carthagent 1.1.0-preview.12 → 1.1.0-preview.13

package/plugins/carthagent/src/ui/native-review.mjs

@@ -13,8 +13,8 @@ export function nativeReviewMode(session, config, explicitMode) {
 }
 
 /** Correlate host executions and admit one current-run kickoff per session. */
-/** @param {{ mode: (sessionID: string) => string, diff: (sessionID: string, signal?: AbortSignal) => Promise<unknown>, offer: (value: { sessionID: string; runKey: string; writes: number; start: () => Promise<boolean> }) => Promise<unknown>, kickoff: (sessionID: string, signal?: AbortSignal) => Promise<unknown>, isLoopActive?: (sessionID: string) => boolean, setLoopActive?: (sessionID: string, active: boolean) => void, signal?: AbortSignal }} options */
-export function createNativeReviewConsumer({ mode, diff, offer, kickoff, isLoopActive = () => false, setLoopActive = () => {}, signal }) {
+/** @param {{ mode: (sessionID: string) => string, diff: (sessionID: string, signal?: AbortSignal) => Promise<unknown>, offer: (value: { sessionID: string; runKey: string; writes: number; start: () => Promise<boolean> }) => Promise<unknown>, eligible?: (sessionID: string, signal?: AbortSignal) => Promise<boolean>, kickoff: (sessionID: string, signal?: AbortSignal) => Promise<unknown>, isLoopActive?: (sessionID: string) => boolean, setLoopActive?: (sessionID: string, active: boolean) => void, signal?: AbortSignal }} options */
+export function createNativeReviewConsumer({ mode, diff, offer, kickoff, eligible = async () => true, isLoopActive = () => false, setLoopActive = () => {}, signal }) {
   const runs = new Map();
   const admitted = new Set();
   const pending = new Set();
@@ -52,6 +52,11 @@ export function createNativeReviewConsumer({ mode, diff, offer, kickoff, isLoopA
     const runKey = `${sessionID}@${run.id}`;
     const currentMode = mode(sessionID);
     if (!(currentMode === "ask" || currentMode === "yes") || writes <= 0 || admitted.has(runKey) || (currentMode === "yes" && loopSessions.has(sessionID))) return;
+    // A formally blocked or unfinished delivery is not a reviewable run.
+    let reviewable;
+    try { reviewable = await eligible(sessionID, signal); }
+    catch { return; }
+    if (!reviewable || disposed || signal?.aborted || runs.get(sessionID) !== run || admitted.has(runKey)) return;
     admitted.add(runKey);
 
     const start = async () => {

package/plugins/carthagent/src/ui/select-mouse.ts

@@ -0,0 +1,17 @@
+import type { MouseEvent, SelectRenderable } from "@opentui/core";
+
+// SelectRenderable only handles keys; map a left click to the fully drawn row under the pointer and activate it.
+// Bind it to mouse-up: an action that opens a dialog on mouse-down is closed by that dialog's backdrop on release.
+export function clickSelect(node: SelectRenderable | undefined, event: MouseEvent) {
+  if (!node || event.button !== 0) return;
+  const { scrollOffset, linesPerItem, maxVisibleItems } = node as unknown as {
+    scrollOffset: number;
+    linesPerItem: number;
+    maxVisibleItems: number;
+  };
+  const row = Math.floor((event.y - node.screenY) / Math.max(1, linesPerItem));
+  const index = scrollOffset + row;
+  if (row < 0 || row >= maxVisibleItems || index >= node.options.length) return;
+  node.setSelectedIndex(index);
+  node.selectCurrent();
+}

