opencode-ship 1.1.0 → 1.1.1-rc.9

package/docs/release/1.1.1-stabilization-plan.md

@@ -0,0 +1,655 @@
+# opencode-ship 1.1.1 stabilization + self-hosting plan
+
+> **Purpose:** Repair `opencode-ship` so it is fully self-hosting, then install it into its own repository as the last-known-good control plane.
+> **Status:** Approved for execution
+> **Owner:** Maintainer
+> **Last reviewed:** 2026-08-15
+> **Tracker:** https://github.com/Viktorxyz/opencode-ship/issues/40
+> **Related:** [README.md](../../README.md), [CHANGELOG.md](../../CHANGELOG.md), [RELEASING.md](../../RELEASING.md), [THIRD_PARTY_NOTICES.md](../../THIRD_PARTY_NOTICES.md), [docs/adr/0001-opencode-ship-redesign.md](../adr/0001-opencode-ship-redesign.md)
+
+---
+
+## Fixed decisions
+
+| Decision | Value |
+|---|---|
+| Target release | `opencode-ship@1.1.1` (first fully self-hosting release) |
+| Rationale | Repairs behavior already promised by `1.1.0`; not a new product contract |
+| Self-host control plane | Exact pinned `opencode-ship@1.1.1`; never `@latest`, local `dist`, local tarball, or dev-source plugin |
+| Skill discovery | `trusted-auto` with immutable provenance; max 5 per workflow; always into active issue worktree |
+| Planner | `openai/gpt-5.6-sol` |
+| Builder / controller / task reviewer | `minimax/MiniMax-M3` |
+| Final Standards + Spec reviewer | `openai/gpt-5.6-sol` |
+| Tracker | GitHub (others deferred) |
+| Built-in `plan` agent | Consumer-owned; `opencode-ship` provides dedicated `ship-planner` |
+| `subagent_depth` | `2` |
+| Merge policy | Squash, only after explicit `merge it`, fresh gates required |
+| OpenCode restart | User-owned only |
+| Leo local dirty main / worktrees | Not touched |
+| `1.1.0` post-publication | Deprecated, not retagged |
+
+These decisions are immutable during execution unless the user explicitly changes them.
+
+## Current factual baseline (re-check before every slice)
+
+| Item | Value |
+|---|---|
+| Upstream repository | `/home/viktorcordas/repos/opencode-ship` |
+| Release branch base | `release/1.1.0-engineering-only` |
+| Release branch HEAD | `35fc676011e0592ef25756f6f7b48ab5fa6b9ffb` |
+| Published stable | `1.1.0` (npm `latest`; sha512 verified; provenance signed) |
+| Published previous stable | `1.0.0` (npm `next`) |
+| Immutable tag | `1.1.0@5ea0794354d309e23a394dbf29f1fab0321a7428` (do not move) |
+| `origin/main` HEAD (at S0) | `be1dad497e894c00f492932c601f9db8a9624245` |
+| Divergence at S0 | `release/1.1.0-engineering-only` ahead of `origin/main` by 9 commits; `origin/main` ahead of `release/1.1.0-engineering-only` by 2 commits (both are docs-only closures) |
+| Stabilization branch | `fix/1.1.1-stabilization` (created in S0) |
+| Release qualification artifact | https://github.com/Viktorxyz/opencode-ship/releases/download/1.1.0/opencode-ship-1.1.0.qualification.json |
+| GitHub release | https://github.com/Viktorxyz/opencode-ship/releases/tag/1.1.0 |
+| Node minimum | `>=22.6.0` |
+| OpenCode peer | `>=1.15.5 <2` |
+
+The stabilization branch re-verifies this baseline in S0 and re-reports after each merge.
+
+## Scope
+
+The critical path is S0 → S18. Each slice has explicit acceptance criteria and posts an evidence comment to issue #40. A failed slice is fixed by an additive commit and the affected qualification is repeated end-to-end.
+
+## Non-goals
+
+- Do not change Leo product, design-lab, API, dashboard, web, or database code.
