@synkro-sh/cli 1.4.0 → 1.4.2

package/dist/bootstrap.js

@@ -3370,87 +3370,6 @@ var init_promptFetcher = __esm({
   }
 });
 
-// cli/storage/local.ts
-import Database from "better-sqlite3";
-import { existsSync as existsSync8, mkdirSync as mkdirSync6 } from "fs";
-import { homedir as homedir6 } from "os";
-import { join as join7 } from "path";
-function getSetting(key) {
-  const row = db.prepare("SELECT value FROM settings WHERE key = ?").get(key);
-  return row?.value ?? null;
-}
-function setSetting(key, value) {
-  db.prepare(
-    `INSERT INTO settings (key, value, updated_at) VALUES (?, ?, datetime('now'))
-     ON CONFLICT(key) DO UPDATE SET value = excluded.value, updated_at = excluded.updated_at`
-  ).run(key, value);
-}
-var SYNKRO_DIR2, DB_PATH, db;
-var init_local = __esm({
-  "cli/storage/local.ts"() {
-    "use strict";
-    SYNKRO_DIR2 = join7(homedir6(), ".synkro");
-    DB_PATH = join7(SYNKRO_DIR2, "sessions.db");
-    if (!existsSync8(SYNKRO_DIR2)) {
-      mkdirSync6(SYNKRO_DIR2, { recursive: true });
-    }
-    try {
-      db = new Database(DB_PATH);
-    } catch (err) {
-      const msg = err instanceof Error ? err.message : String(err);
-      console.error(`Failed to initialize database at ${DB_PATH}: ${msg}`);
-      console.error("Check that ~/.synkro/ is writable and disk is not full.");
-      process.exit(1);
-    }
-    db.exec(`
-  CREATE TABLE IF NOT EXISTS command_history (
-    id INTEGER PRIMARY KEY AUTOINCREMENT,
-    command TEXT NOT NULL,
-    created_at TEXT DEFAULT (datetime('now'))
-  );
-`);
-    db.exec(`
-  CREATE TABLE IF NOT EXISTS project_keys (
-    slug TEXT PRIMARY KEY,
-    project_id TEXT NOT NULL,
-    project_name TEXT NOT NULL,
-    api_key TEXT NOT NULL,
-    created_at TEXT DEFAULT (datetime('now'))
-  );
-`);
-    db.exec(`
-  CREATE TABLE IF NOT EXISTS settings (
-    key TEXT PRIMARY KEY,
-    value TEXT NOT NULL,
-    updated_at TEXT DEFAULT (datetime('now'))
-  );
-`);
-    process.on("exit", () => {
-      db.close();
-    });
-  }
-});
-
-// cli/local-cc/settings.ts
-function getInferenceProvider() {
-  const raw = getSetting(KEY);
-  return raw === "local-cc" ? "local-cc" : "inngest";
-}
-function setInferenceProvider(value) {
-  setSetting(KEY, value);
-}
-function isLocalCCEnabled() {
-  return getInferenceProvider() === "local-cc";
-}
-var KEY;
-var init_settings = __esm({
-  "cli/local-cc/settings.ts"() {
-    "use strict";
-    init_local();
-    KEY = "inference_provider";
-  }
-});
-
 // cli/local-cc/channelSource.ts
 var CHANNEL_PLUGIN_SOURCE;
 var init_channelSource = __esm({
@@ -3601,13 +3520,13 @@ await mcp.connect(new StdioServerTransport());
 });
 
 // cli/local-cc/install.ts
-import { existsSync as existsSync9, mkdirSync as mkdirSync7, writeFileSync as writeFileSync6, readFileSync as readFileSync6, chmodSync, copyFileSync, renameSync as renameSync3, unlinkSync as unlinkSync4, openSync, fsyncSync, closeSync } from "fs";
-import { join as join8 } from "path";
-import { homedir as homedir7 } from "os";
+import { existsSync as existsSync8, mkdirSync as mkdirSync6, writeFileSync as writeFileSync6, readFileSync as readFileSync6, chmodSync, copyFileSync, renameSync as renameSync3, unlinkSync as unlinkSync4, openSync, fsyncSync, closeSync } from "fs";
+import { join as join7 } from "path";
+import { homedir as homedir6 } from "os";
 import { spawnSync } from "child_process";
 function writePluginFiles() {
-  mkdirSync7(SESSION_DIR, { recursive: true });
-  mkdirSync7(PLUGIN_SETTINGS_DIR, { recursive: true });
+  mkdirSync6(SESSION_DIR, { recursive: true });
+  mkdirSync6(PLUGIN_SETTINGS_DIR, { recursive: true });
   writeFileSync6(PLUGIN_PATH, CHANNEL_PLUGIN_SOURCE, "utf-8");
   chmodSync(PLUGIN_PATH, 493);
   writeFileSync6(PLUGIN_PKG_PATH, PLUGIN_PACKAGE_JSON, "utf-8");
@@ -3639,7 +3558,7 @@ function runBunInstall() {
   }
 }
 function safelyMutateClaudeJson(mutator) {
-  if (!existsSync9(CLAUDE_JSON_PATH)) {
+  if (!existsSync8(CLAUDE_JSON_PATH)) {
     return;
   }
   const originalText = readFileSync6(CLAUDE_JSON_PATH, "utf-8");
@@ -3767,15 +3686,15 @@ var init_install = __esm({
   "cli/local-cc/install.ts"() {
     "use strict";
     init_channelSource();
-    CLAUDE_JSON_BACKUP_PATH = join8(homedir7(), ".claude.json.synkro-bak");
-    SESSION_DIR = join8(homedir7(), ".synkro", "cc_sessions");
-    PLUGIN_PATH = join8(SESSION_DIR, "synkro-channel.ts");
-    PLUGIN_PKG_PATH = join8(SESSION_DIR, "package.json");
-    PLUGIN_SETTINGS_DIR = join8(SESSION_DIR, ".claude");
-    PLUGIN_SETTINGS_PATH = join8(PLUGIN_SETTINGS_DIR, "settings.json");
-    PROJECT_MCP_PATH = join8(SESSION_DIR, ".mcp.json");
-    CLAUDE_JSON_PATH = join8(homedir7(), ".claude.json");
-    RUN_SCRIPT_PATH = join8(SESSION_DIR, "run-claude.sh");
+    CLAUDE_JSON_BACKUP_PATH = join7(homedir6(), ".claude.json.synkro-bak");
+    SESSION_DIR = join7(homedir6(), ".synkro", "cc_sessions");
+    PLUGIN_PATH = join7(SESSION_DIR, "synkro-channel.ts");
+    PLUGIN_PKG_PATH = join7(SESSION_DIR, "package.json");
+    PLUGIN_SETTINGS_DIR = join7(SESSION_DIR, ".claude");
+    PLUGIN_SETTINGS_PATH = join7(PLUGIN_SETTINGS_DIR, "settings.json");
+    PROJECT_MCP_PATH = join7(SESSION_DIR, ".mcp.json");
+    CLAUDE_JSON_PATH = join7(homedir6(), ".claude.json");
+    RUN_SCRIPT_PATH = join7(SESSION_DIR, "run-claude.sh");
     TMUX_SESSION_NAME = "synkro-local-cc";
     RUN_SCRIPT_SOURCE = `#!/usr/bin/env bash
 # Auto-generated by \`synkro install\`. Do not edit.
@@ -3827,8 +3746,8 @@ done
 
 // cli/local-cc/pueue.ts
 import { execFileSync, spawnSync as spawnSync2 } from "child_process";
-import { homedir as homedir8 } from "os";
-import { join as join9 } from "path";
+import { homedir as homedir7 } from "os";
+import { join as join8 } from "path";
 import { connect } from "net";
 function pueueAvailable() {
   const r = spawnSync2("pueue", ["--version"], { encoding: "utf-8" });
@@ -3883,7 +3802,7 @@ function startTask(opts = {}) {
   if (existing) {
     spawnSync2("pueue", ["remove", String(existing.id)], { encoding: "utf-8" });
   }
-  const runScript = join9(cwd, "run-claude.sh");
+  const runScript = join8(cwd, "run-claude.sh");
   const args2 = [
     "add",
     "--label",
@@ -3975,7 +3894,7 @@ var init_pueue = __esm({
     "use strict";
     TASK_LABEL = "synkro-local-cc";
     TMUX_SESSION = "synkro-local-cc";
-    SESSION_DIR2 = join9(homedir8(), ".synkro", "cc_sessions");
+    SESSION_DIR2 = join8(homedir7(), ".synkro", "cc_sessions");
     PueueError = class extends Error {
       constructor(message, cause) {
         super(message);
@@ -3987,189 +3906,453 @@ var init_pueue = __esm({
   }
 });
 