package/plugins/carthagent/src/ui/voyages-navigation.tsx

@@ -3,6 +3,7 @@ import { Show, createEffect, createSignal, onCleanup, onMount } from "solid-js";
 import { CliRenderEvents, type ScrollBoxRenderable, type SelectRenderable } from "@opentui/core";
 import { useRenderer } from "@opentui/solid";
 import { usePlugin } from "@opencode/plugin/tui";
+import { clickSelect } from "./select-mouse.js";
 import { dailyQuestsClient, voyagesClient } from "./client.js";
 import { nativeNavigation, type NavigationInput } from "./native-navigation.js";
 import { createVoyagesNavigationState } from "./voyages-navigation-state.mjs";
@@ -27,6 +28,7 @@ export function VoyagesNavigation(props: NavigationInput) {
   let scrollTop = 0;
   let restoreTop: number | undefined;
   const [viewportHeight, setViewportHeight] = createSignal(3);
+  const [railWidth, setRailWidth] = createSignal(0);
   createEffect(() => {
     if (!props.active) { scrollTop = scroll?.scrollTop ?? scrollTop; return; }
     if (!view().busy) { restoreTop = scrollTop; renderer.requestRender(); }
@@ -46,6 +48,7 @@ export function VoyagesNavigation(props: NavigationInput) {
     const frame = () => {
       if (!scroll || scroll.isDestroyed || !props.active) return;
       setViewportHeight(Math.max(1, scroll.viewport.height));
+      if (actions && !actions.isDestroyed) setRailWidth(actions.width);
       if (restoreTop === undefined || view().busy) return;
       scroll.scrollTop = restoreTop;
       restoreTop = undefined;
@@ -69,7 +72,13 @@ export function VoyagesNavigation(props: NavigationInput) {
     if (nativeNavigation(context)?.current() !== "voyages") return;
     context.ui.router.navigate({ type: "plugin", name, data: { ...(props.sessionID ? { sessionID: props.sessionID } : {}), ...extra } });
   };
-  const options = () => [
+  // Select draws raw text; fit names and descriptions to the rail.
+  const fit = (text: string) => {
+    const room = railWidth() - 3;
+    return room > 0 && text.length > room ? `${text.slice(0, Math.max(0, room - 1))}…` : text;
+  };
+  const options = () => entries().map((item) => ({ ...item, name: fit(item.name), description: fit(item.description) }));
+  const entries = () => [
     { name: props.compact ? "Q" : "Daily coding quests", description: "Assignments & assessments", value: "daily" },
     ...(view().daily?.items.map((quest, index) => ({ name: props.compact ? String(index + 1) : quest.title, description: quest.status, value: `quest:${quest.id}` })) ?? []),
     { name: props.compact ? "P" : "Profile & wallet", description: "Authoritative profile", value: "profile" },
@@ -105,7 +114,7 @@ export function VoyagesNavigation(props: NavigationInput) {
         <Show when={view().error}><text flexShrink={0} fg={context.theme.text.feedback.warning.base}> {view().error}. Sign in or refresh.</text></Show>
         <Show when={view().daily}><text flexShrink={0} fg={context.theme.text.muted}> UTC {view().daily?.day}</text></Show>
       </Show>
-      <select ref={actions} minHeight={1} height={Math.min(18, viewportHeight(), options().length * (props.compact ? 1 : 2))} flexShrink={0} showScrollIndicator showDescription={!props.compact} options={options()} selectedIndex={Math.max(0, options().findIndex((item) => item.value === selection()))} focused={focused()} onChange={(_index, item) => {
+      <select ref={actions} onMouseUp={(event) => { if (focused()) clickSelect(actions, event); }} minHeight={1} height={Math.min(18, viewportHeight(), options().length * (props.compact ? 1 : 2))} flexShrink={0} showScrollIndicator showDescription={!props.compact} options={options()} selectedIndex={Math.max(0, options().findIndex((item) => item.value === selection()))} focused={focused()} onChange={(_index, item) => {
         if (!focused() || view().busy || !item) return;
         setSelection(item.value);
         if (actions) scroll?.scrollChildIntoView(actions.id);

package/plugins/carthagent/src/ui/voyages.tsx

@@ -1,6 +1,7 @@
 /** @jsxImportSource @opentui/solid */
 import { Show, createSignal, onCleanup, onMount } from "solid-js";
-import type { ScrollBoxRenderable } from "@opentui/core";
+import type { ScrollBoxRenderable, SelectRenderable } from "@opentui/core";
+import { clickSelect } from "./select-mouse.js";
 import { usePlugin } from "@opencode/plugin/tui";
 import { voyagesClient, type VoyagesSnapshot, type VoyagesProfile, type VoyagesItem, type VoyagesQuote } from "./client.js";
 import { canEquip, createVoyagesState, handleVoyagesEvent, voyagesCatalogLabel } from "./voyages-state.mjs";
@@ -9,6 +10,7 @@ type ViewState = { snapshot?: VoyagesSnapshot; busy: boolean; error: string; not
 
 /** All mutations go through the lifetime-guarded controller, including dialogs. */
 export function VoyagesPage(props: { sessionID?: string; section?: "profile" | "equipment" }) {
+  let list: SelectRenderable | undefined;
   const context = usePlugin();
   const location = () => (props.sessionID ? context.data.session.get(props.sessionID)?.location : undefined) ?? context.location ?? context.data.location.default();
   const [view, setView] = createSignal<ViewState>({ busy: false, error: "", notice: "" });
@@ -122,6 +124,6 @@ export function VoyagesPage(props: { sessionID?: string; section?: "profile" | "
       <text flexShrink={0} fg={context.theme.text.faint}>Choose Back to return. Cancel in dialogs never saves or purchases.</text>
     </scrollbox>
     <text flexShrink={0} fg={context.theme.text.faint}>↑/↓ Enter · PgUp/Dn choices · Ctrl+U/D profile</text>
-    <select flexBasis={0} flexGrow={1} flexShrink={0} minHeight={3} showScrollIndicator keyBindings={[{ name: "pageup", action: "move-up-fast" }, { name: "pagedown", action: "move-down-fast" }]} options={options()} focused={context.keymap.mode.current() === "base"} onSelect={(_index, option) => select(option?.value)} />
+    <select flexBasis={0} flexGrow={1} flexShrink={0} minHeight={3} ref={(node) => { list = node; }} onMouseUp={(event) => clickSelect(list, event)} showScrollIndicator keyBindings={[{ name: "pageup", action: "move-up-fast" }, { name: "pagedown", action: "move-down-fast" }]} options={options()} focused={context.keymap.mode.current() === "base"} onSelect={(_index, option) => select(option?.value)} />
   </box>;
 }

package/plugins/carthagent/tests/voyages-navigation.test.tsx

@@ -201,28 +201,39 @@ test("short terminal keyboard navigation keeps the highlighted action on screen"
   } finally { f.app.renderer.destroy(); }
 });
 
