@synkro-sh/cli 1.7.89 → 1.7.91

package/dist/bootstrap.js

@@ -147,7 +147,7 @@ function getIdentity() {
   if (cached2) return cached2;
   let cliVersion = "0.0.0";
   try {
-    cliVersion = "1.7.89";
+    cliVersion = "1.7.91";
   } catch {
   }
   const creds = loadCredentialsIdentity();
@@ -2117,7 +2117,11 @@ function installCodexHooks(hooksJsonPath, config) {
   push(h, "SubagentStart", [cmd(config.subagentStartScriptPath, 5)]);
   if (!config.skipTranscriptSync) push(h, "SubagentStop", [cmd(config.subagentStopScriptPath, 5)]);
   push(h, "SessionEnd", [cmd(config.stopSummaryScriptPath, 3)]);
-  if (!config.skipTranscriptSync) push(h, "Stop", [cmd(config.transcriptSyncScriptPath, 3)]);
+  push(h, "Stop", [
+    cmd(config.cweStopScriptPath, 50, "Checking completed edits for weaknesses"),
+    cmd(config.cveStopScriptPath, 50, "Checking completed edits for vulnerabilities"),
+    ...!config.skipTranscriptSync ? [cmd(config.transcriptSyncScriptPath, 3)] : []
+  ]);
   writeHooksFileAtomic2(hooksJsonPath, file);
 }
 function uninstallCodexHooks(hooksJsonPath) {
@@ -2540,7 +2544,7 @@ var init_skillParser = __esm({
 function stubHook(surface, optsLiteral) {
   return "#!/usr/bin/env bun\nimport { runStub } from './_synkro-stub-common.ts';\nrunStub(" + JSON.stringify(surface) + ", " + optsLiteral + ");\n";
 }
-var STUB_COMMON_TS, STUB_EDIT_PRECHECK_TS, STUB_EDIT_FOLLOWUP_TS, STUB_CWE_PRECHECK_TS, STUB_CVE_PRECHECK_TS, STUB_BASH_JUDGE_TS, STUB_SKILL_JUDGE_TS, STUB_INSTALL_SCAN_TS, STUB_AGENT_JUDGE_TS, STUB_MCP_GATE_TS, STUB_PLAN_JUDGE_TS, STUB_STOP_SUMMARY_TS, STUB_SESSION_START_TS, STUB_TRANSCRIPT_SYNC_TS, STUB_SUBAGENT_START_TS, STUB_SUBAGENT_STOP_TS, STUB_USER_PROMPT_SUBMIT_TS, STUB_BASH_FOLLOWUP_TS, STUB_PROMPT_ROUTE_TS, STUB_TASK_ACTIVATE_INTENT_TS, STUB_CURSOR_BASH_JUDGE_TS, STUB_CURSOR_SKILL_JUDGE_TS, STUB_CURSOR_EDIT_CAPTURE_TS, STUB_CURSOR_AGENT_CAPTURE_TS;
+var STUB_COMMON_TS, STUB_EDIT_PRECHECK_TS, STUB_EDIT_FOLLOWUP_TS, STUB_CWE_PRECHECK_TS, STUB_CVE_PRECHECK_TS, STUB_BASH_JUDGE_TS, STUB_SKILL_JUDGE_TS, STUB_INSTALL_SCAN_TS, STUB_AGENT_JUDGE_TS, STUB_MCP_GATE_TS, STUB_PLAN_JUDGE_TS, STUB_STOP_SUMMARY_TS, STUB_SESSION_START_TS, STUB_TRANSCRIPT_SYNC_TS, STUB_CODEX_CWE_STOP_TS, STUB_CODEX_CVE_STOP_TS, STUB_SUBAGENT_START_TS, STUB_SUBAGENT_STOP_TS, STUB_USER_PROMPT_SUBMIT_TS, STUB_BASH_FOLLOWUP_TS, STUB_PROMPT_ROUTE_TS, STUB_TASK_ACTIVATE_INTENT_TS, STUB_CURSOR_BASH_JUDGE_TS, STUB_CURSOR_SKILL_JUDGE_TS, STUB_CURSOR_EDIT_CAPTURE_TS, STUB_CURSOR_AGENT_CAPTURE_TS;
 var init_hookScriptsTs = __esm({
   "cli/installer/hookScriptsTs.ts"() {
     "use strict";
@@ -2752,6 +2756,28 @@ function failOpen(harness: string): string {
   return harness === 'cursor' ? '{"permission":"allow"}' : '{}';
 }
 
+/** Convert an existing security PreToolUse verdict into Codex's Stop contract. */
+export function codexStopResponse(responseText: string): string {
+  try {
+    const parsed = JSON.parse(responseText || '{}');
+    const specific = parsed?.hookSpecificOutput;
+    if (specific?.permissionDecision !== 'deny') return '{}';
+    const reason = String(
+      specific.permissionDecisionReason
+      || specific.additionalContext
+      || parsed.systemMessage
+      || 'A completed edit contains a CWE weakness. Fix it before stopping.',
+    );
+    return JSON.stringify({
+      decision: 'block',
+      reason,
+      ...(parsed.systemMessage ? { systemMessage: parsed.systemMessage } : {}),
+    });
+  } catch {
+    return '{}';
+  }
+}
+
 function out(s: string): void { try { process.stdout.write(s + '\n'); } catch {} }
 
 function gitRoot(cwd: string): string {
