opencode-ship 0.3.0 → 0.4.0

package/CHANGELOG.md

@@ -2,6 +2,24 @@
 
 All notable changes to `opencode-ship` are recorded here.
 
+## 0.4.0 — Profile-aware installer foundation
+
+`opencode-ship@0.4.0` adds the profile-aware installer foundation that issue #18 requires. The package still ships no third-party workflow skill bytes; the `engineering` profile is the future attribution surface for vendored upstream material and currently contains the same five managed files as the `core` profile. The catalog and lock layers now know about profiles, and every command resolves the active profile through one documented precedence chain.
+
+### Verification
+
+- `npm run verify` exits `0` with 226 tests across 34 suites on the v0.4 HEAD.
+
+### Added
+
+- **Profile model.** `src/profile.js` declares `PROFILES = ["core", "engineering"]` and exports `resolveProfile({ cli, config, lock })` for the documented precedence (CLI > ship.config > lock > default). Unknown profiles throw a descriptive `Error` so the CLI can surface them as `exit 2`.
+- **`--profile` CLI flag.** Every subcommand (`init`, `diff`, `update`, `doctor`, `uninstall`) accepts `--profile <name>`; parse errors emit to `stderr` and return `exit 2`.
+- **Lock schema v2.** `CURRENT_LOCK_SCHEMA` is bumped to 2. Newly written locks always carry `manager.profile`; v1 locks (no profile field) still validate as legacy core so v0.3 consumers can upgrade without manual migration. The `ship-lock.schema.json` `enum` allows `[1, 2]` for both `contractVersion` and `manager.schemaVersion`.
+- **`ship.config.json .profile`.** The user config schema accepts an optional `profile` enum (`core | engineering`). The profile is loaded by the same precedence chain as the lock.
+- **Profile-aware catalog.** Every `CATALOG` entry declares a `profiles` array. `filterCatalogByProfile(catalog, profile)` returns the subset that ships under the active profile; `validateCatalog` rejects entries that reference unknown profiles.
+- **Profile-aware doctor.** The new `profile footprint` check scopes asset presence to the active profile; `package integrity` continues to check the full catalog so the maintainer can still see drift in the other profile.
+- **Error to `stderr`.** CLI argument-parsing errors are now written to `stderr` (was `stdout`) so consumers can detect parse failures by exit code alone.
+
 ## 0.3.0 — Installer hardening and release pipeline
 
 `opencode-ship@0.3.0` hardens the installer for the public registry. This is the v0.3 installer foundation with the `core` profile only; it carries no third-party workflow skill bytes. The package is now fully consumable from npm with provenance. The catalog installs the five managed files plus the two generated artifacts (`ship.config.json`, `ship.lock.json`), and adds tighter guards around every existing one. The plugin target is `.opencode/plugins/opencode-ship.js` so OpenCode auto-loads it from the plural directory; root-config pointer ownership is recorded for every installer-owned entry so the future v0.4 opt-in `engineering` profile can restore previous values on uninstall. v0.3 is the approved slice shipped by parent spec `Viktorxyz/opencode-ship#16` and plan revision `f85bae931d9eed7763e2f6f4dc68e5fad71bdd38c8a667fc9ffe78b5290200be`.

package/README.md

@@ -2,7 +2,7 @@
 
 > npm-distributed OpenCode installer and delivery plugin: a single command materialises the lifecycle plugin, reviewer/verifier agents, and skills into any consumer repository, with a recoverable lock and never silently overwrites managed files.
 >
-> **Status:** v0.3.0 installer foundation. The installer is a `pnpm dlx opencode-ship@latest <cmd>` workflow. Five idempotent CLI commands manage a managed-file lock, a transactional promoter, and a compiled ESM plugin that registers the canonical nine `delivery_*` tools. Post-merge cleanup is immediate and recoverable. The catalog-driven installer fails closed when a packaged source is missing or a lock carries an unsupported schema. The plugin target is `.opencode/plugins/opencode-ship.js`; OpenCode auto-loads plugins from the plural directory. v0.3 records every installer-owned root pointer; v0.4 restores ownership on uninstall and ships the opt-in `engineering` profile that turns this distribution into the canonical workflow defined by approved plan `f85bae931d9eed7763e2f6f4dc68e5fad71bdd38c8a667fc9ffe78b5290200be` (`Viktorxyz/opencode-ship#16`).
