opencode-ship 1.1.0 → 1.1.1

package/CHANGELOG.md

@@ -2,17 +2,92 @@
 
 All notable changes to `opencode-ship` are recorded here.
 
-## 1.1.0 — Engineering-only, easy setup, skill discovery
-
-Stable release. The 1.1.0-rc.1 tag was promoted to `latest`
-after the qualification pipeline passed green on every matrix
-lane (npm x pnpm, opencode 1.15.5 + 1.18.10) and the
-runtime-source digest was preserved between rc.1 and 1.1.0
-(only the `package.json` version, the README "Status" section,
-and this changelog header changed). The S5 real 14-step
-dogfood is still pending a valid OpenAI provider credential; the
-1.0.0 line's published 0.10.0 digest is the runtime source
-witness for both 0.10.0 and 1.1.0.
+## 1.1.1 — Stabilization + first self-hosting release (UNRELEASED)
+
+> Active stabilization branch: `fix/1.1.1-stabilization`.
+> Parent tracker: https://github.com/Viktorxyz/opencode-ship/issues/40.
+> Authoritative plan: `docs/release/1.1.1-stabilization-plan.md`.
+
+This release repairs the consumer-readiness gaps that made
+`1.1.0` unsuitable as a self-hosting control plane:
+
+This release repairs the consumer-readiness gaps that made
+`1.1.0` unsuitable as a self-hosting control plane:
+
+- Engineering is the only shipped profile. New CLI selection of
+  the legacy `core` profile is rejected with exit 2; persisted
+  `core` configs and locks migrate to engineering on read.
+- Lock schema v4 adds `manager.setupComplete` and removes
+  `cleanupPending` from the install lock (cleanup retry now
+  lives under the Git common directory).
+- Workflow agents carry `<model-from-config>` placeholders; the
+  installer renders the configured `workflow.models` at install
+  time so a model change updates exactly the affected agent
+  files. The lock pins the rendered sha256.
+- Default-deny consumers can run the full controller flow
+  without manual permission patching. The installer no longer
+  owns the Plan Mode permission block; consumers configure it
+  via the built-in Plan agent. Subagent depth is pinned to 2.
+- The workflow state machine handles every documented event
+  kind (including the previously-missing `task-report`,
+  `final-review`, `ready-pending`, `all-tasks-done`).
+- Engineering Ready requires Standards and Spec final reviews
+  bound to the same HEAD and package hash, with `verdict: pass`
+  on both axes. Legacy single-review manifests continue to
+  fall through to the legacy gate.
+- Trusted-auto skill discovery installs from a configurable
+  allowlist with immutable provenance; skills land in the
+  active issue worktree under `.opencode/skills/<name>/` and
+  are recorded in `.opencode/ship.skills.lock.json`.
+- The `/setup-ship-workflow` skill is single (the legacy
+  duplicate `setup-engineering-workflow` is removed); it is
+  GitHub-only in `1.1.1` and routes model selection through
+  the existing CLI update transaction.
+- Release qualification pipeline runs the packed self-hosting
+  E2E end-to-end instead of just extracting the tarball.
+- Test contract: zero filename-disabled tests in the test
+  runner; tracked `tsconfig.dts.json` removed.
+
+See `docs/release/1.1.1-stabilization-plan.md` for the full plan
+and issue #40 for the bounded evidence ledger.
+
+## 1.1.0 — Engineering-only, easy setup, skill discovery (2026-08-08)
+
+> **Known gap:** `1.1.0` is the published `latest` but it does
+> not yet pass a real registry dogfood with real OpenCode,
+> GitHub, and models; the workflow surface ships in pieces
+> (skill discovery is dead code, the dual final review is not
+> enforced, and the Plan Mode permission is installer-owned).
+> `1.1.1` is the first fully self-hosting release and should be
+> preferred once it is on `npm dist-tag latest`. The 1.1.0
+> tarball remains available for pinned consumers.
+
+Stable release. Promoted to `npm dist-tag latest` after the
+qualification pipeline passed green on every matrix lane
+(npm x pnpm, opencode 1.15.5 + 1.18.10) and the runtime-source
+digest was preserved between rc.1 and 1.1.0 (only the
+`package.json` version, the README "Status" section, and this
+changelog header changed).
+
+Distribution:
+
+```text
+npm dist-tags
+  latest: 1.1.0
+  next:   1.0.0
+```
+
+Verification:
+
+```text
+npm install --prefix /tmp/fresh opencode-ship@latest
+node_modules/.bin/opencode-ship --version
+# prints: opencode-ship 1.1.0
+```
+
+The S5 real 14-step dogfood is still pending a valid OpenAI
+provider credential; the 1.0.0 line's published 0.10.0 digest
+is the runtime source witness for both 0.10.0 and 1.1.0.
 
