synabun 2026.4.25-beta.1 → 2026.4.25-beta.3

package/CHANGELOG.md

@@ -43,6 +43,41 @@ Raw internal changelogs are archived in [changelog/](changelog/).
 ### Changed — Claude Restored Tab Selection
 - **Restored Claude tabs keep stable IDs** — Updated `createTab()` in `ui-claude-panel.js` to accept a restored `id`, and changed `restoreTabs()` to pass saved tab IDs through. Placeholder click-through can now target the restored Claude tab instead of losing selection because the panel generated a fresh `crypto.randomUUID()` during bootstrap.
 
+### Changed — Backup System Coverage Expanded
+- **Backup file lists extended** — Added `stored-plans.json`, `synabun-plugins.json`, `mcp-registry.json`, and `active-profile.json` to both manual `GET /api/system/backup` (`neural-interface/server.js:10457`) and auto-backup `buildBackupZipToFile()` (`neural-interface/server.js:10844`) file arrays. These cover the post-plan hook plan→memory tracker, plugin install registry, third-party MCP server registry + profile defs, and active MCP profile selection — all previously lost on restore.
+- **Plan markdown history backed up recursively** — Added `addDirRecursive('data/plans', ...)` to both manual and auto backup paths (`neural-interface/server.js:10483`, `:10868`) so the date-sliced plan tree (`data/plans/YYYY-MM-DD/*.md`) rides along.
+- **Restore creates `plans` subdir** — Added `'plans'` to the `mkdirSync` subdir list in `POST /api/system/restore` (`neural-interface/server.js:10617`). Existing recursive `data/` write loop already extracts plan files via `dirname(target)` mkdir.
+- **Backward compatible with old backups** — Manifest version check still accepts `version 1 || 2`. Old backups restore exactly as before — missing new files skipped silently, no schema migration required.
+
+### Added — CLI-Not-Installed Indicator in Sidepanels
+- **Empty-state banner across Claude, Codex, OpenCode panels** — Detects when the corresponding CLI binary is missing and renders a warning banner inside the panel's empty state (`.cp-empty` / `.cxp-empty` / `.ocp-empty`) with the install command, an "Install guide" link to the official docs, and a "Re-check" button. Banner is removed automatically once the CLI is detected.
+- **Shared status module `cli-status.js`** — New `neural-interface/public/shared/cli-status.js` wraps the existing `/api/system/tool-versions` endpoint with a subscriber + auto-poll layer. Exposes `subscribeCliStatus(toolKey, cb)`, `recheckCliStatus(toolKey)`, `getCliDocUrl(toolKey)`, `getCliInstallCommand(toolKey)`, `getCliLabel(toolKey)`. Polls every 30s while at least one subscribed tool reports `installed === null`; stops once detected or unsubscribed. 10s in-memory cache + single in-flight fetch dedup.
+- **Send-button gating** — Each panel's send/input flow is now blocked while the CLI is missing. `ui-claude-panel.js` `send()` returns early with a notification. `cdx/cdx-tabs.js` `syncInputEnabled` reads the `.cxp-cli-blocked` panel class to force `send.disabled = true`, and `sendPrompt()` returns early with a system message. `ocp/ocp-panel.js` `syncSendButton` short-circuits to disabled with the "OpenCode CLI not installed" tooltip; `handleSend` returns early via `setStatus('offline', …)`.
+- **Banner re-render hooks** — `cdx/cdx-tabs.js` `clearTranscript` now dispatches a `cdx-empty-rebuilt` CustomEvent and `ocp/ocp-render.js` `renderEmptyState` dispatches `ocp-empty-rebuilt`, so the banner re-injects itself after the empty state is rebuilt during session resets.
+- **Official install URLs** — `claude-code` → `https://docs.claude.com/en/docs/claude-code/setup`, `codex` → `https://developers.openai.com/codex/cli/`, `opencode` → `https://opencode.ai/docs/`. (`gemini` constants defined for future use; no Gemini sidepanel currently exists.)
+- **Banner styles** — Added `.cp-cli-missing*`, `.cxp-cli-missing*`, `.ocp-cli-missing*` rule sets to `ui-claude-panel.js` style block, `cdx/cdx-styles.js`, and `ocp/ocp-styles.js`. Includes `.cp-cli-blocked` / `.cxp-cli-blocked` / `.ocp-cli-blocked` panel classes for the dimmed input state.
+
+### Fixed — CLI-Not-Installed Banner Hidden After Errors / Broken-Binary Cases (Sidepanels)
+- **Banner relocated to top of messages container** — Was rendered inside `.cxp-empty` / `.cp-empty` / `.ocp-empty`. Once any system message appeared (e.g. `Codex session closed` + `Codex app-server exited before responding to request 1`), the empty-state collapsed and took the banner with it. Banner is now an independent `:first-child` of `#cxp-messages-container`, `#cp-messages-container`, and `.ocp-messages-container` via `container.insertBefore(banner, container.firstChild)`. Stays visible across transcript states. New `ensureCliBannerEl()` / `removeCliBannerEl()` / `refreshCliBanner()` helpers replace the old empty-state-scoped `renderCliMissingBanner` / `refreshCliBanners` in `neural-interface/public/shared/cdx/cdx-panel.js`, `neural-interface/public/shared/ui-claude-panel.js`, and `neural-interface/public/shared/ocp/ocp-panel.js`.
+- **Spawn-failure pattern detection** — Banner only triggered when `/api/system/tool-versions` reported `installed: null`. A broken-but-present binary (e.g. `codex 0.125.0` spawning then exiting immediately) reports a real version, so the banner never showed. Added a per-panel `_cliInstallFailureForced` flag flipped on by WS error patterns:
+  - **Codex** — `applySocketError` in `cdx/cdx-tabs.js` matches `/Codex CLI not found|ENOENT|app-server exited before responding|app-server spawn/i` → dynamic-imports `cdx-panel.js` and calls exported `flagCdxCliInstallFailure()`.
+  - **Claude** — `case 'error'` in WS handler matches `/Claude CLI not found|ENOENT/i` → `flagClaudeCliInstallFailure()`.
+  - **OpenCode** — `onError` callback matches `/opencode.*(not.*found|ENOENT|spawn)|opencode CLI/i` → `flagOcpCliInstallFailure()`.
+  - All three flags clear automatically when the `cli-status` subscriber callback later receives an installed value.
+- **Send-button gate now reads forced flag** — Claude `send()`, Codex `sendPrompt()` (via `.cxp-cli-blocked` panel class read in `syncInputEnabled`), and OpenCode `syncSendButton` / `handleSend` all check `_cliInstalled === null || _cliInstallFailureForced` so a broken-binary install also blocks send.
+- **Banner restyled as sticky alert** — New `.cxp-cli-banner*`, `.cp-cli-banner*`, `.ocp-cli-banner*` rule sets in `cdx/cdx-styles.js`, `ui-claude-panel.js` style block, and `ocp/ocp-styles.js`. Three-column grid (icon, text, actions), orange/amber theme, `flex-shrink: 0`, sits at top of the scroll region with `z-index: 5` so it stays above transcript content.
+
+### Fixed — High Severity npm audit Alerts in Install CLI (Neural Interface)
+- **Playwright SSL cert verification CVE** — `neural-interface/package.json` pinned `playwright` at `1.54.2`, vulnerable to GHSA-7mvr-c777-76hp (browser downloader skipped SSL cert authenticity check). Bumped to `^1.59.1` (non-major) — fixed in `<1.55.1`. `setup.js` install flow no longer prints the high severity warning after `Installing MCP Server dependencies`.
+- **lodash code injection + protobufjs RCE via transitives** — `lodash@4.17.23` (pulled by `archiver` → `archiver-utils@5.0.2`) had high severity GHSA-r5fr-rjxr-66jc (`_.template` import key code injection) plus moderate prototype pollution. `protobufjs@7.5.4` (pulled by `@huggingface/transformers` → `onnxruntime-web@1.22.0-dev.20250409-89f8206ba4`) had critical GHSA-xq3m-2v4x-88gg (arbitrary code execution). Added `overrides` block in `neural-interface/package.json` pinning `lodash: ^4.18.1` and `protobufjs: ^7.5.5` — both within the parents' implicit ranges, no breaking change.
+
+### Fixed — Moderate/High npm audit Alerts in Install CLI (MCP Server)
+- **uuid buffer bounds check CVE** — `mcp-server/package.json` had `uuid@^11.1.0`, vulnerable to GHSA-w5hq-g745-h8pq (missing buffer bounds check in `v3`/`v5`/`v6` when `buf` provided), fixed in `<14.0.0`. Bumped to `^14.0.0` (semver major) — `v4` named export unchanged, `src/tools/remember.ts` and `src/tui.ts` compile cleanly with no source modifications.
+- **hono / @hono/node-server / postcss / vite / protobufjs transitives** — multiple moderate-to-high CVEs in vitest's transitive `vite@8.0.0-8.0.4` (path traversal, `server.fs.deny` bypass, websocket arbitrary file read), `hono@<4.12.14` (cookie validation, path traversal in `toSSG()`, ipRestriction IPv4-mapped IPv6), `@hono/node-server@<1.19.13` (serveStatic repeated-slash bypass), `postcss@<8.5.10` (XSS via unescaped `</style>`), and `protobufjs@<7.5.5`. Added `overrides` block in `mcp-server/package.json` pinning `protobufjs: ^7.5.5`, `hono: ^4.12.14`, `@hono/node-server: ^1.19.13`, `postcss: ^8.5.10`, `vite: ^8.0.10` — patches only, no breaking semver bumps to direct deps.
+
+### Changed — Removed Deprecated `@types/uuid` devDependency
+- **uuid v14 ships own type defs** — removed `@types/uuid: ^10.0.0` from `mcp-server/package.json` devDependencies. npm warned the stub package as deprecated (`This is a stub types definition. uuid provides its own type definitions, so you do not need this installed`). `tsc` build verified — no missing-types errors.
+
 ## 2026-04-24
 
