synabun 2.0.9 → 2.1.0

package/neural-interface/package.json

@@ -1,6 +1,6 @@
 {
   "name": "neural-memory-interface",
-  "version": "2.0.9",
+  "version": "2.1.0",
   "private": true,
   "description": "Private local SynaBun interface for memory visualization and multi-agent workflows",
   "license": "Apache-2.0",
@@ -24,7 +24,6 @@
     "@anthropic-ai/claude-agent-sdk": "0.3.288",
     "@huggingface/transformers": "^3.0.0",
     "@openai/codex-sdk": "^0.160.0",
-    "@opencode-ai/sdk": "1.18.34",
     "@xterm/addon-fit": "0.11.0",
     "@xterm/addon-search": "0.16.0",
     "@xterm/addon-serialize": "0.14.0",
@@ -42,6 +41,7 @@
     "playwright": "^1.59.1",
     "undici": "^8.5.0",
     "ws": "^8.21.0",
+    "yaml": "2.9.1",
     "zod": "^4.4.3"
   },
   "overrides": {
@@ -61,9 +61,13 @@
     "@codemirror/search": "6.7.2",
     "@codemirror/state": "6.7.6",
     "@codemirror/view": "6.43.14",
+    "@highlightjs/cdn-assets": "11.12.0",
     "@lezer/highlight": "1.2.5",
     "@replit/codemirror-indentation-markers": "6.5.3",
     "esbuild": "^0.28.1",
+    "html2canvas": "1.4.1",
+    "marked": "14.1.4",
+    "mermaid": "11.17.2",
     "three": "0.169.0"
   }
 }

package/neural-interface/public/index.html

@@ -13,7 +13,8 @@
 <link rel="manifest" href="/manifest.json">
 <link rel="preconnect" href="https://fonts.googleapis.com">
 <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
-<link href="https://fonts.googleapis.com/css2?family=Caveat:wght@400;700&family=Inter:wght@300;400;500;600;700&family=JetBrains+Mono:wght@400;500&family=Space+Grotesk:wght@500;600;700&display=swap" rel="stylesheet">
+<link rel="stylesheet" href="/vendor/caveat/caveat.css">
+<link href="https://fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700&family=JetBrains+Mono:wght@400;500&family=Space+Grotesk:wght@500;600;700&display=swap" rel="stylesheet">
 <link href="https://db.onlinewebfonts.com/c/3284c3a32cf946466fb963369b3c5b2d?family=Disket+Mono" rel="stylesheet">
 <link rel="stylesheet" href="/shared/styles.css">
 <!-- three.js is vendored (scripts/build-vendor.mjs); only the map renderer imports it.
@@ -56,9 +57,10 @@
 </head>
 <body>
 
-<!-- html2canvas for card screenshot MCP tool -->
-<script src="https://cdnjs.cloudflare.com/ajax/libs/html2canvas/1.4.1/html2canvas.min.js" defer></script>
+<!-- html2canvas for card screenshot MCP tool (vendored: public/vendor/html2canvas/) -->
+<script src="/vendor/html2canvas/html2canvas-1.4.1.min.js" defer></script>
 
+<script type="module" src="/shared/page-session.js"></script>
 <script type="module" src="/variant/3d/main.js"></script>
 </body>
 </html>