-// cli/commands/install.ts
-var install_exports = {};
-__export(install_exports, {
-  installCommand: () => installCommand,
-  parseArgs: () => parseArgs
-});
-import { existsSync as existsSync10, mkdirSync as mkdirSync8, writeFileSync as writeFileSync7, chmodSync as chmodSync2, readFileSync as readFileSync7, readdirSync } from "fs";
-import { homedir as homedir9 } from "os";
-import { join as join10 } from "path";
-import { execSync as execSync5 } from "child_process";
-import { createInterface as createInterface3 } from "readline";
-function sanitizeGatewayCandidate(raw) {
-  if (!raw) return void 0;
-  return /^https?:\/\//.test(raw) ? raw : void 0;
-}
-function parseArgs(argv) {
-  const opts = {};
-  for (const a of argv) {
-    if (a.startsWith("--api-key=")) opts.apiKey = a.slice("--api-key=".length);
-    else if (a.startsWith("--gateway=")) opts.gatewayUrl = a.slice("--gateway=".length);
-    else if (a === "--skip-auth") opts.skipAuth = true;
-    else if (a === "--no-mcp") opts.noMcp = true;
-    else if (a === "--force" || a === "-f") opts.force = true;
-    else if (a === "--link-repo") opts.linkRepo = true;
+// cli/local-cc/prompts.ts
+import { existsSync as existsSync9, readFileSync as readFileSync7 } from "fs";
+import { homedir as homedir8 } from "os";
+import { join as join9 } from "path";
+function loadCachedPrompts() {
+  if (_cached) return _cached;
+  if (!existsSync9(CACHE_PATH2)) {
+    throw new Error("Prompts cache not found. Run `synkro install` or `synkro update` first.");
   }
-  if (!opts.gatewayUrl) {
-    const fromEnv = sanitizeGatewayCandidate(process.env.SYNKRO_GATEWAY_URL);
-    if (fromEnv) opts.gatewayUrl = fromEnv;
+  try {
+    _cached = JSON.parse(readFileSync7(CACHE_PATH2, "utf-8"));
+    return _cached;
+  } catch {
+    throw new Error("Prompts cache is corrupted. Run `synkro update` to refresh.");
   }
-  return opts;
-}
-async function promptTranscriptConsent() {
-  const rl = createInterface3({ input: process.stdin, output: process.stdout });
-  return new Promise((resolve2) => {
-    rl.question(
-      "Would you like Synkro to use Claude Code session transcripts\nto generate guardrail rules and policies for your team? (Y/n) ",
-      (answer) => {
-        rl.close();
-        const trimmed = answer.trim().toLowerCase();
-        resolve2(trimmed === "" || trimmed === "y" || trimmed === "yes");
-      }
-    );
-  });
-}
-function ensureSynkroDir() {
-  mkdirSync8(SYNKRO_DIR3, { recursive: true });
-  mkdirSync8(HOOKS_DIR, { recursive: true });
-  mkdirSync8(BIN_DIR, { recursive: true });
-  mkdirSync8(OFFSETS_DIR, { recursive: true });
-}
-function writeHookScripts() {
-  const bashScriptPath = join10(HOOKS_DIR, "cc-bash-judge.sh");
-  const bashFollowupScriptPath = join10(HOOKS_DIR, "cc-bash-followup.sh");
-  const editCaptureScriptPath = join10(HOOKS_DIR, "cc-edit-capture.sh");
-  const editPrecheckScriptPath = join10(HOOKS_DIR, "cc-edit-precheck.sh");
-  const stopSummaryScriptPath = join10(HOOKS_DIR, "cc-stop-summary.sh");
-  const sessionStartScriptPath = join10(HOOKS_DIR, "cc-session-start.sh");
-  const transcriptSyncScriptPath = join10(HOOKS_DIR, "cc-transcript-sync.sh");
-  writeFileSync7(bashScriptPath, CC_BASH_JUDGE_SCRIPT, "utf-8");
-  writeFileSync7(bashFollowupScriptPath, CC_BASH_FOLLOWUP_SCRIPT, "utf-8");
-  writeFileSync7(editCaptureScriptPath, CC_EDIT_CAPTURE_SCRIPT, "utf-8");
-  writeFileSync7(editPrecheckScriptPath, CC_EDIT_PRECHECK_SCRIPT, "utf-8");
-  writeFileSync7(stopSummaryScriptPath, CC_STOP_SUMMARY_SCRIPT, "utf-8");
-  writeFileSync7(sessionStartScriptPath, CC_SESSION_START_SCRIPT, "utf-8");
-  writeFileSync7(transcriptSyncScriptPath, CC_TRANSCRIPT_SYNC_SCRIPT, "utf-8");
-  chmodSync2(bashScriptPath, 493);
-  chmodSync2(bashFollowupScriptPath, 493);
-  chmodSync2(editCaptureScriptPath, 493);
-  chmodSync2(editPrecheckScriptPath, 493);
-  chmodSync2(stopSummaryScriptPath, 493);
-  chmodSync2(sessionStartScriptPath, 493);
-  chmodSync2(transcriptSyncScriptPath, 493);
-  return {
-    bashScript: bashScriptPath,
-    bashFollowupScript: bashFollowupScriptPath,
-    editCaptureScript: editCaptureScriptPath,
-    editPrecheckScript: editPrecheckScriptPath,
-    stopSummaryScript: stopSummaryScriptPath,
-    sessionStartScript: sessionStartScriptPath,
-    transcriptSyncScript: transcriptSyncScriptPath
-  };
-}
-function sanitizeConfigValue(raw, maxLen = 256) {
-  if (!raw) return "";
-  return raw.replace(/[^\x20-\x7E]/g, "").slice(0, maxLen);
 }
-function shellQuoteSingle(value) {
-  return `'${value.replace(/'/g, "'\\''")}'`;
+function getPrimer(role) {
+  const cache = loadCachedPrompts();
+  const primer = role === "grade-edit" ? cache.grader_primer_edit : cache.grader_primer_bash;
+  if (!primer) {
+    throw new Error(`No cached primer for role "${role}". Run \`synkro update\` to refresh prompts.`);
+  }
+  return primer;
 }
-function resolveSynkroBundle() {
-  const scriptPath = process.argv[1];
-  if (scriptPath && existsSync10(scriptPath)) return scriptPath;
-  return null;
+function buildChannelContent(role, payload) {
+  return `${getPrimer(role)}
+
+---
+PAYLOAD (the input to evaluate):
+
+${payload}`;
 }
-function writeConfigEnv(opts) {
-  const credsPath = join10(SYNKRO_DIR3, "credentials.json");
-  const safeGateway = sanitizeConfigValue(opts.gatewayUrl);
-  const safeUserId = sanitizeConfigValue(opts.userId);
-  const safeOrgId = sanitizeConfigValue(opts.orgId);
-  const safeEmail = sanitizeConfigValue(opts.email);
-  const safeTier = sanitizeConfigValue(opts.tier ?? "pro", 32);
-  const safeInference = sanitizeConfigValue(opts.inference ?? "fast", 16);
-  const safeSynkroBin = sanitizeConfigValue(opts.synkroBin ?? "", 1024);
-  const lines = [
-    "# Synkro CLI config (managed by synkro install)",
-    "# JWT auth \u2014 the hook scripts read SYNKRO_CREDENTIALS_PATH at runtime",
-    "# and send Authorization: Bearer <access_token> on every gateway call.",
-    `SYNKRO_GATEWAY_URL=${shellQuoteSingle(safeGateway)}`,
-    `SYNKRO_CREDENTIALS_PATH=${shellQuoteSingle(credsPath)}`,
-    `SYNKRO_TIER=${shellQuoteSingle(safeTier)}`,
-    `SYNKRO_INFERENCE=${shellQuoteSingle(safeInference)}`,
-    `SYNKRO_VERSION=${shellQuoteSingle("1.4.0")}`
-  ];
-  if (safeSynkroBin) lines.push(`SYNKRO_CLI_BIN=${shellQuoteSingle(safeSynkroBin)}`);
-  if (safeUserId) lines.push(`SYNKRO_USER_ID=${shellQuoteSingle(safeUserId)}`);
-  if (safeOrgId) lines.push(`SYNKRO_ORG_ID=${shellQuoteSingle(safeOrgId)}`);
-  if (safeEmail) lines.push(`SYNKRO_EMAIL=${shellQuoteSingle(safeEmail)}`);
-  if (opts.transcriptConsent !== void 0) {
-    lines.push(`SYNKRO_TRANSCRIPT_CONSENT=${shellQuoteSingle(opts.transcriptConsent ? "yes" : "no")}`);
+var CACHE_PATH2, _cached;
+var init_prompts = __esm({
+  "cli/local-cc/prompts.ts"() {
+    "use strict";
+    CACHE_PATH2 = join9(homedir8(), ".synkro", "prompts", "judge-prompts.json");
+    _cached = null;
   }
-  lines.push("");
-  writeFileSync7(CONFIG_PATH2, lines.join("\n"), "utf-8");
-  chmodSync2(CONFIG_PATH2, 384);
+});
+
+// cli/local-cc/turnLog.ts
+import { appendFileSync, existsSync as existsSync10, mkdirSync as mkdirSync7, openSync as openSync2, readFileSync as readFileSync8, readSync, closeSync as closeSync2, statSync, watchFile, unwatchFile } from "fs";
+import { dirname as dirname4, join as join10 } from "path";
+import { homedir as homedir9 } from "os";
+function truncate(s, max = PREVIEW_MAX) {
+  if (s.length <= max) return s;
+  return s.slice(0, max) + "\u2026 [+" + (s.length - max) + " chars]";
 }
-function collectLocalMetadata() {
-  const meta = { platform: process.platform };
-  try {
-    meta.display_name = execSync5("git config user.name", { encoding: "utf-8", timeout: 3e3 }).trim();
-  } catch {
-  }
-  try {
-    const remote = execSync5("git remote get-url origin", { encoding: "utf-8", timeout: 3e3 }).trim();
-    const sshMatch = remote.match(/^git@[^:]+:(.+?)(?:\.git)?$/);
-    const httpMatch = remote.match(/^https?:\/\/[^/]+\/(.+?)(?:\.git)?$/);
-    const m = sshMatch || httpMatch;
-    if (m) meta.active_repo = m[1];
-  } catch {
-  }
-  try {
-    meta.cc_version = execSync5("claude --version", { encoding: "utf-8", timeout: 5e3 }).trim().split("\n")[0];
-  } catch {
-  }
-  const claudeDir = join10(homedir9(), ".claude");
+function extractSeverity(result) {
+  const m = result.match(/<synkro-(?:verdict|intent)>([\s\S]*?)<\/synkro-(?:verdict|intent)>/);
+  if (!m) return void 0;
   try {
-    const settings = JSON.parse(readFileSync7(join10(claudeDir, "settings.json"), "utf-8"));
-    const plugins = Object.keys(settings.enabledPlugins ?? {}).filter((k) => settings.enabledPlugins[k]);
-    if (plugins.length) meta.enabled_plugins = plugins;
-    if (settings.permissions?.defaultMode) meta.permissions_mode = settings.permissions.defaultMode;
+    const obj = JSON.parse(m[1]);
+    if (obj.severity) return String(obj.severity);
+    if (typeof obj.ok === "boolean") return obj.ok ? "ok" : "violations";
+    if (obj.type) return String(obj.type);
+    if (obj.verdict) return String(obj.verdict);
   } catch {
   }
+  return void 0;
+}
+function appendTurn(args2) {
   try {
-    const mcpCache = JSON.parse(readFileSync7(join10(claudeDir, "mcp-needs-auth-cache.json"), "utf-8"));
-    const mcpNames = Object.keys(mcpCache);
-    if (mcpNames.length) meta.mcp_servers = mcpNames;
+    mkdirSync7(dirname4(TURN_LOG_PATH), { recursive: true });
+    const entry = {
+      ts: new Date(args2.startedAt).toISOString(),
+      role: args2.role,
+      duration_ms: Date.now() - args2.startedAt,
+      status: args2.status,
+      request_preview: truncate(args2.request),
+      response_preview: args2.result ? truncate(args2.result) : "",
+      severity: args2.result ? extractSeverity(args2.result) : void 0,
+      error: args2.error
+    };
+    appendFileSync(TURN_LOG_PATH, JSON.stringify(entry) + "\n", "utf-8");
   } catch {
   }
+}
+function readRecentTurns(n = 20) {
+  if (!existsSync10(TURN_LOG_PATH)) return [];
   try {
-    const mcpList = execSync5("claude mcp list 2>/dev/null", { encoding: "utf-8", timeout: 1e4 });
-    const connected = mcpList.split("\n").filter((l) => l.includes("Connected")).map((l) => l.split(":")[0].trim()).filter(Boolean);
-    if (connected.length) meta.mcp_servers_connected = connected;
+    const size = statSync(TURN_LOG_PATH).size;
+    if (size === 0) return [];
+    const text = readFileSync8(TURN_LOG_PATH, "utf-8");
+    const lines = text.split("\n").filter(Boolean);
+    const lastN = lines.slice(-n).reverse();
+    return lastN.map((line) => {
+      try {
+        return JSON.parse(line);
+      } catch {
+        return null;
+      }
+    }).filter((x) => x !== null);
   } catch {
+    return [];
   }
+}
+function followTurns(onEntry) {
   try {
-    const sessionsDir = join10(claudeDir, "sessions");
-    const files = readdirSync(sessionsDir).filter((f) => f.endsWith(".json")).slice(-5);
-    for (const f of files) {
-      const s = JSON.parse(readFileSync7(join10(sessionsDir, f), "utf-8"));
-      if (s.version) {
-        meta.cc_version = meta.cc_version || s.version;
-        break;
-      }
+    mkdirSync7(dirname4(TURN_LOG_PATH), { recursive: true });
+    if (!existsSync10(TURN_LOG_PATH)) {
+      appendFileSync(TURN_LOG_PATH, "", "utf-8");
     }
   } catch {
   }
-  return meta;
-}
-async function fetchUserProfile(gatewayUrl, token) {
-  try {
-    const resp = await fetch(`${gatewayUrl}/api/v1/cli/me`, {
-      headers: { "Authorization": `Bearer ${token}` }
-    });
-    if (!resp.ok) return { tier: "pro", inference: "fast" };
-    const data = await resp.json();
+  let lastSize = (() => {
+    try {
+      return statSync(TURN_LOG_PATH).size;
+    } catch {
+      return 0;
+    }
+  })();
+  let pendingPartial = "";
+  const drainNewBytes = (from, to) => {
+    if (to <= from) return;
+    let fd = null;
+    try {
+      fd = openSync2(TURN_LOG_PATH, "r");
+      const len = to - from;
+      const buf = Buffer.alloc(len);
+      readSync(fd, buf, 0, len, from);
+      const text = pendingPartial + buf.toString("utf-8");
+      const lastNewline = text.lastIndexOf("\n");
+      if (lastNewline === -1) {
+        pendingPartial = text;
+        return;
+      }
+      const complete = text.slice(0, lastNewline);
+      pendingPartial = text.slice(lastNewline + 1);
+      for (const line of complete.split("\n")) {
+        if (!line) continue;
+        try {
+          onEntry(JSON.parse(line));
+        } catch {
+        }
+      }
+    } catch {
+    } finally {
+      if (fd !== null) {
+        try {
+          closeSync2(fd);
+        } catch {
+        }
+      }
+    }
+  };
+  watchFile(TURN_LOG_PATH, { interval: 250 }, (curr, prev) => {
+    if (curr.size < lastSize) {
+      lastSize = 0;
+      pendingPartial = "";
+    }
+    if (curr.size > lastSize) {
+      drainNewBytes(lastSize, curr.size);
+      lastSize = curr.size;
+    }
+  });
+  return () => unwatchFile(TURN_LOG_PATH);
+}
+var TURN_LOG_PATH, PREVIEW_MAX;
+var init_turnLog = __esm({
+  "cli/local-cc/turnLog.ts"() {
+    "use strict";
+    TURN_LOG_PATH = join10(homedir9(), ".synkro", "cc_sessions", "turns.log");
+    PREVIEW_MAX = 400;
+  }
+});
+
+// cli/local-cc/client.ts
+import { request as httpRequest } from "http";
+import { connect as connect2 } from "net";
+async function submitToChannel(role, payload, opts = {}) {
+  const content = buildChannelContent(role, payload);
+  const body = JSON.stringify({ role, content });
+  const timeoutMs = opts.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+  const startedAt = Date.now();
+  try {
+    const result = await new Promise((resolve2, reject) => {
+      const req = httpRequest({
+        host: CHANNEL_HOST,
+        port: CHANNEL_PORT,
+        method: "POST",
+        path: "/submit",
+        headers: {
+          "Content-Type": "application/json",
+          "Content-Length": Buffer.byteLength(body)
+        },
+        timeout: timeoutMs
+      }, (res) => {
+        const chunks = [];
+        res.on("data", (c) => chunks.push(c));
+        res.on("end", () => {
+          const text = Buffer.concat(chunks).toString("utf-8");
+          if (res.statusCode !== 200) {
+            reject(new LocalCCError(`channel returned ${res.statusCode}: ${text.slice(0, 500)}`));
+            return;
+          }
+          try {
+            const parsed = JSON.parse(text);
+            if (parsed.error) {
+              reject(new LocalCCError(parsed.error));
+              return;
+            }
+            resolve2(String(parsed.result ?? ""));
+          } catch (err) {
+            reject(new LocalCCError(`malformed channel response: ${text.slice(0, 200)}`, err));
+          }
+        });
+      });
+      req.on("timeout", () => {
+        req.destroy(new LocalCCError(`channel request timed out after ${timeoutMs}ms`));
+      });
+      req.on("error", (err) => {
+        const msg = err.code === "ECONNREFUSED" ? `channel connection refused at ${CHANNEL_HOST}:${CHANNEL_PORT} (is the pueue task running?)` : `channel request failed: ${err.message}`;
+        reject(new LocalCCError(msg, err));
+      });
+      req.write(body);
+      req.end();
+    });
+    appendTurn({ startedAt, role, request: payload, result, status: "ok" });
+    return result;
+  } catch (err) {
+    const message = err.message ?? String(err);
+    const status = /timed out/i.test(message) ? "timeout" : "error";
+    appendTurn({ startedAt, role, request: payload, status, error: message });
+    throw err;
+  }
+}
+function isChannelAvailable(timeoutMs = 500) {
+  return new Promise((resolve2) => {
+    const sock = connect2(CHANNEL_PORT, CHANNEL_HOST);
+    const done = (ok) => {
+      try {
+        sock.destroy();
+      } catch {
+      }
+      resolve2(ok);
+    };
+    sock.once("connect", () => done(true));
+    sock.once("error", () => done(false));
+    sock.setTimeout(timeoutMs, () => done(false));
+  });
+}
+var CHANNEL_HOST, CHANNEL_PORT, DEFAULT_TIMEOUT_MS, LocalCCError;
+var init_client = __esm({
+  "cli/local-cc/client.ts"() {
+    "use strict";
+    init_prompts();
+    init_turnLog();
+    CHANNEL_HOST = "127.0.0.1";
+    CHANNEL_PORT = parseInt(process.env.SYNKRO_CHANNEL_PORT || "8929", 10);
+    DEFAULT_TIMEOUT_MS = 9e4;
+    LocalCCError = class extends Error {
+      constructor(message, cause) {
+        super(message);
+        this.cause = cause;
+        this.name = "LocalCCError";
+      }
+      cause;
+    };
+  }
+});
+
+// cli/commands/install.ts
+var install_exports = {};
+__export(install_exports, {
+  installCommand: () => installCommand,
+  parseArgs: () => parseArgs
+});
+import { existsSync as existsSync11, mkdirSync as mkdirSync8, writeFileSync as writeFileSync7, chmodSync as chmodSync2, readFileSync as readFileSync9, readdirSync } from "fs";
+import { homedir as homedir10 } from "os";
+import { join as join11 } from "path";
+import { execSync as execSync5 } from "child_process";
+import { createInterface as createInterface3 } from "readline";
+function sanitizeGatewayCandidate(raw) {
+  if (!raw) return void 0;
+  return /^https?:\/\//.test(raw) ? raw : void 0;
+}
+function parseArgs(argv) {
+  const opts = {};
+  for (const a of argv) {
+    if (a.startsWith("--api-key=")) opts.apiKey = a.slice("--api-key=".length);
+    else if (a.startsWith("--gateway=")) opts.gatewayUrl = a.slice("--gateway=".length);
+    else if (a === "--skip-auth") opts.skipAuth = true;
+    else if (a === "--no-mcp") opts.noMcp = true;
+    else if (a === "--force" || a === "-f") opts.force = true;
+    else if (a === "--link-repo") opts.linkRepo = true;
+  }
+  if (!opts.gatewayUrl) {
+    const fromEnv = sanitizeGatewayCandidate(process.env.SYNKRO_GATEWAY_URL);
+    if (fromEnv) opts.gatewayUrl = fromEnv;
+  }
+  return opts;
+}
+async function promptTranscriptConsent() {
+  const rl = createInterface3({ input: process.stdin, output: process.stdout });
+  return new Promise((resolve2) => {
+    rl.question(
+      "Would you like Synkro to use Claude Code session transcripts\nto generate guardrail rules and policies for your team? (Y/n) ",
+      (answer) => {
+        rl.close();
+        const trimmed = answer.trim().toLowerCase();
+        resolve2(trimmed === "" || trimmed === "y" || trimmed === "yes");
+      }
+    );
+  });
+}
+function ensureSynkroDir() {
+  mkdirSync8(SYNKRO_DIR2, { recursive: true });
+  mkdirSync8(HOOKS_DIR, { recursive: true });
+  mkdirSync8(BIN_DIR, { recursive: true });
+  mkdirSync8(OFFSETS_DIR, { recursive: true });
+}
+function writeHookScripts() {
+  const bashScriptPath = join11(HOOKS_DIR, "cc-bash-judge.sh");
+  const bashFollowupScriptPath = join11(HOOKS_DIR, "cc-bash-followup.sh");
+  const editCaptureScriptPath = join11(HOOKS_DIR, "cc-edit-capture.sh");
+  const editPrecheckScriptPath = join11(HOOKS_DIR, "cc-edit-precheck.sh");
+  const stopSummaryScriptPath = join11(HOOKS_DIR, "cc-stop-summary.sh");
+  const sessionStartScriptPath = join11(HOOKS_DIR, "cc-session-start.sh");
+  const transcriptSyncScriptPath = join11(HOOKS_DIR, "cc-transcript-sync.sh");
+  writeFileSync7(bashScriptPath, CC_BASH_JUDGE_SCRIPT, "utf-8");
+  writeFileSync7(bashFollowupScriptPath, CC_BASH_FOLLOWUP_SCRIPT, "utf-8");
+  writeFileSync7(editCaptureScriptPath, CC_EDIT_CAPTURE_SCRIPT, "utf-8");
+  writeFileSync7(editPrecheckScriptPath, CC_EDIT_PRECHECK_SCRIPT, "utf-8");
+  writeFileSync7(stopSummaryScriptPath, CC_STOP_SUMMARY_SCRIPT, "utf-8");
+  writeFileSync7(sessionStartScriptPath, CC_SESSION_START_SCRIPT, "utf-8");
+  writeFileSync7(transcriptSyncScriptPath, CC_TRANSCRIPT_SYNC_SCRIPT, "utf-8");
+  chmodSync2(bashScriptPath, 493);
+  chmodSync2(bashFollowupScriptPath, 493);
+  chmodSync2(editCaptureScriptPath, 493);
+  chmodSync2(editPrecheckScriptPath, 493);
+  chmodSync2(stopSummaryScriptPath, 493);
+  chmodSync2(sessionStartScriptPath, 493);
+  chmodSync2(transcriptSyncScriptPath, 493);
+  return {
+    bashScript: bashScriptPath,
+    bashFollowupScript: bashFollowupScriptPath,
+    editCaptureScript: editCaptureScriptPath,
+    editPrecheckScript: editPrecheckScriptPath,
+    stopSummaryScript: stopSummaryScriptPath,
+    sessionStartScript: sessionStartScriptPath,
+    transcriptSyncScript: transcriptSyncScriptPath
+  };
+}
+function sanitizeConfigValue(raw, maxLen = 256) {
+  if (!raw) return "";
+  return raw.replace(/[^\x20-\x7E]/g, "").slice(0, maxLen);
+}
+function shellQuoteSingle(value) {
+  return `'${value.replace(/'/g, "'\\''")}'`;
+}
+function resolveSynkroBundle() {
+  const scriptPath = process.argv[1];
+  if (scriptPath && existsSync11(scriptPath)) return scriptPath;
+  return null;
+}
+function writeConfigEnv(opts) {
+  const credsPath = join11(SYNKRO_DIR2, "credentials.json");
+  const safeGateway = sanitizeConfigValue(opts.gatewayUrl);
+  const safeUserId = sanitizeConfigValue(opts.userId);
+  const safeOrgId = sanitizeConfigValue(opts.orgId);
+  const safeEmail = sanitizeConfigValue(opts.email);
+  const safeTier = sanitizeConfigValue(opts.tier ?? "pro", 32);
+  const safeInference = sanitizeConfigValue(opts.inference ?? "fast", 16);
+  const safeSynkroBin = sanitizeConfigValue(opts.synkroBin ?? "", 1024);
+  const lines = [
+    "# Synkro CLI config (managed by synkro install)",
+    "# JWT auth \u2014 the hook scripts read SYNKRO_CREDENTIALS_PATH at runtime",
+    "# and send Authorization: Bearer <access_token> on every gateway call.",
+    `SYNKRO_GATEWAY_URL=${shellQuoteSingle(safeGateway)}`,
+    `SYNKRO_CREDENTIALS_PATH=${shellQuoteSingle(credsPath)}`,
+    `SYNKRO_TIER=${shellQuoteSingle(safeTier)}`,
+    `SYNKRO_INFERENCE=${shellQuoteSingle(safeInference)}`,
+    `SYNKRO_VERSION=${shellQuoteSingle("1.4.2")}`
+  ];
+  if (safeSynkroBin) lines.push(`SYNKRO_CLI_BIN=${shellQuoteSingle(safeSynkroBin)}`);
+  if (safeUserId) lines.push(`SYNKRO_USER_ID=${shellQuoteSingle(safeUserId)}`);
+  if (safeOrgId) lines.push(`SYNKRO_ORG_ID=${shellQuoteSingle(safeOrgId)}`);
+  if (safeEmail) lines.push(`SYNKRO_EMAIL=${shellQuoteSingle(safeEmail)}`);
+  if (opts.transcriptConsent !== void 0) {
+    lines.push(`SYNKRO_TRANSCRIPT_CONSENT=${shellQuoteSingle(opts.transcriptConsent ? "yes" : "no")}`);
+  }
+  lines.push(`SYNKRO_LOCAL_INFERENCE=${shellQuoteSingle(opts.localInference ? "yes" : "no")}`);
+  lines.push("");
+  writeFileSync7(CONFIG_PATH2, lines.join("\n"), "utf-8");
+  chmodSync2(CONFIG_PATH2, 384);
+}
+function collectLocalMetadata() {
+  const meta = { platform: process.platform };
+  try {
+    meta.display_name = execSync5("git config user.name", { encoding: "utf-8", timeout: 3e3 }).trim();
+  } catch {
+  }
+  try {
+    const remote = execSync5("git remote get-url origin", { encoding: "utf-8", timeout: 3e3 }).trim();
+    const sshMatch = remote.match(/^git@[^:]+:(.+?)(?:\.git)?$/);
+    const httpMatch = remote.match(/^https?:\/\/[^/]+\/(.+?)(?:\.git)?$/);
+    const m = sshMatch || httpMatch;
+    if (m) meta.active_repo = m[1];
+  } catch {
+  }
+  try {
+    meta.cc_version = execSync5("claude --version", { encoding: "utf-8", timeout: 5e3 }).trim().split("\n")[0];
+  } catch {
+  }
+  const claudeDir = join11(homedir10(), ".claude");
+  try {
+    const settings = JSON.parse(readFileSync9(join11(claudeDir, "settings.json"), "utf-8"));
+    const plugins = Object.keys(settings.enabledPlugins ?? {}).filter((k) => settings.enabledPlugins[k]);
+    if (plugins.length) meta.enabled_plugins = plugins;
+    if (settings.permissions?.defaultMode) meta.permissions_mode = settings.permissions.defaultMode;
+  } catch {
+  }
+  try {
+    const mcpCache = JSON.parse(readFileSync9(join11(claudeDir, "mcp-needs-auth-cache.json"), "utf-8"));
+    const mcpNames = Object.keys(mcpCache);
+    if (mcpNames.length) meta.mcp_servers = mcpNames;
+  } catch {
+  }
+  try {
+    const mcpList = execSync5("claude mcp list 2>/dev/null", { encoding: "utf-8", timeout: 1e4 });
+    const connected = mcpList.split("\n").filter((l) => l.includes("Connected")).map((l) => l.split(":")[0].trim()).filter(Boolean);
+    if (connected.length) meta.mcp_servers_connected = connected;
+  } catch {
+  }
+  try {
+    const sessionsDir = join11(claudeDir, "sessions");
+    const files = readdirSync(sessionsDir).filter((f) => f.endsWith(".json")).slice(-5);
+    for (const f of files) {
+      const s = JSON.parse(readFileSync9(join11(sessionsDir, f), "utf-8"));
+      if (s.version) {
+        meta.cc_version = meta.cc_version || s.version;
+        break;
+      }
+    }
+  } catch {
+  }
+  return meta;
+}
+async function fetchUserProfile(gatewayUrl, token) {
+  try {
+    const resp = await fetch(`${gatewayUrl}/api/v1/cli/me`, {
+      headers: { "Authorization": `Bearer ${token}` }
+    });
+    if (!resp.ok) return { tier: "pro", inference: "fast", localInference: false };
+    const data = await resp.json();
     const meta = collectLocalMetadata();
     fetch(`${gatewayUrl}/api/v1/cli/me`, {
       method: "PATCH",
@@ -4179,10 +4362,11 @@ async function fetchUserProfile(gatewayUrl, token) {
     });
     return {
       tier: data.plan_tier ?? "pro",
-      inference: data.fast_inference ? "fast" : "standard"
+      inference: data.fast_inference ? "fast" : "standard",
+      localInference: !!data.local_inference
     };
   } catch {
-    return { tier: "pro", inference: "fast" };
+    return { tier: "pro", inference: "fast", localInference: false };
   }
 }
 function assertGatewayAllowed(gatewayUrl) {
@@ -4208,19 +4392,19 @@ function assertGatewayAllowed(gatewayUrl) {
 }
 function isAlreadyInstalled() {
   const requiredScripts = [
-    join10(HOOKS_DIR, "cc-bash-judge.sh"),
-    join10(HOOKS_DIR, "cc-bash-followup.sh"),
-    join10(HOOKS_DIR, "cc-edit-precheck.sh"),
-    join10(HOOKS_DIR, "cc-edit-capture.sh"),
-    join10(HOOKS_DIR, "cc-stop-summary.sh"),
-    join10(HOOKS_DIR, "cc-session-start.sh")
+    join11(HOOKS_DIR, "cc-bash-judge.sh"),
+    join11(HOOKS_DIR, "cc-bash-followup.sh"),
+    join11(HOOKS_DIR, "cc-edit-precheck.sh"),
+    join11(HOOKS_DIR, "cc-edit-capture.sh"),
+    join11(HOOKS_DIR, "cc-stop-summary.sh"),
+    join11(HOOKS_DIR, "cc-session-start.sh")
   ];
-  if (!requiredScripts.every((p) => existsSync10(p))) return false;
-  if (!existsSync10(CONFIG_PATH2)) return false;
-  const settingsPath = join10(homedir9(), ".claude", "settings.json");
-  if (!existsSync10(settingsPath)) return false;
+  if (!requiredScripts.every((p) => existsSync11(p))) return false;
+  if (!existsSync11(CONFIG_PATH2)) return false;
+  const settingsPath = join11(homedir10(), ".claude", "settings.json");
+  if (!existsSync11(settingsPath)) return false;
   try {
-    const settings = JSON.parse(readFileSync7(settingsPath, "utf-8"));
+    const settings = JSON.parse(readFileSync9(settingsPath, "utf-8"));
     const hooks = settings?.hooks;
     if (!hooks || typeof hooks !== "object") return false;
     const hasManaged = (kind) => Array.isArray(hooks[kind]) && hooks[kind].some((entry) => entry?.__synkro_managed__ === true);
@@ -4328,9 +4512,9 @@ async function installCommand(opts = {}) {
   console.log(`  ${scripts.transcriptSyncScript}
 `);
   for (const mode of ["edit", "bash"]) {
-    const pidFile = join10(SYNKRO_DIR3, "daemon", mode, "daemon.pid");
+    const pidFile = join11(SYNKRO_DIR2, "daemon", mode, "daemon.pid");
     try {
-      const pid = parseInt(readFileSync7(pidFile, "utf-8").trim(), 10);
+      const pid = parseInt(readFileSync9(pidFile, "utf-8").trim(), 10);
       if (pid > 0) {
         process.kill(pid, "SIGTERM");
         console.log(`Stopped stale ${mode} grader daemon (pid ${pid})`);
@@ -4338,20 +4522,6 @@ async function installCommand(opts = {}) {
     } catch {
     }
   }
-  if (isLocalCCEnabled()) {
-    try {
-      assertClaudeInstalled();
-      assertPueueInstalled();
-      const r = installLocalCC();
-      console.log(`Installed local-CC channel plugin at ${r.pluginPath}`);
-      const t = ensureRunning();
-      console.log(`Local-CC pueue task: id=${t.id} status=${t.status}
-`);
-    } catch (err) {
-      console.warn(`  \u26A0 Local-CC setup skipped: ${err.message}`);
-      console.warn("    Run `synkro local-cc enable` after fixing the issue.\n");
-    }
-  }
   let transcriptConsent = true;
   if (process.stdin.isTTY) {
     transcriptConsent = await promptTranscriptConsent();
@@ -4418,9 +4588,10 @@ async function installCommand(opts = {}) {
   }
   const profile = await fetchUserProfile(gatewayUrl, token);
   const synkroBundle = resolveSynkroBundle();
-  writeConfigEnv({ gatewayUrl, userId, orgId, email, tier: profile.tier, inference: profile.inference, synkroBin: synkroBundle, transcriptConsent });
+  writeConfigEnv({ gatewayUrl, userId, orgId, email, tier: profile.tier, inference: profile.inference, synkroBin: synkroBundle, transcriptConsent, localInference: profile.localInference });
   console.log(`Wrote config to ${CONFIG_PATH2}`);
   console.log(`  inference: ${profile.inference} (server-side grading)`);
+  if (profile.localInference) console.log(`  local inference: enabled (gradingProvider=claude-code)`);
   if (synkroBundle) console.log(`  SYNKRO_CLI_BIN=${synkroBundle}`);
   else console.warn("  \u26A0 Could not resolve synkro bundle path; hooks will fall back to PATH lookup of `synkro`.");
   try {
@@ -4430,6 +4601,26 @@ async function installCommand(opts = {}) {
     console.warn(`  \u26A0 Could not cache judge prompts: ${err.message}`);
   }
   console.log();
+  if (profile.localInference) {
+    try {
+      assertClaudeInstalled();
+      assertPueueInstalled();
+      assertTmuxInstalled();
+      const r = installLocalCC();
+      console.log(`Installed local-CC channel plugin at ${r.pluginPath}`);
+      const t = ensureRunning();
+      console.log(`Local-CC pueue task: id=${t.id} status=${t.status}`);
+      console.log("Waiting for channel...");
+      const ready = await waitForChannelReady(CHANNEL_PORT, 6e4, CHANNEL_HOST);
+      if (ready) console.log(`  channel ready at ${CHANNEL_HOST}:${CHANNEL_PORT}
+`);
+      else console.warn(`  \u26A0 channel did not come up within 60s \u2014 check \`synkro local-cc logs\`
+`);
+    } catch (err) {
+      console.warn(`  \u26A0 Local-CC setup skipped: ${err.message}`);
+      console.warn("    Install pueue, tmux, and claude, then re-run install.\n");
+    }
+  }
   if (transcriptConsent) {
     try {
       const repo = detectGitRepo2();
@@ -4476,17 +4667,17 @@ function detectGitRepo2() {
 function getClaudeProjectsFolder() {
   const cwd = process.cwd();
   const sanitized = "-" + cwd.replace(/\//g, "-");
-  const projectsDir = join10(homedir9(), ".claude", "projects", sanitized);
-  return existsSync10(projectsDir) ? projectsDir : null;
+  const projectsDir = join11(homedir10(), ".claude", "projects", sanitized);
+  return existsSync11(projectsDir) ? projectsDir : null;
 }
 function extractSessionInsights(projectsDir) {
   const insights = [];
   const files = readdirSync(projectsDir).filter((f) => f.endsWith(".jsonl"));
   for (const file of files) {
     const sessionId = file.replace(".jsonl", "");
-    const filePath = join10(projectsDir, file);
+    const filePath = join11(projectsDir, file);
     try {
-      const content = readFileSync7(filePath, "utf-8");
+      const content = readFileSync9(filePath, "utf-8");
       const lines = content.split("\n").filter(Boolean);
       for (let i = 0; i < lines.length; i++) {
         try {
@@ -4562,7 +4753,7 @@ function extractTextContent(content) {
   return "";
 }
 function parseTranscriptFile(filePath) {
-  const content = readFileSync7(filePath, "utf-8");
+  const content = readFileSync9(filePath, "utf-8");
   const lines = content.split("\n").filter(Boolean);
   const messages = [];
   for (let i = 0; i < lines.length; i++) {
@@ -4613,7 +4804,7 @@ async function syncTranscriptsBulk(gatewayUrl, token, repo) {
     const sessions = [];
     for (const file of batch) {
       const sessionId = file.replace(".jsonl", "");
-      const filePath = join10(projectsDir, file);
+      const filePath = join11(projectsDir, file);
       try {
         const allMessages = parseTranscriptFile(filePath);
         const messages = allMessages.length > maxMessagesPerSession ? allMessages.slice(-maxMessagesPerSession) : allMessages;
@@ -4642,18 +4833,18 @@ async function syncTranscriptsBulk(gatewayUrl, token, repo) {
     }
     for (const file of batch) {
       const sessionId = file.replace(".jsonl", "");
-      const filePath = join10(projectsDir, file);
+      const filePath = join11(projectsDir, file);
       try {
-        const content = readFileSync7(filePath, "utf-8");
+        const content = readFileSync9(filePath, "utf-8");
         const lineCount = content.split("\n").filter(Boolean).length;
-        writeFileSync7(join10(OFFSETS_DIR, sessionId), String(lineCount), "utf-8");
+        writeFileSync7(join11(OFFSETS_DIR, sessionId), String(lineCount), "utf-8");
       } catch {
       }
     }
   }
   return { sessions: totalSessions, messages: totalMessages };
 }
-var SYNKRO_DIR3, HOOKS_DIR, BIN_DIR, CONFIG_PATH2, OFFSETS_DIR;
+var SYNKRO_DIR2, HOOKS_DIR, BIN_DIR, CONFIG_PATH2, OFFSETS_DIR;
 var init_install2 = __esm({
   "cli/commands/install.ts"() {
     "use strict";
@@ -4666,14 +4857,14 @@ var init_install2 = __esm({
     init_projects();
     init_setupGithub();
     init_promptFetcher();
-    init_settings();
     init_install();
     init_pueue();
-    SYNKRO_DIR3 = join10(homedir9(), ".synkro");
-    HOOKS_DIR = join10(SYNKRO_DIR3, "hooks");
-    BIN_DIR = join10(SYNKRO_DIR3, "bin");
-    CONFIG_PATH2 = join10(SYNKRO_DIR3, "config.env");
-    OFFSETS_DIR = join10(SYNKRO_DIR3, ".transcript-offsets");
+    init_client();
+    SYNKRO_DIR2 = join11(homedir10(), ".synkro");
+    HOOKS_DIR = join11(SYNKRO_DIR2, "hooks");
+    BIN_DIR = join11(SYNKRO_DIR2, "bin");
+    CONFIG_PATH2 = join11(SYNKRO_DIR2, "config.env");
+    OFFSETS_DIR = join11(SYNKRO_DIR2, ".transcript-offsets");
   }
 });
 
