opencode-navigator 0.23.0 → 0.25.0

package/CHANGELOG.md

@@ -1,5 +1,21 @@
 # Changelog
 
+## [0.25.0] - 2026-10-31
+
+- Offer Enable Todo when OpenCode 2's native tool is disabled, with an existing server-config picker, exact change preview and separate confirmation. Preserve unrelated JSONC content and refuse stale targets; distinguish disabled Todo from an enabled empty list.
+- Update the seven-slide setup wizard for native Todo enablement, provider/account limits, multi-icon or text-only toolbar pins, About/changelog and Bug reports. Describe each host's real permissions/LSP capabilities and keep navigation visible while short-terminal content scrolls.
+
+## [0.24.0] - 2026-10-31
+
+- Support the latest stable OpenCode 1.19.5 and 2.2.5 releases, preserving both host adapters and existing sidebar behavior.
+- Preserve Limits scales and reset-credit controls across equivalent quota snapshots and unrelated workspace events, while retaining current-account and credential-change guards.
+- Keep rounded selection backgrounds consistent in nested dialogs and highlighted rows.
+- Configure each toolbar button with zero to three icons and optional custom text, including text-only buttons. Keep legacy/state choices, unsaved drafts, rounded clipping, and width-aware More/wrapping.
+- Keep Quick Action rows and their hover/focus state stable while typing in the main prompt on both supported OpenCode hosts.
+- Show toolbar hover/focus hints without moving Limits or other sections, preserving centered, uniformly sized icon controls and empty-toolbar collapse.
+- Add Settings → About with the running versions, explicit update status/checking, confirmed updates, and a versioned changelog that can be reopened independently of first-launch upgrade notes.
+- Prepare editable Bug reports with confirmed sending through authenticated GitHub CLI and an independent Open in browser action. Retain drafts through errors and cancellation, and require manual review before retrying an uncertain submission.
+
 ## [0.23.0] - 2026-10-28
 
 - Support only the latest stable OpenCode 1.x and 2.x releases, currently 1.19.5 and 2.2.0, including the newer terminal renderer.

package/HOST_API.md

@@ -1,12 +1,12 @@
 # Public Host APIs And Remaining Gaps
 
-Navigator supports only OpenCode **1.19.5** and **2.2.0**, the current stable
+Navigator supports only OpenCode **1.19.5** and **2.2.5**, the current stable
 release in each major line. Published SDK declarations and real-host checks
 define the boundary; internal host components are not plugin APIs.
 
