@synkro-sh/cli 1.3.29 → 1.3.30

package/dist/bootstrap.js

@@ -670,6 +670,20 @@ VERDICT_KIND=$(echo "$VERDICT" | jq -r '.verdict // "warn"' 2>/dev/null)
 REASONING=$(echo "$VERDICT" | jq -r '.reasoning // "matched dangerous-verb regex"' 2>/dev/null)
 ALTERNATIVE=$(echo "$VERDICT" | jq -r '.alternative // ""' 2>/dev/null)
 CATEGORY=$(echo "$VERDICT" | jq -r '.category // "destructive_command"' 2>/dev/null)
+RISK_LEVEL=$(echo "$VERDICT" | jq -r '.risk_level // empty' 2>/dev/null)
+
+# Backwards-compat: if severity isn't block/audit, derive it from verdict_kind
+# and treat the original severity as the risk_level.
+case "$SEVERITY" in
+  block|audit) ;;
+  low|medium|high|critical)
+    [ -z "$RISK_LEVEL" ] && RISK_LEVEL="$SEVERITY"
+    if [ "$VERDICT_KIND" = "allow" ]; then SEVERITY="audit"; else SEVERITY="block"; fi
+    ;;
+  *)
+    if [ "$VERDICT_KIND" = "allow" ]; then SEVERITY="audit"; else SEVERITY="block"; fi
+    ;;
+esac
 
 # Severity-driven surfacing:
 #   block \u2192 permissionDecision: "ask" (interactive) or "deny" (headless)
@@ -735,6 +749,7 @@ if [ "$SYNKRO_CAPTURE_DEPTH" = "local_only" ] && [ -n "$VERDICT_KIND" ]; then
       --arg hook_type "bash" \\
       --arg verdict "$VERDICT_KIND" \\
       --arg severity "$SEVERITY" \\
+      --arg risk_level "\${RISK_LEVEL:-low}" \\
       --arg category "$CATEGORY" \\
       --arg model "\${CC_MODEL:-claude-sonnet-4-6}" \\
       --arg tool_name "$TOOL_NAME" \\
@@ -744,6 +759,7 @@ if [ "$SYNKRO_CAPTURE_DEPTH" = "local_only" ] && [ -n "$VERDICT_KIND" ]; then
         hook_type: $hook_type,
         verdict: $verdict,
         severity: $severity,
+        risk_level: $risk_level,
         category: $category,
         model: $model,
         tool_name: $tool_name
@@ -2199,7 +2215,12 @@ OUTPUT RULES \u2014 strictest possible, no exceptions:
 
 1. NO reasoning. NO preamble. NO commentary.
 2. Your reply is exactly one <synkro-verdict>JSON</synkro-verdict> block. Nothing else.
-3. JSON shape: {"verdict": "warn"|"allow", "severity": "low|medium|high|critical", "category": "snake_case", "reasoning": "<= 25 words, cites intent + match/mismatch", "alternative": "safer command or null"}
+3. JSON shape: {"verdict": "warn"|"allow", "severity": "block"|"audit", "risk_level": "low"|"medium"|"high"|"critical", "category": "snake_case", "reasoning": "<= 25 words, cites intent + match/mismatch", "alternative": "safer command or null"}
+
+SEVERITY MAPPING (strict):
+- verdict="warn" \u2192 severity="block"
+- verdict="allow" \u2192 severity="audit"
+risk_level always reflects the underlying danger level (low/medium/high/critical), independent of the routing decision.
 
 Rules:
 - WARN if destructive/irreversible AND not aligned with user intent, OR has wildly disproportionate blast radius vs the request.
@@ -3470,7 +3491,7 @@ function writeConfigEnv(opts) {
     `SYNKRO_CREDENTIALS_PATH=${shellQuoteSingle(credsPath)}`,
     `SYNKRO_TIER=${shellQuoteSingle(safeTier)}`,
     `SYNKRO_INFERENCE=${shellQuoteSingle(safeInference)}`,
-    `SYNKRO_VERSION=${shellQuoteSingle("1.3.29")}`
+    `SYNKRO_VERSION=${shellQuoteSingle("1.3.30")}`
   ];
   if (safeUserId) lines.push(`SYNKRO_USER_ID=${shellQuoteSingle(safeUserId)}`);
   if (safeOrgId) lines.push(`SYNKRO_ORG_ID=${shellQuoteSingle(safeOrgId)}`);