opencode-navigator 0.21.8 → 0.23.0

package/CHANGELOG.md

@@ -1,6 +1,21 @@
 # Changelog
 
-## Unreleased
+## [0.23.0] - 2026-10-28
+
+- Support only the latest stable OpenCode 1.x and 2.x releases, currently 1.19.5 and 2.2.0, including the newer terminal renderer.
+- Keep Skills, MCP servers, and Subagents current as OpenCode 2 updates, and launch the intended Skill when multiple sources have the same name.
+- Show OpenCode Console workspace budgets and Go allowance through the public host usage API without a Navigator server plugin. Preserve workspace scope, native units, reset times, and explicit failure/retry states.
+- Preserve Navigator shortcuts and nested-dialog navigation with OpenCode 2.2's keyboard handling.
+- Verify a supported runtime before changing a pinned Navigator snapshot, preserving the installed version when no compatible verifier is available.
+
+## [0.22.0] - 2026-10-23
+
+- Pin Quick Actions and Skills to a compact sidebar toolbar independently of bookmarks. Choose icons in a searchable picker, customize supported state icons, reorder buttons, and select a More menu or wrapping rows. Preserve Skill confirmations, unavailable reasons, keyboard navigation, and Text fallback; hide the toolbar entirely when empty.
+- Use OpenCode 2's built-in Todo history for the sidebar, with native completed-write and revert semantics, existing filters/progress, and manual Refresh. Keep edits in ordinary chat, preserve previous Navigator tasks as a read-only archive, and retain the independent provider-quota server integration.
+- Support OpenCode 2.1's plugin and rendering APIs while retaining the OpenCode 1.x adapter; restore custom dialogs and rounded selections on the newer native renderer.
+- Replace the shortcut toast with an icon-led hint featuring highlighted keys, navigation/update groups, a distinct Escape action, and responsive Text/no-corner-font layouts. Keep prompt focus and share its action list with scrollable keyboard help.
+- Update Subagent status immediately from OpenCode 2's execution lifecycle and keep unresolved external credentials separate from verified provider accounts.
+- Keep OpenCode updates on the current major line and preserve pinned-source Navigator updates when a target release needs newer runtime dependencies.
 
 ## [0.21.8] - 2026-10-09
 
@@ -112,6 +127,7 @@
 
 Earlier release notes are available on [GitHub Releases](https://github.com/St1ggy/opencode-navigator/releases).
 
+[0.22.0]: https://github.com/St1ggy/opencode-navigator/compare/v0.21.8...v0.22.0
 [0.21.8]: https://github.com/St1ggy/opencode-navigator/compare/v0.21.7...v0.21.8
 [0.21.7]: https://github.com/St1ggy/opencode-navigator/compare/v0.21.6...v0.21.7
 [0.21.6]: https://github.com/St1ggy/opencode-navigator/compare/v0.21.5...v0.21.6

