@synkro-sh/cli 1.6.94 → 1.6.95

package/dist/bootstrap.js

@@ -3687,6 +3687,31 @@ export function countEditLineDelta(source: {
   return { linesAdded, linesRemoved };
 }
 
+// Build the recorded edit diff (code_change) for the audit trail, same format as
+// the routed hook's summarizeEdit: trim the common prefix/suffix between the file
+// before the edit and the proposed full content, then emit minus/plus prefixed,
+// line-numbered rows (the dashboard CodeChangeCard colors each row by its leading
+// sign). Without this the event detail falls back to the raw file/content dump
+// instead of an added/removed diff.
+export function summarizeEditDiff(baseContent: string, proposed: string): string {
+  const EDIT_AUDIT_CAP = 16000;
+  const a = baseContent ? baseContent.split('\\n') : [];
+  const b = proposed ? proposed.split('\\n') : [];
+  let start = 0;
+  while (start < a.length && start < b.length && a[start] === b[start]) start++;
+  let endA = a.length;
+  let endB = b.length;
+  while (endA > start && endB > start && a[endA - 1] === b[endB - 1]) { endA--; endB--; }
+  const removed = a.slice(start, endA);
+  const added = b.slice(start, endB);
+  const out: string[] = [];
+  for (let i = 0; i < removed.length; i++) out.push('-' + String(start + 1 + i).padStart(5) + ' ' + removed[i]);
+  for (let i = 0; i < added.length; i++) out.push('+' + String(start + 1 + i).padStart(5) + ' ' + added[i]);
+  let diff = out.join('\\n');
+  if (diff.length > EDIT_AUDIT_CAP) diff = diff.slice(0, EDIT_AUDIT_CAP) + '\\n... [truncated]';
+  return diff;
+}
+
 /** Normalize model names so the same Cursor session doesn't split across agent buckets. */
 export function normalizeCaptureModel(model: string): string {
   const m = (model || '').trim();
@@ -4291,7 +4316,7 @@ import {
   readStdin, extractTranscript, readLastPrompt, findNearestDeps, filePathFromToolInput,
   appendSessionAction, readSessionLog, compressSessionLog, sessionLogForGrade, log,
   outputJson, outputEmpty, setupCursorHookSignals, installHookWatchdog, isEditTool, hookSessionId, GATEWAY_URL,
-  logGraderUnavailable, graderUnavailableMessage, filterRules, ruleFilterText, normalizeMode, countEditLineDelta,
+  logGraderUnavailable, graderUnavailableMessage, filterRules, ruleFilterText, normalizeMode, countEditLineDelta, summarizeEditDiff,
   captureLineMetrics, cursorModelFromPayload, resolveTranscriptPath, isCursorInvokingCcHook,
   loadSynkroFile, effectiveGraderPool, synkroFilePresent, noSynkroSkipMessage,
   type HookConfig, type Rule,
@@ -4386,6 +4411,11 @@ async function main() {
       try { fileBefore = readFileSync(fullPath, 'utf-8').slice(0, 65536); } catch {}
     }
 
+    // Audit diff (code_change): added/removed lines for the event detail's Code Change
+    // card. Base = the file before this edit (Write \u2192 file on disk if any). Captured on
+    // every edit verdict below so cloud-graded events show the diff, not a raw dump.
+    const editDiff = summarizeEditDiff(toolName === 'Write' ? existingContent : fileBefore, proposed);
+
     // Extract transcript context
     const transcript = extractTranscript(transcriptPath);
     const lastPrompt = readLastPrompt(sessionId);
@@ -4530,7 +4560,7 @@ async function main() {
             toolName, gitRepo, sessionId, config.captureDepth, {
               command: editContent, reasoning: guardReason,
               rulesChecked: relevantRules, violatedRules,
-              ccModel: captureModel, ...lineMetrics,
+              ccModel: captureModel, codeChange: editDiff, ...lineMetrics,
             });
           outputJson({
             systemMessage: tagStr + ' editGuard ' + fileShort + ' \u2192 blocked: ' + guardReason + (cweFindings.length ? ' (+' + cweFindings.length + ' CWE)' : ''),
@@ -4554,7 +4584,7 @@ async function main() {
           toolName, gitRepo, sessionId, config.captureDepth, {
             command: editContent, reasoning: ruleVerdict.reason || 'no violations (rules + CWE)',
             rulesChecked: relevantRules, violatedRules: [],
-            ccModel: captureModel, ...lineMetrics,
+            ccModel: captureModel, codeChange: editDiff, ...lineMetrics,
           });
         const cPassLine = tagStr + ' editGuard ' + fileShort + ' \u2192 pass: ' + (ruleVerdict.reason || 'clean (rules + CWE)');
         const cTaskMsg = await taskDriftP;
@@ -4587,7 +4617,7 @@ async function main() {
           toolName, gitRepo, sessionId, config.captureDepth, {
             command: editContent, reasoning: guardReason,
             rulesChecked: relevantRules, violatedRules,
-            ccModel: captureModel, ...lineMetrics,
+            ccModel: captureModel, codeChange: editDiff, ...lineMetrics,
           });
         outputJson({
           systemMessage: tagStr + ' editGuard ' + fileShort + ' \u2192 blocked: ' + guardReason,
@@ -4601,7 +4631,7 @@ async function main() {
         toolName, gitRepo, sessionId, config.captureDepth, {
           command: editContent, reasoning: verdict.reason || 'no policy violations detected',
           rulesChecked: relevantRules, violatedRules: [],
-          ccModel: captureModel, ...lineMetrics,
+          ccModel: captureModel, codeChange: editDiff, ...lineMetrics,
         });
       const passLine = tagStr + ' editGuard ' + fileShort + ' \u2192 pass: ' + (verdict.reason || 'no policy violations detected');
       const rTaskMsg = await taskDriftP;
@@ -11269,7 +11299,7 @@ function writeConfigEnv(opts) {
     `SYNKRO_CREDENTIALS_PATH=${shellQuoteSingle(credsPath)}`,
     `SYNKRO_TIER=${shellQuoteSingle(safeTier)}`,
     `SYNKRO_INFERENCE=${shellQuoteSingle(safeInference)}`,
-    `SYNKRO_VERSION=${shellQuoteSingle("1.6.94")}`
+    `SYNKRO_VERSION=${shellQuoteSingle("1.6.95")}`
   ];
   if (safeSynkroBin) lines.push(`SYNKRO_CLI_BIN=${shellQuoteSingle(safeSynkroBin)}`);
   if (safeUserId) lines.push(`SYNKRO_USER_ID=${shellQuoteSingle(safeUserId)}`);
@@ -15334,7 +15364,7 @@ var args = process.argv.slice(2);
 var cmd = args[0] || "";
 var subArgs = args.slice(1);
 function printVersion() {
-  console.log("1.6.94");
+  console.log("1.6.95");
 }
 function printHelp2() {
   console.log(`Synkro CLI \u2014 runtime safety for AI coding agents