synabun 2.0.5 → 2.0.9

package/neural-interface/public/shared/ui-whatsapp.js

@@ -20,8 +20,8 @@ import { escapeHtml } from './utils.js';
 import * as kit from './settings/settings-kit.js';
 import { emit, on } from './state.js';
 import {
-  waView, confirmLine, formatCountdown, clockTime, levelLabel, modeLabel, chooseNote, connectorSize, brainLimitText,
-  brainChoiceInUse, brainChoiceLabel, brainChoiceNotes,
+  waView, confirmLine, formatCountdown, levelLabel, modeLabel, chooseNote, connectorSize, brainLimitText,
+  brainChoiceInUse, brainChoiceLabel, brainChoiceNotes, connectionWarningText, transcriptionLine,
   localizedCopy, localize, setTranslator,
 } from './whatsapp/wa-view.js';
 import { normalizePhone, PHONE_ERRORS as PHONE_ERROR_SOURCE } from './whatsapp/wa-phone.js';
@@ -59,8 +59,9 @@ const attr = (s) => String(s ?? '').replace(/&/g, '&').replace(/"/g, '"
 const esc = (s) => escapeHtml(String(s ?? ''));
 const num = (n) => Number(n || 0).toLocaleString('en-US');
 const btn = (id, label, cls = '', extra = '') => `<button class="wa-btn${cls ? ` ${cls}` : ''}" id="${id}" type="button" ${extra}>${esc(label)}</button>`;
-// `named`: the row's <strong id="<id>-label"> and <small id="<id>-help"> name and describe the switch.
-const toggle = (id, named = false) => `<label class="recall-toggle"><input type="checkbox" id="${id}"${named ? ` aria-labelledby="${id}-label" aria-describedby="${id}-help"` : ''}><span class="recall-toggle-track"></span></label>`;
+// `named`: the row's <strong id="<id>-label"> and <small id="<id>-help"> name and describe the switch
+// (`alsoDescribedBy`: the id of one more line that describes it, such as a status line).
+const toggle = (id, named = false, alsoDescribedBy = '') => `<label class="recall-toggle"><input type="checkbox" id="${id}"${named ? ` aria-labelledby="${id}-label" aria-describedby="${id}-help${alsoDescribedBy ? ` ${alsoDescribedBy}` : ''}"` : ''}><span class="recall-toggle-track"></span></label>`;
 const tile = (id, label) => `<div class="db-stat"><span class="db-stat-label">${esc(label)}</span><span class="db-stat-value" id="${id}">—</span></div>`;
 const radios = (name, options, invId = '') => `<div class="wa-radios" role="radiogroup"${invId ? ` ${kit.inv(invId)}` : ''}>${options.map((o) => `
   <label class="wa-radio"><input type="radio" name="${name}" value="${attr(o.value)}"><span><strong>${esc(o.label)}</strong>${o.hint ? `<small>${esc(o.hint)}</small>` : ''}</span></label>`).join('')}</div>`;
@@ -114,6 +115,7 @@ export function buildWhatsAppTab() {
       <ol class="wa-steps" id="wa-steps" hidden>${steps}</ol>
 
       ${section({ id: 'wa-sec-setup', badgeId: 'wa-setup-badge', body: `
+        <div class="wa-callout wa-callout-warn" id="wa-conn-warning" role="status" hidden></div>
         <div class="wa-pane" data-pane="loading"><div class="settings-hint">${kit.te('settings.redesign.whatsapp.askingSynabunForTheWhatsappStatus')}</div></div>
         <div class="wa-pane" data-pane="unavailable" hidden><div class="settings-hint" id="wa-unavailable-text"></div></div>
 
