opencode-navigator 0.27.3 → 0.27.5

package/CHANGELOG.md

@@ -1,5 +1,21 @@
 # Changelog
 
+## [0.27.5] - 2026-11-12
+
+- Show quota remaining and blue time-remaining scales in Limits, with live reset countdowns. Quota pace turns yellow, orange or red when the allowance is running ahead of the period; missing provider dates or durations stay explicit.
+- Show the available Banked Resets count and separate compact credit cards with icons, readable expiry and provider details on demand. Credit use still needs a separate confirmation.
+- Add native icons beside Desktop sidebar section titles, independently of their disclosure arrows.
+- Combine About's update check, update offer, installation progress and restart guidance in one stable control. Fix skipped exact-version checks and the historical plugin-ID lookup while preserving the installation source and configuration options.
+- Recognize ChatGPT token-sharing connections and allow an explicit Codex account link without treating the client ID as an account identity.
+- Preserve native confirmation results and externally opened dialogs when returning to Navigator in OpenCode 2.
+
+## [0.27.4] - 2026-11-12
+
+- Show banked-reset expiry progress in the terminal, with readable remaining time and explicit missing or invalid dates. Keep credit use separately confirmed.
+- Use native Desktop switches for individual MCP connections, whole groups and Search Everything results, with pending feedback and separate error information.
+- Split Desktop Settings into Layout, Behavior, Quick Actions, Skills, MCP, Presets and About categories. Keep scoped preferences, existing actions and unsaved drafts when switching categories.
+- Move between Desktop category buttons with Left/Right from the currently focused button, even when it is not the selected category.
+
 ## [0.27.3] - 2026-11-12
 
 - Keep the Desktop session title on its own full-width row in both the panel and floating mini-window, with readable wrapping instead of squeezing it between action labels.

package/HOST_API.md

@@ -67,6 +67,12 @@ icon. Those focused semantic controls remain plugin-owned, using the host theme'
 surface, text, focus and elevation tokens. Remove these fallbacks when equivalent
 public controls preserve their multiline, expanded/selected and progress semantics.
 
+Reset-credit cards are semantic list-item layouts with host-themed borders; the
+public facade has no generic card component. Their actions, detail disclosure and
+icons use public `Ui.Button` and `Ui.Icon`. Expiry progress keeps the existing
+provider-timestamp model and accessible progress semantics rather than implying
+that a missing date means unlimited credit lifetime.
+
 Desktop model and reasoning-effort selection belongs to the native chat controls.
 Navigator does not duplicate these selectors in its sidebar. Limits continue to
 follow the host's reactive selected model; the TUI retains its model/variant controls.
@@ -78,6 +84,16 @@ list row: the host requires it to render inside a menu. Section disclosure keeps
 `aria-expanded` on its semantic button and uses a native icon with fixed geometry.
 Revisit these wrappers when the host exposes equivalent accessible components.
 
+Desktop's Extensions page does have native pill tabs: the packaged 2.2.6 renderer
+uses its internal Tabs root, List, Trigger and Content components. They are not
+exported by the plugin UI facade. Navigator therefore composes its category
+navigation from public small neutral/ghost-muted Buttons, matching its Todo filters,
+without importing the private Tabs module or copying the host DOM. Settings panels
+mount on first visit and remain hidden rather than unmounting on category changes,
+preserving drafts. Settings search passes the public `SettingsPage.render.target`
+through to reveal the Behavior category for the registered entries. Replace this
+wrapper when public tabs support selection, keyboard navigation and retained panels.
+
 The native Todo popover has no public content slot. Composer pill contributions
 are adjacent pills, not extensions of native Todo, so Navigator cannot add search
 or tabs there through Desktop 2.2.6's public API. Its read-only Todo rows follow
@@ -163,6 +179,7 @@ justify bypassing a native API.
 | Console/Go request lifecycle and projection | `client.experimental.usage.limits` is public, but the internal usage cache and budget selectors are not in published Plugin Context. Workspace IDs are not provider account IDs. | Equivalent public cache and selector on the plugin interface. |
 | External quotas / reset credits | Console/Go is not a universal provider API and has no Codex reset-credit consume operation. Sources stay documented, account-bound and portable. Native auth/request errors never enable a bypass reader. | Host APIs matching provider/account/units/resets and idempotent consume semantics. |
 | Pinned-file snapshot installer | Native package updates do not implement the recognized versioned wrapper/staging layout. Preserve installation source and scope. | A public atomic file-snapshot update API with equivalent verification. |
+| Exact npm revision updates | Native `plugin.check`/`plugin.update` skip exact revisions. After a successful native check, query the public npm latest record; confirmed updates replace only the owning JSONC string, retaining options and scope. TUI uses its global `cli.json` first; server-owned entries use public server file APIs. Reject ambiguous owners, changed files, clients and locations. Server writes have no CAS: preflight checks and readback are safeguards, not an atomic transaction. A changed pin is prepared configuration, not evidence that the new runtime is loaded. | A native exact-revision update API preserving source, options, scope and stale-target protection. |
 | Corner masks and product UI | Multiline shape, three-cell controls, filters, groups, presets and pins are product features. Paint hooks only draw; scroll restoration runs outside paint. | Equivalent public primitives preserving geometry, behavior and fallback mode. |
 
