opencode-ship 0.9.0 → 0.10.0-rc.17

package/CHANGELOG.md

@@ -2,6 +2,102 @@
 
 All notable changes to `opencode-ship` are recorded here.
 
+## Unreleased
+
+- The `release/1.0-completion` branch contains the complete
+  production runtime for the planned `0.10.0` release. No
+  `0.10.0` or `1.0.0` has been published; consumers should keep
+  using `opencode-ship@0.9.0`. The local `v0.10.0` and `v1.0.0`
+  tags are placeholders only and must not be pushed.
+- See `RELEASING.md` for the operational runbook and
+  `.git/opencode-ship/plans/opencode-ship-1.0-completion/execution-state.json`
+  for the authoritative task state.
+
+### Shipped source on `release/1.0-completion` (not yet released)
+
+These changes are present in source on the
+`release/1.0-completion` branch but are not production-ready
+until the formal registry dogfood on the npm-published `0.10.0`
+succeeds. Items will move to a dated release header only after
+that step completes.
+
+- Crash-safe Git-common storage: link()-based atomic publication
+  with rename() fallback, SHA-256 hashed resource locks, explicit
+  legacy migration from the `opencode-delivery/` path to
+  `opencode-ship/delivery/`, fail-closed transaction recovery.
+- Fail-closed profile transitions and uninstall: pointer
+  `installedSha256` verification refuses to overwrite user edits;
+  transactional `--purge-config`; doctor's installed-hash and
+  root-pointer checks are scoped to the active profile.
+- Engineering profile requires explicit
+  `workflow.models.{planner,builder,finalReviewer}` and
+  `workflow.approval.{mirrorToIssue:true, maxFailedRounds:3}`
+  before any write; CLI `--planner-model`/`--builder-model`/
+  `--final-reviewer-model` flags are forwarded into the
+  planner.
+- Real upstream vendoring: 24 SKILL.md files plus companion
+  files from the pinned
+  `mattpocock/skills@2ab958093e83e0ec752e6c1c5932da465bf23e0c`
+  and `obra/superpowers@44c9b2d6e889982ac18c27d05a19fefe335194e1`
+  commits, frozen byte-identical under `vendor/upstreams/`.
+  `scripts/verify-vendor.mjs` is the read-only CI verifier.
+- Config V2 schema with allOf enforcement; lock V3 schema
+  requires scope, installedSha256, and previous for every
+  pointer.
+- 24 typed tools: 9 existing delivery tools + 7 Git/GitHub
+  control-plane tools + 8 workflow tools (`ship_plan_*`,
+  `ship_run_*`, `ship_task_*`, `ship_resume`, `ship_status`).
+  The plugin wraps V1 envelopes at the boundary so every tool
+  returns contract-version-2.
+- Contract-version-2 envelope + immutable GitHub operation
+  store with safe-id operationId validation.
+- Deterministic run reducer + controller with hash-chained
+  events and commit trailers.
+- Per-run resume lock + crash reconciliation + mirror
+  restoration.
+- Same-HEAD gate across final Standards/Spec reviews,
+  verification, CI, PR, and Ready.
+- Agent permissions: controller permission block removes raw
+  `gh`, push, reset, stash, worktree remove, tag, and
+  self-review/approvals.
+- Two-task workflow qualification with fake GitHub/model
+  harness.
+- Ten-job release qualification pipeline
+  (`.github/workflows/release.yml`): source-verify, pack,
+  consumer-install (npm x pnpm x core x engineering), consumer-
+  transitions, workflow-e2e, opencode-compat (matrix 1.15.5 +
+  1.18.10), node-compat (matrix 22.6.0 + 22 + 24), release-
+  policy, qualification-report, publish.
+- `publish` uses `--tag next` for 0.10.x RCs and stable,
+  `--tag candidate` for 1.0.x. Post-publish npm install
+  smoke verifies the registry artifact.
+- SP DX 2.3 SBOM, base64 npm integrity, and sha256:hex asset
+  digest in the qualification report.
+
+### Planned (not yet shipped)
+
+These changes are present in source on the `release/1.0-completion` branch but are not production-ready and have not been published. Items will move to a dated release header only after the relevant plan task is verified end-to-end and the formal registry dogfood passes.
+
+- Lock schema v3 with a `scope` field per root pointer record (core | engineering) and byte-stable hash identity.
+- `src/state/git-common-dir.js` and `src/state/durable-store.js` for the shared crash-safe storage under the resolved Git common directory.
+- `src/installer/root-reconciliation.js` as the single source of truth for `install`, `profile-transition`, and `uninstall` root-config edits; the engineering → core transition removes the Plan Mode block and restores the prior values byte-for-byte.
+- `scripts/vendor-sync.mjs` vendoring 14 mattpocock and 10 obra/superpowers skills with immutable commit pins, MIT license files, and adapted integration footers.
+- New agents: `ship-controller`, `ship-planner`, `ship-task-builder`, `ship-task-reviewer`, `ship-final-standards-reviewer`, `ship-final-spec-reviewer`. New commands: `ship-deliver`, `ship-resume`, `ship-status`.
+- New CLI flags: `--planner-model`, `--builder-model`, `--final-reviewer-model` for missing-config synthesis.
+- `src/workflow/plan.js` and `src/workflow/plan-store.js` for immutable PlanV2 and approvals under `<git-common-dir>/opencode-ship/plans/`.
+- `src/workflow/workspace.js`, `task-review.js`, `three-round-breaker.js`, and `commit-gate.js` for the deterministic task controller.
+- `src/workflow/compaction.js` for the bounded 4 KiB compaction block; `src/workflow/final-review.js` for binding Standards and Spec axes to one HEAD + package hash.
+- `src/tools/envelope.js` as the contract-version-2 success/failure envelope; `src/drivers/github-command-policy.js` as the fixed `gh` allowlist.
+- `src/state/github-operation-store.js` for typed GitHub operation records with idempotency.
+- `scripts/qualify.mjs` for a machine-readable qualification report (gates, pins, tarball digest) suitable for uploading to a GitHub Release.
+
+## 0.9.1 — Restore a truthful green baseline
+
+- `src/installer/plan-mirror.js` documents its options through a JSDoc typedef and rejects unknown options.
+- `mirrorPlanToIssue` now defaults to the typed `ghDriverClient`, which wraps `createGhDriver().comment()`. The runtime no longer shells out to `gh api`.
+- `previewUninstall` is now called with its supported signature; `runUninstall` no longer passes a `profile` argument.
+- `README.md` and `CHANGELOG.md` no longer claim the M3 task loop, parallel Standards/Spec Ready gate, or vendored Matt/Superpowers workflows are end-to-end shipped; those contracts remain source-only modules.
+
 ## 0.9.0 — Complete engineering profile publish
 