@@ -4748,14 +4939,14 @@ var init_logout = __esm({
 var status_exports = {};
 __export(status_exports, {
   statusCommand: () => statusCommand
-});
-import { existsSync as existsSync11, readFileSync as readFileSync8 } from "fs";
-import { homedir as homedir10 } from "os";
-import { join as join11 } from "path";
+});
+import { existsSync as existsSync12, readFileSync as readFileSync10 } from "fs";
+import { homedir as homedir11 } from "os";
+import { join as join12 } from "path";
 function readConfigEnv() {
-  if (!existsSync11(CONFIG_PATH3)) return {};
+  if (!existsSync12(CONFIG_PATH3)) return {};
   const out = {};
-  const raw = readFileSync8(CONFIG_PATH3, "utf-8");
+  const raw = readFileSync10(CONFIG_PATH3, "utf-8");
   for (const line of raw.split("\n")) {
     const trimmed = line.trim();
     if (!trimmed || trimmed.startsWith("#")) continue;
@@ -4828,19 +5019,19 @@ async function statusCommand() {
     }
   }
   console.log();
-  const bashScript = join11(SYNKRO_DIR4, "hooks", "cc-bash-judge.sh");
-  const bashFollowupScript = join11(SYNKRO_DIR4, "hooks", "cc-bash-followup.sh");
-  const editPrecheckScript = join11(SYNKRO_DIR4, "hooks", "cc-edit-precheck.sh");
-  const editCaptureScript = join11(SYNKRO_DIR4, "hooks", "cc-edit-capture.sh");
-  const stopSummaryScript = join11(SYNKRO_DIR4, "hooks", "cc-stop-summary.sh");
-  const sessionStartScript = join11(SYNKRO_DIR4, "hooks", "cc-session-start.sh");
+  const bashScript = join12(SYNKRO_DIR3, "hooks", "cc-bash-judge.sh");
+  const bashFollowupScript = join12(SYNKRO_DIR3, "hooks", "cc-bash-followup.sh");
+  const editPrecheckScript = join12(SYNKRO_DIR3, "hooks", "cc-edit-precheck.sh");
+  const editCaptureScript = join12(SYNKRO_DIR3, "hooks", "cc-edit-capture.sh");
+  const stopSummaryScript = join12(SYNKRO_DIR3, "hooks", "cc-stop-summary.sh");
+  const sessionStartScript = join12(SYNKRO_DIR3, "hooks", "cc-session-start.sh");
   console.log("Hook scripts:");
-  console.log(`  ${existsSync11(bashScript) ? "\u2713" : "\u2717"} ${bashScript}`);
-  console.log(`  ${existsSync11(bashFollowupScript) ? "\u2713" : "\u2717"} ${bashFollowupScript}`);
-  console.log(`  ${existsSync11(editPrecheckScript) ? "\u2713" : "\u2717"} ${editPrecheckScript}`);
-  console.log(`  ${existsSync11(editCaptureScript) ? "\u2713" : "\u2717"} ${editCaptureScript}`);
-  console.log(`  ${existsSync11(stopSummaryScript) ? "\u2713" : "\u2717"} ${stopSummaryScript}`);
-  console.log(`  ${existsSync11(sessionStartScript) ? "\u2713" : "\u2717"} ${sessionStartScript}`);
+  console.log(`  ${existsSync12(bashScript) ? "\u2713" : "\u2717"} ${bashScript}`);
+  console.log(`  ${existsSync12(bashFollowupScript) ? "\u2713" : "\u2717"} ${bashFollowupScript}`);
+  console.log(`  ${existsSync12(editPrecheckScript) ? "\u2713" : "\u2717"} ${editPrecheckScript}`);
+  console.log(`  ${existsSync12(editCaptureScript) ? "\u2713" : "\u2717"} ${editCaptureScript}`);
+  console.log(`  ${existsSync12(stopSummaryScript) ? "\u2713" : "\u2717"} ${stopSummaryScript}`);
+  console.log(`  ${existsSync12(sessionStartScript) ? "\u2713" : "\u2717"} ${sessionStartScript}`);
   console.log();
   const mcp = inspectMcpConfig();
   console.log("Guardrails MCP server (Claude Code):");
@@ -4852,7 +5043,7 @@ async function statusCommand() {
     console.log(`    expected at ${mcp.configPath} \u2192 mcpServers.synkro-guardrails`);
   }
 }
-var SYNKRO_DIR4, CONFIG_PATH3;
+var SYNKRO_DIR3, CONFIG_PATH3;
 var init_status = __esm({
   "cli/commands/status.ts"() {
     "use strict";
@@ -4860,8 +5051,8 @@ var init_status = __esm({
     init_agentDetect();
     init_ccHookConfig();
     init_mcpConfig();
-    SYNKRO_DIR4 = join11(homedir10(), ".synkro");
-    CONFIG_PATH3 = join11(SYNKRO_DIR4, "config.env");
+    SYNKRO_DIR3 = join12(homedir11(), ".synkro");
+    CONFIG_PATH3 = join12(SYNKRO_DIR3, "config.env");
   }
 });
 
