opencode-navigator 0.24.0 → 0.26.0

package/CHANGELOG.md

@@ -1,5 +1,15 @@
 # Changelog
 
+## [0.26.0] - 2026-11-06
+
+- Prevent background retries from accumulating cancellation listeners and preferences loading from waiting indefinitely on recovery markers.
+- Show exact active Subagent durations from OpenCode 2's native execution start time, preserving the observation fallback when timing is unavailable. Keep interrupted executions marked as cancelled in recent history.
+
+## [0.25.0] - 2026-10-31
+
+- Offer Enable Todo when OpenCode 2's native tool is disabled, with an existing server-config picker, exact change preview and separate confirmation. Preserve unrelated JSONC content and refuse stale targets; distinguish disabled Todo from an enabled empty list.
+- Update the seven-slide setup wizard for native Todo enablement, provider/account limits, multi-icon or text-only toolbar pins, About/changelog and Bug reports. Describe each host's real permissions/LSP capabilities and keep navigation visible while short-terminal content scrolls.
+
 ## [0.24.0] - 2026-10-31
 
 - Support the latest stable OpenCode 1.19.5 and 2.2.5 releases, preserving both host adapters and existing sidebar behavior.

package/HOST_API.md

@@ -9,9 +9,9 @@ define the boundary; internal host components are not plugin APIs.
 | Capability | OpenCode 1.19.5 | OpenCode 2.2.5 |
 | --- | --- | --- |
 | Todo | Supported host Todo source/events | Public message cache, completed `todowrite` and revert boundary |
-| Skills | Host discovery and prompt insertion | Native Skill cache and `session.skill` with exact ID |
-| MCP | Host status and connection API | Native cache, sync/invalidate and connect/disconnect |
-| Subagents | Supported child/status API and events | Native session cache/status and typed execution events |
+| Skills | Host discovery and prompt insertion | Native Skill cache and `experimental.session.skill` with exact ID |
+| MCP | Host status and connection API | Native cache, sync/invalidate and `experimental.mcp.connect/disconnect` |
+| Subagents | Supported child/status API and events | Native session cache/status, execution start time and typed execution events |
 | Commands | Public keymap | Public owned layers, targets, priorities, modes, discovery and dispatch |
 | Dialogs/toasts | Public dialog components and mounting | Public show/prompt/confirm/set/clear and toast |
 | Model/variant | Saved session model and host pickers | Reactive prompt model, variant API and host pickers |
@@ -31,9 +31,10 @@ justify bypassing a native API.
 | Bug-report transport and external browser launch | Neither supported public TUI contract provides GitHub issue creation or an external browser opener. Direct sending uses the user's authenticated `gh` without reading credential files; a `type: Bug` repository form handles browser reports. Bounded argv-based OS launch has a visible link/clipboard fallback on remote or headless hosts. | Equivalent public host issue/browser APIs preserving authentication ownership, editable draft, real issue type and confirmation semantics. |
 | Literal Ctrl+, hook on 2.x | Public plugin bindings are strings; the comma expander splits literal commas into alternatives. The named parser does not normalize `comma` to the actual comma event. Dispatch still uses the native command API. | A documented literal-comma binding passing the real Settings smoke. |
 | Subagent child discovery | Published TUI Data caches sessions but has no complete children-sync operation. Initial/manual/reconnect discovery uses the public paginated API and syncs unknown IDs into the host cache. | A complete children-sync/query on the supplied public Data interface. |
-| Subagent observation history and retry details | Native status and cached transcript retry data are used first; recent runs, pre-observation clock markers, errors and unloaded-child retry detail remain observation history. | Equivalent public observed-run/retry history without loading every transcript. |
