@synkro-sh/cli 1.6.71 → 1.6.73

package/dist/bootstrap.js

@@ -145,7 +145,7 @@ function installCCHooks(settingsPath, config) {
       {
         type: "command",
         command: config.bashJudgeScriptPath,
-        timeout: 30
+        timeout: 50
       }
     ],
     [SYNKRO_MARKER]: true
@@ -156,12 +156,12 @@ function installCCHooks(settingsPath, config) {
       {
         type: "command",
         command: config.editPrecheckScriptPath,
-        timeout: 30
+        timeout: 50
       },
       {
         type: "command",
         command: config.cwePrecheckScriptPath,
-        timeout: 30
+        timeout: 50
       },
       {
         type: "command",
@@ -177,7 +177,7 @@ function installCCHooks(settingsPath, config) {
       {
         type: "command",
         command: config.agentJudgeScriptPath,
-        timeout: 30
+        timeout: 50
       }
     ],
     [SYNKRO_MARKER]: true
@@ -188,7 +188,7 @@ function installCCHooks(settingsPath, config) {
       {
         type: "command",
         command: config.planJudgeScriptPath,
-        timeout: 45
+        timeout: 50
       }
     ],
     [SYNKRO_MARKER]: true
@@ -200,7 +200,7 @@ function installCCHooks(settingsPath, config) {
         {
           type: "command",
           command: config.mcpGateScriptPath,
-          timeout: 30
+          timeout: 50
         }
       ],
       [SYNKRO_MARKER]: true
@@ -1689,7 +1689,12 @@ async function cloudGrade(surface: string, prompt: string, jwt: string, timeoutM
 // JWT (the Worker derives the org from the token and routes to that org's
 // container). Any non-2xx throws so the caller's catch fails open.
 const CONTAINERS_URL = process.env.SYNKRO_CONTAINERS_URL || 'https://containers.synkro.sh';
-async function hostedGrade(role: GradeRole, prompt: string, jwt: string, timeoutMs = 24000, agentKind: AgentKind = 'claude_code'): Promise<string> {
+// Cloud grades cross the network and can hit a cold/queued worker, so they get a
+// longer leash than on-device channel grades. The hook chain is sized around it:
+// grade abort (45s) < watchdog (48s) < CC hook budget (50s) \u2014 the grade aborts
+// FIRST so the caller's catch fails open cleanly before CC ever force-kills us.
+const CLOUD_GRADE_TIMEOUT_MS = 45000;
+async function hostedGrade(role: GradeRole, prompt: string, jwt: string, timeoutMs = CLOUD_GRADE_TIMEOUT_MS, agentKind: AgentKind = 'claude_code'): Promise<string> {
   const resp = await fetch(CONTAINERS_URL + '/grade/submit', {
     method: 'POST',
     headers: { 'Content-Type': 'application/json', Authorization: 'Bearer ' + jwt },
@@ -1705,18 +1710,20 @@ async function hostedGrade(role: GradeRole, prompt: string, jwt: string, timeout
   return String(data.result || '');
 }
 
-// Default 24s \u2014 MUST stay below the CC hook timeout (30s for edit/bash/cwe in
-// ccHookConfig.ts) so the AbortSignal fires and the caller's catch fails open
-// cleanly. If this matches or exceeds the CC budget, CC force-kills the bun
-// process mid-fetch (exit 142 / SIGALRM) and surfaces the in-flight grader
-// prompt as a hook error instead of a clean pass.
+// Local-channel default 24s \u2014 MUST stay below the CC hook timeout (50s for
+// edit/bash/cwe in ccHookConfig.ts) so the AbortSignal fires and the caller's
+// catch fails open cleanly. A hung on-device worker should fail open fast; only
+// cloud grades (network + cold workers) get the longer 45s leash below.
 export async function localGrade(surface: string, prompt: string, timeoutMs = 24000, agentKind: AgentKind = 'claude_code'): Promise<string> {
   const jwt = loadJwt();
   if (!jwt) throw new Error('NO_JWT');
   // Cloud-container: the grader runs on Cloudflare Containers \u2014 route to the
   // hosted ingress instead of the local channel. Same prompt + parseVerdict.
+  // Cloud grades get the full 45s (not the local 24s): the round-trip + a cold
+  // worker routinely needs >24s, which is exactly what was timing out and
+  // failing open on big bash prompts.
   if (process.env.SYNKRO_DEPLOY_LOCATION === 'cloud') {
-    return hostedGrade(ROLE_MAP[surface] || 'grade-edit', prompt, jwt, timeoutMs, agentKind);
+    return hostedGrade(ROLE_MAP[surface] || 'grade-edit', prompt, jwt, CLOUD_GRADE_TIMEOUT_MS, agentKind);
   }
   // BYOK grading mode routes the grade through an LLM API instead of the
   // on-device channel worker pool. The grader prompt + parseVerdict are shared.
@@ -1727,14 +1734,14 @@ export async function localGrade(surface: string, prompt: string, timeoutMs = 24
   return channelGrade(ROLE_MAP[surface] || 'grade-edit', prompt, jwt, 18929, timeoutMs, agentKind);
 }
 
