@synkro-sh/cli 1.7.4 → 1.7.6

package/dist/bootstrap.js

@@ -1492,6 +1492,23 @@ export async function cweChannelUp(): Promise<boolean> {
   return channelUp(18930);
 }
 
+// \u2500\u2500\u2500 Rule-mining status (user-facing) \u2500\u2500\u2500
+// Asks the local server for the current rule-mining status line. The server returns
+// a non-empty systemMessage only while a job is active or just completed (once per
+// session); empty when idle. Best-effort + tightly timed so it never delays a hook.
+export async function fetchMiningStatusMessage(sessionId: string): Promise<string> {
+  try {
+    const port = process.env.SYNKRO_MCP_PORT || '18931';
+    const u = 'http://127.0.0.1:' + port + '/api/local/rule-mining/status?session_id=' + encodeURIComponent(sessionId || '');
+    const r = await fetch(u, { signal: AbortSignal.timeout(1500) });
+    if (!r.ok) return '';
+    const j = await r.json() as { systemMessage?: unknown };
+    return typeof j.systemMessage === 'string' ? j.systemMessage : '';
+  } catch {
+    return '';
+  }
+}
+
 // \u2500\u2500\u2500 Mode Normalization \u2500\u2500\u2500
 
 export function normalizeMode(m?: string): 'ask' | 'fix' {
@@ -5487,10 +5504,10 @@ async function main() {
             const id = m.replace(/<\/?rule_id>/g, '').trim().replace(/^cwe-/, 'CWE-');
             if (id && !cweIds.includes(id)) cweIds.push(id);
           }
-          const fMatches = gradeResp.match(/<suggested_fix>([^<]+)<\/suggested_fix>/g) || [];
+          const fMatches = gradeResp.match(/<(?:suggested_fix|required_fix)>([\s\S]*?)<\/(?:suggested_fix|required_fix)>/g) || [];
           const respIds = ruleIdMatches.map(rm => rm.replace(/<\/?rule_id>/g, '').trim().replace(/^cwe-/, 'CWE-'));
           for (let i = 0; i < Math.min(respIds.length, fMatches.length); i++) {
-            if (!fixes[respIds[i]]) fixes[respIds[i]] = fMatches[i].replace(/<\/?suggested_fix>/g, '').trim();
+            if (!fixes[respIds[i]]) fixes[respIds[i]] = fMatches[i].replace(/<\/?(?:suggested_fix|required_fix)>/g, '').trim();
           }
           // Per-<violation> pass for the verbatim snippet (code may contain '<'),
           // paired with its rule_id so each finding carries its own offending code.
@@ -5540,9 +5557,9 @@ async function main() {
         // Fix is dropped when it just restates the explanation so no line double-prints.
         const cweBlocks = activeCweIds.map(id => {
           const why = oneSentence(reasons[id] || verdict.reason || cweNameMap.get(id.toUpperCase()) || 'code weakness detected');
-          const fix = fixes[id] ? oneSentence(fixes[id]) : '';
+          const fix = fixes[id] ? String(fixes[id]).replace(/[\x00-\x08\x0B-\x1F\x7F]/g, ' ').trim().slice(0, 1200) : '';
           const showFix = !!fix && !why.toLowerCase().includes(fix.slice(0, 40).toLowerCase());
-          return '[' + id + '] ' + why + (showFix ? ' Fix: ' + fix : '');
+          return '[' + id + '] ' + why + (showFix ? ' REQUIRED FIX (apply exactly — do not substitute a different library/format/approach): ' + fix : '');
         });
         // Bound the total: list as many CWEs as fit, spill the rest to a "+N more" note.
         let denyDetail = cweBlocks.join('\n');
@@ -5553,7 +5570,7 @@ async function main() {
           const more = cweBlocks.length - kept.length;
           denyDetail = kept.join('\n') + (more > 0 ? '\n(+' + more + ' more CWE weakness' + (more === 1 ? '' : 'es') + ' — fix these first, then re-run to surface the rest)' : '');
         }
-        const ctx = 'CWE weaknesses to fix (' + count + '):\n' + denyDetail + '\nFix ALL of the above before retrying. Do NOT ask the user to make the edit manually — resolve every weakness in code yourself.';
+        const ctx = 'CWE weaknesses to fix (' + count + '):\n' + denyDetail + '\nThese are REQUIRED FIXES — apply each one exactly as given; do NOT substitute your own approach or a different library/format. Do NOT ask the user to make the edit manually — resolve every weakness in code yourself.';
 
