@synkro-sh/cli 1.6.6 → 1.6.8

package/dist/bootstrap.js

@@ -3162,6 +3162,8 @@ async function main() {
         command: command.slice(0, 200),
         session_id: sessionId,
         repo: cwd,
+        cc_model: transcript.ccModel,
+        reasoning: 'Safe in-repo read — auto-allowed without an LLM grade.',
       });
       outputJson({
         systemMessage: tagStr + ' bashGuard → pass: safe in-repo read',
@@ -4294,6 +4296,8 @@ async function main() {
         capture_type: 'local_verdict', verdict: 'pass', hook_type: 'bash',
         category: 'safe_read', tool_name: toolName, command: command.slice(0, 200),
         session_id: sessionId, repo: cwd,
+        cc_model: model,
+        reasoning: 'Safe in-repo read \u2014 auto-allowed without an LLM grade.',
       });
       finishAllow();
     }
@@ -5858,6 +5862,7 @@ __export(dockerInstall_exports, {
   dockerStop: () => dockerStop,
   dockerUpdate: () => dockerUpdate,
   imageTag: () => imageTag,
+  readContainerConfig: () => readContainerConfig,
   resolveWorkerConfig: () => resolveWorkerConfig,
   splitWorkers: () => splitWorkers,
   waitForContainerReady: () => waitForContainerReady
@@ -6091,6 +6096,34 @@ function dockerStatus() {
     healthz: `http://127.0.0.1:${HOST_MCP_PORT}/`
   };
 }
+function readContainerConfig() {
+  const r = spawnSync2("docker", ["inspect", "--format", "{{json .Config.Env}}", CONTAINER_NAME], {
+    encoding: "utf-8",
+    timeout: 5e3
+  });
+  if (r.status !== 0 || !r.stdout) return null;
+  let env;
+  try {
+    env = JSON.parse(r.stdout.trim());
+  } catch {
+    return null;
+  }
+  if (!Array.isArray(env)) return null;
+  const get = (k) => {
+    const hit = env.find((e) => typeof e === "string" && e.startsWith(k + "="));
+    return hit ? hit.slice(k.length + 1) : void 0;
+  };
+  const num = (s) => {
+    if (s === void 0) return void 0;
+    const n = parseInt(s, 10);
+    return Number.isFinite(n) ? n : void 0;
+  };
+  return {
+    claudeWorkers: num(get("CLAUDE_WORKERS")),
+    cursorWorkers: num(get("CURSOR_WORKERS")),
+    connectedRepo: get("SYNKRO_CONNECTED_REPO") || void 0
+  };
+}
 async function dockerSafeStop() {
   const status = dockerStatus();
   if (!status.running) {
@@ -6417,7 +6450,7 @@ function writeConfigEnv(opts) {
     `SYNKRO_CREDENTIALS_PATH=${shellQuoteSingle(credsPath)}`,
     `SYNKRO_TIER=${shellQuoteSingle(safeTier)}`,
     `SYNKRO_INFERENCE=${shellQuoteSingle(safeInference)}`,
-    `SYNKRO_VERSION=${shellQuoteSingle("1.6.6")}`
+    `SYNKRO_VERSION=${shellQuoteSingle("1.6.8")}`
   ];
   if (safeSynkroBin) lines.push(`SYNKRO_CLI_BIN=${shellQuoteSingle(safeSynkroBin)}`);
   if (safeUserId) lines.push(`SYNKRO_USER_ID=${shellQuoteSingle(safeUserId)}`);
@@ -7540,22 +7573,22 @@ import { existsSync as existsSync11, rmSync, readdirSync as readdirSync3 } from
 import { homedir as homedir10 } from "os";
 import { join as join10 } from "path";
 import { spawnSync as spawnSync4 } from "child_process";
-async function tearDownLocalCC(purge) {
+import { createInterface as createInterface4 } from "readline";
+async function tearDownLocalCC() {
   const docker = dockerStatus();
   if (docker.running) {
     await dockerSafeStop();
-    console.log("\u2713 stopped synkro-server container (data snapshot saved)");
+    console.log("\u2713 stopped synkro-server container");
   } else {
     console.log("\xB7 no synkro-server container running");
   }
   dockerRemove();
-  if (purge) {
-    try {