+> **Status:** v0.4.0 profile-aware installer foundation. The installer is a `pnpm dlx opencode-ship@latest <cmd>` workflow. Five idempotent CLI commands manage a managed-file lock, a transactional promoter, and a compiled ESM plugin that registers the canonical nine `delivery_*` tools. Every command now accepts `--profile <name>` (`core` default, `engineering` opt-in) and resolves the active profile through one documented precedence chain (CLI > ship.config > lock > default). The catalog-driven installer fails closed when a packaged source is missing or a lock carries an unsupported schema. The plugin target is `.opencode/plugins/opencode-ship.js`; OpenCode auto-loads plugins from the plural directory. v0.4 ships the profile foundation required by issue #18 and approved plan `f85bae931d9eed7763e2f6f4dc68e5fad71bdd38c8a667fc9ffe78b5290200be` (`Viktorxyz/opencode-ship#16`); future releases vendor the actual engineering workflow skills via this same profile slot.
 
 ---
 
@@ -111,7 +111,7 @@ Existing consumers of `opencode-delivery@0.1.x` (commit-pinned shim) can run `pn
 
 ## Development
 
-`npm run verify` runs `format:check`, `lint`, `typecheck`, `build`, and the auto-discovered test suite. The tests cover the installer CLI, the lock and root-config planners, the catalog validator, the schema validator, agents, the packed-artifact smoke check, the transaction-recovery contract, and the order-preserving root-config merge. v0.3 ships with 190 tests across 34 suites on the approved plan hash `f85bae931d9eed7763e2f6f4dc68e5fad71bdd38c8a667fc9ffe78b5290200be`.
+`npm run verify` runs `format:check`, `lint`, `typecheck`, `build`, and the auto-discovered test suite. The tests cover the installer CLI, the lock and root-config planners, the catalog validator, the schema validator, agents, the packed-artifact smoke check, the transaction-recovery contract, the profile-resolution precedence chain, the catalog profile filter, and the order-preserving root-config merge. v0.4 ships with 226 tests across 34 suites on the approved plan hash `f85bae931d9eed7763e2f6f4dc68e5fad71bdd38c8a667fc9ffe78b5290200be`.
 
 ```
 npm ci
@@ -124,7 +124,7 @@ The shipped artifact is built by esbuild (`scripts/build.mjs`); self-contained `
 ## Status and licensing
 
 - **License:** MIT. See `LICENSE`.
-- **Versioning:** SemVer. v0.2.0 is the first npm-distributed release. v0.3.0 is the installer foundation with core-only defaults. v0.4.0 adds the opt-in `engineering` profile that completes the approved `engineering-workflow-v0.4` plan.
+- **Versioning:** SemVer. v0.2.0 is the first npm-distributed release. v0.3.0 is the installer foundation with core-only defaults. v0.4.0 adds the profile-aware installer foundation (`--profile` flag, lock schema v2, profile precedence) that issue #18 requires.
 - **Compatibility:** the bundled plugin targets `@opencode-ai/plugin >= 1.15.5 < 2` and OpenCode `>= 1.15.5`.
 
 ## FAQ

package/THIRD_PARTY_NOTICES.md

@@ -1,10 +1,12 @@
 # Third-Party Notices
 
-`opencode-ship@0.3.0` does not bundle third-party skill content. This file is
-the attribution surface for the v0.4 `engineering` profile that vendors
-upstream material; that release must list the exact files, source commit,
-reuse mode, and license here.
+`opencode-ship@0.4.0` ships the profile-aware installer foundation
+(`core` and `engineering` profiles). The current package version does
+not bundle third-party skill content. The `engineering` profile is
+the attribution surface for vendored upstream material; future
+releases that vendor skills must list the exact files, source
+commit, reuse mode, and license here.
 
 ## Bundled skill content
 
-None in v0.3.0.
+None in v0.4.0.

package/dist/cli.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-// opencode-ship CLI v0.3.0
+// opencode-ship CLI v0.4.0
 var __defProp = Object.defineProperty;
 var __getOwnPropNames = Object.getOwnPropertyNames;
 var __esm = (fn, res) => function __init() {
@@ -484,6 +484,46 @@ var init_root_config = __esm({
   }
 });
 
+// src/profile.js
+var PROFILES = Object.freeze(["core", "engineering"]);
+var DEFAULT_PROFILE = "core";
+function isValidProfile(name) {
+  return typeof name === "string" && PROFILES.includes(name);
+}
+function normalizeProfile(name) {
+  if (name === void 0 || name === null) return DEFAULT_PROFILE;
+  if (!isValidProfile(name)) return null;
+  return name;
+}
+function resolveProfile({ cli = null, config = null, lock = null } = {}) {
+  if (cli !== null && cli !== void 0) {
+    const v = normalizeProfile(cli);
+    if (v === null) {
+      throw new Error(`unknown CLI profile '${cli}' (expected one of: ${PROFILES.join(", ")})`);
+    }
+    return { profile: v, source: "cli" };
+  }
+  if (config && typeof config === "object" && config.profile !== void 0 && config.profile !== null) {
+    const v = normalizeProfile(config.profile);
+    if (v === null) {
+      throw new Error(
+        `unknown ship.config.json profile '${config.profile}' (expected one of: ${PROFILES.join(", ")})`
+      );
+    }
+    return { profile: v, source: "config" };
+  }
+  if (lock && typeof lock === "object" && lock.manager && lock.manager.profile !== void 0) {
+    const v = normalizeProfile(lock.manager.profile);
+    if (v === null) {
+      throw new Error(
+        `unknown lock manager.profile '${lock.manager.profile}' (expected one of: ${PROFILES.join(", ")})`
+      );
+    }
+    return { profile: v, source: "lock" };
+  }
+  return { profile: DEFAULT_PROFILE, source: "default" };
+}
+
 // src/installer/cli-args.js
 var USAGE = `opencode-ship <command> [options]
 
@@ -498,6 +538,7 @@ Commands:
 
 Options:
   --root <path>          Project root (defaults to cwd).
