synabun 2.0.10 → 2.1.0

package/neural-interface/lib/request-gate.js

@@ -67,15 +67,18 @@ export const ADMIN_ONLY_PREFIXES = Object.freeze([
   '/api/settings', '/api/display-settings',
   '/api/connections', '/api/setup', '/api/system',
   '/api/invite/key', '/api/invite/sessions', '/api/invite/proxy', '/api/invite/permissions',
-  '/api/claude-code', '/api/mcp-key', '/api/mcp/runtime-profile',
+  '/api/claude-code', '/api/mcp-key', '/api/mcp/runtime-tools',
   // MCP servers and plugins as the owner set them up: their credentials (GET /api/mcp/env/<name>?reveal=1
   // answers with them), the registry of the commands that are started, installs, what is written into the
-  // CLIs' own configuration, and the tool profile. Everything under /api/mcp, the two entries above included.
+  // CLIs' own configuration, and tool lists. Everything under /api/mcp, the two entries above included.
   '/api/mcp',
   '/api/plugins',
   // Installing a skill into one of the owner's runtimes, or removing it (Settings; its older address is under
   // /api/claude-code above). The "Skills Studio" permission opens /api/skills-studio, not this.
   '/api/skills/install',
+  // The Skills Service's installs, rollbacks and removals, the move of the old bridges, and its settings: the
+  // owner's, from the app's own page (lib/skills/api-v2.js refuses guests and agents on its own too).
+  '/api/skills-studio/v2/installations', '/api/skills-studio/v2/migrations', '/api/skills-studio/v2/config',
   '/api/tunnel/start', '/api/tunnel/stop',
   '/api/bridges', '/api/keybinds',
   '/api/cli',
@@ -124,6 +127,13 @@ export const FEATURE_PERMISSION_MAP = Object.freeze([
   { prefix: '/api/style-guide',   perm: 'styleGuide' },
 ].map(Object.freeze));
 
+/**
+ * What an invite guest only reads, whatever the owner opened to guests: the "Skills Studio" permission shows the
+ * skills, and every change (save, create, delete, files, icons, install, customize, import, the Skills Service's
+ * drafts and reviews) is the owner's, as lib/skills/api-v2.js and each legacy Studio route say on their own too.
+ */
+export const GUEST_READ_ONLY_PREFIXES = Object.freeze(['/api/skills-studio']);
+
 /**
  * The GETs a guest does not get for the asking. The terminal's lists of a folder's files and of its branches take
  * any folder of the disk from the request, so they are the terminal's: a guest reads them with the permission
@@ -579,6 +589,11 @@ export function createRequestGates({
       ? FEATURE_READ_PATHS.find((entry) => read.some((form) => startsWithSegment(form, entry.path)))
       : FEATURE_PERMISSION_MAP.find((entry) => read.some((form) => form.startsWith(entry.prefix)));
     if (match && !permissions()?.[match.perm]) return res.status(403).json({ error: 'Feature not enabled' });
+    // And a feature opened to guests that they only read: no change, whatever was opened.
+    const reading = req.method === 'GET' || req.method === 'HEAD' || req.method === 'OPTIONS';
+    if (!reading && GUEST_READ_ONLY_PREFIXES.some((prefix) => read.some((form) => startsWithSegment(form, prefix)))) {
+      return sendGuardError(res, 403, 'GUEST_FORBIDDEN', 'Guests can read skills, not change them.');
+    }
     return next();
   }
 

package/neural-interface/lib/rulesets/api.js

@@ -27,7 +27,7 @@
 // lock file that cannot be used at all is `LOCK_UNAVAILABLE`, a 500: nothing
 // was changed, and trying again will not help until the data home is fixed. A
 // remove that leaves a copy to the user (an edited one, or for OpenCode one
-// that the user's own line in config.json points at) is not a refusal: 200,
+// that the user's own line in opencode.json points at) is not a refusal: 200,
 // `ok: true`, `kept: [{path, reason}]`.
 //
 // Every installer call is synchronous and runs to its end inside the handler,

package/neural-interface/lib/rulesets/fs-safe.js

@@ -3,7 +3,7 @@
 // ═══════════════════════════════════════════
 //
 // The rules installer edits files that belong to the user and to other CLIs
-// (~/.codex/AGENTS.md, ~/.gemini/GEMINI.md, OpenCode's config.json). These
+// (~/.codex/AGENTS.md, ~/.gemini/GEMINI.md, OpenCode's opencode.json). These
 // helpers make each write all-or-nothing, keep a symlinked file a symlink,
 // refuse to write through a link that points at nothing, keep a copy of what
 // was there before, never read a corrupt JSON file as `{}`, and never write

