From a0ee487f47c81eb90d6baf78bd78f69f070d45cc Mon Sep 17 00:00:00 2001
From: Ajay Krishnan <ajay@krishnan.ca>
Date: Tue, 18 Aug 2026 12:37:29 -0700
Subject: [PATCH] Record pending OpenCode 1.18.18 image

Allow public_ci rows that the upstream recorder already emits as pending,
and add v1.18.18 as an uncertified shared-client target. Certified alpha8
rows and consumer tuples stay as they are.
---
 manifests/image-matrix.json | 11 +++++++++
 manifests/upstream.json     | 12 +++++-----
 test/repository_test.rb     | 48 +++++++++++++++++++++++++------------
 3 files changed, 50 insertions(+), 21 deletions(-)

diff --git a/manifests/image-matrix.json b/manifests/image-matrix.json
index 087c357..6583b6c 100644
--- a/manifests/image-matrix.json
+++ b/manifests/image-matrix.json
@@ -102,6 +102,17 @@
         "full_text": "compat-ok",
         "llm_request_count": 1
       }
+    },
+    {
+      "id": "upstream-1.18.18-f3e00f8e25500150373c817e24b13f2f08e2ccd4cafd53dc3ad4827d47863b6f",
+      "version": "1.18.18",
+      "image": "ghcr.io/anomalyco/opencode@sha256:f3e00f8e25500150373c817e24b13f2f08e2ccd4cafd53dc3ad4827d47863b6f",
+      "tag_provenance": "ghcr.io/anomalyco/opencode:1.18.18",
+      "consumers": [],
+      "profiles": ["ruby-rest-sse"],
+      "required_consumer_profiles": [],
+      "certification_scope": "shared-client-contract-only",
+      "certification_status": "pending"
     }
   ],
   "host_canary": [
diff --git a/manifests/upstream.json b/manifests/upstream.json
index baf7342..7085f6c 100644
--- a/manifests/upstream.json
+++ b/manifests/upstream.json
@@ -1,9 +1,9 @@
 {
   "repository": "anomalyco/opencode",
-  "release_tag": "v1.18.3",
-  "version": "1.18.3",
-  "published_at": "2026-07-16T15:34:33Z",
-  "release_url": "https://github.com/anomalyco/opencode/releases/tag/v1.18.3",
-  "image": "ghcr.io/anomalyco/opencode@sha256:c2d5d6398df72aac85cb1bdc8f900c71a9b75a33fb7c0a76dc1484e4b126e41e",
-  "observed_at": "2026-07-18T00:00:00Z"
+  "release_tag": "v1.18.18",
+  "version": "1.18.18",
+  "published_at": "2026-08-13T01:15:04Z",
+  "release_url": "https://github.com/anomalyco/opencode/releases/tag/v1.18.18",
+  "image": "ghcr.io/anomalyco/opencode@sha256:f3e00f8e25500150373c817e24b13f2f08e2ccd4cafd53dc3ad4827d47863b6f",
+  "observed_at": "2026-08-18T19:30:00Z"
 }
diff --git a/test/repository_test.rb b/test/repository_test.rb
index 27ca8d9..b4b86a4 100644
--- a/test/repository_test.rb
+++ b/test/repository_test.rb
@@ -13,6 +13,30 @@ class RepositoryTest < Minitest::Test
     JSON.parse(File.read(File.join(ROOT, path)))
   end
 
+  def assert_certified_public_target(target)
+    current = target.fetch("current_certification")
+    assert_equal "certified", current.fetch("status")
+    assert_match(/\A[0-9a-f]{40}\z/, current.fetch("client_commit"))
+    assert_match(/\A[0-9a-f]{40}\z/, current.fetch("rails_commit"))
+    assert_equal current.fetch("expected_text"), current.fetch("full_text")
+    assert_equal 1, current.fetch("llm_request_count")
+    assert_path_exists File.join(ROOT, current.fetch("evidence"))
+    previous = target["previous_certification"]
+    return unless previous
+
+    assert_equal "certified", previous.fetch("status")
+    assert_match(/\A[0-9a-f]{40}\z/, previous.fetch("client_commit"))
+    assert_equal previous.fetch("expected_text"), previous.fetch("full_text")
+    assert_equal 1, previous.fetch("llm_request_count")
+  end
+
+  def assert_pending_public_target(target)
+    refute target.key?("current_certification")
+    refute target.key?("previous_certification")
+    assert_empty target.fetch("consumers")
+    assert_empty target.fetch("required_consumer_profiles")
+  end
+
   def test_every_json_document_parses
     paths = Dir.glob(File.join(ROOT, "{evidence,fixtures,manifests,profiles}/**/*.json"))
     refute_empty paths
@@ -49,22 +73,16 @@ class RepositoryTest < Minitest::Test
       assert_equal ["ruby-rest-sse"], target.fetch("profiles")
       assert_equal "shared-client-contract-only",
         target.fetch("certification_scope", "shared-client-contract-only")
-      assert_equal "certified", target.fetch("certification_status")
-      current = target.fetch("current_certification")
-      assert_equal "certified", current.fetch("status")
-      assert_match(/\A[0-9a-f]{40}\z/, current.fetch("client_commit"))
-      assert_match(/\A[0-9a-f]{40}\z/, current.fetch("rails_commit"))
-      assert_equal current.fetch("expected_text"), current.fetch("full_text")
-      assert_equal 1, current.fetch("llm_request_count")
-      assert_path_exists File.join(ROOT, current.fetch("evidence"))
-      previous = target["previous_certification"]
-      next unless previous
-
-      assert_equal "certified", previous.fetch("status")
-      assert_match(/\A[0-9a-f]{40}\z/, previous.fetch("client_commit"))
-      assert_equal previous.fetch("expected_text"), previous.fetch("full_text")
-      assert_equal 1, previous.fetch("llm_request_count")
+      case target.fetch("certification_status")
+      when "certified"
+        assert_certified_public_target(target)
+      when "pending"
+        assert_pending_public_target(target)
+      else
+        flunk "#{target.fetch("id")} certification_status must be pending or certified"
+      end
     end
+    assert targets.any? { |target| target.fetch("certification_status") == "certified" }
   end
 
   def test_candidate_client_train_is_lockstep_and_bound_to_unpublished_commits