opencode-ship 0.2.1 → 0.4.0

package/dist/core.js

@@ -1,4 +1,4 @@
-// opencode-ship/core v0.2.1
+// opencode-ship/core v0.4.0
 
 // src/adapter.js
 import { readFile, writeFile, mkdir, rename } from "node:fs/promises";

package/dist/plugin.js

@@ -1,4 +1,4 @@
-// opencode-ship v0.2.1
+// opencode-ship v0.4.0
 var __defProp = Object.defineProperty;
 var __getOwnPropNames = Object.getOwnPropertyNames;
 var __esm = (fn, res) => function __init() {
@@ -40,20 +40,37 @@ var init_hash = __esm({
   }
 });
 
+// src/profile.js
+function isValidProfile(name) {
+  return typeof name === "string" && PROFILES.includes(name);
+}
+var PROFILES;
+var init_profile = __esm({
+  "src/profile.js"() {
+    PROFILES = Object.freeze(["core", "engineering"]);
+  }
+});
+
 // src/installer/lock.js
 var lock_exports = {};
 __export(lock_exports, {
   CURRENT_LOCK_SCHEMA: () => CURRENT_LOCK_SCHEMA,
   computeIntegrity: () => computeIntegrity,
   lockPath: () => lockPath,
+  lockSchemaRevision: () => lockSchemaRevision,
   migrateLegacyLock: () => migrateLegacyLock,
   readLock: () => readLock2,
+  readValidatedLock: () => readValidatedLock,
   validateIntegrity: () => validateIntegrity,
+  validateLock: () => validateLock,
   writeLock: () => writeLock
 });
 import { readFile as readFile4, writeFile as writeFile4, rename as rename4, mkdir as mkdir4 } from "node:fs/promises";
 import { existsSync as existsSync4 } from "node:fs";
 import { dirname as dirname4, resolve as resolve8 } from "node:path";
+function lockSchemaRevision() {
+  return CURRENT_LOCK_SCHEMA;
+}
 function lockPath(repoRoot) {
   return resolve8(repoRoot, ".opencode", "ship.lock.json");
 }
@@ -91,6 +108,71 @@ async function validateIntegrity(lock) {
   const expected = computeIntegrity(lock).lockSha256;
   return expected === lock.integrity.lockSha256;
 }
+function validateLock(rawLock) {
+  if (rawLock === null || rawLock === void 0) {
+    return { ok: true, kind: "missing", issues: [] };
+  }
+  if (typeof rawLock !== "object" || Array.isArray(rawLock)) {
+    return { ok: false, kind: "shape", issues: ["lock root must be an object"] };
+  }
+  const issues = [];
+  let kind = "ok";
+  if (rawLock.contractVersion !== CURRENT_LOCK_SCHEMA && rawLock.contractVersion !== 1) {
+    issues.push(`unsupported contractVersion: ${JSON.stringify(rawLock.contractVersion)} (expected ${CURRENT_LOCK_SCHEMA} or 1)`);
+    kind = "schema";
+  }
+  const manager = rawLock.manager;
+  if (manager === void 0) {
+    issues.push("manager section missing");
+    kind = kind === "ok" ? "shape" : kind;
+  } else if (typeof manager !== "object" || manager === null) {
+    issues.push("manager section must be an object");
+    kind = kind === "ok" ? "shape" : kind;
+  } else if (manager.schemaVersion !== CURRENT_LOCK_SCHEMA && manager.schemaVersion !== 1) {
+    issues.push(`unsupported manager.schemaVersion: ${JSON.stringify(manager.schemaVersion)} (expected ${CURRENT_LOCK_SCHEMA} or 1)`);
+    kind = "schema";
+  } else if (manager.name !== "opencode-ship") {
+    issues.push(`unknown manager.name: ${JSON.stringify(manager.name)}`);
+    kind = "shape";
+  } else if (rawLock.contractVersion === CURRENT_LOCK_SCHEMA && manager.schemaVersion === CURRENT_LOCK_SCHEMA && manager.profile !== void 0 && !isValidProfile(manager.profile)) {
+    issues.push(`invalid manager.profile: ${JSON.stringify(manager.profile)} (expected one of: core, engineering)`);
+    kind = "shape";
+  }
+  if (!rawLock.files || !Array.isArray(rawLock.files)) {
+    issues.push("files must be an array");
+    kind = kind === "ok" ? "shape" : kind;
+  }
+  if (!rawLock.integrity || typeof rawLock.integrity !== "object") {
+    issues.push("integrity section missing");
+    kind = kind === "ok" ? "shape" : kind;
+  } else {
+    const expected = computeIntegrity(rawLock).lockSha256;
+    if (expected !== rawLock.integrity.lockSha256) {
+      issues.push(`integrity mismatch: stored ${rawLock.integrity.lockSha256} != computed ${expected}`);
+      kind = "integrity";
+    }
+  }
+  return { ok: issues.length === 0, kind, issues };
+}
+async function readValidatedLock(repoRoot) {
+  const path = lockPath(repoRoot);
+  if (!existsSync4(path)) {
+    return { kind: "missing", lock: null, issues: [] };
+  }
+  let raw;
+  try {
+    const text = await readFile4(path, "utf8");
+    raw = JSON.parse(text);
+  } catch (e) {
+    return {
+      kind: "integrity",
+      lock: null,
+      issues: [`unable to parse lock JSON: ${e?.message ?? String(e)}`]
+    };
+  }
+  const validation = validateLock(raw);
+  return { kind: validation.kind, lock: validation.ok ? raw : null, issues: validation.issues };
+}
 async function migrateLegacyLock(repoRoot) {
   const legacy = resolve8(repoRoot, ".opencode", "delivery.lock.json");
   if (!existsSync4(legacy)) return null;
@@ -113,7 +195,8 @@ var init_lock = __esm({
   "src/installer/lock.js"() {
     init_hash();
     init_json_pointer();
-    CURRENT_LOCK_SCHEMA = 1;
+    init_profile();
+    CURRENT_LOCK_SCHEMA = 2;
   }
 });
 