package/neural-interface/lib/rulesets/installer.js

@@ -6,7 +6,7 @@
 // keeps an untouched copy current:
 //
 //   claude    owned file  ~/.claude/rules/synabun.md (and each Claude account's config dir)
-//   opencode  owned file  <opencode config dir>/synabun.md + one `instructions` entry in config.json
+//   opencode  owned file  <opencode config dir>/synabun.md + one `instructions` entry in opencode.json
 //   codex     block       ~/.codex/AGENTS.md (account homes link to it, or get their own block)
 //   gemini    block       ~/.gemini/GEMINI.md
 //   cursor    none        User Rules live inside the app: copy and paste ("manual")
@@ -29,7 +29,7 @@
 // (the user opted out) or null (never asked). `created` lists the files and
 // directories install made, `links` the symlinks it made and where each
 // pointed. OpenCode's row also holds `instructionsEntry`, the exact string
-// SynaBun added to config.json. `removal` on a row is a removal that is not
+// SynaBun added to opencode.json. `removal` on a row is a removal that is not
 // over: it is saved, with the paths it is about to take, before the first
 // copy goes, and it stays when a copy was refused (damaged markers, an
 // unreadable file). The next boot finishes it (reconcile), and the record is
@@ -74,6 +74,7 @@ import { loadLegacyHashes, normalise, renderRuleset, RULESET_HOSTS } from './ren
 import { findBlocks, findLegacy, isPristine, removeBlock, removeRange, replaceRange, upsertBlock, wrap } from './managed-text.js';
 import { backupFile, findBrokenLink, readBytes, readJsonStrict, unlinkIfUnchanged, writeTextAtomic } from './fs-safe.js';
 import { addToJsonList, countJsonKey, removeFromJsonList } from './json-edit.js';
+import { mcpServersOf, mergedOpencodeConfig, opencodeConfigDir, opencodeConfigFilePath, readOpencodeConfigDocuments } from '../opencode-config.js';
 import { createWriterLock, DEFAULT_LOCK_TIMEOUT_MS, LOCK_FILE_NAME } from './lock.js';
 
 export const RULESET_STATES = Object.freeze(['not-installed', 'installed', 'newer', 'outdated', 'modified', 'conflict', 'shadowed', 'error', 'manual']);
@@ -190,7 +191,7 @@ export function createRulesetInstaller({
   // `hooks` are seams for tests, each a point where another program could act
   // (or where a test holds an operation still, inside the lock):
   // afterInspect(host, path, status) once a carrier was read and is about to be
-  // written, beforeCommit(path) right before a file (a carrier, config.json,
+  // written, beforeCommit(path) right before a file (a carrier, opencode.json,
   // the state file) is checked against what was read and replaced or deleted,
   // afterCheck(path) between that check and a delete, afterSave(revision) once
   // the state file was saved.
@@ -351,12 +352,14 @@ export function createRulesetInstaller({
 
