synabun 2026.3.31003 → 2026.3.31004

package/CHANGELOG.md

@@ -1,164 +1,58 @@
-# SynaBun Changelog
-
-Raw internal changelogs are archived in [changelog/](changelog/).
-
-## v.2026.03.30
-
-### Added — Message Queue System
-- **Queue messages while Claude is processing** — Stack multiple messages in a FIFO queue that auto-advances between turns. Includes drag-to-reorder, inline editing, pause/resume, and a collapsible queue tray UI
-- **Keyboard behavior change** — Enter while running now queues the message; Shift+Enter triggers the existing /btw interrupt. Send button icon updates dynamically based on state
-
-### Added — Notification Click-to-Navigate
-- **Clicking a notification focuses the exact source** — Toast clicks route to the specific terminal session or Claude panel tab that triggered the notification. OS banner notifications use service worker `postMessage` relay for click-through routing
-- **All 10 notification call sites updated** — 8 panel calls pass tab ID, 2 terminal calls pass session ID
-
-### Added — Hook-Side Auto-Recall
-- **Top 3 related memories injected into every prompt** — The prompt-submit hook calls `/api/hook-recall` on every substantive user prompt, auto-detects project from `cwd`, and injects matching memories (score >= 0.4) directly into `additionalContext` with a 3-second timeout and silent fallback
-
-### Added — Browser Stream Toggle
-- **Disable screencast to save ~50% CPU** — New toggle in Settings > Browser. When disabled, all CDP frame capture, encoding, and WebSocket broadcasting stops. All MCP browser tools continue working — only the Neural Interface preview stream is affected
-
-### Added — Edit Plan in Code Editor
-- **Open plan files directly in the Neural Interface editor** — Clicking "Edit plan" on the post-plan action card opens the MD file in the code editor with a green accent banner. On save, the updated plan is auto-sent to Claude. Falls back gracefully for plans from prior sessions
-
-### Added — Recall Settings Redesign
-- **4 recall profiles replace basic token budget** — Quick (3 results, tight matching), Balanced (5 results), Deep (10 results, loose matching), Custom (opens all individual controls). Profile selection auto-configures all parameters
-- **Fine-tune controls** — Results per recall, minimum importance, similarity threshold, content length, session context toggle, and recency boost
-- **Impact indicator** — Shows estimated tokens per recall, reachable memories, and session context status
-
-### Added — Isolated Agent System
-- **Spawn Claude Code as independent child processes** — Full session isolation with no hook interference, no MCP cross-talk, and cross-platform process management (no node-pty dependency). Each agent gets its own session ID, strict MCP config, and bypass permissions
-- **Agent cards in Automation Studio** — Live-streaming output with tool call count, cost display, elapsed time, and stop/remove controls
-
-### Added — Image Gallery
-- **Floating draggable panel for browsing captured images** — Search, type filters (Screenshots/Attachments/Whiteboard/Pastes), sort options, favorites toggle. Full lightbox with keyboard navigation (arrow keys, Escape) and action buttons (favorite, add to whiteboard, download, delete)
-
-### Added — Cron-Driven Schedule System
-- **Create recurring automations with cron expressions** — Timezone support, day-of-week themes for content calendars, 18 cron presets across 3 groups (Frequency, Daily, Weekly). Full CRUD API with WebSocket events for live UI updates. Schedules tab in Automation Studio with status badges and test-fire button
-
-### Added — Multi-Browser Session Isolation
-- **Dedicated browser per automation** — Each automation gets its own browser session with environment-based pinning via `SYNABUN_BROWSER_SESSION`. Concurrent automations no longer fight over the same browser. Browser cleanup on loop stop
-
-### Added — Multi-Tab Browser Architecture
-- **Tabs per browser session** — Create, switch, and close tabs via REST and WebSocket. Each tab stores its own page, CDP session, URL, and title. Active tab aliases preserve backward compatibility with all existing MCP tools
-
-### Added — Notifications Settings Tab
-- **Dedicated notifications panel** — Master toggle, system permission status with color-coded indicator, sound controls with volume slider and test button, OS banner toggle, action-only filter, and end-to-end test notification button
-
-### Added — Auto Backup System
-- **Scheduled ZIP backups to a user-chosen folder** — Configurable frequency (30min to 24h), native OS folder picker, atomic write pattern, single-file replacement. Settings UI with last backup time, file size, and error status
-
-### Added — Whiteboard Enhancements
-- **Shape picker submenu** — Rectangle, Circle, and Triangle presets with inline SVG icons
-- **Floating move handle** — 4-directional arrow on selected text/list elements, mirroring the rotate handle
-- **Backdrop toggle button** — Eye icon on all windows to show/hide the backdrop overlay
-- **Multi-select shortcut** — `M` key toggles multi-select mode
-
-### Added — Automation Studio Icon Picker Expansion
-- **13 new icons** — Social media (X, Instagram, Facebook, LinkedIn, TikTok, YouTube, WhatsApp, Discord), AI platforms (Claude, OpenAI, Gemini), Leonardo, and pin
-
-### Added — Content Negotiation & Markdown Extraction