 ## Unavailable Features

package/PROVIDERS.md

@@ -85,6 +85,10 @@ network failure does not switch to a credential-based or external reader.
 - OpenCode 2 metadata matching uses public provider/credential APIs and the built-in
   ChatGPT OAuth `metadata.accountID`. Account IDs are compared with Codex's own
   reported identity; a provider name or model-name similarity is not proof.
+- ChatGPT token-sharing OAuth is recognized, but its `metadata.clientID` is not an
+  account ID. Without `accountID`, explicitly confirm the Codex account link once
+  per connection. The displayed quotas belong to that Codex account, not a separately
+  verified token-sharing allowance.
 - A confirmation is saved once per connection, or per provider when the host has
   no connection API. Models do not need separate confirmations. Conflicting older
   model-specific records remain isolated until an explicit relink.

package/README.md

@@ -1,5 +1,17 @@
 # OpenCode Navigator
 
+[![GitHub Release](https://img.shields.io/github/v/release/St1ggy/opencode-navigator?display_name=tag&label=release)](https://github.com/St1ggy/opencode-navigator/releases/latest)
+[![CI: tests, builds, types, lint and host smokes](https://github.com/St1ggy/opencode-navigator/actions/workflows/ci.yml/badge.svg?branch=main&event=push)](https://github.com/St1ggy/opencode-navigator/actions/workflows/ci.yml)
+[![Publish](https://github.com/St1ggy/opencode-navigator/actions/workflows/publish.yml/badge.svg?event=release)](https://github.com/St1ggy/opencode-navigator/actions/workflows/publish.yml)
+[![License](https://img.shields.io/github/license/St1ggy/opencode-navigator)](LICENSE)
+
+[![OpenCode 1.x compatibility](https://img.shields.io/badge/OpenCode%201.x-1.19.5-4c8bf5)](#installation)
+[![OpenCode 2.x compatibility](https://img.shields.io/badge/OpenCode%202.x-2.2.6-4c8bf5)](#installation)
+[![Desktop experimental](https://img.shields.io/badge/Desktop-experimental-orange)](#experimental-opencode-desktop)
+[![Monthly npm downloads](https://img.shields.io/npm/dm/opencode-navigator?label=npm%20downloads%2Fmonth)](https://www.npmjs.com/package/opencode-navigator)
+
+[Unit coverage reports](https://github.com/St1ggy/opencode-navigator/actions/workflows/ci.yml)
+
 Search, navigate, and manage OpenCode sessions from the TUI, with an experimental
 OpenCode Desktop interface. Navigator combines
 Search Everything, task and subagent views, skills, MCP presets, and quick actions
@@ -309,9 +321,14 @@ contains independent TUI, server, RPC and GUI entries.
   Familiar actions use native icon buttons with tooltips and accessible names;
   account linking, Banked Resets and other ambiguous operations retain text.
 - **Navigator settings** opens native Settings with Global/Worktree scope,
-  section controls, groups, trust, presets, portable/project profiles, About,
-  release history and reviewed Bug reports. **Reload preferences** imports
+  categories for Layout, Behavior, Quick Actions, Skills, MCP, Presets and About.
+  Groups, trust, portable/project profiles, release history and reviewed Bug
+  reports remain available. Category changes preserve unsaved drafts; Left/Right
+  navigates the category buttons. **Reload preferences** imports
   changes from other local Navigator instances explicitly.
+- MCP connections use native switches for individual servers and whole groups,
+  including members hidden by filters. Pending operations disable duplicate changes;
+  connection errors remain available through a separate information action.
 - Reorder sections, Quick Actions, toolbar pins and button icons by dragging
   their handles. With the keyboard, focus a handle, press Space, use Up/Down,
   then press Space to drop or Escape to cancel. Icon changes remain drafts until saved.
@@ -330,6 +347,11 @@ contains independent TUI, server, RPC and GUI entries.
 - Provider quotas retain verified account scope. Local Codex access requires a
   verified same-machine connection; a remote session never borrows its credentials
   or private binding. Banked resets always require separate confirmation.
+  Both terminal and Desktop credit lists show provider-dated expiry progress and
+  readable remaining time. Missing or invalid dates never imply an unlimited lifetime.
+  Each credit has its own compact card with a status and review action. Desktop
+  provider messages expand under **Provider details**; the terminal keeps them in
+  the separate review step rather than repeating them throughout the list.
   Successful quota reads show only their update time above the data; account/model
   scope remains in the quota model rather than a persistent explanatory sentence.
   Model and reasoning-effort selection stays in the native chat controls, not
@@ -344,7 +366,7 @@ Linux ARM64 Desktop package on Xvfb. Native macOS/Windows, browser Web and multi
 live Desktop windows are not claimed as real-host verification targets. Local,
 remote and multi-consumer guards have separate synthetic contract tests.
 See [Host API boundaries](HOST_API.md) for the native command-palette limitation.
-The manual Prepare Release workflow generated and byte-verified all 31 GUI
+The manual Prepare Release workflow generates and byte-verifies the GUI
 captures using the real Desktop renderer on a virtual display. The terminal
 gallery above is rendered separately through Ghostty.
 