   // ── Where things live ──────────────────────────────────────────────────────
   // Resolved the way the MCP toggle routes resolve them: Claude, Codex and
-  // Gemini under the home directory, OpenCode under XDG_CONFIG_HOME when set.
+  // Gemini under the home directory, OpenCode in its configuration folder
+  // (OPENCODE_CONFIG_DIR, else XDG_CONFIG_HOME/opencode, else ~/.config/opencode),
+  // whose opencode.json OpenCode 2 reads (lib/opencode-config.js).
   function layout() {
     // The server passes the resolver its /api/opencode/mcp toggle uses, so both always edit the same file.
     const opencodeConfig = opencodeConfigPath
       ? resolve(opencodeConfigPath())
-      : join(env?.XDG_CONFIG_HOME ? join(env.XDG_CONFIG_HOME, 'opencode') : join(home, '.config', 'opencode'), 'config.json');
+      : opencodeConfigFilePath(opencodeConfigDir({ env: env || {}, home }));
     return {
       claudeDir: join(home, '.claude'),
       codexHome: join(home, '.codex'),
@@ -427,7 +430,7 @@ export function createRulesetInstaller({
       if (host === 'claude') return !!JSON.parse(readFileSync(join(home, '.claude.json'), 'utf8'))?.mcpServers?.SynaBun;
       if (host === 'gemini') return !!JSON.parse(readFileSync(join(where.geminiDir, 'settings.json'), 'utf8'))?.mcpServers?.SynaBun;
       if (host === 'codex') return /^\[mcp_servers\.SynaBun\]/m.test(readFileSync(join(where.codexHome, 'config.toml'), 'utf8'));
-      if (host === 'opencode') return !!JSON.parse(readFileSync(where.opencodeConfig, 'utf8'))?.mcp?.SynaBun;
+      if (host === 'opencode') return !!mcpServersOf(mergedOpencodeConfig(readOpencodeConfigDocuments(where.opencodeDir))).SynaBun;
     } catch { /* no config, no registration */ }
     return false;
   }
@@ -511,7 +514,7 @@ export function createRulesetInstaller({
   /**
    * The file an `instructions` entry of `configPath` names, or null when the entry is not one plain path: a URL, or
    * a pattern with glob characters. A leading `~` is the installer's home, and a relative path starts at the
-   * directory of config.json (never at this process's working directory).
+   * directory of opencode.json (never at this process's working directory).
    */
   function entryFile(value, configPath) {
     if (typeof value !== 'string' || !value) return null;
@@ -530,8 +533,7 @@ export function createRulesetInstaller({
     if (path === resolve(owned)) return true;
     try { return realpathSync(path) === realpathSync(owned); } catch { return false; }
   }
-  function readOpencodeConfig() {
-    const path = layout().opencodeConfig;
+  function readOpencodeConfig(path = layout().opencodeConfig) {
     const entry = opencodeEntry();
     const refuse = (why) => ({ path, exists: true, hasEntry: false, cfg: null, text: null, bytes: null, error: `${path} ${why}. SynaBun will not rewrite it: fix the file, or add "${entry}" to its "instructions" list by hand.` });
     let bytes;
@@ -558,7 +560,7 @@ export function createRulesetInstaller({
     return { path, exists: true, hasEntry: (cfg.instructions || []).some((value) => entryIsOwnedFile(value, path)), cfg, text, bytes, error: null };
   }
   /**
-   * The text of config.json after `edit()`, accepted only when it parses to
+   * The text of opencode.json after `edit()`, accepted only when it parses to
    * exactly `cfg`. There is no other way to write this file: when the edit
    * cannot be made on the text, SynaBun refuses rather than write the whole
    * object out again and lose what the user's file spells its own way.
@@ -570,7 +572,7 @@ export function createRulesetInstaller({
     } catch { /* text the editor could not follow */ }
     throw new Error(`${path} could not be edited safely, so SynaBun did not write it. Change its "instructions" list by hand: the entry is "${opencodeEntry()}".`);
   }
-  /** What install writes when there is no config.json yet: remove deletes the file only while it still holds exactly this. */
+  /** What install writes when there is no opencode.json yet: remove deletes the file only while it still holds exactly this. */
   function newConfigText(value) {
     return addToJsonList('{}\n', 'instructions', value);
   }
@@ -582,7 +584,7 @@ export function createRulesetInstaller({
   }
   /**
    * The `instructions` entries that resolve to SynaBun's owned file and that SynaBun has no record of adding: the
-   * user's own lines, however they are spelled (`~/...`, relative to config.json, a symlink to the file). One listing
+   * user's own lines, however they are spelled (`~/...`, relative to opencode.json, a symlink to the file). One listing
    * of the recorded string is SynaBun's; every other is theirs. A URL or a glob pattern is never one of them.
    */
   function userEntries(row, config) {
@@ -592,13 +594,13 @@ export function createRulesetInstaller({
     return list.filter((value, index) => index !== mine && entryIsOwnedFile(value, config.path));
   }
   /**
-   * One change to config.json. `plan(config)` answers null (nothing to do) or
+   * One change to opencode.json. `plan(config)` answers null (nothing to do) or
    * {text, done?}; `text: null` deletes the file. The file is replaced only
    * while it still holds the bytes that were read: a change by another program
-   * in between is CHANGED_UNDERNEATH, and config.json is left to it.
+   * in between is CHANGED_UNDERNEATH, and opencode.json is left to it.
    */
-  function editOpencodeConfig(tally, plan) {
-    const config = readOpencodeConfig();
+  function editOpencodeConfig(tally, plan, path = layout().opencodeConfig) {
+    const config = readOpencodeConfig(path);
     if (config.error) throw new Error(config.error);
     const step = plan(config);
     if (!step) return;
@@ -611,7 +613,7 @@ export function createRulesetInstaller({
     tally.changed = true;
     if (step.done) step.done();
   }
-  /** Lists synabun.md in config.json unless it is listed already, and records the string SynaBun added. */
+  /** Lists synabun.md in opencode.json unless it is listed already, and records the string SynaBun added. */
   function addOpencodeEntry(row, tally) {
     const value = opencodeEntry();
     let listed = null;
@@ -645,7 +647,7 @@ export function createRulesetInstaller({
       const mine = ownedEntry(row, config);
       const others = theirs ? userEntries(row, config) : [];
       if (mine === null && !others.length) return null;
-      // A config.json install created goes only while its bytes are still what install wrote. Anything the user
+      // An opencode.json install created goes only while its bytes are still what install wrote. Anything the user
       // added since makes it their file: the entries are edited out and the file stays.
       if (mine !== null && row.created.includes(config.path) && config.text === newConfigText(mine)) return { text: null };
       const dropKey = row.created.includes(`${config.path}#instructions`);
@@ -661,6 +663,60 @@ export function createRulesetInstaller({
     });
   }
 