@@ -4950,13 +5141,13 @@ var config_exports = {};
 __export(config_exports, {
   configCommand: () => configCommand
 });
-import { readFileSync as readFileSync9, writeFileSync as writeFileSync8, existsSync as existsSync12 } from "fs";
-import { join as join12 } from "path";
-import { homedir as homedir11 } from "os";
+import { readFileSync as readFileSync11, writeFileSync as writeFileSync8, existsSync as existsSync13 } from "fs";
+import { join as join13 } from "path";
+import { homedir as homedir12 } from "os";
 function readConfigEnv2() {
-  if (!existsSync12(CONFIG_PATH4)) return {};
+  if (!existsSync13(CONFIG_PATH4)) return {};
   const out = {};
-  for (const line of readFileSync9(CONFIG_PATH4, "utf-8").split("\n")) {
+  for (const line of readFileSync11(CONFIG_PATH4, "utf-8").split("\n")) {
     const t = line.trim();
     if (!t || t.startsWith("#")) continue;
     const eq = t.indexOf("=");
@@ -4965,11 +5156,11 @@ function readConfigEnv2() {
   return out;
 }
 function updateConfigValue(key, value) {
-  if (!existsSync12(CONFIG_PATH4)) {
+  if (!existsSync13(CONFIG_PATH4)) {
     console.error("No config found. Run `synkro install` first.");
     process.exit(1);
   }
-  const lines = readFileSync9(CONFIG_PATH4, "utf-8").split("\n");
+  const lines = readFileSync11(CONFIG_PATH4, "utf-8").split("\n");
   const pattern = new RegExp(`^${key}=`);
   let found = false;
   const updated = lines.map((line) => {
@@ -5031,13 +5222,13 @@ To change: synkro config --inference fast|standard`);
   updateConfigValue("SYNKRO_INFERENCE", inferenceValue);
   console.log(`\u2713 Inference set to '${inferenceValue}'.`);
 }
-var SYNKRO_DIR5, CONFIG_PATH4;
+var SYNKRO_DIR4, CONFIG_PATH4;
 var init_config = __esm({
   "cli/commands/config.ts"() {
     "use strict";
     init_stub();
-    SYNKRO_DIR5 = join12(homedir11(), ".synkro");
-    CONFIG_PATH4 = join12(SYNKRO_DIR5, "config.env");
+    SYNKRO_DIR4 = join13(homedir12(), ".synkro");
+    CONFIG_PATH4 = join13(SYNKRO_DIR4, "config.env");
   }
 });
 
