@synkro-sh/cli 1.3.30 → 1.3.31

package/dist/bootstrap.js

@@ -602,9 +602,34 @@ fi
 if [ "$USE_LOCAL" = "true" ]; then
   # \u2500\u2500\u2500 FREE TIER: grade via the persistent claude daemon (mode=bash). \u2500\u2500\u2500
 
-  # Fetch org guardrail rules relevant to this command (skip in local_only \u2014 no content leaves device).
+  # Refresh primer if older than 24h (server-side IP, fetched on demand).
+  PRIMER_FILE="$HOME/.synkro/grader-primer-bash.txt"
+  if [ ! -f "$PRIMER_FILE" ] || ! find "$PRIMER_FILE" -mmin -1440 2>/dev/null | grep -q .; then
+    NEW_PRIMER=$(curl -sS "\${GATEWAY_URL}/api/v1/cli/judge-prompts" \\
+      -H "Authorization: Bearer $JWT" --max-time 3 2>/dev/null \\
+      | jq -r '.grader_primer_bash // empty' 2>/dev/null || echo "")
+    if [ -n "$NEW_PRIMER" ]; then
+      printf '%s' "$NEW_PRIMER" > "$PRIMER_FILE" 2>/dev/null || true
+      # Kill the daemon so it restarts with the fresh primer.
+      DAEMON_PID_FILE="$HOME/.synkro/daemon/bash/daemon.pid"
+      [ -f "$DAEMON_PID_FILE" ] && kill -TERM "$(cat "$DAEMON_PID_FILE" 2>/dev/null)" 2>/dev/null || true
+    fi
+  fi
+
+  # Fetch org guardrail rules. In local_only mode use GET (no command leaks);
+  # in other modes use POST with content for embedding-based top_k matching.
+  RULES_CACHE="$HOME/.synkro/.rules-cache-bash"
   ORG_RULES="[]"
-  if [ "$SYNKRO_CAPTURE_DEPTH" != "local_only" ]; then
+  if [ "$SYNKRO_CAPTURE_DEPTH" = "local_only" ]; then
+    if find "$RULES_CACHE" -mmin -60 2>/dev/null | grep -q .; then
+      ORG_RULES=$(cat "$RULES_CACHE" 2>/dev/null || echo "[]")
+    else
+      ORG_RULES=$(curl -sS "\${GATEWAY_URL}/api/v1/cli/pr-rules" \\
+        -H "Authorization: Bearer $JWT" --max-time 2 2>/dev/null \\
+        | jq -c '[.rules[]? | {rule_id, text, severity, category}]' 2>/dev/null || echo "[]")
+      [ -n "$ORG_RULES" ] && [ "$ORG_RULES" != "null" ] && printf '%s' "$ORG_RULES" > "$RULES_CACHE" 2>/dev/null || true
+    fi
+  else
     ORG_RULES=$(printf '%s' "$COMMAND" | head -c 4000 \\
       | jq -Rs '{content: .}' \\
       | curl -sS "\${GATEWAY_URL}/api/v1/cli/pr-rules?top_k=15" \\
@@ -612,8 +637,8 @@ if [ "$USE_LOCAL" = "true" ]; then
       -H "Authorization: Bearer $JWT" \\
       -d @- --max-time 2 2>/dev/null \\
       | jq -c '[.rules[]? | {rule_id, text, severity, category}]' 2>/dev/null || echo "[]")
-    if [ -z "$ORG_RULES" ] || [ "$ORG_RULES" = "null" ]; then ORG_RULES="[]"; fi
   fi
+  if [ -z "$ORG_RULES" ] || [ "$ORG_RULES" = "null" ]; then ORG_RULES="[]"; fi
 
   GRADER_PROMPT_FILE=$(mktemp -t synkro-bash-prompt.XXXXXX)
   trap "rm -f \\"$GRADER_PROMPT_FILE\\"" EXIT
@@ -1029,8 +1054,31 @@ fi
 