+  // ── OpenCode 1's config.json ───────────────────────────────────────────────
+  // An older SynaBun listed synabun.md in config.json, which OpenCode 2 never reads. A copy SynaBun manages whose
+  // recorded entry is there is moved, at the next boot (reconcile) or install: listed in opencode.json, then the one
+  // string SynaBun added is taken out of config.json (the file goes when SynaBun made it and it still holds only that
+  // string). A remove takes that string out too. A line the user wrote in config.json is never touched. At a boot, a
+  // copy config.json no longer lists (the user took the line out, or the file) is an opt-out, as it was with
+  // OpenCode 1: never put back in opencode.json. An install, which the user asked for, lists it whatever config.json says.
+  function opencode1ConfigPath() {
+    return join(layout().opencodeDir, 'config.json');
+  }
+  /** The entry an older SynaBun recorded adding to config.json, or null. */
+  function opencode1Record(row) {
+    const owned = row.instructionsEntry;
+    return owned && typeof owned.value === 'string' && samePath(owned.config, opencode1ConfigPath()) ? { config: owned.config, value: owned.value } : null;
+  }
+  /**
+   * Whether config.json still lists the copy (`legacy`: opencode1Record), by any spelling: the line SynaBun added or
+   * one of the user's. A config.json SynaBun cannot read as plain JSON cannot say it does not, so it counts as listing.
+   */
+  function opencode1Listed(legacy) {
+    const config = readOpencodeConfig(legacy.config);
+    return !!config.error || config.hasEntry;
+  }
+  /** Takes the string of `legacy` (opencode1Record) out of config.json, and SynaBun's record of what it made there. */
+  function removeOpencode1Entry(row, tally, legacy) {
+    editOpencodeConfig(tally, (config) => {
+      if (!config.exists || !config.cfg) return null;
+      const list = [...(config.cfg.instructions || [])];
+      const at = list.lastIndexOf(legacy.value);
+      if (at < 0) return null;
+      if (row.created.includes(config.path) && config.text === newConfigText(legacy.value)) return { text: null };
+      const dropKey = row.created.includes(`${config.path}#instructions`);
+      list.splice(at, 1);
+      const cfg = { ...config.cfg, instructions: list };
+      if (!list.length && dropKey) delete cfg.instructions;
+      return { text: configText(config.path, cfg, () => removeFromJsonList(config.text, 'instructions', legacy.value, { dropEmptyKey: dropKey })) };
+    }, legacy.config);
+    row.created = row.created.filter((path) => !samePath(path, legacy.config) && path !== `${legacy.config}#instructions`);
+  }
+  /**
+   * A managed copy listed in config.json only: listed in opencode.json, and SynaBun's string taken out of
+   * config.json (a failure there leaves it with a warning: OpenCode 2 does not read that file). False when the row
+   * has no such record.
+   */
+  function moveOpencode1Entry(row, tally) {
+    const legacy = opencode1Record(row);
+    if (!legacy) return false;
+    addOpencodeEntry(row, tally);
+    try { removeOpencode1Entry(row, tally, legacy); } catch (error) {
+      tally.warnings.push(`${legacy.config} still lists ${legacy.value} under "instructions" (OpenCode 2 does not read that file): ${error?.message || error}`);
+    }
+    return true;
+  }
+
   // ── Writing ────────────────────────────────────────────────────────────────
   /**
    * The pasted copies in `text`, sorted by what install may do with them:
@@ -847,8 +903,7 @@ export function createRulesetInstaller({
     if (first.block) out.installedVersion = first.block.version;
     if (host === 'opencode') {
       const config = readOpencodeConfig();
-      const sideFiles = ['opencode.json', 'opencode.jsonc'].filter((name) => existsSync(join(primary.dir, name)));
-      if (sideFiles.length) out.notes = [`OpenCode also reads ${sideFiles.join(' and ')} in ${primary.dir}; SynaBun writes config.json, the same file its MCP toggle uses.`];
+      if (existsSync(join(primary.dir, 'opencode.jsonc'))) out.notes = [`OpenCode also reads opencode.jsonc in ${primary.dir}; SynaBun writes opencode.json, the same file its MCP toggle uses.`];
       if (config.error) return { ...out, state: 'error', error: config.error, detail: config.error };
       if (first.status !== 'missing' && !config.hasEntry) {
         unlisted = `${config.path} does not list it under "instructions", so OpenCode does not load it.`;
@@ -858,7 +913,7 @@ export function createRulesetInstaller({
           return { ...out, state: 'not-installed', installedVersion: null, detail: `${primary.path} exists, but ${unlisted}` };
         }
       }
-      // A line in config.json that SynaBun did not add points at the file: a remove keeps both unless it is forced.
+      // A line in opencode.json that SynaBun did not add points at the file: a remove keeps both unless it is forced.
       if (first.status !== 'missing' && userEntries(row, config).length) out.entry = 'user';
     }
     if (first.status === 'missing' && RANK[worst.status] < RANK.error) return { ...out, installedVersion: null };
@@ -991,7 +1046,7 @@ export function createRulesetInstaller({
           stripLegacy(host, target.legacyFile, tally);
         }
       }
-      if (host === 'opencode') addOpencodeEntry(row, tally);
+      if (host === 'opencode' && !moveOpencode1Entry(row, tally)) addOpencodeEntry(row, tally);
 
