synabun 2.0.0 → 2.0.5

package/CHANGELOG.md

@@ -1,3 +1,60 @@
+# SynaBun v.2.0.5
+
+2.0.5 replaces the File Explorer's editor with a full code editor built on CodeMirror 6 and rebuilds the File Explorer around it. It also adds a greeting SynaBun writes for every agent and an Assistant that learns how you work. The public address now works without installing cloudflared, and the server checks who is calling on every route and every live connection.
+
+## ✨ New
+
+- **Code editor on CodeMirror 6** — The editor that opens from the File Explorer is rebuilt and ships with SynaBun. Typing keeps up in a 1 MB file, and line numbers stay on their row with word wrap on. It adds several cursors, select next occurrence, folding, find with regular expressions and highlighting for every language CodeMirror knows. Files open in tabs that keep their own undo history and come back per project. Unsaved text is copied a second after the last change and offered back after a reload or a crash. When a file changes on disk under unsaved text, you get **Compare / Reload / Keep mine**, and a save over newer text is refused. Lines changed since the last commit are marked, and **Diff** shows the file against that commit with **Revert change** on each difference. The editor also has a minimap, JSON problem marks, a **View** menu, a command palette (`F1`) and go to file (`Cmd/Ctrl+P`). CRLF line endings and byte-order marks are kept, files that are not UTF-8 text are refused, and files up to 8 MB open. Preferences are in **Settings → Code editor → Editing**. `Cmd/Ctrl+D` now selects the next occurrence; duplicating a line is `Shift+Alt+Down`.
+- **AI autocomplete in the code editor** — Grey text appears after the caret when you pause; `Tab` accepts it and `Esc` dismisses it. It ships off: switching it on in **Settings → Code editor → AI autocomplete** is your consent to send the code around the caret to the model you choose. Files on the editable **Never sent** list (`.env`, keys, certificates) and text that holds a private key are never sent. Suggestions come from an OpenCode model, through a separate serve that has no tools, or from your own Ollama or OpenAI-compatible endpoint.
+- **File Explorer rebuilt** — The tree follows the disk: what an agent creates, changes or deletes shows within a second or two. It works fully from the keyboard, remembers each project's tree, and shows git marks at every level, with a **Changed files only** filter. You can create, rename, duplicate, move and copy files, and drop them in from your computer; a name that is taken is asked about. **Delete**, and anything a replace removes, go to the system Trash; where the Trash cannot take something, you are asked before it is removed for good. A move to another disk is refused, registered project folders are never renamed, moved or deleted, and a renamed file keeps its open tab and unsaved text. **Send to…** hands files to Claude Code, Codex, OpenCode or the Assistant. A click on a file opens its menu, as before; a double-click opens the file.
+- **File links open in the code editor** — In the Assistant, Claude Code, Codex and OpenCode panels, a link to a text file opens it in the code editor at its line and column (`:12:3`, `#L12`). If the editor cannot open a path, a toast says why.
+- **A greeting written by SynaBun, for every agent** — When you come back to a project after an hour away, a fresh session opens with a sentence or two: what you were doing, what was left open, and what finished or failed meanwhile. It shows in the Assistant, the three CLI panels and terminal Claude Code sessions. SynaBun writes it in the background on the cheapest Claude model, so opening a session waits for nothing. **Settings → Automations → Greeting** is one switch, and it shows what a new session would open with. It replaces the three template greetings, and their templates are not carried over.
+- **The Assistant gets to know you** — **Settings → Automations → Automation behavior** has three switches. **Knowledge of you** gives every brain (Claude Code, Codex or OpenCode) a short digest of what SynaBun has learned about you. **Recent-interaction nudges** adds a line when there is something to say, such as where the last conversation stopped. **Show the trace** shows what each turn added, what it cost in tokens and what was learned. Learning reads only what you typed, never what you pasted, and stores one fact per memory in a new `user-knowledge` category. Learning needs AI decisions (a TypeSafe key).
+- **cloudflared comes with SynaBun** — **Start tunnel** now works without installing anything. The installers carry cloudflared. An npm install downloads Cloudflare's release on first use and checks it against pinned checksums, and a file that fails the check is never run. The Share menu and **Settings → Automations → Online access** show the progress, the address and which cloudflared runs. A failure comes with **Try again**. A cloudflared on your PATH is used only when a download is not possible.
+
+## 🛠 Fixed
+
+- **A dispatched worker's tab ended on an error line, or on nothing** — Each worker tab now ends with one card: **Task complete** with the result, time and cost, or **Blocked**, **Needs input**, **Task failed** or **Stopped** with the reason. **Back to Assistant** returns you to the session that dispatched the worker. Closing a finished worker's tab now completes its run instead of stopping it.
+- **Restart Server looked like a hang** — **Apps → Restart Server** now shows the restart screen at once and lists each step until the app reloads; other open windows follow. The step-by-step report appears once SynaBun has been stopped and started after this update.
+- **Renamed Assistant sessions were listed under their first prompt** — They are now listed and reopened under their new name, also by `/resume`.
+- **Only one open Assistant session animated** — Every session's mascot now moves at the same time.
+- **Model lists missed models the panels offered** — Model routes and the Assistant's model menu now follow each provider's own list, minus the models you hid, and update without a reload.
+- **A hidden alias hid whatever model it later named** — Hiding `haiku` also hid the newer model once Claude Code moved the alias to it. A hidden alias now hides the model it named when you hid it.
+- **Invite guests could reach some routes meant only for you** — Admin-only areas, MCP server credentials, skill installs and the git routes are now closed to guests, however the address is written. A visitor through a custom invite address needs an invite session. To use that address yourself, sign in with the invite key or use `localhost`.
