@synkro-sh/cli 1.4.25 → 1.4.27

package/dist/bootstrap.js

@@ -516,23 +516,28 @@ synkro_route() {
   echo "cloud"
 }
 
-# Grade locally via synkro CLI or claude --print. Reads prompt from stdin.
+# Grade locally via synkro CLI channel. Reads prompt from stdin.
 synkro_local_grade() {
   local surface="$1"
-  if synkro_channel_up && [ -n "\${SYNKRO_CLI_BIN:-}" ] && [ -f "$SYNKRO_CLI_BIN" ] && command -v node >/dev/null 2>&1; then
+  if ! synkro_channel_up; then
+    echo "SYNKRO_CHANNEL_DOWN" >&2
+    return 1
+  fi
+  if [ -n "\${SYNKRO_CLI_BIN:-}" ] && [ -f "$SYNKRO_CLI_BIN" ] && command -v node >/dev/null 2>&1; then
     node "$SYNKRO_CLI_BIN" grade "$surface" 2>/dev/null
-  elif synkro_channel_up && command -v synkro >/dev/null 2>&1; then
+  elif command -v synkro >/dev/null 2>&1; then
     synkro grade "$surface" 2>/dev/null
-  elif command -v claude >/dev/null 2>&1; then
-    claude --print --model claude-sonnet-4-6 --no-session-persistence 2>/dev/null
+  else
+    echo "SYNKRO_CLI_NOT_FOUND" >&2
+    return 1
   fi
 }
 
 # Parse <synkro-verdict>...</synkro-verdict> XML from local grader output.
-# Sets LOCAL_OK, LOCAL_REASON, LOCAL_RULE_ID, LOCAL_SEV, LOCAL_CAT.
+# Sets LOCAL_OK, LOCAL_REASON, LOCAL_RULE_ID, LOCAL_RULE_MODE, LOCAL_SEV, LOCAL_CAT.
 synkro_parse_local_verdict() {
   local resp="$1"
-  LOCAL_OK="true"; LOCAL_REASON=""; LOCAL_RULE_ID=""; LOCAL_SEV="low"; LOCAL_CAT="general"
+  LOCAL_OK="true"; LOCAL_REASON=""; LOCAL_RULE_ID=""; LOCAL_RULE_MODE=""; LOCAL_SEV="low"; LOCAL_CAT="general"
   local inner
   inner=$(printf '%s' "$resp" | tr '\\n' ' ' | sed -nE 's|.*<synkro-verdict>(.*)</synkro-verdict>.*|\\1|p' | tail -1)
   [ -z "$inner" ] && return
@@ -543,6 +548,7 @@ synkro_parse_local_verdict() {
   [ -z "$LOCAL_REASON" ] && LOCAL_REASON=$(printf '%s' "$inner" | sed -nE 's|.*<reasoning>(.*)</reasoning>.*|\\1|p' | head -1)
   if [ "$LOCAL_OK" = "false" ]; then
     LOCAL_RULE_ID=$(printf '%s' "$inner" | sed -nE 's|.*<rule_id>(.*)</rule_id>.*|\\1|p' | head -1)
+    LOCAL_RULE_MODE=$(printf '%s' "$inner" | sed -nE 's|.*<rule_mode>(.*)</rule_mode>.*|\\1|p' | head -1)
     LOCAL_SEV=$(printf '%s' "$inner" | sed -nE 's|.*<risk_level>(.*)</risk_level>.*|\\1|p' | head -1)
     LOCAL_CAT=$(printf '%s' "$inner" | sed -nE 's|.*<category>(.*)</category>.*|\\1|p' | head -1)
     if [ -z "$LOCAL_RULE_ID" ]; then
@@ -580,7 +586,7 @@ synkro_rule_mode() {
   local rid="$1"
   [ -z "$rid" ] || [ -z "\${SYNKRO_RULES:-}" ] && echo "blocking" && return
   local m
-  m=$(printf '%s' "$SYNKRO_RULES" | jq -r --arg r "$rid" '[.[] | select(.rule_id == $r) | .mode] | .[0] // "blocking"' 2>/dev/null)
+  m=$(printf '%s' "$SYNKRO_RULES" | jq -r --arg r "$rid" '[.[] | select(.rule_id == $r) | .mode] | if any(. == "blocking") then "blocking" else .[0] // "blocking" end' 2>/dev/null)
   [ -z "$m" ] || [ "$m" = "null" ] && m="blocking"
   echo "$m"
 }
@@ -687,11 +693,15 @@ if [ "$ROUTE" = "local" ]; then
   trap "rm -f \\"$GRADER_FILE\\"" EXIT
   printf 'Command: %s\\nUser intent: %s\\nOrg rules: %s\\n' "$COMMAND" "\${USER_INTENT:-none stated}" "\${SYNKRO_RULES:-[]}" > "$GRADER_FILE"
 