       Object.assign(row, {
         managed: true,
@@ -1055,10 +1110,10 @@ export function createRulesetInstaller({
    * first; damaged markers, a block stamped for another tool, a symlinked owned
    * file and a file that cannot be read are refused either way.
    *
-   * OpenCode: a line in config.json that points at the owned file and that
+   * OpenCode: a line in opencode.json that points at the owned file and that
    * SynaBun did not add keeps the file too (`kept`, reason `listed-in-config`):
    * nothing is ever left pointing at a file SynaBun deleted. With `force` that
-   * line goes as well, after a backup of config.json, and then the file.
+   * line goes as well, after a backup of opencode.json, and then the file.
    *
    * Symlinks at a block carrier (AGENTS.md, GEMINI.md): the block is taken out
    * of the file the link points at and the link stays, exactly as install wrote
@@ -1076,7 +1131,7 @@ export function createRulesetInstaller({
    * True while a copy that keeps a removal open is still on disk: one SynaBun
    * should have taken and could not. That is damaged markers, a file that
    * cannot be read, an untouched copy of this host's rules (behind a symlink,
-   * or held back by another refusal), and for OpenCode a config.json that
+   * or held back by another refusal), and for OpenCode an opencode.json that
    * cannot be edited while SynaBun's entry is on record. A copy the user
    * edited, a file without markers and a block stamped for another tool are
    * not: the keep rule leaves the first two to the user, and the third was
@@ -1169,6 +1224,11 @@ export function createRulesetInstaller({
         if (go && doomed.length) recordIntent(doomed.map((entry) => entry.path));
         if (go && together) {
           try { removeOpencodeEntry(row, tally, { theirs: force && doomed.length > 0 }); } catch (error) { refuse(layout().opencodeConfig, 'error', error?.message || String(error)); }
+          // The string an older SynaBun added to OpenCode 1's config.json goes too (OpenCode 2 never read it).
+          const legacy = opencode1Record(row);
+          if (legacy) {
+            try { removeOpencode1Entry(row, tally, legacy); } catch (error) { tally.warnings.push(`${legacy.config} still lists ${legacy.value} under "instructions": ${error?.message || error}`); }
+          }
         }
         if (!(together && refused.length)) {
           for (const { path, text } of go ? doomed : []) {
@@ -1253,7 +1313,7 @@ export function createRulesetInstaller({
       // (`created`, OpenCode's entry) stays on record, so a forced remove or a Replace can still clean up. The same
       // row for a refusal that leaves nothing to wait for (a block stamped for another tool, a copy that turned out
       // edited): the host is opted out, and no removal is kept open over a file that was never SynaBun's to take.
-      // `paths` are places a copy of the rules is: config.json, which a refusal can name, is not one of them.
+      // `paths` are places a copy of the rules is: opencode.json, which a refusal can name, is not one of them.
       const config = host === 'opencode' ? layout().opencodeConfig : null;
       Object.assign(row, {
         managed: false, installedVersion: null, installedSha: null, path: primary.path,
@@ -1349,7 +1409,11 @@ export function createRulesetInstaller({
         const config = host === 'opencode' ? readOpencodeConfig() : null;
         if (config?.error) { states[host] = 'error'; continue; }
         const first = isDir(primary.dir) ? inspect(host, primary, expected) : { status: 'missing' };
-        if (first.status === 'missing' || (config && !config.hasEntry)) {
+        // Listed by an older SynaBun in OpenCode 1's config.json only: moved to opencode.json, never an opt-out. A copy
+        // config.json does not list any more is not moved: the user took it out, which is the opt-out below.
+        const older = config && first.status !== 'missing' && !config.hasEntry ? opencode1Record(row) : null;
+        const moving = older !== null && opencode1Listed(older);
+        if (first.status === 'missing' || (config && !config.hasEntry && !moving)) {
           // The user deleted it: an opt-out, never a reason to put it back. (A copy SynaBun's own removal took is
           // not this case: that removal is on record and was dealt with above.)
           Object.assign(row, { managed: false, optedOutAt: stamp() });
@@ -1358,6 +1422,7 @@ export function createRulesetInstaller({
           continue;
         }
         const tally = call.tally(host);
+        if (moving) moveOpencode1Entry(row, tally);
         const known = new Set(row.paths.map((path) => realKey(path)));
         let primaryCurrent = first.status === 'current';
         for (const target of list) {