 ### Added — "Continue planning" in OpenCode, Codex, and Claude plan UIs

package/mcp-server/package.json

@@ -24,15 +24,21 @@
     "@modelcontextprotocol/sdk": "^1.12.1",
     "chalk": "^5.6.2",
     "express": "^4.21.0",
-    "uuid": "^11.1.0",
+    "uuid": "^14.0.0",
     "zod": "^3.24.2"
   },
   "devDependencies": {
     "@types/express": "^5.0.0",
     "@types/node": "^22.12.0",
-    "@types/uuid": "^10.0.0",
     "tsx": "^4.19.0",
     "typescript": "^5.9.3",
     "vitest": "^4.1.0"
+  },
+  "overrides": {
+    "protobufjs": "^7.5.5",
+    "hono": "^4.12.14",
+    "@hono/node-server": "^1.19.13",
+    "postcss": "^8.5.10",
+    "vite": "^8.0.10"
   }
 }

package/neural-interface/package.json

@@ -21,8 +21,12 @@
     "express": "^4.21.2",
     "node-html-markdown": "^2.0.0",
     "node-pty": "^1.1.0",
-    "playwright": "1.54.2",
+    "playwright": "^1.59.1",
     "undici": "^8.1.0",
     "ws": "^8.19.0"
+  },
+  "overrides": {
+    "lodash": "^4.18.1",
+    "protobufjs": "^7.5.5"
   }
 }

package/neural-interface/public/shared/cdx/cdx-panel.js

@@ -4,6 +4,7 @@
 import { storage } from '../storage.js';
 import { state, emit, on } from '../state.js';
 import { reserveRightPanelLayout, clearRightPanelLayout } from '../ui-sidepanel-layout.js';
+import { subscribeCliStatus, recheckCliStatus, getCliDocUrl, getCliInstallCommand, getCliLabel } from '../cli-status.js';
 import { isClaudePanelOpen, toggleClaudePanel } from '../ui-claude-panel.js';
 import { injectStyles } from './cdx-styles.js';
 import { appendAssistantMarkdownMessage, flushCardBody, renderPostPlanActions } from './cdx-render.js';
@@ -46,6 +47,8 @@ document.addEventListener('visibilitychange', () => {
 let _panel = null;
 let _visible = false;
 let _resizeBound = false;
+let _cliInstalled = null;
+let _cliUnsub = null;
 
 // ═══════════════════════════════════════════
 //  Bound State (mirrors active tab — managed by cdx-tabs)
@@ -390,6 +393,82 @@ function startupEmptyText() {
   return '';
 }
 