+- Do not touch, clean, reset, stash, stage, or commit the dirty Leo `main` worktree.
+- Do not touch the existing Leo worktrees.
+- Do not rebase or rewrite pushed history.
+- Do not retag `1.1.0` or `1.0.0`.
+- Do not publish new major/minor versions until `1.1.1` is on `latest` and proven self-hosting.
+- Do not bypass a failed CI check or dogfood step.
+- Do not kill, signal, or restart any OpenCode process; the user owns restarts.
+
+## Definition of done
+
+- [ ] `main` contains both the 1.0 promotion and 1.1 stabilization history.
+- [ ] Zero tracked filename-disabled tests.
+- [ ] `npm run format:check`, `npm run lint`, `npm run typecheck`, `npm run build`, `npm test` all pass.
+- [ ] Configured models appear in installed agent frontmatter and are enforced by tool authorization.
+- [ ] Default-deny consumer runs the full controller flow without manual permission patching.
+- [ ] Public plugin tool state machine drives plan → Ready → explicit merge → cleanup end-to-end.
+- [ ] Two final review axes (Standards + Spec) are required and bound to one HEAD.
+- [ ] Trusted skills install only in the active issue worktree with immutable provenance and drift protection.
+- [ ] `setup-ship-workflow` is chat-only and GitHub-only.
+- [ ] Packed E2E runs only through public plugin tools.
+- [ ] Release workflow qualifies the same SHA and tarball.
+- [ ] Real registry dogfood passes on `1.1.1-rc.N` with real OpenCode, GitHub, and models.
+- [ ] `1.1.1` is on npm `latest`; `1.1.0` is deprecated.
+- [ ] `opencode-ship` uses exact `1.1.1` for its own workflow.
+- [ ] Self-hosted docs issue passes plan → cleanup end-to-end.
+- [ ] Leo uses exact `1.1.1`; migration and dogfood PRs both pass.
+- [ ] README, CHANGELOG, RELEASING, GitHub release, npm dist-tags, and qualification evidence all describe the same shipped state.
+
+## Safety and authorization gates
+
+The Build agent autonomously edits, tests, commits, pushes, opens and updates PRs, and pushes release tags after the underlying PR merges. It stops and requests explicit user authorization before each of the following:
+
+| Gate | Irreversible or externally visible operation |
+|---|---|
+| A | Any real plan approval — controller surfaces, user approves, controller calls `ship_plan_approve` |
+| B | Merge of the stabilization PR into `main` |
+| C | Merge of the RC/stable promotion PR |
+| D | Merge of the self-host bootstrap PR |
+| E | Merge of any Leo migration PR |
+| F | Merge of the Leo dogfood PR |
+| G | `npm dist-tag add ... latest` and any other 2FA/OTP step |
+| H | User restarts OpenCode — Build never touches OpenCode processes |
+
+No gate authorizes force-push, hard reset, stash, rebasing pushed work, amending pushed commits, bypassing failed checks, retagging existing versions, overwriting published versions, or weakening a verification or dogfood gate.
+
+## Evidence ledger
+
+The parent issue is the authoritative progress tracker. Add one bounded comment after every slice using this schema:
+
+```text
+Status: pass | fail | blocked | partial
+Phase: S0 | S1 | ... | S18
+Source SHA: <40 hex>
+Package version: <semver or n/a>
+Summary:
+- <at most three bullets>
+Evidence:
+- issue / PR / workflow / release URLs
+- npm integrity and tarball SHA-256 when applicable
+- artifact URL when applicable
+Verification:
+- <command> -> exit <code>
+Risks:
+- <unresolved concern or none>
+Next authorization: <exact gate or none>
+```
+
+Never place tokens, credentials, raw model prompts containing secrets, or unsanitized environment dumps in the issue or repository.
+
+---
+
+## S0: Persist plan and tracker
+
+### Goal
+
+Create durable coordination surfaces before any runtime change.