package/neural-interface/lib/rulesets/json-edit.js

@@ -2,7 +2,7 @@
 // SynaBun — one entry of a JSON list, edited as text (pure, no fs)
 // ═══════════════════════════════════════════
 //
-// OpenCode's config.json belongs to the user. Parsing it and writing it back
+// OpenCode's opencode.json belongs to the user. Parsing it and writing it back
 // would re-indent it, re-space it and drop whatever JSON.stringify spells
 // differently, all to add one string to one list. These two functions change
 // only the characters of that entry (and of the key, when SynaBun adds or takes

package/neural-interface/lib/session-cache-builder.js

@@ -24,7 +24,7 @@ import {
 } from './db.js';
 import { parseLine } from './session-chunker.js';
 import { listCodexSessionsFromAccounts } from './codex-session-catalog.js';
-import { opencodeDbFlavor, sessionTablesFor, v2MessageText } from './opencode-db-schema.js';
+import { OPENCODE_SESSION_TABLES, hasOpencodeSessionTables, v2MessageText } from './opencode-db-schema.js';
 
 const MAX_BODY = 256 * 1024;
 const MAX_MSG_CHARS = 8 * 1024;
@@ -381,18 +381,15 @@ export function rebuildCodexCache({ project, projects, accounts, onProgress } =
 
 // --- OpenCode ---
 
-// `protocol`: the OpenCode major SynaBun talks to (lib/opencode-db-schema.js
-// opencodeDbFlavor): OpenCode 2 keeps its sessions in session_v2 and their text
-// in session_message rows, in the same database file as OpenCode 1's tables.
-export function rebuildOpencodeCache({ getOpencodeDb, onProgress, protocol = null } = {}) {
+// OpenCode 2 keeps its sessions in session_v2 and their text in session_message rows
+// (lib/opencode-db-schema.js); a file without those tables has nothing to index.
+export function rebuildOpencodeCache({ getOpencodeDb, onProgress } = {}) {
   const emit = onProgress || (() => {});
   if (typeof getOpencodeDb !== 'function') return { sessions: 0, updated: 0 };
 
   const ocdb = getOpencodeDb();
-  if (!ocdb) return { sessions: 0, updated: 0 };
-  const flavor = opencodeDbFlavor(ocdb, protocol);
-  if (!flavor) return { sessions: 0, updated: 0 };
-  const tables = sessionTablesFor(flavor);
+  if (!ocdb || !hasOpencodeSessionTables(ocdb)) return { sessions: 0, updated: 0 };
+  const tables = OPENCODE_SESSION_TABLES;
 
   let sessions;
   try {
@@ -409,29 +406,19 @@ export function rebuildOpencodeCache({ getOpencodeDb, onProgress, protocol = nul
   let total = sessions.length;
   let updated = 0;
 
