• v2.6.10-dev 2951662bb1

    v2.6.10-dev Pre-release

    FTMahringer released this 2026-05-19 03:03:04 +02:00 | 3 commits to main since this release

    v2.6.10-dev

    Official plugin library expansion

    • Added official library manifests for discord-channel, deepseek-provider, filesystem-mcp, brave-search-mcp, research-skills-bundle, developer-tools-bundle, and research-powerpack.
    • Expanded the embedded registry with signed compatibility-matrix metadata for the new official entries.
    • Added bundle install support for cross-type bundle.includes metadata.
    • Added regression coverage proving all seven official entries sync and install cleanly, and that research-powerpack installs its referenced components end to end.
    Downloads
  • v2.6.9-dev cc10c88d4e

    v2.6.9-dev Pre-release

    FTMahringer released this 2026-05-19 02:40:17 +02:00 | 4 commits to main since this release

    v2.6.9-dev

    Governance: Deprecation and compatibility matrix

    • Added manifest deprecated metadata validation with since, reason, and optional migration URL.
    • Added registry compatibility evaluation for plugin versions using min_synapse and max_synapse.
    • Added compatibility and deprecation warnings to the CLI registry commands.
    • Added store warning badges and detail panels for deprecated, incompatible, and updateable entries.
    • Added an admin policy toggle to suppress version warnings for frozen environments.
    • Blocked direct and bundle installs when the selected registry version is incompatible with the running SYNAPSE version.
    • Added Flyway migration V22__plugin_governance_and_store_state.sql so plugin/store signing and governance fields match the application model.
    Downloads
  • v2.6.8-dev 5cfa6fa580

    v2.6.8-dev Pre-release

    FTMahringer released this 2026-05-19 02:10:26 +02:00 | 5 commits to main since this release

    v2.6.8-dev

    Governance Reporting & Takedowns

    Added

    • Plugin and store report endpoints with categories for malicious, broken, license violation, and spam.
    • PluginGovernanceService with report tracking, admin review actions, and takedown propagation.
    • Governance report records for admin review dashboards.
    • Store hiding and plugin takedown state for reported items.

    Changed

    • Public store listings now hide takedown entries.
    • Plugin load and enable paths now block plugins that have been taken down.

    Fixed

    • Reported plugins now carry a clear moderation state instead of relying only on warnings.
    Downloads
  • v2.6.7-dev d0a282c22a

    v2.6.7-dev Pre-release

    FTMahringer released this 2026-05-19 02:03:15 +02:00 | 6 commits to main since this release

    v2.6.7-dev

    Plugin Signing Governance

    Added

    • Manifest signature support with embedded signature metadata and canonical payload verification.
    • PluginSigningService to sign and verify plugin manifests locally with keypairs.
    • Trust badges for verified official, verified community, unverified, and tampered plugins.
    • plugin_contract_sign and signature-aware plugin_contract_validate native tools.

    Changed

    • Plugin install and store ingest paths now verify signatures before accepting a manifest.
    • Plugin trust metadata now records signature state alongside source trust.

    Fixed

    • Tampered manifests are blocked with a hard failure instead of falling back to a confirmation prompt.
    Downloads
  • v2.6.6-hotfix 023ea5a50d

    v2.6.6-hotfix Pre-release

    FTMahringer released this 2026-05-19 01:53:37 +02:00 | 7 commits to main since this release

    v2.6.6-hotfix

    Domain Package Reorganization

    Changed

    • Sorted packages/core/src/main/java/dev/synapse/core/common/domain/ into feature subpackages for agents, collaboration, conversation, planning, plugins, projects, providers, routing, security, system, tasks, teams, and users.
    • Updated imports and package references across the core module to match the new layout.
    • Core, dashboard, and plugin registry defaults now advance to 2.6.6-hotfix.

