v0.99.27

Changed

• Add an owner-local attention queue over approval, delivery and optional C04
  quota evidence, with observer freshness, deduplicated alert revisions,
  snooze/resolution, bounded generic desktop previews, a CLI and an
  authenticated cockpit feed. Long approval subjects and dead-letter targets
  use bounded digest keys so one durable event cannot stall later sync.

• Add an owner-local human app task queue with C04 allowance snapshots,
  explicit CLI and stdio MCP handoff states, result provenance, fixed
  task-specific verification and manual usage correction. MCP exposes offer,
  status and same-offerer result attachment; human handoff and verification
  transitions are local CLI operations.

• Admit Codex CLI 0.156.0 for manual local stdio MCP on Linux after isolated
  app-server tool discovery and live hub state, claim, conflict and release
  calls. Fix top-level synapse mcp --token-file dispatch so token-gated MCP
  servers complete their handshake.

• Move VS Code extension packaging and cockpit tests to Node 22.23.2 in CI.
  Admit Vitest 5 in both clients, jsdom 30 in the cockpit, and the current VS
  Code packaging tools; require VS Code 1.101+ for the extension's Node 22 host.

• Validate OpenCode 1.18.32 with the official Linux release binary, JSONL,
  ACP, authenticated server and live claim integration tests. Twelve platform
  archive digests and the local acceptance workflows now pin the immutable
  release; OpenCode 1.18.31 remains the prior verified rollback version.

• Admit pi 0.87.1 for the pinned RPC participant and optional native extension
  after exact host load, local Ollama turn and resume, and live hub claim tests
  on Linux. Pi 0.86.0 remains the previous verified rollback version.
  Pi RPC timeouts also close the child on Python 3.10; a turn launches the
  resolved binary path that passed version admission.

• Keep WASM preopen permissions enforced with Wasmtime 48's fs_mutable API
  while retaining the older permission API; real guest file-creation tests
  verify read-only refusal and writable grants. Redact malformed provider
  stream shapes into stable provider errors instead of raw parser exceptions.

• Validate Claude Code 2.1.280 with its strict plugin validator, isolated
  profile load, local MCP hub and live allowed/denied claim guard checks on
  Linux. Claude Code 2.1.278 remains the previous verified rollback version.

• Advance every pinned pre-commit hook to the version this repository already
  relies on or to the newest verified release: ruff v0.15.18 to v0.16.8,
  matching the ruff==0.16.8 pin in both hash-locked requirement files; typos
  v1.46.1 to v1.50.2; pre-commit-hooks v5.0.0 to v6.0.0. Gitleaks was
  already current at v8.30.1. The ruff hook had not moved since pre-commit was
  introduced on 2026-06-21 while the generated requirement pin advanced
  independently, so the local hook and CI ran two ruff generations apart.
  Reformat five documentation files whose fenced Python examples ruff 0.16
  formats and ruff 0.15 did not; the changes are comment spacing, blank lines
  and one import list, with no effect on any executed code.

• Admit pi 0.86.0 for the pinned RPC participant and optional claim-guard
  extension after local host, model, session and extension checks. Pi 0.85.1
  remains the previous verified rollback version.

• Validate Claude Code 2.1.278 and OpenCode 1.18.31 against the packaged
  integrations. Exact host checks cover plugin onboarding, OpenCode JSONL,
  ACP sessions, authenticated API and live claim enforcement; older host
  versions remain documented rollback references.

• Add a pinned pi 0.85.1 RPC Participant with owner-private resumable sessions,
  bounded JSONL correlation and full-run settlement. An optional, separately
  packaged TypeScript extension binds file writes to a live Synapse task,
  worktree, session and claim epoch; shell and unknown tool effects are denied.

• Add an owner-local, versioned account and quota ledger with auditable
  corrections, shared-pool deduplication, advisory window forecasts, a private
  CLI and a redacted MCP overview. Account labels and balances stay out of the
  hub event stream; forecasts cannot authorise spending.
  Final Ollama generate/chat responses can be imported as local token usage
  without retaining prompt or response content.

• Add negotiated version-3 delivery intents for interrupt, steer, follow-up and
  next-turn work with durable request/status replay, explicit boundary and
  acknowledgement evidence, cancellation, expiry and supersession. Older peers
  retain their existing wire contract. A recipient bridge exercises real
  OpenCode and local Ollama turns; external provider effects have no exactly-once
  guarantee. A changed stable hub ID now refuses a journal with any v3 work
  before listening; failed per-record hub transitions are quarantined. Repeated
  cancellation is a no-op, one sender uses at most 16 of a recipient's 128 open
  slots, and terminal stale offers are retired. A 0.99.26 downgrade silently
  ignores retained v3 work; drain or explicitly hold unresolved requests before
  rollback and restore the same stable hub ID on roll-forward.

• Classify Claude plugin installation and claim-proposal failures under the
  frozen error taxonomy while retaining their existing ValueError behavior;
  document the opt-in claim-parse command in the CLI reference.

• Add bounded public vendor/provider discovery for model APIs, MCP servers and
  agent host candidates, with provenance, manual alias review and a weekly
  report. The public catalog excludes unreviewed host search hits. Discovery
  never activates a provider or changes support claims.

• Harden vendor discovery against the reviewed GitHub Pages download lure:
  inspect bounded source trees and workflows, reject matched hosts, rank source
  and owner provenance above push recency, and hold unreachable MCP repositories.

• Add an explicit host integration catalog and an isolated-profile lifecycle
  for the reviewed Claude Code, Codex and OpenCode packages; validate Pi guard
  loading through offline RPC and keep Gemini CLI/Claude Desktop unsupported.

• Extend the private entitlement ledger with unit-checked compute credits,
  project/data eligibility and idle rates; suggest only digest-approved work
  against current account, balance, expiry and full-cost evidence.

• Preserve signed GitHub review and inline-comment evidence against an exact
  Git diff, task and author session; require an independent hub decision and
  route content-minimised feedback through owner-local attention and directed
  delivery without treating review text as authority.

• Add a read-only daily official-source vendor watch with a dated compatibility
  matrix, installed-version observations, stale-review and source-failure
  handling, and a scheduled report. New releases require real host validation
  before Synapse marks them supported.

• Add an optional, separately versioned Claude Code plugin with reversible
  profile onboarding, strict host validation, the existing MCP/claim guard
  surfaces, and owner-only token-file support for the MCP CLI.

• Participant routing now exposes price/quota freshness, source metadata, operator
  uncertainty policy, and per-candidate rejection reasons. Missing price is unknown
  rather than free; bounded estimated cost refuses an unverified quote. Routed
  orchestration retains each decision for audit. See the migration note in
  docs/participant-routing.md.

Artifact checksums (SHA-256)

bf444c5537e98c97dfae63c4d80931f6a0798cb44e8e52f3db57dce776f8ed52  synapse_channel-0.99.27-py3-none-any.whl
71a8493ad4ed1c329db2a4023b1468747571ce8a6436235cd5ffecae87c95771  synapse_channel-0.99.27.tar.gz
2e1ff51c904e33267bb14724c22ff7de41177c7a5b1a7df9644bb6ce585ada30  synapse-channel-v0.99.27-sbom.cdx.json