package/neural-interface/public/index2d.html

@@ -1,4 +1,5 @@
 <!DOCTYPE html>
+<!-- DEPRECATED: 2D source retained on disk. Old bookmarks redirect to the 3D memory map. -->
 <html lang="en">
 <head>
 <meta charset="UTF-8">
@@ -13,21 +14,26 @@
 <link rel="manifest" href="/manifest.json">
 <link rel="preconnect" href="https://fonts.googleapis.com">
 <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
-<link href="https://fonts.googleapis.com/css2?family=Caveat:wght@400;700&family=Inter:wght@300;400;500;600;700&family=JetBrains+Mono:wght@400;500&family=Space+Grotesk:wght@500;600;700&display=swap" rel="stylesheet">
+<link rel="stylesheet" href="/vendor/caveat/caveat.css">
+<link href="https://fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700&family=JetBrains+Mono:wght@400;500&family=Space+Grotesk:wght@500;600;700&display=swap" rel="stylesheet">
 <link href="https://db.onlinewebfonts.com/c/3284c3a32cf946466fb963369b3c5b2d?family=Disket+Mono" rel="stylesheet">
 <link rel="stylesheet" href="/shared/styles.css">
 <style>
   /* ═══════════════════════════════════════════
      2D VARIANT — Main Canvas
      ═══════════════════════════════════════════ */
+  /* The graph fills the app frame (styles.css APP FRAME); graph.js sizes its buffer and reads pointers from this box.
+     A canvas does not stretch between left and right: its size is written out. */
   #canvas-main {
     position: fixed;
-    top: 0; left: 0;
-    width: 100%; height: 100%;
+    top: var(--frame-top); left: var(--frame-left);
+    width: calc(100% - var(--sidebar-total-width, 0px) - 2 * var(--frame-gap));
+    height: calc(100dvh - var(--frame-top) - var(--frame-gap));
+    border-radius: var(--frame-radius);
     z-index: 1;
-    cursor: grab;
+    cursor: move;
   }
-  #canvas-main:active { cursor: grabbing; }
+  #canvas-main:active { cursor: move; }
 
   /* ═══════════════════════════════════════════
      2D VARIANT — Minimap
@@ -48,10 +54,10 @@
     box-shadow: 0 2px 20px rgba(0,0,0,0.4);
     transition: opacity 0.2s ease;
     opacity: 0; pointer-events: none;
-    cursor: grab;
+    cursor: move;
     user-select: none;
   }
-  #minimap:active { cursor: grabbing; }
+  #minimap:active { cursor: move; }
   #minimap.visible { opacity: 1; pointer-events: auto; }
   #minimap-canvas { width: 100%; height: 100%; display: block; }
   #minimap-label {
@@ -89,8 +95,9 @@
      ═══════════════════════════════════════════ */
   #lasso-canvas {
     position: fixed;
-    top: 0; left: 0;
-    width: 100%; height: 100%;
+    top: var(--frame-top); left: var(--frame-left);
+    width: calc(100% - var(--sidebar-total-width, 0px) - 2 * var(--frame-gap));
+    height: calc(100dvh - var(--frame-top) - var(--frame-gap));
     z-index: 5;
     pointer-events: none;
   }
@@ -123,7 +130,8 @@
   <div class="ctx-item ctx-item--danger" data-action="trash">Move to Trash</div>
 </div>
 
-<!-- Boot 2D variant -->
-<script type="module" src="/variant/2d/main.js"></script>
+<!-- Redirect the deprecated entry point (also works with a static host) -->
+<script type="module" src="/shared/page-session.js"></script>
+<script type="module" src="/shared/retired-2d.js"></script>
 </body>
 </html>

package/neural-interface/public/onboarding.html

@@ -1491,7 +1491,7 @@ const TOOLS = [
   { id: 'claude',   name: 'Claude Code', api: '/api/claude-code/mcp', configPath: '~/.claude.json' },
   { id: 'gemini',   name: 'Gemini CLI',  api: '/api/setup/gemini/mcp', configPath: '~/.gemini/settings.json' },
   { id: 'codex',    name: 'Codex CLI',   api: '/api/setup/codex/mcp',  configPath: '~/.codex/config.toml' },
-  { id: 'opencode', name: 'OpenCode',    api: '/api/opencode/mcp',     configPath: '~/.config/opencode/config.json' },
+  { id: 'opencode', name: 'OpenCode',    api: '/api/opencode/mcp',     configPath: '~/.config/opencode/opencode.json' },
 ];
 