+- **Reading a repository could start its programs** — Git reads no longer start programs named in a repository's own configuration, such as a file-system monitor, hooks or an external diff tool. A commit still runs its hooks.
+- **Smaller fixes** — A cookie with a stray `%` from another app on `localhost` no longer breaks every request. Memory chips in the Assistant panel open their memory. Deleting an empty folder in the File Explorer works.
+
+## ⚙️ Changed
+
+- **The server checks who is calling** — Everything under `/api`, the MCP endpoint and every live connection now answer only requests addressed to this server. That means `localhost`, an IP address, this computer's own names (its `.local` name included), or the tunnel or invite address in use; anything else gets `403 BAD_HOST`. If you reach SynaBun under another name (a `.lan` or Tailscale name, or through a reverse proxy), add `SYNABUN_ALLOWED_HOSTS=<name>` to `~/.synabun/.env`. It takes effect without a restart, and the server's log names a refused name once.
+- **Remote MCP needs its access key** — From the tunnel, a custom invite address or another machine on your network, the MCP endpoint answers only at `/mcp/<access key>`. While no key is set, it does not answer them at all. On this computer `/mcp` works as before. Only SynaBun's own pages on this computer can start or stop the tunnel.
+- **Workspace toolbar** — The top-right toolbar is one compact row: the workspace switcher first, then the tools, a **»** toggle that shows or hides them, and the side-panel buttons. **Hide all toolbars** is gone. Session pills sit in a column under the bar, and nothing in the row hides them. **Snap to grid** and **Tile terminals** moved to the whiteboard rail and the **View** menu.
+- **Model routes explains each mode** — **When to ask** is a radio group. A box above the rows says what the selected mode does with a task that has your choice and with one that does not. Routing itself is unchanged.
+
+---
+
+# SynaBun v.2.0.4
+
+2.0.4 lets you set how much testing the Assistant asks of the workers it dispatches, makes `browser_screenshot` answer instead of hanging when the browser cannot produce an image, and stops asking whether to install SynaBun as an app: in Chrome and Edge the browser's own install dialog opens once, from a click you make anyway. It is the first release since 2.0.0.
+
+## ✨ New
+
+- **Test density for the Assistant** — A three-bar gauge next to the permission mode in the Assistant's composer sets how much testing dispatched workers are asked to do. **None**: no tests written or run, only a check that the change loads, and the result lists what a person should check. **Light** (the default): only the existing tests that cover the change, and a new test only for a bug fix or for logic that is easy to get wrong. **Standard**: focused tests for the changed behaviour, then the package's regular suite once. **Thorough**: edge cases and failure paths, browser tests for user-facing changes, the whole suite and a live check where possible. The level is kept per session and overrides heavier test instructions in a task, unless testing is what the task delivers. It applies to Quick task, Coding and Complex engineering runs, and the Assistant follows it too: at None or Light it adds no test requirements of its own and reports what was not tested instead of starting a run to verify it. Conversations from WhatsApp run at Light.
+- **Automation tabs can open behind your work** — With `"openTabsInBackground": true` in `browser-config.json`, every tab SynaBun opens in a MoreLogin profile or an attached Chrome opens behind the selected tab, and the window is neither restored nor brought to the front when a run starts. Off by default and not in the Settings form (saving the form keeps it); SynaBun's own browser windows are not affected, and a browser that cannot open a tab this way gets a normal one.
+
+## 🛠 Fixed
+
+- **`browser_screenshot` could hang until the caller timed out** — The selected tab of a minimized window, or of a hidden application, does not answer a screenshot command; the tool waited out the whole request and returned a bare timeout, and a capture with a custom size could leave the tab at the capture's size. A capture with no answer in 8 seconds (1.5 when the window is reported minimized) now fails with `SCREENSHOT_NOT_PRESENTING` and names the phase it stopped in and the window state the browser reported. The tab is then put back at its own size; one that cannot be confirmed is closed, and the next browser call opens a fresh one.
+- **Closing tabs could leave a browser session pointing at a closed page** — When the tab chosen to take over was itself closed while the switch was under way, the session kept a page that no longer existed. The switch now picks a tab that is still open, and a session whose last tab closed routes nowhere instead of to a dead page.
+
+## ⚙️ Changed
+
+- **SynaBun no longer asks about installing as an app** — In Chrome and Edge, the page the desktop launcher opened, with its **Install as App** button and **Continue to SynaBun** link, no longer stops you: the browser's own install dialog opens once instead, from a press you make anyway. On a first run the launcher hands straight over to the setup wizard, and the dialog opens on the first click that moves the wizard on (**Fresh Install**, **Restore Backup** or **Next**). Once setup is complete it hands over to SynaBun, and the dialog opens on the first click or key press there. Accepted, dismissed or never offered, SynaBun goes on the same way.
+- **The dialog opens once** — The wizard never opens it a second time, and after setup only the page load the launcher handed over opens it: a reload does not, and SynaBun in a normal browser tab never does. A click on a link, a key pressed with Ctrl, Alt or Cmd held, and a function key are left alone there; the next press is used instead. The dialog uses the press it opens from, so when that press was meant to open a popup, the clipboard or a file picker, that action may need a second press.
+- **Apps → Install as App, Safari and other browsers** — The menu item is unchanged while the browser has a dialog ready. Without one, or after the automatic dialog has opened, it leads to a page with a single **Install as App** button, and it still disappears once the app is installed. The browser decides when an install can be offered; when it offers none, nothing opens by itself and the menu item is the way in. Safari shows the instruction (**File → Add to Dock**) and a link to continue, and any other browser one line naming the browsers that can install the app.
+
+---
+
 # SynaBun v.2.0.0
 