@@ -233,6 +235,7 @@ export function buildWhatsAppTab() {
         <div class="settings-field"><label>${kit.te('settings.redesign.whatsapp.longAnswers')}</label>${radios('wa-max', MAX_MESSAGE_OPTIONS, 'WA045')}<div class="settings-hint">${kit.te('settings.redesign.whatsapp.longerAnswersAreCutThereWith')}</div></div>
         <div class="settings-field"><label>${kit.te('settings.redesign.whatsapp.freshConversation')}</label>${radios('wa-rotation', ROTATION_OPTIONS, 'WA046')}</div>
         <div class="settings-field" id="wa-trigger-field"><label>${kit.te('settings.redesign.whatsapp.inMessageYourself')}</label>${radios('wa-trigger', TRIGGER_OPTIONS, 'WA047')}</div>
+        <div class="settings-field wa-toggle-row" id="wa-voice-field" hidden><span><strong id="wa-voice-label">${kit.te('settings.redesign.whatsapp.transcribeVoiceNotes')}</strong><small id="wa-voice-help">${kit.te('settings.redesign.whatsapp.voiceNotesAreTurnedIntoText')}</small><small id="wa-voice-status" role="status"></small></span>${toggle('wa-voice', true, 'wa-voice-status')}</div>
         <div class="settings-field"><label>${kit.te('settings.redesign.whatsapp.commandsYouCanSend')}</label>
           <ul class="wa-commands">${COMMANDS.map((c) => `<li><code>${esc(c.name)}</code> ${esc(c.text)}</li>`).join('')}</ul>
           <div class="settings-hint">${kit.te('settings.redesign.whatsapp.answerAQuestionOrAnApproval')}</div>
@@ -381,6 +384,10 @@ export function wireWhatsAppTab(overlay, { toast = () => {} } = {}) {
     const pane = state.showChoose && ['link_expired', 'logged_out'].includes(status?.state) ? 'choose' : view.pane;
     for (const el of tabBody.querySelectorAll('.wa-pane')) show(el, el.dataset.pane === pane);
     renderPaneActions(view);
+    // A 440 / 403 the link keeps retrying: why, while it lasts (status.warning).
+    const warning = connectionWarningText(status);
+    setText($('wa-conn-warning'), warning);
+    show($('wa-conn-warning'), !!warning);
     renderSetupDetails(status, view, pane);
     renderConnector(status);
     renderConversation(status);
@@ -422,7 +429,7 @@ export function wireWhatsAppTab(overlay, { toast = () => {} } = {}) {
         [kit.tx('settings.redesign.whatsapp.mode'), modeLabel(s.mode)],
         [kit.tx('settings.redesign.whatsapp.account'), [s.account?.name && s.account.name !== '~' ? s.account.name : null, s.account?.masked].filter(Boolean).join(' · ') || '—'],
         [kit.tx('settings.redesign.whatsapp.owner'), s.owner?.masked ? `${s.owner.masked}${s.owner.boundAt ? (" " + kit.tx('settings.redesign.whatsapp.ownerSince', { date: new Date(s.owner.boundAt).toLocaleDateString() })) : ''}` : '—'],
-        [kit.tx('settings.redesign.whatsapp.level'), `${levelLabel(s.level)}${s.level === 'autonomous' && s.levelExpiresAt ? (" " + kit.tx('settings.redesign.whatsapp.levelUntil', { time: clockTime(s.levelExpiresAt) })) : ''}`],
+        [kit.tx('settings.redesign.whatsapp.level'), levelLabel(s.level)],
       ];
       const html = lines.map(([k, v]) => `<div><strong>${esc(k)}</strong> ${esc(v)}</div>`).join('');
       if ($('wa-connected-facts').innerHTML !== html) $('wa-connected-facts').innerHTML = html;
@@ -457,6 +464,13 @@ export function wireWhatsAppTab(overlay, { toast = () => {} } = {}) {
     setRadio('wa-rotation', cfg.rotation);
     setRadio('wa-trigger', cfg.selfTrigger);
     show($('wa-trigger-field'), s.mode !== 'dedicated');
+    // Voice notes (a server without them sends neither the field nor status.transcription: the row stays hidden).
+    const voiceKnown = typeof cfg.transcriptionEnabled === 'boolean' && !!s.transcription;
+    show($('wa-voice-field'), voiceKnown);
+    if (voiceKnown) {
+      setChecked($('wa-voice'), cfg.transcriptionEnabled);
+      setText($('wa-voice-status'), transcriptionLine(s));
+    }
     const session = s.session;
     setText($('wa-session-line'), session?.id ? kit.tx('settings.redesign.whatsapp.sessionCurrent', { title: session.title || kit.tx('settings.redesign.whatsapp.whatsappConversation') }) : kit.tx('settings.redesign.whatsapp.noConversationYetYourFirstMessage'));
     $('wa-open-conversation').disabled = !session?.id;
@@ -562,7 +576,7 @@ export function wireWhatsAppTab(overlay, { toast = () => {} } = {}) {
     const box = $('wa-allow-box');
     const e = state.escalation;
     if (!e || Date.now() > e.expiresAt) { show(box, false); return; }
-    const html = `<strong>${kit.te('settings.redesign.whatsapp.nowOnYourPhone')}</strong> ${kit.te('settings.redesign.whatsapp.send')} <code class="wa-allow-code">ALLOW ${esc(e.code)}</code> ${kit.te('settings.redesign.whatsapp.inTheWhatsappChatWithSynabun')} <span id="wa-allow-countdown">${esc(formatCountdown(e.expiresAt - Date.now()))}</span>${kit.te('settings.redesign.whatsapp.autonomousThenRunsFor8Hours')}`;
+    const html = `<strong>${kit.te('settings.redesign.whatsapp.nowOnYourPhone')}</strong> ${kit.te('settings.redesign.whatsapp.send')} <code class="wa-allow-code">ALLOW ${esc(e.code)}</code> ${kit.te('settings.redesign.whatsapp.inTheWhatsappChatWithSynabun')} <span id="wa-allow-countdown">${esc(formatCountdown(e.expiresAt - Date.now()))}</span>${kit.te('settings.redesign.whatsapp.autonomousUntilTurnedOff')}`;
     if (box.dataset.sig !== e.code) { box.innerHTML = html; box.dataset.sig = e.code; }
     show(box, true);
   }
@@ -847,6 +861,7 @@ export function wireWhatsAppTab(overlay, { toast = () => {} } = {}) {
   radioSave('wa-rotation', 'rotation');
   radioSave('wa-trigger', 'selfTrigger');
   $('wa-forward').addEventListener('change', () => putConfig({ forwardBackground: $('wa-forward').checked }));
+  $('wa-voice').addEventListener('change', () => putConfig({ transcriptionEnabled: $('wa-voice').checked }));
   $('wa-label').addEventListener('input', renderLabelPreview);
   $('wa-label-save').addEventListener('click', () => putConfig({ replyLabel: $('wa-label').value.trim() || null }).then((r) => { if (r.ok !== false) toast(kit.tx('settings.redesign.whatsapp.replyLabelSaved')); }));
 