 ## Host-Owned Services
 
-| Capability | OpenCode 1.19.5 | OpenCode 2.2.0 |
+| Capability | OpenCode 1.19.5 | OpenCode 2.2.5 |
 | --- | --- | --- |
 | Todo | Supported host Todo source/events | Public message cache, completed `todowrite` and revert boundary |
 | Skills | Host discovery and prompt insertion | Native Skill cache and `session.skill` with exact ID |
@@ -26,11 +26,14 @@ justify bypassing a native API.
 | Implementation | Missing equivalent / preserved semantics | Removal condition |
 | --- | --- | --- |
 | Shared private preferences and atomic lock | A common 1.x/2.x store with existing data, Global/Worktree overrides, portable-default precedence and user-wide pins/groups/trust. The 2.x host store is per-channel/plugin, not this cross-host contract. No mirrored store is created. | A public shared store and supported migration preserving scopes and concurrency. |
-| Nested dialog frames | The host has one active dialog, not the preceding frame's query, selection, scroll and unsaved draft. Simple prompts/confirms delegate to native APIs. | Native nested frames with equivalent restore and stale-target behavior. |
+| Nested dialog frames | The host has one active dialog, not the preceding frame's query, selection, scroll and unsaved draft. OpenCode 1 prompts and standalone confirmations delegate to native APIs. The 2.x promise prompt replaces its owner and loses Navigator's return callback, reproduced in the real toolbar-text smoke; Navigator-owned nested one-line prompts use a focused Shared editor. | Native nested frames and prompt ownership/dismissal semantics with equivalent restore and stale-target behavior. |
+| About service port and manual release history | Navigator-specific metadata/update state must be shared between footer, shortcuts and deferred Settings. The shipped changelog is read separately from the first-launch claim; no second updater or preference mirror is created. Nested update confirmations stay in the existing frame stack. | Public host facilities preserving Navigator release identity, changelog browsing and nested return state. |
+| Bug-report transport and external browser launch | Neither supported public TUI contract provides GitHub issue creation or an external browser opener. Direct sending uses the user's authenticated `gh` without reading credential files; a `type: Bug` repository form handles browser reports. Bounded argv-based OS launch has a visible link/clipboard fallback on remote or headless hosts. | Equivalent public host issue/browser APIs preserving authentication ownership, editable draft, real issue type and confirmation semantics. |
 | Literal Ctrl+, hook on 2.x | Public plugin bindings are strings; the comma expander splits literal commas into alternatives. The named parser does not normalize `comma` to the actual comma event. Dispatch still uses the native command API. | A documented literal-comma binding passing the real Settings smoke. |
 | Subagent child discovery | Published TUI Data caches sessions but has no complete children-sync operation. Initial/manual/reconnect discovery uses the public paginated API and syncs unknown IDs into the host cache. | A complete children-sync/query on the supplied public Data interface. |
 | Subagent observation history and retry details | Native status and cached transcript retry data are used first; recent runs, pre-observation clock markers, errors and unloaded-child retry detail remain observation history. | Equivalent public observed-run/retry history without loading every transcript. |
 | Read-only Todo projection | Native completed tool calls and revert are public; the host's `sessionTodos` helper is not exported. No direct CRUD/priority API exists. | A public equivalent projection; editing also requires an explicitly selected interaction and supported API. |
+| Native Todo enablement | `config.get` exposes ordered sources, but `experimental.config.update` supports only shell. The setup feature previews and confirms a JSONC leaf edit in an existing discovered source through public server file APIs. File reads are location-confined, so selected-file IO is routed to its server-side parent; the original session/location remains the stale-target guard. Reads immediately before writes reject changed previews, and readback verifies the file and effective flag. The public write API has no CAS, so this is not an atomic transaction against concurrent external writers; uncertain outcomes require Refresh before retry. No model, shell or Todo event is used. | A public Todo config patch API preserving source precedence, unrelated JSONC content and conditional-write semantics. |
 | Console/Go request lifecycle and projection | `client.usage.limits` is public, but the internal usage cache and budget selectors are not in published Plugin Context. Workspace IDs are not provider account IDs. | Equivalent public cache and selector on the plugin interface. |
 | External quotas / reset credits | Console/Go is not a universal provider API and has no Codex reset-credit consume operation. Sources stay documented, account-bound and portable. Native auth/request errors never enable a bypass reader. | Host APIs matching provider/account/units/resets and idempotent consume semantics. |
 | Pinned-file snapshot installer | Native package updates do not implement the recognized versioned wrapper/staging layout. Preserve installation source and scope. | A public atomic file-snapshot update API with equivalent verification. |
@@ -49,11 +52,28 @@ justify bypassing a native API.
 
 Both current hosts have isolated real-host checks. Historical installer fixtures
 exercise migration only; they do not extend the supported host matrix.
-Development uses Bun 1.4.4 and OpenTUI 0.7, leaving Solid/OpenTUI external so the
+The published 2.2.5 TUI context, plugin, index and Solid declarations are identical
+to 2.2.0. OpenTUI 0.8 retains the drawing-only paint-hook contract; renderer tests,
+nested dialogs and frame-level typing probes run against the updated runtime.
+Development uses Bun 1.4.4 and OpenTUI 0.8.1, leaving Solid/OpenTUI external so the
 host owns its runtime. The 1.x host ships older runtime modules; its actual smoke
 must pass rather than injecting the development modules into it.
 
-OpenTUI 0.7 supports Node >=26.4.0 or Bun >=1.3.14. The updater verifies a staged
+OpenTUI 0.8 supports Node >=26.4.0 or Bun >=1.3.14. The updater verifies a staged
 target with an available compatible runtime before switching a recognized local
 wrapper. A lazy root import succeeding under an older Node does not prove full
 renderer/FFI support. CI and package verification use Node 26.12.1.
+
+### Deliberate Compatibility Pins
+
+- `web-tree-sitter` stays at **0.25.10**, the exact peer required by OpenTUI
+  0.8.0. Upgrade it when the supported host runtime publishes a compatible peer
+  contract; the independent 0.27 line is not a compatible substitution.
+- `typescript` is **7.0.2** throughout the resolved project graph. The shared
+  preset's legacy compiler dependency is overridden to TS7; its incompatible
+  SonarJS and typescript-eslint JS plugins are not loaded. Native replacements,
+  retained compatible plugins and the explicitly approved coverage loss are
+  documented in [Lint coverage](LINT_COVERAGE.md). No TS6 compatibility copy is used.
+- Bun remains pinned at **1.4.4**, the current stable release. Direct dependencies
+  otherwise use their latest compatible stable releases; transitive updates stay
+  within upstream ranges. Runtime peers remain host-owned and are not bundled.