+  --profile <name>       Override active profile: ${PROFILES.join(", ")}.
   --force-config         Rewrite the user config from detection (init only).
   --force-root-config    Create opencode.json when absent (init only).
   --strict-doctor        Fail init when doctor reports unhealthy checks.
@@ -508,6 +549,7 @@ Options:
 function parseFlags(argv) {
   const options = {
     rootPath: null,
+    profile: null,
     json: false,
     replaceManaged: false,
     purgeConfig: false,
@@ -524,7 +566,16 @@ function parseFlags(argv) {
     else if (arg === "--force-root-config") options.forceRootConfig = true;
     else if (arg === "--strict-doctor") options.strictDoctor = true;
     else if (arg === "--root") options.rootPath = argv[++i];
-    else if (arg === "-h" || arg === "--help") return { help: true };
+    else if (arg === "--profile") {
+      const value = argv[++i];
+      if (value === void 0) {
+        return { error: "--profile requires a value" };
+      }
+      if (!isValidProfile(value)) {
+        return { error: `unknown profile '${value}' (expected one of: ${PROFILES.join(", ")})` };
+      }
+      options.profile = value;
+    } else if (arg === "-h" || arg === "--help") return { help: true };
     else if (arg === "-v" || arg === "--version") return { version: true };
     else return { error: `unknown flag ${arg}` };
   }
@@ -591,7 +642,7 @@ function resolvePackageRoot(startUrl) {
 import { readFileSync as readFileSync2, existsSync as existsSync2 } from "node:fs";
 import { dirname as dirname2, resolve as resolve2 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
-var PACKAGE_VERSION = "0.3.0";
+var PACKAGE_VERSION = "0.4.0";
 var TEMPLATE_SET = `v${PACKAGE_VERSION}`;
 
 // src/installer/catalog.js
@@ -603,37 +654,51 @@ var CATALOG = [
     kind: "plugin",
     path: ".opencode/plugins/opencode-ship.js",
     source: resolve3(packageRoot, "dist/plugin.js"),
-    mode: 420
+    mode: 420,
+    profiles: ["core", "engineering"]
   },
   {
     id: "agent:delivery-reviewer",
     kind: "agent",
     path: ".opencode/agents/delivery-reviewer.md",
     source: resolve3(packageRoot, "assets/agents/delivery-reviewer.md"),
-    mode: 420
+    mode: 420,
+    profiles: ["core", "engineering"]
   },
   {
     id: "agent:delivery-verifier",
     kind: "agent",
     path: ".opencode/agents/delivery-verifier.md",
     source: resolve3(packageRoot, "assets/agents/delivery-verifier.md"),
-    mode: 420
+    mode: 420,
+    profiles: ["core", "engineering"]
   },
   {
     id: "skill:delivery-workflow",
     kind: "skill",
     path: ".opencode/skills/delivery-workflow/SKILL.md",
     source: resolve3(packageRoot, "assets/skills/delivery-workflow/SKILL.md"),
-    mode: 420
+    mode: 420,
+    profiles: ["core", "engineering"]
   },
   {
     id: "skill:planning-research-checkpoint",
     kind: "skill",
     path: ".opencode/skills/planning-research-checkpoint/SKILL.md",
     source: resolve3(packageRoot, "assets/skills/planning-research-checkpoint/SKILL.md"),
-    mode: 420
+    mode: 420,
+    profiles: ["core", "engineering"]
   }
 ];
+function filterCatalogByProfile(catalog, profile) {
+  const effective = profile === void 0 || profile === null ? DEFAULT_PROFILE : profile;
+  if (!isValidProfile(effective)) {
+    throw new Error(
+      `filterCatalogByProfile: unknown profile '${profile}' (expected one of: ${PROFILES.join(", ")})`
+    );
+  }
+  return catalog.filter((entry) => Array.isArray(entry.profiles) && entry.profiles.includes(effective));
+}
 var ALLOWED_KINDS = /* @__PURE__ */ new Set(["plugin", "agent", "skill", "support"]);
 function validateCatalog({ catalog = CATALOG } = {}) {
   const seenIds = /* @__PURE__ */ new Set();
@@ -686,6 +751,15 @@ function validateCatalog({ catalog = CATALOG } = {}) {
     if (mode !== 420) {