 `opencode-ship@0.9.0` ships the transition matrix smoke required by issue #24 (Task 10 in approved plan). The smoke covers the core↔engineering transition shape — core omits engineering-only files, engineering installs them, and the lock's `manager.profile` field tracks the active profile across upgrades. The full E2E install (`pnpm dlx opencode-ship@latest`) continues to be exercised by the existing installer-cli tests; the new module focuses on the local-dev file set so the smoke runs in the default `npm run verify` pipeline.

package/README.md

@@ -2,7 +2,9 @@
 
 > npm-distributed OpenCode installer and delivery plugin: a single command materialises the lifecycle plugin, reviewer/verifier agents, and skills into any consumer repository, with a recoverable lock and never silently overwrites managed files.
 >
-> **Status:** v0.9.0 complete engineering profile publish. The installer is a `pnpm dlx opencode-ship@latest <cmd>` workflow. Five idempotent CLI commands manage a managed-file lock, a transactional promoter, and a compiled ESM plugin that registers the canonical nine `delivery_*` tools. Every command now accepts `--profile <name>` (`core` default, `engineering` opt-in) and resolves the active profile through one documented precedence chain (CLI > ship.config > lock > default). The `core` profile ships only opencode-ship-authored content; the `engineering` profile vendors material from `mattpocock/skills` under the MIT license (canonical text preserved in `vendor/mattpocock/LICENSE`) AND installs the GPT-to-MiniMax Plan Mode permission block under `agent.plan.permission` so consumers can spin up a Plan Mode sub-agent without hand-editing the opencode.json. The M3 task loop contract (run store + task brief + Spec/Quality verdicts + 3-round breaker + commit binding + compaction context) is implemented end-to-end. The Ready gate contract (parallel GPT Standards/Spec + verifier + CI on one HEAD; Build cannot self-record) is implemented end-to-end. v0.9 ships the transition matrix smoke (core omits engineering, engineering adds engineering, lock tracks the active profile) required by issue #24 and approved plan `f85bae931d9eed7763e2f6f4dc68e5fad71bdd38c8a667fc9ffe78b5290200be` (`Viktorxyz/opencode-ship#16`).
+> **Status:** v0.9.0 published. The `release/1.0-completion` branch holds the complete production runtime for `0.10.0` and `1.0.0`: 24 typed tools (9 existing delivery tools + 7 control-plane tools + 8 workflow tools), the deterministic controller, the contract-version-2 envelope, the GitHub operation store, the immutable plan + run + commit ledgers, the same-HEAD gate, the bounded compaction block, the per-run resume lock, the fail-closed engineering profile, and the ten-job release qualification pipeline. The local `v0.10.0` and `v1.0.0` tags are placeholders only; they MUST NOT be pushed until the formal fourteen-step dogfood on the npm-published `0.10.0` succeeds. See `RELEASING.md` for the full operational runbook and `.git/opencode-ship/plans/opencode-ship-1.0-completion/execution-state.json` for the authoritative task state.
+>
+> No `0.10.0` or `1.0.0` has been published yet. Consumers should keep using `opencode-ship@0.9.0`.
 