-test("mouse focus enters navigation only from base mode and never acts through an open modal", async () => {
+test("mouse press focuses the rail and release opens the clicked row without acting through a modal", async () => {
   const f = await fixture();
   try {
     const row = f.app.captureCharFrame().split("\n").findIndex((line) => line.includes("Daily coding quests"));
     expect(row).toBeGreaterThanOrEqual(0);
-    f.setMode("modal");
-    await f.app.renderOnce();
-    await f.app.mockMouse.click(5, row);
-    await f.app.renderOnce();
-    expect(f.mode()).toBe("modal");
-    expect(f.routes).toHaveLength(0);
+    for (const mode of ["modal", "palette"]) {
+      f.setMode(mode);
+      await f.app.renderOnce();
+      await f.app.mockMouse.click(5, row);
+      await f.app.renderOnce();
+      expect(f.mode()).toBe(mode);
+      expect(f.routes).toHaveLength(0);
+    }
     f.setMode("base");
     f.app.renderer.clearSelection();
     await f.app.renderOnce();
-    await f.app.mockMouse.click(5, row);
+    await f.app.mockMouse.pressDown(5, row);
     await f.app.renderOnce();
     expect(f.mode()).toBe("navigation");
     expect(f.app.renderer.currentFocusedRenderable).toBeInstanceOf(SelectRenderable);
     expect(f.routes).toHaveLength(0);
-    f.app.mockInput.pressEnter();
+    await f.app.mockMouse.release(5, row);
     await f.app.renderOnce();
     expect(f.routes).toEqual([{ type: "plugin", name: "daily-quests", data: { sessionID: "coding-session" } }]);
+    expect(f.mode()).toBe("base");
+    const questRow = f.app.captureCharFrame().split("\n").findIndex((line) => line.includes("Review a change"));
+    expect(questRow).toBeGreaterThanOrEqual(0);
+    await f.app.mockMouse.click(5, questRow);
+    await f.app.renderOnce();
+    expect(f.routes).toEqual([
+      { type: "plugin", name: "daily-quests", data: { sessionID: "coding-session" } },
+      { type: "plugin", name: "daily-quests", data: { sessionID: "coding-session", questID: "quest-two" } },
+    ]);
   } finally { f.app.renderer.destroy(); }
 });
 

package/script/ctg/build-owned-runtime.sh

@@ -6,7 +6,7 @@ set -euo pipefail
 ROOT="$(git rev-parse --show-toplevel)"
 EXPECTED_SOURCE="843a6c514e606b436a7fe713422ace0a93ad3d61"
 EXPECTED_LOCK="9d78379cd264584a495440a217b9d2ecab524c9a56f7f8b4b5bed3926daa330d"
-EXPECTED_PATCH="1f2309bb3a31dfb8e8a0827a6a1144a1f76a005abff58f6f48857639ec02478a"
+EXPECTED_PATCH="ec4bb182308ed8b311513aad5c9c7d57dcd0db103f0882f3dc3517d535b4c975"
 TARGET="${1:-opencode-linux-x64}"
 HOST_PLATFORM="$(node -p 'process.platform')"
 HOST_ARCH="$(node -p 'process.arch')"
@@ -34,7 +34,7 @@ if ! git diff --cached --quiet HEAD --; then
   exit 1
 fi
 expected_inputs=(
-  "docs/patches/opencode-v2.0.32-session-ui-combined-v4.patch"
+  "docs/patches/opencode-v2.0.32-session-ui-combined-v5.patch"
   "script/ctg/build-owned-runtime.sh"
 )
 actual_status="$(git status --porcelain --untracked-files=all)"
@@ -86,7 +86,7 @@ if [[ "$(bun --version)" != "1.4.2" ]]; then
   exit 1
 fi
 
-patch_file="$ROOT/docs/patches/opencode-v2.0.32-session-ui-combined-v4.patch"
+patch_file="$ROOT/docs/patches/opencode-v2.0.32-session-ui-combined-v5.patch"
 actual_patch="$("${HASH_COMMAND[@]}" "$patch_file" | awk '{print $1}')"
 if [[ "$actual_patch" != "$EXPECTED_PATCH" ]]; then
   echo "Patch checksum mismatch: $actual_patch" >&2

package/tests/delivery-review.test.mjs

@@ -137,3 +137,14 @@ test('large diffs retain full receipt instead of silently using output tail', as
   assert.ok(readFileSync(capture.path, 'utf8').length > 12000);
   assert.match(capture.diff, /diff --git/);
 });
+
+test('review accepts assertion aliases and names missing requirements', async t => {
+  const { cwd, state, params, dir } = fixture(t);
+  const capture = await captureDeliveryReview(state, cwd, dir);
+  assert.throws(() => recordDeliveryReview(state, cwd, { ...params(capture.id), coverage: [{ requirement: 'Other', assertions: 'x' }] }), /Missing: \["Correct amount"\]/);
+  recordDeliveryReview(state, cwd, { ...params(capture.id), coverage: [{ requirement: 'Correct amount', assertion: 'app amount equals 2' }] });
+  assert.equal(state.reviewEvidence.coverage[0].assertions, 'app amount equals 2');
+  const again = await captureDeliveryReview(state, cwd, dir);
+  recordDeliveryReview(state, cwd, { ...params(again.id), coverage: [{ requirement: 'Correct amount', assertions: ['amount is 2', 'new result is 2'] }] });
+  assert.equal(state.reviewEvidence.coverage[0].assertions, 'amount is 2; new result is 2');
+});

package/tests/native-daily-source.test.mjs

@@ -87,6 +87,29 @@ test('local source uses actual receipt identity, actual goal, no synthetic befor
   assert.equal((await f.read()).source.checks[2].after, 'passed');
 });
 