package/LINT_COVERAGE.md

@@ -0,0 +1,201 @@
+# TypeScript 7 Lint Coverage
+
+Project type checking uses stable TypeScript 7. The lockfile resolves every
+TypeScript dependency, including the shared preset's dependency tree, to that
+version. There is no TypeScript 6 compatibility installation.
+
+Oxlint uses `@st1ggy/linter-config/solid-ox` with type-aware analysis. Oxfmt uses
+`@st1ggy/linter-config/oxfmt-common`. `scripts/native-lint-config.ts` adapts the
+published preset without editing installed packages. The user explicitly approved
+the uncovered SonarJS checks below after reviewing the TS7 incompatibility.
+
+## Preserved Checks
+
+- Native ESLint, TypeScript, import and Unicorn rules remain enabled.
+- The compatible Solid, ESLint-core, import-x, stylistic and Unicorn JS plugins
+  remain enabled. There is no blanket removal of JS plugins.
+- `typescript-js/array-type` and `typescript-js/prefer-as-const` use their native
+  `typescript/` equivalents. The legacy typescript-eslint plugin is not loaded.
+- Six SonarJS checks use native ESLint equivalents: `block-scoped-var`,
+  `no-delete-var`, `no-fallthrough`, `no-labels`, `no-unused-vars` and
+  `no-useless-catch`. Existing native options take precedence.
+- Oxfmt still checks formatting separately. This migration does not configure
+  Stylelint for the CSS-free TUI project.
+
+## Approved Coverage Loss
+
+The published preset configures 161 SonarJS rule names. Six have the direct
+native mappings above. The following 155 preset checks are not loaded after
+removing the TS6-dependent SonarJS plugin. Some overlap with other retained rules,
+but that is not claimed as complete semantic equivalence. The list includes
+checks for frameworks and services this project does not use; it describes the
+preset, not 155 distinct bugs or applicable findings in Navigator.
+
+In particular, native cyclomatic complexity is not a replacement for SonarJS
+cognitive complexity. Identical-function detection, several security/regex
+checks and SonarJS-specific test heuristics lose their dedicated coverage.
+
+```text
+sonarjs/assertions-in-test-cases
+sonarjs/async-test-assertions
+sonarjs/aws-apigateway-public-api
+sonarjs/aws-ec2-rds-dms-public
+sonarjs/aws-ec2-unencrypted-ebs-volume
+sonarjs/aws-efs-unencrypted
+sonarjs/aws-iam-all-privileges
+sonarjs/aws-iam-privilege-escalation
+sonarjs/aws-iam-public-access
+sonarjs/aws-opensearchservice-domain
+sonarjs/aws-rds-unencrypted-databases
+sonarjs/aws-restricted-ip-admin-access
+sonarjs/aws-s3-bucket-granted-access
+sonarjs/aws-s3-bucket-insecure-http
+sonarjs/aws-s3-bucket-public-access
+sonarjs/aws-s3-bucket-versioning
+sonarjs/aws-sagemaker-unencrypted-notebook
+sonarjs/aws-sns-unencrypted-topics
+sonarjs/aws-sqs-unencrypted-queue
+sonarjs/call-argument-line
+sonarjs/chai-determinate-assertion
+sonarjs/class-name
+sonarjs/code-eval
+sonarjs/cognitive-complexity
+sonarjs/comma-or-logical-or-case
+sonarjs/constructor-for-side-effects
+sonarjs/content-length
+sonarjs/content-security-policy
+sonarjs/cookie-no-httponly
+sonarjs/cors
+sonarjs/csrf
+sonarjs/disabled-timeout
+sonarjs/dynamically-constructed-templates
+sonarjs/encryption-secure-mode
+sonarjs/explicit-test-skip
+sonarjs/file-permissions
+sonarjs/file-uploads
+sonarjs/fixme-tag
+sonarjs/for-loop-increment-sign
+sonarjs/function-inside-loop
+sonarjs/future-reserved-words
+sonarjs/generator-without-yield
+sonarjs/hardcoded-secret-signatures
+sonarjs/hashing
+sonarjs/hooks-before-test-cases
+sonarjs/inconsistent-function-call
+sonarjs/insecure-cookie
+sonarjs/insecure-jwt-token
