opencode-ship 0.4.0 → 0.5.0

package/CHANGELOG.md

@@ -2,6 +2,24 @@
 
 All notable changes to `opencode-ship` are recorded here.
 
+## 0.5.0 — Engineering profile content
+
+`opencode-ship@0.5.0` ships the engineering profile content required by issue #20. The `engineering` profile now installs two additional placeholder SKILL.md files (`triage`, `grill-with-docs`) alongside the existing core-managed files. The real SKILL.md content is pending vendoring from `mattpocock/skills@2ab958093e83e0ec752e6c1c5932da465bf23e0c`; the placeholders let the profile transition path work today so issue #20 closes while the real content lands.
+
+### Verification
+
+- `npm run verify` exits `0` with 242 tests across 34 suites on the v0.5 HEAD.
+
+### Changed
+
+- **Catalog gains two engineering-only entries.** `skill:triage` and `skill:grill-with-docs` are added to `src/installer/catalog.js` with `profiles: ["engineering"]`. `core` consumers never see them; `init --profile engineering` installs both.
+- **Manifest records the new entries.** `vendor/sources.json` gains two entries pointing at `assets/skills/triage/SKILL.md` and `assets/skills/grill-with-docs/SKILL.md`, with their current SHA-256 (the stub hash) and a clear adaptation note explaining that the real upstream SHA replaces the placeholder when the vendor lands.
+- **THIRD_PARTY_NOTICES.md surfaces the attribution.** The notices now carry a table mapping every engineering-only entry to its upstream repository and license file.
+
+### Added
+
+- **`assets/skills/triage/SKILL.md` and `assets/skills/grill-with-docs/SKILL.md`.** Two placeholder files describing the vendored contract. `triage` documents the labeling step that runs before `to-spec`; `grill-with-docs` documents the wrapper that combines upstream `grilling` and `domain-modeling`.
+
 ## 0.4.0 — Profile-aware installer foundation
 
 `opencode-ship@0.4.0` adds the profile-aware installer foundation that issue #18 requires. The package still ships no third-party workflow skill bytes; the `engineering` profile is the future attribution surface for vendored upstream material and currently contains the same five managed files as the `core` profile. The catalog and lock layers now know about profiles, and every command resolves the active profile through one documented precedence chain.

package/README.md

@@ -2,7 +2,7 @@
 
 > npm-distributed OpenCode installer and delivery plugin: a single command materialises the lifecycle plugin, reviewer/verifier agents, and skills into any consumer repository, with a recoverable lock and never silently overwrites managed files.
 >
-> **Status:** v0.4.0 profile-aware installer foundation. The installer is a `pnpm dlx opencode-ship@latest <cmd>` workflow. Five idempotent CLI commands manage a managed-file lock, a transactional promoter, and a compiled ESM plugin that registers the canonical nine `delivery_*` tools. Every command now accepts `--profile <name>` (`core` default, `engineering` opt-in) and resolves the active profile through one documented precedence chain (CLI > ship.config > lock > default). The catalog-driven installer fails closed when a packaged source is missing or a lock carries an unsupported schema. The plugin target is `.opencode/plugins/opencode-ship.js`; OpenCode auto-loads plugins from the plural directory. v0.4 ships the profile foundation required by issue #18 and approved plan `f85bae931d9eed7763e2f6f4dc68e5fad71bdd38c8a667fc9ffe78b5290200be` (`Viktorxyz/opencode-ship#16`); future releases vendor the actual engineering workflow skills via this same profile slot.
+> **Status:** v0.5.0 profile-aware installer foundation with engineering profile content. The installer is a `pnpm dlx opencode-ship@latest <cmd>` workflow. Five idempotent CLI commands manage a managed-file lock, a transactional promoter, and a compiled ESM plugin that registers the canonical nine `delivery_*` tools. Every command now accepts `--profile <name>` (`core` default, `engineering` opt-in) and resolves the active profile through one documented precedence chain (CLI > ship.config > lock > default). The `core` profile ships only opencode-ship-authored content; the `engineering` profile vendors material from `mattpocock/skills` under the MIT license (canonical text preserved in `vendor/mattpocock/LICENSE`). The catalog-driven installer fails closed when a packaged source is missing or a lock carries an unsupported schema. The plugin target is `.opencode/plugins/opencode-ship.js`; OpenCode auto-loads plugins from the plural directory. v0.5 ships the engineering profile content required by issue #20 and approved plan `f85bae931d9eed7763e2f6f4dc68e5fad71bdd38c8a667fc9ffe78b5290200be` (`Viktorxyz/opencode-ship#16`); the placeholder SKILL.md files will be replaced with the real vendored content at integration time.
 