-// Default 24s \u2014 was 45000, which EXCEEDED the CC cwe hook timeout (30s) and
-// guaranteed a force-kill on any slow grade. Two cwe chunks grade in parallel
-// within the same CC budget, so each must finish well under it.
+// Local-channel default 24s. Two cwe chunks grade in parallel within the same CC
+// budget (now 50s), so each must finish under it. Cloud cwe grades take the 45s
+// hosted leash (parallel chunks \u2192 wall-clock ~45s, still inside the 50s budget).
 export async function localGradeCwe(prompt: string, agentKind: AgentKind = 'claude_code', timeoutMs = 24000): Promise<string> {
   const jwt = loadJwt();
   if (!jwt) throw new Error('NO_JWT');
   if (process.env.SYNKRO_DEPLOY_LOCATION === 'cloud') {
-    return hostedGrade('grade-cwe', prompt, jwt, timeoutMs, agentKind);
+    return hostedGrade('grade-cwe', prompt, jwt, CLOUD_GRADE_TIMEOUT_MS, agentKind);
   }
   return channelGrade('grade-cwe', prompt, jwt, 18930, timeoutMs, agentKind);
 }
@@ -3540,6 +3547,16 @@ export function graderUnavailableMessage(hook: string, target: string, errorMess
     const agent = agentKind === 'cursor' ? 'Cursor' : 'Claude Code';
     return hook + ' ' + target + ' \u2192 local grader not configured for ' + agent + '. Add this agent to your synkro.toml file and run \`synkro install\`.';
   }
+  // In cloud-container mode the grade ran against the hosted ingress, NOT a local
+  // worker \u2014 say so, and distinguish a timeout (slow/cold grade) from a true
+  // outage so "local grader unavailable" stops masquerading as a dead grader.
+  if (process.env.SYNKRO_DEPLOY_LOCATION === 'cloud') {
+    const isTimeout = /tim(e|ed)\\s*out|aborted|the operation was aborted/i.test(errorMessage);
+    if (isTimeout) {
+      return hook + ' ' + target + ' \u2192 cloud grade timed out (45s), skipped';
+    }
+    return hook + ' ' + target + ' \u2192 cloud grader unavailable, skipped';
+  }
   return hook + ' ' + target + ' \u2192 local grader unavailable, skipped';
 }
 
@@ -3635,7 +3652,7 @@ const agentKind = (process.env.SYNKRO_HOOK_FORMAT === 'cursor' || process.argv.i
 
 async function main() {
   setupCursorHookSignals();
-  installHookWatchdog(27000);
+  installHookWatchdog(48000);
   try {
     const input = await readStdin();
     if (!input.trim()) { outputEmpty(); return; }
@@ -4029,7 +4046,7 @@ function scanPackageCapabilities(pkgName: string, cwd: string): PackageCapabilit
 
 async function main() {
   setupCursorHookSignals();
-  installHookWatchdog(27000);
+  installHookWatchdog(48000);
   try {
     const input = await readStdin();
     if (!input.trim()) { outputEmpty(); return; }
@@ -4942,7 +4959,7 @@ function isDuplicate(command: string, sessionId: string): boolean {
 
 async function main() {
   setupCursorHookSignals();
-  installHookWatchdog(27000);
+  installHookWatchdog(48000);
   try {
     const input = await readStdin();
     if (!input.trim()) { outputEmpty(); return; }
@@ -5214,7 +5231,7 @@ const agentKind = (process.env.SYNKRO_HOOK_FORMAT === 'cursor' || process.argv.i
 