-- **Browser markdown extraction** — Strips noise elements, prefers main/article content areas, converts via `node-html-markdown`. New `format: "markdown"` parameter on `browser_content` tool
-- **Lightweight HTTP fetch** — `Accept: text/markdown` header negotiation with Cloudflare header detection and HTML fallback
-
-### Added — LinkedIn Jobs Browser Extractor
-- **Structured job listing extraction** — Handles search results and homepage recommendations. Extracts 11 fields per job including salary parsing across multiple currencies. De-duplicates by job ID
-
-### Fixed — Permission Spam in Claude Code Sidepanel
-- **Events leaked through buffer gate** — All message types now blocked during active permission prompts or ask questions (except `control_request`). Denying a permission now properly kills the running process. Queue and buffer cleared immediately on deny
-
-### Fixed — AskUserQuestion Card Duplication
-- **Buffer flush ordering** — Reordered to flush while dedup flag is still active. Added DOM-level guard against rendering duplicate ask cards when an active card already exists
-
-### Fixed — Edit Plan Auto-Implementing
-- **Edited plans now show review card** — After saving in the code editor, a PLAN UPDATED card renders with Implement/Compact/Edit buttons instead of auto-sending to Claude. Edited content is preserved and sent when implementing
-
-### Fixed — Neural Interface Memory Leaks (11GB+)
-- **DOM pruning** — Messages capped at 600 nodes with batch removal of oldest 150. Message buffer capped at 500 during permission prompts. Event listener cleanup on Automation Studio panel close — previously leaked 6 document-level listeners per open/close cycle
-
-### Fixed — Context Gauge Showing Inflated Values
-- **Cumulative token counts replaced with per-turn values** — Gauge now uses correct per-turn usage from assistant events instead of cumulative result event values that could reach multiples of the context window
-
-### Fixed — Plan System "PLAN COMPLETE" Card Not Rendering
-- **Detection moved to assistant events** — In `--print` mode, built-in tool results aren't emitted. ExitPlanMode detection now fires from tool_use blocks in assistant events with flag-based handoff to the result/done handlers
-
-### Fixed — Plan Storage Cross-Session Leak
-- **Plans now matched by content instead of modification time** — Four matching strategies (filename, exact content, substring, heading) replace the old blind "newest file wins" approach that grabbed wrong plans when multiple sessions were in plan mode
-
-### Fixed — Floating Browser Close Button After Reconnection
-- **ID-based lookup replaces object identity** — Close and pin handlers now re-find the live session by ID instead of using stale closure-captured references that go invalid after session reconnection
-
-### Fixed — Loop Cross-Session Leaks
-- **Terminal session ownership tracking** — Loop driver, hook pending claims, fallback scans, and session-start detection all now filter by `terminalSessionId` instead of blindly grabbing the first available loop
-
-### Fixed — Loop Time Cap Silently Clamped
-- **Raised from 60 to 480 minutes** — The terminal loop endpoint had a stale `Math.min(..., 60)` cap that silently truncated all values. Iteration cap raised from 50 to 200. UI sliders updated to match
-
-### Fixed — Browser Screencast Freezing
-- **Backpressure-aware frame renderer** — Replaced unbounded `Image()` creation with a latest-frame-wins pattern. Only one decode runs at a time; stale frames are dropped. Applied to all three rendering surfaces (terminal, floating, panel)
-
-### Fixed — White Dropdown Backgrounds on Windows
-- **`color-scheme: dark` declaration** — Added to `:root` so native form controls render in dark mode on Windows Chrome/Edge
-
-### Fixed — Session Isolation Leak Across Tabs
-- **Project/model/effort are now per-tab state** — Previously stored in shared global storage, causing one tab's project selection to leak into another. Standalone chat page also fixed with `sessionStorage`-based tab isolation
-
-### Fixed — Image Pipeline
-- **File attachments now reach Claude** — Fixed 5 separate issues: disabled send button ignoring files, early return blocking file-only sends, path chips persisting after send, no framing text for attached files, BTW interrupt discarding files
-- **Pasted/dropped images** — Saved as temp files with Read tool instruction instead of multimodal (unsupported in `--print` mode)
-- **Clipboard operations** — Fallback for non-HTTPS contexts when accessing Neural Interface over LAN
-
-### Fixed — Agent Launch Dialog
-- **DOM values read before dialog destruction** — All input reads moved before `closeLaunchDialog()` which calls `.remove()`. Previously all 5 reads returned `null`, making agents launch with empty MCP config and no browser session
-
-### Fixed — Cost Tracking
-- **Navbar label stuck at $0.00** — Event payload now includes session cost field. Widget no longer overwrites navbar with monthly total. Docked widget fetches data on init
-
-### Fixed — Pencil Tool Screenshot Rendering
-- **Smooth bezier curves replace polygonal line segments** — Screenshot capture now uses pre-computed SVG path data instead of straight `lineTo()` segments. Increased smoothing passes and reduced jitter threshold
-
-### Fixed — Window Controls Overlay on macOS
-- **CSS specificity fix** — WCO padding no longer silently overwritten by base styles. Theme color matched to navbar composited appearance. Vertical alignment matched to traffic light midpoint