@@ -5047,8 +5238,8 @@ __export(scanPr_exports, {
   scanPrCommand: () => scanPrCommand
 });
 import { execSync as execSync6, spawn } from "child_process";
-import { readFileSync as readFileSync10, existsSync as existsSync13 } from "fs";
-import { join as join13 } from "path";
+import { readFileSync as readFileSync12, existsSync as existsSync14 } from "fs";
+import { join as join14 } from "path";
 function parseMatchSpec(condition) {
   if (!condition.startsWith("match_spec:")) return null;
   try {
@@ -5527,10 +5718,10 @@ function shouldFail(findings, threshold) {
   return findings.some((f) => order.indexOf(f.severity) >= thresholdIdx);
 }
 function readRepoDeps() {
-  const pkgPath = join13(process.cwd(), "package.json");
-  if (!existsSync13(pkgPath)) return {};
+  const pkgPath = join14(process.cwd(), "package.json");
+  if (!existsSync14(pkgPath)) return {};
   try {
-    const pkg = JSON.parse(readFileSync10(pkgPath, "utf-8"));
+    const pkg = JSON.parse(readFileSync12(pkgPath, "utf-8"));
     return { ...pkg.dependencies ?? {}, ...pkg.devDependencies ?? {} };
   } catch {
     return {};
@@ -5737,414 +5928,173 @@ Total: ${allFindings.length} finding(s) across ${eligible.length} file(s) in ${t
     sha: activeSha,
     findings: allFindings,
     filesScanned: eligible.length,
-    totalLatencyMs
-  });
-  console.log(`
-\u2713 Scan complete. Status: ${conclusion}.`);
-  if (conclusion === "failure") {
-    process.exit(1);
-  }
-}
-var SKIP_FILE_PATTERNS, MAX_DIFF_LINES_PER_FILE, MAX_PARALLEL_FILES;
-var init_scanPr = __esm({
-  "cli/commands/scanPr.ts"() {
-    "use strict";
-    SKIP_FILE_PATTERNS = [
-      /\.lock$/i,
-      /\.min\./i,
-      /\.map$/i,
-      /^dist\//,
-      /^build\//,
-      /^vendor\//,
-      /^node_modules\//,
-      /^\.next\//,
-      /package-lock\.json$/,
-      /yarn\.lock$/,
-      /pnpm-lock\.yaml$/,
-      /Cargo\.lock$/,
-      /go\.sum$/
-    ];
-    MAX_DIFF_LINES_PER_FILE = 1e3;
-    MAX_PARALLEL_FILES = 10;
-  }
-});
-
-// cli/commands/update.ts
-var update_exports = {};
-__export(update_exports, {
-  updateCommand: () => updateCommand
-});
-async function updateCommand() {
-  console.log("Refreshing Synkro hook configs and prompts...\n");
-  await installCommand();
-  console.log("\n\u2713 Synkro updated.");
-  console.log("To upgrade the CLI itself, run: npm install -g @synkro-sh/cli@latest");
-}
-var init_update = __esm({
-  "cli/commands/update.ts"() {
-    "use strict";
-    init_install2();
-  }
-});
-
-// cli/commands/disconnect.ts
-var disconnect_exports = {};
-__export(disconnect_exports, {
-  disconnectCommand: () => disconnectCommand
-});
-import { existsSync as existsSync14, rmSync } from "fs";
-import { homedir as homedir12 } from "os";
-import { join as join14 } from "path";
-function tearDownLocalCC() {
-  let hadTask = false;
-  try {
-    hadTask = !!findTask();
-    stopTask();
-  } catch {
-  }
-  console.log(`${hadTask ? "\u2713" : "\xB7"} local-cc runtime: ${hadTask ? "stopped pueue task + tmux session" : "no live task"}`);
-  uninstallLocalCC();
-  console.log("\u2713 local-cc config: cleaned ~/.claude.json entries");
-}
-function disconnectCommand(args2 = []) {
-  const purge = args2.includes("--purge");
-  console.log("Synkro disconnect starting...\n");
-  tearDownLocalCC();
-  const agents = detectAgents();
-  let sawClaudeCode = false;
-  for (const agent of agents) {
-    if (agent.kind === "claude_code") {
-      sawClaudeCode = true;
-      const removed = uninstallCCHooks(agent.settingsPath);
-      console.log(`${removed ? "\u2713" : "\xB7"} ${agent.name}: ${removed ? "removed Synkro hook entries" : "no Synkro hooks found"}`);
-    }
-  }
-  if (sawClaudeCode) {
-    const mcpRemoved = uninstallMcpConfig();
-    console.log(`${mcpRemoved ? "\u2713" : "\xB7"} MCP guardrails server: ${mcpRemoved ? "removed entry from ~/.claude.json" : "no Synkro MCP entry found"}`);
-  }
-  if (purge) {
-    if (existsSync14(SYNKRO_DIR6)) {
-      rmSync(SYNKRO_DIR6, { recursive: true, force: true });
-      console.log(`\u2713 Removed ${SYNKRO_DIR6}`);
-    } else {
-      console.log(`\xB7 ${SYNKRO_DIR6} already gone, nothing to remove`);
-    }
-  } else if (existsSync14(SYNKRO_DIR6)) {
-    console.log(`Config preserved at ${SYNKRO_DIR6}. Run with --purge to remove.`);
-  }
-  console.log("\nSynkro disconnected.");
-}
-var SYNKRO_DIR6;
-var init_disconnect = __esm({
-  "cli/commands/disconnect.ts"() {
-    "use strict";
-    init_agentDetect();
-    init_ccHookConfig();
-    init_mcpConfig();
-    init_pueue();
-    init_install();
-    SYNKRO_DIR6 = join14(homedir12(), ".synkro");
-  }
-});
-
-// cli/commands/uninstall.ts
-var uninstall_exports = {};
-__export(uninstall_exports, {
-  uninstallCommand: () => uninstallCommand
-});
-function uninstallCommand() {
-  console.log("Uninstalling Synkro...\n");
-  disconnectCommand(["--purge"]);
-  console.log("\nTo reinstall later: synkro install");
-}
-var init_uninstall = __esm({
-  "cli/commands/uninstall.ts"() {
-    "use strict";
-    init_disconnect();
-  }
-});
-
-// cli/commands/reinstall.ts
-var reinstall_exports = {};
-__export(reinstall_exports, {
-  reinstallCommand: () => reinstallCommand
-});
-async function reinstallCommand() {
-  console.log("Reinstalling Synkro...\n");
-  disconnectCommand(["--purge"]);
-  console.log("");
-  await installCommand({ force: true });
-  console.log("\n\u2713 Synkro reinstalled.");
-}
-var init_reinstall = __esm({
-  "cli/commands/reinstall.ts"() {
-    "use strict";
-    init_disconnect();
-    init_install2();
-  }
-});
-
-// cli/local-cc/turnLog.ts
-import { appendFileSync, existsSync as existsSync15, mkdirSync as mkdirSync9, openSync as openSync2, readFileSync as readFileSync11, readSync, closeSync as closeSync2, statSync, watchFile, unwatchFile } from "fs";
-import { dirname as dirname5, join as join15 } from "path";
-import { homedir as homedir13 } from "os";
-function truncate(s, max = PREVIEW_MAX) {
-  if (s.length <= max) return s;
-  return s.slice(0, max) + "\u2026 [+" + (s.length - max) + " chars]";
-}
-function extractSeverity(result) {
-  const m = result.match(/<synkro-(?:verdict|intent)>([\s\S]*?)<\/synkro-(?:verdict|intent)>/);
-  if (!m) return void 0;
-  try {
-    const obj = JSON.parse(m[1]);
-    if (obj.severity) return String(obj.severity);
-    if (typeof obj.ok === "boolean") return obj.ok ? "ok" : "violations";
-    if (obj.type) return String(obj.type);
-    if (obj.verdict) return String(obj.verdict);
-  } catch {
-  }
-  return void 0;
-}
-function appendTurn(args2) {
-  try {
-    mkdirSync9(dirname5(TURN_LOG_PATH), { recursive: true });
-    const entry = {
-      ts: new Date(args2.startedAt).toISOString(),
-      role: args2.role,
-      duration_ms: Date.now() - args2.startedAt,
-      status: args2.status,
-      request_preview: truncate(args2.request),
-      response_preview: args2.result ? truncate(args2.result) : "",
-      severity: args2.result ? extractSeverity(args2.result) : void 0,
-      error: args2.error
-    };
-    appendFileSync(TURN_LOG_PATH, JSON.stringify(entry) + "\n", "utf-8");
-  } catch {
-  }
-}
-function readRecentTurns(n = 20) {
-  if (!existsSync15(TURN_LOG_PATH)) return [];
-  try {
-    const size = statSync(TURN_LOG_PATH).size;
-    if (size === 0) return [];
-    const text = readFileSync11(TURN_LOG_PATH, "utf-8");
-    const lines = text.split("\n").filter(Boolean);
-    const lastN = lines.slice(-n).reverse();
-    return lastN.map((line) => {
-      try {
-        return JSON.parse(line);
-      } catch {
-        return null;
-      }
-    }).filter((x) => x !== null);
-  } catch {
-    return [];
-  }
-}
-function followTurns(onEntry) {
-  try {
-    mkdirSync9(dirname5(TURN_LOG_PATH), { recursive: true });
-    if (!existsSync15(TURN_LOG_PATH)) {
-      appendFileSync(TURN_LOG_PATH, "", "utf-8");
-    }
-  } catch {
-  }
-  let lastSize = (() => {
-    try {
-      return statSync(TURN_LOG_PATH).size;
-    } catch {
-      return 0;
-    }
-  })();
-  let pendingPartial = "";
-  const drainNewBytes = (from, to) => {
-    if (to <= from) return;
-    let fd = null;
-    try {
-      fd = openSync2(TURN_LOG_PATH, "r");
-      const len = to - from;
-      const buf = Buffer.alloc(len);
-      readSync(fd, buf, 0, len, from);
-      const text = pendingPartial + buf.toString("utf-8");
-      const lastNewline = text.lastIndexOf("\n");
-      if (lastNewline === -1) {
-        pendingPartial = text;
-        return;
-      }
-      const complete = text.slice(0, lastNewline);
-      pendingPartial = text.slice(lastNewline + 1);
-      for (const line of complete.split("\n")) {
-        if (!line) continue;
-        try {
-          onEntry(JSON.parse(line));
-        } catch {
-        }
-      }
-    } catch {
-    } finally {
-      if (fd !== null) {
-        try {
-          closeSync2(fd);
-        } catch {
-        }
-      }
-    }
-  };
-  watchFile(TURN_LOG_PATH, { interval: 250 }, (curr, prev) => {
-    if (curr.size < lastSize) {
-      lastSize = 0;
-      pendingPartial = "";
-    }
-    if (curr.size > lastSize) {
-      drainNewBytes(lastSize, curr.size);
-      lastSize = curr.size;
-    }
+    totalLatencyMs
   });
-  return () => unwatchFile(TURN_LOG_PATH);
+  console.log(`
+\u2713 Scan complete. Status: ${conclusion}.`);
+  if (conclusion === "failure") {
+    process.exit(1);
+  }
 }
-var TURN_LOG_PATH, PREVIEW_MAX;
-var init_turnLog = __esm({
-  "cli/local-cc/turnLog.ts"() {
+var SKIP_FILE_PATTERNS, MAX_DIFF_LINES_PER_FILE, MAX_PARALLEL_FILES;
+var init_scanPr = __esm({
+  "cli/commands/scanPr.ts"() {
     "use strict";
-    TURN_LOG_PATH = join15(homedir13(), ".synkro", "cc_sessions", "turns.log");
-    PREVIEW_MAX = 400;
+    SKIP_FILE_PATTERNS = [
+      /\.lock$/i,
+      /\.min\./i,
+      /\.map$/i,
+      /^dist\//,
+      /^build\//,
+      /^vendor\//,
+      /^node_modules\//,
+      /^\.next\//,
+      /package-lock\.json$/,
+      /yarn\.lock$/,
+      /pnpm-lock\.yaml$/,
+      /Cargo\.lock$/,
+      /go\.sum$/
+    ];
+    MAX_DIFF_LINES_PER_FILE = 1e3;
+    MAX_PARALLEL_FILES = 10;
   }
 });
 