package/HOST_API.md

@@ -0,0 +1,59 @@
+# Public Host APIs And Remaining Gaps
+
+Navigator supports only OpenCode **1.19.5** and **2.2.0**, the current stable
+release in each major line. Published SDK declarations and real-host checks
+define the boundary; internal host components are not plugin APIs.
+
+## Host-Owned Services
+
+| Capability | OpenCode 1.19.5 | OpenCode 2.2.0 |
+| --- | --- | --- |
+| Todo | Supported host Todo source/events | Public message cache, completed `todowrite` and revert boundary |
+| Skills | Host discovery and prompt insertion | Native Skill cache and `session.skill` with exact ID |
+| MCP | Host status and connection API | Native cache, sync/invalidate and connect/disconnect |
+| Subagents | Supported child/status API and events | Native session cache/status and typed execution events |
+| Commands | Public keymap | Public owned layers, targets, priorities, modes, discovery and dispatch |
+| Dialogs/toasts | Public dialog components and mounting | Public show/prompt/confirm/set/clear and toast |
+| Model/variant | Saved session model and host pickers | Reactive prompt model, variant API and host pickers |
+| Provider usage | Codex's documented external protocol | Public Console/Go usage first; documented external sources outside coverage |
+| Package updates | Public plugin manager | Public plugin manager |
+
+## Focused Navigator Implementations
+
+Each row records a missing capability, rather than a request failure that would
+justify bypassing a native API.
+
+| Implementation | Missing equivalent / preserved semantics | Removal condition |
+| --- | --- | --- |
+| Shared private preferences and atomic lock | A common 1.x/2.x store with existing data, Global/Worktree overrides, portable-default precedence and user-wide pins/groups/trust. The 2.x host store is per-channel/plugin, not this cross-host contract. No mirrored store is created. | A public shared store and supported migration preserving scopes and concurrency. |
+| Nested dialog frames | The host has one active dialog, not the preceding frame's query, selection, scroll and unsaved draft. Simple prompts/confirms delegate to native APIs. | Native nested frames with equivalent restore and stale-target behavior. |
+| Literal Ctrl+, hook on 2.x | Public plugin bindings are strings; the comma expander splits literal commas into alternatives. The named parser does not normalize `comma` to the actual comma event. Dispatch still uses the native command API. | A documented literal-comma binding passing the real Settings smoke. |
+| Subagent child discovery | Published TUI Data caches sessions but has no complete children-sync operation. Initial/manual/reconnect discovery uses the public paginated API and syncs unknown IDs into the host cache. | A complete children-sync/query on the supplied public Data interface. |
+| Subagent observation history and retry details | Native status and cached transcript retry data are used first; recent runs, pre-observation clock markers, errors and unloaded-child retry detail remain observation history. | Equivalent public observed-run/retry history without loading every transcript. |
+| Read-only Todo projection | Native completed tool calls and revert are public; the host's `sessionTodos` helper is not exported. No direct CRUD/priority API exists. | A public equivalent projection; editing also requires an explicitly selected interaction and supported API. |
+| Console/Go request lifecycle and projection | `client.usage.limits` is public, but the internal usage cache and budget selectors are not in published Plugin Context. Workspace IDs are not provider account IDs. | Equivalent public cache and selector on the plugin interface. |
+| External quotas / reset credits | Console/Go is not a universal provider API and has no Codex reset-credit consume operation. Sources stay documented, account-bound and portable. Native auth/request errors never enable a bypass reader. | Host APIs matching provider/account/units/resets and idempotent consume semantics. |
+| Pinned-file snapshot installer | Native package updates do not implement the recognized versioned wrapper/staging layout. Preserve installation source and scope. | A public atomic file-snapshot update API with equivalent verification. |
+| Corner masks and product UI | Multiline shape, three-cell controls, filters, groups, presets and pins are product features. Paint hooks only draw; scroll restoration runs outside paint. | Equivalent public primitives preserving geometry, behavior and fallback mode. |
+
+## Unavailable Features
+
+- OpenCode 2.2 publishes no LSP source, restart operation or diagnostic counters
+  to TUI plugins. The 1.x status source remains available.
+- The 2.x title is host-owned; no public fixed-title/date visibility slot exists.
+- The 1.19.5 TUI API lacks a prompt-model accessor before submission.
+- GUI, image-generation and instructions-entry APIs do not reactivate retired
+  Todo guidance or unrelated features.
+
+## Verification And Runtime
+
+Both current hosts have isolated real-host checks. Historical installer fixtures
+exercise migration only; they do not extend the supported host matrix.
+Development uses Bun 1.4.4 and OpenTUI 0.7, leaving Solid/OpenTUI external so the
+host owns its runtime. The 1.x host ships older runtime modules; its actual smoke
+must pass rather than injecting the development modules into it.
+
+OpenTUI 0.7 supports Node >=26.4.0 or Bun >=1.3.14. The updater verifies a staged
+target with an available compatible runtime before switching a recognized local
+wrapper. A lazy root import succeeding under an older Node does not prove full
+renderer/FFI support. CI and package verification use Node 26.12.1.

package/PROVIDERS.md

@@ -5,15 +5,21 @@ It never treats session token/cost totals as remaining provider quota. Subscript
 windows, API rate limits, configured capacities, and monetary balances are different
 measurements and are labelled separately.
 
-The implemented contracts were rechecked on 2026-10-06. The runtime also includes providers from
+The external provider contracts were rechecked on 2026-10-06; the public
+OpenCode Console/Go contract was added on 2026-10-28. The runtime also includes providers from
 the host catalog; an unrecognized provider gets an explicit unverified-source state
 rather than fabricated quota values. Availability depends on the selected account,
 permissions, region, transport, and supported host APIs.
 
 ## Audited Read Sources
 
+OpenCode 2.2 adds a direct public `client.usage.limits` source for Console/Go.
+It takes priority for verified host coverage; an auth, permission, rate-limit or
+network failure does not switch to a credential-based or external reader.
+
 | Provider | Native source | Scope and prerequisites | Reference |
 | --- | --- | --- | --- |
+| OpenCode Console / Go | Public OpenCode 2.2 `usage.limits` client API | Workspace identity, applicable USD budgets and percent-based Go windows; no Navigator server required | [Published client](https://cdn.jsdelivr.net/npm/@opencode/client@2.2.0/dist/promise/generated/client.d.ts), [Usage schema](https://github.com/anomalyco/opencode/blob/v2.2.0/packages/schema/src/usage-limits.ts) |
 | OpenAI / Codex ChatGPT | Codex app-server account/rate-limit RPC and manual reset credits | Verified account identity; ordinary `codex` quota is account-scoped even with null model metadata; separate model buckets need explicit association; native durations describe quota windows, not time until reset | [Codex protocol](https://github.com/openai/codex/tree/main/codex-rs/app-server-protocol) |
 | OpenAI API | HTTP request/token/project-token rate-limit headers | Actual response for the selected model/account; HTTP transport | [Rate limits](https://developers.openai.com/api/docs/guides/rate-limits) |
 | Anthropic API | Native response headers and organization rate-limits API | Per-model headers; configured limits need an eligible org/admin credential and explicit model association | [Rate limits API](https://platform.claude.com/docs/en/manage-claude/rate-limits-api) |
@@ -51,7 +57,7 @@ permissions, region, transport, and supported host APIs.
 | Qwen / Alibaba Cloud / DashScope | Model/project/cloud quota and billing permissions; browser OAuth state is not a portable quota source | [Model Studio docs](https://www.alibabacloud.com/help/en/model-studio/) |
 | Hugging Face Inference Providers | Hub request quotas are not automatically inference-model quotas or inference credits | [Hub limits](https://huggingface.co/docs/hub/rate-limits), [Inference pricing](https://huggingface.co/docs/inference-providers/pricing) |
 | Cloudflare Workers AI | Account billing/analytics and model/resource limits; do not derive remaining free allowance from static daily examples | [Workers AI limits](https://developers.cloudflare.com/workers-ai/platform/limits/) |
-| OpenCode Zen / Go | Host session statistics are not the provider's account balance; no undocumented billing endpoints are queried | [OpenCode Zen](https://opencode.ai/docs/zen/) |
+| OpenCode Console / Go boundaries | Native workspace budgets and Go allowance are supported, not an inferred wallet balance; other providers need their own documented source | [Host usage source](https://github.com/anomalyco/opencode/blob/v2.2.0/packages/core/src/usage-limits.ts) |
 | Cursor | Consumer account usage requires a supported external API; no browser cookies or local credential extraction | [Cursor docs](https://docs.cursor.com/) |
 | Windsurf / Codeium | Consumer plan usage is separate from API response rate limits; no private account endpoints | [Windsurf docs](https://docs.windsurf.com/) |
 | Amp | Product credits require a supported external account API; no credential-file or cookie integrations | [Amp manual](https://ampcode.com/manual) |
@@ -80,8 +86,9 @@ permissions, region, transport, and supported host APIs.
   triggers inference, a credit purchase, a reset, or an authorization flow.
 - HTTP-only observations may be absent for WebSocket transports. Report that
   limitation instead of changing the host transport or reading private frames.
-- The native adapters are available through the OpenCode 2 server plugin. OpenCode
-  1.x keeps Codex support and capability guidance without accessing host internals.
+- Console/Go use the host client API directly; other native provider adapters use
+  the OpenCode 2 server plugin. OpenCode 1.x keeps Codex support and capability
+  guidance without accessing host internals.
 - REST credentials are not reused against a native provider origin when the host
   explicitly configures a different gateway origin. Redirects are rejected.
 - Contract fixtures cover endpoint selection, regions, units, pagination, account

