@synkro-sh/cli 1.7.37 → 1.7.39

package/dist/bootstrap.js

@@ -146,7 +146,15 @@ function installCCHooks(settingsPath, config) {
         type: "command",
         command: config.bashJudgeScriptPath,
         timeout: 50
-      }
+      },
+      // skill-judge shares this entry so CC runs it in parallel and waits for it
+      // before processing denies — its verdict is its OWN system-message block,
+      // separate from bashGuard. No-ops on pure reads (empty command).
+      ...config.skillJudgeScriptPath ? [{
+        type: "command",
+        command: config.skillJudgeScriptPath,
+        timeout: 50
+      }] : []
     ],
     [SYNKRO_MARKER]: true
   });
@@ -167,7 +175,13 @@ function installCCHooks(settingsPath, config) {
         type: "command",
         command: config.cvePrecheckScriptPath,
         timeout: 10
-      }
+      },
+      // skill-judge — its OWN system-message block, parallel with edit-precheck.
+      ...config.skillJudgeScriptPath ? [{
+        type: "command",
+        command: config.skillJudgeScriptPath,
+        timeout: 50
+      }] : []
     ],
     [SYNKRO_MARKER]: true
   });
@@ -395,6 +409,12 @@ function installCursorHooks(hooksJsonPath, config) {
     failClosed: false,
     [SYNKRO_MARKER2]: true
   });
+  if (config.skillJudgeScriptPath) h.beforeShellExecution.push({
+    command: bunRunCmd(config.skillJudgeScriptPath),
+    timeout: 30,
+    failClosed: false,
+    [SYNKRO_MARKER2]: true
+  });
   pushCcHook(h, "afterShellExecution", config.bashFollowupScriptPath, { timeout: 10 });
   h.preToolUse = h.preToolUse ?? [];
   h.preToolUse.push({
@@ -418,10 +438,21 @@ function installCursorHooks(hooksJsonPath, config) {
     matcher: "Shell|Bash|Read|ReadFile|Grep|Glob|terminal|run_terminal_cmd|execute_command|read_file|grep_search|file_search|list_dir|codebase_search|delete_file",
     [SYNKRO_MARKER2]: true
   });
+  if (config.skillJudgeScriptPath) h.preToolUse.push({
+    command: bunRunCmd(config.skillJudgeScriptPath),
+    timeout: 30,
+    failClosed: false,
+    matcher: "Shell|Bash|terminal|run_terminal_cmd|execute_command",
+    [SYNKRO_MARKER2]: true
+  });
   pushCcHook(h, "preToolUse", config.editPrecheckScriptPath, {
     timeout: 30,
     matcher: "Write|Edit|StrReplace|MultiEdit|NotebookEdit|edit_file|reapply|edit_notebook|ApplyPatch|apply_patch"
   });
+  if (config.skillJudgeScriptPath) pushCcHook(h, "preToolUse", config.skillJudgeScriptPath, {
+    timeout: 30,
+    matcher: "Write|Edit|StrReplace|MultiEdit|NotebookEdit|edit_file|reapply|edit_notebook|ApplyPatch|apply_patch"
+  });
   pushCcHook(h, "preToolUse", config.cwePrecheckScriptPath, {
     timeout: 30,
     matcher: "Write|Edit|StrReplace|MultiEdit|NotebookEdit|edit_file|reapply|edit_notebook|ApplyPatch|apply_patch"
@@ -738,7 +769,7 @@ var init_skillParser = __esm({
 function stubHook(surface, optsLiteral) {
   return "#!/usr/bin/env bun\nimport { runStub } from './_synkro-stub-common.ts';\nrunStub(" + JSON.stringify(surface) + ", " + optsLiteral + ");\n";
 }
-var STUB_COMMON_TS, STUB_EDIT_PRECHECK_TS, STUB_CWE_PRECHECK_TS, STUB_CVE_PRECHECK_TS, STUB_BASH_JUDGE_TS, STUB_INSTALL_SCAN_TS, STUB_AGENT_JUDGE_TS, STUB_MCP_GATE_TS, STUB_PLAN_JUDGE_TS, STUB_STOP_SUMMARY_TS, STUB_SESSION_START_TS, STUB_TRANSCRIPT_SYNC_TS, STUB_USER_PROMPT_SUBMIT_TS, STUB_BASH_FOLLOWUP_TS, STUB_TASK_ACTIVATE_INTENT_TS, STUB_CURSOR_BASH_JUDGE_TS, STUB_CURSOR_EDIT_CAPTURE_TS, STUB_CURSOR_AGENT_CAPTURE_TS;
+var STUB_COMMON_TS, STUB_EDIT_PRECHECK_TS, STUB_CWE_PRECHECK_TS, STUB_CVE_PRECHECK_TS, STUB_BASH_JUDGE_TS, STUB_SKILL_JUDGE_TS, STUB_INSTALL_SCAN_TS, STUB_AGENT_JUDGE_TS, STUB_MCP_GATE_TS, STUB_PLAN_JUDGE_TS, STUB_STOP_SUMMARY_TS, STUB_SESSION_START_TS, STUB_TRANSCRIPT_SYNC_TS, STUB_USER_PROMPT_SUBMIT_TS, STUB_BASH_FOLLOWUP_TS, STUB_TASK_ACTIVATE_INTENT_TS, STUB_CURSOR_BASH_JUDGE_TS, STUB_CURSOR_SKILL_JUDGE_TS, STUB_CURSOR_EDIT_CAPTURE_TS, STUB_CURSOR_AGENT_CAPTURE_TS;
 var init_hookScriptsTs = __esm({
   "cli/installer/hookScriptsTs.ts"() {
     "use strict";
@@ -839,34 +870,6 @@ function filePathFromToolInput(ti: any): string {
   return ti.file_path || ti.notebook_path || ti.path || ti.target_file || '';
 }
 
-// Latest real human message from a CC transcript (JSONL). Scans from the end for a
-// user turn, skipping sidechain (sub-agent) turns, meta entries, tool-result-only
-// turns, and the synthetic local-command/caveat wrappers. Returns '' if none found.
