@synkro-sh/cli 1.3.50 → 1.3.51

package/dist/bootstrap.js

@@ -473,7 +473,7 @@ fi
 CC_MODEL=""
 CC_USAGE="{}"
 if [ -n "$TRANSCRIPT_PATH" ] && [ -f "$TRANSCRIPT_PATH" ]; then
-  _LAST_ASSISTANT=$(tail -50 "$TRANSCRIPT_PATH" | jq -c 'select(.type == "assistant")' 2>/dev/null | tail -1)
+  _LAST_ASSISTANT=$(grep '"type":"assistant"' "$TRANSCRIPT_PATH" 2>/dev/null | tail -1)
   if [ -n "$_LAST_ASSISTANT" ]; then
     CC_MODEL=$(echo "$_LAST_ASSISTANT" | jq -r '.message.model // empty' 2>/dev/null)
     CC_USAGE=$(echo "$_LAST_ASSISTANT" | jq -c '{
@@ -619,7 +619,7 @@ if [ "$USE_LOCAL" = "true" ]; then
   if [ "$SYNKRO_CAPTURE_DEPTH" = "local_only" ]; then
     ORG_RULES=$(curl -sS "\${GATEWAY_URL}/api/v1/cli/pr-rules" \\
       -H "Authorization: Bearer $JWT" --max-time 3 2>/dev/null \\
-      | jq -c '[.rules[]? | {rule_id, text, severity, category}]' 2>/dev/null || echo "[]")
+      | jq -c '[.rules[]? | select(.hook_stage == "pre" or .hook_stage == "both" or .hook_stage == null) | {rule_id, text, severity, category}]' 2>/dev/null || echo "[]")
     if [ -n "$ORG_RULES" ] && [ "$ORG_RULES" != "null" ] && [ "$ORG_RULES" != "[]" ]; then
       printf '%s' "$ORG_RULES" > "$RULES_CACHE" 2>/dev/null || true
     elif [ -f "$RULES_CACHE" ]; then
@@ -632,7 +632,7 @@ if [ "$USE_LOCAL" = "true" ]; then
       -X POST -H "Content-Type: application/json" \\
       -H "Authorization: Bearer $JWT" \\
       -d @- --max-time 2 2>/dev/null \\
-      | jq -c '[.rules[]? | {rule_id, text, severity, category}]' 2>/dev/null || echo "[]")
+      | jq -c '[.rules[]? | select(.hook_stage == "pre" or .hook_stage == "both" or .hook_stage == null) | {rule_id, text, severity, category}]' 2>/dev/null || echo "[]")
   fi
   if [ -z "$ORG_RULES" ] || [ "$ORG_RULES" = "null" ]; then ORG_RULES="[]"; fi
 
@@ -816,7 +816,6 @@ if [ "$USE_LOCAL" = "true" ] && [ -n "$VERDICT_KIND" ]; then
       --arg severity "$SEVERITY" \\
       --arg risk_level "\${RISK_LEVEL:-low}" \\
       --arg category "$CATEGORY" \\
-      --arg cc_model "\${CC_MODEL:-}" \\
       --arg model "\${CC_MODEL:-claude-sonnet-4-6}" \\
       --arg tool_name "$TOOL_NAME" \\
       --arg repo "\${GIT_REPO:-}" \\
@@ -829,7 +828,6 @@ if [ "$USE_LOCAL" = "true" ] && [ -n "$VERDICT_KIND" ]; then
       --arg command "$COMMAND" \\
       --arg reasoning "$REASONING" \\
       --arg alternative "$ALTERNATIVE" \\
-      --argjson cc_usage "\${CC_USAGE:-{}}" \\
       --argjson rules_checked "\${ORG_RULES:-[]}" \\
       --argjson recent_user_messages "\${RECENT_USER_MESSAGES:-[]}" \\
       '{
@@ -843,9 +841,7 @@ if [ "$USE_LOCAL" = "true" ] && [ -n "$VERDICT_KIND" ]; then
         model: $model,
         tool_name: $tool_name,
         capture_depth: $capture_depth,
-        rules_checked: $rules_checked,
-        cc_model: (if ($cc_model | length) > 0 then $cc_model else null end),
-        cc_usage: $cc_usage
+        rules_checked: $rules_checked
       } + (if $repo != "" then {repo: $repo} else {} end)
         + (if $session_id != "" then {session_id: $session_id} else {} end)
         + (if $tool_use_id != "" then {tool_use_id: $tool_use_id} else {} end)
@@ -906,22 +902,6 @@ TOOL_INPUT=$(echo "$PAYLOAD" | jq -c '.tool_input // {}' 2>/dev/null)
 SESSION_ID=$(echo "$PAYLOAD" | jq -r '.session_id // empty' 2>/dev/null)