-// cli/local-cc/prompts.ts
-import { existsSync as existsSync16, readFileSync as readFileSync12 } from "fs";
-import { homedir as homedir14 } from "os";
-import { join as join16 } from "path";
-function loadCachedPrompts() {
-  if (_cached) return _cached;
-  if (!existsSync16(CACHE_PATH2)) {
-    throw new Error("Prompts cache not found. Run `synkro install` or `synkro update` first.");
+// cli/commands/update.ts
+var update_exports = {};
+__export(update_exports, {
+  updateCommand: () => updateCommand
+});
+async function updateCommand() {
+  console.log("Refreshing Synkro hook configs and prompts...\n");
+  await installCommand();
+  console.log("\n\u2713 Synkro updated.");
+  console.log("To upgrade the CLI itself, run: npm install -g @synkro-sh/cli@latest");
+}
+var init_update = __esm({
+  "cli/commands/update.ts"() {
+    "use strict";
+    init_install2();
   }
+});
+
+// cli/commands/disconnect.ts
+var disconnect_exports = {};
+__export(disconnect_exports, {
+  disconnectCommand: () => disconnectCommand
+});
+import { existsSync as existsSync15, rmSync } from "fs";
+import { homedir as homedir13 } from "os";
+import { join as join15 } from "path";
+function tearDownLocalCC() {
+  let hadTask = false;
   try {
-    _cached = JSON.parse(readFileSync12(CACHE_PATH2, "utf-8"));
-    return _cached;
+    hadTask = !!findTask();
+    stopTask();
   } catch {
-    throw new Error("Prompts cache is corrupted. Run `synkro update` to refresh.");
   }
+  console.log(`${hadTask ? "\u2713" : "\xB7"} local-cc runtime: ${hadTask ? "stopped pueue task + tmux session" : "no live task"}`);
+  uninstallLocalCC();
+  console.log("\u2713 local-cc config: cleaned ~/.claude.json entries");
 }
-function getPrimer(role) {
-  const cache = loadCachedPrompts();
-  const primer = role === "grade-edit" ? cache.grader_primer_edit : cache.grader_primer_bash;
-  if (!primer) {
-    throw new Error(`No cached primer for role "${role}". Run \`synkro update\` to refresh prompts.`);
+function disconnectCommand(args2 = []) {
+  const purge = args2.includes("--purge");
+  console.log("Synkro disconnect starting...\n");
+  tearDownLocalCC();
+  const agents = detectAgents();
+  let sawClaudeCode = false;
+  for (const agent of agents) {
+    if (agent.kind === "claude_code") {
+      sawClaudeCode = true;
+      const removed = uninstallCCHooks(agent.settingsPath);
+      console.log(`${removed ? "\u2713" : "\xB7"} ${agent.name}: ${removed ? "removed Synkro hook entries" : "no Synkro hooks found"}`);
+    }
   }
-  return primer;
+  if (sawClaudeCode) {
+    const mcpRemoved = uninstallMcpConfig();
+    console.log(`${mcpRemoved ? "\u2713" : "\xB7"} MCP guardrails server: ${mcpRemoved ? "removed entry from ~/.claude.json" : "no Synkro MCP entry found"}`);
+  }
+  if (purge) {
+    if (existsSync15(SYNKRO_DIR5)) {
+      rmSync(SYNKRO_DIR5, { recursive: true, force: true });
+      console.log(`\u2713 Removed ${SYNKRO_DIR5}`);
+    } else {
+      console.log(`\xB7 ${SYNKRO_DIR5} already gone, nothing to remove`);
+    }
+  } else if (existsSync15(SYNKRO_DIR5)) {
+    console.log(`Config preserved at ${SYNKRO_DIR5}. Run with --purge to remove.`);
+  }
+  console.log("\nSynkro disconnected.");
 }
-function buildChannelContent(role, payload) {
-  return `${getPrimer(role)}
+var SYNKRO_DIR5;
+var init_disconnect = __esm({
+  "cli/commands/disconnect.ts"() {
+    "use strict";
+    init_agentDetect();
+    init_ccHookConfig();
+    init_mcpConfig();
+    init_pueue();
+    init_install();
+    SYNKRO_DIR5 = join15(homedir13(), ".synkro");
+  }
+});
 