       issues.push({ id, kind: "mode", message: `mode must be 0o644: ${id}` });
     }
+    if (!Array.isArray(entry.profiles) || entry.profiles.length === 0) {
+      issues.push({ id, kind: "profiles", message: `profiles must be a non-empty array: ${id}` });
+    } else {
+      for (const p of entry.profiles) {
+        if (!isValidProfile(p)) {
+          issues.push({ id, kind: "profiles", message: `unknown profile in profiles[${entry.profiles.indexOf(p)}]: ${p} (expected one of: ${PROFILES.join(", ")})` });
+        }
+      }
+    }
   }
   if (issues.length > 0) {
     const summary = issues.map((i) => i.message).join("; ");
@@ -717,6 +791,11 @@ var ship_config_schema_default = {
   additionalProperties: false,
   properties: {
     schemaVersion: { const: 1 },
+    profile: {
+      type: "string",
+      enum: ["core", "engineering"],
+      description: "Active profile (precedence layer 2: ship.config > lock > core default)."
+    },
     owner: {
       type: "string",
       description: "Optional override for the issue/manifest owner field. Defaults to the agent's local user.name."
@@ -1086,9 +1165,9 @@ async function planManagedFile({ entry, repoRoot, lock, allowUnowned }) {
     reason: locked?.sha256 == null ? "managed file already exists; bytes differ from upstream" : "managed file is locally modified"
   };
 }
-async function planFileInstall({ repoRoot, lock, allowUnowned = false }) {
+async function planFileInstall({ repoRoot, lock, allowUnowned = false, catalog = CATALOG }) {
   const plan = [];
-  for (const entry of CATALOG) {
+  for (const entry of catalog) {
     plan.push(await planManagedFile({ entry, repoRoot, lock, allowUnowned }));
   }
   return plan;
@@ -1330,7 +1409,7 @@ init_json_pointer();
 import { readFile as readFile4, writeFile as writeFile2, rename as rename2, mkdir as mkdir2 } from "node:fs/promises";
 import { existsSync as existsSync7 } from "node:fs";
 import { dirname as dirname4, resolve as resolve6 } from "node:path";
-var CURRENT_LOCK_SCHEMA = 1;
+var CURRENT_LOCK_SCHEMA = 2;
 function lockPath(repoRoot) {
   return resolve6(repoRoot, ".opencode", "ship.lock.json");
 }
@@ -1350,8 +1429,8 @@ function validateLock(rawLock) {
   }
   const issues = [];
   let kind = "ok";
-  if (rawLock.contractVersion !== CURRENT_LOCK_SCHEMA) {
-    issues.push(`unsupported contractVersion: ${JSON.stringify(rawLock.contractVersion)} (expected ${CURRENT_LOCK_SCHEMA})`);
+  if (rawLock.contractVersion !== CURRENT_LOCK_SCHEMA && rawLock.contractVersion !== 1) {
+    issues.push(`unsupported contractVersion: ${JSON.stringify(rawLock.contractVersion)} (expected ${CURRENT_LOCK_SCHEMA} or 1)`);
     kind = "schema";
   }
   const manager = rawLock.manager;
@@ -1361,12 +1440,15 @@ function validateLock(rawLock) {
   } else if (typeof manager !== "object" || manager === null) {
     issues.push("manager section must be an object");
     kind = kind === "ok" ? "shape" : kind;
-  } else if (manager.schemaVersion !== CURRENT_LOCK_SCHEMA) {
-    issues.push(`unsupported manager.schemaVersion: ${JSON.stringify(manager.schemaVersion)} (expected ${CURRENT_LOCK_SCHEMA})`);
+  } else if (manager.schemaVersion !== CURRENT_LOCK_SCHEMA && manager.schemaVersion !== 1) {
+    issues.push(`unsupported manager.schemaVersion: ${JSON.stringify(manager.schemaVersion)} (expected ${CURRENT_LOCK_SCHEMA} or 1)`);
     kind = "schema";
   } else if (manager.name !== "opencode-ship") {
     issues.push(`unknown manager.name: ${JSON.stringify(manager.name)}`);
     kind = "shape";
+  } else if (rawLock.contractVersion === CURRENT_LOCK_SCHEMA && manager.schemaVersion === CURRENT_LOCK_SCHEMA && manager.profile !== void 0 && !isValidProfile(manager.profile)) {
+    issues.push(`invalid manager.profile: ${JSON.stringify(manager.profile)} (expected one of: core, engineering)`);
