sinapse-ai 1.25.3 → 1.27.0

package/.agents/skills/react-bits-frontend/SKILL.md

@@ -10,8 +10,16 @@ not as a black-box library.
 
 ## Locate the corpus
 
-Resolve the SINAPSE package/repository root, then read
-`docs/framework/react-bits/index.md`. Read only the category needed:
+Resolve the corpus in this exact order, then read `index.md` from the first
+location that contains the complete corpus:
+
+1. `<project>/docs/framework/react-bits/`
+2. `<installed-package>/docs/framework/react-bits/`
+3. `~/.sinapse/docs/framework/react-bits/`
+
+The project location wins so a project can pin or extend its installed research.
+The package location supports package-managed runs, and the global SINAPSE home
+supports `--global-only` installs. Read only the category needed:
 
 - `animations.md` for wrappers, cursors, trails, transitions and interactive effects.
 - `text-animations.md` for headline, counter, scramble, marquee and reveal work.
@@ -21,8 +29,9 @@ Resolve the SINAPSE package/repository root, then read
 - `audit-findings.md` when dependency, prop, variant or upstream accuracy matters.
 - `inventory.json` for exact machine-readable props, dependencies and variant state.
 
-If the corpus cannot be found, read `references/corpus-map.md`, then verify current
-facts against the official registry and source before implementation.
+If none of those locations has all nine files, state which locations were checked,
+ask the user to run the relevant SINAPSE install/update, then verify current facts
+against the official registry and source before implementation.
 
 ## Workflow
 

package/.claude/skill-manifest.json

@@ -1,6 +1,7 @@
 {
   "version": 1,
   "skillIds": [
+    "react-bits-frontend",
     "sinapse",
     "sinapse-agent",
     "sinapse-analyst",

package/.claude/skills/react-bits-frontend/SKILL.md

@@ -0,0 +1,75 @@
+---
+name: react-bits-frontend
+description: Select, install, adapt, combine, optimize, and audit official React Bits components for React, Next.js, Vite, Astro islands, and SINAPSE frontend projects. Use for animated text, cursors, reveals, cards, navigation, galleries, WebGL backgrounds, shaders, particles, motion systems, React Bits CLI/MCP commands, component props/dependencies, or when improving an existing page with React Bits while preserving accessibility, mobile performance, lifecycle cleanup, design-system fit, and license compliance.
+---
+
+# React Bits Frontend
+
+Use the source-grounded SINAPSE corpus to implement React Bits as application code,
+not as a black-box library.
+
+## Locate the corpus
+
+Resolve the corpus in this exact order, then read `index.md` from the first
+location that contains the complete corpus:
+
+1. `<project>/docs/framework/react-bits/`
+2. `<installed-package>/docs/framework/react-bits/`
+3. `~/.sinapse/docs/framework/react-bits/`
+
+The project location wins so a project can pin or extend its installed research.
+The package location supports package-managed runs, and the global SINAPSE home
+supports `--global-only` installs. Read only the category needed:
+
+- `animations.md` for wrappers, cursors, trails, transitions and interactive effects.
+- `text-animations.md` for headline, counter, scramble, marquee and reveal work.
+- `components.md` for cards, navigation, galleries, inputs and compound UI.
+- `backgrounds.md` for Canvas/WebGL/shader/particle backgrounds.
+- `implementation-playbook.md` for integration, composition, accessibility and tuning.
+- `audit-findings.md` when dependency, prop, variant or upstream accuracy matters.
+- `inventory.json` for exact machine-readable props, dependencies and variant state.
+
+If none of those locations has all nine files, state which locations were checked,
+ask the user to run the relevant SINAPSE install/update, then verify current facts
+against the official registry and source before implementation.
+
+## Workflow
+
+1. Inspect the target stack, component architecture, design tokens, performance budget
+   and existing animation/scroll ownership.
+2. Translate the visual request into a user-experience function.
+3. Search the relevant catalog and shortlist at most three candidates.
+4. Compare visual fit, dependencies, runtime engine, props, interaction model,
+   accessibility, mobile cost and compatibility with existing effects.
+5. Open the official source for the selected variant. Treat source and registry as
+   authoritative when docs conflict.
+6. Run `npm view <package>` for every declared dependency before installing it.
+7. Prefer TS-TW or TS-CSS in TypeScript projects. Never use the three empty CurvedInput
+   variants recorded in the snapshot; use JS-CSS or verify that upstream fixed them.
+8. Install through shadcn/jsrepo or copy manually. Keep upstream provenance and the
+   required license notice for substantial copies.
+9. Wrap the imported component behind a local application component. Map design
+   tokens, content, breakpoints and quality presets at that boundary.
+10. Implement reduced-motion behavior, semantic fallback, keyboard/focus behavior,
+    cleanup and static/mobile fallback.
+11. Test load, resize, route unmount/remount, long scroll, coarse pointer, reduced
+    motion and low-power mobile. Measure frame time and memory.
+12. Report component, variant, source SHA/URL, dependencies, adaptations, fallbacks and
+    remaining risks.
+
+## Composition rules
+
+- Use one dominant motion effect per viewport and no more than two support effects.
+- Prefer the lowest-cost engine that satisfies the visual objective.
+- Allow only one owner for smooth scroll, custom cursor and each render loop.
+- Do not stack multiple heavy WebGL/physics backgrounds without an explicit budget.
+- Pause offscreen/hidden loops and dispose GPU resources on unmount.
+- Preserve content and interaction when animation is disabled or fails.
+
+## Accuracy rules
+
+- Do not repeat the promotional “140+” as an exact count. The pinned snapshot has 139.
+- Do not infer functional variants from registry names alone; inspect source bytes/code.
+- Use registry JSON for install dependencies and source for actual API/behavior.
+- Note documentation typos and per-variant divergences from `audit-findings.md`.
+- Do not redistribute React Bits components as a standalone library, bundle, or port.