+| Subagent observation history and retry details | Native status, `SessionInfo.time.busy` and cached retry data are used first. Valid current-execution start times give exact active durations without a pre-observation marker; missing/invalid timing keeps the observed fallback. Recent runs, errors and unloaded-child retry details remain observation history. The prior execution's `idle`/`outcome` never completes a currently running execution. | Equivalent public observed-run/retry history without loading every transcript. |
 | Read-only Todo projection | Native completed tool calls and revert are public; the host's `sessionTodos` helper is not exported. No direct CRUD/priority API exists. | A public equivalent projection; editing also requires an explicitly selected interaction and supported API. |
-| Console/Go request lifecycle and projection | `client.usage.limits` is public, but the internal usage cache and budget selectors are not in published Plugin Context. Workspace IDs are not provider account IDs. | Equivalent public cache and selector on the plugin interface. |
+| Native Todo enablement | `config.get` exposes ordered sources, but `experimental.config.update` supports only shell. The setup feature previews and confirms a JSONC leaf edit in an existing discovered source through public server file APIs. File reads are location-confined, so selected-file IO is routed to its server-side parent; the original session/location remains the stale-target guard. Reads immediately before writes reject changed previews, and readback verifies the file and effective flag. The public write API has no CAS, so this is not an atomic transaction against concurrent external writers; uncertain outcomes require Refresh before retry. No model, shell or Todo event is used. | A public Todo config patch API preserving source precedence, unrelated JSONC content and conditional-write semantics. |
+| Console/Go request lifecycle and projection | `client.experimental.usage.limits` is public, but the internal usage cache and budget selectors are not in published Plugin Context. Workspace IDs are not provider account IDs. | Equivalent public cache and selector on the plugin interface. |
 | External quotas / reset credits | Console/Go is not a universal provider API and has no Codex reset-credit consume operation. Sources stay documented, account-bound and portable. Native auth/request errors never enable a bypass reader. | Host APIs matching provider/account/units/resets and idempotent consume semantics. |
 | Pinned-file snapshot installer | Native package updates do not implement the recognized versioned wrapper/staging layout. Preserve installation source and scope. | A public atomic file-snapshot update API with equivalent verification. |
 | Corner masks and product UI | Multiline shape, three-cell controls, filters, groups, presets and pins are product features. Paint hooks only draw; scroll restoration runs outside paint. | Equivalent public primitives preserving geometry, behavior and fallback mode. |
@@ -54,7 +55,7 @@ exercise migration only; they do not extend the supported host matrix.
 The published 2.2.5 TUI context, plugin, index and Solid declarations are identical
 to 2.2.0. OpenTUI 0.8 retains the drawing-only paint-hook contract; renderer tests,
 nested dialogs and frame-level typing probes run against the updated runtime.
-Development uses Bun 1.4.4 and OpenTUI 0.8, leaving Solid/OpenTUI external so the
+Development uses Bun 1.4.4 and OpenTUI 0.8.2, leaving Solid/OpenTUI external so the
 host owns its runtime. The 1.x host ships older runtime modules; its actual smoke
 must pass rather than injecting the development modules into it.
 
@@ -66,13 +67,22 @@ renderer/FFI support. CI and package verification use Node 26.12.1.
 ### Deliberate Compatibility Pins
 