@@ -3100,6 +3126,40 @@ export function extractCompletedCodexPatchEdits(
   return results;
 }
 
+/**
+ * Recover only the latest completed apply_patch for each file in the current
+ * Codex turn. Stop hooks may fire repeatedly while an agent self-corrects, so
+ * scanning the latest on-disk state avoids re-blocking an earlier vulnerable
+ * patch after a later patch fixed it.
+ */
+export function extractCompletedCodexTurnPatchEdits(
+  transcript: string,
+  repoRoot: string,
+): RecoveredCodexEdit[] {
+  if (!transcript || !repoRoot) return [];
+  const lines = transcript.split('\n');
+  let latestUserLine = -1;
+  for (let index = 0; index < lines.length; index++) {
+    if (!lines[index].trim()) continue;
+    let entry: any;
+    try { entry = JSON.parse(lines[index]); } catch { continue; }
+    const canonicalUser = entry?.type === 'event_msg'
+      && entry?.payload?.type === 'user_message';
+    const compatibilityUser = entry?.type === 'response_item'
+      && entry?.payload?.type === 'message'
+      && entry?.payload?.role === 'user';
+    if (canonicalUser || compatibilityUser) latestUserLine = index;
+  }
+  const turnTranscript = lines.slice(latestUserLine + 1).join('\n');
+  const recovered = extractCompletedCodexPatchEdits(turnTranscript, repoRoot);
+  const latestByFile = new Map<string, RecoveredCodexEdit>();
+  for (const item of recovered) {
+    const filePath = filePathFromToolInput(item.payload?.tool_input);
+    if (filePath) latestByFile.set(filePath, item);
+  }
+  return [...latestByFile.values()];
+}
+
 interface StubOpts {
   needsFile?: boolean;
   needsTranscript?: boolean;
@@ -3110,6 +3170,10 @@ interface StubOpts {
   telemetry?: boolean;
   harness?: string;
   postEdit?: boolean;
+  /** Recover only this Codex turn's latest completed patch per file. */
+  codexTurnEdits?: boolean;
+  /** Translate a security PreToolUse deny into Codex's Stop block response. */
+  stopContract?: boolean;
   /** Codex SubagentStart/SubagentStop report the parent as session_id and
    *  the child as agent_id. Remap them to the ordinary child-session envelope. */
   subagent?: boolean;
@@ -3361,12 +3425,33 @@ export async function runStub(surface: string, opts: StubOpts = {}): Promise<voi
           const cap = opts.fullTranscript ? 400000 : 200000;
           envelope.transcript = t.length <= cap ? t : t.slice(t.length - cap);
           if (harness === 'codex') {
-            const recovered = extractCompletedCodexPatchEdits(envelope.transcript, root || cwd);
-            if (recovered.length) envelope.transcriptEdits = recovered;
+            const recovered = opts.codexTurnEdits
+              ? extractCompletedCodexTurnPatchEdits(envelope.transcript, root || cwd)
+              : extractCompletedCodexPatchEdits(envelope.transcript, root || cwd);
+            if (recovered.length) {
+              envelope.transcriptEdits = recovered;
+              if (opts.codexTurnEdits) {
+                envelope.editBatch = recovered.map((item) => ({
+                  ...item,
+                  payload: {
+                    ...item.payload,
+                    __synkro_post_edit_enforcement: true,
+                  },
+                }));
+                envelope.payload = envelope.editBatch[0].payload;
+                envelope.baseContent = envelope.editBatch[0].baseContent;
+              }
+            }
           }
         } catch {}
       }
     }
+    // No completed apply_patch in this turn means there is nothing for the
+    // fallback to scan. Stay silent and avoid touching the server/database.
