synabun 2.0.9 → 2.1.0

package/neural-interface/templates/rulesets/core.md

@@ -12,7 +12,7 @@
 
 ### Tools
 - Use the exact tool names in your tool list (the host adds a prefix). Never invent one.
-- If a SynaBun tool you need is missing, call `profile` (`get`, then `set` the narrowest profile that has it) and restore the previous one afterwards. <!-- except: codex -->
+- If a SynaBun tool you need is missing, call `tool_groups` (`get`, then `add` the group that has it). This changes only this runtime.
 
 ### Browser
 - For every page, public-web and localhost alike (browsing, search, page retrieval, screenshots, visual checks), use only the configured SynaBun browser tools, and open a new tab instead of reusing an existing one.

package/neural-interface/templates/rulesets/legacy-hashes.json

@@ -222,6 +222,24 @@
       "lines": 12,
       "firstLine": "## Memory: SynaBun MCP",
       "host": "opencode"
+    },
+    {
+      "sha": "2206c97cf003",
+      "lines": 28,
+      "firstLine": "## SynaBun",
+      "host": "claude"
+    },
+    {
+      "sha": "939571cf2095",
+      "lines": 26,
+      "firstLine": "## SynaBun",
+      "host": "codex"
+    },
+    {
+      "sha": "49865561dc6e",
+      "lines": 27,
+      "firstLine": "## SynaBun",
+      "host": "opencode"
     }
   ]
 }

package/neural-interface/templates/rulesets/manifest.json

@@ -1,12 +1,12 @@
 {
-  "version": "2.1.0",
-  "updatedAt": "2026-10-02",
-  "summary": "Adds a Design section: read the project's DESIGN.md (or call style_guide) before UI, copy and image work, and propose changes instead of editing it",
+  "version": "2.2.0",
+  "updatedAt": "2026-10-27",
+  "summary": "Tool groups replace MCP profiles: get and add the needed group in this runtime on every host.",
   "hashes": {
-    "claude": "2206c97cf003",
-    "codex": "939571cf2095",
-    "opencode": "49865561dc6e",
-    "gemini": "49865561dc6e",
-    "cursor": "49865561dc6e"
+    "claude": "31c14f4a19f7",
+    "codex": "cffc3de6b060",
+    "opencode": "cffc3de6b060",
+    "gemini": "cffc3de6b060",
+    "cursor": "cffc3de6b060"
   }
 }

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "synabun",
-  "version": "2.0.9",
+  "version": "2.1.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "synabun",
-      "version": "2.0.9",
+      "version": "2.1.0",
       "hasInstallScript": true,
       "license": "Apache-2.0",
       "dependencies": {
@@ -15,7 +15,6 @@
         "@inquirer/prompts": "^8.2.0",
         "@modelcontextprotocol/sdk": "^1.12.1",
         "@openai/codex-sdk": "^0.160.0",
-        "@opencode-ai/sdk": "1.18.34",
         "@xterm/addon-fit": "0.11.0",
         "@xterm/addon-search": "0.16.0",
         "@xterm/addon-serialize": "0.14.0",
@@ -34,6 +33,7 @@
         "undici": "^8.5.0",
         "uuid": "^14.0.0",
         "ws": "^8.21.0",
+        "yaml": "2.9.1",
         "zod": "^4.4.3"
       },
       "bin": {
@@ -1341,15 +1341,6 @@
         "node": ">=18"
       }
     },
-    "node_modules/@opencode-ai/sdk": {
-      "version": "1.18.34",
-      "resolved": "https://registry.npmjs.org/@opencode-ai/sdk/-/sdk-1.18.34.tgz",
-      "integrity": "sha512-R9QWUpcngtdQ6FCixz7NC6n1WsSho6CEuRUzYHz/CzZcp3miSklDzXkm0oDwXVCnuEu+ANoeM0f6RDp51kOMzQ==",
-      "license": "MIT",
-      "dependencies": {
-        "cross-spawn": "7.0.6"
-      }
-    },
     "node_modules/@pkgjs/parseargs": {
       "version": "0.11.0",
       "resolved": "https://registry.npmjs.org/@pkgjs/parseargs/-/parseargs-0.11.0.tgz",
@@ -4388,6 +4379,21 @@
         "node": ">=18"
       }
     },
+    "node_modules/yaml": {
+      "version": "2.9.1",
+      "resolved": "https://registry.npmjs.org/yaml/-/yaml-2.9.1.tgz",
+      "integrity": "sha512-3NxN8+78OdzbT7C/WjGsyfPAtJaN3FNDsWxv7Y7mcDsT/oOmgW8BpyQQFFBnvZE3j9Y2Sdz1ULFLezL7Eb2yFw==",
+      "license": "ISC",
+      "bin": {
+        "yaml": "bin.mjs"
+      },
+      "engines": {
+        "node": ">= 14.6"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/eemeli"
+      }
+    },
     "node_modules/zip-stream": {
       "version": "6.0.1",
       "resolved": "https://registry.npmjs.org/zip-stream/-/zip-stream-6.0.1.tgz",