-  // OpenCode 1 schema: message.data (JSON w/ role+metadata) + part.data (JSON w/ type+text).
-  // Pull parts per message, decode JSON, grab text where type === 'text'.
-  // OpenCode 2: one session_message row per message, its text in `data`
-  // (v2MessageText); read as the same { part_id, part_created, pdata, mdata } rows.
+  // One session_message row per message, its text in `data` (v2MessageText); read as
+  // { part_id, part_created, pdata, mdata } rows.
   let partStmt;
   try {
-    partStmt = flavor === 'v2'
-      ? (() => {
-        const rows = ocdb.prepare(`SELECT id, type, time_created, data FROM session_message
-                                   WHERE session_id = ? AND type IN ('user', 'assistant')
-                                   ORDER BY seq ASC`);
-        return {
-          all: (sessionId) => rows.all(sessionId).map((row) => {
-            const said = v2MessageText(row.type, row.data);
-            return said ? { part_id: row.id, part_created: row.time_created, pdata: JSON.stringify({ type: 'text', text: said.text }), mdata: JSON.stringify({ role: said.role }) } : null;
-          }).filter(Boolean),
-        };
-      })()
-      : ocdb.prepare(`SELECT p.id AS part_id, p.time_created AS part_created, p.data AS pdata, m.data AS mdata
-                             FROM part p
-                             LEFT JOIN message m ON m.id = p.message_id
-                             WHERE p.session_id = ?
-                             ORDER BY p.time_created ASC`);
+    const rows = ocdb.prepare(`SELECT id, type, time_created, data FROM session_message
+                               WHERE session_id = ? AND type IN ('user', 'assistant')
+                               ORDER BY seq ASC`);
+    partStmt = {
+      all: (sessionId) => rows.all(sessionId).map((row) => {
+        const said = v2MessageText(row.type, row.data);
+        return said ? { part_id: row.id, part_created: row.time_created, pdata: JSON.stringify({ type: 'text', text: said.text }), mdata: JSON.stringify({ role: said.role }) } : null;
+      }).filter(Boolean),
+    };
   } catch { partStmt = null; }
 
   for (const row of sessions) {

package/neural-interface/lib/session-title-generator.js

@@ -111,10 +111,32 @@ async function generateClaudeTitle(input, deps) {
   }
 }
 
+/**
+ * Why a `codex exec` title run failed, in one short line: never its command
+ * line (the arguments name the project folder) and never its whole stderr.
+ */
+export function codexTitleFailure(error) {
+  const lines = String(error?.stderr || '').split(/\r?\n/).map(line => line.trim())
+    .filter(line => line && !/^Reading (?:prompt|additional input) from stdin/i.test(line));
+  const said = lines.length ? `: ${lines.at(-1).slice(0, 200)}` : '';
+  if (error?.code === 'ERR_CHILD_PROCESS_STDIO_MAXBUFFER') return new Error('codex exec wrote more than its title run may');
+  if (error?.killed || error?.signal === 'SIGTERM') return new Error(`codex exec did not answer within ${SESSION_TITLE_TIMEOUT_MS / 1000} s${said}`);
+  if (error?.code === 'ENOENT') return new Error('codex was not found');
+  const status = Number.isInteger(error?.code) ? `exit code ${error.code}` : error?.code || error?.signal || 'an error';
+  return new Error(`codex exec failed (${status})${said}`);
+}
+
 async function generateCodexTitle(input, deps) {
   if (typeof deps.execFile !== 'function' || typeof deps.getCodexBin !== 'function') {
     throw new Error('Codex title runner is unavailable');
   }
+  // The prompt goes in on stdin, which is then ended, as the Codex SDK does,
+  // never as an argument. `codex exec` reads stdin whenever it is not a
+  // terminal: given a prompt argument it waits for stdin to end to add it to
+  // the prompt ("Reading additional input from stdin..."), so an open pipe held
+  // every title request until its timeout, whose error message then carried
+  // the whole command line (the person's prompt) into the server log. Windows
+  // also limits a command line to 32,767 characters.
   const args = [
     'exec', '--ephemeral', '--skip-git-repo-check', '--ignore-rules',
     '--sandbox', 'read-only', '--color', 'never', '--json',
@@ -125,20 +147,39 @@ async function generateCodexTitle(input, deps) {
   if (input.model) args.push('-m', input.model);
   const effort = codexReasoningEffort(input.effort);
   if (effort) args.push('-c', `model_reasoning_effort="${effort}"`);
-  args.push(titlePrompt(input));
   let env = {
     ...(deps.env || process.env),
     CODEX_HOME: deps.getCodexAccountHome?.(input.accountId || 'default'),
   };
   if (typeof deps.getAugmentedPath === 'function') env = withPathEnv(env, deps.getAugmentedPath());
-  const { stdout } = await deps.execFile(deps.getCodexBin(), args, {
+  // util.promisify(execFile) hands the child over as `.child`.
+  const running = deps.execFile(deps.getCodexBin(), args, {
     cwd: input.cwd || process.cwd(),
     env,
     timeout: SESSION_TITLE_TIMEOUT_MS,
     maxBuffer: 2 * 1024 * 1024,
     windowsHide: true,
   });
-  return extractCodexText(stdout);
+  // Handled before anything else is done with the child: the run rejects when codex fails, is stopped or times out,
+  // and a rejection nobody handles ends the server (server.js handleProcessFailure).
+  const settled = Promise.resolve(running).then(result => ({ result }), error => ({ error }));
+  try {
+    const stdin = running?.child?.stdin;
+    if (stdin) {
+      // A Codex that ended before reading it: its exit says why, not this pipe.
+      stdin.on?.('error', () => {});
+      stdin.end(titlePrompt(input));
+    }
+  } catch (error) {
+    // The prompt could not be handed over: the run is stopped (it would wait for its stdin until the timeout) and
+    // its end awaited, never left behind.
+    try { running?.child?.kill?.(); } catch {}
+    await settled;
+    throw new Error(`codex exec could not be given the prompt (${error?.code || 'stdin'})`);
+  }
+  const { result, error } = await settled;
+  if (error) throw codexTitleFailure(error);
+  return extractCodexText(result?.stdout);
 }
 