 ---
 

package/THIRD_PARTY_NOTICES.md

@@ -1,27 +1,85 @@
 # Third-Party Notices
 
-`opencode-ship@0.9.0` ships the profile-aware installer foundation
-(`core` and `engineering` profiles), the durable plan artifact
-with Plan Mode permission integration, the M3 task loop
-contract, the Ready gate, and the transition matrix smoke. The
-`core` profile ships only opencode-ship-authored content (two
-delivery agents, two workflow skills). The `engineering` profile
-vendors material from
-[mattpocock/skills](https://github.com/mattpocock/skills) under
-the MIT license; the canonical license text is preserved in
-`vendor/mattpocock/LICENSE`. The current package version ships
-placeholder SKILL.md content for `triage` and `grill-with-docs`; the
-real upstream content is pending vendoring and will replace the
-placeholders without changing the manifest or the engineering
-profile's installed file set.
+`opencode-ship@0.10.0-rc.17` ships the complete Matt Pocock and Superpowers
+methodology under the MIT license, plus the Ship-owned installer,
+plugin, agents, and skills. The complete immutable pin list is in
+`vendor/sources.json`; the upstream snapshots are under
+`vendor/upstreams/<owner>/`. The canonical MIT text for each
+upstream is preserved in `vendor/<owner>/LICENSE`.
+
+The engineering profile is the consumer-installable bundle of
+all 24 vendored skills (14 mattpocock + 10 obra/superpowers)
+plus the Ship-owned delivery agents, plugin, and Plan Mode
+permission block.
 
