@nlaprell/shipit 1.0.0

package/_system/architecture/project-schema.json

@@ -0,0 +1,98 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "Project Metadata Schema",
+  "description": "Schema for project.json metadata file",
+  "type": "object",
+  "required": ["name", "version", "techStack", "created"],
+  "properties": {
+    "name": {
+      "type": "string",
+      "description": "Project name (alphanumeric, hyphens, underscores)"
+    },
+    "description": {
+      "type": "string",
+      "description": "Project description"
+    },
+    "version": {
+      "type": "string",
+      "pattern": "^\\d+\\.\\d+\\.\\d+$",
+      "description": "Semantic version (e.g., 0.1.0)"
+    },
+    "techStack": {
+      "type": "string",
+      "enum": ["typescript-nodejs", "python", "other"],
+      "description": "Primary technology stack"
+    },
+    "created": {
+      "type": "string",
+      "format": "date-time",
+      "description": "ISO 8601 timestamp when project was created"
+    },
+    "highRiskDomains": {
+      "type": "array",
+      "items": {
+        "type": "string",
+        "enum": ["auth", "payments", "permissions", "infrastructure", "pii"]
+      },
+      "description": "High-risk domains requiring human approval"
+    },
+    "settings": {
+      "type": "object",
+      "properties": {
+        "humanResponseTime": {
+          "type": "string",
+          "enum": ["minutes", "hours", "days"],
+          "default": "minutes",
+          "description": "Expected human response time for interrupts"
+        },
+        "confidenceThreshold": {
+          "type": "number",
+          "minimum": 0,
+          "maximum": 1,
+          "default": 0.7,
+          "description": "Minimum confidence score to proceed without human interrupt"
+        },
+        "testCoverageMinimum": {
+          "type": "number",
+          "minimum": 0,
+          "maximum": 100,
+          "default": 80,
+          "description": "Minimum test coverage percentage"
+        }
+      },
+      "required": ["humanResponseTime", "confidenceThreshold", "testCoverageMinimum"]
+    },
+    "dependencies": {
+      "type": "object",
+      "description": "Project dependencies (runtime and dev)",
+      "properties": {
+        "runtime": {
+          "type": "array",
+          "items": { "type": "string" }
+        },
+        "dev": {
+          "type": "array",
+          "items": { "type": "string" }
+        }
+      }
+    },
+    "invariants": {
+      "type": "object",
+      "description": "Project-level invariants",
+      "properties": {
+        "performance": {
+          "type": "object",
+          "properties": {
+            "p95LatencyMs": { "type": "number" },
+            "p99LatencyMs": { "type": "number" },
+            "maxMemoryMb": { "type": "number" }
+          }
+        },
+        "security": {
+          "type": "array",
+          "items": { "type": "string" }
+        }
+      }
+    }
+  }
+}