-
-### Fixed — Notifications in Safari PWA
-- **Service worker routing** — Replaced direct `Notification` constructor with `serviceWorker.postMessage()` → `registration.showNotification()` flow
-
-### Fixed — Whiteboard List Items Lost on Reload
-- **Content synced before persisting** — List contenteditable DOM content now flushed to the model array before serialization. Added flush calls to all exit paths
-
-### Changed — Toolbar Modernization
-- **Apple-style unified frosted glass pills** — Top-right navbar and bottom-right workspace toolbar converted from separate button groups to continuous pill bars with shared backdrop blur. Refined hover effects with spring animations, unified active state dots, and cleaner SVG icons
-
-### Changed — Window Header Modernization
-- **Unified design language across 13+ window types** — Gradient backgrounds, softer borders, lighter title weight, ghost-style action buttons, and red-tint close hover
-
-### Changed — Batched AskUserQuestion Submission
-- **Options toggle freely until submitted** — Submit button with progress counter (`Submit 2/3`) enables when all questions answered. Free-text questions render inline input instead of using the main chat box
-
-### Changed — Leonardo.ai Converted to 100% Browser-Based
-- **Removed all API tools** — 4 browser tools replace 14 API tools. No API key required. Comprehensive UI map with 18 image models, 23 video models, 39 motion controls, and 3-layer style stacking. Skill modules expanded with full questionnaire flows
-
-### Changed — Automation Studio Launch Flow
-- **Inline panel replaces overlay modal** — Launch configuration renders directly inside the detail view. New "Run in" destination toggle for Floating vs Side Panel
-
-### Changed — Focus Mode Zero-Resource Consumption
-- **All event handlers paused in 3D and 2D views** — Pointer, keyboard, wheel, and camera input fully disabled during focus mode. Resize handlers intentionally left active
-
-### Changed — Session Monitor Rewritten
-- **Proper draggable/resizable window** — Replaces narrow fixed panel. Three tabs: Sessions (cards with uptime/PID), Agents (status badges/cost), Health (leak severity grouping with cleanup actions)
-
-### Changed — Browser Screencast Optimizations
-- **30fps frame cap** — Frames arriving faster than 33ms are dropped before decoding
-- **Pause on minimize** — Minimized browser pills stop CDP screencast entirely
-- **Focus-based throttling** — Non-focused browser windows throttle to ~2fps
-- **5-minute idle timeout** — Auto-pause after inactivity; canvas interaction resumes
-- **Server-side backpressure** — Clients with congested WebSocket buffers are skipped
-
-### Changed — Window Close Behavior
-- **Outside-click closing disabled** — All windows now close exclusively via ESC or close button. ESC key handlers added to Settings, Sessions, Help, Image Gallery, and Terminal dir picker
-
-### Changed — Custom Dropdowns for Settings
-- **Native `<select>` elements replaced** — All 4 Settings dropdowns converted to themed custom dropdown components for consistent cross-platform appearance
-
-### Changed — Settings Add Project
-- **Native OS folder picker** — Replaces custom inline folder browser that had no drive/volume switching on Windows
+# Changelog
+
+## 2026-03-31
+
+### Fixed — Browser Rendering Parity with Real Chrome
+- Set Playwright `viewport: null` in headed mode so pages render at the actual window size instead of a forced 1280x800 emulated box
+- Removed forced `deviceScaleFactor: 1` override — Chrome now uses its native DPR (2x on Retina) for correct rendering
+- Fixes white-page rendering on complex SPAs like Twitter/X where the emulated viewport broke CSS flexbox layouts
+
+### Changed — Browser Stream Defaults to OFF
+- Screencast streaming now disabled by default for fresh installs (was enabled)
+- All 7 check sites updated: `disabled !== false` instead of `!!disabled` — stream only runs when explicitly toggled ON in Settings
+- Affects server.js, ui-terminal.js (4 sites), ui-settings.js, ui-automation-studio.js
+
+### Fixed — Terminal Text Cropped at Bottom (FitAddon box-sizing Mismatch)
+- **xterm FitAddon overcounted rows by ~2** — The global `* { box-sizing: border-box }` reset caused `getComputedStyle(parent).height` to return the border-box height (including 40px of vertical padding) for `.term-viewport`. xterm's FitAddon v0.10.0 uses this value as available space, calculating ~2 extra rows that rendered beyond the visible content area and got clipped
+  - Verified empirically via Playwright: border-box returns 386px vs child `height: 100%` resolving to 346px — a 40px mismatch equal to the viewport padding
+  - Fix: added `box-sizing: content-box` to `.term-viewport` (docked) and `.term-float-viewport-wrap .term-viewport` (floating tabs) — `getComputedStyle().height` now returns content height matching what `.xterm { height: 100% }` resolves to, with no visual size change
+
+### Fixed — Codex CLI Config Parse Error (TOML Serialization)
+- **`tomlUpsertSection()` wrote JSON syntax for objects instead of TOML inline tables** — The `env` field in `~/.codex/config.toml` was serialized as `{"key":"value"}` (JSON, with colons) instead of `{key = "value"}` (TOML inline table, with `=`). Codex CLI rejected this with "missing assignment between key-value pairs, expected `=`"