----
-PAYLOAD (the input to evaluate):
+// cli/commands/uninstall.ts
+var uninstall_exports = {};
+__export(uninstall_exports, {
+  uninstallCommand: () => uninstallCommand
+});
+function uninstallCommand() {
+  console.log("Uninstalling Synkro...\n");
+  disconnectCommand(["--purge"]);
+  console.log("\nTo reinstall later: synkro install");
+}
+var init_uninstall = __esm({
+  "cli/commands/uninstall.ts"() {
+    "use strict";
+    init_disconnect();
+  }
+});
 
-${payload}`;
+// cli/commands/reinstall.ts
+var reinstall_exports = {};
+__export(reinstall_exports, {
+  reinstallCommand: () => reinstallCommand
+});
+async function reinstallCommand() {
+  console.log("Reinstalling Synkro...\n");
+  disconnectCommand(["--purge"]);
+  console.log("");
+  await installCommand({ force: true });
+  console.log("\n\u2713 Synkro reinstalled.");
 }
-var CACHE_PATH2, _cached;
-var init_prompts = __esm({
-  "cli/local-cc/prompts.ts"() {
+var init_reinstall = __esm({
+  "cli/commands/reinstall.ts"() {
     "use strict";
-    CACHE_PATH2 = join16(homedir14(), ".synkro", "prompts", "judge-prompts.json");
-    _cached = null;
+    init_disconnect();
+    init_install2();
   }
 });
 