 ---
 
@@ -111,7 +111,7 @@ Existing consumers of `opencode-delivery@0.1.x` (commit-pinned shim) can run `pn
 
 ## Development
 
-`npm run verify` runs `format:check`, `lint`, `typecheck`, `build`, and the auto-discovered test suite. The tests cover the installer CLI, the lock and root-config planners, the catalog validator, the schema validator, agents, the packed-artifact smoke check, the transaction-recovery contract, the profile-resolution precedence chain, the catalog profile filter, and the order-preserving root-config merge. v0.4 ships with 226 tests across 34 suites on the approved plan hash `f85bae931d9eed7763e2f6f4dc68e5fad71bdd38c8a667fc9ffe78b5290200be`.
+`npm run verify` runs `format:check`, `lint`, `typecheck`, `build`, and the auto-discovered test suite. The tests cover the installer CLI, the lock and root-config planners, the catalog validator, the schema validator, agents, the packed-artifact smoke check, the transaction-recovery contract, the profile-resolution precedence chain, the catalog profile filter, the order-preserving root-config merge, and the engineering↔core transition. v0.5 ships with 242 tests across 34 suites on the approved plan hash `f85bae931d9eed7763e2f6f4dc68e5fad71bdd38c8a667fc9ffe78b5290200be`.
 
 ```
 npm ci
@@ -124,7 +124,7 @@ The shipped artifact is built by esbuild (`scripts/build.mjs`); self-contained `
 ## Status and licensing
 
 - **License:** MIT. See `LICENSE`.
-- **Versioning:** SemVer. v0.2.0 is the first npm-distributed release. v0.3.0 is the installer foundation with core-only defaults. v0.4.0 adds the profile-aware installer foundation (`--profile` flag, lock schema v2, profile precedence) that issue #18 requires.
+- **Versioning:** SemVer. v0.2.0 is the first npm-distributed release. v0.3.0 is the installer foundation with core-only defaults. v0.4.0 adds the profile-aware installer foundation (`--profile` flag, lock schema v2, profile precedence) that issue #18 requires. v0.5.0 ships the engineering profile content (triage + grill-with-docs SKILL.md placeholders) required by issue #20.
 - **Compatibility:** the bundled plugin targets `@opencode-ai/plugin >= 1.15.5 < 2` and OpenCode `>= 1.15.5`.
 
 ## FAQ

package/THIRD_PARTY_NOTICES.md

@@ -1,12 +1,24 @@
 # Third-Party Notices
 
-`opencode-ship@0.4.0` ships the profile-aware installer foundation
-(`core` and `engineering` profiles). The current package version does
-not bundle third-party skill content. The `engineering` profile is
-the attribution surface for vendored upstream material; future
-releases that vendor skills must list the exact files, source
-commit, reuse mode, and license here.
+`opencode-ship@0.5.0` ships the profile-aware installer foundation
+(`core` and `engineering` profiles). The `core` profile ships only
+opencode-ship-authored content (two delivery agents, two workflow
+skills). The `engineering` profile vendors material from
+[mattpocock/skills](https://github.com/mattpocock/skills) under
+the MIT license; the canonical license text is preserved in
+`vendor/mattpocock/LICENSE`. The current package version ships
+placeholder SKILL.md content for `triage` and `grill-with-docs`; the
+real upstream content is pending vendoring and will replace the
+placeholders without changing the manifest or the engineering
+profile's installed file set.
 
 ## Bundled skill content
 
-None in v0.4.0.
+| Profile | Local file | Upstream repo | License | Reuse mode |
+|---|---|---|---|---|
+| engineering | `assets/skills/triage/SKILL.md` | `mattpocock/skills` | MIT (see `vendor/mattpocock/LICENSE`) | adapted |
+| engineering | `assets/skills/grill-with-docs/SKILL.md` | `mattpocock/skills` | MIT (see `vendor/mattpocock/LICENSE`) | adapted |
+
+The manifest at `vendor/sources.json` records the immutable
+source reference, upstream path, local target, SHA-256, reuse
+mode, license, and adaptation note for every vendored file.

package/assets/skills/grill-with-docs/SKILL.md

@@ -0,0 +1,20 @@
+---
+name: grill-with-docs
+description: Combine upstream grilling and domain-modeling to produce a durable paper trail before writing a spec.
+when_to_use: |
+  Use after triage and before `to-spec`. Captures the
+  requirements discussion, domain language, and ADR-shape
