@synkro-sh/cli 1.4.17 → 1.4.19

package/dist/bootstrap.js

@@ -547,6 +547,7 @@ synkro_parse_local_verdict() {
   ok_tag=$(printf '%s' "$inner" | sed -nE 's|.*<ok>(.*)</ok>.*|\\1|p' | head -1)
   [ -n "$ok_tag" ] && LOCAL_OK="$ok_tag"
   LOCAL_REASON=$(printf '%s' "$inner" | sed -nE 's|.*<reason>(.*)</reason>.*|\\1|p' | head -1)
+  [ -z "$LOCAL_REASON" ] && LOCAL_REASON=$(printf '%s' "$inner" | sed -nE 's|.*<reasoning>(.*)</reasoning>.*|\\1|p' | head -1)
   if [ "$LOCAL_OK" = "false" ]; then
     local fv
     fv=$(printf '%s' "$inner" | awk -v RS='</violation>' '/<violation>/{print; exit}')
@@ -575,6 +576,16 @@ synkro_capture_local() {
   ) &
 }
 
+# Look up a rule's mode from cached rules. Returns "blocking" or "audit".
+synkro_rule_mode() {
+  local rid="$1"
+  [ -z "$rid" ] || [ -z "\${SYNKRO_RULES:-}" ] && echo "blocking" && return
+  local m
+  m=$(printf '%s' "$SYNKRO_RULES" | jq -r --arg r "$rid" '[.[] | select(.rule_id == $r) | .mode] | .[0] // "blocking"' 2>/dev/null)
+  [ -z "$m" ] || [ "$m" = "null" ] && m="blocking"
+  echo "$m"
+}
+
 synkro_post_with_retry() {
   local url="$1" body="$2" timeout="\${3:-8}"
   local resp
@@ -650,14 +661,21 @@ if [ "$ROUTE" = "local" ]; then
   synkro_parse_local_verdict "$CC_RESP"
 
   if [ "$LOCAL_OK" = "false" ]; then
-    if [ "$IS_HEADLESS" = "1" ]; then DEC="deny"; else DEC="ask"; fi
-    REASON="[synkro:local] bashGuard \u2192 block\${LOCAL_RULE_ID:+ ($LOCAL_RULE_ID)}: \${LOCAL_REASON:-policy violation}"
-    jq -n --arg dec "$DEC" --arg reason "$REASON" --arg ctx "$REASON" \\
-      '{hookSpecificOutput:{hookEventName:"PreToolUse",permissionDecision:$dec,permissionDecisionReason:$reason,additionalContext:$ctx}}'
-    synkro_capture_local "bash" "block" "\${LOCAL_SEV}" "\${LOCAL_CAT}" "$TOOL_NAME" "$GIT_REPO" "$SESSION_ID"
+    RULE_MODE=$(synkro_rule_mode "\${LOCAL_RULE_ID}")
+    if [ "$RULE_MODE" = "audit" ]; then
+      REASON="[synkro:local] bashGuard \u2192 warning\${LOCAL_RULE_ID:+ ($LOCAL_RULE_ID)}: \${LOCAL_REASON:-policy violation}"
+      jq -n --arg m "$REASON" '{systemMessage: $m}'
+      synkro_capture_local "bash" "warning" "\${LOCAL_SEV}" "\${LOCAL_CAT}" "$TOOL_NAME" "$GIT_REPO" "$SESSION_ID"
+    else
+      if [ "$IS_HEADLESS" = "1" ]; then DEC="deny"; else DEC="ask"; fi
+      REASON="[synkro:local] bashGuard \u2192 block\${LOCAL_RULE_ID:+ ($LOCAL_RULE_ID)}: \${LOCAL_REASON:-policy violation}"
+      jq -n --arg dec "$DEC" --arg reason "$REASON" --arg ctx "$REASON" \\
+        '{hookSpecificOutput:{hookEventName:"PreToolUse",permissionDecision:$dec,permissionDecisionReason:$reason,additionalContext:$ctx}}'
+      synkro_capture_local "bash" "block" "\${LOCAL_SEV}" "\${LOCAL_CAT}" "$TOOL_NAME" "$GIT_REPO" "$SESSION_ID"
+    fi
   else
     jq -n --arg m "[synkro:local] bashGuard \u2192 pass: \${LOCAL_REASON:-no policy violations detected}" '{systemMessage: $m}'
-    synkro_capture_local "bash" "allow" "audit" "\${LOCAL_CAT:-trivial_utility}" "$TOOL_NAME" "$GIT_REPO" "$SESSION_ID"
+    synkro_capture_local "bash" "pass" "audit" "\${LOCAL_CAT:-trivial_utility}" "$TOOL_NAME" "$GIT_REPO" "$SESSION_ID"
   fi
   exit 0
 fi
@@ -822,11 +840,18 @@ if [ "$ROUTE" = "local" ]; then
   synkro_parse_local_verdict "$CC_RESP"
 