 TOOL_USE_ID=$(echo "$PAYLOAD" | jq -r '.tool_use_id // empty' 2>/dev/null)
 CWD=$(echo "$PAYLOAD" | jq -r '.cwd // empty' 2>/dev/null)
-TRANSCRIPT_PATH=$(echo "$PAYLOAD" | jq -r '.transcript_path // empty' 2>/dev/null)
-
-CC_MODEL=""
-CC_USAGE="{}"
-if [ -n "$TRANSCRIPT_PATH" ] && [ -f "$TRANSCRIPT_PATH" ]; then
-  _LAST_ASSISTANT=$(tail -50 "$TRANSCRIPT_PATH" | jq -c 'select(.type == "assistant")' 2>/dev/null | tail -1)
-  if [ -n "$_LAST_ASSISTANT" ]; then
-    CC_MODEL=$(echo "$_LAST_ASSISTANT" | jq -r '.message.model // empty' 2>/dev/null)
-    CC_USAGE=$(echo "$_LAST_ASSISTANT" | jq -c '{
-      input_tokens: .message.usage.input_tokens,
-      output_tokens: .message.usage.output_tokens,
-      cache_creation_input_tokens: .message.usage.cache_creation_input_tokens,
-      cache_read_input_tokens: .message.usage.cache_read_input_tokens
-    }' 2>/dev/null || echo "{}")
-  fi
-fi
 # Detect git remote origin \u2192 repo identity (e.g. "owner/repo")
 GIT_REPO=""
 if command -v git >/dev/null 2>&1; then
@@ -1144,7 +1124,7 @@ if [ "$USE_LOCAL" = "true" ]; then
   if [ "$SYNKRO_CAPTURE_DEPTH" = "local_only" ]; then
     ORG_RULES=$(curl -sS "\${GATEWAY_URL}/api/v1/cli/pr-rules" \\
       -H "Authorization: Bearer $JWT" --max-time 3 2>/dev/null \\
-      | jq -c '[.rules[]? | {rule_id, text, severity, category, mode}]' 2>/dev/null || echo "[]")
+      | jq -c '[.rules[]? | select(.hook_stage == "pre" or .hook_stage == "both" or .hook_stage == null) | {rule_id, text, severity, category, mode}]' 2>/dev/null || echo "[]")
     if [ -n "$ORG_RULES" ] && [ "$ORG_RULES" != "null" ] && [ "$ORG_RULES" != "[]" ]; then
       printf '%s' "$ORG_RULES" > "$RULES_CACHE" 2>/dev/null || true
     elif [ -f "$RULES_CACHE" ]; then
@@ -1157,7 +1137,7 @@ if [ "$USE_LOCAL" = "true" ]; then
       -X POST -H "Content-Type: application/json" \\
       -H "Authorization: Bearer $JWT" \\
       -d @- --max-time 2 2>/dev/null \\
-      | jq -c '[.rules[]? | {rule_id, text, severity, category, mode}]' 2>/dev/null || echo "[]")
+      | jq -c '[.rules[]? | select(.hook_stage == "pre" or .hook_stage == "both" or .hook_stage == null) | {rule_id, text, severity, category, mode}]' 2>/dev/null || echo "[]")
   fi
   if [ -z "$ORG_RULES" ] || [ "$ORG_RULES" = "null" ]; then ORG_RULES="[]"; fi
 
@@ -1355,14 +1335,12 @@ if [ "$SYNKRO_CAPTURE_DEPTH" = "local_only" ] && [ -n "$DECISION" ]; then
       --arg verdict "$LOCAL_VERDICT" \\
       --arg severity "$LOCAL_SEVERITY" \\
       --arg category "$LOCAL_CATEGORY" \\
-      --arg model "\${CC_MODEL:-claude-sonnet-4-6}" \\
-      --arg cc_model "\${CC_MODEL:-}" \\
+      --arg model "claude-sonnet-4-6" \\
       --arg tool_name "$TOOL_NAME" \\
       --arg repo "\${GIT_REPO:-}" \\
       --arg session_id "$SESSION_ID" \\
       --arg mech_cat "$MECH_CAT" \\
       --arg biz_cat "$BIZ_CAT" \\
-      --argjson cc_usage "\${CC_USAGE:-{}}" \\
       '{
         event_id: $event_id,
         timestamp: $timestamp,
@@ -1371,11 +1349,9 @@ if [ "$SYNKRO_CAPTURE_DEPTH" = "local_only" ] && [ -n "$DECISION" ]; then
         severity: $severity,
         category: $category,
         model: $model,
-        tool_name: $tool_name,
-        cc_usage: $cc_usage
+        tool_name: $tool_name
       } + (if $repo != "" then {repo: $repo} else {} end)
         + (if $session_id != "" then {session_id: $session_id} else {} end)