+    if (opts.codexTurnEdits && (!Array.isArray(envelope.editBatch) || envelope.editBatch.length === 0)) {
+      out(failOpen(harness));
+      return;
+    }
     if (opts.needsPlan) {
       const ti = payload.tool_input || {};
       envelope.planText = String(ti.plan || ti.content || payload.plan || '');
@@ -3421,7 +3506,10 @@ export async function runStub(surface: string, opts: StubOpts = {}): Promise<voi
       } catch (e) { /* connection refused / timeout → retry below */ }
       if (i < attempts - 1) await new Promise((r) => setTimeout(r, 500 * (i + 1)));
     }
-    const responseText = text || failOpen(harness);
+    const rawResponseText = text || failOpen(harness);
+    const responseText = opts.stopContract && harness === 'codex'
+      ? codexStopResponse(rawResponseText)
+      : rawResponseText;
     out(responseText);
     emitStubTelemetry(surface, harness, telemPayload, responseText, Date.now() - startedAt, telemCwd, telemSessionId);
   } catch (err) {
@@ -3668,6 +3756,8 @@ function emitStubTelemetry(
     STUB_STOP_SUMMARY_TS = stubHook("stop-summary", "{ needsTranscript: true, fullTranscript: true }");
     STUB_SESSION_START_TS = stubHook("session-start", "{ telemetry: true }");
     STUB_TRANSCRIPT_SYNC_TS = stubHook("transcript-sync", "{ needsTranscript: true, fullTranscript: true, telemetry: true }");
+    STUB_CODEX_CWE_STOP_TS = stubHook("cwe-precheck", "{ needsTranscript: true, fullTranscript: true, codexTurnEdits: true, stopContract: true }");
+    STUB_CODEX_CVE_STOP_TS = stubHook("cve-precheck", "{ needsTranscript: true, fullTranscript: true, codexTurnEdits: true, stopContract: true }");
     STUB_SUBAGENT_START_TS = stubHook("subagent-start", "{ telemetry: true, subagent: true }");
     STUB_SUBAGENT_STOP_TS = stubHook("subagent-stop", "{ needsTranscript: true, fullTranscript: true, telemetry: true, subagent: true }");
     STUB_USER_PROMPT_SUBMIT_TS = stubHook("prompt-submit", "{ telemetry: true }");
@@ -6695,7 +6785,7 @@ var init_dockerInstall = __esm({
     HOST_PGLITE_PORT = parseInt(process.env.SYNKRO_HOST_PGLITE_PORT || "15433", 10);
     CONTAINER_NAME = resolveContainerName();
     defaultImageVersion = () => {
-      if (true) return "1.7.89";
+      if (true) return "1.7.91";
       try {
         const pkg = JSON.parse(readFileSync17(new URL("../../package.json", import.meta.url), "utf8"));
         if (pkg.version) return pkg.version;
@@ -7625,6 +7715,8 @@ function writeHookScripts() {
   const planJudgeScriptPath = join19(HOOKS_DIR, "cc-plan-judge.ts");
   const agentJudgeScriptPath = join19(HOOKS_DIR, "cc-agent-judge.ts");
   const stopSummaryScriptPath = join19(HOOKS_DIR, "cc-stop-summary.ts");
+  const cweStopScriptPath = join19(HOOKS_DIR, "codex-cwe-stop.ts");
+  const cveStopScriptPath = join19(HOOKS_DIR, "codex-cve-stop.ts");
   const sessionStartScriptPath = join19(HOOKS_DIR, "cc-session-start.ts");
   const transcriptSyncScriptPath = join19(HOOKS_DIR, "cc-transcript-sync.ts");
   const subagentStartScriptPath = join19(HOOKS_DIR, "codex-subagent-start.ts");
@@ -7654,6 +7746,8 @@ function writeHookScripts() {