package/neural-interface/public/shared/whatsapp/wa-view.js

@@ -69,7 +69,7 @@ export const MODE_CARDS = Object.freeze([
 export const LEVEL_CARDS = Object.freeze([
   { id: 'read-only', title: 'Read-only', body: 'SynaBun answers, researches and plans. It never changes files, runs commands or starts agents from WhatsApp; a plan can only be approved on this computer.' },
   { id: 'ask', title: 'Ask on my phone', badge: 'Default', body: 'Before anything that would change your files, run a command or start an agent, SynaBun asks on WhatsApp and acts only on your yes. Any other message approves nothing: the conversation just carries on.' },
-  { id: 'autonomous', title: 'Autonomous', body: 'SynaBun acts without asking, like the Assistant on this computer. Turning it on takes a second click here and an ALLOW code sent from your phone within 5 minutes. It turns back to Ask after 8 hours. Autonomous can read any file your computer account can, including SynaBun\'s WhatsApp login. Use it only with a locked phone, ideally on a second number.' },
+  { id: 'autonomous', title: 'Autonomous', body: 'SynaBun acts without asking, like the Assistant on this computer. Turning it on takes a second click here and an ALLOW code sent from your phone within 5 minutes. It stays on until you turn it off. Autonomous can read any file your computer account can, including SynaBun\'s WhatsApp login. Use it only with a locked phone, ideally on a second number.' },
 ]);
 
