  decisionRationaleBonus: 0.1,
+  nonManualSourceBonus: 0.04,
+  maximum: 0.9,
+  decimalPlaces: 2,
+  validatedExecutionOutcomes: ["completed"],
+  vectors: [
+    {
+      candidateType: "CONTEXT",
+      hasDecision: false,
+      hasRationale: false,
+      sourceKind: "manual",
+      executionOutcome: "completed",
+      expected: 0.72
+    },
+    {
+      candidateType: "DECISION",
+      hasDecision: true,
+      hasRationale: true,
+      sourceKind: "manual",
+      executionOutcome: "completed",
+      expected: 0.82
+    },
+    {
+      candidateType: "DECISION",
+      hasDecision: true,
+      hasRationale: true,
+      sourceKind: "phase_commit",
+      executionOutcome: "completed",
+      expected: 0.86
+    },
+    {
+      candidateType: "DECISION",
+      hasDecision: true,
+      hasRationale: true,
+      sourceKind: "phase_commit",
+      executionOutcome: "partial",
+      expected: 0.76
+    },
+    {
+      candidateType: "DECISION",
+      hasDecision: true,
+      hasRationale: true,
+      sourceKind: "phase_commit",
+      executionOutcome: "blocked",
+      expected: 0.76
+    },
+    {
+      candidateType: "DECISION",
+      hasDecision: true,
+      hasRationale: true,
+      sourceKind: "phase_commit",
+      executionOutcome: "abandoned",
+      expected: 0.76
+    },
+    {
+      candidateType: "DECISION",
+      hasDecision: true,
+      hasRationale: false,
+      sourceKind: "final_commit",
+      executionOutcome: "completed",
+      expected: 0.76
+    }
+  ]
+};
+
+// ../project-intelligence-contracts/src/why-capture-confidence.ts
+var WHY_CAPTURE_CONFIDENCE_VERSION = why_capture_confidence_v1_default.version;
+var WHY_CAPTURE_CONFIDENCE_TEST_VECTORS = why_capture_confidence_v1_default.vectors;
+
 // src/commands/decision-requests.ts
 var fs12 = __toESM(require("fs"));
 var path11 = __toESM(require("path"));
@@ -16659,7 +16732,12 @@ async function heartbeatHostedLeases(context, leaseIds) {
   }
   try {
     const data = await Promise.all(
-      leaseIds.map((leaseId) => client.updateCollaborationLease(leaseId, { action: "heartbeat" }))
+      leaseIds.map(
+        (leaseId) => client.updateCollaborationLease(leaseId, {
+          ...context.actor,
+          action: "heartbeat"
+        })
+      )
     );
     return { status: "ok", data };
   } catch (error) {
@@ -16675,6 +16753,7 @@ async function releaseHostedLeases(context, leaseIds, input) {
     const data = await Promise.all(
       leaseIds.map(
         (leaseId) => client.updateCollaborationLease(leaseId, {
+          ...context.actor,
           action: "release",
           reason: input.reason
         })
@@ -23037,6 +23116,15 @@ function formatPolicyGateDecision(gateDecision) {
 }
 