 async function main() {
   setupCursorHookSignals();
-  installHookWatchdog(27000);
+  installHookWatchdog(48000);
   try {
     const input = await readStdin();
     if (!input.trim()) { outputEmpty(); return; }
@@ -5451,7 +5468,7 @@ function appendReviewToPlan(planFile: string, verdict: string): void {
 
 async function main() {
   setupCursorHookSignals();
-  installHookWatchdog(42000);
+  installHookWatchdog(48000);
   try {
     const input = await readStdin();
     if (!input.trim()) { outputEmpty(); return; }
@@ -10386,7 +10403,7 @@ function writeConfigEnv(opts) {
     `SYNKRO_CREDENTIALS_PATH=${shellQuoteSingle(credsPath)}`,
     `SYNKRO_TIER=${shellQuoteSingle(safeTier)}`,
     `SYNKRO_INFERENCE=${shellQuoteSingle(safeInference)}`,
-    `SYNKRO_VERSION=${shellQuoteSingle("1.6.71")}`
+    `SYNKRO_VERSION=${shellQuoteSingle("1.6.73")}`
   ];
   if (safeSynkroBin) lines.push(`SYNKRO_CLI_BIN=${shellQuoteSingle(safeSynkroBin)}`);
   if (safeUserId) lines.push(`SYNKRO_USER_ID=${shellQuoteSingle(safeUserId)}`);
@@ -10560,6 +10577,16 @@ async function verifyCloudGrader(jwt2) {
     return false;
   }
   console.log(`  \u2713 ${healthy} Claude worker(s) healthy`);
+  console.log("  Running smoke grade (a worker scores a known-risky edit; up to 120s)...");
+  const started = Date.now();
+  const ticker = setInterval(() => {
+    const secs = Math.round((Date.now() - started) / 1e3);
+    process.stdout.write(`\r    \u2026grading (${secs}s elapsed)   `);
+  }, 1e3);
+  const stopTicker = () => {
+    clearInterval(ticker);
+    process.stdout.write("\r\x1B[2K");
+  };
   try {
     const probe = 'Grade this edit. File: t.py. Change: os.system(request.args["cmd"])';
     const r = await fetch(`${base}/grade/submit`, {
@@ -10568,6 +10595,7 @@ async function verifyCloudGrader(jwt2) {
       body: JSON.stringify({ role: "grade-edit", payload: probe, content: probe, agent_kind: "claude_code" }),
       signal: AbortSignal.timeout(12e4)
     });
+    stopTicker();
     const raw = await r.text();
     let body = {};
     try {
@@ -10591,6 +10619,7 @@ async function verifyCloudGrader(jwt2) {
     await printWorkerDebug(base, jwt2);
     return false;
   } catch (e) {
+    stopTicker();
     const reason = e?.name === "TimeoutError" ? "the grade never returned within 120s (worker hung \u2014 usually claude auth)" : `the request failed (${e?.message || "network"})`;
     console.warn(`  \u2717 smoke grade FAILED: ${reason}.`);
     console.warn("    The container is provisioned but a grade does not complete; re-run `synkro install` \u2192 cloud.\n");
@@ -12063,7 +12092,14 @@ function writePluginFiles() {
       c.pluginSettingsPath,
       JSON.stringify({
         fastMode: true,
-        enabledMcpjsonServers: ["synkro-local"]
+        enabledMcpjsonServers: ["synkro-local"],
+        // Extended thinking is pure latency tax on a structured verdict grade and
+        // emits reasoning the verdict parser isn't tuned for. effortLevel only
+        // SOFTENS it; CLAUDE_CODE_DISABLE_THINKING=1 is the authoritative off
+        // switch. Mirror the cloud pool (pool-config.sh) so local + cloud graders
+        // behave identically.
+        effortLevel: "low",
+        env: { CLAUDE_CODE_DISABLE_THINKING: "1" }
       }, null, 2) + "\n",
       "utf-8"
     );
@@ -12304,7 +12340,7 @@ tmux kill-session -t "=$SESSION" 2>/dev/null || true
 # Start claude inside a detached tmux session so it has a real pty.
 # Redirect stderr to the log so we can see why it dies.
 tmux new-session -d -s "$SESSION" \\
-  "SYNKRO_CHANNEL_PORT=${CHANNEL_1_PORT} claude --dangerously-load-development-channels server:synkro-local --dangerously-skip-permissions --setting-sources project,local --model claude-sonnet-4-6 2>>$LOG; echo 'claude exited with code '$'?' >> $LOG"
+  "SYNKRO_CHANNEL_PORT=${CHANNEL_1_PORT} CLAUDE_CODE_DISABLE_THINKING=1 claude --dangerously-load-development-channels server:synkro-local --dangerously-skip-permissions --setting-sources project,local --model claude-sonnet-4-6 2>>$LOG; echo 'claude exited with code '$'?' >> $LOG"
 
