@synkro-sh/cli 1.2.0 → 1.2.2

package/dist/bootstrap.js

@@ -114,7 +114,7 @@ function installCCHooks(settingsPath, config) {
       {
         type: "command",
         command: config.bashJudgeScriptPath,
-        timeout: 8
+        timeout: 15
       }
     ],
     [SYNKRO_MARKER]: true
@@ -513,7 +513,7 @@ if [ "$SYNKRO_INFERENCE_TIER" = "free" ] && command -v claude >/dev/null 2>&1; t
   V_INNER=$(printf '%s' "$CC_RESP" | tr '\\n' ' ' | grep -oE '<synkro-verdict>[^<]*</synkro-verdict>' | tail -1 | sed -E 's|^<synkro-verdict>||; s|</synkro-verdict>$||')
   if [ -z "$V_INNER" ] || ! echo "$V_INNER" | jq -e '.severity' >/dev/null 2>&1; then
     synkro_log "bashGuard $CMD_SHORT \u2192 error (no verdict)"
-    echo '{}'
+    jq -n --arg m "[synkro] bashGuard \u2192 error (no verdict)" '{systemMessage: $m}'
     exit 0
   fi
   VERDICT="$V_INNER"
@@ -540,7 +540,7 @@ fi
 
 if [ -z "$VERDICT" ]; then
   synkro_log "bashGuard $CMD_SHORT \u2192 error (timeout)"
-  echo '{}'
+  jq -n --arg m "[synkro] bashGuard \u2192 error (timeout)" '{systemMessage: $m}'
   exit 0
 fi
 
@@ -621,9 +621,9 @@ case "$SEVERITY" in
       }'
     ;;
   *)
-    # low / medium / anything else \u2192 silent allow
+    # low / medium / anything else \u2192 allow
     synkro_log "bashGuard $CMD_SHORT \u2192 pass"
-    echo '{}'
+    jq -n --arg m "[synkro] bashGuard \u2192 pass" '{systemMessage: $m}'
     ;;
 esac
 
@@ -854,6 +854,21 @@ refresh_jwt() {
 }
 
 
+# Resolve tier (cached 60 min) \u2014 server is canonical via /cli/me; fallback free.
+TIER_CACHE_FILE="$HOME/.synkro/.tier-cache-\${SYNKRO_USER_ID:-default}"
+SYNKRO_INFERENCE_TIER=""
+if find "$TIER_CACHE_FILE" -mmin -60 2>/dev/null | grep -q .; then
+  SYNKRO_INFERENCE_TIER=$(cat "$TIER_CACHE_FILE" 2>/dev/null)
+fi
+if [ -z "$SYNKRO_INFERENCE_TIER" ]; then
+  ME_RESP=$(curl -sS "\${GATEWAY_URL}/api/v1/cli/me" -H "Authorization: Bearer $JWT" --max-time 2 2>/dev/null || echo "")
+  if [ -n "$ME_RESP" ]; then
+    SYNKRO_INFERENCE_TIER=$(echo "$ME_RESP" | jq -r '.tier // empty' 2>/dev/null)
+    [ -n "$SYNKRO_INFERENCE_TIER" ] && printf '%s' "$SYNKRO_INFERENCE_TIER" > "$TIER_CACHE_FILE" 2>/dev/null || true
+  fi
+fi
+SYNKRO_INFERENCE_TIER="\${SYNKRO_INFERENCE_TIER:-free}"
+
 if [ "$SYNKRO_INFERENCE_TIER" = "free" ] && command -v claude >/dev/null 2>&1; then
   # \u2500\u2500\u2500 FREE TIER: grade via the persistent claude daemon (Python helper).
   ORG_RULES=$(printf '%s' "$PROPOSED" | head -c 8000 \\
@@ -962,13 +977,13 @@ fi
 
 if [ -z "$RESP" ]; then
   synkro_log "editGuard $FILE_SHORT \u2192 error (timeout)"
-  echo '{}'
+  jq -n --arg m "[synkro] editGuard $FILE_SHORT \u2192 error (timeout)" '{systemMessage: $m}'
   exit 0
 fi
 
 if ! echo "$RESP" | jq -e 'type == "object"' >/dev/null 2>&1; then
   synkro_log "editGuard $FILE_SHORT \u2192 error (bad response)"
-  echo '{}'
+  jq -n --arg m "[synkro] editGuard $FILE_SHORT \u2192 error (bad response)" '{systemMessage: $m}'
   exit 0
 fi
 