package/README.md

@@ -12,7 +12,7 @@ See the [changelog](CHANGELOG.md) for release-by-release changes.
 
 - Theme-aware session title with the session creation date
 - First-run setup guide with interactive section settings
-- Collapsible Todo section with status filters, grouped tasks, progress and priority indicators; OpenCode 2 adds session-owned tasks and optional model-context instructions
+- Collapsible Todo section with status filters, grouped tasks and progress; OpenCode 2 follows the host's native Todo history, while OpenCode 1.x retains supported priority indicators
 - Active subagent list with live statuses and click-to-open navigation, including dev-team workers running in separate local processes
 - Compact, searchable workspace skill list with user-wide favorites and groups, recent skills, source details, and click-to-confirm slash commands
 - Configurable host quick actions, including OpenCode 1.x's auto-approve toggle and OpenCode 2.x's Permissions settings, with user-wide bookmarks and availability reasons
@@ -34,6 +34,7 @@ See the [changelog](CHANGELOG.md) for release-by-release changes.
 - Copy the selected scope's layout and MCP states as versioned JSON, then validate and preview imports
 - Focus the sidebar with `Ctrl+Shift+F`, then navigate with arrows or `j`/`k`
 - Open sidebar shortcut mode with `Ctrl+Shift+B`; press `h` to toggle the panel, `c` to check Navigator updates, or `u` to check and confirm an update
+- Scan an icon-led shortcut hint with highlighted keys, separate navigation/update groups, and a clear Escape action; narrow terminals and Text fallback use the same controls
 - Optionally open new sessions directly in an empty chat with the sidebar, skipping Home on startup and from New session
 - Keep OpenCode's compact footer while showing host and Navigator versions with independent update indicators; click a version label or its update icon to confirm an in-place update through the current installation method and scope
 
@@ -41,10 +42,15 @@ Todo starts expanded. Subagents, skills, quick actions, LSP, and MCP start
 collapsed. Use `Save current layout as default` in sidebar settings to reuse the
 current visible/hidden, expanded/collapsed, and ordering states in new sessions.
 
-Supports OpenCode 1.18.30 and newer, including OpenCode 2.x. OpenCode 2.0.16 does
-not expose host Todo or LSP data to TUI plugins. Navigator supplies its own
-session Todo list through a separately configured server plugin in 2.x. Without
-that plugin, Todo stays visible with setup guidance. LSP is hidden on 2.x while retaining Subagents,
+**Only the latest stable release in each major line is supported: OpenCode
+1.19.5 and 2.2.0.** Both have separate real-host checks. Older releases are not
+part of the supported compatibility matrix. The 2.2 integration uses OpenTUI 0.7
+and public host caches, events, keymap layers, and client APIs while retaining
+the separate 1.x adapter. See [Host API boundaries](HOST_API.md) for remaining
+capability gaps and removal conditions. On OpenCode 2, Navigator reads the same native Todo history as
+the host sidebar, including completed `todowrite` calls and the current revert
+boundary. Viewing Todo needs no Navigator server plugin. OpenCode 2.1 exposes
+content and four statuses, without priorities or direct Todo CRUD. LSP is hidden on 2.x while retaining Subagents,
 Skills, Quick Actions, MCP, Search, settings, and presets. All interface icons use Nerd Font glyphs by
 default (Codicons for controls, keyboard symbols for hints, language logos for LSP). Use a Nerd Fonts v3
 terminal font, or select **Settings → Behavior → Icon style → Text fallback**.
@@ -145,7 +151,7 @@ the uninstalled-font result remains visible rather than being documented only in
 
 ![Nerd Font without Navigator corner font](https://raw.githubusercontent.com/St1ggy/opencode-navigator/main/screenshots/35-no-corner-font-layout-preview.png)
 
-The [complete 47-state screenshot gallery](screenshots/README.md) shows every
+The [complete screenshot gallery](screenshots/README.md) shows every
 Todo and Subagent filter, sidebar section, Search and Settings tab, preset menu
 and preview, confirmation, keyboard-help, setup, and icon-fallback state.
 