+// ── CLI installation status (banner + send-block) ──
+let _cliInstallFailureForced = false;
+
+function ensureCliBannerEl() {
+  if (!_panel) return null;
+  const container = panelEl('#cxp-messages-container');
+  if (!container) return null;
+  let banner = container.querySelector(':scope > .cxp-cli-banner');
+  if (banner) return banner;
+  const label = getCliLabel('codex');
+  const cmd = getCliInstallCommand('codex');
+  const url = getCliDocUrl('codex');
+  banner = document.createElement('div');
+  banner.className = 'cxp-cli-banner';
+  banner.innerHTML = `
+    <div class="cxp-cli-banner-icon">!</div>
+    <div class="cxp-cli-banner-text">
+      <div class="cxp-cli-banner-title">${label} CLI not installed</div>
+      <div class="cxp-cli-banner-body">Run <code>${cmd}</code> or follow the install guide.</div>
+    </div>
+    <div class="cxp-cli-banner-actions">
+      <a class="cxp-cli-banner-link" href="${url}" target="_blank" rel="noopener noreferrer">Install guide</a>
+      <button class="cxp-cli-banner-recheck" type="button">Re-check</button>
+    </div>
+  `;
+  container.insertBefore(banner, container.firstChild);
+  const btn = banner.querySelector('.cxp-cli-banner-recheck');
+  btn?.addEventListener('click', async () => {
+    btn.disabled = true;
+    btn.textContent = 'Checking…';
+    try { await recheckCliStatus('codex'); }
+    finally {
+      if (btn.isConnected) {
+        btn.disabled = false;
+        btn.textContent = 'Re-check';
+      }
+    }
+  });
+  return banner;
+}
+
+function removeCliBannerEl() {
+  if (!_panel) return;
+  const container = panelEl('#cxp-messages-container');
+  const banner = container?.querySelector(':scope > .cxp-cli-banner');
+  banner?.remove();
+}
+
+function refreshCliBanner() {
+  if (!_panel) return;
+  const missing = _cliInstalled === null || _cliInstallFailureForced;
+  _panel.classList.toggle('cxp-cli-blocked', missing);
+  if (missing) ensureCliBannerEl();
+  else removeCliBannerEl();
+  try { syncInputEnabled(); } catch {}
+}
+
+export function isCdxCliInstalled() {
+  return _cliInstalled !== null && !_cliInstallFailureForced;
+}
+
+export function flagCdxCliInstallFailure() {
+  _cliInstallFailureForced = true;
+  refreshCliBanner();
+  recheckCliStatus('codex').catch(() => {});
+}
+
+function ensureCliSubscription() {
+  if (_cliUnsub) return;
+  _cliUnsub = subscribeCliStatus('codex', (info) => {
+    _cliInstalled = info?.installed || null;
+    if (_cliInstalled) _cliInstallFailureForced = false;
+    refreshCliBanner();
+  });
+}
+
 // ═══════════════════════════════════════════
 //  setVisible — Show / Hide Panel
 // ═══════════════════════════════════════════
@@ -426,6 +505,7 @@ function setVisible(nextVisible) {
     loadCurrentProfile();
     loadRecallProfile();
     panelEl('#cxp-input')?.focus();
+    refreshCliBanner();
   } else {
     document.removeEventListener('keydown', _cdxDocEscHandler, { capture: true });
   }
@@ -971,6 +1051,7 @@ function ensurePanel() {
   autosizeInput();
   restoreTabs();
   syncInputEnabled();
+  ensureCliSubscription();
   window.dispatchEvent(new CustomEvent('sidepanel-tray:provider-loaded', { detail: { provider: 'codex' } }));
   // Close Codex when a Claude/OpenCode pill is clicked (mutual exclusion)
   const tray = document.getElementById('term-minimized-tray');

package/neural-interface/public/shared/cdx/cdx-styles.js

@@ -984,6 +984,70 @@ export function injectStyles() {
     .cxp-empty-logo svg { width: 32px; height: 32px; opacity: 0.25; }
     .cxp-empty-name { font-size: 13px; font-weight: 500; color: rgba(255,255,255,0.35); letter-spacing: 0.02em; }
     .cxp-empty-status { font-size: 11px; color: rgba(255,255,255,0.28); line-height: 1.5; min-height: 1em; }
+    .cxp-cli-banner {
+      flex-shrink: 0;
+      display: grid;
+      grid-template-columns: auto 1fr auto;
+      gap: 10px;
+      align-items: center;
+      margin: 8px 12px 0;
+      padding: 10px 12px;
+      border: 1px solid rgba(255,180,80,0.45);
+      border-radius: 8px;
+      background: rgba(255,180,80,0.08);
+      color: rgba(255,235,200,0.92);
+      font-size: 11px;
+      line-height: 1.4;
+      position: relative;
+      z-index: 5;
+    }
+    .cxp-cli-banner-icon {
+      width: 22px; height: 22px;
+      display: flex; align-items: center; justify-content: center;
+      border-radius: 50%;
+      background: rgba(255,180,80,0.25);
+      color: rgba(255,210,140,1);
+      font-weight: 700;
+    }
+    .cxp-cli-banner-text { display: flex; flex-direction: column; gap: 2px; min-width: 0; }
+    .cxp-cli-banner-title {
+      font-size: 12px; font-weight: 600;
+      color: rgba(255,210,140,0.95);
+    }
+    .cxp-cli-banner-body {
+      font-size: 11px;
+      color: rgba(255,255,255,0.7);
+      word-break: break-word;
+    }
+    .cxp-cli-banner-body code {
+      padding: 1px 5px;
+      background: rgba(0,0,0,0.35);
+      border-radius: 3px;
+      font-size: 10.5px;
+      color: rgba(255,255,255,0.85);
+    }
+    .cxp-cli-banner-actions { display: flex; gap: 6px; }
+    .cxp-cli-banner-link, .cxp-cli-banner-recheck {
+      display: inline-flex; align-items: center; gap: 4px;
+      padding: 4px 9px;
+      font-size: 11px;
+      font-weight: 500;
+      border-radius: 4px;
+      border: 1px solid rgba(255,255,255,0.2);
+      background: rgba(255,255,255,0.05);
+      color: rgba(255,255,255,0.9);
+      text-decoration: none;
+      cursor: pointer;
+      user-select: none;
+      font-family: inherit;
+    }
+    .cxp-cli-banner-link:hover, .cxp-cli-banner-recheck:hover {
+      background: rgba(255,255,255,0.12);
+      border-color: rgba(255,255,255,0.4);
+    }
+    .cxp-cli-banner-recheck:disabled { opacity: 0.5; cursor: default; }
+    .codex-panel.cxp-cli-blocked .cxp-send { opacity: 0.4 !important; cursor: not-allowed !important; }
+    .codex-panel.cxp-cli-blocked .cxp-input { opacity: 0.7; }
     .cxp-system {
       align-self: center;
       max-width: 92%;