+test('explicit finish change summary, first-run failed baseline and long output tails are projected', async t => {
+  const f = fixture(t, [check('unit'), check('fresh')]);
+  f.state.evidence.unit = f.receipt('unit', { outputTail: `${'x'.repeat(900)}\nline two\n${'y'.repeat(300)}\nok 17 - final` });
+  f.state.evidence.fresh = f.receipt('fresh');
+  f.state.baselines = {
+    unit: { passed: false, code: 1, checkDigest: f.receipt('unit').checkDigest, fingerprint: '1'.repeat(64) },
+    fresh: { passed: false, code: 1, checkDigest: f.receipt('fresh').checkDigest, fingerprint: f.current },
+  };
+  f.state.handoff = { change: 'Implemented parseCsv as a state machine', review: 'r', fingerprint: f.current };
+  f.save();
+  const { source } = await f.read();
+  assert.equal(source.change, 'Implemented parseCsv as a state machine');
+  assert.equal(source.checks[0].before, 'failed');
+  // A failure recorded on the current source is not a before-change result.
+  assert.equal(source.checks[1].before, 'not_run');
+  assert.match(source.checks[0].result, /^…\n/);
+  assert.match(source.checks[0].result, /ok 17 - final$/);
+  assert.equal(source.truncated, true);
+  assert.ok(Buffer.byteLength(source.checks[0].result) <= 1024);
+  f.state.handoff.fingerprint = '2'.repeat(64); f.save();
+  assert.equal((await f.read()).source.change, '');
+});
+
 test('stale, mismatched or contradictory passing receipts never become current passing evidence', async t => {
   const f = fixture(t);
   const invalidations = [
@@ -179,7 +202,9 @@ test('selection is bounded, UTF-8 safe and explicitly reports omitted claims/ite
   assert.equal(source.truncated, true);
   assert.equal(source.goal, '');
   assert.equal(source.checks[0].result, '界'.repeat(341));
-  assert.equal(source.checks[1].result, '', 'omit entire claims rather than changing their meaning');
+  // Receipts store an output tail; an oversized tail keeps its end, never a partial start.
+  assert.equal(source.checks[1].result.startsWith('…\n'), true);
+  assert.ok(Buffer.byteLength(source.checks[1].result, 'utf8') <= 1024);
   assert.equal(source.findings[0].issue, '');
   assert.equal(source.findings[0].evidence, '');
   assert.equal(JSON.stringify(source).includes('\ufffd'), false);
@@ -419,7 +444,7 @@ test('pinned Effect RPC conversion accepts local source, null, input and safe ty
   for (const value of [await f.read(), { source: null }]) assert.deepEqual(decode(method.output, value), value);
   assert.deepEqual(decode(method.errors.dailySourceError, { code: 'not_owned' }), { code: 'not_owned' });
   assert.throws(() => decode(method.input, {}));
-  const forged = await f.read(); forged.source.checks[0].before = 'failed';
+  const forged = await f.read(); forged.source.checks[0].before = 'passed';
   assert.throws(() => decode(method.output, forged));
   const wrongRevision = await f.read(); wrongRevision.source.revision = 3;
   assert.throws(() => decode(method.output, wrongRevision));

package/tests/native-manual-projects.test.mjs

@@ -5,7 +5,7 @@ import { tmpdir } from 'node:os';
 import { join } from 'node:path';
 import { spawnSync } from 'node:child_process';
 import { createHash } from 'node:crypto';
-import { CTG_RUNTIME_SOURCE, CTG_RUNTIME_PATCH_SHA256, CTG_DEVELOPMENT_RUNTIME_PATCH_SHA256, CTG_RUNTIME_LOCK_SHA256 } from '../lib/opencode/runtime.mjs';
+import { CTG_RUNTIME_SOURCE, CTG_RUNTIME_PATCH_SHA256, CTG_RUNTIME_LOCK_SHA256 } from '../lib/opencode/runtime.mjs';
 import { createManualProjects } from '../tools/native-manual-projects.mjs';
 import { readManualRuntimeManifest } from '../tools/manual-runtime-manifest.mjs';
 import { readRuntimeReleaseManifest } from '../lib/opencode/runtime.mjs';
@@ -71,7 +71,7 @@ test('manual kit preparation refuses existing directories and removes only its o
   const runtimeManifest = join(temp, 'runtime-release.json');
   const manifest = JSON.parse(await readFile(new URL('../lib/opencode/runtime-release.json', import.meta.url), 'utf8'));
   manifest.releaseVersion = JSON.parse(await readFile(new URL('../package.json', import.meta.url), 'utf8')).version;
-  Object.assign(manifest, { sourceRevision: CTG_RUNTIME_SOURCE, patchSha256: CTG_DEVELOPMENT_RUNTIME_PATCH_SHA256, lockSha256: CTG_RUNTIME_LOCK_SHA256 });
+  Object.assign(manifest, { sourceRevision: CTG_RUNTIME_SOURCE, patchSha256: CTG_RUNTIME_PATCH_SHA256, lockSha256: CTG_RUNTIME_LOCK_SHA256 });
   const target = `${process.platform === 'win32' ? 'windows' : process.platform}-${process.arch}`;
   manifest.assets = { [target]: manifest.assets[target] };
   const bytes = JSON.stringify(manifest);
@@ -145,7 +145,7 @@ test('single-platform manual candidates bind current recipe bytes without weaken
   const runtimeManifest = join(temp, 'candidate.json');
   const manifest = JSON.parse(await readFile(new URL('../lib/opencode/runtime-release.json', import.meta.url), 'utf8'));
   manifest.releaseVersion = JSON.parse(await readFile(new URL('../package.json', import.meta.url), 'utf8')).version;
-  Object.assign(manifest, { sourceRevision: CTG_RUNTIME_SOURCE, patchSha256: CTG_DEVELOPMENT_RUNTIME_PATCH_SHA256, lockSha256: CTG_RUNTIME_LOCK_SHA256 });
+  Object.assign(manifest, { sourceRevision: CTG_RUNTIME_SOURCE, patchSha256: CTG_RUNTIME_PATCH_SHA256, lockSha256: CTG_RUNTIME_LOCK_SHA256 });
   const asset = manifest.assets['linux-x64'];
   manifest.assets = { 'linux-x64': asset };
   const save = async () => {