@@ -190,9 +196,28 @@ OpenCode 2.x CLI plugins are global terminal settings; there is no project-local
 plugin overrides are required. OpenCode validates `cli.json` strictly, so keep it
 within the linked schema and restart OpenCode after changing it.
 
-To enable Todo in OpenCode 2.x, also install the **server** half of Navigator.
-Add the same package to `~/.config/opencode/opencode.json` (or the project
-`opencode.json`):
+OpenCode 2.1's built-in Todo tool is opt-in. Enable it in the OpenCode server
+configuration used by that host, then restart OpenCode:
+
+```json
+{
+  "$schema": "https://opencode.ai/config.json",
+  "experimental": { "todo": true }
+}
+```
+
+Ask the agent in ordinary chat to create or change the list through `todowrite`.
+Navigator displays the latest completed native call before the session's revert
+boundary, reacts to host updates, and offers All / Active / Finished filters,
+status groups, progress, Refresh, and retry after read failures. It does not start
+model requests from Todo controls. Running or failed writes leave the last
+completed list visible; a completed write with an empty array clears it.
+Native tasks have `content` and one of `pending`, `in_progress`, `completed`, or
+`cancelled`; priorities remain unavailable in OpenCode 2's native schema.
+
+The optional **server** half of Navigator is used for provider-native quotas and
+read-only access to the previous Navigator Todo archive. Add it to the server
+configuration only when those integrations are needed:
 
 ```json
 {
@@ -204,14 +229,25 @@ Add the same package to `~/.config/opencode/opencode.json` (or the project
 For a local source installation, use the directory containing Navigator's
 `server.js` in the `plugin` array. Keep the TUI package in `cli.json` as above;
 the server configuration alone does not replace it. Restart OpenCode after
-configuring both. Todo items belong to the current session, survive restarts,
-and update in the sidebar when the agent calls `navigator_todo_write`. The
-**Todo instructions: Off/On** control in the Todo section is session-scoped and
-starts **Off**: tasks and the agent tool work without adding Todo instructions
-to the model's context. OpenCode 1.x continues to show the host's Todo list.
+configuring both. OpenCode owns native Todo persistence and tool instructions;
+the separate `navigator_todo_write` tool and Navigator Todo-instructions control
+are retired. OpenCode 1.x continues to show its supported host Todo source.
+
+Previous Navigator tasks stay in their original plugin-scoped storage. Their
+existing RPC is now a read-only archive; it never replaces native history or
+deletes the saved list. To inspect a previous session explicitly:
+
+```sh
+opencode api --standalone rpc.call --param rpcID=opencode-navigator.todo --param method=list --data '{"input":{"sessionID":"ses_previous"},"location":{"directory":"/path/to/project"}}'
+```
+
+After reviewing the archive, an ordinary chat request can transfer its content
+and statuses through the host's native tool. Archive reads do not change tasks
+or add model instructions.
 
 If you use both OpenCode 1.x and 2.x with the same global `opencode.json`, keep
-that shared server config compatible with 1.x. Place the server-plugin entry
+that shared server config compatible with 1.x. Place the 2.x experimental Todo
+setting and optional server-plugin entry
 in a separate JSON file and set `OPENCODE_CONFIG` to its path **only when
 launching OpenCode 2.x**. The TUI configuration in `cli.json` remains separate;
 the OpenCode 1.x launch must not load Navigator's 2.x server plugin.
@@ -346,6 +382,36 @@ Search Everything. Usage never changes the order. Visibility remains independent
 so any action, including a bookmarked one, can be hidden from the sidebar while it
 remains searchable. Unavailable actions stay visible with a route- or host-specific reason.
 
+### Pinned toolbar
+
+Pin frequently used Quick Actions and Skills to an icon toolbar above the sidebar's
+sections. In OpenCode 2.x it sits below the host-owned title. An empty toolbar takes
+no space. Pins are independent of bookmarks, section visibility, filters, and item limits.
+
+Use the pin control on an Action or Skill row, or open **Settings → Behavior →
+Pinned toolbar…**. The command palette also offers **Manage pinned toolbar**.
+Choose a base icon in the searchable picker, then select **Pin to toolbar**.
+The manager lets you change icons, move buttons, or unpin them. Cancelling the
+picker returns to the draft; cancelling the draft discards its changes.
+
+Where the host exposes a state, the same button can use a different icon for each
+state: auto-approve On/Off on OpenCode 1.x, and Idle/Compacting on OpenCode 2.x.
+The 2.x permissions button opens host Settings and uses its base icon. Hover or