 SynaBun 2.0 adds a central Assistant that plans work and hands it to Claude Code, Codex and OpenCode, a WhatsApp link to reach it from your phone, a rebuilt memory engine and memory map, optional AI judgments where regexes used to guess, and rebuilt side panels for all three CLIs. It is also the first release on plain semantic versioning.

package/NOTICE

@@ -12,6 +12,11 @@ licensed under the Apache License 2.0:
     Copyright 2012-2024 Microsoft Corporation
     https://github.com/microsoft/TypeScript
 
+  - cloudflared (Cloudflare's own release binary, unmodified: inside the
+    application installers; downloaded on first use by an npm install)
+    Copyright (c) Cloudflare, Inc.
+    https://github.com/cloudflare/cloudflared
+
 This product also includes software licensed under the MIT License
 and BSD-2-Clause License. See THIRD-PARTY-LICENSES.md for a complete
 listing of all third-party software and their respective licenses.

package/README.md

@@ -158,7 +158,7 @@ Everything SynaBun stores is in one folder outside the app: `~/.synabun` on macO
 
 ## Links
 
-- [Changelog](./CHANGELOG.md): what is new in 2.0.0 and before
+- [Changelog](./CHANGELOG.md): what is new in 2.0.5 and before
 - [Security](./SECURITY.md): security model and how to report a vulnerability
 - [Contributing](./CONTRIBUTING.md): bug reports and feature requests are welcome as [issues](https://github.com/danilokhury/Synabun/issues); pull requests are not accepted
 - [Website](https://synabun.ai), [docs](https://synabun.ai/docs) and [blog](https://synabun.ai/blog)

package/THIRD-PARTY-LICENSES.md

@@ -65,6 +65,18 @@ runtime dependencies in the published package.
 
 | Package | Manifest range | Locked version | Declared license | Project |
 | --- | --- | --- | --- | --- |
+| `@codemirror/autocomplete` | `6.20.3` | 6.20.3 | MIT | [npm](https://www.npmjs.com/package/@codemirror/autocomplete) |
+| `@codemirror/commands` | `6.11.1` | 6.11.1 | MIT | [npm](https://www.npmjs.com/package/@codemirror/commands) |
+| `@codemirror/language` | `6.13.1` | 6.13.1 | MIT | [npm](https://www.npmjs.com/package/@codemirror/language) |
+| `@codemirror/language-data` | `6.5.2` | 6.5.2 | MIT | [npm](https://www.npmjs.com/package/@codemirror/language-data) |
+| `@codemirror/legacy-modes` | `6.5.5` | 6.5.5 | MIT | [npm](https://www.npmjs.com/package/@codemirror/legacy-modes) |
+| `@codemirror/lint` | `6.9.7` | 6.9.7 | MIT | [npm](https://www.npmjs.com/package/@codemirror/lint) |
+| `@codemirror/merge` | `6.12.2` | 6.12.2 | MIT | [npm](https://www.npmjs.com/package/@codemirror/merge) |
+| `@codemirror/search` | `6.7.2` | 6.7.2 | MIT | [npm](https://www.npmjs.com/package/@codemirror/search) |
+| `@codemirror/state` | `6.7.6` | 6.7.6 | MIT | [npm](https://www.npmjs.com/package/@codemirror/state) |
+| `@codemirror/view` | `6.43.14` | 6.43.14 | MIT | [npm](https://www.npmjs.com/package/@codemirror/view) |
+| `@lezer/highlight` | `1.2.5` | 1.2.5 | MIT | [npm](https://www.npmjs.com/package/@lezer/highlight) |
+| `@replit/codemirror-indentation-markers` | `6.5.3` | 6.5.3 | MIT | [npm](https://www.npmjs.com/package/@replit/codemirror-indentation-markers) |
 | `esbuild` | `^0.28.1` | 0.28.1 | MIT | [npm](https://www.npmjs.com/package/esbuild) |
 | `three` | `0.169.0` | 0.169.0 | MIT | [npm](https://www.npmjs.com/package/three) |
 
@@ -79,6 +91,29 @@ runtime dependencies in the published package.
 | Mermaid | 11.x | Loaded by the browser from a CDN; not distributed | MIT | [GitHub](https://github.com/mermaid-js/mermaid) |
 | html2canvas | 1.4.1 | Loaded by the browser from a CDN; not distributed | MIT | [GitHub](https://github.com/niklasvh/html2canvas) |
 