package/_system/architecture/workflow-state-layout.md

@@ -0,0 +1,68 @@
+# Workflow State Layout
+
+> **Authority:** This document defines how `work/workflow-state/` is structured. All scripts and features that read or write workflow state MUST follow this contract. See [CANON.md](./CANON.md) for directory boundaries.
+
+## Purpose
+
+Workflow state holds phase outputs (analysis, plan, implementation, verification, release) and supporting artifacts (rollback plan, PR summary, active intent). This layout supports both **single active intent** (flat files) and **multiple active intents** (per-intent directories) so that parallel work does not collide.
+
+## Layouts
+
+### Flat layout (current / single active intent)
+
+When only one intent is active, state lives at the top level of `work/workflow-state/`:
+
+- `01_analysis.md`, `02_plan.md`, `03_implementation.md`, `04_verification.md`, `05_release_notes.md`
+- `active.md` — current active intent id (or list; see below)
+- `rollback.md` — rollback plan (output of /revert-plan)
+- `pr.md` — PR summary (output of /pr)
+- `assumptions.md`, `blocked.md`, etc.
+
+All consumers (scripts, commands, dashboard export) that read these files use these paths when no per-intent directory exists for the intent in question.
+
+### Per-intent layout (multiple active intents)
+
+When multiple intents are active (see Planning issue for parallel execution), each intent MAY have its own subdirectory:
+
+- `work/workflow-state/<intent-id>/` — e.g. `work/workflow-state/F-001/`, `work/workflow-state/F-002/`
+- Inside: `01_analysis.md`, `02_plan.md`, `03_implementation.md`, `04_verification.md`, `05_release_notes.md`, `rollback.md`, `pr.md` as needed.
+
+`work/workflow-state/active.md` (flat only) lists active intent id(s) and optionally current phase per intent. It remains at the top level.
+
+### active.md format
+
+- **Single active (legacy):** `**Intent ID:** F-001`, `**Status:** active`, `**Current Phase:** Planning`.
+- **Multiple actives:** Same header block (first intent or "none"); plus a section:
+
+  ```markdown
+  ## Active intents
+
+  F-001 | Planning | active
+  F-002 | Implementation | active
+  ```
+
+  Scripts parse both the legacy **Intent ID:** line and the `## Active intents` block to list active ids. When multiple intents are active, pass `intent-id` explicitly to `/ship`, `/verify`, and scripts.
+
+## Contract: consumers MUST support both layouts
+
+**Rule:** Any script or feature that reads or writes workflow state MUST resolve paths so that both layouts work:
+
+1. **When an intent-id is known:**  
+   If `work/workflow-state/<intent-id>/` exists, read/write phase files and intent-specific artifacts (e.g. `rollback.md`, `pr.md`) under `work/workflow-state/<intent-id>/`.  
+   Otherwise, use the flat paths under `work/workflow-state/` (e.g. `work/workflow-state/rollback.md`).
+
+2. **When aggregating (e.g. dashboard, status):**  
+   If any subdirectories matching `work/workflow-state/[FBT]-[0-9]+/` exist, aggregate state from those directories (and optionally from flat files for backward compatibility).  
+   Otherwise, read only from flat files.
+
+3. **Creation:**  
+   New workflow state for an intent MAY be written to `work/workflow-state/<intent-id>/` when the workflow supports multiple active intents; otherwise write to flat paths. Do not mix: for a given intent, use either flat or per-intent, not both.
+
+## References
+
+- **Parallel execution (per-intent dirs):** Implemented per the Planning issue for multiple active intents. This layout doc is the contract those changes and all consumers must follow.
+- **Consumers:** Dashboard export (#62), rollback execution (#64), PR creation (#59), workflow-orchestrator, status, verify — all must resolve paths per this document.
+
+---
+
+_Last updated: 2026-02-05_

package/_system/artifacts/SYSTEM_STATE.md

@@ -0,0 +1,43 @@
+# System State
+
+**Generated:** 2026-02-04T18:38:19Z
+**Project:** shipit
+
+## Global Summary
+
+This file provides a global view of the system state for agents to maintain coherence.
+
+## Intent Status
+
+- **Total:** 0
+- **Active:** 0
+- **Planned:** 0
+- **Shipped:** 0
+
+## Current Work
+
+- **Active Intent:** none
+- **Recent Intents:**
+
+## System Health
+
+- **Workflow State:** [Check work/workflow-state/active.md]
+- **Drift Status:** [Check _system/drift/metrics.md]
+- **Test Coverage:** [Run: pnpm test:coverage]
+
+## Key Decisions
+
+[Recent architectural decisions]
+
+## Blockers
+
+[Current blockers and dependencies]
+
+## Next Actions
+
+[Planned next actions]
+
+---
+
+_This file is auto-generated. Run `pnpm generate-system-state` to update._
+_Agents should read this file first to understand global state._