+    kind = "shape";
   }
   if (!rawLock.files || !Array.isArray(rawLock.files)) {
     issues.push("files must be an array");
@@ -2003,7 +2085,7 @@ async function readCurrentBytes(targetPath) {
   const buf = await readFile7(targetPath);
   return { bytes: buf, hash: bytesHashString(buf.toString("utf8")) };
 }
-async function previewInstall({ rootPath, replaceManaged, forceConfig, forceRootConfig }) {
+async function previewInstall({ rootPath, profile = null, replaceManaged, forceConfig, forceRootConfig }) {
   const detection = detectProject(rootPath ?? process.cwd());
   if (detection.errors.some((e) => e.kind === "not-a-git-repo")) {
     return { ok: false, error: { kind: "invalid-project", errors: detection.errors } };
@@ -2018,6 +2100,14 @@ async function previewInstall({ rootPath, replaceManaged, forceConfig, forceRoot
   }
   const lock = validatedLock.lock;
   const migrationReport = await migration({ repoRoot, lock, forceRepair: false, detection });
+  const configResult = await loadConfig(repoRoot);
+  const configValue = configResult?.ok ? configResult.value : null;
+  const resolved = resolveProfile({
+    cli: profile,
+    config: configValue,
+    lock
+  });
+  const activeCatalog = filterCatalogByProfile(CATALOG, resolved.profile);
   const configPlan = await planConfigSynthesis({
     repoRoot,
     detection,
@@ -2025,7 +2115,7 @@ async function previewInstall({ rootPath, replaceManaged, forceConfig, forceRoot
     forceOverwrite: Boolean(forceConfig),
     migrationSeed: migrationReport?.proposedConfigSeed ?? null
   });
-  const filePlan = await planFileInstall({ repoRoot, lock, allowUnowned: Boolean(replaceManaged) });
+  const filePlan = await planFileInstall({ repoRoot, lock, allowUnowned: Boolean(replaceManaged), catalog: activeCatalog });
   const migrationPlan = await planMigrationCleanup({
     repoRoot,
     lock,
@@ -2036,7 +2126,17 @@ async function previewInstall({ rootPath, replaceManaged, forceConfig, forceRoot
   const plan = [...filePlan ?? [], ...migrationPlan, configPlan, rootPlan];
   const conflicts = plan.filter((p) => p && p.kind === "conflict");
   const summary = summarise(plan);
-  return { ok: true, repoRoot, detection, lock, plan, conflicts, summary, migrationReport };
+  return {
+    ok: true,
+    repoRoot,
+    detection,
+    lock,
+    profile: resolved,
+    plan,
+    conflicts,
+    summary,
+    migrationReport
+  };
 }
 async function previewUninstall({ rootPath }) {
   const detection = detectProject(rootPath ?? process.cwd());
@@ -2070,7 +2170,7 @@ function summarise(plan) {
   }
   return counts;
 }
-async function assembleLock({ repoRoot, plan, lock, configPlan, rootPlan }) {
+async function assembleLock({ repoRoot, plan, lock, configPlan, rootPlan, profile = null }) {
   const files = [];
   const remain = lock?.files?.filter((f) => !plan.some((op) => op?.relPath === f.path)) ?? [];
   for (const op of plan) {
@@ -2099,12 +2199,16 @@ async function assembleLock({ repoRoot, plan, lock, configPlan, rootPlan }) {
   const hasRootPlan = Boolean(rootPlan?.target || rootPlan?.pointerRecords && rootPlan.pointerRecords.length > 0);
   const hasRootDocuments = rootPlan?.pointerRecords && rootPlan.pointerRecords.length > 0 || lock?.manager?.rootDocuments && lock.manager.rootDocuments.length > 0;
   return {
-    contractVersion: 1,
+    contractVersion: CURRENT_LOCK_SCHEMA,
     manager: {
-      schemaVersion: 1,
+      schemaVersion: CURRENT_LOCK_SCHEMA,
       name: "opencode-ship",
-      version: "0.3.0",
+      version: "0.4.0",
       templateSet: TEMPLATE_SET_ID,
+      // Newly written locks always carry the resolved profile so
+      // future CLI invocations without --profile still resolve to
+      // the same choice through the lock-precedence layer.