@@ -976,11 +991,13 @@ DECISION=$(echo "$RESP" | jq -r '.hookSpecificOutput.permissionDecision // "allo
 if [ "$DECISION" = "deny" ]; then
   DENY_REASON=$(echo "$RESP" | jq -r '.hookSpecificOutput.permissionDecisionReason // ""' 2>/dev/null)
   synkro_log "editGuard $FILE_SHORT \u2192 BLOCKED: $DENY_REASON"
+  echo "$RESP"
 else
   synkro_log "editGuard $FILE_SHORT \u2192 pass"
+  RESP_WITH_MSG=$(echo "$RESP" | jq --arg m "[synkro] editGuard $FILE_SHORT \u2192 pass" '. + {systemMessage: $m}')
+  echo "$RESP_WITH_MSG"
 fi
 
-echo "$RESP"
 exit 0
 `;
     CC_EDIT_CAPTURE_SCRIPT = `#!/bin/bash
@@ -1193,12 +1210,7 @@ fi
 
 if [ -z "$RESP" ] || ! echo "$RESP" | jq -e 'type == "object"' >/dev/null 2>&1; then
   synkro_log "editScan $BASENAME \u2192 error (no response)"
-  if [ "\${SYNKRO_VERBOSE:-0}" = "1" ]; then
-    SYS_MSG="[synkro] afterFileEdit \u2192 scanned \${BASENAME} (grader unavailable)"
-    jq -n --arg sys_msg "$SYS_MSG" '{ systemMessage: $sys_msg }'
-    exit 0
-  fi
-  echo '{}'
+  jq -n --arg m "[synkro] editScan $BASENAME \u2192 error (no response)" '{systemMessage: $m}'
   exit 0
 fi
 
@@ -1209,7 +1221,7 @@ REASON=$(echo "$RESP" | jq -r '.reason // ""' 2>/dev/null)
 
 if [ "$OK" = "false" ] && [ -n "$REASON" ]; then
   synkro_log "editScan $BASENAME \u2192 FAIL ($CATEGORY): $REASON"
-  SYS_MSG="[synkro] afterFileEdit \u2192 Finding in \${BASENAME}: \${REASON}"
+  SYS_MSG="[synkro] editScan $BASENAME \u2192 FAIL: \${REASON}"
   ADDITIONAL_CTX="Synkro post-edit grader flagged \${BASENAME} (severity: \${SEVERITY}, category: \${CATEGORY}). Re-edit the file applying the retry guidance: \${REASON}"
   jq -n \\
     --arg sys_msg "$SYS_MSG" \\
@@ -1225,14 +1237,7 @@ if [ "$OK" = "false" ] && [ -n "$REASON" ]; then
 fi
 
 synkro_log "editScan $BASENAME \u2192 pass"
-
-if [ "\${SYNKRO_VERBOSE:-0}" = "1" ]; then
-  SYS_MSG="[synkro] afterFileEdit \u2192 no issues in \${BASENAME}"
-  jq -n --arg sys_msg "$SYS_MSG" '{ systemMessage: $sys_msg }'
-  exit 0
-fi
-
-echo '{}'
+jq -n --arg m "[synkro] editScan $BASENAME \u2192 pass" '{systemMessage: $m}'
 exit 0
 `;
     CC_STOP_SUMMARY_SCRIPT = `#!/bin/bash
@@ -2213,8 +2218,6 @@ function writeConfigEnv(opts) {
   const safeOrgId = sanitizeConfigValue(opts.orgId);
   const safeEmail = sanitizeConfigValue(opts.email);
   const safeTier = sanitizeConfigValue(opts.tier ?? "pro", 32);
-  const tierEnv = process.env.SYNKRO_INFERENCE_TIER;
-  const safeInferenceTier = tierEnv === "fast" ? "fast" : "free";
   const lines = [
     "# Synkro CLI config (managed by synkro install)",
     "# JWT auth \u2014 the hook scripts read SYNKRO_CREDENTIALS_PATH at runtime",
@@ -2222,12 +2225,11 @@ function writeConfigEnv(opts) {
     `SYNKRO_GATEWAY_URL=${shellQuoteSingle(safeGateway)}`,
     `SYNKRO_CREDENTIALS_PATH=${shellQuoteSingle(credsPath)}`,
     `SYNKRO_TIER=${shellQuoteSingle(safeTier)}`,
-    `SYNKRO_VERSION=${shellQuoteSingle("1.2.0")}`
+    `SYNKRO_VERSION=${shellQuoteSingle("1.2.2")}`
   ];
   if (safeUserId) lines.push(`SYNKRO_USER_ID=${shellQuoteSingle(safeUserId)}`);
   if (safeOrgId) lines.push(`SYNKRO_ORG_ID=${shellQuoteSingle(safeOrgId)}`);
   if (safeEmail) lines.push(`SYNKRO_EMAIL=${shellQuoteSingle(safeEmail)}`);
-  lines.push(`SYNKRO_INFERENCE_TIER=${shellQuoteSingle(safeInferenceTier)}`);
   lines.push("");
   writeFileSync4(CONFIG_PATH, lines.join("\n"), "utf-8");
   chmodSync(CONFIG_PATH, 384);