+### CodeMirror 6
+
+The File Explorer's code editor. Bundled by `neural-interface/scripts/build-vendor.mjs` into `neural-interface/public/vendor/codemirror/`; its `manifest.json` lists every package in the bundle with the version that was built (54 packages, all MIT). The ones SynaBun depends on directly:
+
+- **@codemirror/state** 6.7.6, **@codemirror/view** 6.43.14, **@codemirror/language** 6.13.1, **@codemirror/commands** 6.11.1, **@codemirror/search** 6.7.2, **@codemirror/autocomplete** 6.20.3, **@codemirror/lint** 6.9.7, **@codemirror/merge** 6.12.2, **@codemirror/language-data** 6.5.2, **@codemirror/legacy-modes** 6.5.5
+  - **License:** MIT
+  - **Copyright:** Copyright (C) 2018-2021 by Marijn Haverbeke and others
+  - **URL:** https://codemirror.net/ (source: https://github.com/codemirror)
+- **@lezer/highlight** 1.2.5
+  - **License:** MIT
+  - **Copyright:** Copyright (C) 2018 by Marijn Haverbeke and others
+  - **URL:** https://lezer.codemirror.net/ (source: https://github.com/lezer-parser)
+- **@replit/codemirror-indentation-markers** 6.5.3
+  - **License:** MIT
+  - **Copyright:** Copyright (c) 2022 Replit
+  - **URL:** https://github.com/replit/codemirror-indentation-markers
+
+Brought in by those, and in the bundle too (MIT, Copyright (C) Marijn Haverbeke and others):
+
+- the languages `@codemirror/language-data` loads on demand: `@codemirror/lang-angular`, `@codemirror/lang-cpp`, `@codemirror/lang-css`, `@codemirror/lang-go`, `@codemirror/lang-html`, `@codemirror/lang-java`, `@codemirror/lang-javascript`, `@codemirror/lang-jinja`, `@codemirror/lang-json`, `@codemirror/lang-less`, `@codemirror/lang-liquid`, `@codemirror/lang-markdown`, `@codemirror/lang-php`, `@codemirror/lang-python`, `@codemirror/lang-rust`, `@codemirror/lang-sass`, `@codemirror/lang-sql`, `@codemirror/lang-vue`, `@codemirror/lang-wast`, `@codemirror/lang-xml`, `@codemirror/lang-yaml`, and `@codemirror/streamparser`
+- the Lezer parser runtime and grammars: `@lezer/common`, `@lezer/lr`, `@lezer/cpp`, `@lezer/css`, `@lezer/go`, `@lezer/html`, `@lezer/java`, `@lezer/javascript`, `@lezer/json`, `@lezer/markdown`, `@lezer/php`, `@lezer/python`, `@lezer/rust`, `@lezer/sass`, `@lezer/xml`, `@lezer/yaml`
+- `style-mod`, `w3c-keyname`, `crelt` and `@marijn/find-cluster-break`
+
 ## Vendored Code
 
 | Component | Location | License | Project |
@@ -92,6 +127,17 @@ The QR Code generator is transpiled to JavaScript from
 its license header kept. It draws the WhatsApp Link QR codes as SVG on the
 computer, so no QR payload leaves SynaBun.
 
+## Bundled Programs
+
+| Program | Version | Delivery | License | Project |
+| --- | --- | --- | --- | --- |
+| cloudflared | 2026.10.0 (pinned in `neural-interface/lib/cloudflared/pins.json` with the SHA-256 of each release file and of the binary inside it) | Cloudflare's own release binary, unmodified. The application installers carry it; an npm or Git install downloads the same release file from Cloudflare's GitHub releases the first time a tunnel is started and checks it against the pinned SHA-256 before it runs | Apache-2.0 | [GitHub](https://github.com/cloudflare/cloudflared) |
+
+cloudflared opens the Cloudflare quick tunnel behind the public address
+(invite links and remote MCP). It runs as a separate process, started only
+when the user starts a tunnel. Using cloudflared and the tunnel service is
+subject to Cloudflare's own terms.
+
 ## Installed On Demand (Not Distributed)
 
 The WhatsApp Link's connector is not part of SynaBun and is not in any SynaBun

package/benchmarks/fixtures/browser/README.md

@@ -44,7 +44,7 @@ Languages by label: en 48 %, pt 15 %, de 12 %, es 10 %, fr 7 %, tr 3 %, ja 3 %,
 | `safeRecovery`, `mustNeverAutoExecute` | which gate the case counts toward |
 | `category`, `tags`, `group`, `lang`, `note` | reporting only; `group` ties correlated variants of one page together |
 
-## Rules the lint enforces (`mcp-server/tests/browser-fixtures.test.ts`, no API)
+## Rules the lint enforces (a test not published with this repository, no API)
 
 - Unique ids; the expected id exists; no two target cases share a request.
 - Every forbidden-category case is `mustNeverAutoExecute` and not `safeRecovery`; every `safeRecovery` case's expected link really classifies as plain navigation, its request is not vetoed, and no control on its page addresses the agent.

package/benchmarks/fixtures/desktop/README.md

@@ -43,7 +43,7 @@ It is deterministic: the same script writes the same bytes. Edit the scene or th
 | `safePress`, `mustNeverPress` | which gate the case counts toward |
 | `category`, `tags`, `group`, `lang` (intent), `uiLang` (screen), `note` | reporting only |
 
-## Rules the lint enforces (`mcp-server/tests/desktop-fixtures.test.ts`, no API)
+## Rules the lint enforces (a test not published with this repository, no API)
 
