@synkro-sh/cli 1.6.29 → 1.6.30

package/dist/bootstrap.js

@@ -1906,6 +1906,21 @@ export function appendLocalTelemetry(body: Record<string, any>): void {
   try {
     appendFileSync(TELEMETRY_SPOOL, JSON.stringify(event) + '\\n');
   } catch {}
+  // Realtime: fire-and-forget POST to the local server so events appear
+  // in the dashboard immediately. Spool file remains the durable fallback.
+  try {
+    const port = process.env.SYNKRO_MCP_PORT || '18931';
+    let token = '';
+    try { token = readFileSync(join(HOME, '.synkro', '.mcp-jwt'), 'utf-8').trim(); } catch {}
+    if (token) {
+      fetch('http://127.0.0.1:' + port + '/api/ingest', {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json', Authorization: 'Bearer ' + token },
+        body: JSON.stringify(event),
+        signal: AbortSignal.timeout(3000),
+      }).catch(() => {});
+    }
+  } catch {}
 }
 
 function tryAcquireDrainLock(): boolean {
@@ -4165,11 +4180,16 @@ async function main() {
       const cveIds = findings.slice(0, 10).map((f: any) =>
         (f.aliases || []).find((a: string) => a.startsWith('CVE-')) || f.id || 'unknown'
       );
+      let cveCcModel: string | undefined = String(payload.model ?? payload.model_id ?? '') || undefined;
+      if (!cveCcModel && transcriptPath) {
+        try { cveCcModel = extractTranscript(transcriptPath).ccModel || undefined; } catch {}
+      }
       dispatchCapture(jwt, 'cve', 'block', 'critical', 'security',
         toolName, gitRepo, sessionId, config.captureDepth, {
           command: 'edit ' + filePath,
           reasoning: top3,
           violatedRules: cveIds,
+          ccModel: cveCcModel,
         });
       dispatchScanResult(jwt, {
         session_id: sessionId, file_path: filePath, scan_type: 'cve',
@@ -5754,6 +5774,21 @@ main();
 });
 
 // cli/auth/stub.ts
+var stub_exports = {};
+__export(stub_exports, {
+  authenticate: () => authenticate,
+  clearCredentials: () => clearCredentials,
+  ensureValidToken: () => ensureValidToken,
+  getAccessToken: () => getAccessToken,
+  getCurrentUserId: () => getCurrentUserId,
+  getSecrets: () => getSecrets,
+  getUserInfo: () => getUserInfo,
+  isAuthenticated: () => isAuthenticated,
+  isTokenExpired: () => isTokenExpired,
+  loadCredentials: () => loadCredentials,
+  refreshToken: () => refreshToken,
+  saveCredentials: () => saveCredentials
+});
 import { createServer } from "http";
 import { writeFileSync as writeFileSync4, readFileSync as readFileSync4, existsSync as existsSync4, mkdirSync as mkdirSync4, unlinkSync as unlinkSync2 } from "fs";
 import { homedir as homedir4, platform } from "os";
@@ -5960,6 +5995,17 @@ function isAuthenticated() {
     return true;
   }
 }
+function getCurrentUserId() {
+  const creds = loadCredentials();
+  if (!creds) {
+    throw new Error("Not authenticated");
+  }
+  const decoded = jwt.decode(creds.access_token);
+  if (!decoded?.sub) {
+    throw new Error("Invalid token");
+  }
+  return decoded.sub;
+}
 function getUserInfo() {
   const creds = loadCredentials();
   if (!creds) {
@@ -6044,6 +6090,15 @@ function clearCredentials() {
     unlinkSync2(AUTH_FILE);
   }
 }
+async function getSecrets(userId, integrationId) {
+  return {
+    AWS_ACCESS_KEY_ID: process.env.USER_AWS_KEY || "",
+    AWS_SECRET_ACCESS_KEY: process.env.USER_AWS_SECRET || "",
+    AWS_REGION: process.env.USER_AWS_REGION || "us-east-1",
+    HF_TOKEN: process.env.USER_HF_TOKEN || "",
+    LANGSMITH_API_KEY: process.env.USER_LANGSMITH_KEY || ""
+  };
+}
 var PORT, RAW_WEB_AUTH_URL, SYNKRO_WEB_AUTH_URL, AUTH_FILE, RAW_API_URL, SYNKRO_API_URL, ERROR_HTML, refreshPromise;
 var init_stub = __esm({
   "cli/auth/stub.ts"() {
@@ -7889,7 +7944,7 @@ function writeConfigEnv(opts) {
     `SYNKRO_CREDENTIALS_PATH=${shellQuoteSingle(credsPath)}`,
     `SYNKRO_TIER=${shellQuoteSingle(safeTier)}`,
     `SYNKRO_INFERENCE=${shellQuoteSingle(safeInference)}`,
-    `SYNKRO_VERSION=${shellQuoteSingle("1.6.29")}`
+    `SYNKRO_VERSION=${shellQuoteSingle("1.6.30")}`
   ];
   if (safeSynkroBin) lines.push(`SYNKRO_CLI_BIN=${shellQuoteSingle(safeSynkroBin)}`);
   if (safeUserId) lines.push(`SYNKRO_USER_ID=${shellQuoteSingle(safeUserId)}`);
@@ -8325,7 +8380,7 @@ async function installCommand(opts = {}) {
         const ingestResp = await fetch(`http://127.0.0.1:${hostMcpPort}/api/ingest`, {
           method: "POST",
           headers: { "Content-Type": "application/json", Authorization: `Bearer ${mcpJwt}` },
-          body: JSON.stringify({ capture_type: "local_verdict", event_id: `healthcheck_${Date.now()}`, verdict: "pass", severity: "clean", hook_type: "install", tool_name: "healthcheck" }),
+          body: JSON.stringify({ capture_type: "healthcheck", event_id: `healthcheck_${Date.now()}` }),
           signal: AbortSignal.timeout(5e3)
         });
         if (ingestResp.ok) {
@@ -10641,7 +10696,6 @@ var init_config = __esm({
 import { readFileSync as readFileSync13, existsSync as existsSync16 } from "fs";
 import { resolve as resolve2 } from "path";
 var envCandidates = [
-  resolve2(process.cwd(), ".env"),
   resolve2(process.env.HOME ?? "", ".synkro", "config.env")
 ];
 for (const envPath of envCandidates) {
@@ -10661,7 +10715,7 @@ var args = process.argv.slice(2);
 var cmd = args[0] || "";
 var subArgs = args.slice(1);
 function printVersion() {
-  console.log("1.6.29");
+  console.log("1.6.30");
 }
 function printHelp2() {
   console.log(`Synkro CLI \u2014 runtime safety for AI coding agents
@@ -10707,6 +10761,23 @@ async function main() {
       disconnectCommand2(subArgs);
       break;
     }
+    case "login": {
+      const { authenticate: authenticate2, isAuthenticated: isAuthenticated2 } = await Promise.resolve().then(() => (init_stub(), stub_exports));
+      if (isAuthenticated2()) {
+        console.log("Already authenticated.");
+      } else {
+        console.log("Opening browser for Synkro auth...");
+        const result = await authenticate2((status) => {
+          if (status.phase === "success") console.log("  \u2713 Authenticated");
+          else if (status.phase === "error") console.error("  \u2717 " + status.message);
+        });
+        if (!result) {
+          console.error("Authentication failed.");
+          process.exit(1);
+        }
+      }
+      break;
+    }
     case "grade": {
       const { gradeCommand: gradeCommand2 } = await Promise.resolve().then(() => (init_grade(), grade_exports));
       await gradeCommand2(subArgs);