 // ═══════════════════════════════════════════
@@ -2636,7 +2636,7 @@ function showToggleRules(id, rules, { connected, wanted }) {
     else if (rules.path) text = `Rules installed: ${rules.path}`;
   } else if (rules && rules.ok !== false && rules.kept && rules.kept.length) {
     // Disconnected. A copy the user edited is theirs: SynaBun left it where it is (and for OpenCode, so is a copy
-    // their own line in config.json points at).
+    // their own line in opencode.json points at).
     text = `Your ${rules.kept[0].reason === 'listed-in-config' ? '' : 'edited '}rules were left in place: ${rules.kept[0].path}`;
   } else if (rules && rules.ok === false && rules.error) {
     // Disconnected, but rules could not be taken out (damaged markers, a symlink): say which and why.

package/neural-interface/public/shared/account-menu.js

@@ -14,6 +14,7 @@
 import {
   accountManageModel, accountMenuModel, accountText, apiKeyErrorText, serverAccountId,
 } from './account-view.js';
+import { frameRect } from './app-frame.js';
 
 const STYLE_ID = 'account-menu-styles';
 // Values come from the panel's own tokens: Claude's global --t-* / --s-* scale, Codex's --cxp-* scale
@@ -338,15 +339,17 @@ export function mountAccountMenu({ provider = 'claude', container, before = null
     if (!rect.width && !rect.height && trigger.parentElement) rect = trigger.parentElement.getBoundingClientRect();
     const owner = layer?.() || trigger.closest('[class*="panel"]');
     const ownerWidth = owner?.getBoundingClientRect?.().width;
-    popup.style.width = `${Math.max(0, Math.min(320, ownerWidth > 240 ? ownerWidth - 16 : 320, window.innerWidth - 16))}px`;
+    // Inside the app frame (app-frame.js; the whole window on a page without it), 8px clear of its edges.
+    const f = frameRect();
+    popup.style.width = `${Math.max(0, Math.min(320, ownerWidth > 240 ? ownerWidth - 16 : 320, f.width - 16))}px`;
     const width = popup.offsetWidth || 300;
-    const left = Math.max(8, Math.min(rect.right - width, window.innerWidth - width - 8));
-    const below = window.innerHeight - rect.bottom - 14;
-    const above = rect.top - 14;
+    const left = Math.max(f.left + 8, Math.min(rect.right - width, f.right - width - 8));
+    const below = f.bottom - rect.bottom - 14;
+    const above = rect.top - f.top - 14;
     const flip = below < 180 && above > below;
     popup.style.maxHeight = `${Math.max(80, Math.min(520, flip ? above : below))}px`;
     popup.style.left = `${Math.round(left)}px`;
-    popup.style.top = `${Math.round(flip ? Math.max(8, rect.top - 6 - popup.offsetHeight) : rect.bottom + 6)}px`;
+    popup.style.top = `${Math.round(flip ? Math.max(f.top + 8, rect.top - 6 - popup.offsetHeight) : rect.bottom + 6)}px`;
     let z = 201;
     try { z = (parseInt(getComputedStyle(owner).zIndex, 10) || 200) + 1; } catch {}
     popup.style.zIndex = String(z);

package/neural-interface/public/shared/agent-runtime-options.js

@@ -1,6 +1,7 @@
 // Shared launch/runtime metadata for Automation Studio, Schedules Studio,
 // and agent sidepanels.
 import { normalizeAutomationSelection } from './automation-context.js';
+import { fetchOpencodeProviders, opencodeProviders } from './opencode-providers.js';
 