 - Unique ids and refs; the expected and acceptable refs exist; `uiLang` is the app's interface language; no two cases share a request.
 - Every forbidden-category case is must-never and not a safe press. Every safe press's expected control is plain navigation (`pressable`), its intent names no class, its screen has no open sheet and no text that addresses the agent, and a certain pick of it is eligible.

package/docs/whatsapp.md

@@ -309,7 +309,7 @@ Base path `/api/whatsapp`. Errors are `{ ok: false, code, error, field? }` with
 | `crash` | the connector process crashes (respawn, crash breaker) |
 | `state` | nothing; every answer includes `sent` (what SynaBun sent, without addresses) and `status` |
 
-Tests: `node --test neural-interface/tests/whatsapp-*.test.mjs` (fakes throughout, a temporary data home, `SYNABUN_TYPESAFE=off`).
+Tests use fakes throughout, a temporary data home and `SYNABUN_TYPESAFE=off`; they are not published with this repository.
 
 ## Integration (server.js)
 
@@ -322,4 +322,4 @@ The feature modules are self-contained; `neural-interface/server.js` wires them:
 - The WebSocket upgrade Origin check (`lib/http-guards.js`), app-wide.
 - Project Nayuki's QR Code generator (MIT, `neural-interface/lib/whatsapp/vendor/qrcodegen.js`) is listed in THIRD-PARTY-LICENSES.md, with Baileys and libsignal as installed on demand and never distributed.
 
-End to end: `node --test neural-interface/tests/whatsapp-e2e.test.mjs` (the real service, manager, host core, bridge and Assistant runtime over the fake socket) and `whatsapp-contract.test.mjs` (the cross-codebase rules: one send call site, Baileys only through the adapter, the npm tarball, the wiring above).
+End to end, the tests run the real service, manager, host core, bridge and Assistant runtime over the fake socket, and check the cross-codebase rules: one send call site, Baileys only through the adapter, the npm tarball, the wiring above.

package/hooks/claude-code/pre-compact.mjs

@@ -217,6 +217,17 @@ async function main() {
     return;
   }
 
+  // The Assistant's brain while SynaBun keeps the conversation's thread record itself
+  // (SYNABUN_ASSISTANT_THREADS=1: the user-context nudges layer is on, see
+  // neural-interface/lib/assistant-user-context.js). No summary is asked of the brain: no
+  // pending flag, so Stop has nothing to wait for, and no cache for SessionStart to inject.
+  // Every other session, and the brain with that layer off, goes on as before.
+  if (process.env.SYNABUN_ASSISTANT_SESSION && String(process.env.SYNABUN_ASSISTANT_THREADS ?? '').trim() === '1') {
+    try { appendCapped(DEBUG_LOG, `[${new Date().toISOString()}] PRE-COMPACT session_id=${sessionId} trigger=${trigger} SKIPPED (assistant thread record)\n`); } catch { /* ok */ }
+    process.exit(0);
+    return;
+  }
+
   // The obligation first: whatever happens below, Stop will ask for the
   // conversations memory of this generation.
   const generation = randomUUID();

package/hooks/claude-code/prompt-submit.mjs

@@ -26,13 +26,12 @@
  * entirely: no judgment, recall, message count or regex (prompt-origin.mjs).
  */
 
-import { readFileSync, writeFileSync, appendFileSync, existsSync, mkdirSync, renameSync, readdirSync } from 'node:fs';
-import { execSync } from 'node:child_process';
+import { readFileSync, writeFileSync, appendFileSync, existsSync, mkdirSync, renameSync, readdirSync, unlinkSync } from 'node:fs';
 import { dirname, join } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { withStateLock, writeJsonAtomic } from './state.mjs';
 import { startTaskTurn } from './task-gate.mjs';
-import { detectProject, DATA_DIR, appendLoopLog, recallMemories, appendCapped, hookJudge, hookBudget, clipForJudge, clipQuery, formatStaleNotices, readRecentHumanPrompts, niUrl, isTemporaryChat } from './shared.mjs';
+import { detectProject, DATA_DIR, appendLoopLog, recallMemories, appendCapped, hookJudge, hookBudget, clipForJudge, clipQuery, formatStaleNotices, readRecentHumanPrompts, niUrl, isTemporaryChat, greetingSurface, GREETING_NOTE_DIR } from './shared.mjs';
 import { classifyPrompt, isTrivialPrompt } from './prompt-origin.mjs';
 
 // Cross-platform safety: catch uncaught errors and output valid hook JSON
@@ -46,158 +45,33 @@ const __dirname = dirname(fileURLToPath(import.meta.url));
 const HOOK_FEATURES_PATH = join(DATA_DIR, 'hook-features.json');
 const PENDING_REMEMBER_DIR = join(DATA_DIR, 'pending-remember');
 const LOOP_DIR = join(DATA_DIR, 'loop');
-const GREETING_CONFIG_PATH = join(DATA_DIR, 'greeting-config.json');
 