-function latestUserText(transcript: string): string {
-  const lines = transcript.split('\n');
-  for (let i = lines.length - 1; i >= 0; i--) {
-    const ln = lines[i].trim();
-    if (!ln) continue;
-    let o: any;
-    try { o = JSON.parse(ln); } catch { continue; }
-    if (o && (o.isSidechain || o.isMeta)) continue;
-    const m = o && o.message;
-    const role = (m && m.role) || (o && o.type);
-    if (role !== 'user') continue;
-    const c = m && m.content;
-    let text = '';
-    if (typeof c === 'string') text = c;
-    else if (Array.isArray(c)) {
-      text = c.filter((b: any) => b && b.type === 'text' && typeof b.text === 'string').map((b: any) => b.text).join(' ');
-    }
-    text = text.trim();
-    if (!text) continue;
-    if (text.startsWith('<local-command') || text.startsWith('<command-') || text.startsWith('Caveat:') || text.startsWith('<system-reminder')) continue;
-    return text;
-  }
-  return '';
-}
-
 interface StubOpts {
   needsFile?: boolean;
   needsTranscript?: boolean;
@@ -914,29 +917,6 @@ export async function runStub(surface: string, opts: StubOpts = {}): Promise<voi
     // Gather host-only inputs the container can't read.
     const envelope: any = { payload, harness, cwd: root || cwd, sessionId, synkroFileText };
 
-    // Sub-agent attribution (host-side — the container has no access to ~/.claude).
-    // A spawned sub-agent's tool-call hooks carry the ROOT session_id but a sidechain
-    // transcript at agent-<id>.jsonl (vs the main <session_id>.jsonl). Detect it from
-    // transcript_path, and read the ROOT transcript for the human turn that dispatched
-    // this (the sub-agent's own transcript starts with the task prompt, not the human).
-    try {
-      const tpath = typeof payload.transcript_path === 'string' ? payload.transcript_path : '';
-      const tbase = tpath.split('/').pop() || '';
-      const am = tbase.match(/^agent-(.+)\.jsonl$/);
-      if (am) {
-        envelope.isSubagent = true;
-        envelope.agentId = am[1];
-        try {
-          const dir = tpath.slice(0, tpath.length - tbase.length);
-          const rootPath = dir + sessionId + '.jsonl';
-          if (rootPath !== tpath && existsSync(rootPath)) {
-            const msg = latestUserText(readFileSync(rootPath, 'utf-8'));
-            if (msg) envelope.triggeringMessage = msg.slice(0, 2000);
-          }
-        } catch {}
-      }
-    } catch {}
-
     if (opts.needsFile) {
       const fp = filePathFromToolInput(payload.tool_input || {});
       if (fp && existsSync(fp)) {
@@ -961,7 +941,12 @@ export async function runStub(surface: string, opts: StubOpts = {}): Promise<voi
     // result (the server waits up to 30s for the completion grade), so it needs a
     // wait above that budget — not the 6s telemetry default — or the stub abandons
     // the request before the result lands and the completion shows up a hook late.
-    const timeoutMs = surface === 'bash-followup' ? 32000 : (opts.telemetry ? 6000 : 28000);
+    // prompt-submit is the opposite: it's INTERACTIVE (blocks the user's prompt from
+    // being sent) under a short 5s hook timeout, so it gets ONE short attempt (below)
+    // and a tight per-attempt budget that fits inside 5s — never the 6s×3 telemetry path.
