@synkro-sh/cli 1.4.90 → 1.4.91

package/dist/bootstrap.js

@@ -1273,10 +1273,10 @@ export function parseVerdict(resp: string): Verdict {
   const okMatch = inner.match(/<ok>(.*?)<\\/ok>/);
   if (okMatch) verdict.ok = okMatch[1].trim() !== 'false';
 
-  const decisionMatch = inner.match(/<decision>(.*?)<\\/decision>/);
+  const decisionMatch = inner.match(/<decision>(.*?)<\\/decision>/) || inner.match(/<overall>(.*?)<\\/overall>/);
   if (decisionMatch) {
     const d = decisionMatch[1].trim().toLowerCase();
-    if (d === 'block' || d === 'deny' || d === 'fail') verdict.ok = false;
+    if (d === 'block' || d === 'blocking' || d === 'deny' || d === 'fail') verdict.ok = false;
     else if (d === 'allow' || d === 'pass' || d === 'approve') verdict.ok = true;
   }
 
@@ -5282,6 +5282,7 @@ function writeRefreshAgent(synkroBinPath) {
     throw new KeychainExportError("writeRefreshAgent is darwin-only");
   }
   mkdirSync6(join6(homedir6(), "Library", "LaunchAgents"), { recursive: true });
+  const shellCmd = `export PATH="/opt/homebrew/bin:/usr/local/bin:$PATH" && "${synkroBinPath}" local-cc refresh-creds`;
   const plist = `<?xml version="1.0" encoding="UTF-8"?>
 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
 <plist version="1.0">
@@ -5290,9 +5291,9 @@ function writeRefreshAgent(synkroBinPath) {
   <string>${LAUNCHD_LABEL}</string>
   <key>ProgramArguments</key>
   <array>
-    <string>${synkroBinPath}</string>
-    <string>local-cc</string>
-    <string>refresh-creds</string>
+    <string>/bin/bash</string>
+    <string>-c</string>
+    <string>${shellCmd}</string>
   </array>
   <key>StartInterval</key>
   <integer>${REFRESH_INTERVAL_SECONDS}</integer>
@@ -5347,7 +5348,7 @@ var init_macKeychain = __esm({
     KEYCHAIN_SERVICE = "Claude Code-credentials";
     LAUNCHD_LABEL = "com.synkro.cli.claude-creds-refresh";
     LAUNCHD_PLIST = join6(homedir6(), "Library", "LaunchAgents", `${LAUNCHD_LABEL}.plist`);
-    REFRESH_INTERVAL_SECONDS = 6 * 60 * 60;
+    REFRESH_INTERVAL_SECONDS = 45 * 60;
     KeychainExportError = class extends Error {
       constructor(message, cause) {
         super(message);
@@ -5450,6 +5451,8 @@ async function dockerInstall(opts = {}) {
     "-v",
     `${MCP_JWT_PATH}:/data/.mcp-jwt:ro`,
     "-v",
+    `${SYNKRO_CREDS_PATH}:/data/credentials.json:ro`,
+    "-v",
     `${credsDir}:/home/synkro/.claude:rw`,
     "-v",
     `${join7(homedir7(), ".claude")}:/data/claude-host:ro`,
@@ -5499,13 +5502,14 @@ function dockerStatus() {
     healthz: `http://127.0.0.1:${HOST_MCP_PORT}/`
   };
 }
-var SYNKRO_DIR3, MCP_JWT_PATH, PGDATA_PATH, HOST_MCP_PORT, HOST_GRADER_PORT, HOST_CWE_PORT, HOST_PG_PORT, CONTAINER_NAME, DEFAULT_IMAGE, DockerInstallError;
+var SYNKRO_DIR3, MCP_JWT_PATH, SYNKRO_CREDS_PATH, PGDATA_PATH, HOST_MCP_PORT, HOST_GRADER_PORT, HOST_CWE_PORT, HOST_PG_PORT, CONTAINER_NAME, DEFAULT_IMAGE, DockerInstallError;
 var init_dockerInstall = __esm({
   "cli/local-cc/dockerInstall.ts"() {
     "use strict";
     init_macKeychain();
     SYNKRO_DIR3 = join7(homedir7(), ".synkro");
     MCP_JWT_PATH = join7(SYNKRO_DIR3, ".mcp-jwt");
+    SYNKRO_CREDS_PATH = join7(SYNKRO_DIR3, "credentials.json");
     PGDATA_PATH = join7(SYNKRO_DIR3, "pgdata");
     HOST_MCP_PORT = parseInt(process.env.SYNKRO_HOST_MCP_PORT || "18931", 10);
     HOST_GRADER_PORT = parseInt(process.env.SYNKRO_HOST_GRADER_PORT || "18929", 10);
@@ -5555,19 +5559,6 @@ function parseArgs(argv) {
   }
   return opts;
 }
-async function promptTranscriptConsent() {
-  const rl = createInterface3({ input: process.stdin, output: process.stdout });
-  return new Promise((resolve3) => {
-    rl.question(
-      "Would you like Synkro to use Claude Code session transcripts\nto generate guardrail rules and policies for your team? (Y/n) ",
-      (answer) => {
-        rl.close();
-        const trimmed = answer.trim().toLowerCase();
-        resolve3(trimmed === "" || trimmed === "y" || trimmed === "yes");
-      }
-    );
-  });
-}
 function ensureSynkroDir() {
   mkdirSync8(SYNKRO_DIR4, { recursive: true });
   mkdirSync8(HOOKS_DIR, { recursive: true });
@@ -5669,7 +5660,7 @@ function writeConfigEnv(opts) {
     `SYNKRO_CREDENTIALS_PATH=${shellQuoteSingle(credsPath)}`,
     `SYNKRO_TIER=${shellQuoteSingle(safeTier)}`,
     `SYNKRO_INFERENCE=${shellQuoteSingle(safeInference)}`,
-    `SYNKRO_VERSION=${shellQuoteSingle("1.4.90")}`
+    `SYNKRO_VERSION=${shellQuoteSingle("1.4.91")}`
   ];
   if (safeSynkroBin) lines.push(`SYNKRO_CLI_BIN=${shellQuoteSingle(safeSynkroBin)}`);
   if (safeUserId) lines.push(`SYNKRO_USER_ID=${shellQuoteSingle(safeUserId)}`);
@@ -5885,16 +5876,29 @@ async function installCommand(opts = {}) {
     console.error("No access token available after auth.");
     process.exit(1);
   }
-  console.log("\nConnecting to GitHub (optional \u2014 for PR scanning)...");
   let ghToken = null;
-  try {
-    ghToken = await connectGitHub(gatewayUrl, token);
-  } catch {
-  }
-  if (ghToken) {
-    console.log();
-  } else {
-    console.log("  Skipped. Run `synkro install` again to enable PR scanning.\n");
+  if (process.stdin.isTTY) {
+    const rl = createInterface3({ input: process.stdin, output: process.stdout });
+    const wantsPR = await new Promise((resolve3) => {
+      rl.question("Would you like to enable GitHub PR scanning? (y/N) ", (answer) => {
+        rl.close();
+        const trimmed = answer.trim().toLowerCase();
+        resolve3(trimmed === "y" || trimmed === "yes");
+      });
+    });
+    if (wantsPR) {
+      try {
+        ghToken = await connectGitHub(gatewayUrl, token);
+      } catch {
+      }
+      if (ghToken) {
+        console.log();
+      } else {
+        console.log("  Skipped. Run `synkro install` again to enable PR scanning.\n");
+      }
+    } else {
+      console.log("  Skipped PR scanning.\n");
+    }
   }
   setApiBaseUrl(`${gatewayUrl}/api`);
   await promptRepoConnection({ linkRepo: opts.linkRepo });
@@ -5933,15 +5937,7 @@ async function installCommand(opts = {}) {
     } catch {
     }
   }
-  let transcriptConsent = true;
-  if (process.stdin.isTTY) {
-    transcriptConsent = await promptTranscriptConsent();
-    if (transcriptConsent) {
-      console.log("  \u2713 Transcript collection enabled\n");
-    } else {
-      console.log("  \u2717 Transcript collection disabled \u2014 skipping transcript sync\n");
-    }
-  }
+  const transcriptConsent = false;
   let hasClaudeCode = false;
   let hasCursor = false;
   for (const agent of agents) {
@@ -6426,13 +6422,6 @@ rl.on('line', async (line) => {
   }
 });
 