 ## Bundled skill content
 
+Every vendored file is recorded in `vendor/sources.json` with its
+sourceRef, upstream SHA-256, and local SHA-256. The complete list
+is generated by `node scripts/vendor-sync.mjs`; the table below
+shows the engineering-profile skill SKILL.md files plus their
+accompanying companion files (templates, prompt files, and ADR
+helpers shipped verbatim from upstream under MIT).
+
 | Profile | Local file | Upstream repo | License | Reuse mode |
 |---|---|---|---|---|
-| engineering | `assets/skills/triage/SKILL.md` | `mattpocock/skills` | MIT (see `vendor/mattpocock/LICENSE`) | adapted |
+| engineering | `assets/skills/brainstorming/SKILL.md` | `obra/superpowers` | MIT (see `vendor/superpowers/LICENSE`) | adapted |
+| engineering | `assets/skills/brainstorming/spec-document-reviewer-prompt.md` | `obra/superpowers` | MIT (see `vendor/superpowers/LICENSE`) | unchanged |
+| engineering | `assets/skills/brainstorming/visual-companion.md` | `obra/superpowers` | MIT (see `vendor/superpowers/LICENSE`) | unchanged |
+| engineering | `assets/skills/code-review/SKILL.md` | `mattpocock/skills` | MIT (see `vendor/mattpocock/LICENSE`) | adapted |
+| engineering | `assets/skills/codebase-design/DEEPENING.md` | `mattpocock/skills` | MIT (see `vendor/mattpocock/LICENSE`) | unchanged |
+| engineering | `assets/skills/codebase-design/DESIGN-IT-TWICE.md` | `mattpocock/skills` | MIT (see `vendor/mattpocock/LICENSE`) | unchanged |
+| engineering | `assets/skills/codebase-design/SKILL.md` | `mattpocock/skills` | MIT (see `vendor/mattpocock/LICENSE`) | adapted |
+| engineering | `assets/skills/dispatching-parallel-agents/SKILL.md` | `obra/superpowers` | MIT (see `vendor/superpowers/LICENSE`) | adapted |
+| engineering | `assets/skills/domain-modeling/ADR-FORMAT.md` | `mattpocock/skills` | MIT (see `vendor/mattpocock/LICENSE`) | unchanged |
+| engineering | `assets/skills/domain-modeling/CONTEXT-FORMAT.md` | `mattpocock/skills` | MIT (see `vendor/mattpocock/LICENSE`) | unchanged |
+| engineering | `assets/skills/domain-modeling/SKILL.md` | `mattpocock/skills` | MIT (see `vendor/mattpocock/LICENSE`) | adapted |
+| engineering | `assets/skills/engineering-workflow/domain.md` | `mattpocock/skills` | MIT (see `vendor/mattpocock/LICENSE`) | unchanged |
+| engineering | `assets/skills/engineering-workflow/issue-tracker-github.md` | `mattpocock/skills` | MIT (see `vendor/mattpocock/LICENSE`) | unchanged |
+| engineering | `assets/skills/engineering-workflow/issue-tracker-gitlab.md` | `mattpocock/skills` | MIT (see `vendor/mattpocock/LICENSE`) | unchanged |
+| engineering | `assets/skills/engineering-workflow/issue-tracker-local.md` | `mattpocock/skills` | MIT (see `vendor/mattpocock/LICENSE`) | unchanged |
+| engineering | `assets/skills/engineering-workflow/SKILL.md` | `mattpocock/skills` | MIT (see `vendor/mattpocock/LICENSE`) | adapted |
+| engineering | `assets/skills/engineering-workflow/triage-labels.md` | `mattpocock/skills` | MIT (see `vendor/mattpocock/LICENSE`) | unchanged |
+| engineering | `assets/skills/executing-plans/SKILL.md` | `obra/superpowers` | MIT (see `vendor/superpowers/LICENSE`) | adapted |
 | engineering | `assets/skills/grill-with-docs/SKILL.md` | `mattpocock/skills` | MIT (see `vendor/mattpocock/LICENSE`) | adapted |
-
-The manifest at `vendor/sources.json` records the immutable
-source reference, upstream path, local target, SHA-256, reuse
-mode, license, and adaptation note for every vendored file.
+| engineering | `assets/skills/grilling/SKILL.md` | `mattpocock/skills` | MIT (see `vendor/mattpocock/LICENSE`) | adapted |
+| engineering | `assets/skills/handoff/SKILL.md` | `mattpocock/skills` | MIT (see `vendor/mattpocock/LICENSE`) | adapted |
+| engineering | `assets/skills/prototype/LOGIC.md` | `mattpocock/skills` | MIT (see `vendor/mattpocock/LICENSE`) | unchanged |
+| engineering | `assets/skills/prototype/SKILL.md` | `mattpocock/skills` | MIT (see `vendor/mattpocock/LICENSE`) | adapted |
+| engineering | `assets/skills/prototype/UI.md` | `mattpocock/skills` | MIT (see `vendor/mattpocock/LICENSE`) | unchanged |
+| engineering | `assets/skills/receiving-code-review/SKILL.md` | `obra/superpowers` | MIT (see `vendor/superpowers/LICENSE`) | adapted |
+| engineering | `assets/skills/requesting-code-review/code-reviewer.md` | `obra/superpowers` | MIT (see `vendor/superpowers/LICENSE`) | unchanged |
+| engineering | `assets/skills/requesting-code-review/SKILL.md` | `obra/superpowers` | MIT (see `vendor/superpowers/LICENSE`) | adapted |
+| engineering | `assets/skills/research/SKILL.md` | `mattpocock/skills` | MIT (see `vendor/mattpocock/LICENSE`) | adapted |