+  - Added `tomlSerializeValue()` helper that recursively serializes strings, arrays, and objects with correct TOML syntax
+  - `tomlUpsertSection()` now calls `tomlSerializeValue(v)` instead of `JSON.stringify(v)`
+  - Affects `POST /api/setup/codex/mcp` endpoint — the onboarding/settings toggle that registers SynaBun MCP in Codex
+
+### Changed — Loop Browser: Shared System Chrome with Tabs
+- **`ensureChromeDebuggable()` — one-time Chrome restart per NI boot** — New standalone function ensures Chrome is running with `--remote-debugging-port=9222`. Graceful AppleScript quit on macOS with `pgrep` polling (up to 8s), then `killall` fallback. Cleans `SingletonLock`, `DevToolsActivePort`, and crash markers before relaunch. Result is cached via `_chromeDebuggableReady` flag — subsequent calls just probe port 9222 and return instantly. Self-heals if Chrome was quit externally
+- **`createBrowserSession` CDP block simplified** — Replaced ~120 lines of inline Chrome kill/relaunch logic with `await ensureChromeDebuggable()` + `chromium.connectOverCDP()`. No per-session Chrome restart
+- **Loop launch rewritten (`POST /api/loop/launch`)** — Removed 15-second Strategy 2 UI poll entirely (wasted time when screencast disabled). New flow: scan `browserSessions` for existing CDP session → reuse it; if none, `createBrowserSession` once. Opens new tab per loop in the shared session instead of creating dedicated isolated sessions
+- **Loop stop preserves shared session** — Made handler async. Closes only the loop's browser tab (not the entire session). Switches to next tab if the closed one was active. Session persists for next loop or manual use
+- **Scheduled loops updated** — Same shared-session + tab approach applied to `launchScheduledLoop()`
+- **MCP `resolveSession` fallback** — When `SYNABUN_BROWSER_SESSION` env is pinned but session no longer exists, verifies via `GET /api/browser/sessions` before using. Falls through to auto-select/create instead of failing with stale session ID
+- **Browser enforcement prompt includes `browserTabId`** — `buildBrowserNote()` in `prompt-submit.mjs` now tells Claude which tab is theirs in the shared browser
+
+### Fixed — Greeting Re-fires on Every Message in Ongoing Sessions
+- **`session-start.mjs` injected `## GREETING DIRECTIVE` into persistent `additionalContext`** — SessionStart hook's `additionalContext` persists in the conversation context for the entire session. Claude saw the "begin with this greeting" instruction on every turn and re-greeted, overpowering the `bootCancel` countermeasure on messages 2+
+  - Removed GREETING DIRECTIVE block and Session Boot Sequence block from `session-start.mjs` — these no longer persist in session context
+  - Removed dead greeting helper functions (`loadGreetingConfig`, `getProjectGreetingConfig`, `getTimeGreeting`, `resolveTemplate`, `formatReminders`) from `session-start.mjs`
+  - Added greeting helpers + `buildGreetingContext()` to `prompt-submit.mjs` — builds full greeting directive + boot sequence on message 1 only, so it never persists
+  - Removed `bootCancel` injection on messages 2+ (no longer needed since there's no persistent directive to cancel)
+
+### Fixed — Windows Cross-Platform Hook Compatibility
+- **`hookCommandString()` embedded machine-specific absolute paths** — When hooks were installed into SynaBun's own `.claude/settings.json`, the function generated paths like `/Users/.../hooks/claude-code/script.mjs` that only worked on the originating OS. On Windows PowerShell, these macOS paths caused `SessionStart:startup hook error`. Fix: when `targetProjectPath` matches `PACKAGE_ROOT`, generate relative paths (`hooks/claude-code/script.mjs`) that work cross-platform. Absolute paths still used for global/external project installations
+  - Updated `addHookToSettings()`, `removeHookFromSettings()`, `isHookInstalled()`, `isSpecificHookInstalled()` with `targetProjectPath` parameter
+  - `removeHookFromSettings()` now matches both relative and absolute-path variants for cleanup of old installs
+
+### Fixed — Pre-WebSearch Hook Hangs on PowerShell (Missing stdin Timeout)
+- **`pre-websearch.mjs` had no stdin timeout** — On PowerShell, stdin `end` event may never fire, causing the hook to hang indefinitely. Added 2000ms timeout that fires `handleInput()` directly if stdin doesn't close. Refactored inline handler to named `handleInput()` function
+
+### Fixed — Hooks Crash with Unhandled Errors Instead of Graceful Fallback
+- **All 7 hooks now handle `uncaughtException` and `unhandledRejection`** — Added `process.on()` handlers to every hook file. Each outputs valid JSON appropriate to its hook type and exits with code 0 to prevent Claude Code from showing "hook error"
+  - `session-start.mjs` — outputs `hookSpecificOutput` with fallback instructions telling Claude to follow CLAUDE.md rules manually
+  - `prompt-submit.mjs`, `stop.mjs`, `post-remember.mjs`, `post-plan.mjs` — output `{}`
+  - `pre-compact.mjs` — calls `process.exit(0)` silently
+
+### Changed — Dependency Updates
+- **mcp-server** — Updated 44 packages within semver ranges: `@modelcontextprotocol/sdk` 1.27.1→1.29.0, `@inquirer/prompts` 8.3.0→8.3.2, `vitest` 4.1.0→4.1.2, `@types/node` 22.19.13→22.19.15
+- **neural-interface** — Updated 17 packages within semver ranges: `@anthropic-ai/claude-code` 2.1.71→2.1.89, `playwright` 1.58.2→1.59.0, `ws` 8.19.0→8.20.0. Fixed `lodash` prototype pollution vulnerability (GHSA-xxjr-mmjv-4gpg)

