@synkro-sh/cli 1.7.27 → 1.7.30

package/dist/bootstrap.js

@@ -7826,8 +7826,22 @@ export async function runStub(surface: string, opts: StubOpts = {}): Promise<voi
     // wait above that budget — not the 6s telemetry default — or the stub abandons
     // the request before the result lands and the completion shows up a hook late.
     const timeoutMs = surface === 'bash-followup' ? 32000 : (opts.telemetry ? 6000 : 28000);
-    const url = 'http://127.0.0.1:' + PORT + '/api/scan/' + surface + (harness === 'cursor' ? '?harness=cursor' : '');
-    const body = JSON.stringify(envelope);
+    // Cloud has no local container to reach. Post the SAME envelope to the org's grader
+    // via the gateway's /grade/submit as role 'scan:<surface>'; the container runs
+    // scanRouter (runScan) server-side and returns the SAME shaped decision — so cloud
+    // and local share ONE grading implementation, no client-side parsing. The gateway
+    // accepts the durable 1yr MCP token (verifyOrg → org-derived, tenant-safe).
+    const cloud = deployIsCloud();
+    // Regex-free trailing-slash trim — this is inside a template literal, where a
+    // regex like /\\/+$/ mis-escapes into broken emitted code (smoke:hooks catches it).
+    let gwBase = cfgVal('SYNKRO_GATEWAY_URL') || 'https://api.synkro.sh';
+    while (gwBase.endsWith('/')) gwBase = gwBase.slice(0, -1);
+    const url = cloud
+      ? gwBase + '/grade/submit'
+      : 'http://127.0.0.1:' + PORT + '/api/scan/' + surface + (harness === 'cursor' ? '?harness=cursor' : '');
+    const body = cloud
+      ? JSON.stringify({ role: 'scan:' + surface, payload: JSON.stringify(envelope), content: '' })
+      : JSON.stringify(envelope);
     const headers = { 'Content-Type': 'application/json', Authorization: 'Bearer ' + loadMcpJwt() };
     // Telemetry hooks (bash-followup, transcript-sync, session telemetry) IGNORE the
     // response and the server processes them DETACHED, so delivery RELIABILITY beats
@@ -11759,7 +11773,7 @@ function writeConfigEnv(opts) {
     `SYNKRO_CREDENTIALS_PATH=${shellQuoteSingle(credsPath)}`,
     `SYNKRO_TIER=${shellQuoteSingle(safeTier)}`,
     `SYNKRO_INFERENCE=${shellQuoteSingle(safeInference)}`,
-    `SYNKRO_VERSION=${shellQuoteSingle("1.7.27")}`
+    `SYNKRO_VERSION=${shellQuoteSingle("1.7.30")}`
   ];
   if (safeSynkroBin) lines.push(`SYNKRO_CLI_BIN=${shellQuoteSingle(safeSynkroBin)}`);
   if (safeUserId) lines.push(`SYNKRO_USER_ID=${shellQuoteSingle(safeUserId)}`);
@@ -12381,13 +12395,7 @@ async function installCommand(opts = {}) {
   }
   const transcriptConsent = transcriptCC || transcriptCursor;
   ensureSynkroDir();
-  let hookMode = opts.hookMode || resolvePersistedHookMode();
-  if (target === "cloud-container" && hookMode === "stub") {
-    if (opts.hookMode === "stub") {
-      console.log("  \u24D8 Cloud mode needs full hooks (stub hooks require a local container) \u2014 using full.\n");
-    }
-    hookMode = "full";
-  }
+  const hookMode = opts.hookMode || resolvePersistedHookMode();
   const scripts = writeHookScripts(hookMode);
   console.log("Wrote hook scripts to ~/.synkro/hooks/\n");
   for (const mode of ["edit", "bash"]) {
@@ -15965,7 +15973,7 @@ var args = process.argv.slice(2);
 var cmd = args[0] || "";
 var subArgs = args.slice(1);
 function printVersion() {
-  console.log("1.7.27");
+  console.log("1.7.30");
 }
 function printHelp2() {
   console.log(`Synkro CLI \u2014 runtime safety for AI coding agents