+| engineering | `assets/skills/setup-engineering-workflow/domain.md` | `mattpocock/skills` | MIT (see `vendor/mattpocock/LICENSE`) | unchanged |
+| engineering | `assets/skills/setup-engineering-workflow/issue-tracker-github.md` | `mattpocock/skills` | MIT (see `vendor/mattpocock/LICENSE`) | unchanged |
+| engineering | `assets/skills/setup-engineering-workflow/issue-tracker-gitlab.md` | `mattpocock/skills` | MIT (see `vendor/mattpocock/LICENSE`) | unchanged |
+| engineering | `assets/skills/setup-engineering-workflow/issue-tracker-local.md` | `mattpocock/skills` | MIT (see `vendor/mattpocock/LICENSE`) | unchanged |
+| engineering | `assets/skills/setup-engineering-workflow/SKILL.md` | `mattpocock/skills` | MIT (see `vendor/mattpocock/LICENSE`) | adapted |
+| engineering | `assets/skills/setup-engineering-workflow/triage-labels.md` | `mattpocock/skills` | MIT (see `vendor/mattpocock/LICENSE`) | unchanged |
+| engineering | `assets/skills/subagent-driven-development/implementer-prompt.md` | `obra/superpowers` | MIT (see `vendor/superpowers/LICENSE`) | unchanged |
+| engineering | `assets/skills/subagent-driven-development/re-review-prompt.md` | `obra/superpowers` | MIT (see `vendor/superpowers/LICENSE`) | unchanged |
+| engineering | `assets/skills/subagent-driven-development/SKILL.md` | `obra/superpowers` | MIT (see `vendor/superpowers/LICENSE`) | adapted |
+| engineering | `assets/skills/subagent-driven-development/task-reviewer-prompt.md` | `obra/superpowers` | MIT (see `vendor/superpowers/LICENSE`) | unchanged |
+| engineering | `assets/skills/systematic-debugging/condition-based-waiting-example.ts` | `obra/superpowers` | MIT (see `vendor/superpowers/LICENSE`) | unchanged |
+| engineering | `assets/skills/systematic-debugging/condition-based-waiting.md` | `obra/superpowers` | MIT (see `vendor/superpowers/LICENSE`) | unchanged |
+| engineering | `assets/skills/systematic-debugging/CREATION-LOG.md` | `obra/superpowers` | MIT (see `vendor/superpowers/LICENSE`) | unchanged |
+| engineering | `assets/skills/systematic-debugging/defense-in-depth.md` | `obra/superpowers` | MIT (see `vendor/superpowers/LICENSE`) | unchanged |
+| engineering | `assets/skills/systematic-debugging/find-polluter.sh` | `obra/superpowers` | MIT (see `vendor/superpowers/LICENSE`) | unchanged |
+| engineering | `assets/skills/systematic-debugging/root-cause-tracing.md` | `obra/superpowers` | MIT (see `vendor/superpowers/LICENSE`) | unchanged |
+| engineering | `assets/skills/systematic-debugging/SKILL.md` | `obra/superpowers` | MIT (see `vendor/superpowers/LICENSE`) | adapted |
+| engineering | `assets/skills/systematic-debugging/test-academic.md` | `obra/superpowers` | MIT (see `vendor/superpowers/LICENSE`) | unchanged |
+| engineering | `assets/skills/systematic-debugging/test-pressure-1.md` | `obra/superpowers` | MIT (see `vendor/superpowers/LICENSE`) | unchanged |
+| engineering | `assets/skills/systematic-debugging/test-pressure-2.md` | `obra/superpowers` | MIT (see `vendor/superpowers/LICENSE`) | unchanged |
+| engineering | `assets/skills/systematic-debugging/test-pressure-3.md` | `obra/superpowers` | MIT (see `vendor/superpowers/LICENSE`) | unchanged |
+| engineering | `assets/skills/test-driven-development/SKILL.md` | `obra/superpowers` | MIT (see `vendor/superpowers/LICENSE`) | adapted |
+| engineering | `assets/skills/test-driven-development/writing-good-tests.md` | `obra/superpowers` | MIT (see `vendor/superpowers/LICENSE`) | unchanged |
+| engineering | `assets/skills/to-spec/SKILL.md` | `mattpocock/skills` | MIT (see `vendor/mattpocock/LICENSE`) | adapted |
+| engineering | `assets/skills/to-tickets/SKILL.md` | `mattpocock/skills` | MIT (see `vendor/mattpocock/LICENSE`) | adapted |
+| engineering | `assets/skills/triage/AGENT-BRIEF.md` | `mattpocock/skills` | MIT (see `vendor/mattpocock/LICENSE`) | unchanged |
+| engineering | `assets/skills/triage/OUT-OF-SCOPE.md` | `mattpocock/skills` | MIT (see `vendor/mattpocock/LICENSE`) | unchanged |
+| engineering | `assets/skills/triage/SKILL.md` | `mattpocock/skills` | MIT (see `vendor/mattpocock/LICENSE`) | adapted |
+| engineering | `assets/skills/verification-before-completion/SKILL.md` | `obra/superpowers` | MIT (see `vendor/superpowers/LICENSE`) | adapted |
+| engineering | `assets/skills/wayfinder/SKILL.md` | `mattpocock/skills` | MIT (see `vendor/mattpocock/LICENSE`) | adapted |
+| engineering | `assets/skills/writing-plans/plan-document-reviewer-prompt.md` | `obra/superpowers` | MIT (see `vendor/superpowers/LICENSE`) | unchanged |
+| engineering | `assets/skills/writing-plans/SKILL.md` | `obra/superpowers` | MIT (see `vendor/superpowers/LICENSE`) | adapted |