package/.codex/scripts/sync-codex-native.js

@@ -34,6 +34,10 @@ function isPathInside(parentPath, candidatePath) {
   return relative === '' || (!relative.startsWith('..') && !path.isAbsolute(relative));
 }
 
+function isSafeSkillId(skillId) {
+  return typeof skillId === 'string' && /^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(skillId);
+}
+
 function readCanonicalSource(projectRoot, sourcePath) {
   if (!sourcePath) {
     throw new Error('Codex agent pointer does not declare a canonical source');
@@ -329,6 +333,14 @@ function readCodexCatalog(projectRoot = PROJECT_ROOT) {
   if (typeof catalog.genericAgentSkillId !== 'string' || !catalog.genericAgentSkillId.trim()) {
     throw new Error('Codex catalog does not declare genericAgentSkillId');
   }
+  const catalogSkillIds = [
+    ...catalog.expectedSkillIds,
+    ...catalog.publicAliasSkillIds,
+    catalog.genericAgentSkillId,
+  ];
+  if (catalogSkillIds.some((skillId) => !isSafeSkillId(skillId))) {
+    throw new Error('Codex catalog contains an unsafe skill ID');
+  }
   return catalog;
 }
 

package/.sinapse-ai/install-manifest.yaml

@@ -7,7 +7,7 @@
 # - SHA256 hashes for change detection
 # - File types for categorization
 #
-version: 1.25.3
+version: 1.27.0
 generator: scripts/generate-install-manifest.js
 file_count: 1156
 files:

package/CHANGELOG.md

@@ -1,8 +1,17 @@
-## [1.25.3](https://github.com/caioimori/sinapse-ai/compare/1.25.2...1.25.3) (2026-07-15)
+## [1.27.0](https://github.com/caioimori/sinapse-ai/compare/1.26.0...1.27.0) (2026-07-16)
+
+### Features
+
+* default install to both providers [Story canonical-install-readme] ([6ba3df1](https://github.com/caioimori/sinapse-ai/commit/6ba3df13dd43c8103bd601758a1f2e96a87738c3))
 
 ### Bug Fixes
 
-* **installer:** restore provider adapter parity ([#385](https://github.com/caioimori/sinapse-ai/issues/385)) ([4c5c9fb](https://github.com/caioimori/sinapse-ai/commit/4c5c9fb1a60e5d8610da08f25f6f01a67a85a063))
+* address canonical install review [Story canonical-install-readme] ([191fdc4](https://github.com/caioimori/sinapse-ai/commit/191fdc43aee9e6525dfd636118087eaa311d4709))
+
+### Documentation
+
+* recommend supported Node LTS [Story canonical-install-readme] ([693e9d0](https://github.com/caioimori/sinapse-ai/commit/693e9d0f9819cd700eae45734da41b055063fa5b))
+* record React Bits release evidence [Story react-bits-distribution-parity] ([6dff59a](https://github.com/caioimori/sinapse-ai/commit/6dff59ab779d79437e8e09a07c5cf3a9ae8e024c))
 
 # Changelog