 /** Ask and Autonomous need a Claude brain: the Safety warning when the WhatsApp conversation runs on another one (status.brainLimit). */
@@ -155,9 +155,35 @@ export const ROTATION_OPTIONS = Object.freeze([
 ]);
 export const TRIGGER_OPTIONS = Object.freeze([
   { value: 'all', label: 'Every message in "Message yourself"', hint: 'Everything you write in your own chat goes to SynaBun.' },
-  { value: 'prefix', label: 'Only messages that start with sb', hint: 'Keep using "Message yourself" for notes; start a message with sb (or sb:) to talk to SynaBun. Commands like /stop, the ALLOW code and replies to SynaBun\'s own messages always reach it.' },
+  { value: 'prefix', label: 'Only messages that start with sb', hint: 'Keep using "Message yourself" for notes; start a message with sb (or sb:) to talk to SynaBun, or say "sb" first in a voice note. Commands like /stop, the ALLOW code and replies to SynaBun\'s own messages always reach it.' },
 ]);
 
+/** Voice notes (status.transcription): what each missing part is called. */
+export const VOICE_PARTS = Object.freeze({
+  engine: 'whisper.cpp (whisper-cli)',
+  model: 'the speech model (ggml-small.bin)',
+  ffmpeg: 'FFmpeg',
+});
+/**
+ * The line under the voice-note switch: transcribed here, set up but off, or what is missing
+ * ('' for a server without voice notes).
+ */
+export function transcriptionLine(status) {
+  const t = status?.transcription;
+  if (!t || typeof t !== 'object') return '';
+  if (t.available === true) {
+    return t.enabled === false
+      ? say('voice.readyOff', 'Voice notes can be transcribed on this computer; turned off.')
+      : say('voice.ready', 'Voice notes are transcribed on this computer.');
+  }
+  const invalid = Array.isArray(t.invalid) ? t.invalid : [];
+  const parts = (Array.isArray(t.missing) ? t.missing : []).filter((id) => Object.prototype.hasOwnProperty.call(VOICE_PARTS, id)).map((id) => {
+    const name = pick('voice.part', VOICE_PARTS, id);
+    return invalid.includes(id) ? say('voice.partInvalid', '{name}: the path set for it does not work', { name }) : name;
+  });
+  return say('voice.notSetUp', 'Voice notes: not set up — missing {missing}.', { missing: parts.length ? parts.join(', ') : say('voice.part.tools', 'the transcription tools') });
+}
+
 export const COMMANDS = Object.freeze([
   { name: '/status', text: 'what SynaBun is doing, its spend and level' },
   { name: '/stop', text: 'stop the current task, its agents and anything waiting for your answer' },
@@ -170,12 +196,13 @@ export const COMMANDS = Object.freeze([
 ]);
 
 export const LIMITS = Object.freeze([
-  'Text and pictures (up to 4 per message, 5 MB each). Voice notes, videos, documents and stickers are not read yet.',
+  'Text and pictures (up to 4 per message, 5 MB each), and voice notes transcribed on this computer (up to 10 minutes and 20 MB each). Videos, documents and stickers are not read yet.',
   'At most 20 messages a minute and 300 a day; 5 messages can wait in line while SynaBun works.',
   'Messages older than 10 minutes when SynaBun comes back online are skipped (it tells you how many).',
   'Answers are split into messages of 3,500 characters; the rest stays in SynaBun.',
   'Computer use from WhatsApp is off until you turn it on above. Then: never at Read-only or while paused, after one yes per task at Ask on my phone, and without asking while Autonomous is active. Agents started from WhatsApp never get it.',
   'Levels, models and settings change only here, never from the phone.',
+  'A voice note is an ordinary message: it never approves anything and never runs a command. Approvals take a typed yes.',
 ]);
 