package/neural-interface/public/shared/cdx/cdx-tabs.js

@@ -552,6 +552,9 @@ function applySocketError(msg) {
   if (_compacting) setCompactingUI(false);
   appendSystem(text, 'error');
   setStatus(text, 'error');
+  if (/Codex CLI not found|ENOENT|app-server exited before responding|app-server spawn/i.test(text)) {
+    import('./cdx-panel.js').then((m) => m.flagCdxCliInstallFailure?.()).catch(() => {});
+  }
   if (msg.requestId) {
     if (_sessionListRequest?.requestId === msg.requestId) {
       _sessionListRequest.reject?.(new Error(text));
@@ -2041,6 +2044,7 @@ function startupEmptyText() {
 export function clearTranscript(emptyText = freshThreadText()) {
   if (!_messagesEl) return;
   _messagesEl.innerHTML = `<div class="cxp-empty"><div class="cxp-empty-logo">${OPENAI_ICON}</div><span class="cxp-empty-name">Codex</span><span class="cxp-empty-status"></span></div>`;
+  document.dispatchEvent(new CustomEvent('cdx-empty-rebuilt'));
   _items.clear();
   _requestCards.clear();
   _blockingServerRequests = new Map();
@@ -3271,11 +3275,12 @@ export function syncInputEnabled() {
   const hasPaths = !!(tab?.pendingPaths?.length);
   const blockedByRequest = hasBlockingServerRequests();
   if (input) input.disabled = !_connected || !_bootstrapped || _startingThread || blockedByRequest;
+  const cliBlocked = document.getElementById('codex-panel')?.classList.contains('cxp-cli-blocked');
   if (send) {
     const isStopMode = !!(tab?.running || _running);
     send.classList.toggle('cxp-send-stopping', !!isStopMode);
-    send.title = isStopMode ? 'Stop' : 'Send';
-    send.disabled = isStopMode ? false : (!_connected || !_bootstrapped || _running || _startingThread || blockedByRequest || (!hasText && !hasImages && !hasPaths));
+    send.title = cliBlocked ? 'Codex CLI not installed' : (isStopMode ? 'Stop' : 'Send');
+    send.disabled = cliBlocked || (isStopMode ? false : (!_connected || !_bootstrapped || _running || _startingThread || blockedByRequest || (!hasText && !hasImages && !hasPaths)));
   }
   if (fresh) {
     pruneDiscardableTabs({ keepTab: tab, persist: true });
@@ -4528,6 +4533,12 @@ export function sendPrompt() {
   const { input, tab, prompt, images, paths } = payload;
   if (!input || !_connected || !_bootstrapped) return;
   if (!prompt && !images.length && !paths.length) return;
+  // Block when CLI binary missing — banner already informs user.
+  const panel = document.getElementById('codex-panel');
+  if (panel?.classList.contains('cxp-cli-blocked')) {
+    appendSystem('Codex CLI not installed. Install it first, then click Re-check.', 'error');
+    return;
+  }
   handleLocalSlashCommand(payload).then((handled) => {
     if (handled) return;
     if (_running && tab) {

package/neural-interface/public/shared/cli-status.js

@@ -0,0 +1,157 @@
+// ═══════════════════════════════════════════
+// SynaBun — CLI Status (shared)
+// Detects whether Claude / Codex / OpenCode CLIs are installed by
+// querying /api/system/tool-versions. Caches the response, fans out
+// updates to subscribers, and auto-polls (every 30s) while at least
+// one subscribed tool reports installed=null.
+// ═══════════════════════════════════════════
+
+const TOOL_KEYS = ['claude-code', 'codex', 'opencode', 'gemini'];
+
+const CLI_DOC_URLS = {
+  'claude-code': 'https://docs.claude.com/en/docs/claude-code/setup',
+  'codex':       'https://developers.openai.com/codex/cli/',
+  'opencode':    'https://opencode.ai/docs/',
+  'gemini':      'https://github.com/google-gemini/gemini-cli',
+};
+
+const CLI_INSTALL_CMDS = {
+  'claude-code': 'npm install -g @anthropic-ai/claude-code',
+  'codex':       'npm install -g @openai/codex',
+  'opencode':    'npm install -g opencode-ai',
+  'gemini':      'npm install -g @google/gemini-cli',
+};
+
+const CLI_LABELS = {
+  'claude-code': 'Claude Code',
+  'codex':       'Codex',
+  'opencode':    'OpenCode',
+  'gemini':      'Gemini CLI',
+};
+
+const POLL_INTERVAL_MS = 30000;
+const CACHE_TTL_MS = 10000;
+
+let _cache = { fetchedAt: 0, tools: null };
+let _inflight = null;
+const _subscribers = new Map();
+let _pollTimer = null;
+
+export function getCliDocUrl(toolKey) {
+  return CLI_DOC_URLS[toolKey] || null;
+}
+
+export function getCliInstallCommand(toolKey) {
+  return CLI_INSTALL_CMDS[toolKey] || '';
+}
+
+export function getCliLabel(toolKey) {
+  return CLI_LABELS[toolKey] || toolKey;
+}
+
+async function _fetchToolVersions(force) {
+  if (!force && _cache.tools && (Date.now() - _cache.fetchedAt) < CACHE_TTL_MS) {
+    return _cache.tools;
+  }
+  if (_inflight) return _inflight;
+  const url = force ? '/api/system/tool-versions?force=1' : '/api/system/tool-versions';
+  _inflight = (async () => {
+    try {
+      const res = await fetch(url);
+      if (!res.ok) throw new Error(`HTTP ${res.status}`);
+      const data = await res.json();
+      _cache = { fetchedAt: Date.now(), tools: data?.tools || {} };
+      return _cache.tools;
+    } finally {
+      _inflight = null;
+    }
+  })();
+  return _inflight;
+}
+
+function _emitChange(prevTools, nextTools) {
+  for (const key of TOOL_KEYS) {
+    const prev = prevTools?.[key]?.installed ?? null;
+    const next = nextTools?.[key]?.installed ?? null;
+    const subs = _subscribers.get(key);
+    if (!subs || !subs.size) continue;
+    if (prev !== next || prevTools == null) {
+      const info = nextTools?.[key] || { installed: null };
+      for (const cb of subs) {
+        try { cb(info); } catch (e) { console.error('[cli-status] subscriber error:', e); }
+      }
+    }
+  }
+}
+
+function _hasMissingSubscribed() {
+  for (const key of _subscribers.keys()) {
+    const subs = _subscribers.get(key);
+    if (!subs?.size) continue;
+    const installed = _cache.tools?.[key]?.installed ?? null;
+    if (!installed) return true;
+  }
+  return false;
+}
+
+function _maybeStartPoller() {
+  if (_pollTimer) return;
+  if (!_hasMissingSubscribed()) return;
+  _pollTimer = setInterval(async () => {
+    if (!_hasMissingSubscribed()) {
+      _stopPoller();
+      return;
+    }
+    const prev = _cache.tools;
+    try {
+      const next = await _fetchToolVersions(true);
+      _emitChange(prev, next);
+      if (!_hasMissingSubscribed()) _stopPoller();
+    } catch { /* ignore — retry next tick */ }
+  }, POLL_INTERVAL_MS);
+}
+
+function _stopPoller() {
+  if (_pollTimer) {
+    clearInterval(_pollTimer);
+    _pollTimer = null;
+  }
+}
+
+export async function getCliStatus(toolKey, { force = false } = {}) {
+  const tools = await _fetchToolVersions(force);
+  return tools?.[toolKey] || { installed: null, latest: null };
+}
+
+export function subscribeCliStatus(toolKey, callback) {
+  if (!TOOL_KEYS.includes(toolKey)) return () => {};
+  let set = _subscribers.get(toolKey);
+  if (!set) { set = new Set(); _subscribers.set(toolKey, set); }
+  set.add(callback);
+
+  const cached = _cache.tools?.[toolKey];
+  if (cached) {
+    try { callback(cached); } catch (e) { console.error('[cli-status] subscriber error:', e); }
+    _maybeStartPoller();
+  } else {
+    _fetchToolVersions(false).then((tools) => {
+      try { callback(tools?.[toolKey] || { installed: null }); } catch {}
+      _maybeStartPoller();
+    }).catch(() => {});
+  }
+
+  return () => {
+    const s = _subscribers.get(toolKey);
+    if (!s) return;
+    s.delete(callback);
+    if (!s.size) _subscribers.delete(toolKey);
+    if (!_hasMissingSubscribed()) _stopPoller();
+  };
+}
+
+export async function recheckCliStatus(toolKey) {
+  const prev = _cache.tools;
+  const next = await _fetchToolVersions(true);
+  _emitChange(prev, next);
+  return next?.[toolKey] || { installed: null };
+}