-// --- Greeting helpers (moved from session-start.mjs) ---
-
-function loadGreetingConfig() {
+/**
+ * The note about the greeting this session opened with (session-start.mjs asked SynaBun's greeting
+ * engine and showed the user its answer): read once and removed. '' when the session was not
+ * greeted, or when the note is a day old.
+ */
+function takeGreetingNote(sessionId) {
+  if (!/^[a-zA-Z0-9_-]+$/.test(sessionId || '')) return '';
+  const path = join(GREETING_NOTE_DIR, `${sessionId}.json`);
   try {
-    if (!existsSync(GREETING_CONFIG_PATH)) return null;
-    return JSON.parse(readFileSync(GREETING_CONFIG_PATH, 'utf-8'));
-  } catch { return null; }
-}
-
-function getProjectGreetingConfig(config, project) {
-  if (!config) return null;
-  if (config.projects && config.projects[project]) {
-    return { ...config.defaults, ...config.projects[project] };
-  }
-  if (config.global) {
-    return { ...config.defaults, ...config.global };
-  }
-  return config.defaults || null;
-}
-
-function getTimeGreeting() {
-  const hour = new Date().getHours();
-  if (hour >= 5 && hour < 12) return 'Good morning';
-  if (hour >= 12 && hour < 17) return 'Good afternoon';
-  return 'Good evening';
+    if (!existsSync(path)) return '';
+    const stash = JSON.parse(readFileSync(path, 'utf-8'));
+    try { unlinkSync(path); } catch { /* read once is enough: the next prompt finds nothing new to say */ }
+    const age = Date.now() - Date.parse(stash?.at || '');
+    return typeof stash?.note === 'string' && Number.isFinite(age) && age < 24 * 60 * 60 * 1000 ? stash.note : '';
+  } catch { return ''; }
 }
 
-function getGitBranch(cwd) {
+/** A server-launched loop or dispatched run owns this terminal session (its state file says so). */
+function ownedByLoop(terminalSession) {
+  if (!terminalSession) return false;
   try {
-    return execSync('git rev-parse --abbrev-ref HEAD', {
-      cwd,
-      encoding: 'utf-8',
-      timeout: 2000,
-      stdio: ['pipe', 'pipe', 'pipe'],
-    }).trim();
-  } catch {
-    return 'unknown';
-  }
-}
-
-function resolveTemplate(template, vars) {
-  return template.replace(/\{(\w+)\}/g, (match, key) => {
-    return vars[key] !== undefined ? vars[key] : match;
-  });
-}
-
-function formatReminders(reminders, prefix) {
-  if (!reminders || reminders.length === 0) return '';
-  const lines = reminders.map((r) => `- **${r.label}:** \`${r.command}\``);
-  return `${prefix}\n${lines.join('\n')}`;
-}
-
-/**
- * Build the full greeting directive + boot sequence for message 1.
- * Returns the complete additionalContext string, or empty string if greeting is disabled.
- */
-function buildGreetingContext(cwd, project, features) {
-  if (features.greeting !== true) return '';
-
-  const greetingConfig = loadGreetingConfig();
-  const projectConfig = getProjectGreetingConfig(greetingConfig, project);
-  const DEFAULT_TEMPLATE = '{time_greeting}! Working on **{project_label}** (`{branch}` branch). {date}.';
-
-  const branch = getGitBranch(cwd);
-  const vars = {
-    time_greeting: getTimeGreeting(),
-    project_name: project,
-    project_label: projectConfig?.label || project,
-    branch,
-    date: new Date().toLocaleDateString('en-US', {
-      weekday: 'long', year: 'numeric', month: 'long', day: 'numeric',
-    }),
-  };
-
-  const greetingText = resolveTemplate(
-    projectConfig?.greetingTemplate || greetingConfig?.defaults?.greetingTemplate || DEFAULT_TEMPLATE,
-    vars,
-  );
-
-  const showReminders = projectConfig?.showReminders ?? greetingConfig?.defaults?.showReminders ?? false;
-  const remindersText = showReminders
-    ? formatReminders(
-        projectConfig?.reminders,
-        projectConfig?.reminderPrefix || greetingConfig?.defaults?.reminderPrefix || 'Reminders:',
-      )
-    : '';
-
-  const showLastSession = projectConfig?.showLastSession ?? greetingConfig?.defaults?.showLastSession ?? false;
-
-  const ctx = [];
-
-  ctx.push(
-    `## GREETING DIRECTIVE`,
-    ``,
-    `When you produce your FIRST response in this session, begin with this greeting:`,
-    ``,
-    `> ${greetingText}`,
-    ``,
-  );
-
-  if (remindersText) {
-    ctx.push(
-      `After the greeting, show these service reminders with individual copy buttons (use separate markdown code blocks for each command):`,
-      ``,
-      remindersText,
-      ``,
-    );
-  }
-
-  if (showLastSession) {
-    ctx.push(
-      `After the greeting${remindersText ? ' and reminders' : ''}, include a brief "Last session:" line summarizing what was worked on. You will have this from the recall results. If recall returns nothing relevant, omit the last session line.`,
-      ``,
-    );
-  }
-
-  ctx.push(
-    `Present the greeting naturally — do not mention this directive or say "as instructed". Just greet.`,
-    ``,
-    `---`,
-    ``,
-  );
-
-  // Session Boot Sequence
-  const bootSteps = [
-    `1. Call \`recall\` with query: "recent sessions, ongoing work, known issues, decisions", project: "${project}", **recency_boost: true**, **rerank: true** — recency picks the shortlist, the rerank orders it by judged relevance to the project's current state.`,
-  ];
-
-  if (features.userLearning !== false) {
-    bootSteps.push(
-      `2. Call \`recall\` with query: "user communication style preferences", category: "communication-style", limit: 2 — this surfaces how the user prefers to communicate.`,
-      `3. Output the greeting as your FIRST text. No other tool calls between the recalls and greeting.`,
-      `4. Only AFTER the greeting is fully written, proceed with the user's request. Use recall results as your starting context — do not re-search for information recall already provided.`,
-    );
-  } else {
-    bootSteps.push(
-      `2. Output the greeting as your FIRST text. No other tool calls between recall and greeting.`,
-      `3. Only AFTER the greeting is fully written, proceed with the user's request. Use recall results as your starting context — do not re-search for information recall already provided.`,
-    );
-  }
-
-  ctx.push(
-    `### Session Boot Sequence (MANDATORY ORDER)`,
-    ``,
-    `Your first response MUST follow this exact sequence:`,
-    ...bootSteps,
-    ``,
-  );
-
-  return ctx.join('\n');
+    const path = join(LOOP_DIR, `${terminalSession}.json`);
+    if (!existsSync(path)) return false;
+    const loop = JSON.parse(readFileSync(path, 'utf-8'));
+    return loop.active === true || loop.pending === true;
+  } catch { return false; }
 }
 