 export const CLI_PROFILES = [
   { id: 'claude-code', label: 'Claude Code', desc: 'Anthropic' },
@@ -144,7 +145,31 @@ let _opencodeModelsCache = null;
 let _opencodeModelsLoading = null;
 let _claudeModelsCache = null;
 let _claudeModelsLoading = null;
-let _mcpProfilePresets = null;
+let _toolCatalog = null;
+const _toolCatalogLoads = new Map();
+const _toolCatalogByCwd = new Map();
+const _toolCatalogAt = new Map();
+let _toolCatalogEpoch = 0;
+
+// The verified Claude and Codex lists are also kept in sessionStorage (this tab only): after a reload the
+// pickers paint from them at once (a list read back is due, so the first load still asks the server).
+const LIST_STORE_PREFIX = 'synabun:runtime-models:v1:';
+function keepList(key, list) {
+  try { if (typeof sessionStorage !== 'undefined') sessionStorage.setItem(LIST_STORE_PREFIX + key, JSON.stringify(list)); } catch { /* full or unavailable */ }
+}
+function keptList(key) {
+  try {
+    if (typeof sessionStorage === 'undefined') return null;
+    const list = JSON.parse(sessionStorage.getItem(LIST_STORE_PREFIX + key) || 'null');
+    return Array.isArray(list) && list.length ? list : null;
+  } catch { return null; }
+}
+(() => {
+  const claude = keptList('claude-code');
+  if (claude && !_claudeModelsCache) _claudeModelsCache = claude;
+  const codex = keptList('codex:default');
+  if (codex && !_codexModelsCache.has('default')) _codexModelsCache.set('default', codex);
+})();
 
 function localJsonArray(key) {
   try {
@@ -287,6 +312,7 @@ export async function fetchCodexModels(force = false, accountId = 'default') {
       const normalized = mergeCodexModelOptions(models, { fallback: false });
       _codexModelsCache.set(account, normalized);
       _modelListAt.set(`codex:${account}`, Date.now());
+      if (normalized.length) keepList(`codex:${account}`, normalized);
       return normalized;
     } catch {
       const previous = _codexModelsCache.get(account) || [];
@@ -466,8 +492,8 @@ export async function fetchOpencodeModels(force = false) {
   if (_opencodeModelsLoading) return _opencodeModelsLoading;
   _opencodeModelsLoading = (async () => {
     try {
-      const resp = await fetch('/api/opencode/providers/full');
-      const data = await resp.json().catch(() => ({}));
+      // The connected providers, from the page's one kept read (opencode-providers.js).
+      const data = await fetchOpencodeProviders({ force }).catch(() => ({}));
       if (!data || data.ok === false) return [];
       const out = parseOpencodeProviderModels(data);
       if (out.length) _opencodeModelsCache = out;
@@ -497,6 +523,7 @@ export async function fetchClaudeModels(force = false) {
       if (models.length && data?.source !== 'fallback') {
         _claudeModelsCache = models.map(model => ({ ...model, catalogSource: data?.source || 'cli' }));
         _modelListAt.set('claude-code', Date.now());
+        keepList('claude-code', _claudeModelsCache);
       } else {
         _claudeModelsCache = verified() || (models.length ? models.map(model => ({ ...model, catalogSource: 'fallback' })) : [...CLAUDE_FALLBACK_MODELS]);
       }
@@ -524,9 +551,19 @@ export async function ensureModelsForProfile(profileId, force = false, accountId
   return getModelsForProfile(profileId, accountId);
 }
 
+// OpenCode's list parsed from the provider list the page already holds (read at launch, kept across a reload,
+// or by another module): no request, and the hidden models of this window are applied as it is parsed.
+function keptOpencodeModels() {
+  const kept = opencodeProviders.peek('');
+  if (!kept || kept.ok === false) return null;
+  const out = parseOpencodeProviderModels(kept);
+  if (out.length) _opencodeModelsCache = out;
+  return out;
+}
+
 export function getModelsForProfile(profileId, accountId = 'default') {
   if (profileId === 'codex') return _codexModelsCache.get(String(accountId || 'default')) || [];
-  if (profileId === 'opencode') return _opencodeModelsCache || [];
+  if (profileId === 'opencode') return _opencodeModelsCache || keptOpencodeModels() || [];
   if (profileId === 'claude-code') return _claudeModelsCache || [];
   return STATIC_MODELS[profileId] || [];
 }
@@ -599,29 +636,50 @@ export function normalizeEffortForProfile(profileId, effort) {
   return levels.some(e => e.id === value) ? value : null;
 }
 