package/neural-interface/public/shared/ocp/ocp-panel.js

@@ -8,6 +8,7 @@ import { state, emit, on } from '../state.js';
 import { storage } from '../storage.js';
 import { fetchProjects } from '../api.js';
 import { reserveRightPanelLayout, clearRightPanelLayout } from '../ui-sidepanel-layout.js';
+import { subscribeCliStatus, recheckCliStatus, getCliDocUrl, getCliInstallCommand, getCliLabel } from '../cli-status.js';
 
 import { injectStyles } from './ocp-styles.js';
 import {
@@ -64,6 +65,8 @@ let _serverVersion = null;
 let _serverManaged = false;
 let _projects = [];
 let _projectsLoaded = false;
+let _cliInstalled = null;
+let _cliUnsub = null;
 
 function panelEl(sel) { return _panel?.querySelector(sel) || null; }
 
@@ -907,6 +910,10 @@ async function handleSend() {
   if (!input) return;
   const tab = activeTab();
   if (!tab) return;
+  if (_cliInstalled === null || _cliInstallFailureForced) {
+    setStatus('offline', 'OpenCode CLI not installed. Install it first, then click Re-check.');
+    return;
+  }
   let text = input.value.trim();
   const images = Array.isArray(tab.attachedImages) ? [...tab.attachedImages] : [];
   if (!text && !images.length) return;
@@ -1006,6 +1013,16 @@ function syncSendButton() {
   const tab = activeTab();
   if (!sendBtn) return;
 
+  const cliBlocked = _cliInstalled === null || _cliInstallFailureForced;
+
+  if (cliBlocked) {
+    sendBtn.classList.remove('running');
+    sendBtn.disabled = true;
+    sendBtn.setAttribute('data-tooltip', 'OpenCode CLI not installed');
+    sendBtn.setAttribute('aria-label', 'OpenCode CLI not installed');
+    return;
+  }
+
   if (tab?.running) {
     sendBtn.disabled = false;
     sendBtn.classList.add('running');
@@ -1503,6 +1520,77 @@ function _ocpDocEscHandler(event) {
   abortMessage();
 }
 
+// ── CLI installation status (banner + send-block) ──
+let _cliInstallFailureForced = false;
+
+function ensureCliBannerEl() {
+  if (!_panel) return null;
+  const container = _panel.querySelector('.ocp-messages-container');
+  if (!container) return null;
+  let banner = container.querySelector(':scope > .ocp-cli-banner');
+  if (banner) return banner;
+  const label = getCliLabel('opencode');
+  const cmd = getCliInstallCommand('opencode');
+  const url = getCliDocUrl('opencode');
+  banner = document.createElement('div');
+  banner.className = 'ocp-cli-banner';
+  banner.innerHTML = `
+    <div class="ocp-cli-banner-icon">!</div>
+    <div class="ocp-cli-banner-text">
+      <div class="ocp-cli-banner-title">${label} CLI not installed</div>
+      <div class="ocp-cli-banner-body">Run <code>${cmd}</code> or follow the install guide.</div>
+    </div>
+    <div class="ocp-cli-banner-actions">
+      <a class="ocp-cli-banner-link" href="${url}" target="_blank" rel="noopener noreferrer">Install guide</a>
+      <button class="ocp-cli-banner-recheck" type="button">Re-check</button>
+    </div>
+  `;
+  container.insertBefore(banner, container.firstChild);
+  const btn = banner.querySelector('.ocp-cli-banner-recheck');
+  btn?.addEventListener('click', async () => {
+    btn.disabled = true;
+    btn.textContent = 'Checking…';
+    try { await recheckCliStatus('opencode'); }
+    finally {
+      if (btn.isConnected) {
+        btn.disabled = false;
+        btn.textContent = 'Re-check';
+      }
+    }
+  });
+  return banner;
+}
+
+function removeCliBannerEl() {
+  if (!_panel) return;
+  const banner = _panel.querySelector('.ocp-messages-container > .ocp-cli-banner');
+  banner?.remove();
+}
+
+function refreshCliBanner() {
+  if (!_panel) return;
+  const missing = _cliInstalled === null || _cliInstallFailureForced;
+  _panel.classList.toggle('ocp-cli-blocked', missing);
+  if (missing) ensureCliBannerEl();
+  else removeCliBannerEl();
+  syncSendButton();
+}
+
+export function flagOcpCliInstallFailure() {
+  _cliInstallFailureForced = true;
+  refreshCliBanner();
+  recheckCliStatus('opencode').catch(() => {});
+}
+
+function ensureCliSubscription() {
+  if (_cliUnsub) return;
+  _cliUnsub = subscribeCliStatus('opencode', (info) => {
+    _cliInstalled = info?.installed || null;
+    if (_cliInstalled) _cliInstallFailureForced = false;
+    refreshCliBanner();
+  });
+}
+
 function setVisible(nextVisible) {
   if (!_panel) return;
   if (!nextVisible) {
@@ -1528,6 +1616,7 @@ function setVisible(nextVisible) {
     if (_curProject) loadBranches(_curProject);
     loadCurrentProfile();
     loadRecallProfile();
+    refreshCliBanner();
   } else {
     document.removeEventListener('keydown', _ocpDocEscHandler, { capture: true });
   }
@@ -1583,6 +1672,9 @@ function wsCallbacks() {
     },
     onError(msg) {
       console.error('[ocp] Error:', msg.message);
+      if (typeof msg.message === 'string' && /opencode.*(not.*found|ENOENT|spawn)|opencode CLI/i.test(msg.message)) {
+        flagOcpCliInstallFailure();
+      }
     },
   };
 }
@@ -1651,6 +1743,7 @@ function ensurePanel() {
   window.dispatchEvent(new CustomEvent('sidepanel-tray:provider-loaded', { detail: { provider: 'opencode' } }));
 
   syncSendButton();
+  ensureCliSubscription();
 