+
+### Steps
+
+1. Re-read this plan, `README.md`, `CHANGELOG.md`, `RELEASING.md`, `schema/ship-config.schema.json`, `.github/workflows/release.yml`, and `tests/package/neutral-consumer.test.mjs`.
+2. Confirm the upstream worktree is clean.
+3. Create parent issue #40 with body that mirrors the fixed decisions and A–H gates.
+4. Anchor this plan's `Tracker` header to issue URL.
+5. Add the S0 evidence comment to the issue.
+6. Create `fix/1.1.1-stabilization` from `release/1.1.0-engineering-only`.
+7. Merge `origin/main` into the stabilization branch with `--no-ff`. Resolve `package.json`, `package-lock.json`, and `THIRD_PARTY_NOTICES.md` in favor of 1.1 behavior.
+8. Commit this plan to the stabilization branch.
+
+### Verification
+
+```bash
+git status --short
+git diff --check
+git log --oneline HEAD~1..HEAD
+npm view opencode-ship dist-tags --json
+```
+
+### Acceptance
+
+- [ ] Parent issue #40 exists.
+- [ ] The issue and this file contain identical fixed decisions.
+- [ ] Current branch, SHA, and npm tags are recorded.
+- [ ] No runtime or release workflow code changed in the plan commit.
+- [ ] `release/1.1.0-engineering-only` is an ancestor of `HEAD`.
+- [ ] `origin/main` is an ancestor of `HEAD`.
+
+## S1: Restore the test contract
+
+### Goal
+
+Make the test suite executable specification of the actual contract; no filename-disabled tests.
+
+### Branching
+
+Continue on `fix/1.1.1-stabilization`. No new branches per slice.
+
+### Required changes
+
+- Remove `*.skip.test.mjs` exclusions and the `.core-removed` filter from `scripts/run-all-tests.mjs`.
+- Rename all 15 `*.skip.test.mjs` files back to `*.test.mjs`.
+- Convert core-profile assertions into legacy-input migration assertions.
+- Add `tests/release/no-disabled-tests.test.mjs` that fails if any tracked test is disabled by filename convention.
+- Fix the `root-config` teardown race (move per-test cleanup to file-level or use `t.before/after`).
+- Restore `tests/release/opencode-discovery.test.mjs`, `tests/release/runtime-source-sha.test.mjs`, `tests/release/release-metadata.test.mjs`.
+- Restore `tests/package/packed-artifact.test.mjs`, `tests/package/two-task-workflow.test.mjs`, `tests/package/neutral-consumer.test.mjs`, `tests/package/transition-matrix.test.mjs`.
+- Restore `tests/installer/root-config.test.mjs`, `tests/installer/root-restoration.test.mjs`, `tests/installer/profile.test.mjs`, `tests/installer/profile-transition.test.mjs`, `tests/installer/lock-profile.test.mjs`, `tests/installer/executor-profile.test.mjs`, `tests/installer/engineering-routing.test.mjs`, `tests/installer/catalog-profile.test.mjs`.
+
+### Acceptance
+
+- [ ] `zero filename-disabled tests`.
+- [ ] All restored tests run in `npm test`.
+- [ ] Restored tests may fail at this slice; S2–S7 make them green.
+
+## S2: Config + legacy migration
+
+### Goal
+
+`0.4`, `0.9`, `1.0`, and `1.1.0` consumers safely converge on `1.1.1` engineering profile without losing user-owned config.
+
+### Required changes
+
+- `schema/ship-config.schema.json`: keep `additionalProperties: false`, but add `skillDiscovery` enum object; preserve legacy `profile: "core"` only inside an `x-legacy-profiles` annotation used by readers, never accepted in new writes.
+- `schema/ship-lock.schema.json`: bump to `v4`; add `manager.setupComplete`; remove `cleanupPending` from the install lock.
+- `src/profile.js`: keep `PROFILES = ["engineering"]`; keep legacy-core promotion only at read path for persisted locks/configs.