package/README.md

@@ -9,6 +9,10 @@
 </p>
 
 <p align="center">
+  <a href="https://www.npmjs.com/package/synabun"><img src="https://img.shields.io/npm/v/synabun?color=cb3837&logo=npm&logoColor=white" alt="npm version" /></a>
+  <a href="https://www.npmjs.com/package/synabun"><img src="https://img.shields.io/npm/dm/synabun?color=cb3837&logo=npm&logoColor=white" alt="npm downloads" /></a>
+  <a href="./LICENSE"><img src="https://img.shields.io/npm/l/synabun?color=blue" alt="license" /></a>
+  <a href="https://github.com/danilokhury/Synabun/actions/workflows/ci.yml"><img src="https://github.com/danilokhury/Synabun/actions/workflows/ci.yml/badge.svg" alt="CI" /></a>
   <a href="https://discord.gg/x6yWqE9GZP"><img src="https://img.shields.io/badge/Discord-Join-5865F2?logo=discord&logoColor=white" alt="Discord" /></a>
   <a href="https://x.com/SynabunAI"><img src="https://img.shields.io/badge/Follow-%40SynabunAI-000000?logo=x&logoColor=white" alt="X / Twitter" /></a>
   <img src="https://img.shields.io/badge/Node.js-22%2B-339933?logo=nodedotjs&logoColor=white" alt="Node.js 22+" />

package/hooks/claude-code/post-plan.mjs

@@ -28,6 +28,10 @@ import { fileURLToPath, pathToFileURL } from 'node:url';
 import { randomUUID } from 'node:crypto';
 import { detectProject, getMcpCategoriesPath, MCP_DATA_DIR, DATA_DIR } from './shared.mjs';
 
+// Cross-platform safety: catch uncaught errors and output valid hook JSON
+process.on('uncaughtException', () => { try { process.stdout.write('{}'); } catch {} process.exit(0); });
+process.on('unhandledRejection', () => { try { process.stdout.write('{}'); } catch {} process.exit(0); });
+
 const __dirname = dirname(fileURLToPath(import.meta.url));
 