+keyboard focus shows the button's name, observed state, or unavailable reason.
+Skill buttons retain confirmation and trust settings; a missing or ambiguous
+source stays pinned but cannot run.
+
+**Behavior → Toolbar overflow** switches between one row with a **More** menu
+(the default) and wrapping rows. Left/Right moves along a row; Up/Down moves
+between rows. The setting follows Global/Worktree scope and portable defaults.
+Pins, their order, icons, and exact Skill sources are private user-wide preferences
+and are excluded from portable exports. Use **Reload settings from file** in other
+running sessions after saving changes in another instance.
+
+![Pinned Action and Skill toolbar](https://raw.githubusercontent.com/St1ggy/opencode-navigator/main/screenshots/53-toolbar-permissions-off.png)
+
+![Searchable toolbar icon picker](https://raw.githubusercontent.com/St1ggy/opencode-navigator/main/screenshots/57-toolbar-icon-picker.png)
+
 In OpenCode 1.x, Navigator saves changes to the auto-approve mode as a user-wide
 default, including changes made through OpenCode's own command palette. Set the
 default under **Navigator Settings → Behavior → Default auto-approve permissions**;
@@ -372,7 +438,7 @@ account usage. Separate model-specific buckets require explicit model associatio
 Switching provider, model, session, or account invalidates stale reads and credit actions.
 In OpenCode 2.x, Limits follows the prompt's selected model immediately, before a
 message is sent, through the public reactive `ui.model.current()` API. OpenCode
-1.x through 1.18.35 exposes only the saved session model: a newly selected prompt
+1.x, rechecked at 1.19.5, exposes only the saved session model: a newly selected prompt
 model becomes visible to Navigator when the host saves it, normally on submission.
 An immediate pre-submission switch in 1.x needs a new public host accessor or event.
 CodexBar is useful for discovering providers, but its cookie, credential-file,
@@ -380,6 +446,7 @@ and undocumented endpoint integrations are not Navigator data sources.
 
 | Source | Native measurement | Banked reset credits |
 | --- | --- | --- |
+| OpenCode Console / Go | Public host usage API: applicable workspace budgets in USD and Go allowance percentages with reset times | Read-only |
 | Codex app-server | Rate-limit windows and account ID | Available count, optional details and expiry, confirmed manual consumption |
 | MiniMax and NanoGPT | Explicit model-associated subscription windows; separate pay-as-you-go balances | Read-only |
 | GitHub Copilot | Official SDK token-scoped premium allowance, checked against the selected model's billing metadata | Read-only |
@@ -389,10 +456,17 @@ and undocumented endpoint integrations are not Navigator data sources.
 | OpenCode session statistics | Token and cost statistics, not subscription quota | Not applicable |
 | Other providers | Capability guidance until a documented source and model/account mapping are verified | No action without a documented consume API |
 
-The additional native sources use the **OpenCode 2 Navigator server plugin** already
-used for Todo. Configure it on the 2.x launch path as described in the installation
-section. OpenCode 1.x retains Codex support; additional sources need the 2.x public
-integration/HTTP APIs. Without the server plugin, Limits shows setup guidance.
+OpenCode Console and Go use OpenCode 2.2's **public usage API directly**, without
+the Navigator server plugin or credential reads. Workspace identity stays separate
+from provider account identity. Shared and per-model budgets retain their native
+scope; free models and unrelated model budgets are excluded. Missing data does
+not mean zero spend or an unlimited allowance. Authentication and request failures
+stay on the native source with explicit guidance or Retry.
+
+Other additional sources use the **OpenCode 2 Navigator server plugin** and its
+public integration/HTTP APIs. Configure it on the 2.x launch path as described in
+the installation section. Native Todo remains independent. OpenCode 1.x retains
+Codex support; sources requiring the 2.x server show setup guidance when it is absent.
 The [source inventory](PROVIDERS.md) includes audited public API references,
 permission requirements, and unsupported-source reasons.
 
@@ -403,6 +477,12 @@ response bodies. HTTP-only observations may be absent on WebSocket transports.
 REST reads use a short in-memory cache; Refresh bypasses it. Observed headers older
 than two minutes are marked stale instead of presented as current remaining quota.
 
+Navigator shares the host's Solid/OpenTUI runtime. Development and CI use Bun 1.4.4
+and Node 26.12.1; OpenTUI 0.7's supported Node path starts at 26.4.0. A confirmed