   // Connect WebSocket
   connectWs(wsCallbacks());

package/neural-interface/public/shared/ocp/ocp-render.js

@@ -985,9 +985,10 @@ export function renderEmptyState(container) {
     <div class="ocp-empty">
       <svg viewBox="0 0 240 300"><path fill-rule="evenodd" d="M0 0h240v300H0V0zm30 30v240h180V30H30z" fill="currentColor"/><rect x="30" y="150" width="180" height="120" opacity=".45" fill="currentColor"/></svg>
       <span>OpenCode</span>
-      <span style="font-size:10px;opacity:0.5">Send a message to start</span>
+      <span class="ocp-empty-hint" style="font-size:10px;opacity:0.5">Send a message to start</span>
     </div>
   `;
+  document.dispatchEvent(new CustomEvent('ocp-empty-rebuilt'));
 }
 
 // ── Render full history from messages:list response ──

package/neural-interface/public/shared/ocp/ocp-styles.js

@@ -1521,6 +1521,69 @@ export function injectStyles() {
       stroke: currentColor; fill: none;
       stroke-width: 1; opacity: 0.3;
     }
+    .ocp-cli-banner {
+      flex-shrink: 0;
+      display: grid;
+      grid-template-columns: auto 1fr auto;
+      gap: 10px;
+      align-items: center;
+      margin: 8px 12px 0;
+      padding: 10px 12px;
+      border: 1px solid rgba(255,180,80,0.45);
+      border-radius: 8px;
+      background: rgba(255,180,80,0.08);
+      color: rgba(255,235,200,0.92);
+      font-size: 11px;
+      line-height: 1.4;
+      position: relative;
+      z-index: 5;
+    }
+    .ocp-cli-banner-icon {
+      width: 22px; height: 22px;
+      display: flex; align-items: center; justify-content: center;
+      border-radius: 50%;
+      background: rgba(255,180,80,0.25);
+      color: rgba(255,210,140,1);
+      font-weight: 700;
+    }
+    .ocp-cli-banner-text { display: flex; flex-direction: column; gap: 2px; min-width: 0; }
+    .ocp-cli-banner-title {
+      font-size: 12px; font-weight: 600;
+      color: rgba(255,210,140,0.95);
+    }
+    .ocp-cli-banner-body {
+      font-size: 11px;
+      color: rgba(255,255,255,0.7);
+      word-break: break-word;
+    }
+    .ocp-cli-banner-body code {
+      padding: 1px 5px;
+      background: rgba(0,0,0,0.35);
+      border-radius: 3px;
+      font-size: 10.5px;
+      color: rgba(255,255,255,0.85);
+    }
+    .ocp-cli-banner-actions { display: flex; gap: 6px; }
+    .ocp-cli-banner-link, .ocp-cli-banner-recheck {
+      display: inline-flex; align-items: center; gap: 4px;
+      padding: 4px 9px;
+      font-size: 11px;
+      font-weight: 500;
+      border-radius: 4px;
+      border: 1px solid rgba(255,255,255,0.2);
+      background: rgba(255,255,255,0.05);
+      color: rgba(255,255,255,0.9);
+      text-decoration: none;
+      cursor: pointer;
+      user-select: none;
+      font-family: inherit;
+    }
+    .ocp-cli-banner-link:hover, .ocp-cli-banner-recheck:hover {
+      background: rgba(255,255,255,0.12);
+      border-color: rgba(255,255,255,0.4);
+    }
+    .ocp-cli-banner-recheck:disabled { opacity: 0.5; cursor: default; }
+    .ocp-panel.ocp-cli-blocked .ocp-input { opacity: 0.7; }
 
     /* ── Thinking indicator ── */
     .ocp-thinking {

package/neural-interface/public/shared/ui-claude-panel.js

@@ -9,6 +9,7 @@ import { fetchClaudeSessions, fetchBrowserSessions, searchSessions } from './api
 import { createFrameRenderer } from './utils.js';
 import { notify, NOTIF_TYPE } from './ui-notifications.js';
 import { reserveRightPanelLayout, clearRightPanelLayout } from './ui-sidepanel-layout.js';
+import { subscribeCliStatus, recheckCliStatus, getCliDocUrl, getCliInstallCommand, getCliLabel } from './cli-status.js';
 
 const CLAUDE_ICON = '<svg fill="currentColor" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg"><path d="M4.709 15.955l4.72-2.647.08-.23-.08-.128H9.2l-.79-.048-2.698-.073-2.339-.097-2.266-.122-.571-.121L0 11.784l.055-.352.48-.321.686.06 1.52.103 2.278.158 1.652.097 2.449.255h.389l.055-.157-.134-.098-.103-.097-2.358-1.596-2.552-1.688-1.336-.972-.724-.491-.364-.462-.158-1.008.656-.722.881.06.225.061.893.686 1.908 1.476 2.491 1.833.365.304.145-.103.019-.073-.164-.274-1.355-2.446-1.446-2.49-.644-1.032-.17-.619a2.97 2.97 0 01-.104-.729L6.283.134 6.696 0l.996.134.42.364.62 1.414 1.002 2.229 1.555 3.03.456.898.243.832.091.255h.158V9.01l.128-1.706.237-2.095.23-2.695.08-.76.376-.91.747-.492.584.28.48.685-.067.444-.286 1.851-.559 2.903-.364 1.942h.212l.243-.242.985-1.306 1.652-2.064.73-.82.85-.904.547-.431h1.033l.76 1.129-.34 1.166-1.064 1.347-.881 1.142-1.264 1.7-.79 1.36.073.11.188-.02 2.856-.606 1.543-.28 1.841-.315.833.388.091.395-.328.807-1.969.486-2.309.462-3.439.813-.042.03.049.061 1.549.146.662.036h1.622l3.02.225.79.522.474.638-.079.485-1.215.62-1.64-.389-3.829-.91-1.312-.329h-.182v.11l1.093 1.068 2.006 1.81 2.509 2.33.127.578-.322.455-.34-.049-2.205-1.657-.851-.747-1.926-1.62h-.128v.17l.444.649 2.345 3.521.122 1.08-.17.353-.608.213-.668-.122-1.374-1.925-1.415-2.167-1.143-1.943-.14.08-.674 7.254-.316.37-.729.28-.607-.461-.322-.747.322-1.476.389-1.924.315-1.53.286-1.9.17-.632-.012-.042-.14.018-1.434 1.967-2.18 2.945-1.726 1.845-.414.164-.717-.37.067-.662.401-.589 2.388-3.036 1.44-1.882.93-1.086-.006-.158h-.055L4.132 18.56l-1.13.146-.487-.456.061-.746.231-.243 1.908-1.312-.006.006z"/></svg>';
 
@@ -120,6 +121,10 @@ function activeTab() { return _tabs[_activeTabIdx] || null; }
 let _browserEmbed = null;   // { sessionId, ws, canvas, ctx, urlBar, container }
 let _browserEmbedVisible = false;
 
