@ericsanchezok/synergy-util 2.4.4 → 2.4.5

package/dist/capability.d.ts

@@ -68,6 +68,7 @@ export interface SynergyCapabilityManifest {
             permissionAsk?: "none" | "own" | "all";
             events?: "none" | "selected" | "all";
             eventNames?: string[];
+            config?: boolean;
         };
         network?: {
             connectDomains?: string[];
@@ -106,7 +107,7 @@ export interface SynergyCapabilityDefinition extends Omit<SynergyCapabilityPermi
 export declare function publicToolNames(manifest: SynergyCapabilityManifest): string[];
 export declare function hasPublicTools(manifest: SynergyCapabilityManifest): boolean;
 export declare const SYNERGY_CAPABILITY_DETAILS: Record<string, SynergyCapabilityDefinition>;
-export declare const SYNERGY_PROFILE_CAPABILITIES: readonly ["file_read", "file_write", "shell_read", "shell", "shell_remote_write", "shell_remote_publish", "shell_destructive", "shell_hardline", "file_external_read", "file_external_write", "network_read", "network_request", "mcp_invoke", "mcp_spawn", "session_data", "workspace_data", "config:read", "config:write", "secrets", "task", "prompt_transform", "compaction_transform", "tool_execution_hook", "permission_hook", "event_hook", "identity_act", "communication_email", "channel_outbound", "platform_control", "protected_op", "session_state", "browser_interact", "browser_inspect", "browser_eval_readonly", "browser_eval_trusted", "browser_clipboard", "browser_download", "browser_viewport"];
+export declare const SYNERGY_PROFILE_CAPABILITIES: readonly ["file_read", "file_write", "shell_read", "shell", "shell_remote_write", "shell_remote_publish", "shell_destructive", "shell_hardline", "file_external_read", "file_external_write", "network_read", "network_request", "mcp_invoke", "mcp_spawn", "session_data", "workspace_data", "config:read", "config:write", "secrets", "task", "prompt_transform", "compaction_transform", "tool_execution_hook", "permission_hook", "event_hook", "config_hook", "identity_act", "communication_email", "channel_outbound", "platform_control", "protected_op", "session_state", "browser_interact", "browser_inspect", "browser_eval_readonly", "browser_eval_trusted", "browser_clipboard", "browser_download", "browser_viewport"];
 export declare const SYNERGY_PERMISSION_CAPABILITY: Record<string, string>;
 export declare function permissionCapability(permission: string): string;
 export declare function capabilityNonBypassable(capability: string): boolean;
@@ -160,6 +161,7 @@ export declare function permissionsHashPayload(manifest: SynergyCapabilityManife
             permissionAsk?: "none" | "own" | "all";
             events?: "none" | "selected" | "all";
             eventNames?: string[];
+            config?: boolean;
         };
         network?: {
             connectDomains?: string[];

package/dist/capability.js

@@ -177,6 +177,12 @@ export const SYNERGY_CAPABILITY_DETAILS = {
         title: "Subscribe to Synergy events",
         description: "Can receive approved Synergy runtime events.",
     },
+    config_hook: {
+        category: "hooks",
+        severity: "medium",
+        title: "Observe runtime config",
+        description: "Can receive redacted runtime configuration snapshots when Synergy starts or reloads config.",
+    },
     session_state: {
         category: "session",
         severity: "low",
@@ -288,6 +294,7 @@ export const SYNERGY_PROFILE_CAPABILITIES = [
     "tool_execution_hook",
     "permission_hook",
     "event_hook",
+    "config_hook",
     "identity_act",
     "communication_email",
     "channel_outbound",
@@ -447,6 +454,8 @@ function buildCapabilitySet(permissions, toolOverrides) {
         caps.add("prompt_transform");
     if (hooks?.compactionTransform)
         caps.add("compaction_transform");
+    if (hooks?.config)
+        caps.add("config_hook");
     if (hooks?.toolExecute && hooks.toolExecute !== "none")
         caps.add("tool_execution_hook");
     if (hooks?.permissionAsk && hooks.permissionAsk !== "none")
@@ -653,6 +662,15 @@ function hookPermissionItems(manifest) {
             description: "Can modify the system prompt and message context sent to the LLM.",
         });
     }
+    if (hooks?.config) {
+        items.push({
+            key: "hooks.config",
+            category: "hooks",
+            severity: "medium",
+            title: "Observe runtime config",
+            description: "Can observe redacted runtime configuration snapshots when Synergy starts or reloads config.",
+        });
+    }
     if (hooks?.toolExecute === "all") {
         items.push({
             key: "hooks.toolExecute",

package/dist/plugin-policy.d.ts

@@ -1,4 +1,4 @@
-import { type SynergyCapabilityManifest } from "./capability";
+import { type SynergyCapabilityManifest } from "./capability.js";
 export type PluginSource = "local" | "official" | "npm" | "git" | "url" | "builtin";
 export type RuntimeMode = "in-process" | "worker" | "process";
 export type TrustTier = "declarative" | "trusted-import" | "sandbox";

package/dist/plugin-policy.js

@@ -1,4 +1,4 @@
-import { baseCapabilities, pluginRisk } from "./capability";
+import { baseCapabilities, pluginRisk } from "./capability.js";
 export const DEFAULT_PLUGIN_RUNTIME_POLICY = {
     thirdPartyDefaultMode: "process",
     highRiskRequiresProcess: true,

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@ericsanchezok/synergy-util",
-  "version": "2.4.4",
+  "version": "2.4.5",
   "type": "module",
   "license": "MIT",
   "exports": {
     "./*": {
-      "import": "./dist/*.js",
-      "types": "./dist/*.d.ts"
+      "types": "./dist/*.d.ts",
+      "import": "./dist/*.js"
     }
   },
   "scripts": {