snipara-companion 3.5.7 → 3.5.8

package/CHANGELOG.md

@@ -2,6 +2,12 @@
 
 Release notes for `snipara-companion`, newest first.
 
+## New In 3.5.8
+
+- Preserves the exact collaboration actor identity on hosted lease heartbeat
+  and release requests, preventing owner-authenticated cleanup from falling
+  back to the API-key actor and returning a false `403`.
+
 ## New In 3.5.7
 
 - Bounds the best-effort hosted judgment lookup in `run` to 8 seconds instead

package/dist/index.d.ts

@@ -1471,7 +1471,7 @@ declare class RLMClient {
         resources?: CollaborationResource[];
         metadata?: Record<string, unknown>;
     }): Promise<CollaborationLeaseResponse>;
-    updateCollaborationLease(leaseId: string, args: {
+    updateCollaborationLease(leaseId: string, args: CollaborationActorPayload & {
         action?: "heartbeat" | "release" | "override";
         reason?: string;
     }): Promise<CollaborationLeaseUpdateResponse>;

package/dist/index.js

@@ -12285,6 +12285,79 @@ function uniqueStrings12(values) {
   return [...new Set(values.map((value) => value.trim()).filter(Boolean))];
 }
 
+// ../project-intelligence-contracts/src/why-capture-confidence-v1.json
+var why_capture_confidence_v1_default = {
+  version: "why-capture-confidence-v1",
+  base: 0.72,
+  decisionRationaleBonus: 0.1,
+  nonManualSourceBonus: 0.04,
+  maximum: 0.9,
+  decimalPlaces: 2,
+  validatedExecutionOutcomes: ["completed"],
+  vectors: [
+    {
+      candidateType: "CONTEXT",
+      hasDecision: false,
+      hasRationale: false,
+      sourceKind: "manual",
+      executionOutcome: "completed",
+      expected: 0.72
+    },
+    {
+      candidateType: "DECISION",
+      hasDecision: true,
+      hasRationale: true,
+      sourceKind: "manual",
+      executionOutcome: "completed",
+      expected: 0.82
+    },
+    {
+      candidateType: "DECISION",
+      hasDecision: true,
+      hasRationale: true,
+      sourceKind: "phase_commit",
+      executionOutcome: "completed",
+      expected: 0.86
+    },
+    {
+      candidateType: "DECISION",
+      hasDecision: true,
+      hasRationale: true,
+      sourceKind: "phase_commit",
+      executionOutcome: "partial",
+      expected: 0.76
+    },
+    {
+      candidateType: "DECISION",
+      hasDecision: true,
+      hasRationale: true,
+      sourceKind: "phase_commit",
+      executionOutcome: "blocked",
+      expected: 0.76
+    },
+    {
+      candidateType: "DECISION",
+      hasDecision: true,
+      hasRationale: true,
+      sourceKind: "phase_commit",
+      executionOutcome: "abandoned",
+      expected: 0.76
+    },
+    {
+      candidateType: "DECISION",
+      hasDecision: true,
+      hasRationale: false,
+      sourceKind: "final_commit",
+      executionOutcome: "completed",
+      expected: 0.76
+    }
+  ]
+};
+
+// ../project-intelligence-contracts/src/why-capture-confidence.ts
+var WHY_CAPTURE_CONFIDENCE_VERSION = why_capture_confidence_v1_default.version;
+var WHY_CAPTURE_CONFIDENCE_TEST_VECTORS = why_capture_confidence_v1_default.vectors;
+
 // src/commands/decision-requests.ts
 var fs12 = __toESM(require("fs"));
 var path11 = __toESM(require("path"));
@@ -16659,7 +16732,12 @@ async function heartbeatHostedLeases(context, leaseIds) {
   }
   try {
     const data = await Promise.all(
-      leaseIds.map((leaseId) => client.updateCollaborationLease(leaseId, { action: "heartbeat" }))
+      leaseIds.map(
+        (leaseId) => client.updateCollaborationLease(leaseId, {
+          ...context.actor,
+          action: "heartbeat"
+        })
+      )
     );
     return { status: "ok", data };
   } catch (error) {
@@ -16675,6 +16753,7 @@ async function releaseHostedLeases(context, leaseIds, input) {
     const data = await Promise.all(
       leaseIds.map(
         (leaseId) => client.updateCollaborationLease(leaseId, {
+          ...context.actor,
           action: "release",
           reason: input.reason
         })

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "snipara-companion",
-  "version": "3.5.7",
+  "version": "3.5.8",
   "description": "Local-first CLI that asks your repo what breaks before an AI coding agent edits it.",
   "main": "dist/index.js",
   "bin": {