 async function generateOpenCodeTitle(input, deps) {
@@ -152,42 +193,24 @@ async function generateOpenCodeTitle(input, deps) {
   const timer = setTimeout(() => controller.abort(new Error('Session title request timed out')), SESSION_TITLE_TIMEOUT_MS);
   timer.unref?.();
   let sessionId = null;
-  // OpenCode 2 (lib/opencode2-client.js): its one-shot generator when the model
-  // allows it (OpenCode's free tier answers it 503), else a temporary session
-  // whose permissions deny every tool: OpenCode 2 has no tool switch per prompt.
-  const opencode2 = deps.openCodeClient.getProtocol?.() === 2;
-  if (opencode2) {
-    const raw = deps.openCodeClient.getClient?.();
-    try {
-      const generated = await raw?.generate?.({
-        prompt: `${TITLE_SYSTEM_PROMPT}\n\n${titlePrompt(input)}`,
-        model: input.model || undefined,
-        directory: input.cwd || undefined,
-        signal: controller.signal,
-      });
-      const text = String(generated?.data?.text || '').trim();
-      if (!generated?.error && text) { clearTimeout(timer); return text; }
-    } catch { /* the session below */ }
-  }
+  // The client's one-shot generator when the model allows it (OpenCode's free
+  // tier answers it 503), else a temporary session whose rules deny every tool:
+  // OpenCode has no tool switch per prompt.
+  try {
+    const generated = await deps.openCodeClient.getClient?.()?.generate?.({
+      prompt: `${TITLE_SYSTEM_PROMPT}\n\n${titlePrompt(input)}`,
+      model: input.model || undefined,
+      directory: input.cwd || undefined,
+      signal: controller.signal,
+    });
+    const text = String(generated?.data?.text || '').trim();
+    if (!generated?.error && text) { clearTimeout(timer); return text; }
+  } catch { /* the session below */ }
   try {
-    const toolIds = new Set([
-      'bash', 'edit', 'write', 'patch', 'apply_patch', 'multiedit', 'read',
-      'glob', 'grep', 'list', 'task', 'webfetch', 'question', 'skill',
-      'todowrite', 'todoread',
-    ]);
-    try {
-      const toolResult = await deps.openCodeClient.getClient?.()?.tool?.ids(
-        { directory: input.cwd || undefined },
-        { signal: controller.signal },
-      );
-      for (const id of (toolResult?.data || [])) if (id) toolIds.add(String(id));
-    } catch {}
-    const disabledTools = Object.fromEntries([...toolIds].map((id) => [id, false]));
-
     const created = await deps.openCodeClient.session.create({
       directory: input.cwd || undefined,
       title: 'SessionTitleDraft',
-      ...(opencode2 ? { permission: [{ permission: '*', pattern: '*', action: 'deny' }] } : {}),
+      permission: [{ action: '*', resource: '*', effect: 'deny' }],
     });
     sessionId = created?.data?.id || created?.data?.sessionID || created?.id || created?.sessionID;
     if (!sessionId) throw new Error('OpenCode did not create a temporary title session');
@@ -199,7 +222,6 @@ async function generateOpenCodeTitle(input, deps) {
       variant: input.variant || undefined,
       system: TITLE_SYSTEM_PROMPT,
       directory: input.cwd || undefined,
-      tools: disabledTools,
       signal: controller.signal,
     });
     return extractOpenCodeText(response);