package/tests/native-model-command.test.mjs

@@ -0,0 +1,67 @@
+import { test } from 'node:test';
+import assert from 'node:assert/strict';
+import { readFile } from 'node:fs/promises';
+import { createRequire } from 'node:module';
+
+const require = createRequire(import.meta.url);
+const { createJiti } = require('jiti');
+const jiti = createJiti(import.meta.url);
+const { runModelCommand } = await jiti.import('../plugins/carthagent/src/ui/model-command.ts');
+
+const ship = { providerID: 'experiential-labs', modelID: 'deepseek-v4.1-flash', id: 'deepseek-v4.1-flash', name: 'DeepSeek V4.1 Flash' };
+const other = { providerID: 'demo', modelID: 'alpha', id: 'alpha', name: 'Alpha' };
+
+function host(overrides = {}) {
+  const calls = { native: [], switched: [], selects: [], toasts: [], syncs: 0 };
+  return {
+    calls,
+    value: {
+      sync: async () => { calls.syncs++; },
+      list: () => [ship, other],
+      select: async (options) => { calls.selects.push(options.map((option) => option.title)); return options[0]?.value; },
+      switchModel: async (sessionID, model) => { calls.switched.push({ sessionID, model }); },
+      openNativePicker: (query) => { calls.native.push(query); },
+      providerName: (id) => (id === 'experiential-labs' ? 'Carthagent Ship' : id),
+      toast: (message, variant) => { calls.toasts.push({ message, variant }); },
+      ...overrides,
+    },
+  };
+}
+
+test('pre-session /model opens the native configured-model picker with its argument and never switches a session', async () => {
+  const bare = host();
+  await runModelCommand(bare.value, { arg: '' });
+  assert.deepEqual(bare.calls.native, ['']);
+  const named = host();
+  await runModelCommand(named.value, { arg: 'deepseek' });
+  assert.deepEqual(named.calls.native, ['deepseek']);
+  for (const run of [bare, named]) {
+    assert.deepEqual(run.calls.switched, []);
+    assert.deepEqual(run.calls.selects, []);
+    assert.equal(run.calls.toasts.some((toast) => /Open or create a session/.test(toast.message)), false);
+  }
+});
+
+test('existing-session /model keeps filtering by argument and commits the pick to that session only', async () => {
+  const run = host();
+  await runModelCommand(run.value, { sessionID: 'ses_existing', arg: 'deepseek' });
+  assert.equal(run.calls.syncs, 1);
+  assert.deepEqual(run.calls.selects, [['Carthagent Ship/deepseek-v4.1-flash']]);
+  assert.deepEqual(run.calls.switched, [{ sessionID: 'ses_existing', model: { providerID: 'experiential-labs', id: 'deepseek-v4.1-flash' } }]);
+  assert.deepEqual(run.calls.native, []);
+  assert.deepEqual(run.calls.toasts, [{ message: 'Selected Carthagent Ship/deepseek-v4.1-flash.', variant: 'success' }]);
+});
+
+test('cancelling the existing-session picker changes nothing', async () => {
+  const run = host({ select: async () => undefined });
+  await runModelCommand(run.value, { sessionID: 'ses_existing', arg: '' });
+  assert.deepEqual(run.calls.switched, []);
+  assert.deepEqual(run.calls.toasts, []);
+});
+
+test('plugin /model dispatch routes through the shared command and the native model.list command', async () => {
+  const tui = await readFile(new URL('../plugins/carthagent/src/tui.tsx', import.meta.url), 'utf8');
+  assert.match(tui, /runModelCommand\(/);
+  assert.match(tui, /keymap\.dispatch\("model\.list", query\)/);
+  assert.doesNotMatch(tui, /Open or create a session before selecting its model/);
+});

package/tests/native-review-consumer.test.mjs

@@ -58,6 +58,25 @@ test('ask confirmation is current-run-bound and one-shot; a later run invalidate
   assert.deepEqual(kickoffs, ['session-a']);
 });
 