+pinned-snapshot update verifies its target with supported Bun (at least 1.3.14)
+or Node before switching the wrapper. If neither is available, the running snapshot
+is preserved with guidance; the updater does not install a runtime globally.
+
 Limits is visible and expanded by default, first below the session title. Change
 its visibility and order under **Settings → Sections** in Global or Current
 worktree scope. Hiding or collapsing it does not stop background refreshes, and
@@ -411,6 +491,10 @@ available from the command palette.
 
 ![Codex quota windows and reset times](screenshots/39-provider-limits.png)
 
+![Native Console workspace budgets](screenshots/63-native-workspace-budgets.png)
+
+![Native Go allowance windows](screenshots/64-native-go-allowance.png)
+
 ### Link the intended Codex account
 
 Install a Codex CLI exposing the documented read and consume RPCs (verified with
@@ -519,6 +603,7 @@ Navigator plugin tuple:
     "cornerFont": true,
     "lspIconStyle": "nerd",
     "rowDensity": "compact",
+    "toolbarOverflow": "menu",
     "sectionItemLimits": { "todo": 0, "skills": 5, "mcp": 5 },
     "quickActionOrder": ["session.rename", "session.copy", "session.fork"],
     "quickActionVisibility": { "session.export": false }
@@ -556,7 +641,7 @@ density, item limits, and Navigator's safe Quick Action allowlist. Unknown value
 sections, actions, and MCP states are discarded. The previous snake_case tuple
 options (`toggle_key`, `focus_key`, `search_key`, `persist_mcp`, `limits_refresh_minutes`, `start_in_chat`, `show_session_title`,
 `show_session_date`, `corner_font`, `icon_style`,
-`lsp_icon_style`, `row_density`, `section_item_limits`, `quick_action_order`,
+`lsp_icon_style`, `row_density`, `toolbar_overflow`, `section_item_limits`, `quick_action_order`,
 `quick_action_visibility`, `sections`, and `section_order`) remain compatible;
 canonical nested fields win when both forms are present.
 
@@ -667,14 +752,23 @@ Press `Ctrl+Shift+B` to enter Navigator shortcuts, then choose an action:
 | `u` | Check for a Navigator update, then open its confirmation if available |
 | `Escape` | Cancel shortcut mode |
 
-The mode ends after an action or five seconds of inactivity. Its toast lists only
-actions supported by the current host; LSP is omitted on OpenCode 2.x. Change the
+The mode ends after an action or five seconds of inactivity. Its compact,
+non-modal hint groups section navigation separately from update actions, uses
+icons and highlighted key tokens, and keeps Escape visible. It adapts to narrow
+or short terminals, light/dark themes, Text fallback, and the no-corner-font
+setting without taking focus from the prompt. Keyboard help uses the same
+action inventory and supports arrow-key and page-key scrolling. Only actions
+supported by the current host are listed; LSP is omitted on OpenCode 2.x. Change the
 entry shortcut under **Settings → Behavior**. The command palette also offers
 **Check Navigator updates** and **Update Navigator**.
 
 Manual checks report when Navigator is current or the update source is unavailable.
 Updates require confirmation, preserve the existing installation method and scope,
-and show a restart reminder after completion. Background check failures stay quiet.
+and show a restart reminder after completion. OpenCode updates stay on the running
+major line; moving from 1.x to 2.x remains a separate installation decision.
+Confirmed pinned-source Navigator updates install the target release's runtime
+dependencies in a new snapshot before switching its wrapper. The previous
+snapshot and private settings remain intact. Background check failures stay quiet.
 
 ### Search Everything
 

package/dist/chunk-bv0nm1tj.js

@@ -0,0 +1,9 @@
+var SIDEBAR_SECTIONS=["limits","todo","subagents","skills","quick_actions","lsp","mcp"]
+var SECTION_DEFINITIONS=[{name:"limits",label:"Limits"},{name:"todo",label:"Todo"},{name:"subagents",label:"Subagents"},{name:"skills",label:"Skills"},{name:"quick_actions",label:"Quick actions"},{name:"lsp",label:"LSP"},{name:"mcp",label:"MCP"}];
+var MAX_LIMITS_REFRESH_MINUTES=Math.floor(2147483647 / 60000);
+var PLUGIN_ID="opencode-navigator"
+var TOGGLE_COMMAND=`${PLUGIN_ID}.toggle`
+var FOCUS_COMMAND=`${PLUGIN_ID}.focus`
+var SEARCH_COMMAND=`${PLUGIN_ID}.search`
+var DEFAULT_SEARCH_KEY="ctrl+shift+k"
+export{SIDEBAR_SECTIONS,SECTION_DEFINITIONS,PLUGIN_ID,DEFAULT_SEARCH_KEY}

package/dist/chunk-v6bz59xn.js

@@ -0,0 +1,20 @@
+function mcpToggleAction(status){if(status==="pending")
+return
+return status==="connected"?"disconnect":"connect"
+}
+function mcpPresetPreview(items,states){const byName=new Map(items.map((item)=>[item.name,item]))
+const names=[...new Set([...Object.keys(states),...byName.keys()])].sort((a,b)=>a.localeCompare(b))
+const rows=names.map((name)=>{const item=byName.get(name)