package/_system/artifacts/confidence-calibration.json

@@ -0,0 +1,16 @@
+{
+  "decisions": [
+    {
+      "id": "D-001",
+      "stated_confidence": null,
+      "actual_outcome": "success",
+      "notes": "Intent: F-DUMMY. Tests: pass, Mutation: pass, Audit: pass"
+    },
+    {
+      "id": "D-002",
+      "stated_confidence": null,
+      "actual_outcome": "success",
+      "notes": "Intent: F-DUMMY. Tests: pass, Mutation: pass, Audit: pass"
+    }
+  ]
+}

package/_system/artifacts/dependencies.md

@@ -0,0 +1,46 @@
+# Feature Dependency Graph
+
+**Generated:** 2026-02-09T20:10:22Z
+
+## Dependency Graph
+
+### F-DUMMY: F-DUMMY: Dummy intent for testing
+
+(no dependencies)
+
+### F-001: F-001: Smoke API
+
+(no dependencies)
+
+### infra-change: F-###: Title
+
+└─> (Other intent IDs that must ship first)
+└─> (Infra team or vendor dependencies)
+└─> (Maintenance windows)
+
+### api-endpoint: F-###: Title
+
+└─> (Other intent IDs that must ship first)
+└─> (ADRs that must be approved)
+└─> (External systems/APIs)
+
+### frontend-feature: F-###: Title
+
+└─> (Other intent IDs that must ship first)
+└─> (Design/UX sign-off if required)
+
+### refactor: F-###: Title
+
+└─> (Other intent IDs that must ship first)
+└─> (ADRs or design docs if refactor is architectural)
+
+### bugfix: F-###: Title
+
+└─> (Other intent IDs that must ship first)
+└─> (Blocking issues or environment requirements)
+
+### generic: F-###: Title
+
+└─> (Other intent IDs that must ship first)
+└─> (ADRs that must be approved)
+└─> (External systems/APIs)