+test('a run whose formal delivery is not reviewable is never offered or kicked off', async () => {
+  for (const mode of ['ask', 'yes']) {
+    const offers = [], kickoffs = [], asked = [];
+    const consumer = createNativeReviewConsumer({
+      mode: () => mode, diff: makeDiff(), offer: async (offer) => offers.push(offer),
+      eligible: async (sessionID) => { asked.push(sessionID); return false; },
+      kickoff: async (sessionID) => kickoffs.push(sessionID),
+    });
+    consumer.onStarted(execution('run-1', 'session-a'));
+    await consumer.onSucceeded(execution('run-1', 'session-a'));
+    assert.deepEqual([offers.length, kickoffs.length, asked], [0, 0, ['session-a']], mode);
+  }
+  const offers = [];
+  const failing = createNativeReviewConsumer({ mode: () => 'ask', diff: makeDiff(), offer: async (offer) => offers.push(offer), eligible: async () => { throw new Error('rpc down'); }, kickoff: async () => {} });
+  failing.onStarted(execution('run-1', 'session-a'));
+  await failing.onSucceeded(execution('run-1', 'session-a'));
+  assert.equal(offers.length, 0, 'an unknown delivery state fails closed');
+});
+
 test('yes kicks off only successful new-change runs and suppresses only that session loop', async () => {
   const loops = new Set();
   const started = [];

package/tests/native-select-mouse.test.mjs

@@ -0,0 +1,23 @@
+import { test } from 'node:test';
+import assert from 'node:assert/strict';
+import { clickSelect } from '../plugins/carthagent/src/ui/select-mouse.ts';
+
+const node = (scrollOffset, linesPerItem) => {
+  const calls = [];
+  return { calls, scrollOffset, linesPerItem, maxVisibleItems: 3, screenY: 10, options: [{}, {}, {}, {}], setSelectedIndex: i => calls.push(['set', i]), selectCurrent: () => calls.push(['select']) };
+};
+
+test('clicks activate the row under the pointer, accounting for scroll and row height', () => {
+  const n = node(1, 2);
+  clickSelect(n, { button: 0, y: 13 });
+  assert.deepEqual(n.calls, [['set', 2], ['select']]);
+});
+
+test('clicks outside rows or with other buttons are ignored', () => {
+  for (const event of [{ button: 0, y: 9 }, { button: 0, y: 30 }, { button: 0, y: 13 }, { button: 2, y: 10 }]) {
+    const n = node(0, 1);
+    clickSelect(n, event);
+    assert.deepEqual(n.calls, []);
+  }
+  clickSelect(undefined, { button: 0, y: 10 });
+});

package/tests/native-ship-plan.test.mjs

@@ -5,12 +5,12 @@ import { join } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { runInNewContext } from 'node:vm';
 import { createHash } from 'node:crypto';
-import { CTG_DEVELOPMENT_RUNTIME_PATCH_SHA256 } from '../lib/opencode/runtime.mjs';
+import { CTG_DEVELOPMENT_RUNTIME_PATCH_SHA256, CTG_RUNTIME_PATCH_SHA256 } from '../lib/opencode/runtime.mjs';
 import ts from 'typescript';
 import { parseOpenCodeArgs } from '../lib/opencode/cli.mjs';
 import { normalizeSessionOptions } from '../lib/opencode/session-options.mjs';
 
-const patch = readFileSync(new URL('../docs/patches/opencode-v2.0.32-session-ui-combined-v4.patch', import.meta.url), 'utf8');
+const patch = readFileSync(new URL('../docs/patches/opencode-v2.0.32-session-ui-combined-v5.patch', import.meta.url), 'utf8');
 const path = 'packages/tui/src/routes/session/plan-items.ts';
 const section = patch.split(`diff --git a/${path} b/${path}\n`)[1]?.split('\ndiff --git ')[0];
 assert.ok(section, 'the plan graph parser is part of the reproducible runtime patch');
@@ -67,9 +67,19 @@ test('native CLI preserves bounded-run and advisor controls in session options',
 });
 
 
-test('development runtime source and build recipe pin the actual Ship graph patch bytes', () => {
+test('development runtime source and preparation recipe pin the actual Ship graph patch bytes', () => {
   const digest = createHash('sha256').update(patch).digest('hex');
   assert.equal(CTG_DEVELOPMENT_RUNTIME_PATCH_SHA256, digest);
+  const prepare = readFileSync(new URL('../script/ctg/prepare-development-runtime.sh', import.meta.url), 'utf8');
+  assert.ok(prepare.includes(`EXPECTED_PATCH="${digest}"`));
+  assert.ok(prepare.includes('docs/patches/opencode-v2.0.32-session-ui-combined-v5.patch'));
+  assert.doesNotMatch(prepare, /bun (install|run|build)|gh release|npm publish/);
+});
+
+test('the shared release build recipe stays on the published patch', () => {
+  const published = readFileSync(new URL('../docs/patches/opencode-v2.0.32-session-ui-combined-v5.patch', import.meta.url));
+  const digest = createHash('sha256').update(published).digest('hex');
+  assert.equal(CTG_RUNTIME_PATCH_SHA256, digest);
   const build = readFileSync(new URL('../script/ctg/build-owned-runtime.sh', import.meta.url), 'utf8');
   assert.ok(build.includes(`EXPECTED_PATCH="${digest}"`));
 });

package/tests/opencode-delivery.test.mjs

@@ -40,6 +40,22 @@ function host(t) {
   return { ctx, tools, hooks, commands, stores, directory, session, sessions, interrupts }
 }
 