@@ -356,6 +378,10 @@ gallery above is rendered separately through Ghostty.
 
 ![Production update indicators with synthetic transfer and installation stages](screenshots/gui/31-desktop-update-stages.png)
 
+![Desktop Settings categories and scoped behavior controls](https://raw.githubusercontent.com/St1ggy/opencode-navigator/main/screenshots/gui/33-desktop-settings-behavior.png)
+
+![Native Desktop MCP connection switches and separate error information](https://raw.githubusercontent.com/St1ggy/opencode-navigator/main/screenshots/gui/32-desktop-mcp-switches.png)
+
 ![Desktop layout preview with a separate Apply action](screenshots/gui/07-desktop-layout-preview.png)
 
 See the [Desktop gallery](screenshots/README.md#experimental-desktop) for account
@@ -666,6 +692,17 @@ worktree scope. Hiding or collapsing it does not stop background refreshes, and
 does not grant permission to spend a reset credit. **Focus Limits** is also
 available from the command palette.
 
+Each quota window shows two scales: quota remaining and a blue time-remaining
+scale. The quota scale keeps its normal theme color while quota remaining is at
+least the remaining share of the period. It turns yellow below that pace, orange
+at a 15-percentage-point deficit, and red at 30 points. This comparison is a pace
+indicator, not a forecast. It requires a provider-supplied reset time and window
+duration; missing duration is shown as unknown rather than inferred from a label.
+The reset countdown updates locally without extra quota requests. An elapsed
+window stays due until a provider refresh confirms the next one. Native credit
+balances retain their units; the Banked Resets action shows its separate available
+reset-credit count.
+
 ![Codex quota windows and reset times](screenshots/39-provider-limits.png)
 
 ![Native Console workspace budgets](screenshots/63-native-workspace-budgets.png)
@@ -1105,14 +1142,34 @@ bun run check
 
 `bun run check` runs the TUI and browser-conditioned GUI tests, separate JSX
 typechecks, Oxlint, bundle-size guards, and Oxfmt. The unminified TUI bundle is
-limited to 360,000 bytes; the independent single-file GUI budget is 600,000 bytes
-(stage-10 measured baseline: about 554 kB). DOM accessibility checks apply only
+limited to 360,000 bytes; the independent single-file GUI budget is 620,000 bytes
+(two-scale quota presentation: about 612 kB). DOM accessibility checks apply only
 to GUI modules, never to terminal renderables.
 Font generation is a separate development task: `bun run font:build` and
 `bun run font:check` use `uv` and the pinned FontTools dependency. Users install
 the already generated font; Python and FontTools are not needed at runtime.
 CI checks that the bundled font matches its generator.
 