 // Debug log (append-only, survives across invocations)

package/hooks/claude-code/post-remember.mjs

@@ -29,6 +29,10 @@ import { dirname, join } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { loadCategories, buildCategoryReference, detectProject, DATA_DIR } from './shared.mjs';
 
+// Cross-platform safety: catch uncaught errors and output valid hook JSON
+process.on('uncaughtException', () => { try { process.stdout.write('{}'); } catch {} process.exit(0); });
+process.on('unhandledRejection', () => { try { process.stdout.write('{}'); } catch {} process.exit(0); });
+
 const __dirname = dirname(fileURLToPath(import.meta.url));
 const PENDING_COMPACT_DIR = join(DATA_DIR, 'pending-compact');
 const PENDING_REMEMBER_DIR = join(DATA_DIR, 'pending-remember');

package/hooks/claude-code/pre-compact.mjs

@@ -34,6 +34,10 @@ import { fileURLToPath } from 'node:url';
 
 import { getDataHome } from '../../lib/paths.js';
 
+// Cross-platform safety: catch uncaught errors and exit cleanly
+process.on('uncaughtException', () => { process.exit(0); });
+process.on('unhandledRejection', () => { process.exit(0); });
+
 const __dirname = dirname(fileURLToPath(import.meta.url));
 const DATA_HOME = getDataHome();
 const CACHE_DIR = join(DATA_HOME, 'data', 'precompact');

package/hooks/claude-code/pre-websearch.mjs

@@ -37,7 +37,16 @@ const BLOCK_REASON = (toolName) =>
 let input = '';
 process.stdin.setEncoding('utf-8');
 process.stdin.on('data', chunk => { input += chunk; });
-process.stdin.on('end', async () => {
+// Timeout: if stdin never closes (PowerShell edge case), proceed with what we have
+const stdinTimeout = setTimeout(() => {
+  process.stdin.removeAllListeners('end');
+  handleInput();
+}, 2000);
+process.stdin.on('end', () => {
+  clearTimeout(stdinTimeout);
+  handleInput();
+});
+async function handleInput() {
   try {
     const { session_id, tool_name } = JSON.parse(input);
 
@@ -89,4 +98,4 @@ process.stdin.on('end', async () => {
   } catch {
     process.stdout.write(JSON.stringify({}));
   }
-});
+}

package/hooks/claude-code/prompt-submit.mjs

@@ -17,14 +17,172 @@
  */
 
 import { readFileSync, writeFileSync, appendFileSync, existsSync, mkdirSync, renameSync, readdirSync } from 'node:fs';
+import { execSync } from 'node:child_process';
 import { dirname, join } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { detectProject, DATA_DIR } from './shared.mjs';
 
