@synkro-sh/cli 1.3.46 → 1.3.48

package/dist/bootstrap.js

@@ -592,7 +592,7 @@ SYNKRO_CAPTURE_DEPTH=""
 if find "$TIER_CACHE_FILE" -mmin -60 2>/dev/null | grep -q .; then
   SYNKRO_INFERENCE_TIER=$(cat "$TIER_CACHE_FILE" 2>/dev/null)
 fi
-if [ -z "$SYNKRO_INFERENCE_TIER" ]; then
+if [ -z "$SYNKRO_INFERENCE_TIER" ] || [ -z "$SYNKRO_CAPTURE_DEPTH" ]; then
   ME_RESP=$(curl -sS "\${GATEWAY_URL}/api/v1/cli/me" -H "Authorization: Bearer $JWT" --max-time 2 2>/dev/null || echo "")
   if [ -n "$ME_RESP" ]; then
     SYNKRO_INFERENCE_TIER=$(echo "$ME_RESP" | jq -r '.tier // empty' 2>/dev/null)
@@ -787,8 +787,8 @@ case "$SEVERITY" in
     ;;
 esac
 
-# Fire-and-forget anonymized telemetry for local_only mode
-if [ "$SYNKRO_CAPTURE_DEPTH" = "local_only" ] && [ -n "$VERDICT_KIND" ]; then
+# Fire-and-forget telemetry for locally-judged checks
+if [ "$USE_LOCAL" = "true" ] && [ -n "$VERDICT_KIND" ]; then
   (
     MECH_CAT=""
     BIZ_CAT=""
@@ -810,7 +810,7 @@ if [ "$SYNKRO_CAPTURE_DEPTH" = "local_only" ] && [ -n "$VERDICT_KIND" ]; then
         BIZ_CAT=$(echo "$CLASS_RESP" | grep -oE '<business>[^<]+</business>' | sed 's/<[^>]*>//g')
       fi
     fi
-    ANON_BODY=$(jq -n \\
+    TEL_BODY=$(jq -n \\
       --arg event_id "$(uuidgen 2>/dev/null || echo "evt_$(date +%s)_$$")" \\
       --arg timestamp "$(date -u +%Y-%m-%dT%H:%M:%SZ)" \\
       --arg hook_type "bash" \\
@@ -824,6 +824,10 @@ if [ "$SYNKRO_CAPTURE_DEPTH" = "local_only" ] && [ -n "$VERDICT_KIND" ]; then
       --arg session_id "$SESSION_ID" \\
       --arg mech_cat "$MECH_CAT" \\
       --arg biz_cat "$BIZ_CAT" \\
+      --arg capture_depth "$SYNKRO_CAPTURE_DEPTH" \\
+      --arg command "$COMMAND" \\
+      --arg reasoning "$REASONING" \\
+      --arg alternative "$ALTERNATIVE" \\
       '{
         event_id: $event_id,
         timestamp: $timestamp,
@@ -833,15 +837,17 @@ if [ "$SYNKRO_CAPTURE_DEPTH" = "local_only" ] && [ -n "$VERDICT_KIND" ]; then
         risk_level: $risk_level,
         category: $category,
         model: $model,
-        tool_name: $tool_name
+        tool_name: $tool_name,
+        capture_depth: $capture_depth
       } + (if $repo != "" then {repo: $repo} else {} end)
         + (if $session_id != "" then {session_id: $session_id} else {} end)
         + (if $mech_cat != "" then {mechanism_category: $mech_cat} else {} end)
-        + (if $biz_cat != "" then {business_category: $biz_cat} else {} end)')
+        + (if $biz_cat != "" then {business_category: $biz_cat} else {} end)
+        + (if $capture_depth != "local_only" then {command: $command, reasoning: $reasoning} + (if $alternative != "" then {alternative: $alternative} else {} end) else {} end)')
     curl -sS -X POST "\${GATEWAY_URL}/api/v1/events/local-verdict" \\
       -H "Content-Type: application/json" \\
       -H "Authorization: Bearer $JWT" \\
-      -d "$ANON_BODY" \\
+      -d "$TEL_BODY" \\
       --max-time 2 >/dev/null 2>&1
   ) &
 fi
@@ -1088,7 +1094,7 @@ SYNKRO_CAPTURE_DEPTH=""
 if find "$TIER_CACHE_FILE" -mmin -60 2>/dev/null | grep -q .; then
   SYNKRO_INFERENCE_TIER=$(cat "$TIER_CACHE_FILE" 2>/dev/null)
 fi
-if [ -z "$SYNKRO_INFERENCE_TIER" ]; then
+if [ -z "$SYNKRO_INFERENCE_TIER" ] || [ -z "$SYNKRO_CAPTURE_DEPTH" ]; then
   ME_RESP=$(curl -sS "\${GATEWAY_URL}/api/v1/cli/me" -H "Authorization: Bearer $JWT" --max-time 2 2>/dev/null || echo "")
   if [ -n "$ME_RESP" ]; then
     SYNKRO_INFERENCE_TIER=$(echo "$ME_RESP" | jq -r '.tier // empty' 2>/dev/null)
@@ -1521,7 +1527,7 @@ if find "$TIER_CACHE_FILE" -mmin -60 2>/dev/null | grep -q .; then
   SYNKRO_INFERENCE_TIER=$(cat "$TIER_CACHE_FILE" 2>/dev/null || true)
   SYNKRO_CAPTURE_DEPTH=$(cat "$CD_CACHE_FILE" 2>/dev/null || true)
 fi
-if [ -z "$SYNKRO_INFERENCE_TIER" ]; then
+if [ -z "$SYNKRO_INFERENCE_TIER" ] || [ -z "$SYNKRO_CAPTURE_DEPTH" ]; then
   ME_RESP=$(curl -sS "\${GATEWAY_URL}/api/v1/cli/me" -H "Authorization: Bearer $JWT" --max-time 2 2>/dev/null || echo "")
   if [ -n "$ME_RESP" ]; then
     SYNKRO_INFERENCE_TIER=$(echo "$ME_RESP" | jq -r '.tier // empty' 2>/dev/null || true)
@@ -3854,7 +3860,7 @@ function writeConfigEnv(opts) {
     `SYNKRO_CREDENTIALS_PATH=${shellQuoteSingle(credsPath)}`,
     `SYNKRO_TIER=${shellQuoteSingle(safeTier)}`,
     `SYNKRO_INFERENCE=${shellQuoteSingle(safeInference)}`,
-    `SYNKRO_VERSION=${shellQuoteSingle("1.3.46")}`
+    `SYNKRO_VERSION=${shellQuoteSingle("1.3.48")}`
   ];
   if (safeUserId) lines.push(`SYNKRO_USER_ID=${shellQuoteSingle(safeUserId)}`);
   if (safeOrgId) lines.push(`SYNKRO_ORG_ID=${shellQuoteSingle(safeOrgId)}`);