     [planJudgeScriptPath, STUB_PLAN_JUDGE_TS],
     [agentJudgeScriptPath, STUB_AGENT_JUDGE_TS],
     [stopSummaryScriptPath, STUB_STOP_SUMMARY_TS],
+    [cweStopScriptPath, STUB_CODEX_CWE_STOP_TS],
+    [cveStopScriptPath, STUB_CODEX_CVE_STOP_TS],
     [sessionStartScriptPath, STUB_SESSION_START_TS],
     [transcriptSyncScriptPath, STUB_TRANSCRIPT_SYNC_TS],
     [subagentStartScriptPath, STUB_SUBAGENT_START_TS],
@@ -7691,6 +7785,8 @@ function writeHookScripts() {
     planJudgeScript: planJudgeScriptPath,
     agentJudgeScript: agentJudgeScriptPath,
     stopSummaryScript: stopSummaryScriptPath,
+    cweStopScript: cweStopScriptPath,
+    cveStopScript: cveStopScriptPath,
     sessionStartScript: sessionStartScriptPath,
     transcriptSyncScript: transcriptSyncScriptPath,
     subagentStartScript: subagentStartScriptPath,
@@ -7734,7 +7830,7 @@ function writeConfigEnv(opts) {
     `SYNKRO_CREDENTIALS_PATH=${shellQuoteSingle2(credsPath)}`,
     `SYNKRO_TIER=${shellQuoteSingle2(safeTier)}`,
     `SYNKRO_INFERENCE=${shellQuoteSingle2(safeInference)}`,
-    `SYNKRO_VERSION=${shellQuoteSingle2("1.7.89")}`
+    `SYNKRO_VERSION=${shellQuoteSingle2("1.7.91")}`
   ];
   if (safeSynkroBin) lines.push(`SYNKRO_CLI_BIN=${shellQuoteSingle2(safeSynkroBin)}`);
   if (safeUserId) lines.push(`SYNKRO_USER_ID=${shellQuoteSingle2(safeUserId)}`);
@@ -8476,7 +8572,7 @@ async function installCommand(opts = {}) {
   await setTelemetryState({ enabled: true, remoteFlushEnabled: telemetryConsent });
   emit("install", {
     phase: "started",
-    cli_version_to: "1.7.89",
+    cli_version_to: "1.7.91",
     agents_detected: agents.map((a) => a.kind),
     with_github: false,
     with_local_cc: false,
@@ -8558,6 +8654,8 @@ async function installCommand(opts = {}) {
         cvePrecheckScriptPath: scripts.cvePrecheckScript,
         agentJudgeScriptPath: scripts.agentJudgeScript,
         stopSummaryScriptPath: scripts.stopSummaryScript,
+        cweStopScriptPath: scripts.cweStopScript,
+        cveStopScriptPath: scripts.cveStopScript,
         sessionStartScriptPath: scripts.sessionStartScript,
         transcriptSyncScriptPath: scripts.transcriptSyncScript,
         subagentStartScriptPath: scripts.subagentStartScript,
@@ -9239,6 +9337,8 @@ function reconcileHarness() {
       cvePrecheckScriptPath: scripts.cvePrecheckScript,
       agentJudgeScriptPath: scripts.agentJudgeScript,
       stopSummaryScriptPath: scripts.stopSummaryScript,
+      cweStopScriptPath: scripts.cweStopScript,
+      cveStopScriptPath: scripts.cveStopScript,
       sessionStartScriptPath: scripts.sessionStartScript,
       transcriptSyncScriptPath: scripts.transcriptSyncScript,
       subagentStartScriptPath: scripts.subagentStartScript,
@@ -14511,7 +14611,7 @@ var subArgs = args.slice(1);
 var isDetachedChild = process.env.SYNKRO_TELEMETRY_DETACHED === "1";
 var FLUSH_SKIP = /* @__PURE__ */ new Set(["grade", "version", "--version", "-v", "help", "--help", "-h", ""]);
 function printVersion() {
-  console.log("1.7.89");
+  console.log("1.7.91");
 }
 function printHelp2() {
   console.log(`Synkro CLI \u2014 runtime safety for AI coding agents