 export const PRIVACY_STAYS = Object.freeze([
@@ -213,6 +240,7 @@ export const HELP = Object.freeze({
     'With "Only messages that start with sb", a note without sb never reaches SynaBun and is not logged; commands, the ALLOW code and replies to SynaBun\'s messages always get through.',
     'The QR code expires after about a minute. Press "Show a new code" and scan faster, or link with your phone number instead.',
     'Stuck on "Reconnecting"? Check this computer\'s internet connection, then press Reconnect now.',
+    'Voice notes not transcribed? This computer needs whisper.cpp, its speech model and FFmpeg, which you install yourself; the line under "Transcribe voice notes" says what is missing.',
   ],
   browserTools: 'Not the same as the WhatsApp browser tools. The whatsapp MCP profile lets agents read WhatsApp Web in SynaBun\'s browser; this tab is you chatting with SynaBun from your phone. They do not share a session.',
   uninstall: 'Uninstalling SynaBun does not unlink WhatsApp. Use Unlink or Remove here first, or log SynaBun out under WhatsApp → Settings → Linked devices.',
@@ -252,8 +280,11 @@ export const INSTALL_ERRORS = Object.freeze({
   UNKNOWN: 'Something unexpected happened. The install log has the details.',
 });
 
+// RECONNECT_LIMIT and REPLACED only come from a server older than this page (the link now retries
+// forever, and a 440 is retried with a warning: WARNING_TEXT); HOST_HELD is a connector process of
+// another SynaBun version (crashes are always retried).
 export const ERROR_TEXT = Object.freeze({
-  HOST_HELD: 'The WhatsApp connector kept crashing, so SynaBun stopped it. Reconnect to try again; the install log may help.',
+  HOST_HELD: 'The WhatsApp connector does not match this SynaBun version (it was updated while SynaBun ran), so SynaBun stopped it. Restart SynaBun to load the matching one.',
   HOST_UNAVAILABLE: 'The WhatsApp connector did not start.',
   REPLACED: 'Another copy of this WhatsApp link connected from somewhere else and took over. Reconnect here to take it back.',
   LOCKED: 'Another SynaBun is using the WhatsApp session files. Close it, then reconnect.',
@@ -272,7 +303,20 @@ export const LOGOUT_TEXT = Object.freeze({
   removed: { title: 'Logged out from the phone', sub: 'SynaBun was removed under Linked devices, or WhatsApp ended the session. Link again to keep chatting.' },
   inactive: { title: 'Logged out after a long time offline', sub: 'WhatsApp logs out linked devices that stay offline for a long time. Link again to keep chatting.' },
   banned: { title: 'WhatsApp refused this account', sub: 'WhatsApp blocked the account from linking devices, possibly a temporary or permanent ban. Check the WhatsApp app on the phone.' },
+  invalid_session: { title: 'The saved WhatsApp session is invalid', sub: 'WhatsApp rejected this device session (badSession). Link again to pair it; automatic retries cannot repair the credentials.' },
+});
+
+/** Why a saved session keeps retrying (status.warning: 440 another copy, 403 a refused account). */
+export const WARNING_TEXT = Object.freeze({
+  replaced: 'Another copy is using this WhatsApp session. SynaBun retries every 5 minutes; close the other copy or unlink and link again.',
+  forbidden: 'WhatsApp refused this account; it may be restricted or banned. SynaBun retries every 5 minutes; check WhatsApp on the phone.',
 });
+/** The warning Settings shows while the link retries a 440 / 403 ('' for none, or once the link is not up or retrying). */
+export function connectionWarningText(status) {
+  if (!Object.prototype.hasOwnProperty.call(WARNING_TEXT, status?.warning)) return '';
+  if (!['connected', 'reconnecting', 'paused'].includes(status?.state)) return '';
+  return pick('warning', WARNING_TEXT, status.warning);
+}
 