 // src/commands/run.ts
+var HOSTED_PROJECT_INTELLIGENCE_BRIEF_TIMEOUT_MS = 8e3;
+var HOSTED_PROJECT_INTELLIGENCE_ERROR_MAX_LENGTH = 500;
+function hostedProjectIntelligenceError(error) {
+  if (error instanceof Error && error.name === "AbortError") {
+    return `Timed out after ${HOSTED_PROJECT_INTELLIGENCE_BRIEF_TIMEOUT_MS}ms`;
+  }
+  const message = error instanceof Error ? error.message : String(error);
+  return message.trim().slice(0, HOSTED_PROJECT_INTELLIGENCE_ERROR_MAX_LENGTH) || "Unknown error";
+}
 var GUARD_MAX_BUFFER_BYTES = 16 * 1024 * 1024;
 var RAW_OUTPUT_PREVIEW_BYTES = 64e3;
 var ADVISOR_RECEIPT_WRITE_LIMIT = 6;
@@ -23708,16 +23796,37 @@ async function buildProjectIntelligenceRun(options) {
     skipMemoryHealth: options.skipMemoryHealth
   });
   let hostedProjectIntelligenceBrief;
+  let hostedJudgment;
   try {
-    hostedProjectIntelligenceBrief = await createClient(3e4).createProjectIntelligenceBrief({
+    hostedProjectIntelligenceBrief = await createClient(
+      HOSTED_PROJECT_INTELLIGENCE_BRIEF_TIMEOUT_MS
+    ).createProjectIntelligenceBrief({
       ...options.task ? { task: options.task } : {},
       ...options.diffSummary ? { diffSummary: options.diffSummary } : {},
       ...changedFiles.length > 0 ? { changedFiles: changedFiles.slice(0, 120) } : {}
     });
     if (hostedProjectIntelligenceBrief.servedJudgmentId) {
       brief.servedJudgmentId = hostedProjectIntelligenceBrief.servedJudgmentId;
+      hostedJudgment = {
+        version: "project-intelligence.hosted-judgment-link.v1",
+        status: "linked",
+        timeoutMs: HOSTED_PROJECT_INTELLIGENCE_BRIEF_TIMEOUT_MS,
+        servedJudgmentId: hostedProjectIntelligenceBrief.servedJudgmentId
+      };
+    } else {
+      hostedJudgment = {
+        version: "project-intelligence.hosted-judgment-link.v1",
+        status: "unlinked",
+        timeoutMs: HOSTED_PROJECT_INTELLIGENCE_BRIEF_TIMEOUT_MS
+      };
     }
-  } catch {
+  } catch (error) {
+    hostedJudgment = {
+      version: "project-intelligence.hosted-judgment-link.v1",
+      status: "unavailable",
+      timeoutMs: HOSTED_PROJECT_INTELLIGENCE_BRIEF_TIMEOUT_MS,
+      error: hostedProjectIntelligenceError(error)
+    };
   }
   const guard = options.release && !options.skipGuard ? runGuard(options, changedFiles) : void 0;
   const packageReview = options.release || changedFiles.some((file) => file.startsWith("packages/cli/")) ? runPackageReview(options) : void 0;
@@ -23808,6 +23917,7 @@ async function buildProjectIntelligenceRun(options) {
     runEnvelope,
     release: Boolean(options.release),
     brief,
+    hostedJudgment,
     ...guard ? { guard } : {},
     ...packageReview ? { packageReview } : {},
     policyGates,
@@ -23832,6 +23942,17 @@ async function projectIntelligenceRunCommand(options) {
     }
     console.log(`Release: ${result.release ? "yes" : "no"}`);
     console.log(`Run: ${result.runEnvelope.runId} (${result.runEnvelope.identitySource})`);
+    if (result.hostedJudgment.status === "linked") {
+      console.log(`Hosted judgment: linked (${result.hostedJudgment.servedJudgmentId})`);
+    } else if (result.hostedJudgment.status === "unlinked") {
+      console.log("Hosted judgment: unlinked (no served identity returned)");
+    } else {
+      console.log(
+        import_chalk8.default.yellow(
+          `Hosted judgment: unavailable (${result.hostedJudgment.error ?? "unknown error"})`
+        )
+      );
+    }
     console.log("");
     console.log(import_chalk8.default.bold("Project Judgment"));
     for (const line of formatProjectJudgmentCard(result.judgmentCard)) {

package/docs/FULL_REFERENCE.md

@@ -1341,6 +1341,12 @@ path. Without either identity, receipt capture remains fail-closed and reports
 recommendation is only `acknowledged` by default: its `expectedBehaviorChange`,
 severity, required actions, and recommended checks never prove adaptation.
 
+The hosted lookup is best-effort and bounded to 8 seconds. `run --json` exposes
+`hostedJudgment.status` as `linked`, `unlinked`, or `unavailable`, including a
+bounded failure message when the hosted endpoint cannot be reached. Human
+output prints the same state in one line. A hosted failure never removes the
+local Judgment Card or turns network availability into implicit receipt proof.
+
 To record `applied`, provide both explicit plan snapshots. Companion normalizes
 and bounds each snapshot to 4,000 characters, then compares stable hashes:
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "snipara-companion",
-  "version": "3.5.6",
+  "version": "3.5.8",
   "description": "Local-first CLI that asks your repo what breaks before an AI coding agent edits it.",
   "main": "dist/index.js",
   "bin": {