-  CC_RESP=$(synkro_local_grade bash < "$GRADER_FILE" || echo "")
+  CC_RESP=$(synkro_local_grade bash < "$GRADER_FILE" 2>&1)
+  if [ $? -ne 0 ]; then
+    jq -n --arg m "[synkro:local] bashGuard \u2192 pass: local grader unavailable (run synkro local-cc start)" '{systemMessage: $m}'
+    exit 0
+  fi
   synkro_parse_local_verdict "$CC_RESP"
 
   if [ "$LOCAL_OK" = "false" ]; then
-    RULE_MODE=$(synkro_rule_mode "\${LOCAL_RULE_ID}")
+    RULE_MODE="\${LOCAL_RULE_MODE:-$(synkro_rule_mode "\${LOCAL_RULE_ID}")}"
     if [ "$RULE_MODE" = "audit" ]; then
       REASON="[synkro:local] bashGuard \u2192 warning\${LOCAL_RULE_ID:+ ($LOCAL_RULE_ID)}: \${LOCAL_REASON:-policy violation}"
       jq -n --arg m "$REASON" '{systemMessage: $m}'
@@ -709,7 +719,7 @@ if [ "$ROUTE" = "local" ]; then
         if [ "$IS_HEADLESS" = "1" ]; then DEC="deny"; else DEC="ask"; fi
         REASON="[synkro:local] bashGuard \u2192 block\${LOCAL_RULE_ID:+ ($LOCAL_RULE_ID)}: \${LOCAL_REASON:-policy violation}"
         jq -n --arg dec "$DEC" --arg reason "$REASON" --arg ctx "$REASON" \\
-          '{systemMessage:$reason,hookSpecificOutput:{hookEventName:"PreToolUse",permissionDecision:$dec,permissionDecisionReason:$reason,additionalContext:$ctx}}'
+          '{hookSpecificOutput:{hookEventName:"PreToolUse",permissionDecision:$dec,permissionDecisionReason:$reason,additionalContext:$ctx}}'
         synkro_capture_local "bash" "block" "\${LOCAL_SEV}" "\${LOCAL_CAT}" "$TOOL_NAME" "$GIT_REPO" "$SESSION_ID"
       fi
     fi
@@ -876,11 +886,15 @@ if [ "$ROUTE" = "local" ]; then
   trap "rm -f \\"$GRADER_FILE\\"" EXIT
   printf 'File: %s\\nProposed content (first 4000 chars):\\n%s\\nUser intent: %s\\nOrg rules: %s\\n' "$FILE_PATH" "$(printf '%s' "$PROPOSED" | head -c 4000)" "\${USER_INTENT:-none stated}" "\${SYNKRO_RULES:-[]}" > "$GRADER_FILE"
 
-  CC_RESP=$(synkro_local_grade edit < "$GRADER_FILE" || echo "")
+  CC_RESP=$(synkro_local_grade edit < "$GRADER_FILE" 2>&1)
+  if [ $? -ne 0 ]; then
+    jq -n --arg m "[synkro:local] editGuard \u2192 pass: local grader unavailable (run synkro local-cc start)" '{systemMessage: $m}'
+    exit 0
+  fi
   synkro_parse_local_verdict "$CC_RESP"
 
   if [ "$LOCAL_OK" = "false" ]; then
-    RULE_MODE=$(synkro_rule_mode "\${LOCAL_RULE_ID}")
+    RULE_MODE="\${LOCAL_RULE_MODE:-$(synkro_rule_mode "\${LOCAL_RULE_ID}")}"
     if [ "$RULE_MODE" = "audit" ]; then
       REASON="[synkro:local] editGuard $FILE_SHORT \u2192 warning\${LOCAL_RULE_ID:+ ($LOCAL_RULE_ID)}: \${LOCAL_REASON:-policy violation}"
       jq -n --arg m "$REASON" '{systemMessage: $m}'
@@ -1025,11 +1039,14 @@ if [ "$ROUTE" = "local" ]; then
   trap "rm -f \\"$GRADER_FILE\\"" EXIT
   printf 'File: %s\\nContent (first 4000 chars):\\n%s\\nOrg rules: %s\\n' "$FILE_PATH" "$(printf '%s' "$FILE_CONTENT" | head -c 4000)" "\${SYNKRO_RULES:-[]}" > "$GRADER_FILE"
 
-  CC_RESP=$(synkro_local_grade edit < "$GRADER_FILE" || echo "")
+  CC_RESP=$(synkro_local_grade edit < "$GRADER_FILE" 2>&1)
+  if [ $? -ne 0 ]; then
+    echo '{}'; exit 0
+  fi
   synkro_parse_local_verdict "$CC_RESP"
 
   if [ "$LOCAL_OK" = "false" ]; then
-    RULE_MODE=$(synkro_rule_mode "\${LOCAL_RULE_ID}")
+    RULE_MODE="\${LOCAL_RULE_MODE:-$(synkro_rule_mode "\${LOCAL_RULE_ID}")}"
     if [ "$RULE_MODE" = "audit" ]; then
       REASON="[synkro:local] editScan $BASENAME \u2192 warning\${LOCAL_RULE_ID:+ ($LOCAL_RULE_ID)}: \${LOCAL_REASON:-policy violation}"
       jq -n --arg m "$REASON" '{systemMessage: $m}'
@@ -3669,7 +3686,7 @@ function writeConfigEnv(opts) {
     `SYNKRO_CREDENTIALS_PATH=${shellQuoteSingle(credsPath)}`,
     `SYNKRO_TIER=${shellQuoteSingle(safeTier)}`,
     `SYNKRO_INFERENCE=${shellQuoteSingle(safeInference)}`,
-    `SYNKRO_VERSION=${shellQuoteSingle("1.4.25")}`
+    `SYNKRO_VERSION=${shellQuoteSingle("1.4.27")}`
   ];
   if (safeSynkroBin) lines.push(`SYNKRO_CLI_BIN=${shellQuoteSingle(safeSynkroBin)}`);
   if (safeUserId) lines.push(`SYNKRO_USER_ID=${shellQuoteSingle(safeUserId)}`);