+const desired=Object.hasOwn(states,name)?states[name]:undefined
+const action=item&&mcpToggleAction(item.status)
+let change="unchanged"
+if(desired&&!item)
+change="missing"
+else if(desired&&!action)
+change="unavailable"
+else if(desired==="enabled"&&action==="connect"||desired==="disabled"&&action==="disconnect"){change=action
+}
+return{name,status:item?.status,desired,change}})
+const changes=rows.flatMap((row)=>row.change==="connect"||row.change==="disconnect"?[{name:row.name,action:row.change}]:[])
+return{rows,changes}}
+export{mcpPresetPreview}

package/dist/icon-picker.js

@@ -0,0 +1,175 @@
+import {use as _$use} from "@opentui/solid"
+import {effect as _$effect3} from "@opentui/solid"
+import {createTextNode as _$createTextNode} from "@opentui/solid"
+import {insertNode as _$insertNode} from "@opentui/solid"
+import {insert as _$insert3} from "@opentui/solid"
+import {memo as _$memo3} from "@opentui/solid"
+import {setProp as _$setProp3} from "@opentui/solid"
+import {createElement as _$createElement3} from "@opentui/solid"
+import {createComponent as _$createComponent3} from "@opentui/solid"
+import {useTerminalDimensions} from "@opentui/solid"
+import {For,createEffect,createMemo,createSignal as createSignal2,onCleanup} from "solid-js"
+import {DialogHeader,DialogSurface,SelectionBox as SelectionBox3,terminalIcon as terminalIcon2,terminalIconIDs,terminalIconLabel as terminalIconLabel2,useDialogState,useDialogs,useIcons as useIcons3} from "./tui.js"
+import {createComponent as _$createComponent} from "@opentui/solid"
+import {effect as _$effect} from "@opentui/solid"
+import {insert as _$insert} from "@opentui/solid"
+import {setProp as _$setProp} from "@opentui/solid"
+import {createElement as _$createElement} from "@opentui/solid"
+import {memo as _$memo} from "@opentui/solid"
+import {SelectionBox,terminalIcon,terminalIconLabel,useIcons} from "./tui.js"
+function IconPickerItem(props){const icons=useIcons()
+const theme=()=>props.api.theme.current
+return _$createComponent(SelectionBox,{get id(){return `icon-picker.${props.id}`
+},width:9,height:2,paddingLeft:1,paddingRight:1,get backgroundColor(){return _$memo(()=>!!props.active)()?theme().backgroundElement:undefined
+},get onMouseOver(){return props.onHover
+},onMouseDown:(event)=>event.stopPropagation(),onMouseUp:(event)=>{event.stopPropagation()
+props.onSelect()
+},get children(){return [(()=>{var _el$=_$createElement("text")
+_$setProp(_el$,"truncate",true)
+_$setProp(_el$,"wrapMode","none")
+_$insert(_el$,()=>terminalIcon(props.id,icons.style()),null)
+_$insert(_el$,()=>props.selected?" *":"",null)
+_$effect((_$p)=>_$setProp(_el$,"fg",props.active||props.selected?theme().accent:theme().text,_$p))
+return _el$
+})(),(()=>{var _el$2=_$createElement("text")
+_$setProp(_el$2,"truncate",true)
+_$setProp(_el$2,"wrapMode","none")
+_$insert(_el$2,()=>terminalIconLabel(props.id))
+_$effect((_$p)=>_$setProp(_el$2,"fg",theme().textMuted,_$p))
+return _el$2
+})()]
+}})
+}
+import {createComponent as _$createComponent2} from "@opentui/solid"
+import {setProp as _$setProp2} from "@opentui/solid"
+import {effect as _$effect2} from "@opentui/solid"
+import {insert as _$insert2} from "@opentui/solid"
+import {createElement as _$createElement2} from "@opentui/solid"
+import {memo as _$memo2} from "@opentui/solid"
+import {createSignal} from "solid-js"
+import {SelectionBox as SelectionBox2,useIcons as useIcons2} from "./tui.js"
+function IconPickerSearch(props){const icons=useIcons2()
+const [focused,setFocused]=createSignal(true)
+const theme=()=>props.api.theme.current
+const fg=()=>focused()?theme().selectedListItemText:theme().text
+return _$createComponent2(SelectionBox2,{paddingLeft:1,paddingRight:1,flexDirection:"row",gap:1,get backgroundColor(){return _$memo2(()=>!!focused())()?theme().primary:theme().backgroundElement
+},get children(){return [(()=>{var _el$=_$createElement2("text")
+_$insert2(_el$,()=>icons.icon("search"))
+_$effect2((_$p)=>_$setProp2(_el$,"fg",fg(),_$p))
+return _el$
+})(),(()=>{var _el$2=_$createElement2("input")
+_$setProp2(_el$2,"id","icon-picker.search")
+_$setProp2(_el$2,"flexGrow",1)
+_$setProp2(_el$2,"focused",true)
+_$setProp2(_el$2,"placeholder","Search icons...")
+_$setProp2(_el$2,"on:focused",()=>setFocused(true))
+_$setProp2(_el$2,"on:blurred",()=>setFocused(false))
+_$setProp2(_el$2,"backgroundColor","transparent")
+_$setProp2(_el$2,"focusedBackgroundColor","transparent")
+_$effect2((_p$)=>{var{query:_v$,onInput:_v$2}=props,_v$3=fg(),_v$4=fg(),_v$5=fg(),_v$6=fg()
+_v$!==_p$.e&&(_p$.e=_$setProp2(_el$2,"value",_v$,_p$.e))
+_v$2!==_p$.t&&(_p$.t=_$setProp2(_el$2,"onInput",_v$2,_p$.t))
+_v$3!==_p$.a&&(_p$.a=_$setProp2(_el$2,"textColor",_v$3,_p$.a))
+_v$4!==_p$.o&&(_p$.o=_$setProp2(_el$2,"focusedTextColor",_v$4,_p$.o))