+sonarjs/inverted-assertion-arguments
+sonarjs/label-position
+sonarjs/link-with-target-blank
+sonarjs/max-switch-cases
+sonarjs/memoize-cache-key
+sonarjs/misplaced-loop-counter
+sonarjs/no-all-duplicated-branches
+sonarjs/no-angular-bypass-sanitization
+sonarjs/no-case-label-in-switch
+sonarjs/no-clear-text-protocols
+sonarjs/no-code-after-done
+sonarjs/no-dead-store
+sonarjs/no-debug-commands-in-ui-tests
+sonarjs/no-default-utility-imports
+sonarjs/no-duplicate-in-composite
+sonarjs/no-duplicate-test-title
+sonarjs/no-duplicated-branches
+sonarjs/no-element-overwrite
+sonarjs/no-empty-collection
+sonarjs/no-empty-test-file
+sonarjs/no-empty-test-title
+sonarjs/no-equals-in-for-termination
+sonarjs/no-exclusive-tests
+sonarjs/no-extra-arguments
+sonarjs/no-fixed-wait-in-tests
+sonarjs/no-floating-point-equality
+sonarjs/no-forced-browser-interaction
+sonarjs/no-global-this
+sonarjs/no-globals-shadowing
+sonarjs/no-gratuitous-expressions
+sonarjs/no-hardcoded-ip
+sonarjs/no-hardcoded-passwords
+sonarjs/no-hardcoded-secrets
+sonarjs/no-hook-setter-in-body
+sonarjs/no-identical-conditions
+sonarjs/no-identical-expressions
+sonarjs/no-identical-functions
+sonarjs/no-ignored-exceptions
+sonarjs/no-implicit-global
+sonarjs/no-incomplete-assertions
+sonarjs/no-internal-api-use
+sonarjs/no-interpolation-in-inline-snapshots
+sonarjs/no-invariant-returns
+sonarjs/no-inverted-boolean-check
+sonarjs/no-literal-call
+sonarjs/no-mime-sniff
+sonarjs/no-mixed-completion-style
+sonarjs/no-nested-assignment
+sonarjs/no-nested-conditional
+sonarjs/no-nested-functions
+sonarjs/no-nested-template-literals
+sonarjs/no-os-command-from-path
+sonarjs/no-parameter-reassignment
+sonarjs/no-primitive-wrappers
+sonarjs/no-redundant-assignments
+sonarjs/no-redundant-boolean
+sonarjs/no-redundant-jump
+sonarjs/no-referrer-policy
+sonarjs/no-same-argument-assert
+sonarjs/no-same-line-conditional
+sonarjs/no-session-cookies-on-static-assets
+sonarjs/no-skipped-tests
+sonarjs/no-table-as-layout
+sonarjs/no-trivial-assertions
+sonarjs/no-unenclosed-multiline-block
+sonarjs/no-uniq-key
+sonarjs/no-unthrown-error
+sonarjs/no-unused-collection
+sonarjs/no-use-of-empty-return-value
+sonarjs/no-useless-increment
+sonarjs/no-useless-react-setstate
+sonarjs/no-weak-cipher
+sonarjs/no-weak-keys
+sonarjs/non-existent-operator
+sonarjs/object-alt-content
+sonarjs/parameterized-tests
+sonarjs/prefer-default-last
+sonarjs/prefer-native-lodash-alternative
+sonarjs/prefer-promise-shorthand
+sonarjs/prefer-single-boolean-return
+sonarjs/prefer-specific-assertions
+sonarjs/prefer-type-guard
+sonarjs/prefer-while
+sonarjs/production-debug
+sonarjs/pseudo-random
+sonarjs/public-static-readonly
+sonarjs/publicly-writable-directories
+sonarjs/redundant-type-aliases
+sonarjs/review-blockchain-mnemonic
+sonarjs/session-regeneration
+sonarjs/stable-tests
+sonarjs/stateful-regex
+sonarjs/strict-transport-security
+sonarjs/super-linear-regex
+sonarjs/synchronous-suite-callback
+sonarjs/table-header
+sonarjs/table-header-reference
+sonarjs/test-check-exception
+sonarjs/todo-tag
+sonarjs/unverified-certificate
+sonarjs/unverified-hostname
+sonarjs/updated-const-var
+sonarjs/updated-loop-counter
+sonarjs/use-type-alias
+sonarjs/weak-ssl
+sonarjs/x-powered-by
+sonarjs/xml-parser-xxe
+```
+
+## Removing The Adapter
+
+Replace the compatibility projection when the shared preset offers a TS7-only
+stack with equivalent native rules or compatible public plugin APIs. Keep the
+coverage inventory explicit when upgrading that preset; do not label a removed
+check as preserved merely because a similarly named rule exists.

