@synkro-sh/cli 1.7.8 → 1.7.18

package/dist/bootstrap.js

@@ -11311,6 +11311,7 @@ var init_setupGithub = __esm({
 var install_exports = {};
 __export(install_exports, {
   detectGitRepo: () => detectGitRepo2,
+  discoverAndIngestSkills: () => discoverAndIngestSkills,
   getOrMintCloudToken: () => getOrMintCloudToken,
   installCommand: () => installCommand,
   parseArgs: () => parseArgs,
@@ -11326,6 +11327,7 @@ import { homedir as homedir10 } from "os";
 import { join as join10 } from "path";
 import { execSync as execSync6 } from "child_process";
 import { createInterface as createInterface3 } from "readline";
+import { createHash } from "crypto";
 function resolvePersistedHookMode() {
   if (process.env.SYNKRO_HOOK_MODE === "full") return "full";
   if (process.env.SYNKRO_HOOK_MODE === "stub") return "stub";
@@ -11643,7 +11645,7 @@ function writeConfigEnv(opts) {
     `SYNKRO_CREDENTIALS_PATH=${shellQuoteSingle(credsPath)}`,
     `SYNKRO_TIER=${shellQuoteSingle(safeTier)}`,
     `SYNKRO_INFERENCE=${shellQuoteSingle(safeInference)}`,
-    `SYNKRO_VERSION=${shellQuoteSingle("1.7.8")}`
+    `SYNKRO_VERSION=${shellQuoteSingle("1.7.18")}`
   ];
   if (safeSynkroBin) lines.push(`SYNKRO_CLI_BIN=${shellQuoteSingle(safeSynkroBin)}`);
   if (safeUserId) lines.push(`SYNKRO_USER_ID=${shellQuoteSingle(safeUserId)}`);
@@ -12537,6 +12539,7 @@ async function installCommand(opts = {}) {
       if (workersUp) {
         console.log("  \u2713 workers ready");
         await syncSkillFiles();
+        await discoverAndIngestSkills();
       } else {
         console.warn("  \u26A0 workers did not register within 30s \u2014 skill sync skipped");
       }
@@ -12859,6 +12862,34 @@ function reconcileHarness() {
   if (providers.length === 0) providers.push("claude_code");
   return splitWorkers(total, providers);
 }
+async function ingestSkillTasks(tasks, mcpPort) {
+  const summary = { ingested: 0, rules: 0, rejected: [] };
+  for (const { source, content } of tasks) {
+    try {
+      const resp = await fetch(`http://127.0.0.1:${mcpPort}/api/local/skills/sync`, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ source, content }),
+        signal: AbortSignal.timeout(65e3)
+      });
+      if (!resp.ok) throw new Error(`${resp.status}`);
+      const r = await resp.json();
+      if (r.status === "rejected") {
+        const reason = (r.reasons || []).slice(0, 2).join("; ") || r.message || "blocked by security vetting";
+        summary.rejected.push({ source, reason });
+        console.log(`  \u26D4 skill ${source}: BLOCKED \u2014 ${reason}`);
+      } else {
+        const created = r.created || 0;
+        summary.ingested++;
+        summary.rules += created;
+        console.log(created > 0 ? `  \u2713 skill ${source}: ${created} rule${created === 1 ? "" : "s"} \u2192 its own pack` : `  \u2713 skill ${source}: ${r.message || "up to date"}`);
+      }
+    } catch (e) {
+      console.warn(`  \u26A0 skill ${source}: sync failed (${e instanceof Error ? e.message : String(e)})`);
+    }
+  }
+  return summary;
+}
 async function syncSkillFiles() {
   const sf = readFullSynkroFile();
   if (!sf || sf.skills.length === 0) return;
@@ -12878,20 +12909,128 @@ async function syncSkillFiles() {
   }).filter(Boolean);
   if (tasks.length === 0) return;
   console.log(`  indexing ${tasks.length} skill file${tasks.length === 1 ? "" : "s"} \u2014 comparing against existing ruleset (this may take a few seconds)...`);