 # Claude's --dangerously-load-development-channels shows a confirmation
 # prompt: option 1 = "I am using this for local development" (accept),
@@ -12366,7 +12402,7 @@ log "claude version: $(claude --version 2>&1 | head -1)"
 tmux kill-session -t "=$SESSION" 2>/dev/null || true
 
 tmux new-session -d -s "$SESSION" \\
-  "SYNKRO_CHANNEL_PORT=${CHANNEL_2_PORT} claude --dangerously-load-development-channels server:synkro-local --dangerously-skip-permissions --setting-sources project,local --model claude-sonnet-4-6 2>>$LOG; echo 'claude exited with code '$'?' >> $LOG"
+  "SYNKRO_CHANNEL_PORT=${CHANNEL_2_PORT} CLAUDE_CODE_DISABLE_THINKING=1 claude --dangerously-load-development-channels server:synkro-local --dangerously-skip-permissions --setting-sources project,local --model claude-sonnet-4-6 2>>$LOG; echo 'claude exited with code '$'?' >> $LOG"
 
 sleep 3
 if tmux has-session -t "=$SESSION" 2>/dev/null; then
@@ -12422,7 +12458,7 @@ log "claude version: $(claude --version 2>&1 | head -1)"
 tmux kill-session -t "=$SESSION" 2>/dev/null || true
 
 tmux new-session -d -s "$SESSION" \\
-  "SYNKRO_CHANNEL_PORT=${CHANNEL_3_PORT} claude --dangerously-load-development-channels server:synkro-local --dangerously-skip-permissions --setting-sources project,local --model claude-sonnet-4-6 2>>$LOG; echo 'claude exited with code '$'?' >> $LOG"
+  "SYNKRO_CHANNEL_PORT=${CHANNEL_3_PORT} CLAUDE_CODE_DISABLE_THINKING=1 claude --dangerously-load-development-channels server:synkro-local --dangerously-skip-permissions --setting-sources project,local --model claude-sonnet-4-6 2>>$LOG; echo 'claude exited with code '$'?' >> $LOG"
 
 sleep 3
 if tmux has-session -t "=$SESSION" 2>/dev/null; then
@@ -12478,7 +12514,7 @@ log "claude version: $(claude --version 2>&1 | head -1)"
 tmux kill-session -t "=$SESSION" 2>/dev/null || true
 
 tmux new-session -d -s "$SESSION" \\
-  "SYNKRO_CHANNEL_PORT=${CHANNEL_4_PORT} claude --dangerously-load-development-channels server:synkro-local --dangerously-skip-permissions --setting-sources project,local --model claude-sonnet-4-6 2>>$LOG; echo 'claude exited with code '$'?' >> $LOG"
+  "SYNKRO_CHANNEL_PORT=${CHANNEL_4_PORT} CLAUDE_CODE_DISABLE_THINKING=1 claude --dangerously-load-development-channels server:synkro-local --dangerously-skip-permissions --setting-sources project,local --model claude-sonnet-4-6 2>>$LOG; echo 'claude exited with code '$'?' >> $LOG"
 
 sleep 3
 if tmux has-session -t "=$SESSION" 2>/dev/null; then
@@ -14019,7 +14055,7 @@ var args = process.argv.slice(2);
 var cmd = args[0] || "";
 var subArgs = args.slice(1);
 function printVersion() {
-  console.log("1.6.71");
+  console.log("1.6.73");
 }
 function printHelp2() {
   console.log(`Synkro CLI \u2014 runtime safety for AI coding agents