package/PROVIDERS.md

@@ -19,7 +19,7 @@ network failure does not switch to a credential-based or external reader.
 
 | Provider | Native source | Scope and prerequisites | Reference |
 | --- | --- | --- | --- |
-| OpenCode Console / Go | Public OpenCode 2.2 `usage.limits` client API | Workspace identity, applicable USD budgets and percent-based Go windows; no Navigator server required | [Published client](https://cdn.jsdelivr.net/npm/@opencode/client@2.2.0/dist/promise/generated/client.d.ts), [Usage schema](https://github.com/anomalyco/opencode/blob/v2.2.0/packages/schema/src/usage-limits.ts) |
+| OpenCode Console / Go | Public OpenCode 2.2 `usage.limits` client API | Workspace identity, applicable USD budgets and percent-based Go windows; no Navigator server required | [Published client](https://cdn.jsdelivr.net/npm/@opencode/client@2.2.5/dist/promise/generated/client.d.ts), [Usage schema](https://github.com/anomalyco/opencode/blob/v2.2.5/packages/schema/src/usage-limits.ts) |
 | OpenAI / Codex ChatGPT | Codex app-server account/rate-limit RPC and manual reset credits | Verified account identity; ordinary `codex` quota is account-scoped even with null model metadata; separate model buckets need explicit association; native durations describe quota windows, not time until reset | [Codex protocol](https://github.com/openai/codex/tree/main/codex-rs/app-server-protocol) |
 | OpenAI API | HTTP request/token/project-token rate-limit headers | Actual response for the selected model/account; HTTP transport | [Rate limits](https://developers.openai.com/api/docs/guides/rate-limits) |
 | Anthropic API | Native response headers and organization rate-limits API | Per-model headers; configured limits need an eligible org/admin credential and explicit model association | [Rate limits API](https://platform.claude.com/docs/en/manage-claude/rate-limits-api) |
@@ -57,7 +57,7 @@ network failure does not switch to a credential-based or external reader.
 | Qwen / Alibaba Cloud / DashScope | Model/project/cloud quota and billing permissions; browser OAuth state is not a portable quota source | [Model Studio docs](https://www.alibabacloud.com/help/en/model-studio/) |
 | Hugging Face Inference Providers | Hub request quotas are not automatically inference-model quotas or inference credits | [Hub limits](https://huggingface.co/docs/hub/rate-limits), [Inference pricing](https://huggingface.co/docs/inference-providers/pricing) |
 | Cloudflare Workers AI | Account billing/analytics and model/resource limits; do not derive remaining free allowance from static daily examples | [Workers AI limits](https://developers.cloudflare.com/workers-ai/platform/limits/) |
-| OpenCode Console / Go boundaries | Native workspace budgets and Go allowance are supported, not an inferred wallet balance; other providers need their own documented source | [Host usage source](https://github.com/anomalyco/opencode/blob/v2.2.0/packages/core/src/usage-limits.ts) |
+| OpenCode Console / Go boundaries | Native workspace budgets and Go allowance are supported, not an inferred wallet balance; other providers need their own documented source | [Host usage source](https://github.com/anomalyco/opencode/blob/v2.2.5/packages/core/src/usage-limits.ts) |
 | Cursor | Consumer account usage requires a supported external API; no browser cookies or local credential extraction | [Cursor docs](https://docs.cursor.com/) |
 | Windsurf / Codeium | Consumer plan usage is separate from API response rate limits; no private account endpoints | [Windsurf docs](https://docs.windsurf.com/) |
 | Amp | Product credits require a supported external account API; no credential-file or cookie integrations | [Amp manual](https://ampcode.com/manual) |

package/README.md

@@ -29,6 +29,7 @@ See the [changelog](CHANGELOG.md) for release-by-release changes.
 - Show or hide each sidebar section independently
 - Hide the session title or its creation date independently in OpenCode 1.x without losing the settings control
 - Configure section visibility and order from the sidebar settings button
+- Open Settings → About for the running version, update checks, versioned release history, and editable GitHub Bug reports
 - Separate adjacent sections with quiet theme-aware dividers instead of background cards
 - Save visibility, expansion, and order globally or for the current worktree
 - Copy the selected scope's layout and MCP states as versioned JSON, then validate and preview imports
@@ -43,8 +44,8 @@ collapsed. Use `Save current layout as default` in sidebar settings to reuse the
 current visible/hidden, expanded/collapsed, and ordering states in new sessions.
 