-// cli/local-cc/channelSource.ts
-var init_channelSource = __esm({
-  "cli/local-cc/channelSource.ts"() {
-    "use strict";
-  }
-});
-
 // cli/local-cc/install.ts
 import { existsSync as existsSync10, mkdirSync as mkdirSync9, writeFileSync as writeFileSync8, readFileSync as readFileSync8, chmodSync as chmodSync3, copyFileSync, renameSync as renameSync4, unlinkSync as unlinkSync4, openSync, fsyncSync, closeSync } from "fs";
 import { join as join9 } from "path";
@@ -6517,7 +6506,6 @@ var CLAUDE_JSON_BACKUP_PATH, SESSION_DIR, PLUGIN_PATH, PLUGIN_PKG_PATH, PLUGIN_S
 var init_install2 = __esm({
   "cli/local-cc/install.ts"() {
     "use strict";
-    init_channelSource();
     CLAUDE_JSON_BACKUP_PATH = join9(homedir9(), ".claude.json.synkro-bak");
     SESSION_DIR = join9(homedir9(), ".synkro", "cc_sessions");
     PLUGIN_PATH = join9(SESSION_DIR, "synkro-channel.ts");
@@ -7107,7 +7095,7 @@ var args = process.argv.slice(2);
 var cmd = args[0] || "";
 var subArgs = args.slice(1);
 function printVersion() {
-  console.log("1.4.90");
+  console.log("1.4.91");
 }
 function printHelp() {
   console.log(`Synkro CLI \u2014 runtime safety for AI coding agents