-        + (if $cc_model != "" then {cc_model: $cc_model} else {} end)
         + (if $mech_cat != "" then {mechanism_category: $mech_cat} else {} end)
         + (if $biz_cat != "" then {business_category: $biz_cat} else {} end)')
     curl -sS -X POST "\${GATEWAY_URL}/api/v1/events/local-verdict" \\
@@ -1432,22 +1408,6 @@ TOOL_INPUT=$(echo "$PAYLOAD" | jq -c '.tool_input // {}' 2>/dev/null)
 SESSION_ID=$(echo "$PAYLOAD" | jq -r '.session_id // empty' 2>/dev/null)
 TOOL_USE_ID=$(echo "$PAYLOAD" | jq -r '.tool_use_id // empty' 2>/dev/null)
 CWD=$(echo "$PAYLOAD" | jq -r '.cwd // empty' 2>/dev/null)
-TRANSCRIPT_PATH=$(echo "$PAYLOAD" | jq -r '.transcript_path // empty' 2>/dev/null)
-
-CC_MODEL=""
-CC_USAGE="{}"
-if [ -n "$TRANSCRIPT_PATH" ] && [ -f "$TRANSCRIPT_PATH" ]; then
-  _LAST_ASSISTANT=$(tail -50 "$TRANSCRIPT_PATH" | jq -c 'select(.type == "assistant")' 2>/dev/null | tail -1)
-  if [ -n "$_LAST_ASSISTANT" ]; then
-    CC_MODEL=$(echo "$_LAST_ASSISTANT" | jq -r '.message.model // empty' 2>/dev/null)
-    CC_USAGE=$(echo "$_LAST_ASSISTANT" | jq -c '{
-      input_tokens: .message.usage.input_tokens,
-      output_tokens: .message.usage.output_tokens,
-      cache_creation_input_tokens: .message.usage.cache_creation_input_tokens,
-      cache_read_input_tokens: .message.usage.cache_read_input_tokens
-    }' 2>/dev/null || echo "{}")
-  fi
-fi
 # Detect git remote origin \u2192 repo identity (e.g. "owner/repo")
 GIT_REPO=""
 if command -v git >/dev/null 2>&1; then
@@ -1627,7 +1587,7 @@ if [ "$USE_LOCAL" = "true" ]; then
       -H "Authorization: Bearer $JWT" \\
       -d @- --max-time 2 2>/dev/null || echo "")
   fi
-  ORG_RULES=$(echo "$RULES_RESP" | jq -c '[.rules[]? | {rule_id, text, severity, category}]' 2>/dev/null || echo "[]")
+  ORG_RULES=$(echo "$RULES_RESP" | jq -c '[.rules[]? | select(.hook_stage == "post" or .hook_stage == "both" or .hook_stage == null) | {rule_id, text, severity, category}]' 2>/dev/null || echo "[]")
   if [ -n "$ORG_RULES" ] && [ "$ORG_RULES" != "null" ] && [ "$ORG_RULES" != "[]" ]; then
     printf '%s' "$ORG_RULES" > "$RULES_CACHE" 2>/dev/null || true
   elif [ -f "$RULES_CACHE" ]; then
@@ -1779,22 +1739,18 @@ if [ "$SYNKRO_CAPTURE_DEPTH" = "local_only" ]; then
       --arg severity "$LOCAL_SEVERITY" \\
       --arg risk_level "$LOCAL_RISK" \\
       --arg category "$CATEGORY" \\
-      --arg model "\${CC_MODEL:-claude-sonnet-4-6}" \\
-      --arg cc_model "\${CC_MODEL:-}" \\
+      --arg model "claude-sonnet-4-6" \\
       --arg tool_name "$TOOL_NAME" \\
       --arg repo "\${GIT_REPO:-}" \\
       --arg session_id "$SESSION_ID" \\
       --arg mech_cat "$MECH_CAT" \\
       --arg biz_cat "$BIZ_CAT" \\
-      --argjson cc_usage "\${CC_USAGE:-{}}" \\
       '{
         event_id: $event_id, timestamp: $timestamp, hook_type: $hook_type,
         verdict: $verdict, severity: $severity, risk_level: $risk_level,
-        category: $category, model: $model, tool_name: $tool_name,
-        cc_usage: $cc_usage
+        category: $category, model: $model, tool_name: $tool_name
       } + (if $repo != "" then {repo: $repo} else {} end)
         + (if $session_id != "" then {session_id: $session_id} else {} end)
-        + (if $cc_model != "" then {cc_model: $cc_model} else {} end)