 **Only the latest stable release in each major line is supported: OpenCode
-1.19.5 and 2.2.0.** Both have separate real-host checks. Older releases are not
-part of the supported compatibility matrix. The 2.2 integration uses OpenTUI 0.7
+1.19.5 and 2.2.5.** Both have separate real-host checks. Older releases are not
+part of the supported compatibility matrix. The 2.2 integration uses OpenTUI 0.8
 and public host caches, events, keymap layers, and client APIs while retaining
 the separate 1.x adapter. See [Host API boundaries](HOST_API.md) for remaining
 capability gaps and removal conditions. On OpenCode 2, Navigator reads the same native Todo history as
@@ -196,8 +197,22 @@ OpenCode 2.x CLI plugins are global terminal settings; there is no project-local
 plugin overrides are required. OpenCode validates `cli.json` strictly, so keep it
 within the linked schema and restart OpenCode after changing it.
 
-OpenCode 2.1's built-in Todo tool is opt-in. Enable it in the OpenCode server
-configuration used by that host, then restart OpenCode:
+OpenCode 2's built-in Todo tool is opt-in. When its effective configuration
+disables the tool, Navigator offers **Enable Todo…** in the section and
+**Enable native Todo** in the command palette. Choose an existing discovered
+server configuration file, review `experimental.todo → true`, then confirm
+**Enable Todo**. Cancel and Escape preserve the file. Navigator retains JSONC
+comments, formatting and unrelated settings, and checks for changed files,
+configuration sources, sessions and workspaces before writing.
+
+The check uses the host configuration, not the presence or absence of tasks.
+An enabled empty list therefore says **No tasks yet** without another enable
+offer. Configuration read failures have their own Retry action. Remote file
+operations stay on the connected server; no model or Todo mutation is used for
+setup. Refresh or restart OpenCode if a saved flag has not yet been applied.
+See [Host API boundaries](HOST_API.md) for precedence and conditional-write limits.
+
+Alternatively, enable the tool manually in the server configuration used by that host:
 
 ```json
 {
@@ -215,6 +230,10 @@ completed list visible; a completed write with an empty array clears it.
 Native tasks have `content` and one of `pending`, `in_progress`, `completed`, or
 `cancelled`; priorities remain unavailable in OpenCode 2's native schema.
 
+![Disabled native Todo offers enablement](screenshots/84-native-todo-disabled.png)
+
+![Review the server configuration change before enabling Todo](screenshots/86-native-todo-enable-preview.png)
+
 The optional **server** half of Navigator is used for provider-native quotas and
 read-only access to the previous Navigator Todo archive. Add it to the server
 configuration only when those integrations are needed:
@@ -348,9 +367,13 @@ opencode
 OpenCode reads TUI configuration at startup. Restart it after changing the
 plugin or `tui.json`.
 
-On first launch, a seven-step setup wizard introduces monitoring, Search Everything,
-Skills, Quick Actions, LSP, MCP controls, presets, and workspace customization
-before letting you choose which sections to show. The guide is shown once and can be opened again
+On first launch, a seven-step setup wizard introduces monitoring and native Todo
+enablement, provider/account limits, Search Everything and Skills, Actions and
+private toolbar pins, host-supported language tools, MCP, and customization.
+It includes About, release history and Bug reports before the final section picker.
+Descriptions match each host's permissions/LSP capabilities. Long content and
+section choices scroll with the mouse or PageUp/PageDown while headings and
+Back/Next/Finish stay visible. The guide is shown once and can be opened again
 later from the sidebar settings button. The settings dialog also selects global
 or current-worktree scope, manages named layout presets, and controls section
 order, MCP state persistence, icon style, and the sidebar shortcuts without
@@ -358,6 +381,8 @@ a restart. Settings are grouped into tabs; use `Tab` and `Shift+Tab` to switch
 tabs. In the Sections tab, use `Left`/`Right` or `Shift+Up`/`Shift+Down` to
 reorder the selected section.
 
+![Setup navigation remains visible in a short terminal](screenshots/94-setup-short.png)
+
 The Sections tab combines visibility, ordering, and the number of visible items
 for each section. Click `Items: All` / `Items: N`, or press `L` on the selected
 section, to edit its item limit. Enter toggles visibility; the arrow controls
@@ -394,16 +419,30 @@ Choose a base icon in the searchable picker, then select **Pin to toolbar**.
 The manager lets you change icons, move buttons, or unpin them. Cancelling the
 picker returns to the draft; cancelling the draft discards its changes.
 
+For each button, **Icons and text…** lets you choose **zero to three ordered icons**
+and an optional custom single-line label. Use **Base icons…** to add, replace or
+remove icons, and **Text…** for the label. Zero icons produces a text-only button;
+an entirely empty appearance cannot be saved. Labels accept up to 128 characters
+and are clipped to the available cells without overwriting the rounded ends.
+State-specific icon groups retain the existing per-state choices. Nested edits
+remain drafts until the final **Pin to toolbar** or **Save** action.
+
 Where the host exposes a state, the same button can use a different icon for each
 state: auto-approve On/Off on OpenCode 1.x, and Idle/Compacting on OpenCode 2.x.
 The 2.x permissions button opens host Settings and uses its base icon. Hover or
 keyboard focus shows the button's name, observed state, or unavailable reason.
+The hint uses the existing gap beneath the toolbar, so appearing or disappearing
+does not move Limits or any other section. Default single-icon buttons stay
+centered in uniform three-cell controls in both Nerd Font and Text modes.