 The breaking change set, the engineering-only `init` flow, the
 `setup-ship-workflow` skill, the `find-skills` discovery

package/README.md

@@ -2,9 +2,9 @@
 
 > npm-distributed OpenCode installer and delivery plugin: a single command materialises the lifecycle plugin, reviewer/verifier agents, and skills into any consumer repository, with a recoverable lock and never silently overwrites managed files.
 >
-> **Status:** `1.1.0` is on `npm dist-tag latest`. `1.0.0` is on `npm dist-tag next`. `release/0.10.0` is the historical live release branch; `release/1.1.0-engineering-only` ships the engineering profile directly without a separate `core` profile. From 1.1.0 forward the engineering profile is the only supported profile; the previous `core` profile was removed in the 1.1.0 hard cut. `init` works as a one-liner: `pnpm dlx opencode-ship@latest init`. The user fills in the AI model roles through a one-shot `setup-ship-workflow` skill that runs after the install. Skill discovery is integrated; trusted-source skills auto-install locally to the repo. The deep-research gate now asks first and only generates a prompt on explicit consent. See `docs/release/1.1.0-execution-plan.md` for the authoritative plan.
+> **Status:** `1.1.0` is on `npm dist-tag latest`. The `1.1.x` stabilization line (parent issue #40) is in progress on the `fix/1.1.1-stabilization` branch. When `1.1.1` ships it becomes the first self-hosting release and `1.1.0` is deprecated. The `release/1.1.0-engineering-only` branch ships the engineering profile directly without a separate `core` profile. The `1.1.0` tag is immutable; consumers should use `opencode-ship@1.1.0` today and switch to `opencode-ship@1.1.1` once it is promoted to `latest`. See `docs/release/1.1.1-stabilization-plan.md` for the authoritative plan and issue #40 for the bounded evidence ledger.
 >
-> Consumers should use `opencode-ship@1.1.0` (or `opencode-ship@latest`).
+> Consumers should use `opencode-ship@1.1.0` (or `@latest`) until `1.1.1` ships. The previous `1.0.0` is on `next`; consumers who pinned to `1.0.x` will continue to receive updates on that channel.
 
 ---
 
@@ -38,22 +38,23 @@ The `init` command succeeds without any model flags. The setup skill writes the
 
 `opencode-ship` is the npm-distributed successor to `opencode-delivery`. From 1.1.0 it bundles:
 