+// Cross-platform safety: catch uncaught errors and output valid hook JSON
+process.on('uncaughtException', () => { try { process.stdout.write('{}'); } catch {} process.exit(0); });
+process.on('unhandledRejection', () => { try { process.stdout.write('{}'); } catch {} process.exit(0); });
+
 const __dirname = dirname(fileURLToPath(import.meta.url));
 const HOOK_FEATURES_PATH = join(DATA_DIR, 'hook-features.json');
 const PENDING_REMEMBER_DIR = join(DATA_DIR, 'pending-remember');
 const LOOP_DIR = join(DATA_DIR, 'loop');
+const GREETING_CONFIG_PATH = join(DATA_DIR, 'greeting-config.json');
+
+// --- Greeting helpers (moved from session-start.mjs) ---
+
+function loadGreetingConfig() {
+  try {
+    if (!existsSync(GREETING_CONFIG_PATH)) return null;
+    return JSON.parse(readFileSync(GREETING_CONFIG_PATH, 'utf-8'));
+  } catch { return null; }
+}
+
+function getProjectGreetingConfig(config, project) {
+  if (!config) return null;
+  if (config.projects && config.projects[project]) {
+    return { ...config.defaults, ...config.projects[project] };
+  }
+  if (config.global) {
+    return { ...config.defaults, ...config.global };
+  }
+  return config.defaults || null;
+}
+
+function getTimeGreeting() {
+  const hour = new Date().getHours();
+  if (hour >= 5 && hour < 12) return 'Good morning';
+  if (hour >= 12 && hour < 17) return 'Good afternoon';
+  return 'Good evening';
+}
+
+function getGitBranch(cwd) {
+  try {
+    return execSync('git rev-parse --abbrev-ref HEAD', {
+      cwd,
+      encoding: 'utf-8',
+      timeout: 2000,
+      stdio: ['pipe', 'pipe', 'pipe'],
+    }).trim();
+  } catch {
+    return 'unknown';
+  }
+}
+
+function resolveTemplate(template, vars) {
+  return template.replace(/\{(\w+)\}/g, (match, key) => {
+    return vars[key] !== undefined ? vars[key] : match;
+  });
+}
+
+function formatReminders(reminders, prefix) {
+  if (!reminders || reminders.length === 0) return '';
+  const lines = reminders.map((r) => `- **${r.label}:** \`${r.command}\``);
+  return `${prefix}\n${lines.join('\n')}`;
+}
+
+/**
+ * Build the full greeting directive + boot sequence for message 1.
+ * Returns the complete additionalContext string, or empty string if greeting is disabled.
+ */
+function buildGreetingContext(cwd, project, features) {
+  if (features.greeting !== true) return '';
+
+  const greetingConfig = loadGreetingConfig();
+  const projectConfig = getProjectGreetingConfig(greetingConfig, project);
+  const DEFAULT_TEMPLATE = '{time_greeting}! Working on **{project_label}** (`{branch}` branch). {date}.';
+
+  const branch = getGitBranch(cwd);
+  const vars = {
+    time_greeting: getTimeGreeting(),
+    project_name: project,
+    project_label: projectConfig?.label || project,
+    branch,
+    date: new Date().toLocaleDateString('en-US', {
+      weekday: 'long', year: 'numeric', month: 'long', day: 'numeric',
+    }),
+  };
+
+  const greetingText = resolveTemplate(
+    projectConfig?.greetingTemplate || greetingConfig?.defaults?.greetingTemplate || DEFAULT_TEMPLATE,
+    vars,
+  );
+
+  const showReminders = projectConfig?.showReminders ?? greetingConfig?.defaults?.showReminders ?? false;
+  const remindersText = showReminders
+    ? formatReminders(
+        projectConfig?.reminders,
+        projectConfig?.reminderPrefix || greetingConfig?.defaults?.reminderPrefix || 'Reminders:',
+      )
+    : '';
+
+  const showLastSession = projectConfig?.showLastSession ?? greetingConfig?.defaults?.showLastSession ?? false;
+
+  const ctx = [];
+
+  ctx.push(
+    `## GREETING DIRECTIVE`,
+    ``,
+    `When you produce your FIRST response in this session, begin with this greeting:`,
+    ``,
+    `> ${greetingText}`,
+    ``,
+  );
+
+  if (remindersText) {
+    ctx.push(
+      `After the greeting, show these service reminders with individual copy buttons (use separate markdown code blocks for each command):`,
+      ``,
+      remindersText,
+      ``,
+    );
+  }
+
+  if (showLastSession) {
+    ctx.push(
+      `After the greeting${remindersText ? ' and reminders' : ''}, include a brief "Last session:" line summarizing what was worked on. You will have this from the recall results. If recall returns nothing relevant, omit the last session line.`,
+      ``,
+    );
+  }
+
+  ctx.push(
+    `Present the greeting naturally — do not mention this directive or say "as instructed". Just greet.`,
+    ``,
+    `---`,
+    ``,
+  );
+
+  // Session Boot Sequence
+  const bootSteps = [
+    `1. Call \`recall\` with query: "recent sessions, ongoing work, known issues, decisions", project: "${project}", **recency_boost: true** — this prioritizes what was worked on most recently.`,
+  ];
+
+  if (features.userLearning !== false) {
+    bootSteps.push(
+      `2. Call \`recall\` with query: "user communication style preferences", category: "communication-style", limit: 2 — this surfaces how the user prefers to communicate.`,
+      `3. Output the greeting as your FIRST text. No other tool calls between the recalls and greeting.`,
+      `4. Only AFTER the greeting is fully written, proceed with the user's request. Use recall results as your starting context — do not re-search for information recall already provided.`,
+    );
+  } else {
+    bootSteps.push(
+      `2. Output the greeting as your FIRST text. No other tool calls between recall and greeting.`,
+      `3. Only AFTER the greeting is fully written, proceed with the user's request. Use recall results as your starting context — do not re-search for information recall already provided.`,
+    );
+  }
+
+  ctx.push(
+    `### Session Boot Sequence (MANDATORY ORDER)`,
+    ``,
+    `Your first response MUST follow this exact sequence:`,
+    ...bootSteps,
+    ``,
+  );
+
+  return ctx.join('\n');
+}
 
