@synkro-sh/cli 1.4.16 → 1.4.17

package/dist/bootstrap.js

@@ -503,7 +503,7 @@ synkro_channel_up() {
 synkro_load_config() {
   local cache="$HOME/.synkro/.hook-config-cache"
   if [ -f "$cache" ] && find "$cache" -mmin -5 2>/dev/null | grep -q .; then
-    eval "$(cat "$cache" 2>/dev/null)"
+    . "$cache" 2>/dev/null
     return
   fi
   local resp
@@ -546,11 +546,12 @@ synkro_parse_local_verdict() {
   local ok_tag
   ok_tag=$(printf '%s' "$inner" | sed -nE 's|.*<ok>(.*)</ok>.*|\\1|p' | head -1)
   [ -n "$ok_tag" ] && LOCAL_OK="$ok_tag"
+  LOCAL_REASON=$(printf '%s' "$inner" | sed -nE 's|.*<reason>(.*)</reason>.*|\\1|p' | head -1)
   if [ "$LOCAL_OK" = "false" ]; then
     local fv
     fv=$(printf '%s' "$inner" | awk -v RS='</violation>' '/<violation>/{print; exit}')
     LOCAL_RULE_ID=$(printf '%s' "$fv" | sed -nE 's|.*<rule_id>(.*)</rule_id>.*|\\1|p' | head -1)
-    LOCAL_REASON=$(printf '%s' "$fv" | sed -nE 's|.*<reason>(.*)</reason>.*|\\1|p' | head -1)
+    [ -z "$LOCAL_REASON" ] && LOCAL_REASON=$(printf '%s' "$fv" | sed -nE 's|.*<reason>(.*)</reason>.*|\\1|p' | head -1)
     LOCAL_SEV=$(printf '%s' "$fv" | sed -nE 's|.*<severity>(.*)</severity>.*|\\1|p' | head -1)
     LOCAL_CAT=$(printf '%s' "$fv" | sed -nE 's|.*<category>(.*)</category>.*|\\1|p' | head -1)
     LOCAL_SEV="\${LOCAL_SEV:-high}"; LOCAL_CAT="\${LOCAL_CAT:-policy_violation}"
@@ -650,12 +651,12 @@ if [ "$ROUTE" = "local" ]; then
 
   if [ "$LOCAL_OK" = "false" ]; then
     if [ "$IS_HEADLESS" = "1" ]; then DEC="deny"; else DEC="ask"; fi
-    REASON="[synkro:local] \${LOCAL_RULE_ID:+$LOCAL_RULE_ID: }\${LOCAL_REASON:-policy violation}"
+    REASON="[synkro:local] bashGuard \u2192 block\${LOCAL_RULE_ID:+ ($LOCAL_RULE_ID)}: \${LOCAL_REASON:-policy violation}"
     jq -n --arg dec "$DEC" --arg reason "$REASON" --arg ctx "$REASON" \\
       '{hookSpecificOutput:{hookEventName:"PreToolUse",permissionDecision:$dec,permissionDecisionReason:$reason,additionalContext:$ctx}}'
-    synkro_capture_local "bash" "warn" "\${LOCAL_SEV}" "\${LOCAL_CAT}" "$TOOL_NAME" "$GIT_REPO" "$SESSION_ID"
+    synkro_capture_local "bash" "block" "\${LOCAL_SEV}" "\${LOCAL_CAT}" "$TOOL_NAME" "$GIT_REPO" "$SESSION_ID"
   else
-    jq -n --arg m "[synkro:local] bashGuard \u2192 pass" '{systemMessage: $m}'
+    jq -n --arg m "[synkro:local] bashGuard \u2192 pass: \${LOCAL_REASON:-no policy violations detected}" '{systemMessage: $m}'
     synkro_capture_local "bash" "allow" "audit" "\${LOCAL_CAT:-trivial_utility}" "$TOOL_NAME" "$GIT_REPO" "$SESSION_ID"
   fi
   exit 0
@@ -822,12 +823,12 @@ if [ "$ROUTE" = "local" ]; then
 
   if [ "$LOCAL_OK" = "false" ]; then
     if [ "$IS_HEADLESS" = "1" ]; then DEC="deny"; else DEC="ask"; fi
-    REASON="[synkro:local] \${LOCAL_RULE_ID:+$LOCAL_RULE_ID: }\${LOCAL_REASON:-policy violation}"
+    REASON="[synkro:local] editGuard $FILE_SHORT \u2192 block\${LOCAL_RULE_ID:+ ($LOCAL_RULE_ID)}: \${LOCAL_REASON:-policy violation}"
     jq -n --arg dec "$DEC" --arg reason "$REASON" --arg ctx "$REASON" \\
       '{hookSpecificOutput:{hookEventName:"PreToolUse",permissionDecision:$dec,permissionDecisionReason:$reason,additionalContext:$ctx}}'
     synkro_capture_local "edit" "block" "\${LOCAL_SEV}" "\${LOCAL_CAT}" "$TOOL_NAME" "$GIT_REPO" "$SESSION_ID"
   else
-    jq -n --arg m "[synkro:local] editGuard $FILE_SHORT \u2192 pass" '{systemMessage: $m}'
+    jq -n --arg m "[synkro:local] editGuard $FILE_SHORT \u2192 pass: \${LOCAL_REASON:-no policy violations detected}" '{systemMessage: $m}'
     synkro_capture_local "edit" "pass" "audit" "\${LOCAL_CAT:-trivial_edit}" "$TOOL_NAME" "$GIT_REPO" "$SESSION_ID"
   fi
   exit 0
@@ -967,7 +968,7 @@ if [ "$ROUTE" = "local" ]; then
     jq -n --arg m "$REASON" '{systemMessage: $m, additionalContext: $m}'
     synkro_capture_local "edit_scan" "block" "\${LOCAL_SEV}" "\${LOCAL_CAT}" "$TOOL_NAME" "$GIT_REPO" "$SESSION_ID"
   else
-    jq -n --arg m "[synkro:local] editScan $BASENAME \u2192 pass" '{systemMessage: $m}'
+    jq -n --arg m "[synkro:local] editScan $BASENAME \u2192 pass: \${LOCAL_REASON:-no policy violations detected}" '{systemMessage: $m}'
     synkro_capture_local "edit_scan" "pass" "audit" "\${LOCAL_CAT:-trivial_edit}" "$TOOL_NAME" "$GIT_REPO" "$SESSION_ID"
   fi
   exit 0
@@ -3600,7 +3601,7 @@ function writeConfigEnv(opts) {
     `SYNKRO_CREDENTIALS_PATH=${shellQuoteSingle(credsPath)}`,
     `SYNKRO_TIER=${shellQuoteSingle(safeTier)}`,
     `SYNKRO_INFERENCE=${shellQuoteSingle(safeInference)}`,
-    `SYNKRO_VERSION=${shellQuoteSingle("1.4.16")}`
+    `SYNKRO_VERSION=${shellQuoteSingle("1.4.17")}`
   ];
   if (safeSynkroBin) lines.push(`SYNKRO_CLI_BIN=${shellQuoteSingle(safeSynkroBin)}`);
   if (safeUserId) lines.push(`SYNKRO_USER_ID=${shellQuoteSingle(safeUserId)}`);