@synkro-sh/cli 1.4.99 → 1.4.100

package/dist/bootstrap.js

@@ -992,7 +992,7 @@ export async function channelUp(port = 18929): Promise<boolean> {
     const done = (ok: boolean) => { try { sock.destroy(); } catch {} resolve(ok); };
     sock.once('connect', () => done(true));
     sock.once('error', () => done(false));
-    sock.setTimeout(500, () => done(false));
+    sock.setTimeout(3000, () => done(false));
   });
 }
 
@@ -2016,6 +2016,7 @@ async function main() {
         'User intent (last human message): ' + (transcript.userIntent || 'none stated'),
         'Last user prompt: ' + (lastPrompt || 'none'),
         'Org rules: ' + JSON.stringify(config.rules),
+        'IMPORTANT: If a rule is violated, ALWAYS return ok=false with the rule_id and reason, regardless of the rule mode. Do NOT pass a command just because the rule mode is "audit". The enforcement layer handles audit vs blocking \u2014 your job is only to detect violations.',
       ].join('\\n');
 
       let gradeResp: string;
@@ -2964,6 +2965,9 @@ async function main() {
         'User intent (last human message): ' + (transcript.userIntent || 'none stated'),
         'Last user prompt: ' + (lastPrompt || 'none'),
         'Org rules: ' + JSON.stringify(config.rules),
+        'IMPORTANT: If a rule is violated, ALWAYS return ok=false with the rule_id and reason, regardless of the rule mode. Do NOT pass a command just because the rule mode is "audit". The enforcement layer handles audit vs blocking — your job is only to detect violations.',
+        'When passing (ok=true), cite which rules you checked and why they passed (e.g. "R006 satisfied: typecheck found in session history"). Be specific, not generic.',
+        'Rules with preconditions (e.g. "run X before Y") are CONSUMED after the protected action completes. Use the session history timestamps to determine ordering: a precondition satisfied before the last occurrence of the protected action does NOT satisfy the next occurrence. Each new protected action needs its precondition re-satisfied.',
       ].filter(Boolean).join('\\n');
 
       let gradeResp: string;
@@ -3004,7 +3008,9 @@ async function main() {
             });
         }
       } else {
-        const reason = tagStr + ' bashGuard → pass: ' + (verdict.reason || 'no policy violations detected');
+        const auditRuleIds = (config.rules || []).filter((r: any) => r.mode === 'audit').map((r: any) => r.rule_id || r.id).filter(Boolean);
+        const auditNote = auditRuleIds.length > 0 ? ' (audit rules checked: ' + auditRuleIds.join(', ') + ')' : '';
+        const reason = tagStr + ' bashGuard → pass: ' + (verdict.reason || 'no policy violations detected') + auditNote;
         const combined = (installScanMsg ? installScanMsg + '\\n' : '') + reason;
         outputJson({ systemMessage: combined, hookSpecificOutput: { hookEventName: 'PreToolUse', additionalContext: combined } });
         dispatchCapture(jwt, 'bash', 'pass', 'audit', verdict.category || 'trivial_utility',
@@ -3149,6 +3155,7 @@ async function main() {
         'User intent (last human message): ' + (transcript.userIntent || 'none stated'),
         'Last user prompt: ' + (lastPrompt || 'none'),
         'Org rules: ' + JSON.stringify(config.rules),
+        'IMPORTANT: If a rule is violated, ALWAYS return ok=false with the rule_id and reason, regardless of the rule mode. Do NOT pass a command just because the rule mode is "audit". The enforcement layer handles audit vs blocking \u2014 your job is only to detect violations.',
       ].filter(Boolean).join('\\n');
 
       let gradeResp: string;
@@ -5472,7 +5479,7 @@ function claudeCredsHostDir() {
 async function dockerInstall(opts = {}) {
   assertDockerAvailable();
   const image = imageTag();
-  const workers = String(opts.workersPerPool ?? 4);
+  const workers = String(opts.workersPerPool ?? 8);
   mkdirSync7(PGDATA_PATH, { recursive: true });
   if (!existsSync8(MCP_JWT_PATH)) {
     throw new DockerInstallError(
@@ -5732,7 +5739,7 @@ function writeConfigEnv(opts) {
     `SYNKRO_CREDENTIALS_PATH=${shellQuoteSingle(credsPath)}`,
     `SYNKRO_TIER=${shellQuoteSingle(safeTier)}`,
     `SYNKRO_INFERENCE=${shellQuoteSingle(safeInference)}`,
-    `SYNKRO_VERSION=${shellQuoteSingle("1.4.99")}`
+    `SYNKRO_VERSION=${shellQuoteSingle("1.4.100")}`
   ];
   if (safeSynkroBin) lines.push(`SYNKRO_CLI_BIN=${shellQuoteSingle(safeSynkroBin)}`);
   if (safeUserId) lines.push(`SYNKRO_USER_ID=${shellQuoteSingle(safeUserId)}`);
@@ -7168,7 +7175,7 @@ var args = process.argv.slice(2);
 var cmd = args[0] || "";
 var subArgs = args.slice(1);
 function printVersion() {
-  console.log("1.4.99");
+  console.log("1.4.100");
 }
 function printHelp() {
   console.log(`Synkro CLI \u2014 runtime safety for AI coding agents