+test('delivery_review coverage schema accepts assertion aliases models emit', async t => {
+  const h = host(t)
+  await registerDelivery(h.ctx, { workflow: 'standard' })
+  const item = h.tools.get('delivery_review').input.properties.coverage.items
+  assert.deepEqual(item.required, ['requirement'])
+  assert.deepEqual(item.properties.assertions.anyOf.map(s => s.type), ['string', 'array'])
+  assert.equal(item.properties.assertion.type, 'string')
+})
+
+test('code-mode catalog always lists the delivery_plan entry point', async t => {
+  const h = host(t)
+  await registerDelivery(h.ctx, { workflow: 'standard' })
+  const pinned = [...h.tools.values()].filter(def => def.options?.pinned).map(def => def.name)
+  assert.deepEqual(pinned, ['delivery_plan'])
+})
+
 test('OpenCode V2 registration exposes domain tools and returns complete cleanup', async t => {
   const h = host(t)
   const cleanup = await registerDelivery(h.ctx, { workflow: 'standard' })

package/tests/owned-runtime-publish-workflow.test.mjs

@@ -106,7 +106,7 @@ function workflowJob(name) {
   return lines.slice(start, end).join('\n');
 }
 
-const combinedPatchPath = 'docs/patches/opencode-v2.0.32-session-ui-combined-v4.patch';
+const combinedPatchPath = 'docs/patches/opencode-v2.0.32-session-ui-combined-v5.patch';
 
 function sha256(bytes) {
   return createHash('sha256').update(bytes).digest('hex');
@@ -250,7 +250,7 @@ const patch=await readFile(path.join(repo,${JSON.stringify(combinedPatchPath)}))
 const expected=recipe.match(/^EXPECTED_PATCH="([^"]+)"$/m)?.[1];
 if(!expected || sha(patch)!==expected) throw new Error('recipe patch digest mismatch: expected='+expected+' actual='+sha(patch)+' path='+${JSON.stringify(combinedPatchPath)});
 const runtimeSource=await readFile(path.join(repo,'lib/opencode/runtime.mjs'),'utf8');
-const runtimePatch=runtimeSource.match(/CTG_DEVELOPMENT_RUNTIME_PATCH_SHA256 = '([a-f0-9]{64})'/)?.[1];
+const runtimePatch=runtimeSource.match(/CTG_RUNTIME_PATCH_SHA256 = '([a-f0-9]{64})'/)?.[1];
 if(runtimePatch!==expected) throw new Error('fixture packaged runtime trust root patch digest mismatch');
 const manifest={version:1,releaseVersion:version,compatibilityVersion:'2.0.32',runtimeVersion:'0.0.0-ctg.2.0.32',sourceRevision:'${sourceCommit}',patchSha256:expected,lockSha256:'${lockSha256}',assets:Object.fromEntries(keys.map((key,i)=>[key,{name:names[i],archiveSha256:'0'.repeat(64),executableSha256:'0'.repeat(64)}]))};
 for(let i=0;i<names.length;i++) {
@@ -403,9 +403,9 @@ test('draft metadata validation has scoped write capability; artifact mutation s
   assert.doesNotMatch(assembly, /contents: write/);
   assert.match(publish, /contents: write/);
   assert.match(uploadBlock, /gh release upload/);
-  assert.match(workflow, /git -C ctg show HEAD:docs\/patches\/opencode-v2\.0\.32-session-ui-combined-v4\.patch > opencode\/docs\/patches\/opencode-v2\.0\.32-session-ui-combined-v4\.patch/);
-  assert.match(workflow, /patch_sha256="\$\(hash_file opencode\/docs\/patches\/opencode-v2\.0\.32-session-ui-combined-v4\.patch\)"/);
-  assert.equal((workflow.match(/git -C ctg show HEAD:docs\/patches\/opencode-v2\.0\.32-session-ui-combined-v4\.patch > ctg\/docs\/patches\/opencode-v2\.0\.32-session-ui\.patch/g) ?? []).length, 1,
+  assert.match(workflow, /git -C ctg show HEAD:docs\/patches\/opencode-v2\.0\.32-session-ui-combined-v5\.patch > opencode\/docs\/patches\/opencode-v2\.0\.32-session-ui-combined-v5\.patch/);
+  assert.match(workflow, /patch_sha256="\$\(hash_file opencode\/docs\/patches\/opencode-v2\.0\.32-session-ui-combined-v5\.patch\)"/);
+  assert.equal((workflow.match(/git -C ctg show HEAD:docs\/patches\/opencode-v2\.0\.32-session-ui-combined-v5\.patch > ctg\/docs\/patches\/opencode-v2\.0\.32-session-ui\.patch/g) ?? []).length, 1,
     'candidate assembly must extract exact committed bytes at the pinned historical path');
   assert.match(verifyBlock, /git -C ctg show HEAD:script\/ctg\/build-owned-runtime\.sh/);
   assert.match(verifyBlock, /git -C ctg show "HEAD:\$patch_file" > ctg\/docs\/patches\/opencode-v2\.0\.32-session-ui\.patch/);
@@ -413,7 +413,7 @@ test('draft metadata validation has scoped write capability; artifact mutation s
   assert.match(workflow, /chmod \+x opencode\/script\/ctg\/build-owned-runtime\.sh/);
   assert.match(workflow, /GIT_CONFIG_KEY_0:\s*core\.autocrlf[\s\S]*?GIT_CONFIG_VALUE_0:\s*'false'/);
   assert.match(workflow, /git -C opencode config --local core\.autocrlf false/);
-  assert.match(workflow, /patch_sha256="\$\(hash_file opencode\/docs\/patches\/opencode-v2\.0\.32-session-ui-combined-v4\.patch\)"/);
+  assert.match(workflow, /patch_sha256="\$\(hash_file opencode\/docs\/patches\/opencode-v2\.0\.32-session-ui-combined-v5\.patch\)"/);
 });
 