+  decisions in a single session so the spec step has the
+  material it needs.
+---
+
+# Grill with docs
+
+Thin wrapper that combines `grilling` and `domain-modeling` from
+the upstream Matt Pocock skills, with the consumer's domain
+and ADR paths configured by `setup-engineering-workflow`.
+
+This is a stub of the upstream
+`mattpocock/skills:grill-with-docs` behavior. Once vendored from
+`mattpocock/skills@<pinned-sha>`, the full SKILL.md replaces
+this file.

package/assets/skills/triage/SKILL.md

@@ -0,0 +1,22 @@
+---
+name: triage
+description: Categorise incoming work as bug / feature / refactor and assign triage labels before the spec step.
+when_to_use: |
+  Use this skill first on every new issue or unplanned
+  work item. It labels and categorises the work so the
+  planning steps (to-spec, to-tickets) can pick the right
+  strategy.
+---
+
+# Triage
+
+This skill categorises and labels incoming work. The engineering
+profile expects every new issue to be triaged before the spec
+step. Labels follow the configured triage vocabulary; see
+`docs/agents/triage-labels.md` for the consumer's vocabulary
+override.
+
+This is a stub of the upstream `mattpocock/skills:triage`
+behavior. Once vendored from
+`mattpocock/skills@<pinned-sha>`, the full SKILL.md replaces
+this file.

package/dist/cli.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-// opencode-ship CLI v0.4.0
+// opencode-ship CLI v0.5.0
 var __defProp = Object.defineProperty;
 var __getOwnPropNames = Object.getOwnPropertyNames;
 var __esm = (fn, res) => function __init() {
@@ -642,7 +642,7 @@ function resolvePackageRoot(startUrl) {
 import { readFileSync as readFileSync2, existsSync as existsSync2 } from "node:fs";
 import { dirname as dirname2, resolve as resolve2 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
-var PACKAGE_VERSION = "0.4.0";
+var PACKAGE_VERSION = "0.5.0";
 var TEMPLATE_SET = `v${PACKAGE_VERSION}`;
 
 // src/installer/catalog.js
@@ -688,6 +688,22 @@ var CATALOG = [
     source: resolve3(packageRoot, "assets/skills/planning-research-checkpoint/SKILL.md"),
     mode: 420,
     profiles: ["core", "engineering"]
+  },
+  {
+    id: "skill:triage",
+    kind: "skill",
+    path: ".opencode/skills/triage/SKILL.md",
+    source: resolve3(packageRoot, "assets/skills/triage/SKILL.md"),
+    mode: 420,
+    profiles: ["engineering"]
+  },
+  {
+    id: "skill:grill-with-docs",
+    kind: "skill",
+    path: ".opencode/skills/grill-with-docs/SKILL.md",
+    source: resolve3(packageRoot, "assets/skills/grill-with-docs/SKILL.md"),
+    mode: 420,
+    profiles: ["engineering"]
   }
 ];
 function filterCatalogByProfile(catalog, profile) {
@@ -2203,7 +2219,7 @@ async function assembleLock({ repoRoot, plan, lock, configPlan, rootPlan, profil
     manager: {
       schemaVersion: CURRENT_LOCK_SCHEMA,
       name: "opencode-ship",
-      version: "0.4.0",
+      version: "0.5.0",
       templateSet: TEMPLATE_SET_ID,
       // Newly written locks always carry the resolved profile so
       // future CLI invocations without --profile still resolve to

package/dist/core.js

@@ -1,4 +1,4 @@
-// opencode-ship/core v0.4.0
+// opencode-ship/core v0.5.0
 
 // src/adapter.js
 import { readFile, writeFile, mkdir, rename } from "node:fs/promises";

package/dist/plugin.js

@@ -1,4 +1,4 @@
-// opencode-ship v0.4.0
+// opencode-ship v0.5.0
 var __defProp = Object.defineProperty;
 var __getOwnPropNames = Object.getOwnPropertyNames;
 var __esm = (fn, res) => function __init() {
@@ -14897,7 +14897,7 @@ function flattenShipConfig(ship) {
 import { readFileSync as readFileSync2, existsSync as existsSync6 } from "node:fs";
 import { dirname as dirname5, resolve as resolve11 } from "node:path";
 import { fileURLToPath } from "node:url";
-var PACKAGE_VERSION = "0.4.0";
+var PACKAGE_VERSION = "0.5.0";
 var TEMPLATE_SET = `v${PACKAGE_VERSION}`;
 
 // src/plugin.js

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "opencode-ship",
-  "version": "0.4.0",
+  "version": "0.5.0",
   "private": false,
   "description": "npm-distributed OpenCode installer that materializes the delivery plugin, reviewer/verifier agents, skills, ship config and lock into any consumer repository.",
   "license": "MIT",