+    const timeoutMs = surface === 'bash-followup' ? 32000
+      : surface === 'prompt-submit' ? 3500
+      : (opts.telemetry ? 6000 : 28000);
     // Cloud has no local container to reach. Post the SAME envelope to the org's grader
     // via the gateway's /grade/submit as role 'scan:<surface>'; the container runs
     // scanRouter (runScan) server-side and returns the SAME shaped decision — so cloud
@@ -987,7 +972,11 @@ export async function runStub(surface: string, opts: StubOpts = {}): Promise<voi
     // — the server side is idempotent-ish (completion in-flight guard, dup evidence
     // is harmless). Blocking hooks make ONE attempt: their response IS the verdict
     // and a retry would double-grade. Normal case: first attempt wins, no delay.
-    const attempts = opts.telemetry ? 3 : 1;
+    // prompt-submit is EXCLUDED from the retry: it runs on the interactive prompt
+    // path under a 5s hook timeout, and 3×6s+backoff (19.5s) blew that budget and
+    // fired "hook timed out after 5s" on every prompt whenever the server was slow.
+    // Dropping an occasional prompt tick is harmless; stalling the user is not.
+    const attempts = (opts.telemetry && surface !== 'prompt-submit') ? 3 : 1;
     let text = '';
     for (let i = 0; i < attempts; i++) {
       try {
@@ -1006,6 +995,7 @@ export async function runStub(surface: string, opts: StubOpts = {}): Promise<voi
     STUB_CWE_PRECHECK_TS = stubHook("cwe-precheck", "{ needsFile: true, needsTranscript: true }");
     STUB_CVE_PRECHECK_TS = stubHook("cve-precheck", "{ needsFile: true, needsTranscript: true }");
     STUB_BASH_JUDGE_TS = stubHook("bash-judge", "{ needsTranscript: true }");
+    STUB_SKILL_JUDGE_TS = stubHook("skill-judge", "{ needsFile: true, needsTranscript: true }");
     STUB_INSTALL_SCAN_TS = stubHook("install-scan", "{ needsTranscript: true }");
     STUB_AGENT_JUDGE_TS = stubHook("agent-judge", "{ needsTranscript: true }");
     STUB_MCP_GATE_TS = stubHook("mcp-gate", "{ needsTranscript: true }");
@@ -1035,6 +1025,7 @@ try {
 process.stdout.write('{}\\n');
 `;
     STUB_CURSOR_BASH_JUDGE_TS = stubHook("bash-judge", "{ needsTranscript: true, harness: 'cursor' }");
+    STUB_CURSOR_SKILL_JUDGE_TS = stubHook("skill-judge", "{ needsFile: true, needsTranscript: true, harness: 'cursor' }");
     STUB_CURSOR_EDIT_CAPTURE_TS = stubHook("edit-precheck", "{ needsFile: true, needsTranscript: true, harness: 'cursor' }");
     STUB_CURSOR_AGENT_CAPTURE_TS = stubHook("agent-judge", "{ needsTranscript: true, harness: 'cursor' }");
   }
@@ -3815,6 +3806,10 @@ async function dockerInstall(opts = {}) {
     // interactive AskUserQuestion poll and fall through to generate-the-fix. Only
     // passed when the operator set it; otherwise the image default (1) applies.
     ...process.env.SYNKRO_FIX_POLL ? ["-e", `SYNKRO_FIX_POLL=${process.env.SYNKRO_FIX_POLL}`] : [],
+    // Route CWE grades to the cloud /api/v1/cwe-scan endpoint (arm-C: full-catalog
+    // retrieval + ensemble) instead of the local single-prompt path. Grading stays
+    // local for every other surface. Benchmark lever; default off.
+    ...process.env.SYNKRO_CWE_VIA_ENDPOINT ? ["-e", `SYNKRO_CWE_VIA_ENDPOINT=${process.env.SYNKRO_CWE_VIA_ENDPOINT}`] : [],
     // Connected repo — the server seeds the local app + ruleset named after it.