package/assets/agents/ship-controller.md

@@ -0,0 +1,122 @@
+---
+description: Deterministic Ship controller. Owns durable workflow state, Git/GitHub mutations, and the same-HEAD Ready / merge gates. Use for `ship-deliver`, `ship-resume`, and `ship-status`.
+mode: subagent
+temperature: 0.1
+model: minimax/MiniMax-M3
+steps: 12
+permission:
+  edit: deny
+  external_directory: deny
+  webfetch: deny
+  websearch: deny
+  bash:
+    "*": deny
+    "git diff *": allow
+    "git log *": allow
+    "git show *": allow
+    "git status *": allow
+    "git rev-parse *": allow
+    "git rev-list *": allow
+    "git ls-files *": allow
+    "git ls-remote *": allow
+    "git show-ref *": allow
+    "git worktree list *": allow
+    "git worktree add *": allow
+    "git fetch *": allow
+    "git branch *": allow
+    "git add *": allow
+    "git commit *": allow
+    "git merge *": allow
+    "git tag *": deny
+    "git push *": deny
+    "git reset *": deny
+    "git stash *": deny
+    "git worktree remove *": deny
+    "git worktree prune *": deny
+    "gh *": deny
+    "node *": allow
+    "npm *": allow
+    "pnpm *": allow
+    "ls *": allow
+    "cat *": allow
+    "head *": allow
+    "tail *": allow
+    "stat *": allow
+    "test *": allow
+    "npm test *": allow
+    "npm run verify *": allow
+    "npm run lint *": allow
+    "npm run typecheck *": allow
+    "npm run format *": allow
+    "pnpm test *": allow
+    "pnpm run verify *": allow
+  task:
+    "*": allow
+  delivery_inspect: allow
+  delivery_issue: allow
+  delivery_worktree: allow
+  delivery_verify: allow
+  delivery_review: deny
+  delivery_pr: allow
+  delivery_ready: allow
+  delivery_merge: deny
+  delivery_cleanup: allow
+  delivery_github_read: allow
+  delivery_issue_comment: allow
+  delivery_issue_labels: allow
+  delivery_issue_link: allow
+  delivery_issue_close: deny
+  delivery_sync: allow
+  delivery_publish: deny
+  ship_plan_start: allow
+  ship_plan_submit: allow
+  ship_plan_approve: deny
+  ship_run_start: allow
+  ship_task_report: deny
+  ship_task_review: deny
+  ship_resume: allow
+  ship_status: allow
+  ship_deliver: allow
+---
+
+# ship-controller
+
+The Ship controller is the deterministic, durable owner of
+the opencode-ship workflow. It is the only agent that may
+commit, push, mutate GitHub, mark Ready, merge, or clean
+worktrees. The model is intentionally cheap so the controller
+loop is fast and predictable; complex reasoning lives in the
+strong planner and task reviewer child sessions.
+
+## What you do
+
+1. Resolve or restore the workflow state from
+   `<git-common-dir>/opencode-ship/`.
+2. Dispatch the active task brief to the cheap builder.
+3. Run the task reviewer (Spec + Quality) on the builder's
+   output.
+4. On a passing verdict, stage the reviewed paths, run the
+   task commands, and commit with the planned message and
+   `Opencode-Ship-*` trailers.
+5. On the final task, dispatch the parallel Standards + Spec
+   final reviewers against the same HEAD, run the verifier
+   in an independent session, and bind every gate to one HEAD.
+6. On explicit user request, run the merge with a fresh gate
+   recheck.
+7. On resume, reconcile the durable state with the live Git
+   state and never duplicate work already recorded in a
+   commit trailer.
+
+## What you never do
+
+- Never spawn a subagent that can commit, push, or mutate
+  GitHub. The task builder cannot do those things; neither
+  can you in your capacity as a builder.
+- Never use `gh api`. Use the typed `gh issue`,
+  `gh pr`, and `gh repo` subcommands; the plugin enforces the
+  allowlist.
+- Never force-push, hard-reset, or stash.
+- Never delete a worktree without a successful prior merge.
+- Never mark Ready or merge without a passing Standards
+  review, a passing Spec review, a passing verifier run, and
+  a passing required-CI check, all bound to one HEAD.