 if [ "$USE_LOCAL" = "true" ]; then
   # \u2500\u2500\u2500 LOCAL GRADING: grade via the persistent claude daemon (Python helper).
+
+  # Refresh primer if older than 24h (server-side IP, fetched on demand).
+  PRIMER_FILE="$HOME/.synkro/grader-primer-edit.txt"
+  if [ ! -f "$PRIMER_FILE" ] || ! find "$PRIMER_FILE" -mmin -1440 2>/dev/null | grep -q .; then
+    NEW_PRIMER=$(curl -sS "\${GATEWAY_URL}/api/v1/cli/judge-prompts" \\
+      -H "Authorization: Bearer $JWT" --max-time 3 2>/dev/null \\
+      | jq -r '.grader_primer_edit // empty' 2>/dev/null || echo "")
+    if [ -n "$NEW_PRIMER" ]; then
+      printf '%s' "$NEW_PRIMER" > "$PRIMER_FILE" 2>/dev/null || true
+      DAEMON_PID_FILE="$HOME/.synkro/daemon/edit/daemon.pid"
+      [ -f "$DAEMON_PID_FILE" ] && kill -TERM "$(cat "$DAEMON_PID_FILE" 2>/dev/null)" 2>/dev/null || true
+    fi
+  fi
+  RULES_CACHE="$HOME/.synkro/.rules-cache-edit"
   ORG_RULES="[]"
-  if [ "$SYNKRO_CAPTURE_DEPTH" != "local_only" ]; then
+  if [ "$SYNKRO_CAPTURE_DEPTH" = "local_only" ]; then
+    if find "$RULES_CACHE" -mmin -60 2>/dev/null | grep -q .; then
+      ORG_RULES=$(cat "$RULES_CACHE" 2>/dev/null || echo "[]")
+    else
+      ORG_RULES=$(curl -sS "\${GATEWAY_URL}/api/v1/cli/pr-rules" \\
+        -H "Authorization: Bearer $JWT" --max-time 2 2>/dev/null \\
+        | jq -c '[.rules[]? | {rule_id, text, severity, category, mode}]' 2>/dev/null || echo "[]")
+      [ -n "$ORG_RULES" ] && [ "$ORG_RULES" != "null" ] && printf '%s' "$ORG_RULES" > "$RULES_CACHE" 2>/dev/null || true
+    fi
+  else
     ORG_RULES=$(printf '%s' "$PROPOSED" | head -c 8000 \\
       | jq -Rs '{content: .}' \\
       | curl -sS "\${GATEWAY_URL}/api/v1/cli/pr-rules?top_k=20" \\
@@ -1038,8 +1086,8 @@ if [ "$USE_LOCAL" = "true" ]; then
       -H "Authorization: Bearer $JWT" \\
       -d @- --max-time 2 2>/dev/null \\
       | jq -c '[.rules[]? | {rule_id, text, severity, category, mode}]' 2>/dev/null || echo "[]")
-    if [ -z "$ORG_RULES" ] || [ "$ORG_RULES" = "null" ]; then ORG_RULES="[]"; fi
   fi
+  if [ -z "$ORG_RULES" ] || [ "$ORG_RULES" = "null" ]; then ORG_RULES="[]"; fi
 
   GRADER_PROMPT_FILE=$(mktemp -t synkro-grade.XXXXXX)
   trap "rm -f \\"$GRADER_PROMPT_FILE\\"" EXIT
@@ -3428,12 +3476,27 @@ function ensureSynkroDir() {
   mkdirSync5(BIN_DIR, { recursive: true });
   mkdirSync5(OFFSETS_DIR, { recursive: true });
 }
-function writeGraderDaemon() {
+async function fetchGraderPrimers(gatewayUrl, token) {
+  try {
+    const resp = await fetch(`${gatewayUrl}/api/v1/cli/judge-prompts`, {
+      headers: { "Authorization": `Bearer ${token}` }
+    });
+    if (!resp.ok) throw new Error(`status ${resp.status}`);
+    const data = await resp.json();
+    if (!data.grader_primer_bash || !data.grader_primer_edit) throw new Error("missing primer fields");
+    return { bash: data.grader_primer_bash, edit: data.grader_primer_edit };
+  } catch (err) {
+    console.warn(`[synkro] primer fetch failed (${err.message}); using bundled fallback`);
+    return { bash: GRADER_PRIMER_BASH, edit: GRADER_PRIMER_EDIT };
+  }
+}
+async function writeGraderDaemon(gatewayUrl, token) {
   writeFileSync5(GRADER_DAEMON_PATH, GRADER_DAEMON_PY, "utf-8");
   chmodSync(GRADER_DAEMON_PATH, 493);
-  writeFileSync5(GRADER_PRIMER_EDIT_PATH, GRADER_PRIMER_EDIT, "utf-8");
+  const primers = await fetchGraderPrimers(gatewayUrl, token);
+  writeFileSync5(GRADER_PRIMER_EDIT_PATH, primers.edit, "utf-8");
   chmodSync(GRADER_PRIMER_EDIT_PATH, 420);
-  writeFileSync5(GRADER_PRIMER_BASH_PATH, GRADER_PRIMER_BASH, "utf-8");
+  writeFileSync5(GRADER_PRIMER_BASH_PATH, primers.bash, "utf-8");
   chmodSync(GRADER_PRIMER_BASH_PATH, 420);
 }
 function writeHookScripts() {
@@ -3491,7 +3554,7 @@ function writeConfigEnv(opts) {
     `SYNKRO_CREDENTIALS_PATH=${shellQuoteSingle(credsPath)}`,
     `SYNKRO_TIER=${shellQuoteSingle(safeTier)}`,
     `SYNKRO_INFERENCE=${shellQuoteSingle(safeInference)}`,
-    `SYNKRO_VERSION=${shellQuoteSingle("1.3.30")}`
+    `SYNKRO_VERSION=${shellQuoteSingle("1.3.31")}`
   ];
   if (safeUserId) lines.push(`SYNKRO_USER_ID=${shellQuoteSingle(safeUserId)}`);
   if (safeOrgId) lines.push(`SYNKRO_ORG_ID=${shellQuoteSingle(safeOrgId)}`);
@@ -3719,7 +3782,7 @@ async function installCommand(opts = {}) {
   console.log(`  ${scripts.sessionStartScript}`);
   console.log(`  ${scripts.transcriptSyncScript}
 `);
-  writeGraderDaemon();
+  await writeGraderDaemon(gatewayUrl, token);
   for (const mode of ["edit", "bash"]) {
     const pidFile = join6(SYNKRO_DIR2, "daemon", mode, "daemon.pid");
     try {