@synkro-sh/cli 1.6.17 → 1.6.19

package/dist/bootstrap.js

@@ -1641,6 +1641,10 @@ export function dispatchCapture(
   const body: Record<string, any> = {
     capture_type: 'local_verdict',
     event_id: eventId,
+    // Source-time of the action. The ingest handler uses this for created_at
+    // \u2014 without it, the spool drain stamps every event with NOW() and a batch
+    // of actions taken minutes apart all collapse to the drain instant.
+    _ts: new Date().toISOString(),
     hook_type: hookType,
     verdict: verdictStr,
     severity,
@@ -3172,13 +3176,14 @@ async function main() {
     if (!input.trim()) { outputEmpty(); return; }
 
     const payload = JSON.parse(input);
-    const toolName = payload.tool_name || '';
-    if (!isShellTool(toolName)) { outputEmpty(); return; }
-
     const toolInput = payload.tool_input || {};
     const command = typeof payload.command === 'string' ? payload.command : (toolInput.command || '');
     if (!command) { outputEmpty(); return; }
 
+    const toolName = payload.tool_name || '';
+    // beforeShellExecution supplies command directly; preToolUse uses tool_name + tool_input.
+    if (!isShellTool(toolName) && typeof payload.command !== 'string') { outputEmpty(); return; }
+
     let jwt = loadJwt();
     if (!jwt) { outputEmpty(); return; }
     jwt = await ensureFreshJwt(jwt);
@@ -3220,9 +3225,10 @@ async function main() {
           command, reasoning: scan.blockContext.slice(0, 200),
           violatedRules: scan.violatedIds,
         });
+      const denyReason = '[synkro:installScan] BLOCKED: ' + scan.summary + '\\nDo not retry this install. Suggest a safe version to the user instead.';
       outputJson({
-        systemMessage: '[synkro:installScan] ' + scan.summary,
-        hookSpecificOutput: { hookEventName: 'PreToolUse', additionalContext: '[synkro:installScan] ' + scan.summary },
+        systemMessage: denyReason,
+        hookSpecificOutput: { hookEventName: 'PreToolUse', permissionDecision: 'deny', permissionDecisionReason: denyReason, additionalContext: denyReason },
       });
     } else if (scan.action === 'warn') {
       outputJson({
@@ -3230,11 +3236,7 @@ async function main() {
         hookSpecificOutput: { hookEventName: 'PreToolUse', additionalContext: '[synkro:installScan] ' + scan.summary },
       });
     } else {
-      const label = scan.scannedLabel || command.slice(0, 80);
-      outputJson({
-        systemMessage: '[synkro:installScan] ' + label + ' \\u2192 clean',
-        hookSpecificOutput: { hookEventName: 'PreToolUse', additionalContext: '[synkro:installScan] ' + label + ' \\u2192 clean' },
-      });
+      outputEmpty();
     }
   } catch (err) {
     process.stderr.write('[synkro] installScan error: ' + String(err) + '\\n');
@@ -6649,7 +6651,7 @@ function writeConfigEnv(opts) {
     `SYNKRO_CREDENTIALS_PATH=${shellQuoteSingle(credsPath)}`,
     `SYNKRO_TIER=${shellQuoteSingle(safeTier)}`,
     `SYNKRO_INFERENCE=${shellQuoteSingle(safeInference)}`,
-    `SYNKRO_VERSION=${shellQuoteSingle("1.6.17")}`
+    `SYNKRO_VERSION=${shellQuoteSingle("1.6.19")}`
   ];
   if (safeSynkroBin) lines.push(`SYNKRO_CLI_BIN=${shellQuoteSingle(safeSynkroBin)}`);
   if (safeUserId) lines.push(`SYNKRO_USER_ID=${shellQuoteSingle(safeUserId)}`);
@@ -6687,7 +6689,7 @@ function collectLocalMetadata() {
   } catch {
   }
   try {
-    const remote = execSync5("git remote get-url origin", { encoding: "utf-8", timeout: 3e3 }).trim();
+    const remote = execSync5("git remote get-url origin", { encoding: "utf-8", timeout: 3e3, stdio: ["pipe", "pipe", "pipe"] }).trim();
     const sshMatch = remote.match(/^git@[^:]+:(.+?)(?:\.git)?$/);
     const httpMatch = remote.match(/^https?:\/\/[^/]+\/(.+?)(?:\.git)?$/);
     const m = sshMatch || httpMatch;
@@ -6780,7 +6782,7 @@ function assertGatewayAllowed(gatewayUrl) {
 async function installCommand(opts = {}) {
   if (!detectGitRepo2()) {
     console.error("Synkro must be installed inside a git repository.");
-    console.error("  `cd` into your project \u2014 a git repo with an `origin` remote \u2014 and re-run `synkro install`.");
+    console.error("  `cd` into your project and re-run `synkro install`.");
     process.exit(1);
   }
   const gatewayUrl = opts.gatewayUrl || sanitizeGatewayCandidate(process.env.SYNKRO_GATEWAY_URL) || "https://api.synkro.sh";
@@ -9316,7 +9318,7 @@ var args = process.argv.slice(2);
 var cmd = args[0] || "";
 var subArgs = args.slice(1);
 function printVersion() {
-  console.log("1.6.17");
+  console.log("1.6.19");
 }
 function printHelp2() {
   console.log(`Synkro CLI \u2014 runtime safety for AI coding agents