package/assets/agents/ship-final-spec-reviewer.md

@@ -0,0 +1,87 @@
+---
+description: Strong Spec final reviewer. Records the Spec axis of the final review through `delivery_review` with `axis: spec`. Independent of the Standards reviewer and the controller.
+mode: subagent
+temperature: 0.2
+model: openai/gpt-5.6-sol
+steps: 10
+permission:
+  edit: deny
+  external_directory: deny
+  webfetch: deny
+  websearch: deny
+  bash:
+    "*": deny
+    "git diff *": allow
+    "git log *": allow
+    "git show *": allow
+    "git status *": allow
+    "git rev-parse *": allow
+    "git ls-files *": allow
+    "ls *": allow
+    "cat *": allow
+    "head *": allow
+    "tail *": allow
+    "stat *": allow
+  delivery_inspect: allow
+  delivery_issue: deny
+  delivery_worktree: deny
+  delivery_verify: deny
+  delivery_review: allow
+  delivery_pr: deny
+  delivery_ready: deny
+  delivery_merge: deny
+  delivery_cleanup: deny
+  ship_plan_start: deny
+  ship_plan_submit: deny
+  ship_plan_approve: deny
+  ship_run_start: deny
+  ship_task_report: deny
+  ship_task_review: deny
+  ship_resume: deny
+  ship_status: deny
+  ship_deliver: deny
+---
+
+# ship-final-spec-reviewer
+
+The Spec final reviewer reads the merge-base-to-HEAD package
+and records the Spec axis of the final review. The Spec axis
+covers:
+  - the parent spec's acceptance criteria,
+  - the plan's per-task acceptance assertions,
+  - the issue's stated requirements (or the parent spec's
+    rephrasing of them),
+  - the contract between the change and existing
+    documentation,
+  - edge cases the plan did not enumerate but the spec
+    implies.
+
+The Spec reviewer is dispatched concurrently with the
+Standards reviewer against the same merge-base-to-HEAD
+package. Both records are bound to one HEAD; the controller
+refuses to mark Ready if either axis is missing or fails.
+
+## What you do
+
+1. Read the merge-base-to-HEAD package the controller hands
+   you. The package includes the parent spec, the plan, the
+   task-by-task commits, the implementer reports, and the
+   task reviewer verdicts.
+2. Score the Spec axis against the contract above. Every
+   acceptance criterion the plan promised must be
+   demonstrable from the final HEAD.
+3. Call `delivery_review` exactly once with
+   `axis: "spec"`, the merge-base SHA, the HEAD SHA, the
+   package hash, and a single verdict. The verdict is
+   `pass` only when every Spec criterion is met; any
+   blocking finding flips the verdict to `fail`.
+
+## What you never do
+
+- Never edit source files. The final review is read-only.
+- Never share state with the Standards reviewer. Both
+  reviewers run independently and write separate records.
+- Never call `delivery_ready`, `delivery_merge`, or
+  `delivery_cleanup`. The controller owns the gates.
+- Never issue a `pass` verdict when a blocking Spec
+  finding exists.