   if [ "$LOCAL_OK" = "false" ]; then
-    if [ "$IS_HEADLESS" = "1" ]; then DEC="deny"; else DEC="ask"; fi
-    REASON="[synkro:local] editGuard $FILE_SHORT \u2192 block\${LOCAL_RULE_ID:+ ($LOCAL_RULE_ID)}: \${LOCAL_REASON:-policy violation}"
-    jq -n --arg dec "$DEC" --arg reason "$REASON" --arg ctx "$REASON" \\
-      '{hookSpecificOutput:{hookEventName:"PreToolUse",permissionDecision:$dec,permissionDecisionReason:$reason,additionalContext:$ctx}}'
-    synkro_capture_local "edit" "block" "\${LOCAL_SEV}" "\${LOCAL_CAT}" "$TOOL_NAME" "$GIT_REPO" "$SESSION_ID"
+    RULE_MODE=$(synkro_rule_mode "\${LOCAL_RULE_ID}")
+    if [ "$RULE_MODE" = "audit" ]; then
+      REASON="[synkro:local] editGuard $FILE_SHORT \u2192 warning\${LOCAL_RULE_ID:+ ($LOCAL_RULE_ID)}: \${LOCAL_REASON:-policy violation}"
+      jq -n --arg m "$REASON" '{systemMessage: $m}'
+      synkro_capture_local "edit" "warning" "\${LOCAL_SEV}" "\${LOCAL_CAT}" "$TOOL_NAME" "$GIT_REPO" "$SESSION_ID"
+    else
+      if [ "$IS_HEADLESS" = "1" ]; then DEC="deny"; else DEC="ask"; fi
+      REASON="[synkro:local] editGuard $FILE_SHORT \u2192 block\${LOCAL_RULE_ID:+ ($LOCAL_RULE_ID)}: \${LOCAL_REASON:-policy violation}"
+      jq -n --arg dec "$DEC" --arg reason "$REASON" --arg ctx "$REASON" \\
+        '{hookSpecificOutput:{hookEventName:"PreToolUse",permissionDecision:$dec,permissionDecisionReason:$reason,additionalContext:$ctx}}'
+      synkro_capture_local "edit" "block" "\${LOCAL_SEV}" "\${LOCAL_CAT}" "$TOOL_NAME" "$GIT_REPO" "$SESSION_ID"
+    fi
   else
     jq -n --arg m "[synkro:local] editGuard $FILE_SHORT \u2192 pass: \${LOCAL_REASON:-no policy violations detected}" '{systemMessage: $m}'
     synkro_capture_local "edit" "pass" "audit" "\${LOCAL_CAT:-trivial_edit}" "$TOOL_NAME" "$GIT_REPO" "$SESSION_ID"
@@ -964,9 +989,16 @@ if [ "$ROUTE" = "local" ]; then
   synkro_parse_local_verdict "$CC_RESP"
 
   if [ "$LOCAL_OK" = "false" ]; then
-    REASON="[synkro:local] editScan $BASENAME \u2192 block: \${LOCAL_REASON:-policy violation}"
-    jq -n --arg m "$REASON" '{systemMessage: $m, additionalContext: $m}'
-    synkro_capture_local "edit_scan" "block" "\${LOCAL_SEV}" "\${LOCAL_CAT}" "$TOOL_NAME" "$GIT_REPO" "$SESSION_ID"
+    RULE_MODE=$(synkro_rule_mode "\${LOCAL_RULE_ID}")
+    if [ "$RULE_MODE" = "audit" ]; then
+      REASON="[synkro:local] editScan $BASENAME \u2192 warning\${LOCAL_RULE_ID:+ ($LOCAL_RULE_ID)}: \${LOCAL_REASON:-policy violation}"
+      jq -n --arg m "$REASON" '{systemMessage: $m}'
+      synkro_capture_local "edit_scan" "warning" "\${LOCAL_SEV}" "\${LOCAL_CAT}" "$TOOL_NAME" "$GIT_REPO" "$SESSION_ID"
+    else
+      REASON="[synkro:local] editScan $BASENAME \u2192 block: \${LOCAL_REASON:-policy violation}"
+      jq -n --arg m "$REASON" '{systemMessage: $m, additionalContext: $m}'
+      synkro_capture_local "edit_scan" "block" "\${LOCAL_SEV}" "\${LOCAL_CAT}" "$TOOL_NAME" "$GIT_REPO" "$SESSION_ID"
+    fi
   else
     jq -n --arg m "[synkro:local] editScan $BASENAME \u2192 pass: \${LOCAL_REASON:-no policy violations detected}" '{systemMessage: $m}'
     synkro_capture_local "edit_scan" "pass" "audit" "\${LOCAL_CAT:-trivial_edit}" "$TOOL_NAME" "$GIT_REPO" "$SESSION_ID"
@@ -1145,8 +1177,17 @@ SESSION_ID=$(echo "$PAYLOAD" | jq -r '.session_id // empty' 2>/dev/null)
 TOOL_USE_ID=$(echo "$PAYLOAD" | jq -r '.tool_use_id // empty' 2>/dev/null)
 if [ -z "$SESSION_ID" ] || [ -z "$TOOL_USE_ID" ]; then echo '{}'; exit 0; fi
 