 - `web-tree-sitter` stays at **0.25.10**, the exact peer required by OpenTUI
-  0.8.0. Upgrade it when the supported host runtime publishes a compatible peer
+  0.8.2. Upgrade it when the supported host runtime publishes a compatible peer
   contract; the independent 0.27 line is not a compatible substitution.
-- `typescript` stays at **6.0.3**, the latest compatible compiler for the shared
-  linter stack. TypeScript 7.0.2 type-checks Navigator, but SonarJS/`ts-api-utils`
-  fails while loading its missing JavaScript compiler API. Upgrade when those
-  consumers support the new compiler distribution; do not disable their rules
-  to make an incompatible upgrade pass.
+- `typescript` is **6.0.3**, selected to match the complete published
+  `@st1ggy/linter-config` **10.0.0** preset. SonarJS and typescript-eslint JS
+  plugins remain enabled without the former TS7 projection or override.
+  [Lint coverage](LINT_COVERAGE.md) records the current setup and historical exclusions.
+- Oxlint **1.90.0**, Oxfmt **0.75.0** and oxlint-tsgolint **7.0.2005** match the
+  preset's exact peer versions. Advance them when the preset supports newer engines.
+- OpenTUI's transitive `bun-ffi-structs` **0.3.1** declares the outdated compiler
+  peer `typescript: ^5`. A root-only Bun metadata patch expands it to `^5 || ^6`;
+  no runtime bytes or declarations change. Strict declaration compilation with
+  library checks enabled, packing regressions and the resolved compiler graph
+  verify the selected TS6 use. Remove the patch when upstream accepts TS6.
+  Bun patches apply only in this repository, not transitively in consumer projects
+  or the separately generated snapshot runtime manifest. Those installations may
+  still report the upstream peer warning; this is not an upstream fix.
 - Bun remains pinned at **1.4.4**, the current stable release. Direct dependencies
   otherwise use their latest compatible stable releases; transitive updates stay
   within upstream ranges. Runtime peers remain host-owned and are not bundled.