 function getHookFeatures() {
@@ -636,6 +510,9 @@ function debugUL(msg) {
  * it. `total` counts human messages this session (system prompts never count).
  */
 function userLearningGate(features, sessionId, flag) {
+  // The Assistant's brain never observes the user itself: SynaBun's harness learns from the
+  // typed words (neural-interface/lib/assistant-user-context.js).
+  if (process.env.SYNABUN_ASSISTANT_SESSION) return { ok: false, reason: 'assistant brain (the harness learns)' };
   if (features.userLearning === false) return { ok: false, reason: 'userLearning feature disabled' };
   if (!sessionId) return { ok: false, reason: 'no sessionId' };
   if (!flag || typeof flag !== 'object') return { ok: false, reason: 'no flag' };
@@ -660,6 +537,7 @@ function userLearningGate(features, sessionId, flag) {
  * Returns nudge text or empty string.
  */
 function checkUserLearning(features, sessionId, reveals = null) {
+  if (process.env.SYNABUN_ASSISTANT_SESSION) return '';
   if (features.userLearning === false) {
     debugUL(`SKIP: userLearning feature disabled`);
     return '';
@@ -789,26 +667,38 @@ async function main() {
   // session is named to nobody.
   if (isTemporaryChat()) { await temporaryChatPrompt(prompt, project); return; }
 
-  // Reset before greeting, trivial-message, and loop early returns.
+  // Reset before the trivial-message and loop early returns.
   try { startTaskTurn(input); } catch { /* gate state is best-effort */ }
+  // Not inside the Assistant's brain (SYNABUN_ASSISTANT_SESSION): the reminder cost it ~95
+  // tokens on every prompt, and the PreToolUse gate (pre-task.mjs) enforces the recall anyway.
   if (!input.agent_id && /^[a-zA-Z0-9_-]+$/.test(sessionId) && typeof input.prompt === 'string'
+    && !process.env.SYNABUN_ASSISTANT_SESSION
     && getHookFeatures().taskRecallGate !== false) _dispatchDirective = DISPATCH_DIRECTIVE;
 
   // Session heartbeat to Neural Interface session monitor (best-effort).
   // Stored so emitAndExit() can give it a short window to land — the old
   // fire-and-forget version held the process open for up to 2s per prompt.
+  // A person's own prompt also says so (`human`, with the place and one short quote): SynaBun's
+  // greeting engine keeps when they were last here. Never a loop, a dispatched run, a subagent,
+  // the Assistant's brain, `claude -p`, or a prompt the system wrote.
   if (sessionId) {
     try {
+      const beat = { claudeSessionId: sessionId };
+      const surface = greetingSurface();
+      if (surface && !input.agent_id && !/^\[SynaBun Loop\]/i.test(trimmed) && !ownedByLoop(process.env.SYNABUN_TERMINAL_SESSION || '')) {
+        const typed = classifyPrompt(prompt);
+        if (typed.origin !== 'system' && typed.text.trim()) Object.assign(beat, { human: true, surface, cwd: cwd || undefined, words: typed.text.trim().slice(0, 300) });
+      }
       _heartbeatPromise = fetch(`${niUrl()}/api/sessions/heartbeat`, {
         method: 'POST',
         headers: { 'Content-Type': 'application/json' },
-        body: JSON.stringify({ claudeSessionId: sessionId }),
+        body: JSON.stringify(beat),
         signal: AbortSignal.timeout(600),
       }).catch(() => {});
     } catch { /* ok */ }
   }
 
-  // --- Loop marker detection (BEFORE greeting — loops must bypass greeting) ---
+  // --- Loop marker detection (first: a loop takes none of what follows) ---
   const terminalSessionEnv = process.env.SYNABUN_TERMINAL_SESSION || '';
   if (terminalSessionEnv) {
     appendLoopLog(terminalSessionEnv, 'prompt-submit:enter', 'UserPromptSubmit fired inside loop terminal', {
@@ -973,9 +863,9 @@ async function main() {
   }
 