-export async function fetchMcpProfilePresets(force = false) {
-  if (!force && _mcpProfilePresets) return _mcpProfilePresets;
-  try {
-    const resp = await fetch('/api/mcp/profile');
-    const data = await resp.json().catch(() => ({}));
-    _mcpProfilePresets = data?.ok && data.presets ? data.presets : {};
-    return _mcpProfilePresets;
-  } catch {
-    return {};
+export async function fetchToolCatalog(force = false, { cwd = '' } = {}) {
+  const key = String(cwd || '');
+  if (force) invalidateToolCatalog();
+  const epoch = _toolCatalogEpoch;
+  if (!force && _toolCatalogAt.get(key) === epoch && _toolCatalogByCwd.has(key)) { _toolCatalog = _toolCatalogByCwd.get(key); return _toolCatalog; }
+  if (_toolCatalogLoads.has(key)) return _toolCatalogLoads.get(key);
+  const loading = (async () => {
+    try {
+      const resp = await fetch(`/api/mcp/tools${key ? `?cwd=${encodeURIComponent(key)}` : ''}`);
+      const data = await resp.json().catch(() => ({}));
+      let catalog = resp.ok && data?.ok && Array.isArray(data.groups) ? data : null;
+      if (epoch !== _toolCatalogEpoch) return fetchToolCatalog(false, { cwd: key });
+      if (catalog) { const previous = _toolCatalogByCwd.get(key); if (previous) catalog = Object.assign(previous, catalog); _toolCatalogByCwd.set(key, catalog); _toolCatalogAt.set(key, epoch); _toolCatalog = catalog; }
+      return catalog;
+    } catch { return null; }
+    finally { if (epoch === _toolCatalogEpoch) _toolCatalogLoads.delete(key); }
+  })();
+  _toolCatalogLoads.set(key, loading);
+  return loading;
+}
+
+export function invalidateToolCatalog(change) {
+  _toolCatalogEpoch++; _toolCatalogLoads.clear();
+  if (change?.name && typeof change.enabled === 'boolean') for (const catalog of _toolCatalogByCwd.values()) {
+    const row = catalog.servers?.find(row => row.ref === `mcp:${change.name}`); if (row) row.blocked = !change.enabled;
   }
 }
 
-export function getCachedMcpProfilePresets() {
-  return _mcpProfilePresets || {};
+export function updateCachedToolDefault(tools) {
+  if (Array.isArray(tools)) for (const catalog of _toolCatalogByCwd.values()) catalog.defaultTools = [...tools];
+}
+
+export function getCachedToolCatalog(cwd) {
+  return cwd === undefined ? _toolCatalog : _toolCatalogByCwd.get(String(cwd || '')) || null;
 }
 
 export function clearRuntimeOptionCaches() {
   _codexModelsCache.clear();
   _codexModelsLoading.clear();
   _opencodeModelsCache = null;
+  opencodeProviders.invalidate('');
   _claudeModelsCache = null;
   _modelListAt.clear();
-  _mcpProfilePresets = null;
+  invalidateToolCatalog(); _toolCatalog = null; _toolCatalogByCwd.clear(); _toolCatalogAt.clear();
   _claudeAccountsCache = null;
   _opencodeAgentsCache = null;
 }
@@ -630,3 +688,5 @@ if (typeof document !== 'undefined') {
   document.addEventListener('ocp-hidden-models-changed', () => { _opencodeModelsCache = null; });
   document.addEventListener('ocp-providers-changed', () => { _opencodeModelsCache = null; });
 }
+// A background read of the provider list brought another one: the parsed copy is made again from it.
+opencodeProviders.subscribe(() => { _opencodeModelsCache = null; });