+      profile: profile ?? lock?.manager?.profile,
       appliedAt: (/* @__PURE__ */ new Date()).toISOString(),
       config: {
         path: ".opencode/ship.config.json",
@@ -2156,7 +2260,8 @@ async function commitInstall(preview, { json, command }) {
     plan: fileOnly,
     lock: preview.lock,
     configPlan,
-    rootPlan
+    rootPlan,
+    profile: preview.profile?.profile
   });
   const txPlan = await stageFiles(fileOnly, repoRoot);
   if (configPlan && (configPlan.kind === "create" || configPlan.kind === "update")) {
@@ -2421,6 +2526,24 @@ async function checkManagedHashes(repoRoot, validatedLock) {
   }
   return { name: "managed hashes", ok: drift.length === 0, detail: drift.length ? drift.join(",") : "match" };
 }
+async function checkActiveProfileFootprint(repoRoot, validatedLock, profile) {
+  if (validatedLock.kind !== "ok" || !validatedLock.lock) {
+    return { name: "profile footprint", ok: true, detail: "no lock; n/a" };
+  }
+  if (!profile) {
+    return { name: "profile footprint", ok: true, detail: "no profile; n/a" };
+  }
+  const expectedPaths = new Set(
+    filterCatalogByProfile(CATALOG, profile).map((e) => e.path)
+  );
+  const present = (validatedLock.lock.files ?? []).filter((f) => expectedPaths.has(f.path)).map((f) => f.path);
+  const missing = [...expectedPaths].filter((p) => !present.includes(p));
+  return {
+    name: "profile footprint",
+    ok: missing.length === 0,
+    detail: missing.length ? `missing profile assets: ${missing.join(",")}` : `${present.length}/${expectedPaths.size} present`
+  };
+}
 async function checkRootConfig(repoRoot) {
   const { findRootConfig: findRootConfig2 } = await Promise.resolve().then(() => (init_root_config(), root_config_exports));
   const candidate = findRootConfig2(repoRoot);
@@ -2443,7 +2566,7 @@ function writeEnvelope({ command, plan, summary, diagnostics, json, exitCode })
     process.stdout.write(renderHuman({ command, plan, conflicts, summary, diagnostics }) + "\n");
   }
 }
-async function runDoctor({ rootPath, json, writeOutput = true }) {
+async function runDoctor({ rootPath, profile, json, writeOutput = true }) {
   const detection = detectProject(rootPath ?? process.cwd());
   if (detection.errors.some((e) => e.kind === "not-a-git-repo")) {
     const issues2 = ["not in a git repository"];
@@ -2464,6 +2587,13 @@ async function runDoctor({ rootPath, json, writeOutput = true }) {
   const sourceHashes = buildSourceHashIndex();
   const validatedLock = await readValidatedLock(repoRoot);
   const packageIntegrity = checkPackageIntegrity();
+  const configResult = await loadConfig(repoRoot);
+  const configValue = configResult?.ok ? configResult.value : null;
+  const resolved = resolveProfile({
+    cli: profile,
+    config: configValue,
+    lock: validatedLock.lock
+  });
   const checks = [
     checkNode(),
     checkGit(),
@@ -2474,6 +2604,7 @@ async function runDoctor({ rootPath, json, writeOutput = true }) {
     await checkLock(repoRoot),
     await checkConfig(repoRoot),
     await checkManagedHashes(repoRoot, validatedLock),
+    await checkActiveProfileFootprint(repoRoot, validatedLock, resolved.profile),
     await checkRootConfig(repoRoot)
   ];
   const issues = checks.filter((c) => !c.ok).map((c) => `${c.name}: ${c.detail}`);
@@ -2491,7 +2622,7 @@ async function runDoctor({ rootPath, json, writeOutput = true }) {
   if (validatedLock.kind === "schema") exitCode = 5;
   if (writeOutput) writeEnvelope({ command: "doctor", plan, summary, diagnostics: issues, json, exitCode });
   process.exitCode = exitCode;
-  return { issues, exitCode, plan, checks };
+  return { issues, exitCode, plan, checks, profile: resolved };
 }
 
 // src/installer/commands/init.js
@@ -2506,6 +2637,7 @@ async function runInit(options) {
   }
   const preview = await previewInstall({
     rootPath: options.rootPath ?? null,
+    profile: options.profile ?? null,
     replaceManaged: false,
     forceConfig: Boolean(options.forceConfig),
     forceRootConfig: Boolean(options.forceRootConfig)
@@ -2529,6 +2661,7 @@ async function runInit(options) {
   }
   const doctor = await runDoctor({
     rootPath: options.rootPath ?? null,
+    profile: options.profile ?? null,
     json: Boolean(options.json),
     writeOutput: false
   });
@@ -2634,6 +2767,7 @@ async function runDiff(options) {
   }
