Harden Galaxy version picker

starpilot/system/the_galaxy/assets/mobile/js/components/GalaxySelect.js

@@ -36,7 +36,7 @@ export const GalaxySelect = {
       if (this.disabled && this.open) this.close()
     },
     async show(event) {
-      if (this.disabled) return
+      if (this.disabled || this.open) return
       this.sync()
       this.open = true
       await this.$nextTick()

starpilot/system/the_galaxy/assets/mobile/js/components/VersionHistoryPicker.js

@@ -73,7 +73,7 @@ export const VersionHistoryPicker = {
       this.expanded = expanded
     },
     async show() {
-      if (this.disabled) return
+      if (this.disabled || this.open) return
       const selectedDay = this.groups.find(group => group.commits.some(commit => commit.sha === this.value))
       if (selectedDay) this.expanded[selectedDay.key] = true
       this.open = true

starpilot/system/the_galaxy/tests/test_branch_selector.mjs

@@ -168,6 +168,14 @@ test('GalaxySelect reads optional option descriptions without adding them to col
   assert.equal(instance.label, 'Dom')
 })
 
+test('GalaxySelect ignores a second open request while its menu is open', async () => {
+  const context = vm.createContext({document: {getElementById() {}}})
+  vm.runInContext(fs.readFileSync(js + 'components/GalaxySelect.js', 'utf8').replace('export const GalaxySelect =', 'globalThis.component ='), context)
+  const instance = {...context.component.data(), open: true, disabled: false, sync() { throw new Error('menu reopened') }}
+  await context.component.methods.show.call(instance)
+  assert.equal(instance.open, true)
+})
+
 test('unavailable branch and navigation values cannot become install targets', async () => {
   const {instance, calls, confirmations} = fixture()
   for (const branch of ['other:', '', 'deleted-branch']) instance.selectTargetBranch(branch)

starpilot/system/the_galaxy/tests/test_version_history_picker.mjs

@@ -41,6 +41,13 @@ test('newly appended days stay collapsed while the current day keeps its state',
   assert.equal(instance.expanded['2026-09-10'], true)
   assert.equal(instance.expanded['2026-09-09'], false)
 })
+
+test('history picker ignores a second open request while its dialog is open', async () => {
+  const instance = {disabled: false, open: true}
+  await context.picker.methods.show.call(instance)
+  assert.equal(instance.open, true)
+})
+
 test('selection emits only an available exact SHA and disabled selection emits nothing', () => {
   assert.ok(context.picker)
   const calls = []

starpilot/system/the_galaxy/version_install.py

@@ -9,7 +9,6 @@ import inspect
 from contextlib import contextmanager
 from contextvars import ContextVar
 from datetime import datetime, timezone
-import hashlib
 import json
 import os
 from pathlib import Path