+// ── CLI-installed status (claude binary detection) ──
+let _cliInstalled = null;   // null = unknown / missing, version string = installed
+let _cliUnsub = null;
+
 // Marked.js (lazy loaded)
 let _marked = null;
 (async () => {
@@ -427,6 +432,73 @@ function injectStyles() {
     .cp-messages:has(.msg) .cp-empty,
     .cp-messages:has(.msg-status) .cp-empty { display: none; }
 
+    /* ── CLI-not-installed banner (sticky top of messages container) ── */
+    .cp-cli-banner {
+      flex-shrink: 0;
+      display: grid;
+      grid-template-columns: auto 1fr auto;
+      gap: 10px;
+      align-items: center;
+      margin: 8px 12px 0;
+      padding: 10px 12px;
+      border: 1px solid rgba(255,180,80,0.45);
+      border-radius: 8px;
+      background: rgba(255,180,80,0.08);
+      color: rgba(255,235,200,0.92);
+      font-size: 11px;
+      line-height: 1.4;
+      pointer-events: auto;
+      position: relative;
+      z-index: 5;
+    }
+    .cp-cli-banner-icon {
+      width: 22px; height: 22px;
+      display: flex; align-items: center; justify-content: center;
+      border-radius: 50%;
+      background: rgba(255,180,80,0.25);
+      color: rgba(255,210,140,1);
+      font-weight: 700;
+    }
+    .cp-cli-banner-text { display: flex; flex-direction: column; gap: 2px; min-width: 0; }
+    .cp-cli-banner-title {
+      font-size: 12px; font-weight: 600;
+      color: rgba(255,210,140,0.95);
+    }
+    .cp-cli-banner-body {
+      font-size: 11px;
+      color: rgba(255,255,255,0.7);
+      word-break: break-word;
+    }
+    .cp-cli-banner-body code {
+      padding: 1px 5px;
+      background: rgba(0,0,0,0.35);
+      border-radius: 3px;
+      font-size: 10.5px;
+      color: rgba(255,255,255,0.85);
+    }
+    .cp-cli-banner-actions { display: flex; gap: 6px; }
+    .cp-cli-banner-link, .cp-cli-banner-recheck {
+      display: inline-flex; align-items: center; gap: 4px;
+      padding: 4px 9px;
+      font-size: 11px;
+      font-weight: 500;
+      border-radius: 4px;
+      border: 1px solid rgba(255,255,255,0.2);
+      background: rgba(255,255,255,0.05);
+      color: rgba(255,255,255,0.9);
+      text-decoration: none;
+      cursor: pointer;
+      user-select: none;
+      font-family: inherit;
+    }
+    .cp-cli-banner-link:hover, .cp-cli-banner-recheck:hover {
+      background: rgba(255,255,255,0.12);
+      border-color: rgba(255,255,255,0.4);
+    }
+    .cp-cli-banner-recheck:disabled { opacity: 0.5; cursor: default; }
+    .claude-panel.cp-cli-blocked .cp-send { opacity: 0.4 !important; cursor: not-allowed !important; }
+    .claude-panel.cp-cli-blocked .cp-input { opacity: 0.7; }
+
     /* ── Browser embed (live screencast inside panel) ── */
     .cp-browser-embed {
       display: none;
@@ -2649,14 +2721,14 @@ document.addEventListener('click', (e) => {
 });
 
 // ── Tab lifecycle ──
-function createTab(sessionId = null, label = 'New chat', { autoSwitch = true, id = null } = {}) {
+function createTab(sessionId = null, label = 'New chat', { autoSwitch = true, id = null } = {}) {
   if (_tabs.length >= MAX_TABS) return null;
   // Capture current dropdown state for the new tab's project/model/effort
   const _$proj = _panel?.querySelector('#cp-project');
   const _$mod = _panel?.querySelector('#cp-model');
   const _$think = _panel?.querySelector('#cp-think-toggle');
   const tab = {
-    id: id || crypto.randomUUID(),
+    id: id || crypto.randomUUID(),
     sessionId,
     label,
     project: ddGetValue(_$proj) || '',       // per-tab project isolation
@@ -2975,7 +3047,7 @@ function restoreTabs() {
       const data = JSON.parse(raw);
       if (data.tabs?.length) {
         for (const saved of data.tabs) {
-          const t = createTab(saved.sessionId, saved.label, { autoSwitch: false, id: saved.id });
+          const t = createTab(saved.sessionId, saved.label, { autoSwitch: false, id: saved.id });
           if (t && saved.sessionCost) t.sessionCost = saved.sessionCost;
           if (t && saved.running) t._wasRunning = true; // trigger reattach on WS open
           if (t && saved.project) t.project = saved.project;
@@ -2998,7 +3070,7 @@ function restoreTabs() {
       const data = JSON.parse(legacyRaw);
       if (data.tabs?.length) {
         for (const saved of data.tabs) {
-          const t = createTab(saved.sessionId, saved.label, { autoSwitch: false, id: saved.id });
+          const t = createTab(saved.sessionId, saved.label, { autoSwitch: false, id: saved.id });
           if (t && saved.sessionCost) t.sessionCost = saved.sessionCost;
           if (t && saved.running) t._wasRunning = true;
           if (t && saved.project) t.project = saved.project;
@@ -4329,6 +4401,9 @@ function _processTabMsg(tab, msg) {
       if (tab.compacting) { tab.compacting = false; if (tab === activeTab()) _setCompactingUI(false); }
       appendError(tab, msg.message);
       notify('panel', NOTIF_TYPE.ERROR, tab.label || 'Claude Code', { tabId: tab.id });
+      if (typeof msg.message === 'string' && /Claude CLI not found|ENOENT/i.test(msg.message)) {
+        flagClaudeCliInstallFailure();
+      }
       break;
   }
 }
@@ -6544,6 +6619,10 @@ function runSlashCommand(tab, raw) {
 }
 
 function send({ shift = false } = {}) {
+  if (_cliInstalled === null || _cliInstallFailureForced) {
+    notify({ type: NOTIF_TYPE.WARN, title: 'Claude CLI not installed', body: 'Install the Claude Code CLI before sending a message.' });
+    return;
+  }
   const tab = activeTab();
   if (!tab) return;
   const $input = _panel?.querySelector('#cp-input');
@@ -7246,6 +7325,78 @@ function syncReservedWidth() {
   }
 }
 