@@ -12540,7 +12623,7 @@ function tool(input) {
 tool.schema = external_exports;
 
 // src/plugin.js
-import { resolve as resolve11 } from "node:path";
+import { resolve as resolve12 } from "node:path";
 import { readFile as readFile5 } from "node:fs/promises";
 
 // src/adapter.js
@@ -12765,7 +12848,7 @@ function parseRepoSlug(slug) {
 
 // src/drivers/gh-cli.js
 function defaultRunner(cwd, env) {
-  return (args) => new Promise((resolve12, reject2) => {
+  return (args) => new Promise((resolve13, reject2) => {
     const proc = spawn("gh", args, {
       cwd,
       env,
@@ -12777,7 +12860,7 @@ function defaultRunner(cwd, env) {
     proc.stdout.on("data", (d) => stdout += d.toString());
     proc.stderr.on("data", (d) => stderr += d.toString());
     proc.on("error", reject2);
-    proc.on("close", (status) => resolve12({ status: status ?? -1, stdout, stderr }));
+    proc.on("close", (status) => resolve13({ status: status ?? -1, stdout, stderr }));
   });
 }
 function viewFields() {
@@ -14207,13 +14290,18 @@ import { dirname as dirname3, resolve as resolve7 } from "node:path";
 // schema/ship-config.schema.json
 var ship_config_schema_default = {
   $schema: "https://json-schema.org/draft/2020-12/schema",
-  $id: "https://github.com/Viktorxyz/opencode-delivery/schema/ship-config.schema.json",
+  $id: "https://github.com/Viktorxyz/opencode-ship/schema/ship-config.schema.json",
   title: "opencode-ship user config",
   type: "object",
   required: ["schemaVersion"],
   additionalProperties: false,
   properties: {
     schemaVersion: { const: 1 },
+    profile: {
+      type: "string",
+      enum: ["core", "engineering"],
+      description: "Active profile (precedence layer 2: ship.config > lock > core default)."
+    },
     owner: {
       type: "string",
       description: "Optional override for the issue/manifest owner field. Defaults to the agent's local user.name."
@@ -14805,8 +14893,14 @@ function flattenShipConfig(ship) {
   return adapter;
 }
 
+// src/version.js
+import { readFileSync as readFileSync2, existsSync as existsSync6 } from "node:fs";
+import { dirname as dirname5, resolve as resolve11 } from "node:path";
+import { fileURLToPath } from "node:url";
+var PACKAGE_VERSION = "0.4.0";
+var TEMPLATE_SET = `v${PACKAGE_VERSION}`;
+
 // src/plugin.js
-var VERSION = "0.2.1";
 var toolDefs = [
   ["delivery_inspect", "Inspect a manifest and a project-local doctor report.", "inspect"],
   ["delivery_issue", "Find or create the issue for a delivery task.", "issue"],
@@ -14843,7 +14937,7 @@ async function resolveRepoSlug(repoRoot, detection, config2) {
   const fromConfig = config2?.value?.project?.repository;
   if (typeof fromConfig === "string" && fromConfig.includes("/")) return fromConfig;
   if (detection?.repository) return detection.repository;
-  const gitConfig = await readFile5(resolve11(repoRoot, ".git/config"), "utf8").catch(() => null);
+  const gitConfig = await readFile5(resolve12(repoRoot, ".git/config"), "utf8").catch(() => null);
   if (gitConfig) {
     const m = gitConfig.match(/url\s*=\s*.*?github\.com[:/]([^/]+)\/([^/\s]+?)(?:\.git)?\b/);
     if (m) return `${m[1]}/${m[2]}`;
@@ -14875,7 +14969,7 @@ async function bestEffortCleanupQueue(repoRoot, adapter) {
   return { pending, manifestTasks: tasks.map((t) => t.taskId), ...out };
 }
 async function buildRuntime(worktree) {
-  const repoRootAbs = resolve11(worktree ?? process.cwd());
+  const repoRootAbs = resolve12(worktree ?? process.cwd());
   const detection = detectProject(repoRootAbs);
   const legacyAdapter = await loadAdapter(repoRootAbs);
   const config2 = await loadConfig(repoRootAbs);
@@ -14898,7 +14992,7 @@ async function buildRuntime(worktree) {
     repoSlug: repoSlug ?? "owner/repo",
     owner,
     driver,
-    packageVersion: VERSION,
+    packageVersion: PACKAGE_VERSION,
     lastTaskId: null,
     cleanupQueueOnStartup: cleanup,
     recover: () => recoverManifestAfterCrash