 export const ACTIVITY_KINDS = Object.freeze({
   inbound: 'Received', reply: 'Sent', ignored: 'Ignored', state: 'Status', security: 'Security', error: 'Problem', settings: 'Settings',
@@ -355,9 +399,8 @@ export function waView(status, { now = Date.now() } = {}) {
     }
     case 'connected': {
       const who = accountLine(s);
-      const until = s.level === 'autonomous' && s.levelExpiresAt ? ` ${say('view.connected.until', 'until {time}', { time: clockTime(s.levelExpiresAt) })}` : '';
       // A Codex / OpenCode brain holds the conversation at read-only whatever the level.
-      const applies = s.brainLimit?.provider ? say('view.connected.readOnlyBrain', 'Read-only ({brain} brain)', { brain: s.brainLimit.label || s.brainLimit.provider }) : `${level}${until}`;
+      const applies = s.brainLimit?.provider ? say('view.connected.readOnlyBrain', 'Read-only ({brain} brain)', { brain: s.brainLimit.label || s.brainLimit.provider }) : level;
       return view('ok', say('view.connected.title', 'Connected'), [mode, who, applies].filter(Boolean).join(' · '), { primary: button('open-conversation', say('button.openConversation', 'Open conversation')), secondary: button('test', say('button.test', 'Send a test message')), step: 'done', pane: 'connected', nav: 'connected' });
     }
     case 'reconnecting': {
@@ -404,8 +447,8 @@ export function localizedCopy() {
     COMMANDS: localize('commands', COMMANDS), LIMITS: localize('limits', LIMITS),
     PRIVACY_STAYS: localize('privacyStays', PRIVACY_STAYS), PRIVACY_NEVER: localize('privacyNever', PRIVACY_NEVER),
     HELP: localize('help', HELP), STAGE_TEXT: localize('stage', STAGE_TEXT), INSTALL_ERRORS: localize('installError', INSTALL_ERRORS),
-    ERROR_TEXT: localize('error', ERROR_TEXT), LOGOUT_TEXT: localize('logout', LOGOUT_TEXT), ACTIVITY_KINDS: localize('activity', ACTIVITY_KINDS),
+    ERROR_TEXT: localize('error', ERROR_TEXT), LOGOUT_TEXT: localize('logout', LOGOUT_TEXT), WARNING_TEXT: localize('warning', WARNING_TEXT), ACTIVITY_KINDS: localize('activity', ACTIVITY_KINDS),
     LEVEL_LABELS: localize('levelLabel', LEVEL_LABELS), PHONE_HINT: localize('phoneHint', PHONE_HINT), TEST_HINT: localize('testHint', TEST_HINT),
-    BRAIN_COPY: localize('brainCopy', BRAIN_COPY),
+    BRAIN_COPY: localize('brainCopy', BRAIN_COPY), VOICE_PARTS: localize('voice.part', VOICE_PARTS),
   };
 }

package/neural-interface/public/shared/worker-end.js

@@ -43,6 +43,7 @@ export const WORKER_END_COPY = Object.freeze({
   reasonAssistantSaid: 'Stopped by the Assistant: {reason}',
   reasonTimeCap: 'The run reached its time limit.',
   reasonBudget: 'The run reached its budget limit.',
+  reasonBudgetShare: 'This provider used up its share of the session budget.',
   reasonMaxTurns: 'The run reached its turn limit.',
   reasonIdle: 'The worker waited for a follow-up that did not come, and closed.',
   reasonRestart: 'The server restarted while the run was open.',
@@ -155,6 +156,7 @@ function stopReason(reason, t) {
     case 'assistant': case 'complete': return t('reasonAssistant');
     case 'time_cap': return t('reasonTimeCap');
     case 'budget_cap': case 'session_budget_cap': case 'budget_unpriced': return t('reasonBudget');
+    case 'budget_share': return t('reasonBudgetShare');
     case 'max_turns': return t('reasonMaxTurns');
     case 'idle_timeout': return t('reasonIdle');
     case 'server_restart': case 'server_shutdown': return t('reasonRestart');

package/neural-interface/public/sw.js

@@ -1,6 +1,6 @@
 // Bump when offline.html changes shape: the new worker drops the old cache and
 // stores the page again (v13: a restart read from the supervisor's report).
-const CACHE_NAME = 'synabun-offline-v13';
+const CACHE_NAME = 'synabun-offline-v14';
 const OFFLINE_URL = '/offline.html';
 
 self.addEventListener('install', (event) => {

package/neural-interface/public/variant/2d/main.js

@@ -6,7 +6,7 @@
 // wires event listeners, and boots the application.
 