-      const image = imageTag();
-      spawnSync4("docker", ["rmi", image], { encoding: "utf-8", timeout: 3e4 });
-      console.log(`\u2713 removed Docker image ${image}`);
-    } catch {
-    }
+  console.log("\u2713 removed synkro-server container");
+  try {
+    const image = imageTag();
+    const r = spawnSync4("docker", ["rmi", "-f", image], { encoding: "utf-8", timeout: 3e4 });
+    console.log(r.status === 0 ? `\u2713 removed Docker image ${image}` : "\xB7 no Docker image to remove");
+  } catch {
   }
   if (needsKeychainBridge()) {
     try {
@@ -7567,10 +7600,31 @@ async function tearDownLocalCC(purge) {
   uninstallLocalCC();
   console.log("\u2713 cleaned ~/.claude.json entries");
 }
+function confirmPurge() {
+  console.log("\u26A0  WARNING \u2014 synkro uninstall --purge");
+  console.log("   This permanently deletes ALL Synkro data on this machine,");
+  console.log("   including every scan finding, telemetry record, and backup in");
+  console.log("   ~/.synkro/pgdata and ~/.synkro/pgdata-backups. It cannot be undone.\n");
+  if (!process.stdin.isTTY) {
+    console.log("   Non-interactive shell \u2014 re-run in a terminal to confirm.");
+    return Promise.resolve(false);
+  }
+  const rl = createInterface4({ input: process.stdin, output: process.stdout });
+  return new Promise((resolve3) => {
+    rl.question("   Type 'yes' to wipe everything (anything else cancels): ", (answer) => {
+      rl.close();
+      resolve3(answer.trim().toLowerCase() === "yes");
+    });
+  });
+}
 async function disconnectCommand(args2 = []) {
   const purge = args2.includes("--purge");
-  console.log("Synkro disconnect starting...\n");
-  await tearDownLocalCC(purge);
+  if (purge && !await confirmPurge()) {
+    console.log("\nAborted \u2014 nothing was removed.");
+    return;
+  }
+  console.log("\nSynkro uninstall starting...\n");
+  await tearDownLocalCC();
   const agents = detectAgents();
   let sawClaudeCode = false;
   for (const agent of agents) {
@@ -7591,31 +7645,32 @@ async function disconnectCommand(args2 = []) {
     const cursorMcpRemoved = uninstallCursorMcpConfig();
     console.log(`${cursorMcpRemoved ? "\u2713" : "\xB7"} MCP guardrails (Cursor): ${cursorMcpRemoved ? "removed from ~/.cursor/mcp.json" : "no entry found"}`);
   }
-  if (purge) {
-    if (existsSync11(SYNKRO_DIR5)) {
-      const pgdataPath = join10(SYNKRO_DIR5, "pgdata");
-      const backupsPath = join10(SYNKRO_DIR5, "pgdata-backups");
+  if (existsSync11(SYNKRO_DIR5)) {
+    if (purge) {
+      rmSync(SYNKRO_DIR5, { recursive: true, force: true });
+      console.log(`\u2713 wiped ${SYNKRO_DIR5} entirely \u2014 including all scan data and backups`);
+    } else {
+      const keep = /* @__PURE__ */ new Set([join10(SYNKRO_DIR5, "pgdata"), join10(SYNKRO_DIR5, "pgdata-backups")]);
       const preserved = [];
       for (const entry of readdirSync3(SYNKRO_DIR5)) {
         const full = join10(SYNKRO_DIR5, entry);
-        if (full === pgdataPath || full === backupsPath) {
+        if (keep.has(full)) {
           preserved.push(entry);
           continue;
         }
         rmSync(full, { recursive: true, force: true });
       }
       if (preserved.length > 0) {
-        console.log(`\u2713 Removed ${SYNKRO_DIR5} config (preserved: ${preserved.join(", ")} \u2014 your data is safe)`);
+        console.log(`\u2713 removed Synkro config from ${SYNKRO_DIR5} (kept your scan data: ${preserved.join(", ")})`);
+        console.log("  run `synkro uninstall --purge` to delete that too");