package/LINT_COVERAGE.md

@@ -0,0 +1,199 @@
+# Lint Coverage
+
+Project type checking uses stable TypeScript 6.0.3, matching the compiler API
+used by the published shared preset. The user selected this compatibility-first
+setup instead of extending the previous TypeScript 7 coverage exclusions.
+
+Oxlint uses `@st1ggy/linter-config/solid-ox` with type-aware analysis. Oxfmt uses
+`@st1ggy/linter-config/oxfmt-common`. The version 10 preset is extended directly,
+including its SonarJS and typescript-eslint JS plugins. No compiler-compatibility
+projection filters its rules. Deliberate project exceptions remain documented
+beside their individual settings in `oxlint.config.ts`.
+
+## Preserved Checks
+
+- Native ESLint, TypeScript, import and Unicorn rules remain enabled.
+- All published Solid, ESLint-core, import-x, stylistic, Unicorn, SonarJS and
+  typescript-eslint JS plugins remain enabled.
+- Promise handling and strict equality follow the version 10 preset.
+- Bun 1.4.4 can return undefined from `rejects`/`resolves` matchers for already
+  settled promises. Tests normalize matcher results through `Promise.resolve`
+  before awaiting, preserving pending assertions and satisfying both the native
+  thenable rule and SonarJS assertion handling without disabling either rule.
+- Oxfmt still checks formatting separately. This migration does not configure
+  Stylelint for the CSS-free TUI project.
+
+## Historical TypeScript 7 Coverage Exclusions
+
+Navigator 0.25.0 used native substitutions for six SonarJS rules and excluded
+the following 155 rule names from preset 8 for TS7 compatibility. This list is
+historical, not the current configuration. Preset 10 now supplies its complete
+rule set, subject only to the documented project-specific exceptions.
+
+Native cyclomatic complexity was not considered a replacement for SonarJS
+cognitive complexity. The compiler-driven exclusions are no longer applied.
+
+```text
+sonarjs/assertions-in-test-cases
+sonarjs/async-test-assertions
+sonarjs/aws-apigateway-public-api
+sonarjs/aws-ec2-rds-dms-public
+sonarjs/aws-ec2-unencrypted-ebs-volume
+sonarjs/aws-efs-unencrypted
+sonarjs/aws-iam-all-privileges
+sonarjs/aws-iam-privilege-escalation
+sonarjs/aws-iam-public-access
+sonarjs/aws-opensearchservice-domain
+sonarjs/aws-rds-unencrypted-databases
+sonarjs/aws-restricted-ip-admin-access
+sonarjs/aws-s3-bucket-granted-access
+sonarjs/aws-s3-bucket-insecure-http
+sonarjs/aws-s3-bucket-public-access
+sonarjs/aws-s3-bucket-versioning
+sonarjs/aws-sagemaker-unencrypted-notebook
+sonarjs/aws-sns-unencrypted-topics
+sonarjs/aws-sqs-unencrypted-queue
+sonarjs/call-argument-line
+sonarjs/chai-determinate-assertion
+sonarjs/class-name
+sonarjs/code-eval
+sonarjs/cognitive-complexity
+sonarjs/comma-or-logical-or-case
+sonarjs/constructor-for-side-effects
+sonarjs/content-length
+sonarjs/content-security-policy
+sonarjs/cookie-no-httponly
+sonarjs/cors
+sonarjs/csrf
+sonarjs/disabled-timeout
+sonarjs/dynamically-constructed-templates
+sonarjs/encryption-secure-mode
+sonarjs/explicit-test-skip
+sonarjs/file-permissions
+sonarjs/file-uploads
+sonarjs/fixme-tag
+sonarjs/for-loop-increment-sign
+sonarjs/function-inside-loop
+sonarjs/future-reserved-words
+sonarjs/generator-without-yield
+sonarjs/hardcoded-secret-signatures
+sonarjs/hashing
+sonarjs/hooks-before-test-cases
+sonarjs/inconsistent-function-call
+sonarjs/insecure-cookie
+sonarjs/insecure-jwt-token
+sonarjs/inverted-assertion-arguments
+sonarjs/label-position