 // ── Storage (self-hydrating — importing it populates the cache) ──
-import { storage } from '../../shared/storage.js';
+import { storage, isShowcaseMode } from '../../shared/storage.js';
 import { posStore } from '../../shared/node-positions-store.js';
 
 // ── Shared foundation ──
@@ -156,6 +156,15 @@ registerHelpSection({
 // 4. LOAD TRANSLATIONS & INJECT SHARED HTML
 // ═══════════════════════════════════════════
 
+// Showcase mode (?showcase): the user's own content is blurred for product captures,
+// before anything is drawn. Without it window.__synabunShowcase is missing and a capture stops.
+if (isShowcaseMode()) {
+  try {
+    (await import('../../shared/showcase-privacy.js')).installShowcasePrivacy();
+  } catch (err) {
+    console.warn('[showcase] privacy blur unavailable:', err);
+  }
+}
 await initI18n();
 injectSharedHTML();
 

package/neural-interface/public/variant/3d/main.js

@@ -7,7 +7,7 @@
 // explorer, cards, tooltips) hydrates right behind it.
 
 // ── Storage (self-hydrating — importing it populates the cache) ──
-import { storage } from '../../shared/storage.js';
+import { storage, isShowcaseMode } from '../../shared/storage.js';
 import { posStore } from '../../shared/node-positions-store.js';
 
 // ── Shared foundation ──
@@ -73,6 +73,15 @@ registerVariant({ variant: '3d', capabilities: ['memory-map'] });
 // 2. TRANSLATIONS, SHARED HTML, HELP
 // ═══════════════════════════════════════════
 
+// Showcase mode (?showcase): the user's own content is blurred for product captures,
+// before anything is drawn. Without it window.__synabunShowcase is missing and a capture stops.
+if (isShowcaseMode()) {
+  try {
+    (await import('../../shared/showcase-privacy.js')).installShowcasePrivacy();
+  } catch (err) {
+    console.warn('[showcase] privacy blur unavailable:', err);
+  }
+}
 await initI18n();
 injectSharedHTML();
 

package/neural-interface/scripts/rebuild-pty.js

@@ -16,10 +16,16 @@ import { resolve, dirname } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { ensureVendoredExecutables } from '../lib/native-binary-runtime.js';
 import { pruneExternalTools } from '../../lib/external-tools.js';
+import { findInstalled } from '../../lib/runtime-dependencies.js';
 
 const __dirname = dirname(fileURLToPath(import.meta.url));
 const neuralRoot = resolve(__dirname, '..');
-const ptyDir = resolve(neuralRoot, 'node_modules', 'node-pty');
+const packageRoot = resolve(neuralRoot, '..');
+// node-pty where Node finds it from the Neural Interface: the package root's
+// node_modules after `npm i -g synabun`, neural-interface/node_modules in a
+// development checkout or a desktop build.
+const ptyDir = findInstalled(neuralRoot, 'node-pty', { stopAt: packageRoot })?.path
+  || resolve(neuralRoot, 'node_modules', 'node-pty');
 
 // Step 0: Claude Code, Codex, OpenCode and Gemini CLI are installed by the user,
 // never by SynaBun. The lockfile holds none of them; an `npm install` that
@@ -40,7 +46,13 @@ for (const item of pruneExternalTools(resolve(neuralRoot, 'node_modules')).remov
 // linux dirs that do not exist here while missing ones that do). The sweep
 // below enumerates instead.
 function sweepVendoredBinaries(label) {
-  const sweep = ensureVendoredExecutables({ root: neuralRoot, log: console.log });
+  // Both node_modules an install can have: the package root's and the Neural Interface's own.
+  const sweep = { repaired: [], failed: [] };
+  for (const root of new Set([neuralRoot, packageRoot])) {
+    const found = ensureVendoredExecutables({ root, log: console.log });
+    sweep.repaired.push(...found.repaired);
+    sweep.failed.push(...found.failed);
+  }
   for (const failure of sweep.failed) {
     console.warn(`[rebuild-pty] ${failure.path} is not launchable (${failure.state}).`
       + (failure.repairCommand ? ` Try: ${failure.repairCommand}` : ''));