         emitBlockScanFindings(
           jwt,
@@ -6844,7 +6861,7 @@ main();
 import {
   loadJwt, detectRepo, channelUp, tag, readStdin, writeCachedRepo,
   outputJson, outputEmpty, setupCursorHookSignals, hookSessionId, resolveTranscriptPath, GATEWAY_URL,
-  isLocalStorageMode, loadSynkroFile, log, synkroFilePresent, type HookConfig,
+  isLocalStorageMode, loadSynkroFile, log, synkroFilePresent, fetchMiningStatusMessage, type HookConfig,
 } from './_synkro-common.ts';
 
 async function main() {
@@ -6921,13 +6938,13 @@ async function main() {
       signal: AbortSignal.timeout(3000),
     }).catch(() => {});
 
-    if (!openFindings) {
-      outputJson({ systemMessage: routeLine });
-    } else if (openFindings === 1) {
-      outputJson({ systemMessage: routeLine + '\\n' + tagStr + ' session start \u2192 1 open finding in this repo from a prior session.' });
-    } else {
-      outputJson({ systemMessage: routeLine + '\\n' + tagStr + ' session start \u2192 ' + openFindings + ' open findings in this repo from prior sessions.' });
-    }
+    let sys = routeLine;
+    if (openFindings === 1) sys += '\\n' + tagStr + ' session start \u2192 1 open finding in this repo from a prior session.';
+    else if (openFindings) sys += '\\n' + tagStr + ' session start \u2192 ' + openFindings + ' open findings in this repo from prior sessions.';
+    // Rule-mining status (initial sync). Empty unless a job is active / just finished.
+    const miningMsg = await fetchMiningStatusMessage(sessionId);
+    if (miningMsg) sys += '\\n' + miningMsg;
+    outputJson({ systemMessage: sys });
   } catch (err) {
     log('sessionStart error: ' + String(err));
     outputEmpty();
@@ -7005,8 +7022,9 @@ main();
     TRANSCRIPT_SYNC_TS = `#!/usr/bin/env bun
 import {
   loadJwt, detectRepo, readStdin, aggregateUsage, appendLocalTelemetry,
-  outputEmpty, setupCursorHookSignals, hookSessionId, GATEWAY_URL, readSessionLog, shipCloud,
+  outputEmpty, outputJson, setupCursorHookSignals, hookSessionId, GATEWAY_URL, readSessionLog, shipCloud,
   resolveTranscriptPath, syncConversationTranscript, emitUsageTick, cursorModelFromPayload, synkroFilePresent,
+  fetchMiningStatusMessage,
 } from './_synkro-common.ts';
 import { readFileSync } from 'node:fs';
 
@@ -7057,6 +7075,11 @@ async function main() {
       }).catch(() => {});
     }
 
+    // Rule-mining status \u2014 the ~50-msg sync cadence runs through this hook, so this is
+    // where a "following run" surfaces. Empty unless a job is active / just finished,
+    // so an idle pool prints nothing.
+    const miningMsg = await fetchMiningStatusMessage(sessionId);
+    if (miningMsg) { outputJson({ systemMessage: miningMsg }); return; }
     outputEmpty();
   } catch {
     outputEmpty();
@@ -11611,7 +11634,7 @@ function writeConfigEnv(opts) {
     `SYNKRO_CREDENTIALS_PATH=${shellQuoteSingle(credsPath)}`,
     `SYNKRO_TIER=${shellQuoteSingle(safeTier)}`,
     `SYNKRO_INFERENCE=${shellQuoteSingle(safeInference)}`,
-    `SYNKRO_VERSION=${shellQuoteSingle("1.7.4")}`
+    `SYNKRO_VERSION=${shellQuoteSingle("1.7.6")}`
   ];
   if (safeSynkroBin) lines.push(`SYNKRO_CLI_BIN=${shellQuoteSingle(safeSynkroBin)}`);
   if (safeUserId) lines.push(`SYNKRO_USER_ID=${shellQuoteSingle(safeUserId)}`);
@@ -15674,7 +15697,7 @@ var args = process.argv.slice(2);
 var cmd = args[0] || "";
 var subArgs = args.slice(1);
 function printVersion() {
-  console.log("1.7.4");
+  console.log("1.7.6");
 }
 function printHelp2() {
   console.log(`Synkro CLI \u2014 runtime safety for AI coding agents