+// ── CLI installation status (banner + send-block) ──
+let _cliInstallFailureForced = false;
+
+function _ensureCliBannerEl() {
+  if (!_panel) return null;
+  const container = _panel.querySelector('#cp-messages-container');
+  if (!container) return null;
+  let banner = container.querySelector(':scope > .cp-cli-banner');
+  if (banner) return banner;
+  const label = getCliLabel('claude-code');
+  const cmd = getCliInstallCommand('claude-code');
+  const url = getCliDocUrl('claude-code');
+  banner = document.createElement('div');
+  banner.className = 'cp-cli-banner';
+  banner.innerHTML = `
+    <div class="cp-cli-banner-icon">!</div>
+    <div class="cp-cli-banner-text">
+      <div class="cp-cli-banner-title">${label} CLI not installed</div>
+      <div class="cp-cli-banner-body">Run <code>${cmd}</code> or follow the install guide.</div>
+    </div>
+    <div class="cp-cli-banner-actions">
+      <a class="cp-cli-banner-link" href="${url}" target="_blank" rel="noopener noreferrer">Install guide</a>
+      <button class="cp-cli-banner-recheck" type="button">Re-check</button>
+    </div>
+  `;
+  container.insertBefore(banner, container.firstChild);
+  const btn = banner.querySelector('.cp-cli-banner-recheck');
+  btn?.addEventListener('click', async () => {
+    btn.disabled = true;
+    btn.textContent = 'Checking…';
+    try { await recheckCliStatus('claude-code'); }
+    finally {
+      if (btn.isConnected) {
+        btn.disabled = false;
+        btn.textContent = 'Re-check';
+      }
+    }
+  });
+  return banner;
+}
+
+function _removeCliBannerEl() {
+  if (!_panel) return;
+  const banner = _panel.querySelector('#cp-messages-container > .cp-cli-banner');
+  banner?.remove();
+}
+
+function _refreshCliBanners() {
+  if (!_panel) return;
+  const missing = _cliInstalled === null || _cliInstallFailureForced;
+  _panel.classList.toggle('cp-cli-blocked', missing);
+  if (missing) _ensureCliBannerEl();
+  else _removeCliBannerEl();
+  const $send = _panel.querySelector('#cp-send');
+  if ($send && missing) $send.disabled = true;
+}
+
+export function flagClaudeCliInstallFailure() {
+  _cliInstallFailureForced = true;
+  _refreshCliBanners();
+  recheckCliStatus('claude-code').catch(() => {});
+}
+
+function _ensureCliSubscription() {
+  if (_cliUnsub) return;
+  _cliUnsub = subscribeCliStatus('claude-code', (info) => {
+    _cliInstalled = info?.installed || null;
+    if (_cliInstalled) _cliInstallFailureForced = false;
+    _refreshCliBanners();
+  });
+}
+
 // ── Public API ──
 export async function toggleClaudePanel() {
   if (!_panel) {
@@ -7255,13 +7406,14 @@ export async function toggleClaudePanel() {
     wireEvents();
     await loadConfig();   // must complete before restoreTabs — checks server boot ID
     loadSkills();
-    restoreTabs();
-    loadMonthlyCost();
-    syncSessionCosts();
-    _wireBrowserSync();
-    _startHeartbeat();
-    window.dispatchEvent(new CustomEvent('sidepanel-tray:provider-loaded', { detail: { provider: 'claude' } }));
-  }
+    restoreTabs();
+    loadMonthlyCost();
+    syncSessionCosts();
+    _wireBrowserSync();
+    _startHeartbeat();
+    window.dispatchEvent(new CustomEvent('sidepanel-tray:provider-loaded', { detail: { provider: 'claude' } }));
+    _ensureCliSubscription();
+  }
   _visible = !_visible;
   if (_visible) {
     if (_tabs.length === 0) createTab(null, 'New chat');
@@ -7269,6 +7421,7 @@ export async function toggleClaudePanel() {
     _panel.classList.add('open');
     syncReservedWidth();
     _panel.querySelector('#cp-input')?.focus();
+    _refreshCliBanners();
   } else {
     const tab = activeTab();
     const $input = _panel?.querySelector('#cp-input');

package/neural-interface/server.js

@@ -10454,7 +10454,8 @@ app.get('/api/system/backup', async (req, res) => {
                       'loop-templates.json', 'loop-schedules.json', 'loop-folders.json', 'auto-backup-config.json',
                       'cost-tracking.json', 'skin-config.json', 'image-favorites.json',
                       'browser-config.json', 'browser-storage.json', 'last-session.json',
-                      'invite-sessions.json']) {
+                      'invite-sessions.json', 'stored-plans.json', 'synabun-plugins.json',
+                      'mcp-registry.json', 'active-profile.json']) {
       addFile(`data/${f}`, resolve(dataDir, f));
     }
 
@@ -10478,6 +10479,9 @@ app.get('/api/system/backup', async (req, res) => {
     // Screenshots, whiteboard captures, staged images
     addDirRecursive('data/images', resolve(dataDir, 'images'));
 
+    // Plan markdown history (data/plans/YYYY-MM-DD/*.md)
+    addDirRecursive('data/plans', resolve(dataDir, 'plans'));
+
     // 3. mcp-server/data/
     if (existsSync(CATEGORIES_DATA_DIR)) {
       for (const f of readdirSync(CATEGORIES_DATA_DIR)) {
@@ -10613,7 +10617,7 @@ app.post('/api/system/restore',
       // data/ files
       const dataDir = resolve(DATA_HOME, 'data');
       mkdirSync(dataDir, { recursive: true });
-      for (const subdir of ['pending-remember', 'pending-compact', 'loop']) {
+      for (const subdir of ['pending-remember', 'pending-compact', 'loop', 'plans']) {
         mkdirSync(resolve(dataDir, subdir), { recursive: true });
       }
 
@@ -10837,7 +10841,8 @@ function buildBackupZipToFile(destPath) {
                       'loop-templates.json', 'loop-schedules.json', 'loop-folders.json', 'auto-backup-config.json',
                       'cost-tracking.json', 'skin-config.json', 'image-favorites.json',
                       'browser-config.json', 'browser-storage.json', 'last-session.json',
-                      'invite-sessions.json']) {
+                      'invite-sessions.json', 'stored-plans.json', 'synabun-plugins.json',
+                      'mcp-registry.json', 'active-profile.json']) {
       addFile(`data/${f}`, resolve(dataDir, f));
     }
 
@@ -10859,6 +10864,9 @@ function buildBackupZipToFile(destPath) {
     // Screenshots, whiteboard captures, staged images
     addDirRecursive('data/images', resolve(dataDir, 'images'));
 
+    // Plan markdown history (data/plans/YYYY-MM-DD/*.md)
+    addDirRecursive('data/plans', resolve(dataDir, 'plans'));
+
     if (existsSync(CATEGORIES_DATA_DIR)) {
       for (const f of readdirSync(CATEGORIES_DATA_DIR)) {
         if (f.endsWith('.json')) addFile(`mcp-data/${f}`, resolve(CATEGORIES_DATA_DIR, f));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "synabun",
-  "version": "2026.4.25-beta.1",
+  "version": "2026.4.25-beta.3",
   "description": "Persistent vector memory for AI assistants",
   "license": "Apache-2.0",
   "author": "The SynaBun Authors",