@synkro-sh/cli 1.3.21 → 1.3.23

package/dist/bootstrap.js

@@ -2871,6 +2871,7 @@ var init_repoConnect = __esm({
 // cli/commands/setupGithub.ts
 var setupGithub_exports = {};
 __export(setupGithub_exports, {
+  connectGitHub: () => connectGitHub,
   setupGithubCommand: () => setupGithubCommand
 });
 import { createInterface as createInterface2 } from "readline/promises";
@@ -2983,6 +2984,53 @@ async function apiCall(gatewayUrl, jwt2, path, opts = {}) {
   }
   return resp.json();
 }
+async function connectGitHub(gatewayUrl, jwt2, opts = {}) {
+  try {
+    const result = await apiCall(
+      gatewayUrl,
+      jwt2,
+      "/api/v1/cli/github-token"
+    );
+    if (result.connected && result.token) {
+      if (!opts.silent) console.log("  \u2713 GitHub already connected via Synkro.");
+      return result.token;
+    }
+  } catch {
+  }
+  if (!opts.silent) console.log("  Opening browser to authorize GitHub...");
+  try {
+    const authResp = await apiCall(
+      gatewayUrl,
+      jwt2,
+      "/api/pipes-widget/authorize/github",
+      { method: "POST", body: "{}" }
+    );
+    openBrowser3(authResp.url);
+    if (!opts.silent) console.log("  Waiting for authorization...");
+  } catch (err) {
+    if (!opts.silent) console.error(`  Failed to start GitHub authorization: ${err.message}`);
+    return null;
+  }
+  const deadline = Date.now() + 12e4;
+  while (Date.now() < deadline) {
+    await sleep(2e3);
+    try {
+      const result = await apiCall(
+        gatewayUrl,
+        jwt2,
+        "/api/v1/cli/github-token"
+      );
+      if (result.connected && result.token) {
+        if (!opts.silent) console.log("\n  \u2713 GitHub connected!");
+        return result.token;
+      }
+    } catch {
+    }
+    if (!opts.silent) process.stdout.write(".");
+  }
+  if (!opts.silent) console.error("\n  Timed out waiting for GitHub authorization.");
+  return null;
+}
 async function setupGithubCommand(opts = {}) {
   if (!isAuthenticated()) {
     console.error("Not authenticated. Run `synkro-cli login` first.");
@@ -3035,59 +3083,13 @@ async function setupGithubCommand(opts = {}) {
     }
   } else {
     console.log("\nConnecting to GitHub...");
-    let connected = false;
-    try {
-      const result = await apiCall(
-        gatewayUrl,
-        jwt2,
-        "/api/v1/cli/github-token"
-      );
-      if (result.connected && result.token) {
-        ghToken = result.token;
-        connected = true;
-        console.log("  \u2713 GitHub already connected via Synkro.\n");
-      }
-    } catch {
-    }
-    if (!connected) {
-      console.log("  Opening browser to authorize GitHub...");
-      try {
-        const authResp = await apiCall(
-          gatewayUrl,
-          jwt2,
-          "/api/pipes-widget/authorize/github",
-          { method: "POST", body: "{}" }
-        );
-        openBrowser3(authResp.url);
-        console.log("  Waiting for authorization...");
-      } catch (err) {
-        console.error(`Failed to start GitHub authorization: ${err.message}`);
-        process.exit(1);
-      }
-      const deadline = Date.now() + 12e4;
-      ghToken = "";
-      while (Date.now() < deadline) {
-        await sleep(2e3);
-        try {
-          const result = await apiCall(
-            gatewayUrl,
-            jwt2,
-            "/api/v1/cli/github-token"
-          );
-          if (result.connected && result.token) {
-            ghToken = result.token;
-            break;
-          }
-        } catch {
-        }
-        process.stdout.write(".");
-      }
-      if (!ghToken) {
-        console.error("\n  Timed out waiting for GitHub authorization. Try again.");
-        process.exit(1);
-      }
-      console.log("\n  \u2713 GitHub connected!\n");
+    const token = await connectGitHub(gatewayUrl, jwt2);
+    if (!token) {
+      console.error("GitHub connection failed. Try again.");
+      process.exit(1);
     }
+    ghToken = token;
+    console.log();
   }
   let claudeToken;
   if (!opts.skipClaudeToken) {
@@ -3242,7 +3244,6 @@ function parseArgs(argv) {
     else if (a === "--no-mcp") opts.noMcp = true;
     else if (a === "--force" || a === "-f") opts.force = true;
     else if (a === "--link-repo") opts.linkRepo = true;
-    else if (a === "--pr-scan") opts.prScan = true;
   }
   if (!opts.gatewayUrl) {
     const fromEnv = sanitizeGatewayCandidate(process.env.SYNKRO_GATEWAY_URL);