-- a **24-tool OpenCode plugin** that auto-loads from `.opencode/plugins/opencode-ship.js`;
-- **8 ship agents** (controller, planner, builder, task-reviewer, final-standards-reviewer, final-spec-reviewer) plus the two legacy delivery agents (reviewer, verifier);
-- **3 ship commands** (`ship-deliver`, `ship-resume`, `ship-status`) plus the new one-shot `setup-ship-workflow`;
-- **26 skills** (delivery-workflow, planning-research-checkpoint, the Matt + Superpowers engineering catalog, the new setup-ship-workflow and skill-discovery);
+- a **typed OpenCode plugin** that auto-loads from `.opencode/plugins/opencode-ship.js`;
+- **ship agents** (controller, planner, task-builder, task-reviewer, final-standards-reviewer, final-spec-reviewer) plus the two legacy delivery agents (reviewer, verifier) for backward compatibility;
+- **ship commands** (`ship-deliver`, `ship-resume`, `ship-status`) plus the one-shot `setup-ship-workflow`;
+- **the engineering skill catalog** (delivery-workflow, planning-research-checkpoint, the Matt + Superpowers methodology catalog, the new setup-ship-workflow and skill-discovery);
 - **setup-ship-workflow skill** that walks the user through tracker / labels / docs / model roles;
-- **skill-discovery** that auto-installs trusted-source skills from the open agent skills ecosystem.
+- **skill-discovery** that auto-installs trusted-source skills into the active issue worktree with immutable provenance.
 - a **lifecycle state machine** for one issue → one worktree → one PR → one merge → one cleanup;
 - a **Git worktree driver** (no rebase-after-push, no force-push, no `--force-with-lease`);
 - a **GitHub CLI driver** that talks only to typed `gh pr/issue` verbs (never `gh api`);
 - a **project adapter** (`.opencode/ship.config.json`) so any project can declare its own verify/bootstrap/CI commands;
-- **reviewer** and **verifier** subagents, both with strictly bounded `delivery_*` permissions;
-- a **delivery-workflow** skill that drives the canonical lifecycle;
-- a **planning-research-checkpoint** skill that offers a single, optional Deep Research gate per non-trivial plan;
-- a **delivery doctor** that walks every catalog entry to verify install state and lock consistency;
+- **reviewer** and **verifier** subagents, both with strictly bounded permissions;
+- **delivery-workflow** skill that drives the canonical lifecycle;
+- **planning-research-checkpoint** skill that offers a single, optional Deep Research gate per non-trivial plan;
+- a **doctor** that walks every catalog entry to verify install state and lock consistency;
 - an **install/doctor/diff/update/uninstall** CLI with stable exit codes and `--json` envelopes;
-- a **.opencode/ship.lock.json** lock that records managed paths, hashes, and the installer-owned JSON pointers;
+- a **.opencode/ship.lock.json** install lock that records managed paths, hashes, and the installer-owned root permissions;
+- a **.opencode/ship.skills.lock.json** skill inventory that records project-local dynamic skills with immutable provenance;
 - **recovery** for interrupted cleanup, half-written state files, and stale worktrees.
 
 The package **does not** own:
@@ -157,7 +158,7 @@ The shipped artifact is built by esbuild (`scripts/build.mjs`); self-contained `
 ## Status and licensing
 
 - **License:** MIT. See `LICENSE`.
-- **Versioning:** SemVer. v0.2.0 is the first npm-distributed release. v0.3.0 is the installer foundation with core-only defaults. v0.4.0 adds the profile-aware installer foundation (`--profile` flag, lock schema v2, profile precedence) that issue #18 requires. v0.5.0 ships the engineering profile content (triage + grill-with-docs SKILL.md placeholders) required by issue #20. v0.6.0 ships the durable plan artifact + Plan Mode permission integration required by issue #21. v0.7.0 ships the M3 task loop contract (run store, task brief, Spec/Quality verdicts, 3-round breaker, commit binding, compaction context) required by issue #22. v0.8.0 ships the Ready gate contract (parallel GPT Standards/Spec + verifier + CI on one HEAD; Build cannot self-record) required by issue #23. v0.9.0 ships the transition matrix smoke (core omits engineering, engineering adds engineering, lock tracks the active profile) required by issue #24.
+- **Versioning:** SemVer. v0.2.0 is the first npm-distributed release. v0.3.0 is the installer foundation. v0.4.0 adds the profile-aware installer foundation (`--profile` flag, lock schema v2, profile precedence) that issue #18 requires. v0.5.0 ships the engineering profile content (triage + grill-with-docs SKILL.md placeholders) required by issue #20. v0.6.0 ships the durable plan artifact + Plan Mode permission integration required by issue #21. v0.7.0 ships the M3 task loop contract (run store, task brief, Spec/Quality verdicts, 3-round breaker, commit binding, compaction context) required by issue #22. v0.8.0 ships the Ready gate contract (parallel Standards/Spec + verifier + CI on one HEAD) required by issue #23. v0.9.0 ships the transition matrix smoke (engineering installs all assets, lock tracks the active profile) required by issue #24. v1.0.0 promotes the dogfooded 0.10.0 to stable. v1.1.0 removes the legacy core profile and ships the one-liner init + setup-ship-workflow skill. v1.1.1 is the first fully self-hosting release (see `docs/release/1.1.1-stabilization-plan.md`).
 - **Compatibility:** the bundled plugin targets `@opencode-ai/plugin >= 1.15.5 < 2` and OpenCode `>= 1.15.5`.
 