 Skill buttons retain confirmation and trust settings; a missing or ambiguous
 source stays pinned but cannot run.
 
 **Behavior → Toolbar overflow** switches between one row with a **More** menu
 (the default) and wrapping rows. Left/Right moves along a row; Up/Down moves
 between rows. The setting follows Global/Worktree scope and portable defaults.
+Overflow uses actual bounded button widths. The largest configured state appearance
+reserves the button's width so changing state does not reshuffle the toolbar.
+Default single-icon buttons remain three cells wide.
 Pins, their order, icons, and exact Skill sources are private user-wide preferences
 and are excluded from portable exports. Use **Reload settings from file** in other
 running sessions after saving changes in another instance.
@@ -412,6 +451,10 @@ running sessions after saving changes in another instance.
 
 ![Searchable toolbar icon picker](https://raw.githubusercontent.com/St1ggy/opencode-navigator/main/screenshots/57-toolbar-icon-picker.png)
 
+![Toolbar buttons with multiple icons and optional text](screenshots/81-toolbar-icons-and-text.png)
+
+![Toolbar appearance configuration](screenshots/83-toolbar-appearance.png)
+
 In OpenCode 1.x, Navigator saves changes to the auto-approve mode as a user-wide
 default, including changes made through OpenCode's own command palette. Set the
 default under **Navigator Settings → Behavior → Default auto-approve permissions**;
@@ -421,6 +464,50 @@ dialog for the current session and `session.permissions` in the user-wide
 `cli.json` (`"prompt"` or `"autoaccept"`) for its startup default. Restart
 OpenCode after changing `cli.json`.
 
+### About, release history, and support
+
+Open **Navigator Settings → About** with the settings control or `Ctrl+,`.
+The tab shows the running Navigator and OpenCode versions, the last update-check
+result, and **Check for updates**. A failed check is reported as a failure rather
+than an up-to-date result. **Update Navigator…** uses the same confirmation,
+installation method/scope, stale-target guards and restart guidance as the footer
+and Navigator shortcuts.
+
+**Changelog by version…** browses the `CHANGELOG.md` shipped with the plugin.
+Choose a version to read its scrollable notes; Escape returns to the selected
+version and then to About. Technical-only versions have an explicit empty state.
+Manual browsing does not consume or reset the one-time upgrade notes shown after
+an update.
+
+**Report a bug…** opens an editable title and Markdown body. The visible default
+context contains software versions, platform and runtime only. Navigator does
+not collect chat, source, workspace paths, logs or credentials for the report.
+
+- **Send to GitHub…** uses an installed, already authenticated [GitHub CLI](https://cli.github.com/)
+  with support for `gh issue create --type`. A separate preview confirms the
+  repository, the real **Bug** issue type, title and body before sending. GitHub
+  credentials stay with `gh`, never in Navigator preferences.
+- **Open in browser** opens the same draft in the repository's Bug issue form,
+  independently of CLI installation or authentication. Large reports use an
+  explicit **Copy report & open browser** action; browser-launch failures offer
+  a copyable link without discarding the draft.
+- A partial result retains its issue URL. An uncertain outcome opens the issues
+  list for review and requires an explicit **Retry after checking GitHub** before
+  another confirmed send. Navigator never automatically retries issue creation.
+
+Enter inserts a newline in the body; Tab moves between fields and actions, and
+`Ctrl+Enter` opens the send preview. Escape/Cancel returns to the previous screen
+with the draft retained for the current Settings flow. Reports are not saved in
+private preferences.
+
+Quick Actions also keep their mounted rows while ordinary prompt typing updates
+the host's command state. Live labels, availability and real source updates still
+refresh immediately.
+
+![About with versions and update status](screenshots/67-settings-about.png)
+
+![Bug report preview before sending](screenshots/74-bug-report-confirmation.png)
+
 ## Limits: provider quotas and banked resets
 
 Navigator keeps subscription limits separate from OpenCode's session token and
@@ -478,7 +565,7 @@ REST reads use a short in-memory cache; Refresh bypasses it. Observed headers ol
 than two minutes are marked stale instead of presented as current remaining quota.
 
 Navigator shares the host's Solid/OpenTUI runtime. Development and CI use Bun 1.4.4
-and Node 26.12.1; OpenTUI 0.7's supported Node path starts at 26.4.0. A confirmed
+and Node 26.12.1; OpenTUI 0.8's supported Node path starts at 26.4.0. A confirmed
 pinned-snapshot update verifies its target with supported Bun (at least 1.3.14)
 or Node before switching the wrapper. If neither is available, the running snapshot
 is preserved with guidance; the updater does not install a runtime globally.
@@ -887,7 +974,8 @@ session or workspace dismisses the entire search dialog chain.
 
 ## Scripts
 
-Development requires Bun 1.4.2 and Node.js 24.16 or newer. Install dependencies with
+Development uses Bun 1.4.4 and stable TypeScript 7. Standalone Node/OpenTUI paths
+require Node.js 26.4 or newer; CI pins Node 26.12.1. Install dependencies with
 `bun install --frozen-lockfile`.
 
 Oxlint uses the `solid-ox` preset from
@@ -896,6 +984,9 @@ Oxlint uses the `solid-ox` preset from
 OpenTUI callbacks, SDK compatibility, and test fixtures. Type-aware analysis uses
 `oxlint-tsgolint`; `tsconfig.lint.json` covers application code, tests, build scripts,
 and configuration files. Formatter exclusions are maintained in `oxfmt.config.ts`.
+The resolved dependency tree contains TS7 only. The approved removal of
+incompatible SonarJS checks and native replacements is documented in
+[Lint coverage](LINT_COVERAGE.md); compatible Solid and other JS checks remain.
 