         + (if $mech_cat != "" then {mechanism_category: $mech_cat} else {} end)
         + (if $biz_cat != "" then {business_category: $biz_cat} else {} end)')
     curl -sS -X POST "\${GATEWAY_URL}/api/v1/events/local-verdict" \\
@@ -1864,6 +1820,57 @@ if [ -z "$SESSION_ID" ]; then
   exit 0
 fi
 
+TRANSCRIPT_PATH=$(echo "$PAYLOAD" | jq -r '.transcript_path // empty' 2>/dev/null)
+CWD=$(echo "$PAYLOAD" | jq -r '.cwd // empty' 2>/dev/null)
+
+GIT_REPO=""
+if command -v git >/dev/null 2>&1; then
+  _REMOTE=$(git -C "\${CWD:-.}" remote get-url origin 2>/dev/null || true)
+  if [ -n "$_REMOTE" ]; then
+    GIT_REPO=$(echo "$_REMOTE" | sed -E 's|^git@[^:]+:||; s|^https?://[^/]+/||; s|\\.git$||')
+  fi
+fi
+
+# Fire-and-forget usage telemetry \u2014 runs every turn via Stop hook
+if [ -n "$TRANSCRIPT_PATH" ] && [ -f "$TRANSCRIPT_PATH" ]; then
+  (
+    _LAST_ASSISTANT=$(grep '"type":"assistant"' "$TRANSCRIPT_PATH" 2>/dev/null | tail -1)
+    if [ -n "$_LAST_ASSISTANT" ]; then
+      CC_MODEL=$(echo "$_LAST_ASSISTANT" | jq -r '.message.model // empty' 2>/dev/null)
+      CC_USAGE=$(echo "$_LAST_ASSISTANT" | jq -c '{
+        input_tokens: .message.usage.input_tokens,
+        output_tokens: .message.usage.output_tokens,
+        cache_creation_input_tokens: .message.usage.cache_creation_input_tokens,
+        cache_read_input_tokens: .message.usage.cache_read_input_tokens
+      }' 2>/dev/null || echo "{}")
+      HAS_TOKENS=$(echo "$CC_USAGE" | jq '(.input_tokens // 0) + (.output_tokens // 0)' 2>/dev/null)
+      if [ -n "$HAS_TOKENS" ] && [ "$HAS_TOKENS" != "0" ]; then
+        USAGE_BODY=$(jq -n \\
+          --arg event_id "usage_$(date +%s)_$$" \\
+          --arg hook_type "stop" \\
+          --arg verdict "allow" \\
+          --arg severity "none" \\
+          --arg model "\${CC_MODEL:-claude-sonnet-4-6}" \\
+          --arg cc_model "\${CC_MODEL:-}" \\
+          --arg repo "\${GIT_REPO:-}" \\
+          --arg session_id "$SESSION_ID" \\
+          --argjson cc_usage "$CC_USAGE" \\
+          '{
+            event_id: $event_id, hook_type: $hook_type,
+            verdict: $verdict, severity: $severity,
+            model: $model, cc_usage: $cc_usage
+          } + (if $repo != "" then {repo: $repo} else {} end)
+            + (if $session_id != "" then {session_id: $session_id} else {} end)
+            + (if $cc_model != "" then {cc_model: $cc_model} else {} end)')
+        curl -sS -X POST "\${GATEWAY_URL}/api/v1/events/local-verdict" \\
+          -H "Content-Type: application/json" \\
+          -H "Authorization: Bearer $JWT" \\
+          -d "$USAGE_BODY" --max-time 2 >/dev/null 2>&1
+      fi
+    fi
+  ) &
+fi
+
 # Tight timeout \u2014 the user already finished their session, don't make them wait.
 RESP=$(curl -sS -G "\${GATEWAY_URL}/api/v1/cli/session-summary" \\
   --data-urlencode "session_id=$SESSION_ID" \\
@@ -3967,7 +3974,7 @@ function writeConfigEnv(opts) {
     `SYNKRO_CREDENTIALS_PATH=${shellQuoteSingle(credsPath)}`,
     `SYNKRO_TIER=${shellQuoteSingle(safeTier)}`,
     `SYNKRO_INFERENCE=${shellQuoteSingle(safeInference)}`,
-    `SYNKRO_VERSION=${shellQuoteSingle("1.3.50")}`
+    `SYNKRO_VERSION=${shellQuoteSingle("1.3.51")}`
   ];
   if (safeUserId) lines.push(`SYNKRO_USER_ID=${shellQuoteSingle(safeUserId)}`);
   if (safeOrgId) lines.push(`SYNKRO_ORG_ID=${shellQuoteSingle(safeOrgId)}`);