@@ -3332,7 +3333,7 @@ function writeConfigEnv(opts) {
     `SYNKRO_CREDENTIALS_PATH=${shellQuoteSingle(credsPath)}`,
     `SYNKRO_TIER=${shellQuoteSingle(safeTier)}`,
     `SYNKRO_INFERENCE=${shellQuoteSingle(safeInference)}`,
-    `SYNKRO_VERSION=${shellQuoteSingle("1.3.21")}`
+    `SYNKRO_VERSION=${shellQuoteSingle("1.3.23")}`
   ];
   if (safeUserId) lines.push(`SYNKRO_USER_ID=${shellQuoteSingle(safeUserId)}`);
   if (safeOrgId) lines.push(`SYNKRO_ORG_ID=${shellQuoteSingle(safeOrgId)}`);
@@ -3530,6 +3531,13 @@ async function installCommand(opts = {}) {
     console.error("No access token available after auth.");
     process.exit(1);
   }
+  console.log("\nConnecting to GitHub...");
+  const ghToken = await connectGitHub(gatewayUrl, token);
+  if (!ghToken) {
+    console.error("GitHub connection is required. Re-run `synkro-cli install` to try again.");
+    process.exit(1);
+  }
+  console.log();
   setApiBaseUrl(`${gatewayUrl}/api`);
   await promptRepoConnection({ linkRepo: opts.linkRepo });
   const agents = detectAgents();
@@ -3667,18 +3675,9 @@ async function installCommand(opts = {}) {
 `);
     }
   }
-  if (opts.prScan) {
-    console.log();
-    const { setupGithubCommand: setupGithubCommand2 } = await Promise.resolve().then(() => (init_setupGithub(), setupGithub_exports));
-    await setupGithubCommand2({ nonInteractive: true });
-  }
+  const { setupGithubCommand: setupGithubCommand2 } = await Promise.resolve().then(() => (init_setupGithub(), setupGithub_exports));
+  await setupGithubCommand2({ nonInteractive: true, githubToken: ghToken });
   console.log("\u2713 Synkro installed.");
-  console.log();
-  if (!opts.prScan) {
-    console.log("Next steps:");
-    console.log("  \u2022 synkro-cli setup-github   (enable PR scanning)");
-    console.log("  \u2022 synkro-cli status         (check what is configured)");
-  }
 }
 function detectGitRepo2() {
   try {
@@ -3883,6 +3882,7 @@ var init_install = __esm({
     init_stub();
     init_repoConnect();
     init_projects();
+    init_setupGithub();
     SYNKRO_DIR2 = join6(homedir5(), ".synkro");
     HOOKS_DIR = join6(SYNKRO_DIR2, "hooks");
     BIN_DIR = join6(SYNKRO_DIR2, "bin");
@@ -4381,6 +4381,22 @@ function getPrFiles(repo, prNumber) {
   ]);
   return data;
 }
+async function fetchScanContext(gatewayUrl, apiKey, repo, prNumber, sha) {
+  try {
+    const url = `${gatewayUrl.replace(/\/$/, "")}/api/pr-scans/scan-context?repo=${encodeURIComponent(repo)}&pr_number=${prNumber}&sha=${sha}`;
+    const headers = { "x-synkro-api-key": apiKey };
+    const ghToken = process.env.GH_TOKEN || process.env.GITHUB_TOKEN || "";
+    if (ghToken) headers["x-github-token"] = ghToken;
+    const resp = await fetch(url, {
+      headers,
+      signal: AbortSignal.timeout(15e3)
+    });
+    if (!resp.ok) return { scan_all: true };
+    return await resp.json();
+  } catch {
+    return { scan_all: true };
+  }
+}
 function getFileDiffWithLines(file) {
   if (!file.patch) return { hunks: "", newFileLineMap: /* @__PURE__ */ new Map() };
   const lines = file.patch.split("\n");
@@ -4741,11 +4757,34 @@ async function scanPrCommand() {
     console.error("Failed to fetch PR files:", err.message);
     process.exit(2);
   }
+  const scanCtx = await fetchScanContext(gatewayUrl, synkroApiKey, repo, prNumber, sha);
+  if (scanCtx.skip) {
+    console.log(`Already scanned at ${sha.slice(0, 7)}, skipping.
+`);
+    postCheckRun(repo, sha, "success", []);
+    await postEventToBackend({
+      gatewayUrl,
+      apiKey: synkroApiKey,
+      repo,
+      prNumber,
+      sha,
+      findings: [],
+      filesScanned: 0,
+      totalLatencyMs: 0
+    });
+    return;
+  }
+  const changedFiles = !scanCtx.scan_all && scanCtx.files ? new Set(scanCtx.files) : null;
+  if (changedFiles) {
+    console.log(`Incremental scan: ${changedFiles.size} file(s) changed since last scan (${scanCtx.last_sha?.slice(0, 7)}).
+`);
+  }
   const eligible = files.filter((f) => {
     if (f.status === "removed") return false;
     if (shouldSkipFile(f.filename)) return false;
     if (f.additions + f.deletions > MAX_DIFF_LINES_PER_FILE) return false;
     if (!f.patch) return false;
+    if (changedFiles && !changedFiles.has(f.filename)) return false;
     return true;
   });
   console.log(`${files.length} files in PR, ${eligible.length} eligible for scan.