+sonarjs/link-with-target-blank
+sonarjs/max-switch-cases
+sonarjs/memoize-cache-key
+sonarjs/misplaced-loop-counter
+sonarjs/no-all-duplicated-branches
+sonarjs/no-angular-bypass-sanitization
+sonarjs/no-case-label-in-switch
+sonarjs/no-clear-text-protocols
+sonarjs/no-code-after-done
+sonarjs/no-dead-store
+sonarjs/no-debug-commands-in-ui-tests
+sonarjs/no-default-utility-imports
+sonarjs/no-duplicate-in-composite
+sonarjs/no-duplicate-test-title
+sonarjs/no-duplicated-branches
+sonarjs/no-element-overwrite
+sonarjs/no-empty-collection
+sonarjs/no-empty-test-file
+sonarjs/no-empty-test-title
+sonarjs/no-equals-in-for-termination
+sonarjs/no-exclusive-tests
+sonarjs/no-extra-arguments
+sonarjs/no-fixed-wait-in-tests
+sonarjs/no-floating-point-equality
+sonarjs/no-forced-browser-interaction
+sonarjs/no-global-this
+sonarjs/no-globals-shadowing
+sonarjs/no-gratuitous-expressions
+sonarjs/no-hardcoded-ip
+sonarjs/no-hardcoded-passwords
+sonarjs/no-hardcoded-secrets
+sonarjs/no-hook-setter-in-body
+sonarjs/no-identical-conditions
+sonarjs/no-identical-expressions
+sonarjs/no-identical-functions
+sonarjs/no-ignored-exceptions
+sonarjs/no-implicit-global
+sonarjs/no-incomplete-assertions
+sonarjs/no-internal-api-use
+sonarjs/no-interpolation-in-inline-snapshots
+sonarjs/no-invariant-returns
+sonarjs/no-inverted-boolean-check
+sonarjs/no-literal-call
+sonarjs/no-mime-sniff
+sonarjs/no-mixed-completion-style
+sonarjs/no-nested-assignment
+sonarjs/no-nested-conditional
+sonarjs/no-nested-functions
+sonarjs/no-nested-template-literals
+sonarjs/no-os-command-from-path
+sonarjs/no-parameter-reassignment
+sonarjs/no-primitive-wrappers
+sonarjs/no-redundant-assignments
+sonarjs/no-redundant-boolean
+sonarjs/no-redundant-jump
+sonarjs/no-referrer-policy
+sonarjs/no-same-argument-assert
+sonarjs/no-same-line-conditional
+sonarjs/no-session-cookies-on-static-assets
+sonarjs/no-skipped-tests
+sonarjs/no-table-as-layout
+sonarjs/no-trivial-assertions
+sonarjs/no-unenclosed-multiline-block
+sonarjs/no-uniq-key
+sonarjs/no-unthrown-error
+sonarjs/no-unused-collection
+sonarjs/no-use-of-empty-return-value
+sonarjs/no-useless-increment
+sonarjs/no-useless-react-setstate
+sonarjs/no-weak-cipher
+sonarjs/no-weak-keys
+sonarjs/non-existent-operator
+sonarjs/object-alt-content
+sonarjs/parameterized-tests
+sonarjs/prefer-default-last
+sonarjs/prefer-native-lodash-alternative
+sonarjs/prefer-promise-shorthand
+sonarjs/prefer-single-boolean-return
+sonarjs/prefer-specific-assertions
+sonarjs/prefer-type-guard
+sonarjs/prefer-while
+sonarjs/production-debug
+sonarjs/pseudo-random
+sonarjs/public-static-readonly
+sonarjs/publicly-writable-directories
+sonarjs/redundant-type-aliases
+sonarjs/review-blockchain-mnemonic
+sonarjs/session-regeneration
+sonarjs/stable-tests
+sonarjs/stateful-regex
+sonarjs/strict-transport-security
+sonarjs/super-linear-regex
+sonarjs/synchronous-suite-callback
+sonarjs/table-header
+sonarjs/table-header-reference
+sonarjs/test-check-exception
+sonarjs/todo-tag
+sonarjs/unverified-certificate
+sonarjs/unverified-hostname
+sonarjs/updated-const-var
+sonarjs/updated-loop-counter
+sonarjs/use-type-alias
+sonarjs/weak-ssl
+sonarjs/x-powered-by
+sonarjs/xml-parser-xxe
+```
+
+## Future Compiler Upgrades
+
+The compatibility projection has been removed. Reconsider TypeScript 7 only when
+the complete published lint stack supports its compiler API. Keep coverage
+explicit; do not label a removed check as preserved merely because a similarly
+named rule exists.