   const preview = await previewInstall({
     rootPath: options.rootPath ?? null,
+    profile: options.profile ?? null,
     replaceManaged: false,
     forceConfig: false,
     forceRootConfig: false
@@ -2704,6 +2838,7 @@ async function runUpdate(options) {
   }
   const preview = await previewInstall({
     rootPath: options.rootPath,
+    profile: options.profile ?? null,
     replaceManaged: options.replaceManaged,
     forceConfig: options.forceConfig,
     forceRootConfig: options.forceRootConfig
@@ -2765,7 +2900,7 @@ import { unlink as unlink3 } from "node:fs/promises";
 import { existsSync as existsSync13 } from "node:fs";
 import { resolve as resolve12 } from "node:path";
 async function runUninstall(options) {
-  const preview = await previewUninstall({ rootPath: options.rootPath });
+  const preview = await previewUninstall({ rootPath: options.rootPath, profile: options.profile ?? null });
   if (!preview.ok) {
     if (preview.error?.kind === "unsupported-lock-schema") {
       return emitFailure3(5, `unsupported lock schema: ${(preview.error.issues ?? []).join("; ")}`, options.json);
@@ -2856,7 +2991,7 @@ async function main() {
     return;
   }
   if ("error" in parsed) {
-    process.stdout.write(`opencode-ship: ${parsed.error}
+    process.stderr.write(`opencode-ship: ${parsed.error}
 
 ${helpText()}`);
     process.exitCode = 2;
@@ -2864,21 +2999,22 @@ ${helpText()}`);
   }
   const options = parsed.options ?? {};
   const opts = options;
+  const profile = opts.profile ?? null;
   switch (parsed.command) {
     case "init":
-      await runInit({ json: !!opts.json, rootPath: opts.rootPath, forceConfig: !!opts.forceConfig, forceRootConfig: !!opts.forceRootConfig, strictDoctor: !!opts.strictDoctor });
+      await runInit({ json: !!opts.json, rootPath: opts.rootPath, profile, forceConfig: !!opts.forceConfig, forceRootConfig: !!opts.forceRootConfig, strictDoctor: !!opts.strictDoctor });
       return;
     case "diff":
-      await runDiff({ json: !!opts.json, rootPath: opts.rootPath });
+      await runDiff({ json: !!opts.json, rootPath: opts.rootPath, profile });
       return;
     case "update":
-      await runUpdate({ json: !!opts.json, rootPath: opts.rootPath, replaceManaged: !!opts.replaceManaged, forceConfig: !!opts.forceConfig, forceRootConfig: !!opts.forceRootConfig });
+      await runUpdate({ json: !!opts.json, rootPath: opts.rootPath, profile, replaceManaged: !!opts.replaceManaged, forceConfig: !!opts.forceConfig, forceRootConfig: !!opts.forceRootConfig });
       return;
     case "doctor":
-      await runDoctor({ json: !!opts.json, rootPath: opts.rootPath });
+      await runDoctor({ json: !!opts.json, rootPath: opts.rootPath, profile });
       return;
     case "uninstall":
-      await runUninstall({ json: !!opts.json, rootPath: opts.rootPath, purgeConfig: !!opts.purgeConfig });
+      await runUninstall({ json: !!opts.json, rootPath: opts.rootPath, profile, purgeConfig: !!opts.purgeConfig });
       return;
     default:
       process.stdout.write(helpText() + "\n");

package/dist/core.js

@@ -1,4 +1,4 @@
-// opencode-ship/core v0.3.0
+// opencode-ship/core v0.4.0
 
 // src/adapter.js
 import { readFile, writeFile, mkdir, rename } from "node:fs/promises";

package/dist/plugin.js

@@ -1,4 +1,4 @@
-// opencode-ship v0.3.0
+// opencode-ship v0.4.0
 var __defProp = Object.defineProperty;
 var __getOwnPropNames = Object.getOwnPropertyNames;
 var __esm = (fn, res) => function __init() {
@@ -40,6 +40,17 @@ var init_hash = __esm({
   }
 });
 
+// src/profile.js
+function isValidProfile(name) {
+  return typeof name === "string" && PROFILES.includes(name);
+}
+var PROFILES;
+var init_profile = __esm({
+  "src/profile.js"() {
+    PROFILES = Object.freeze(["core", "engineering"]);
+  }
+});
+
 // src/installer/lock.js
 var lock_exports = {};
 __export(lock_exports, {
@@ -106,8 +117,8 @@ function validateLock(rawLock) {
   }
   const issues = [];
   let kind = "ok";
-  if (rawLock.contractVersion !== CURRENT_LOCK_SCHEMA) {
-    issues.push(`unsupported contractVersion: ${JSON.stringify(rawLock.contractVersion)} (expected ${CURRENT_LOCK_SCHEMA})`);
+  if (rawLock.contractVersion !== CURRENT_LOCK_SCHEMA && rawLock.contractVersion !== 1) {
+    issues.push(`unsupported contractVersion: ${JSON.stringify(rawLock.contractVersion)} (expected ${CURRENT_LOCK_SCHEMA} or 1)`);