-  for (const { source, content } of tasks) {
+  await ingestSkillTasks(tasks, mcpPort);
+}
+function discoverSkillFiles(repoRoot, excludeHashes) {
+  const roots = [];
+  const add = (p) => {
     try {
-      const resp = await fetch(`http://127.0.0.1:${mcpPort}/api/local/skills/sync`, {
-        method: "POST",
-        headers: { "Content-Type": "application/json" },
-        body: JSON.stringify({ source, content }),
-        signal: AbortSignal.timeout(65e3)
-      });
-      if (!resp.ok) throw new Error(`${resp.status}`);
-      const { created, message } = await resp.json();
-      console.log(created > 0 ? `  \u2713 skill ${source}: ${created} new rule${created === 1 ? "" : "s"} added to index` : `  \u2713 skill ${source}: ${message || "up to date"} \u2014 index unchanged`);
-    } catch (e) {
-      console.warn(`  \u26A0 skill ${source}: sync failed (${e instanceof Error ? e.message : String(e)})`);
+      if (p && existsSync11(p) && statSync(p).isDirectory()) roots.push(p);
+    } catch {
+    }
+  };
+  add(join10(homedir10(), ".claude", "skills"));
+  add(join10(homedir10(), ".agents", "skills"));
+  if (repoRoot) {
+    add(join10(repoRoot, ".claude", "skills"));
+    add(join10(repoRoot, ".agents", "skills"));
+  }
+  const out = [];
+  const seen = /* @__PURE__ */ new Set();
+  const MAX = 200;
+  const consider = (file, name) => {
+    if (out.length >= MAX) return;
+    let content = "";
+    try {
+      const st = statSync(file);
+      if (!st.isFile() || st.size > 2e5) return;
+      content = readFileSync10(file, "utf-8");
+    } catch {
+      return;
+    }
+    if (!content.trim()) return;
+    const hash = createHash("sha256").update(content).digest("hex");
+    if (seen.has(hash) || excludeHashes.has(hash)) return;
+    seen.add(hash);
+    out.push({ source: `skill:${name}`, content, name, hash });
+  };
+  for (const root of roots) {
+    let entries = [];
+    try {
+      entries = readdirSync3(root);
+    } catch {
+      continue;
+    }
+    for (const entry of entries) {
+      if (entry.startsWith(".")) continue;
+      const full = join10(root, entry);
+      let st;
+      try {
+        st = statSync(full);
+      } catch {
+        continue;
+      }
+      if (st.isDirectory()) {
+        const skillMd = join10(full, "SKILL.md");
+        if (existsSync11(skillMd)) consider(skillMd, entry);
+      } else if (/\.mdx?$/i.test(entry) && entry.toUpperCase() !== "README.MD") {
+        consider(full, entry.replace(/\.mdx?$/i, ""));
+      }
+    }
+  }
+  return out;
+}
+function discoverySetHash(found) {
+  return createHash("sha256").update(found.map((f) => f.hash).sort().join(",")).digest("hex");
+}
+async function promptSkillDiscovery(found) {
+  if (!process.stdin.isTTY || found.length === 0) return [];
+  const rl = createInterface3({ input: process.stdin, output: process.stdout });
+  const ask3 = (q) => new Promise((res) => rl.question(q, (a) => res(a.trim())));
+  try {
+    console.log(`
+Found ${found.length} skill${found.length === 1 ? "" : "s"} in your Claude Code / skills.sh folders:`);
+    found.forEach((s, i) => console.log(`  ${i + 1}. ${s.name}`));
+    console.log("Ingest into Synkro as enforceable rules? Each is security-vetted first \u2014 anything");
+    console.log("malicious (prompt injection, guardrail-weakening, secret exfil) is blocked and reported.");