       } else {
-        console.log(`\u2713 Removed ${SYNKRO_DIR5}`);
+        console.log(`\u2713 removed ${SYNKRO_DIR5}`);
       }
-    } else {
-      console.log(`\xB7 ${SYNKRO_DIR5} already gone, nothing to remove`);
     }
-  } else if (existsSync11(SYNKRO_DIR5)) {
-    console.log(`Config preserved at ${SYNKRO_DIR5}. Run with --purge to remove.`);
+  } else {
+    console.log(`\xB7 ${SYNKRO_DIR5} already gone`);
   }
-  console.log("\nSynkro disconnected.");
+  console.log(purge ? "\nSynkro fully removed \u2014 this machine is clean, as if it was never installed." : "\nSynkro uninstalled. Your scan data is preserved.");
 }
 var SYNKRO_DIR5;
 var init_disconnect = __esm({
@@ -7812,7 +7867,8 @@ var lifecycle_exports = {};
 __export(lifecycle_exports, {
   restartCommand: () => restartCommand,
   startCommand: () => startCommand,
-  stopCommand: () => stopCommand
+  stopCommand: () => stopCommand,
+  updateCommand: () => updateCommand
 });
 async function stopCommand() {
   assertDockerAvailable();
@@ -7848,6 +7904,26 @@ Start failed: ${result.error}`);
   }
   console.log("\nServer is running.");
 }
+async function updateCommand() {
+  assertDockerAvailable();
+  const cfg = readContainerConfig();
+  if (!cfg) {
+    console.error("No synkro-server container found. Run `synkro install` first.");
+    process.exit(1);
+  }
+  const claudeWorkers = cfg.claudeWorkers ?? 8;
+  const cursorWorkers = cfg.cursorWorkers ?? 0;
+  console.log("Synkro: updating to the latest container image");
+  console.log(`  preserving pool: ${claudeWorkers} claude + ${cursorWorkers} cursor worker(s)
+`);
+  await dockerUpdate({ claudeWorkers, cursorWorkers, connectedRepo: cfg.connectedRepo });
+  const ready = await waitForContainerReady(9e4);
+  if (!ready) {
+    console.error("\n\u26A0 container did not pass its health check within 90s \u2014 check: docker logs synkro-server");
+    process.exit(1);
+  }
+  console.log("\nSynkro updated \u2014 now running the latest version.");
+}
 async function restartCommand(rest = []) {
   assertDockerAvailable();
   const cfg = resolveWorkerConfig(rest);
@@ -7904,7 +7980,7 @@ var args = process.argv.slice(2);
 var cmd = args[0] || "";
 var subArgs = args.slice(1);
 function printVersion() {
-  console.log("1.6.6");
+  console.log("1.6.8");
 }
 function printHelp() {
   console.log(`Synkro CLI \u2014 runtime safety for AI coding agents
@@ -7914,10 +7990,11 @@ Usage:
 
 Commands:
   install [--force]      Install or update Synkro
-  uninstall [--purge]    Remove Synkro hooks (--purge also removes ~/.synkro)
+  uninstall [--purge]    Remove Synkro (keeps scan data; --purge wipes that too)
   stop                   Gracefully stop the server (snapshot + checkpoint)
   start [opts]           Start the server (with pgdata integrity check)
   restart [opts]         Safe restart (stop \u2192 start, data preserved)
+  update                 Pull the latest container image and safely restart
   version                Show version
 
   start/restart opts (recreate the worker pool):
@@ -7976,6 +8053,11 @@ async function main() {
       await restartCommand2(args.slice(1));
       break;
     }
+    case "update": {
+      const { updateCommand: updateCommand2 } = await Promise.resolve().then(() => (init_lifecycle(), lifecycle_exports));
+      await updateCommand2();
+      break;
+    }
     default: {
       console.error(`Unknown command: ${cmd}`);
       printHelp();