 ```sh
 bun run test

package/dist/chunk-fd7394y1.js

@@ -0,0 +1,17 @@
+function versionParts(value){const match=/^v?(\d+)\.(\d+)\.(\d+)(?:-([^+]+))?/.exec(value)
+return match?{numbers:match.slice(1,4).map(Number),prerelease:match[4]||undefined}:undefined
+}
+function isNewerVersion(latest,current){const next=versionParts(latest)
+const installed=versionParts(current)
+if(!next||!installed)
+return false
+for(let index=0;index<3; index++){if(next.numbers[index]!==installed.numbers[index])
+return next.numbers[index]>installed.numbers[index]
+}
+return installed.prerelease!==undefined&&next.prerelease===undefined
+}
+function isSameMajorVersion(left,right){const first=versionParts(left)
+const second=versionParts(right)
+return Boolean(first&&second&&first.numbers[0]===second.numbers[0])
+}
+export{isNewerVersion,isSameMajorVersion}

package/dist/chunk-pwa1wzer.js

@@ -0,0 +1,22 @@
+import {isNewerVersion
+} from "./chunk-fd7394y1.js";
+function parseChangelog2(source){const entries=[]
+let entry
+for(const line of source.split(/\r?\n/)){const heading=/^## \[(\d+\.\d+\.\d+(?:-[\w.-]+)?)\]/.exec(line)
+if(heading){entry={version:heading[1],changes:[]}
+entries.push(entry)
+} else if(line.startsWith("## "))
+entry=undefined
+else if(entry&&line.startsWith("- "))
+entry.changes.push(line.slice(2))
+}
+return entries
+}
+function changesSince2(source,previous,current){return parseChangelog2(source).filter((entry)=>entry.changes.length>0&&isNewerVersion(entry.version,previous)&&!isNewerVersion(entry.version,current))
+}
+async function readBundledChangelog2(){const packaged=Bun.file(new URL("../CHANGELOG.md",import.meta.url))
+if(await packaged.exists())
+return packaged.text()
+return Bun.file(new URL("../../../../CHANGELOG.md",import.meta.url)).text()
+}
+export{parseChangelog2,changesSince2,readBundledChangelog2}