package/package.json

@@ -1,6 +1,7 @@
 {
   "name": "synabun",
-  "version": "2.0.9",
+  "version": "2.1.0",
+  "mcpName": "io.github.danilokhury/synabun",
   "description": "Local-first persistent vector memory, MCP tooling, and multi-agent workflows for AI assistants",
   "license": "Apache-2.0",
   "author": "The SynaBun Authors",
@@ -33,6 +34,10 @@
     "mcp-server/run.mjs",
     "neural-interface/package.json",
     "neural-interface/package-lock.json",
+    "lib/virustotal.mjs",
+    "lib/release-scan.mjs",
+    "lib/release-publish.mjs",
+    "lib/release-npm-ci.mjs",
     "neural-interface/server.js",
     "neural-interface/lib/",
     "neural-interface/i18n/",
@@ -58,6 +63,10 @@
     "skills/",
     "lib/paths.js",
     "lib/start-launcher.js",
+    "lib/server-exit.js",
+    "lib/server-supervisor.js",
+    "lib/server-crash-record.js",
+    "lib/windows-crash-event.js",
     "lib/packaged-runtime.js",
     "lib/child-path.js",
     "lib/log-redact.js",
@@ -67,7 +76,10 @@
     "lib/paths.d.ts",
     "lib/data-home-migration.js",
     "lib/first-launch-protection.js",
+    "lib/update-snapshot.js",
     "lib/runtime-dependencies.js",
+    "lib/mcp-dist.js",
+    "lib/tools-cli.js",
     "lib/package-processes.js",
     "npm-shrinkwrap.json",
     "lib/client-config-repair.js",
@@ -99,9 +111,10 @@
     "build:linux:x64": "node packaging/build.mjs build --target linux-x64",
     "build:windows:x64": "node packaging/build.mjs build --target windows-x64",
     "build:windows:x86": "node packaging/build.mjs build --target windows-x86",
+    "release:publish": "node lib/release-publish.mjs",
     "postinstall": "node postinstall.js",
     "preuninstall": "node preuninstall.js",
-    "prepublishOnly": "npm --prefix mcp-server ci --ignore-scripts && npm --prefix neural-interface ci --ignore-scripts && npm run mcp:build && node -e \"const fs = require('node:fs'); for (const path of ['mcp-server/dist/index.js', 'NOTICE', 'THIRD-PARTY-LICENSES.md']) fs.accessSync(path)\" && npm run pack:check",
+    "prepublishOnly": "npm --prefix mcp-server ci --ignore-scripts && npm --prefix neural-interface ci --ignore-scripts && npm run mcp:build && node -e \"const fs = require('node:fs'); for (const path of ['mcp-server/dist/index.js', 'NOTICE', 'THIRD-PARTY-LICENSES.md']) fs.accessSync(path)\" && npm run pack:check && node lib/release-publish.mjs guard",
     "prepack": "node lib/root-dependencies.mjs --check",
     "deps:check": "node lib/root-dependencies.mjs --check",
     "deps:sync": "node lib/root-dependencies.mjs --write"
@@ -112,7 +125,6 @@
     "@inquirer/prompts": "^8.2.0",
     "@modelcontextprotocol/sdk": "^1.12.1",
     "@openai/codex-sdk": "^0.160.0",
-    "@opencode-ai/sdk": "1.18.34",
     "@xterm/addon-fit": "0.11.0",
     "@xterm/addon-search": "0.16.0",
     "@xterm/addon-serialize": "0.14.0",
@@ -131,6 +143,7 @@
     "undici": "^8.5.0",
     "uuid": "^14.0.0",
     "ws": "^8.21.0",
+    "yaml": "2.9.1",
     "zod": "^4.4.3"
   },
   "optionalDependencies": {

package/postinstall.js

@@ -18,6 +18,7 @@ import { fileURLToPath } from 'node:url';
 import { platform } from 'node:os';
 import { registerStartLauncher } from './lib/start-launcher.js';
 import { mcpCompiler } from './lib/runtime-dependencies.js';
+import { mcpDistMissing } from './lib/mcp-dist.js';
 
 const __dirname = dirname(fileURLToPath(import.meta.url));
 
@@ -72,16 +73,20 @@ function rebuildPty() {
 // ── MCP server build ──
 //
 // A published package carries mcp-server/dist; a fresh checkout compiles it,
-// with the TypeScript of the root's devDependencies.
+// with the TypeScript of the root's devDependencies. Built means dist/index.js
+// and every module it imports (lib/mcp-dist.js): a checkout can hold a tracked
+// dist/index.js whose newer imports git ignores, and then it is built again.
 
 function buildMcpServer() {
-  const distIndex = resolve(__dirname, 'mcp-server', 'dist', 'index.js');
-  if (existsSync(distIndex)) {
+  const { complete, missing } = mcpDistMissing(__dirname);
+  if (complete) {
     ok('MCP server already built');
     return;
   }
 
-  info('Building MCP server from source...');
+  const distIndex = resolve(__dirname, 'mcp-server', 'dist', 'index.js');
+  if (existsSync(distIndex)) info(`MCP server build is incomplete (missing ${missing.slice(0, 3).join(', ')}${missing.length > 3 ? ` and ${missing.length - 3} more` : ''}): building it again...`);
+  else info('Building MCP server from source...');
   const tsc = mcpCompiler(__dirname);
   if (!tsc) {
     fail('MCP server build failed: TypeScript is not installed (run npm install in the package root)');

package/preuninstall.js

@@ -72,7 +72,7 @@ async function tryGracefulServerShutdown() {
 // ── Step 1b: kill any orphaned processes holding file handles ──
 //
 // Even after a graceful server shutdown (or when no server is running),
-// orphaned children can survive: opencode-ai sidecars spawned via cmd.exe,
+// orphaned children can survive: opencode sidecars spawned via cmd.exe,
 // MCP servers (claude-memory-mcp) spawned by Claude Code instances rather
 // than by SynaBun itself, agent processes, etc. On Windows these orphans
 // keep file handles inside the install dir open, causing EBUSY when npm