+    const a = (await ask3("Ingest [all] / type numbers (e.g. 1,3) / [skip]: ")).toLowerCase();
+    if (a === "skip" || a === "n" || a === "no" || a === "s") return [];
+    if (a === "" || a === "all" || a === "y" || a === "yes" || a === "a") return found.map((_, i) => i);
+    const picks = a.split(/[\s,]+/).map((x) => parseInt(x, 10) - 1).filter((i) => Number.isInteger(i) && i >= 0 && i < found.length);
+    return [...new Set(picks)];
+  } finally {
+    rl.close();
+  }
+}
+async function discoverAndIngestSkills() {
+  try {
+    const sf = readFullSynkroFile();
+    const repoRoot = sf?._repoRoot || detectGitRepo2();
+    const excludeHashes = /* @__PURE__ */ new Set();
+    if (sf?.skills?.length) {
+      for (const fp of resolveSkillPaths(sf.skills, sf._repoRoot)) {
+        try {
+          excludeHashes.add(createHash("sha256").update(readFileSync10(fp, "utf-8")).digest("hex"));
+        } catch {
+        }
+      }
     }
+    const found = discoverSkillFiles(repoRoot, excludeHashes);
+    if (found.length === 0) return;
+    const setHash = discoverySetHash(found);
+    let prev = "";
+    try {
+      prev = readFileSync10(SKILLS_DISCOVERED_PATH, "utf-8").trim();
+    } catch {
+    }
+    if (prev === setHash) return;
+    const picks = await promptSkillDiscovery(found);
+    try {
+      writeFileSync8(SKILLS_DISCOVERED_PATH, setHash);
+    } catch {
+    }
+    if (picks.length === 0) {
+      console.log("  Skipped \u2014 you can ingest skills anytime from the Synkro dashboard or via the MCP tool.");
+      return;
+    }
+    const mcpPort = process.env.SYNKRO_MCP_PORT || "18931";
+    console.log(`  Ingesting ${picks.length} skill${picks.length === 1 ? "" : "s"} (security-vetting each first)\u2026`);
+    const summary = await ingestSkillTasks(picks.map((i) => ({ source: found[i].source, content: found[i].content })), mcpPort);
+    const parts = [`${summary.ingested} ingested (${summary.rules} rule${summary.rules === 1 ? "" : "s"})`];
+    if (summary.rejected.length) parts.push(`${summary.rejected.length} blocked`);
+    console.log(`  Skills: ${parts.join(", ")} \u2014 each in its own toggleable pack.`);
+  } catch (e) {
+    console.warn(`  \u26A0 skill discovery skipped (${e instanceof Error ? e.message : String(e)})`);
   }
 }
 function detectGitRepo2() {
@@ -13205,7 +13344,7 @@ async function syncTranscriptsBulk(gatewayUrl, token, repo) {
   }
   return { sessions: totalSessions, messages: totalMessages };
 }
-var SYNKRO_DIR5, HOOKS_DIR, BIN_DIR, CONFIG_PATH2, MCP_STDIO_PROXY_SRC, OFFSETS_DIR, CLOUD_JWT_PATH;
+var SYNKRO_DIR5, HOOKS_DIR, BIN_DIR, CONFIG_PATH2, MCP_STDIO_PROXY_SRC, OFFSETS_DIR, CLOUD_JWT_PATH, SKILLS_DISCOVERED_PATH;
 var init_install = __esm({
   "cli/commands/install.ts"() {
     "use strict";
@@ -13340,6 +13479,7 @@ rl.on('line', async (line) => {
 `;
     OFFSETS_DIR = join10(SYNKRO_DIR5, ".transcript-offsets");
     CLOUD_JWT_PATH = join10(SYNKRO_DIR5, ".cloud-jwt");
+    SKILLS_DISCOVERED_PATH = join10(SYNKRO_DIR5, ".skills-discovered");
   }
 });
 
@@ -15706,7 +15846,7 @@ var args = process.argv.slice(2);
 var cmd = args[0] || "";
 var subArgs = args.slice(1);
 function printVersion() {
-  console.log("1.7.8");
+  console.log("1.7.18");
 }
 function printHelp2() {
   console.log(`Synkro CLI \u2014 runtime safety for AI coding agents