     kind = "schema";
   }
   const manager = rawLock.manager;
@@ -117,12 +128,15 @@ function validateLock(rawLock) {
   } else if (typeof manager !== "object" || manager === null) {
     issues.push("manager section must be an object");
     kind = kind === "ok" ? "shape" : kind;
-  } else if (manager.schemaVersion !== CURRENT_LOCK_SCHEMA) {
-    issues.push(`unsupported manager.schemaVersion: ${JSON.stringify(manager.schemaVersion)} (expected ${CURRENT_LOCK_SCHEMA})`);
+  } else if (manager.schemaVersion !== CURRENT_LOCK_SCHEMA && manager.schemaVersion !== 1) {
+    issues.push(`unsupported manager.schemaVersion: ${JSON.stringify(manager.schemaVersion)} (expected ${CURRENT_LOCK_SCHEMA} or 1)`);
     kind = "schema";
   } else if (manager.name !== "opencode-ship") {
     issues.push(`unknown manager.name: ${JSON.stringify(manager.name)}`);
     kind = "shape";
+  } else if (rawLock.contractVersion === CURRENT_LOCK_SCHEMA && manager.schemaVersion === CURRENT_LOCK_SCHEMA && manager.profile !== void 0 && !isValidProfile(manager.profile)) {
+    issues.push(`invalid manager.profile: ${JSON.stringify(manager.profile)} (expected one of: core, engineering)`);
+    kind = "shape";
   }
   if (!rawLock.files || !Array.isArray(rawLock.files)) {
     issues.push("files must be an array");
@@ -181,7 +195,8 @@ var init_lock = __esm({
   "src/installer/lock.js"() {
     init_hash();
     init_json_pointer();
-    CURRENT_LOCK_SCHEMA = 1;
+    init_profile();
+    CURRENT_LOCK_SCHEMA = 2;
   }
 });
 
@@ -14282,6 +14297,11 @@ var ship_config_schema_default = {
   additionalProperties: false,
   properties: {
     schemaVersion: { const: 1 },
+    profile: {
+      type: "string",
+      enum: ["core", "engineering"],
+      description: "Active profile (precedence layer 2: ship.config > lock > core default)."
+    },
     owner: {
       type: "string",
       description: "Optional override for the issue/manifest owner field. Defaults to the agent's local user.name."
@@ -14877,7 +14897,7 @@ function flattenShipConfig(ship) {
 import { readFileSync as readFileSync2, existsSync as existsSync6 } from "node:fs";
 import { dirname as dirname5, resolve as resolve11 } from "node:path";
 import { fileURLToPath } from "node:url";
-var PACKAGE_VERSION = "0.3.0";
+var PACKAGE_VERSION = "0.4.0";
 var TEMPLATE_SET = `v${PACKAGE_VERSION}`;
 
 // src/plugin.js

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "opencode-ship",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "private": false,
   "description": "npm-distributed OpenCode installer that materializes the delivery plugin, reviewer/verifier agents, skills, ship config and lock into any consumer repository.",
   "license": "MIT",

package/schema/ship-config.schema.json

@@ -7,6 +7,11 @@
   "additionalProperties": false,
   "properties": {
     "schemaVersion": { "const": 1 },
+    "profile": {
+      "type": "string",
+      "enum": ["core", "engineering"],
+      "description": "Active profile (precedence layer 2: ship.config > lock > core default)."
+    },
     "owner": {
       "type": "string",
       "description": "Optional override for the issue/manifest owner field. Defaults to the agent's local user.name."

package/schema/ship-lock.schema.json

@@ -6,16 +6,20 @@
   "required": ["contractVersion", "manager", "files", "integrity"],
   "additionalProperties": false,
   "properties": {
-    "contractVersion": { "const": 1 },
+    "contractVersion": { "enum": [1, 2] },
     "manager": {
       "type": "object",
       "required": ["schemaVersion", "name", "version", "appliedAt", "config"],
       "additionalProperties": false,
       "properties": {
-        "schemaVersion": { "const": 1 },
+        "schemaVersion": { "enum": [1, 2] },
         "name": { "type": "string", "pattern": "^opencode-ship$" },
         "version": { "type": "string", "minLength": 1 },
         "templateSet": { "type": "string", "minLength": 1 },
+        "profile": {
+          "enum": ["core", "engineering"],
+          "description": "Profile the lock was applied under. Required on locks written at schema 2; absent on legacy schema-1 locks (resolved to core by the profile precedence layer)."
+        },
         "appliedAt": { "type": "string", "format": "date-time" },
         "config": {
           "type": "object",