-// cli/local-cc/client.ts
-import { request as httpRequest } from "http";
-import { connect as connect2 } from "net";
-async function submitToChannel(role, payload, opts = {}) {
-  const content = buildChannelContent(role, payload);
-  const body = JSON.stringify({ role, content });
-  const timeoutMs = opts.timeoutMs ?? DEFAULT_TIMEOUT_MS;
-  const startedAt = Date.now();
+// cli/local-cc/settings.ts
+import { existsSync as existsSync16, readFileSync as readFileSync13 } from "fs";
+import { homedir as homedir14 } from "os";
+import { join as join16 } from "path";
+function isLocalCCEnabled() {
+  if (!existsSync16(CONFIG_PATH5)) return false;
   try {
-    const result = await new Promise((resolve2, reject) => {
-      const req = httpRequest({
-        host: CHANNEL_HOST,
-        port: CHANNEL_PORT,
-        method: "POST",
-        path: "/submit",
-        headers: {
-          "Content-Type": "application/json",
-          "Content-Length": Buffer.byteLength(body)
-        },
-        timeout: timeoutMs
-      }, (res) => {
-        const chunks = [];
-        res.on("data", (c) => chunks.push(c));
-        res.on("end", () => {
-          const text = Buffer.concat(chunks).toString("utf-8");
-          if (res.statusCode !== 200) {
-            reject(new LocalCCError(`channel returned ${res.statusCode}: ${text.slice(0, 500)}`));
-            return;
-          }
-          try {
-            const parsed = JSON.parse(text);
-            if (parsed.error) {
-              reject(new LocalCCError(parsed.error));
-              return;
-            }
-            resolve2(String(parsed.result ?? ""));
-          } catch (err) {
-            reject(new LocalCCError(`malformed channel response: ${text.slice(0, 200)}`, err));
-          }
-        });
-      });
-      req.on("timeout", () => {
-        req.destroy(new LocalCCError(`channel request timed out after ${timeoutMs}ms`));
-      });
-      req.on("error", (err) => {
-        const msg = err.code === "ECONNREFUSED" ? `channel connection refused at ${CHANNEL_HOST}:${CHANNEL_PORT} (is the pueue task running?)` : `channel request failed: ${err.message}`;
-        reject(new LocalCCError(msg, err));
-      });
-      req.write(body);
-      req.end();
-    });
-    appendTurn({ startedAt, role, request: payload, result, status: "ok" });
-    return result;
-  } catch (err) {
-    const message = err.message ?? String(err);
-    const status = /timed out/i.test(message) ? "timeout" : "error";
-    appendTurn({ startedAt, role, request: payload, status, error: message });
-    throw err;
+    const content = readFileSync13(CONFIG_PATH5, "utf-8");
+    const match = content.match(/^SYNKRO_LOCAL_INFERENCE='([^']*)'/m);
+    return match?.[1] === "yes";
+  } catch {
+    return false;
   }
 }
-function isChannelAvailable(timeoutMs = 500) {
-  return new Promise((resolve2) => {
-    const sock = connect2(CHANNEL_PORT, CHANNEL_HOST);
-    const done = (ok) => {
-      try {
-        sock.destroy();
-      } catch {
-      }
-      resolve2(ok);
-    };
-    sock.once("connect", () => done(true));
-    sock.once("error", () => done(false));
-    sock.setTimeout(timeoutMs, () => done(false));
-  });
-}
-var CHANNEL_HOST, CHANNEL_PORT, DEFAULT_TIMEOUT_MS, LocalCCError;
-var init_client = __esm({
-  "cli/local-cc/client.ts"() {
+var CONFIG_PATH5;
+var init_settings = __esm({
+  "cli/local-cc/settings.ts"() {
     "use strict";
-    init_prompts();
-    init_turnLog();
-    CHANNEL_HOST = "127.0.0.1";
-    CHANNEL_PORT = parseInt(process.env.SYNKRO_CHANNEL_PORT || "8929", 10);
-    DEFAULT_TIMEOUT_MS = 9e4;
-    LocalCCError = class extends Error {
-      constructor(message, cause) {
-        super(message);
-        this.cause = cause;
-        this.name = "LocalCCError";
-      }
-      cause;
-    };
+    CONFIG_PATH5 = join16(homedir14(), ".synkro", "config.env");
   }
 });
 
@@ -6156,8 +6106,8 @@ __export(localCc_exports, {
 import { spawnSync as spawnSync3 } from "child_process";
 import { homedir as homedir15 } from "os";
 import { join as join17 } from "path";
+import { existsSync as existsSync17, readFileSync as readFileSync14, writeFileSync as writeFileSync9 } from "fs";
 function printHelp() {
-  const dbPath = join17(homedir15(), ".synkro", "sessions.db");
   console.log(`synkro local-cc \u2014 manage the local Claude Code inference session
 
 OVERVIEW
@@ -6199,11 +6149,10 @@ SUBCOMMANDS
   help                  Show this message
 
 CONFIGURATION
-  Provider toggle (single global switch, default 'inngest'):
-    Stored in ${dbPath} (settings table, key='inference_provider').
+  Provider toggle:
+    Stored server-side in your inference settings (gradingProvider).
     Toggle via:  synkro local-cc enable / disable
-    Or directly via SQL:
-      INSERT OR REPLACE INTO settings (key, value) VALUES ('inference_provider', 'local-cc');
+    Or via dashboard inference settings (set grading provider to claude-code).
 
   Claude Code session settings (scoped to ~/.synkro/cc_sessions only):
     ${PLUGIN_SETTINGS_PATH}
@@ -6246,8 +6195,44 @@ TROUBLESHOOTING
       synkro local-cc attach
 `);
 }
+function readGatewayUrl() {
+  if (existsSync17(CONFIG_PATH6)) {
+    const m = readFileSync14(CONFIG_PATH6, "utf-8").match(/^SYNKRO_GATEWAY_URL='([^']*)'/m);
+    if (m) return m[1];
+  }
+  return "https://api.synkro.sh";
+}
+function updateLocalInferenceFlag(enabled) {
+  if (!existsSync17(CONFIG_PATH6)) return;
+  let content = readFileSync14(CONFIG_PATH6, "utf-8");
+  const flag = enabled ? "yes" : "no";
+  if (content.includes("SYNKRO_LOCAL_INFERENCE=")) {
+    content = content.replace(/^SYNKRO_LOCAL_INFERENCE='[^']*'/m, `SYNKRO_LOCAL_INFERENCE='${flag}'`);
+  } else {
+    content = content.trimEnd() + `
+SYNKRO_LOCAL_INFERENCE='${flag}'
+`;
+  }
+  writeFileSync9(CONFIG_PATH6, content, "utf-8");
+}
+async function setServerGradingProvider(provider) {
+  await ensureValidToken();
+  const jwt2 = getAccessToken();
+  if (!jwt2) throw new Error("Not authenticated. Run `synkro install` first.");
+  const gatewayUrl = readGatewayUrl();
+  const body = provider ? { roles: { grading: { provider, model: "default" } } } : { roles: { grading: { provider: null, model: null } } };
+  const resp = await fetch(`${gatewayUrl}/api/settings/inference?scope=user`, {
+    method: "PUT",
+    headers: { "Authorization": `Bearer ${jwt2}`, "Content-Type": "application/json" },
+    body: JSON.stringify(body)
+  });
+  if (!resp.ok) {
+    const text = await resp.text().catch(() => "");
+    throw new Error(`Failed to update inference settings: ${resp.status} ${text.slice(0, 200)}`);
+  }
+}
 async function cmdStatus() {
-  console.log(`Inference provider: ${getInferenceProvider()}`);
+  console.log(`Local inference: ${isLocalCCEnabled() ? "enabled" : "disabled"}`);
   try {
     assertPueueInstalled();
   } catch (err) {
@@ -6281,12 +6266,16 @@ async function cmdEnable() {
   const ready = await waitForChannelReady(CHANNEL_PORT, 6e4, CHANNEL_HOST);
   if (ready) console.log(`  channel ready at ${CHANNEL_HOST}:${CHANNEL_PORT}`);
   else console.warn(`  \u26A0 channel did not come up within 60s \u2014 check \`synkro local-cc logs\``);
-  setInferenceProvider("local-cc");
-  console.log("Inference provider set to local-cc.");
+  console.log("Updating inference settings...");
+  await setServerGradingProvider("claude-code");
+  updateLocalInferenceFlag(true);
+  console.log("Grading provider set to claude-code (local inference enabled).");
 }
-function cmdDisable() {
-  setInferenceProvider("inngest");
-  console.log("Inference provider set to inngest. (Pueue task left running \u2014 use `synkro local-cc stop` to terminate.)");
+async function cmdDisable() {
+  console.log("Updating inference settings...");
+  await setServerGradingProvider(null);
+  updateLocalInferenceFlag(false);
+  console.log("Grading provider cleared (remote inference restored). Pueue task left running \u2014 use `synkro local-cc stop` to terminate.");
 }
 async function cmdStart() {
   assertClaudeInstalled();
@@ -6489,6 +6478,7 @@ async function localCcCommand(args2) {
     process.exit(1);
   }
 }
+var CONFIG_PATH6;
 var init_localCc = __esm({
   "cli/commands/localCc.ts"() {
     "use strict";
@@ -6497,6 +6487,8 @@ var init_localCc = __esm({
     init_pueue();
     init_settings();
     init_client();
+    init_stub();
+    CONFIG_PATH6 = join17(homedir15(), ".synkro", "config.env");
   }
 });
 
@@ -6548,15 +6540,15 @@ var init_grade = __esm({
 });
 
 // cli/bootstrap.js
-import { readFileSync as readFileSync13, existsSync as existsSync17 } from "fs";
+import { readFileSync as readFileSync15, existsSync as existsSync18 } from "fs";
 import { resolve } from "path";
 var envCandidates = [
   resolve(process.cwd(), ".env"),
   resolve(process.env.HOME ?? "", ".synkro", "config.env")
 ];
 for (const envPath of envCandidates) {
-  if (!existsSync17(envPath)) continue;
-  const envContent = readFileSync13(envPath, "utf-8");
+  if (!existsSync18(envPath)) continue;
+  const envContent = readFileSync15(envPath, "utf-8");
   for (const line of envContent.split("\n")) {
     const trimmed = line.trim();
     if (!trimmed || trimmed.startsWith("#")) continue;