     ...opts.connectedRepo ? ["-e", `SYNKRO_CONNECTED_REPO=${opts.connectedRepo}`] : [],
     // Real account identity (from config.env via process.env) — telemetry is
@@ -4728,6 +4723,8 @@ function ensureSynkroDir() {
 function writeHookScripts() {
   const installExtractCorePath = join11(HOOKS_DIR, "installExtractCore.ts");
   const bashScriptPath = join11(HOOKS_DIR, "cc-bash-judge.ts");
+  const skillJudgeScriptPath = join11(HOOKS_DIR, "cc-skill-judge.ts");
+  const cursorSkillJudgePath = join11(HOOKS_DIR, "cursor-skill-judge.ts");
   const bashFollowupScriptPath = join11(HOOKS_DIR, "cc-bash-followup.ts");
   const editPrecheckScriptPath = join11(HOOKS_DIR, "cc-edit-precheck.ts");
   const cwePrecheckScriptPath = join11(HOOKS_DIR, "cc-cwe-precheck.ts");
@@ -4751,6 +4748,8 @@ function writeHookScripts() {
   const stubFiles = [
     [stubCommonPath, STUB_COMMON_TS],
     [bashScriptPath, STUB_BASH_JUDGE_TS],
+    [skillJudgeScriptPath, STUB_SKILL_JUDGE_TS],
+    [cursorSkillJudgePath, STUB_CURSOR_SKILL_JUDGE_TS],
     [bashFollowupScriptPath, STUB_BASH_FOLLOWUP_TS],
     [editPrecheckScriptPath, STUB_EDIT_PRECHECK_TS],
     [cwePrecheckScriptPath, STUB_CWE_PRECHECK_TS],
@@ -4782,6 +4781,8 @@ function writeHookScripts() {
   }
   return {
     bashScript: bashScriptPath,
+    skillJudgeScript: skillJudgeScriptPath,
+    cursorSkillJudgeScript: cursorSkillJudgePath,
     bashFollowupScript: bashFollowupScriptPath,
     editPrecheckScript: editPrecheckScriptPath,
     cwePrecheckScript: cwePrecheckScriptPath,
@@ -4829,7 +4830,7 @@ function writeConfigEnv(opts) {
     `SYNKRO_CREDENTIALS_PATH=${shellQuoteSingle(credsPath)}`,
     `SYNKRO_TIER=${shellQuoteSingle(safeTier)}`,
     `SYNKRO_INFERENCE=${shellQuoteSingle(safeInference)}`,
-    `SYNKRO_VERSION=${shellQuoteSingle("1.7.37")}`
+    `SYNKRO_VERSION=${shellQuoteSingle("1.7.39")}`
   ];
   if (safeSynkroBin) lines.push(`SYNKRO_CLI_BIN=${shellQuoteSingle(safeSynkroBin)}`);
   if (safeUserId) lines.push(`SYNKRO_USER_ID=${shellQuoteSingle(safeUserId)}`);
@@ -5472,6 +5473,7 @@ async function installCommand(opts = {}) {
       hasClaudeCode = true;
       installCCHooks(agent.settingsPath, {
         bashJudgeScriptPath: scripts.bashScript,
+        skillJudgeScriptPath: scripts.skillJudgeScript,
         bashFollowupScriptPath: scripts.bashFollowupScript,
         editPrecheckScriptPath: scripts.editPrecheckScript,
         cwePrecheckScriptPath: scripts.cwePrecheckScript,
@@ -5492,6 +5494,7 @@ async function installCommand(opts = {}) {
       hasCursor = true;
       installCursorHooks(agent.settingsPath, {
         bashJudgeScriptPath: scripts.cursorBashJudgeScript,
+        skillJudgeScriptPath: scripts.cursorSkillJudgeScript,
         editCaptureScriptPath: scripts.cursorEditCaptureScript,
         agentCaptureScriptPath: scripts.cursorAgentCaptureScript,
         bashFollowupScriptPath: scripts.bashFollowupScript,
@@ -5970,6 +5973,7 @@ function reconcileHarness() {
   if (wantCC) {
     installCCHooks(ccSettings, {
       bashJudgeScriptPath: scripts.bashScript,
+      skillJudgeScriptPath: scripts.skillJudgeScript,
       bashFollowupScriptPath: scripts.bashFollowupScript,
       editPrecheckScriptPath: scripts.editPrecheckScript,
       cwePrecheckScriptPath: scripts.cwePrecheckScript,
@@ -6002,6 +6006,7 @@ function reconcileHarness() {
   if (wantCursor) {
     installCursorHooks(cursorHooks, {
       bashJudgeScriptPath: scripts.cursorBashJudgeScript,
+      skillJudgeScriptPath: scripts.cursorSkillJudgeScript,
       editCaptureScriptPath: scripts.cursorEditCaptureScript,
       agentCaptureScriptPath: scripts.cursorAgentCaptureScript,
       bashFollowupScriptPath: scripts.bashFollowupScript,
@@ -9027,7 +9032,7 @@ var args = process.argv.slice(2);
 var cmd = args[0] || "";
 var subArgs = args.slice(1);
 function printVersion() {
-  console.log("1.7.37");
+  console.log("1.7.39");
 }
 function printHelp2() {
   console.log(`Synkro CLI \u2014 runtime safety for AI coding agents