 ## FAQ

package/THIRD_PARTY_NOTICES.md

@@ -1,6 +1,6 @@
 # Third-Party Notices
 
-`opencode-ship@1.1.0` ships the complete Matt Pocock and Superpowers
+`opencode-ship@1.1.1` ships the complete Matt Pocock and Superpowers
 methodology under the MIT license, plus the Ship-owned installer,
 plugin, agents, and skills. The complete immutable pin list is in
 `vendor/sources.json`; the upstream snapshots are under

package/assets/agents/ship-controller.md

@@ -2,7 +2,7 @@
 description: Deterministic Ship controller. Owns durable workflow state, Git/GitHub mutations, and the same-HEAD Ready / merge gates. Use for `ship-deliver`, `ship-resume`, and `ship-status`.
 mode: subagent
 temperature: 0.1
-model: minimax/MiniMax-M3
+model: <model-from-config>
 steps: 12
 permission:
   edit: deny

package/assets/agents/ship-final-spec-reviewer.md

@@ -2,7 +2,7 @@
 description: Strong Spec final reviewer. Records the Spec axis of the final review through `delivery_review` with `axis: spec`. Independent of the Standards reviewer and the controller.
 mode: subagent
 temperature: 0.2
-model: openai/gpt-5.6-sol
+model: <model-from-config>
 steps: 10
 permission:
   edit: deny

package/assets/agents/ship-final-standards-reviewer.md

@@ -2,7 +2,7 @@
 description: Strong Standards final reviewer. Records the Standards axis of the final review through `delivery_review` with `axis: standards`. Independent of the Spec reviewer and the controller.
 mode: subagent
 temperature: 0.2
-model: openai/gpt-5.6-sol
+model: <model-from-config>
 steps: 10
 permission:
   edit: deny

package/assets/agents/ship-planner.md

@@ -2,7 +2,7 @@
 description: Read-only strong planner. Writes the PlanV2 contract and submits it to the durable plan store. Never edits source, never commits.
 mode: subagent
 temperature: 0.3
-model: openai/gpt-5.6-sol
+model: <model-from-config>
 steps: 10
 permission:
   edit: deny

package/assets/agents/ship-task-builder.md

@@ -2,7 +2,7 @@
 description: Cheap task builder. Implements one task at a time. Reports through `ship_task_report`. Cannot commit, push, mutate GitHub, or record reviews.
 mode: subagent
 temperature: 0.2
-model: minimax/MiniMax-M3
+model: <model-from-config>
 steps: 8
 permission:
   edit: allow

package/assets/agents/ship-task-reviewer.md

@@ -2,7 +2,7 @@
 description: Task reviewer. Records a single Spec + Quality verdict through `ship_task_review`. Independent of the builder.
 mode: subagent
 temperature: 0.2
-model: minimax/MiniMax-M3
+model: <model-from-config>
 steps: 8
 permission:
   edit: deny