 test('review-branch prebuild source is exact dispatch SHA; publish validation is default-branch-only', { skip: requiresUbuntuWorkflowShell, timeout: 60000 }, async (t) => {

package/tests/runtime-development-trust.test.mjs

@@ -82,10 +82,10 @@ async function fixture(t, patchSha256 = developmentPatch) {
     writeManifest, writeSums, calls, spawns, spawnVersion, spawnImpl, publicOptions };
 }
 
-test('published preview.12 release trust stays valid independently of the development patch pin', async t => {
-  assert.equal(CTG_RUNTIME_PATCH_SHA256, '1f2309bb3a31dfb8e8a0827a6a1144a1f76a005abff58f6f48857639ec02478a');
+test('published preview.13 release trust stays valid independently of the development patch pin', async t => {
+  assert.equal(CTG_RUNTIME_PATCH_SHA256, 'ec4bb182308ed8b311513aad5c9c7d57dcd0db103f0882f3dc3517d535b4c975');
   const published = await readRuntimeReleaseManifest();
-  assert.equal(published.releaseVersion, '1.1.0-preview.12');
+  assert.equal(published.releaseVersion, '1.1.0-preview.13');
   const f = await fixture(t, CTG_RUNTIME_PATCH_SHA256);
   assert.deepEqual(await f.runtime.readRuntimeReleaseManifest(f.releasePath), f.release);
   assert.equal(await f.runtime.resolveOpenCode(f.publicOptions), f.binary);
@@ -98,7 +98,7 @@ test('published preview.12 release trust stays valid independently of the develo
   assert.equal(acquisition.expectedCompatibilityVersion, f.runtime.OPENCODE_VERSION);
   assert.equal(acquisition.expectedRuntimeVersion, f.runtime.CTG_RUNTIME_VERSION);
   assert.equal(acquisition.expectedChannel, f.manifest.channel);
-  assert.match(acquisition.baseUrl, /\/v1\.1\.0-preview\.12$/);
+  assert.match(acquisition.baseUrl, /\/v1\.1\.0-preview\.13$/);
   const identity = await f.runtime.runtimeIdentity(f.binary, f.publicOptions);
   assert.equal(identity.kind, 'ctg-owned');
   assert.equal(identity.patchSha256, CTG_RUNTIME_PATCH_SHA256);
@@ -117,7 +117,7 @@ test('public release manifest cannot promote the development pin or unpinned pro
   for (const changes of [
     { patchSha256: developmentPatch }, { sourceRevision: 'e'.repeat(40) },
     { lockSha256: 'e'.repeat(64) }, { runtimeVersion: '0.0.0-ctg.2.0.33' },
-    { compatibilityVersion: '2.0.33' }, { releaseVersion: '1.1.0-preview.13' },
+    { compatibilityVersion: '2.0.33' }, { releaseVersion: '1.1.0-preview.14' },
   ]) {
     await writeFile(f.releasePath, JSON.stringify({ ...f.release, ...changes }));
     await assert.rejects(f.runtime.resolveOpenCode(f.publicOptions), /Invalid or incompatible.*release manifest/);

package/tests/server.test.mjs

@@ -79,7 +79,9 @@ test('dashboard status reports an available update from the release cache', asyn
   // Seed the throttled cache so the check resolves without touching the network.
   const cachePath = join(dir, 'update-check.json');
   writeFileSync(cachePath, JSON.stringify({ checkedAt: Date.now(), release: { version: '99.0.0', tag: 'v99.0.0' } }));
-  const server = await serverFixture(t, { CARTHAGENT_UPDATE_CHECK_FILE: cachePath });
+  const channelPath = join(dir, 'update-channel.json');
+  writeFileSync(channelPath, JSON.stringify({ version: 1, channel: 'stable' }));
+  const server = await serverFixture(t, { CARTHAGENT_UPDATE_CHECK_FILE: cachePath, CARTHAGENT_UPDATE_CHANNEL_FILE: channelPath });
   let body = {};
   for (let i = 0; i < 50 && !body.update; i++) {
     body = await (await fetch(`${server.url}/api/status`, { headers: { 'x-carthagent-token': server.token } })).json();

package/tests/ship-telemetry.test.mjs

@@ -234,7 +234,7 @@ test('update check sends the install headers to the control plane only', async t
   const agentDir = tmp(t);
   const seen = [];
   const { release, source } = await fetchLatestRelease({
-    cloudUrl: 'https://cloud.test', env: {}, agentDir,
+    cloudUrl: 'https://cloud.test', env: {}, agentDir, channel: 'stable',
     fetchImpl: async (url, options) => {
       seen.push({ url, headers: options.headers });
       if (url.includes('/v1/cli/releases/latest')) return { status: 503, json: async () => ({}) };