+_v$5!==_p$.i&&(_p$.i=_$setProp2(_el$2,"placeholderColor",_v$5,_p$.i))
+_v$6!==_p$.n&&(_p$.n=_$setProp2(_el$2,"cursorColor",_v$6,_p$.n))
+return _p$
+},{e:undefined,t:undefined,a:undefined,o:undefined,i:undefined,n:undefined
+})
+return _el$2
+})()]
+}})
+}
+function IconPicker(props){const icons=useIcons3()
+const dialogs=useDialogs(props.api)
+const dimensions=useTerminalDimensions()
+const [query,setQuery]=useDialogState("icon-query","")
+const [active,setActive]=useDialogState("icon-active",props.value)
+const keywords={bolt:"action lightning",gear:"settings configuration",shield:"permissions security",copy:"clipboard transcript",check:"done success",refresh:"compact reload retry",book:"skill documentation",pin:"favorite bookmark"
+}
+const items=createMemo(()=>terminalIconIDs.filter((id)=>`${terminalIconLabel2(id)} ${keywords[id] ?? ""}`.includes(query().toLowerCase().trim())))
+const [width,setWidth]=createSignal2(Math.max(10,dimensions().width-12))
+const columns=createMemo(()=>Math.max(1,Math.min(6,Math.floor(width() / 10))))
+const rows=createMemo(()=>Array.from({length:Math.ceil(items().length / columns())
+},(_,index)=>items().slice(index*columns(),(index + 1)*columns())))
+let body
+createEffect(()=>{if(!items().includes(active()))
+setActive(items()[0]??"")
+})
+function move(offset,horizontal=false){const index=items().indexOf(active())
+const start=horizontal?Math.floor(index / columns())*columns():0
+const end=horizontal?Math.min(items().length-1,start + columns()-1):items().length-1
+const next=items()[Math.max(start,Math.min(end,index + offset))]
+if(next){setActive(next)
+body?.scrollChildIntoView(`icon-picker.${next}`)
+}}
+function select(id=active()){if(items().includes(id))
+props.onSelect(id)
+}
+const prefix="opencode-navigator.icon-picker"
+const unregister=props.api.keymap.registerLayer({mode:"modal",priority:1000,commands:[{name:`${prefix}.left`,run:()=>move(-1,true)
+},{name:`${prefix}.right`,run:()=>move(1,true)
+},{name:`${prefix}.up`,run:()=>move(-columns())
+},{name:`${prefix}.down`,run:()=>move(columns())
+},{name:`${prefix}.select`,run:()=>select()
+}],bindings:["left","right","up","down","return"].map((key)=>({key,cmd:`${prefix}.${key === "return" ? "select" : key}`
+}))
+})
+onCleanup(unregister)
+const theme=()=>props.api.theme.current
+return _$createComponent3(DialogSurface,{get api(){return props.api
+},id:"opencode-navigator.icon-picker",get children(){return [_$createComponent3(DialogHeader,{get api(){return props.api
+},title:"Choose an icon",get onBack(){return dialogs.back
+}}),_$createComponent3(IconPickerSearch,{get api(){return props.api
+},get query(){return query()
+},onInput:setQuery
+}),_$createComponent3(SelectionBox3,{paddingLeft:1,paddingRight:1,get backgroundColor(){return theme().backgroundElement
+},get children(){var _el$=_$createElement3("text"),_el$2=_$createTextNode(` `)
+_$insertNode(_el$,_el$2)
+_$setProp3(_el$,"wrapMode","none")
+_$setProp3(_el$,"truncate",true)
+_$insert3(_el$,()=>terminalIcon2(active(),icons.style()),_el$2)
+_$insert3(_el$,()=>terminalIconLabel2(active())||"No matching icons",null)
+_$insert3(_el$,()=>active()===props.value?" \xB7 selected":"",null)
+_$effect3((_$p)=>_$setProp3(_el$,"fg",theme().accent,_$p))
+return _el$
+}}),(()=>{var _el$3=_$createElement3("scrollbox")
+_$use((node)=>{body=node
+},_el$3)
+_$setProp3(_el$3,"onSizeChange",function(){setWidth(this.width)
+})
+_$setProp3(_el$3,"scrollX",false)
+_$insert3(_el$3,_$createComponent3(For,{get each(){return rows()
+},children:(row)=>(()=>{var _el$0=_$createElement3("box")
+_$setProp3(_el$0,"flexDirection","row")
+_$setProp3(_el$0,"gap",1)
+_$insert3(_el$0,_$createComponent3(For,{each:row,children:(id)=>_$createComponent3(IconPickerItem,{get api(){return props.api
+},id,get active(){return id===active()
+},get selected(){return id===props.value
+},onHover:()=>setActive(id),onSelect:()=>select(id)
+})
+}))
+return _el$0
+})()
+}))
+_$effect3((_$p)=>_$setProp3(_el$3,"height",Math.max(2,Math.min(10,Math.floor(dimensions().height*0.6)-9)),_$p))
+return _el$3
+})(),(()=>{var _el$4=_$createElement3("text"),_el$5=_$createTextNode(` rows \xB7 `),_el$6=_$createTextNode(` icons \xB7 `),_el$7=_$createTextNode(` choose \xB7 `),_el$8=_$createTextNode(` cancel`)
+_$insertNode(_el$4,_el$5)
+_$insertNode(_el$4,_el$6)
+_$insertNode(_el$4,_el$7)
+_$insertNode(_el$4,_el$8)
+_$setProp3(_el$4,"height",1)
+_$setProp3(_el$4,"truncate",true)
+_$setProp3(_el$4,"wrapMode","none")
+_$insert3(_el$4,()=>icons.key("up/down"),_el$5)
+_$insert3(_el$4,()=>icons.key("left/right"),_el$6)
+_$insert3(_el$4,()=>icons.key("enter"),_el$7)
+_$insert3(_el$4,()=>icons.key("esc"),_el$8)
+_$effect3((_$p)=>_$setProp3(_el$4,"fg",theme().textMuted,_$p))
+return _el$4
+})()]
+}})
+}
+export{IconPicker
+}