+### Coverage
+
+Run `bun run test:coverage` to measure the primary TUI and browser-conditioned
+GUI unit/render suites separately. LCOV reports are written to
+`coverage/tui/lcov.info` and `coverage/gui/lcov.info`; `coverage/summary.md` and
+`coverage/summary.json` report each suite and their unique source-line union.
+Shared lines count once and are covered when either suite executes them.
+
+This is coverage of executable `src/` lines loaded by those suites, not every
+source file in the repository. It excludes generated bundles, test fixtures,
+dependencies and packaged-host smoke runs. These Bun LCOV reports do not provide
+branch coverage. The separate host checks remain mandatory. Coverage is
+reporting-only; no minimum threshold or additional status gate is enabled.
+
+CI retains the reports for 14 days as the `unit-coverage` artifact and adds the
+line summary to the check job's summary on pushes, pull requests and submitted
+reviews. The coverage link above opens those CI runs; it is not a separate
+pass/fail or percentage badge. No external coverage account, upload token,
+OIDC permission or automated PR comment is needed.
+
 `bun run screenshots` builds a pinned Linux ARM64 image and captures the real TUI
 through Ghostty on Xvfb. The image includes the bundled corner font and a pinned
 JetBrainsMono Nerd Font; every displayed task, session, workspace, path, skill,
@@ -1152,3 +1209,13 @@ The workflow uses npm Trusted Publishing with provenance. Configure
 publisher in the package settings on npmjs.com before publishing a release.
 The new npm package needs its own trusted-publisher configuration; the old
 package's settings are not transferred by renaming the GitHub repository.
+
+## Star History
+
+<a href="https://www.star-history.com/?repos=St1ggy%2Fopencode-navigator&amp;type=date&amp;legend=top-left">
+  <picture>
+    <source media="(prefers-color-scheme: dark)" srcset="https://api.star-history.com/chart?repos=St1ggy/opencode-navigator&amp;type=date&amp;theme=dark&amp;legend=top-left" />
+    <source media="(prefers-color-scheme: light)" srcset="https://api.star-history.com/chart?repos=St1ggy/opencode-navigator&amp;type=date&amp;legend=top-left" />
+    <img alt="Star history for OpenCode Navigator" src="https://api.star-history.com/chart?repos=St1ggy/opencode-navigator&amp;type=date&amp;legend=top-left" width="800" />
+  </picture>
+</a>

package/dist/{chunk-fd7394y1.js → chunk-4rh7rb74.js}

@@ -14,4 +14,18 @@ function isSameMajorVersion(left,right){const first=versionParts(left)
 const second=versionParts(right)
 return Boolean(first&&second&&first.numbers[0]===second.numbers[0])
 }
-export{isNewerVersion,isSameMajorVersion}
+function parseChangelog2(source){const entries=[]
+let entry
+for(const line of source.split(/\r?\n/)){const heading=/^## \[(\d+\.\d+\.\d+(?:-[\w.-]+)?)\]/.exec(line)
+if(heading){entry={version:heading[1],changes:[]}
+entries.push(entry)
+} else if(line.startsWith("## "))
+entry=undefined
+else if(entry&&line.startsWith("- "))
+entry.changes.push(line.slice(2))
+}
+return entries
+}
+function changesSince2(source,previous,current){return parseChangelog2(source).filter((entry)=>entry.changes.length>0&&isNewerVersion(entry.version,previous)&&!isNewerVersion(entry.version,current))
+}
+export{isNewerVersion,isSameMajorVersion,parseChangelog2,changesSince2}

package/dist/chunk-sm9ej5ac.js

@@ -0,0 +1,6 @@
+async function readBundledChangelog2(){const packaged=Bun.file(new URL("../CHANGELOG.md",import.meta.url))
+if(await packaged.exists())
+return packaged.text()
+return Bun.file(new URL("../../../../CHANGELOG.md",import.meta.url)).text()
+}
+export{readBundledChangelog2}

package/dist/chunk-tq2z58v5.js

@@ -0,0 +1,23 @@
+function updateProgressView(progress){const labels={preparing:"Preparing",downloading:"Downloading",installing:"Downloading / installing",verifying:"Verifying"
+}
+const known=progress.total!==undefined&&Number.isFinite(progress.total)&&progress.total>0&&progress.received!==undefined&&Number.isFinite(progress.received)&&progress.received>=0
+const fraction=known?Math.min(1,progress.received / progress.total):undefined
+const label=fraction===undefined?labels[progress.phase]:`${labels[progress.phase]} ${Math.floor(fraction * 100)}%`
+return{label,fraction}}
+function navigatorUpdateAction(input){if(input.restart)
+return{kind:"restart",label:"Restart OpenCode",detail:typeof input.restart==="string"?`Load Navigator ${input.restart} after restarting`:"Restart to load the updated Navigator"
+}
+if(input.progress)
+return{kind:"waiting",label:updateProgressView(input.progress).label,detail:"Keep OpenCode open until this step finishes"
+}
+if(input.checking)
+return{kind:"waiting",label:"Checking for updates\u2026",detail:"Checking the published Navigator version"
+}
+if(input.busy)
+return{kind:"waiting",label:"Waiting for confirmation\u2026",detail:"No update starts before confirmation"
+}
+if(input.available)
+return{kind:"update",label:"Update Navigator\u2026",detail:input.latest?`Install ${input.latest}`:"Review and confirm the available update"
+}
+return{kind:"check",label:"Check for updates",detail:"Check the published Navigator version"}}
+export{navigatorUpdateAction}