package/README.md

@@ -197,8 +197,22 @@ OpenCode 2.x CLI plugins are global terminal settings; there is no project-local
 plugin overrides are required. OpenCode validates `cli.json` strictly, so keep it
 within the linked schema and restart OpenCode after changing it.
 
-OpenCode 2.1's built-in Todo tool is opt-in. Enable it in the OpenCode server
-configuration used by that host, then restart OpenCode:
+OpenCode 2's built-in Todo tool is opt-in. When its effective configuration
+disables the tool, Navigator offers **Enable Todo…** in the section and
+**Enable native Todo** in the command palette. Choose an existing discovered
+server configuration file, review `experimental.todo → true`, then confirm
+**Enable Todo**. Cancel and Escape preserve the file. Navigator retains JSONC
+comments, formatting and unrelated settings, and checks for changed files,
+configuration sources, sessions and workspaces before writing.
+
+The check uses the host configuration, not the presence or absence of tasks.
+An enabled empty list therefore says **No tasks yet** without another enable
+offer. Configuration read failures have their own Retry action. Remote file
+operations stay on the connected server; no model or Todo mutation is used for
+setup. Refresh or restart OpenCode if a saved flag has not yet been applied.
+See [Host API boundaries](HOST_API.md) for precedence and conditional-write limits.
+
+Alternatively, enable the tool manually in the server configuration used by that host:
 
 ```json
 {
@@ -216,6 +230,10 @@ completed list visible; a completed write with an empty array clears it.
 Native tasks have `content` and one of `pending`, `in_progress`, `completed`, or
 `cancelled`; priorities remain unavailable in OpenCode 2's native schema.
 
+![Disabled native Todo offers enablement](screenshots/84-native-todo-disabled.png)
+
+![Review the server configuration change before enabling Todo](screenshots/86-native-todo-enable-preview.png)
+
 The optional **server** half of Navigator is used for provider-native quotas and
 read-only access to the previous Navigator Todo archive. Add it to the server
 configuration only when those integrations are needed:
@@ -349,9 +367,13 @@ opencode
 OpenCode reads TUI configuration at startup. Restart it after changing the
 plugin or `tui.json`.
 
-On first launch, a seven-step setup wizard introduces monitoring, Search Everything,
-Skills, Quick Actions, LSP, MCP controls, presets, and workspace customization
-before letting you choose which sections to show. The guide is shown once and can be opened again
+On first launch, a seven-step setup wizard introduces monitoring and native Todo
+enablement, provider/account limits, Search Everything and Skills, Actions and
+private toolbar pins, host-supported language tools, MCP, and customization.
+It includes About, release history and Bug reports before the final section picker.
+Descriptions match each host's permissions/LSP capabilities. Long content and
+section choices scroll with the mouse or PageUp/PageDown while headings and
+Back/Next/Finish stay visible. The guide is shown once and can be opened again
 later from the sidebar settings button. The settings dialog also selects global
 or current-worktree scope, manages named layout presets, and controls section
 order, MCP state persistence, icon style, and the sidebar shortcuts without
@@ -359,6 +381,8 @@ a restart. Settings are grouped into tabs; use `Tab` and `Shift+Tab` to switch
 tabs. In the Sections tab, use `Left`/`Right` or `Shift+Up`/`Shift+Down` to
 reorder the selected section.
 
+![Setup navigation remains visible in a short terminal](screenshots/94-setup-short.png)
+
 The Sections tab combines visibility, ordering, and the number of visible items
 for each section. Click `Items: All` / `Items: N`, or press `L` on the selected
 section, to edit its item limit. Enter toggles visibility; the arrow controls
@@ -912,9 +936,11 @@ tasks before pending tasks. Finished contains separate Completed and Cancelled
 groups. The selected view is temporary and resets to All when changing sessions.
 The header always reports completed tasks against the full task count.
 
-Subagents show observed run duration, retry countdowns, and execution errors. An
-already-running child discovered by the sidebar uses a clock icon (`~` in Text
-fallback) because its exact start time is unknown. Recent keeps the last 10 observed
+Subagents show run duration, retry countdowns, and execution errors. OpenCode 2
+uses its public execution-start timestamp for exact active durations, including
+children already running when Navigator opens. Missing or invalid native timing
+and OpenCode 1 retain observed durations. An already-running child whose exact
+start is unknown has a clock icon (`~` in Text fallback). Recent keeps the last 10 observed
 finished runs per parent session in memory across navigation, until OpenCode exits.
 An idle transition is labelled Finished, not a guarantee of successful task
 completion; errors and cancellations retain their own labels. A worker timeout
@@ -950,7 +976,8 @@ session or workspace dismisses the entire search dialog chain.
 
 ## Scripts
 
-Development requires Bun 1.4.2 and Node.js 24.16 or newer. Install dependencies with
+Development uses Bun 1.4.4 and stable TypeScript 6.0.3. Standalone Node/OpenTUI paths
+require Node.js 26.4 or newer; CI pins Node 26.12.1. Install dependencies with
 `bun install --frozen-lockfile`.
 
 Oxlint uses the `solid-ox` preset from
@@ -959,6 +986,11 @@ Oxlint uses the `solid-ox` preset from
 OpenTUI callbacks, SDK compatibility, and test fixtures. Type-aware analysis uses
 `oxlint-tsgolint`; `tsconfig.lint.json` covers application code, tests, build scripts,
 and configuration files. Formatter exclusions are maintained in `oxfmt.config.ts`.
+The complete version 10 preset includes SonarJS and typescript-eslint checks;
+the former TS7 compatibility projection is removed. See [Lint coverage](LINT_COVERAGE.md)
+for current exceptions and historical exclusions. A tested root-only Bun metadata
+patch corrects the legacy TypeScript 5 peer in OpenTUI's FFI helper for this repo.
+Consumer installations retain upstream metadata; see [Host APIs](HOST_API.md).
 
 ```sh
 bun run test