+# Extract is_error from tool_result and compute command hash for consent tracking
+IS_ERROR=$(echo "$PAYLOAD" | jq -r '.tool_result.is_error // false' 2>/dev/null)
+CMD=$(echo "$PAYLOAD" | jq -r '.tool_input.command // empty' 2>/dev/null)
+CMD_HASH=""
+if [ -n "$CMD" ]; then
+  CMD_HASH=$(printf '%s' "$CMD" | shasum -a 256 | cut -c1-16)
+fi
+
 BODY=$(jq -n --arg sid "$SESSION_ID" --arg tid "$TOOL_USE_ID" \\
-  '{capture_type:"bash_followup",session_id:$sid,tool_use_id:$tid}')
+  --argjson err "$IS_ERROR" --arg ch "$CMD_HASH" \\
+  '{capture_type:"bash_followup",session_id:$sid,tool_use_id:$tid,is_error:$err,command_hash:$ch}')
 
 curl -sS -X POST "\${GATEWAY_URL}/api/v1/hook/capture" \\
   -H "Content-Type: application/json" -H "Authorization: Bearer $JWT" \\
@@ -1398,10 +1439,18 @@ case "$TOOL_NAME" in Shell|Bash|terminal|run_terminal_cmd|execute_command) ;; *)
 SESSION_ID=$(echo "$PAYLOAD" | jq -r '.conversation_id // empty' 2>/dev/null)
 TOOL_USE_ID=$(echo "$PAYLOAD" | jq -r '.tool_use_id // empty' 2>/dev/null)
 
+IS_ERROR=$(echo "$PAYLOAD" | jq -r '.tool_result.is_error // false' 2>/dev/null)
+CMD=$(echo "$PAYLOAD" | jq -r '.tool_input.command // empty' 2>/dev/null)
+CMD_HASH=""
+if [ -n "$CMD" ]; then
+  CMD_HASH=$(printf '%s' "$CMD" | shasum -a 256 | cut -c1-16)
+fi
+
 if [ -n "$SESSION_ID" ] && [ -n "$TOOL_USE_ID" ]; then
   (
     BODY=$(jq -n --arg sid "$SESSION_ID" --arg tid "$TOOL_USE_ID" \\
-      '{capture_type:"bash_followup",session_id:$sid,tool_use_id:$tid}')
+      --argjson err "$IS_ERROR" --arg ch "$CMD_HASH" \\
+      '{capture_type:"bash_followup",session_id:$sid,tool_use_id:$tid,is_error:$err,command_hash:$ch}')
     curl -sS -X POST "\${GATEWAY_URL}/api/v1/hook/capture" \\
       -H "Content-Type: application/json" -H "Authorization: Bearer $JWT" \\
       -d "$BODY" --max-time 3 >/dev/null 2>&1 || true
@@ -3601,7 +3650,7 @@ function writeConfigEnv(opts) {
     `SYNKRO_CREDENTIALS_PATH=${shellQuoteSingle(credsPath)}`,
     `SYNKRO_TIER=${shellQuoteSingle(safeTier)}`,
     `SYNKRO_INFERENCE=${shellQuoteSingle(safeInference)}`,
-    `SYNKRO_VERSION=${shellQuoteSingle("1.4.17")}`
+    `SYNKRO_VERSION=${shellQuoteSingle("1.4.19")}`
   ];
   if (safeSynkroBin) lines.push(`SYNKRO_CLI_BIN=${shellQuoteSingle(safeSynkroBin)}`);
   if (safeUserId) lines.push(`SYNKRO_USER_ID=${shellQuoteSingle(safeUserId)}`);