package/docs/adr/0001-opencode-ship-redesign.md

@@ -40,7 +40,7 @@ with three surfaces:
 
 Five output classes are installer-managed and recorded in the lock:
 
-- `.opencode/plugin/opencode-ship.js` — the bundled plugin.
+- `.opencode/plugins/opencode-ship.js` — the bundled plugin.
 - `.opencode/agents/delivery-reviewer.md`,
   `.opencode/agents/delivery-verifier.md`.
 - `.opencode/skills/delivery-workflow/SKILL.md`,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "opencode-ship",
-  "version": "0.2.1",
+  "version": "0.4.0",
   "private": false,
   "description": "npm-distributed OpenCode installer that materializes the delivery plugin, reviewer/verifier agents, skills, ship config and lock into any consumer repository.",
   "license": "MIT",
@@ -17,6 +17,10 @@
     "node": ">=22.6.0",
     "opencode": ">=1.15.5"
   },
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
+  },
   "peerDependencies": {
     "@opencode-ai/plugin": ">=1.15.5 <2"
   },
@@ -43,6 +47,7 @@
     "assets",
     "schema",
     "docs",
+    "THIRD_PARTY_NOTICES.md",
     "README.md",
     "CHANGELOG.md",
     "LICENSE"

package/schema/project-adapter.schema.json

@@ -1,6 +1,6 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "https://github.com/Viktorxyz/opencode-delivery/schema/project-adapter.schema.json",
+  "$id": "https://github.com/Viktorxyz/opencode-ship/schema/project-adapter.schema.json",
   "title": "opencode-ship project adapter",
   "type": "object",
   "required": ["contractVersion"],

package/schema/ship-config.schema.json

@@ -1,12 +1,17 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "https://github.com/Viktorxyz/opencode-delivery/schema/ship-config.schema.json",
+  "$id": "https://github.com/Viktorxyz/opencode-ship/schema/ship-config.schema.json",
   "title": "opencode-ship user config",
   "type": "object",
   "required": ["schemaVersion"],
   "additionalProperties": false,
   "properties": {
     "schemaVersion": { "const": 1 },
+    "profile": {
+      "type": "string",
+      "enum": ["core", "engineering"],
+      "description": "Active profile (precedence layer 2: ship.config > lock > core default)."
+    },
     "owner": {
       "type": "string",
       "description": "Optional override for the issue/manifest owner field. Defaults to the agent's local user.name."

package/schema/ship-lock.schema.json

@@ -1,21 +1,25 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "https://github.com/Viktorxyz/opencode-delivery/schema/ship-lock.schema.json",
+  "$id": "https://github.com/Viktorxyz/opencode-ship/schema/ship-lock.schema.json",
   "title": "opencode-ship install lock",
   "type": "object",
   "required": ["contractVersion", "manager", "files", "integrity"],
   "additionalProperties": false,
   "properties": {
-    "contractVersion": { "const": 1 },
+    "contractVersion": { "enum": [1, 2] },
     "manager": {
       "type": "object",
       "required": ["schemaVersion", "name", "version", "appliedAt", "config"],
       "additionalProperties": false,
       "properties": {
-        "schemaVersion": { "const": 1 },
+        "schemaVersion": { "enum": [1, 2] },
         "name": { "type": "string", "pattern": "^opencode-ship$" },
         "version": { "type": "string", "minLength": 1 },
         "templateSet": { "type": "string", "minLength": 1 },
+        "profile": {
+          "enum": ["core", "engineering"],
+          "description": "Profile the lock was applied under. Required on locks written at schema 2; absent on legacy schema-1 locks (resolved to core by the profile precedence layer)."
+        },
         "appliedAt": { "type": "string", "format": "date-time" },
         "config": {
           "type": "object",