    Fixed

    • The core module compiles cleanly after the domain package reshuffle.
    Downloads
  • v2.6.6-dev cf1888c920

    v2.6.6-dev Pre-release

    FTMahringer released this 2026-05-19 01:48:00 +02:00 | 8 commits to main since this release

    v2.6.6-dev

    Bundle Meta Plugin Type

    Added

    • Declarative type: bundle manifests with cross-type includes lists.
    • PluginBundleRegistry for bundle meta storage and inspection.
    • Validation for bundle manifests and bundle component identifiers.
    • Declarative install/uninstall handling without the JVM loader path.

    Changed

    • Core, dashboard, and plugin registry versions now advance to 2.6.6-dev.
    • Bundle manifests are handled as orchestration definitions.

    Fixed

    • JVM plugin loading now rejects bundle manifests with a clear error.
    Downloads
  • v2.6.5-hotfix ea0cc94a8d

    v2.6.5-hotfix Pre-release

    FTMahringer released this 2026-05-19 01:43:37 +02:00 | 9 commits to main since this release

    v2.6.5-hotfix

    Source Tree Reorganization

    Changed

    • Grouped plugin source files into feature subfolders under packages/core/src/main/java/dev/synapse/plugins/.
    • Separated core, registry, store, safety, types, and controller code for easier navigation.
    • Advanced core, dashboard, and plugin registry defaults to 2.6.5-hotfix.
    Downloads
  • v2.6.5-dev 33caf49e8b

    v2.6.5-dev Pre-release

    FTMahringer released this 2026-05-19 01:35:10 +02:00 | 11 commits to main since this release

    v2.6.5-dev

    Skills + Skill Bundle Plugin Type

    Added

    • Declarative type: skill and type: skill-bundle manifest support for skills.sh entries.
    • SkillsBundleRegistry for local skill bundle registration and inspection.
    • Validation for skills manifests and skills.sh source constraints.
    • Declarative install/uninstall handling without the JVM loader path.

    Changed

    • Core, dashboard, and plugin registry versions now advance to 2.6.5-dev.
    • Skill plugins are treated as declarative external skill definitions.

    Fixed

    • JVM plugin loading now rejects skill and skill-bundle manifests with a clear error.
    Downloads
  • v2.6.4-dev 48922a640b

    v2.6.4-dev Pre-release

    FTMahringer released this 2026-05-19 01:26:12 +02:00 | 12 commits to main since this release

    v2.6.4-dev

    MCP Server Plugin Type for the v2.7.0 plugin ecosystem milestone.

    Added

    • Declarative type: mcp plugin manifests with YAML validation.
    • McpServerRegistry to register and inspect MCP server definitions.
    • Transport validation for stdio, sse, and http MCP servers.
    • Install-time MCP registration without the JVM classloader or bytecode scan path.
    • MCP plugin lifecycle coverage for stdio registration and install behavior.

    Validation

    cd packages/core
    mvn -q -Dtest=PluginSafetyServiceTest,StorePolicyServiceTest,PluginRegistryServiceTest,ManifestValidatorTest,McpServerRegistryTest,PluginLifecycleMcpTest,PluginPerformanceBaselinesTest test
    
    Downloads
  • v2.6.3-dev 3929df8bcf

    v2.6.3-dev Pre-release

    FTMahringer released this 2026-05-18 22:33:46 +02:00 | 14 commits to main since this release

    v2.6.3-dev

    Store Policy & Admin Controls for the v2.7.0 plugin ecosystem milestone.

    Added

    • Store policy storage and enforcement for plugin IDs, authors, tags, and trust badges.
    • Store policy API endpoints under /api/store/policy.
    • Dashboard settings controls for editing store policy.
    • CLI role checks for mutating plugin commands based on the cached login role.

    Validation

    cd packages/core
    mvn -q -Dtest=PluginSafetyServiceTest,StorePolicyServiceTest,PluginRegistryServiceTest test
    
    cd ../cli
    go test ./cmd -run 'TestRequirePluginOperator|TestSetTokenPersistsRole'
    
    cd ../dashboard/frontend
    npm run build
    
    Downloads