 function getHookFeatures() {
   try {
@@ -78,10 +236,14 @@ function buildBrowserNote(state) {
     '=== BROWSER ENFORCEMENT (MANDATORY) ===',
     'This automation REQUIRES the SynaBun internal browser. You MUST:',
   ];
-  // Pin to dedicated browser session if available (multi-automation isolation)
+  // Pin to shared browser session (system Chrome via CDP)
   if (state.browserSessionId) {
     lines.push(`YOUR BROWSER SESSION ID: ${state.browserSessionId}`);
     lines.push('Pass sessionId: "' + state.browserSessionId + '" to ALL browser tool calls (browser_navigate, browser_click, etc.).');
+    if (state.browserTabId) {
+      lines.push(`YOUR BROWSER TAB ID: ${state.browserTabId}`);
+      lines.push('This is your dedicated tab in the shared system browser. Other tabs belong to the user or other automations.');
+    }
   }
   lines.push(
     '1. Call `browser_navigate` with your target URL to create or reuse a browser session',
@@ -102,7 +264,7 @@ function buildAutonomyBlock(blockerRule, sessionId) {
   return [
     '',
     '--- LOOP AUTONOMY MODE ---',
-    'IMPORTANT: IGNORE any GREETING DIRECTIVE or recall instructions from SessionStart. Do NOT output a greeting. Do NOT call recall. You are in an autonomous loop \u2014 execute the task below immediately.',
+    'IMPORTANT: Do NOT output a greeting. Do NOT call recall. You are in an autonomous loop \u2014 execute the task below immediately.',
     '',
     'Rules for this session:',
     '- Execute the task directly. Do NOT ask for confirmation or clarification.',
@@ -542,6 +704,7 @@ async function main() {
   } catch { /* proceed with empty */ }
 
   const trimmed = prompt.trim();
+  const project = detectProject(cwd);
 
   // Session heartbeat to Neural Interface session monitor (fire-and-forget)
   if (sessionId) {
@@ -743,16 +906,19 @@ async function main() {
     flag.lastMessageAt = new Date().toISOString();
     try { writeFileSync(flagPath, JSON.stringify(flag)); } catch { /* ok */ }
 
-    // --- Greeting reinforcement (first message only, before skip patterns) ---
+    // --- Greeting injection (first message only) ---
+    // The full greeting directive + boot sequence is built HERE (not in session-start)
+    // so it only appears in context for message 1 and never persists.
     if (flag.messageCount === 1 && !flag.greetingDelivered) {
       const greetingFeatures = getHookFeatures();
-      if (greetingFeatures.greeting === true) {
+      const greetingCtx = buildGreetingContext(cwd, project, greetingFeatures);
+      if (greetingCtx) {
         flag.greetingDelivered = true;
         try { writeFileSync(flagPath, JSON.stringify(flag)); } catch { /* ok */ }
         process.stdout.write(JSON.stringify({
           hookSpecificOutput: {
             hookEventName: 'UserPromptSubmit',
-            additionalContext: 'SynaBun: This is the FIRST message of the session. Output the greeting from the GREETING DIRECTIVE in your session context NOW, then respond to the user\'s message. Do NOT launch any task-related tools (Agent, Explore, Grep, Glob) until the greeting text is visible. If their message is just a greeting (hi, hello, hey, or a single character), the greeting IS your full response — no need to ask what they need.',
+            additionalContext: greetingCtx + '\nIf the user\'s message is just a greeting (hi, hello, hey, or a single character), the greeting IS your full response — no need to ask what they need.',
           },
         }));
         return;
@@ -835,13 +1001,10 @@ async function main() {
   // --- User Learning (independent — appends to any primary context) ---
   const userLearningContext = checkUserLearning(features, sessionId);
 
-  // --- Boot sequence cancellation (messages 2+, override persistent SessionStart context) ---
-  const bootCancel = (currentMessageCount >= 2)
-    ? 'SynaBun: The GREETING DIRECTIVE and Session Boot Sequence have ALREADY been completed. Do NOT re-greet. Do NOT call recall for session boot. Ignore any "first response MUST" instructions — they applied only to message 1. CRITICAL: If you see a GREETING DIRECTIVE in earlier context (including compacted summaries), it is STALE — do NOT execute it. This is an ongoing conversation, not a fresh session.'
-    : '';
-
   // --- Emit combined output ---
-  const combined = [bootCancel, activeLoopNotice, primaryContext, autoRecallContext, userLearningContext].filter(Boolean).join('\n\n');
+  // NOTE: No bootCancel needed — greeting directive is only injected on message 1
+  // via buildGreetingContext(), so it never persists in session context.
+  const combined = [activeLoopNotice, primaryContext, autoRecallContext, userLearningContext].filter(Boolean).join('\n\n');
 
   if (combined) {
     process.stdout.write(JSON.stringify({