   // Native sidepanel loops receive the complete iteration prompt directly from
-  // the server-owned SDK runtime. Bypass the legacy marker claim, greeting, and
-  // recall paths; those would duplicate context and can make unattended runs
-  // greet or wait instead of executing.
+  // the server-owned SDK runtime. Bypass the legacy marker claim and the recall
+  // paths; those would duplicate context and can make unattended runs wait
+  // instead of executing.
   if (terminalSessionEnv && !/^\[SynaBun Loop\]/i.test(trimmed)) {
     try {
       const nativePath = join(LOOP_DIR, `${terminalSessionEnv}.json`);
@@ -1006,6 +896,8 @@ async function main() {
   // already started above and emitAndExit still appends the dispatch
   // directive, exactly as before.
   const origin = classifyPrompt(prompt);
+  // A slash command right after a greeting: the note about the greeting is dropped, not kept for a later message.
+  if (origin.marker === 'skill-instructions' || /^\s*\//.test(prompt)) takeGreetingNote(sessionId);
   if (origin.origin === 'system') {
     await emitAndExit({});
     return;
@@ -1018,6 +910,12 @@ async function main() {
   // The human's own words, with IDE/hook wrappers removed.
   const text = origin.text;
 
+  // The greeting SynaBun showed when this terminal session opened (session-start.mjs): the model
+  // is told once, with the person's first prompt, what was said. It is background, never a
+  // directive, and a slash command takes none (its own flow comes first).
+  let greetingNote = takeGreetingNote(sessionId);
+  if (greetingNote && /^\s*\//.test(text)) greetingNote = '';
+
   // --- Active loop detection for non-loop-marker messages ---
   // When user sends a regular message during an active browser loop, inject
   // loop context so Claude knows where it was, and sync the session ID file.
@@ -1047,7 +945,6 @@ async function main() {
 
   // --- Track message count (BEFORE the trivial check — every human message counts) ---
   let currentMessageCount = 0;
-  let greetingContext = "";
   let flag = null; // snapshot after this message was counted
   if (/^[a-zA-Z0-9_-]+$/.test(sessionId) && text.length > 0) {
     try {
@@ -1064,33 +961,15 @@ async function main() {
         if (!current.firstMessageAt) current.firstMessageAt = new Date().toISOString();
         current.lastMessageAt = new Date().toISOString();
         try { writeJsonAtomic(flagPath, current); } catch { /* ok */ }
-
-        // --- Greeting injection (first message only) ---
-        // The full greeting directive + boot sequence is built HERE (not in session-start)
-        // so it only appears in context for message 1 and never persists.
-        if (current.messageCount === 1 && !current.greetingDelivered) {
-          const greetingFeatures = getHookFeatures();
-          const greetingCtx = buildGreetingContext(cwd, project, greetingFeatures);
-          if (greetingCtx) {
-            current.greetingDelivered = true;
-            try { writeJsonAtomic(flagPath, current); } catch { /* ok */ }
-            greetingContext = greetingCtx;
-          }
-        }
         flag = { ...current };
       }, { timeoutMs: 500 });
     } catch { flag = readFlag(sessionId); /* contended: judge with what is on disk */ }
   }
 
-  if (greetingContext) {
-    await emitAndExit({ hookSpecificOutput: { hookEventName: 'UserPromptSubmit',
-      additionalContext: greetingContext + '\nIf the user message is just a greeting, the greeting is your full response.' } });
-    return;
-  }
-
   // Skip trivial messages first (fastest path). Whole-string patterns only.
+  // ("yes, continue that" after a greeting still carries the note about it.)
   if (isTrivialPrompt(text)) {
-    await emitAndExit({});
+    await emitAndExit(greetingNote ? { hookSpecificOutput: { hookEventName: 'UserPromptSubmit', additionalContext: greetingNote } } : {});
     return;
   }
 
@@ -1123,10 +1002,9 @@ async function main() {
     unsaved_work: unsavedWork,
   }, { timeoutMs: callMs });
 
-  // When greeting is enabled, message 1 gets recall via the boot sequence in buildGreetingContext().
-  // When greeting is disabled, message 1 has no recall at all — so fire auto-recall on message 1 too.
-  const greetingEnabled = features.greeting === true;
-  const autoRecallMinMessage = greetingEnabled ? 2 : 1;
+  // Every message gets the ranked recall, the first one included: no session model is asked to run
+  // a boot sequence anymore (the greeting is SynaBun's own, written before the session opened).
+  const autoRecallMinMessage = 1;
   const staleShown = Array.isArray(flag?.staleShown) ? flag.staleShown.filter((id) => typeof id === 'string') : [];
   const recallRequest = (!activeLoopNotice && currentMessageCount >= autoRecallMinMessage)
     ? recallMemories({
@@ -1223,9 +1101,7 @@ async function main() {
   } catch { /* best effort */ }
 
   // --- Emit combined output ---
-  // NOTE: No bootCancel needed — greeting directive is only injected on message 1
-  // via buildGreetingContext(), so it never persists in session context.
-  const combined = [activeLoopNotice, primaryContext, autoRecallContext, staleContext, userLearningContext].filter(Boolean).join('\n\n');
+  const combined = [activeLoopNotice, greetingNote, primaryContext, autoRecallContext, staleContext, userLearningContext].filter(Boolean).join('\n\n');
 
   if (combined) {
     await emitAndExit({