package/_system/artifacts/framework-files-manifest.json

@@ -0,0 +1,179 @@
+{
+  "version": "1.1.1",
+  "description": "Manifest of framework-owned files and directories that get copied during init/upgrade",
+  "userOverrides": {
+    "directory": ".override/",
+    "description": "User customizations that persist across upgrades. NEVER touched by framework.",
+    "neverTouched": true,
+    "subdirectories": [
+      ".override/rules/",
+      ".override/commands/",
+      ".override/scripts/",
+      ".override/config/"
+    ]
+  },
+  "backupStrategy": {
+    "directory": "._shipit_backup/",
+    "format": "<relative-path>/<filename>.<timestamp>",
+    "description": "Backups of modified framework files before upgrade replacement"
+  },
+  "frameworkOwned": {
+    "directories": [
+      ".cursor/commands",
+      ".cursor/rules",
+      "scripts",
+      "scripts/lib",
+      "scripts/workflow-templates",
+      "scripts/gh",
+      "_system/architecture",
+      "_system/do-not-repeat",
+      "_system/drift",
+      "_system/behaviors",
+      "_system/security",
+      "_system/artifacts",
+      "_system/golden-data",
+      "_system/reports",
+      "dashboard-app",
+      "work/intent/templates"
+    ],
+    "files": [
+      "project.json",
+      "AGENTS.md",
+      "stryker.conf.json",
+      "scripts/command-manifest.yml",
+      "scripts/export-dashboard-json.js",
+      "scripts/create-test-plan-issue.sh",
+      "_system/behaviors/WORK_TEST_PLAN_ISSUES.md",
+      ".github/workflows/ci.yml"
+    ],
+    "createdOnInit": {
+      "directories": [
+        "work/intent/features",
+        "work/intent/bugs",
+        "work/intent/tech-debt",
+        "work/workflow-state",
+        "work/roadmap",
+        "work/release",
+        "docs"
+      ],
+      "files": [
+        "work/intent/_TEMPLATE.md",
+        "work/workflow-state/active.md",
+        "work/workflow-state/blocked.md",
+        "work/workflow-state/validating.md",
+        "work/workflow-state/shipped.md",
+        "work/workflow-state/disagreements.md",
+        "work/workflow-state/assumptions.md",
+        "work/workflow-state/01_analysis.md",
+        "work/workflow-state/02_plan.md",
+        "work/workflow-state/03_implementation.md",
+        "work/workflow-state/04_verification.md",
+        "work/workflow-state/05_release_notes.md",
+        "work/roadmap/now.md",
+        "work/roadmap/next.md",
+        "work/roadmap/later.md",
+        "_system/architecture/CANON.md",
+        "_system/architecture/invariants.yml",
+        "_system/do-not-repeat/abandoned-designs.md",
+        "_system/do-not-repeat/failed-experiments.md",
+        "_system/do-not-repeat/bad-patterns.md",
+        "_system/do-not-repeat/rejected-libraries.md",
+        "_system/drift/baselines.md",
+        "_system/golden-data/.gitkeep",
+        "_system/golden-data/README.md",
+        "_system/artifacts/confidence-calibration.json",
+        "_system/artifacts/usage.json"
+      ]
+    }
+  },
+  "userOwned": {
+    "description": "Files/directories that should NEVER be overwritten by framework",
+    "directories": [
+      ".override",
+      "src",
+      "tests",
+      "work/intent/features",
+      "work/intent/bugs",
+      "work/intent/tech-debt",
+      "work/roadmap",
+      "work/release",
+      "work/workflow-state"
+    ],
+    "files": [
+      "README.md",
+      ".gitignore",
+      "tsconfig.json",
+      "tsconfig.eslint.json",
+      "vitest.config.ts",
+      ".eslintrc.json",
+      ".prettierrc",
+      ".npmrc",
+      ".shipitrc"
+    ],
+    "note": "package.json is user-owned but framework merges scripts/devDependencies. project.json is framework-owned but preserves user edits to name/description/version."
+  },
+  "stackSpecific": {
+    "typescript-nodejs": {
+      "files": [
+        "package.json",
+        "tsconfig.json",
+        "tsconfig.eslint.json",
+        ".eslintrc.json",
+        "vitest.config.ts",
+        "stryker.conf.json",
+        ".npmrc"
+      ],
+      "directories": [],
+      "description": "Only created for TypeScript/Node.js projects"
+    },
+    "python": {
+      "files": ["pyproject.toml", "requirements.txt"],
+      "directories": [],
+      "description": "Only created for Python projects (if not already exist)"
+    },
+    "other": {
+      "files": [],
+      "directories": [],
+      "description": "No stack-specific files created"
+    }
+  },
+  "neverCopied": {
+    "description": "Framework-only files that are NEVER copied to user projects",
+    "directories": ["tests"],
+    "files": [
+      "README.md",
+      "CHANGELOG.md",
+      "package.json",
+      "tsconfig.json",
+      ".eslintrc.json",
+      "vitest.config.ts",
+      "tests/TEST_PLAN.md",
+      "tests/ISSUES.md",
+      "tests/fixtures.json"
+    ],
+    "note": "tests/ directory contains framework test fixtures/templates, not user test structure. User projects have their own tests/ directory."
+  },
+  "mergeStrategy": {
+    "package.json": {
+      "action": "merge",
+      "description": "Merge ShipIt scripts into existing package.json scripts section, add devDependencies if missing",
+      "preserve": ["name", "version", "description", "dependencies", "existing scripts"]
+    },
+    "project.json": {
+      "action": "skipIfExists",
+      "description": "If project.json exists, skip creation (user may have customized it)"
+    },
+    ".gitignore": {
+      "action": "merge",
+      "description": "Append ShipIt patterns if not already present"
+    }
+  },
+  "detection": {
+    "shipitAlreadyInstalled": [
+      "project.json",
+      "_system/architecture/CANON.md",
+      "scripts/workflow-orchestrator.sh"
+    ],
+    "description": "If any of these exist, consider ShipIt already initialized"
+  }
+}

package/_system/artifacts/usage.json

@@ -0,0 +1 @@
+{ "entries": [] }