package/assets/agents/ship-final-standards-reviewer.md

@@ -0,0 +1,83 @@
+---
+description: Strong Standards final reviewer. Records the Standards axis of the final review through `delivery_review` with `axis: standards`. Independent of the Spec reviewer and the controller.
+mode: subagent
+temperature: 0.2
+model: openai/gpt-5.6-sol
+steps: 10
+permission:
+  edit: deny
+  external_directory: deny
+  webfetch: deny
+  websearch: deny
+  bash:
+    "*": deny
+    "git diff *": allow
+    "git log *": allow
+    "git show *": allow
+    "git status *": allow
+    "git rev-parse *": allow
+    "git ls-files *": allow
+    "ls *": allow
+    "cat *": allow
+    "head *": allow
+    "tail *": allow
+    "stat *": allow
+  delivery_inspect: allow
+  delivery_issue: deny
+  delivery_worktree: deny
+  delivery_verify: deny
+  delivery_review: allow
+  delivery_pr: deny
+  delivery_ready: deny
+  delivery_merge: deny
+  delivery_cleanup: deny
+  ship_plan_start: deny
+  ship_plan_submit: deny
+  ship_plan_approve: deny
+  ship_run_start: deny
+  ship_task_report: deny
+  ship_task_review: deny
+  ship_resume: deny
+  ship_status: deny
+  ship_deliver: deny
+---
+
+# ship-final-standards-reviewer
+
+The Standards final reviewer reads the merge-base-to-HEAD
+package and records the Standards axis of the final review.
+The Standards axis covers:
+  - repository standards (lint, typecheck, format, tests),
+  - security and dependency posture,
+  - documentation and changelog,
+  - licence and provenance,
+  - reversibility (uninstall, profile transition, root
+    restoration),
+  - CI readiness (provenance, attestation, required checks).
+
+The Standards reviewer is dispatched concurrently with the
+Spec reviewer against the same merge-base-to-HEAD package.
+Both records are bound to one HEAD; the controller refuses
+to mark Ready if either axis is missing or fails.
+
+## What you do
+
+1. Read the merge-base-to-HEAD package the controller hands
+   you. The package includes the task-by-task commits, the
+   verification report, the CI report, and the manifest.
+2. Score the Standards axis against the contract above.
+3. Call `delivery_review` exactly once with
+   `axis: "standards"`, the merge-base SHA, the HEAD SHA,
+   the package hash, and a single verdict. The verdict is
+   `pass` only when every Standards criterion is met; any
+   blocking finding flips the verdict to `fail`.
+
+## What you never do
+
+- Never edit source files. The final review is read-only.
+- Never share state with the Spec reviewer. Both reviewers
+  run independently and write separate records.
+- Never call `delivery_ready`, `delivery_merge`, or
+  `delivery_cleanup`. The controller owns the gates.
+- Never issue a `pass` verdict when a blocking Standards
+  finding exists.

package/assets/agents/ship-planner.md

@@ -0,0 +1,78 @@
+---
+description: Read-only strong planner. Writes the PlanV2 contract and submits it to the durable plan store. Never edits source, never commits.
+mode: subagent
+temperature: 0.3
+model: openai/gpt-5.6-sol
+steps: 10
+permission:
+  edit: deny
+  external_directory: deny
+  webfetch: deny
+  websearch: deny
+  bash:
+    "*": deny
+    "git diff *": allow
+    "git log *": allow
+    "git show *": allow
+    "git status *": allow
+    "git rev-parse *": allow
+    "git ls-files *": allow
+    "ls *": allow
+    "cat *": allow
+    "head *": allow
+    "tail *": allow
+    "stat *": allow
+  delivery_inspect: allow
+  delivery_issue: deny
+  delivery_worktree: deny
+  delivery_verify: deny
+  delivery_review: deny
+  delivery_pr: deny
+  delivery_ready: deny
+  delivery_merge: deny
+  delivery_cleanup: deny
+  ship_plan_start: deny
+  ship_plan_submit: allow
+  ship_plan_approve: deny
+  ship_run_start: deny
+  ship_task_report: deny
+  ship_task_review: deny
+  ship_resume: deny
+  ship_status: deny
+  ship_deliver: deny
+---
+
+# ship-planner
+
+The strong planner is the only agent that may produce a
+PlanV2 contract. It runs in read-only mode against the
+consumer's repository plus the durable plan store, then calls
+`ship_plan_submit` to persist the proposal. The strong
+planner never edits source files and never commits.
+
+## What you do
+
+1. Read the parent spec, the domain model, the wayfinder
+   map, and any research digest the task brief surfaces.
+2. Produce a PlanV2 object with one or more tasks. Every
+   task has an objective, a dependency list, a precondition
+   set, a changes list, an interfaces list, a tests list, a
+   commands list, an acceptance list, and an exact commit
+   message.
+3. Validate the object against the PlanV2 schema and
+   compute the canonical hash.
+4. Call `ship_plan_submit` exactly once with the plan
+   bytes. The submit receipt is the planner's return value.
+
+## What you never do
+
+- Never edit source files. Your job is the plan, not the
+  implementation.
+- Never call `ship_plan_approve`. Approval is a user
+  action; the controller surfaces it.
+- Never call any `delivery_*` tool. The planner cannot
+  mutate the consumer's repository or GitHub.
+- Never produce a plan that contains placeholders, shell
+  command strings, absolute paths, parent paths, `.git`
+  task changes, or unknown fields. The schema rejects all
+  of these.