+- `src/installer/config.js`: `loadConfig` accepts legacy core configs and flags them as `legacyPromotion: true`. `hasCompletedModels` reads `cfg.workflow.models` (full config object).
+- `src/installer/engineering-config.js`: unify on `cfg.workflow.models`; remove runtime defaults.
+- `src/installer/lock.js`: read v1/v2/v3 core locks; promote to engineering on read; refuse to write v4 over user-modified v3 bytes.
+- `src/installer/planner.js`: model flags patch only `workflow.models`; never trigger `forceConfig`.
+- `src/installer/executor.js`: thread correct `cfg` to `hasCompletedModels`; derive setup state from current config + lock.
+- `src/installer/setup-pending.js`: move all writes/deletes into the installer's transaction layer.
+- `src/installer/commands/init.js`: write setup marker when `workflow.models` is incomplete; remove marker when complete.
+- `src/installer/commands/update.js`: model flags are not `forceConfig`; preserve unrelated config fields.
+- `src/installer/commands/doctor.js`: report incomplete models, stale/missing marker, lock/config disagreement, and ownership drift.
+- Move `cleanupPending` from `ship.lock.json` to `<git-common-dir>/opencode-ship/cleanup-pending.json`.
+
+### Acceptance
+
+- [ ] Fresh init without model flags creates marker.
+- [ ] Init with model flags omits marker and writes `setupComplete: true`.
+- [ ] Update with model flags preserves unrelated config bytes.
+- [ ] v1/v2/v3 core locks load and converge to engineering.
+- [ ] Unknown profile in legacy config still fails closed.
+- [ ] Cleanup retry state lives under Git common dir, not in the install lock.
+
+## S3: Dynamic model routing
+
+### Goal
+
+Configured planner / builder / finalReviewer models appear in installed agent frontmatter and are enforced by tool authorization.
+
+### Required changes
+
+- New `src/installer/agent-renderer.js`:
+  - Reads `cfg.workflow.models` plus the agent map.
+  - Returns rendered agent bytes.
+- `src/installer/catalog.js`: mark each workflow agent as `dynamic: true` with renderer binding.
+- `assets/agents/ship-controller.md`, `ship-planner.md`, `ship-task-builder.md`, `ship-task-reviewer.md`, `ship-final-standards-reviewer.md`, `ship-final-spec-reviewer.md`: remove concrete `model:` values; add `<model-from-config>` placeholder or rely on renderer-only frontmatter.
+- `src/installer/planner.js`: compute managed hashes from rendered bytes.
+- `src/installer/executor.js`: after render, hash the rendered agent bytes for the lock entry.
+- `src/tools/ship-plan-start.js`: dispatch the planner agent through the plugin's agent invocation; record `dispatchedPlannerModel`.
+- `src/tools/ship-plan-submit.js`: authorize `submittedBy` against `dispatchedPlannerModel`.
+- `src/tools/ship-task-report.js`: authorize `submittedBy` against builder model.
+- `src/tools/ship-task-review.js`: authorize `submittedBy` against builder model.
+- `src/tools/ship-final-review.js` (new): authorize against finalReviewer model; persist axis and verdict.
+
+### Acceptance
+
+- [ ] Canonical templates contain no provider/model IDs.
+- [ ] Rendered consumer agents match configured model roles exactly.
+- [ ] Changing only the builder model updates exactly three agent files.
+- [ ] Wrong-role model cannot submit task report/review/final review.
+- [ ] Plan/run snapshots capture model snapshot used for that run.
+
+## S4: Root permissions
+
+### Goal
+
+Default-deny consumers can run the full controller flow without manual permission patching; JSONC preserves user formatting; Plan permissions revert to user-owned.
+
+### Required changes
+
+- New `src/installer/root-permissions.js`: declarative matrix of Build + controller + subagent + tool permissions.
+- `src/installer/root-config.js`: replace ad-hoc pointer list with the matrix; capture previous values for each pointer.
+- `src/installer/root-reconciliation.js`: structural-equality comparison via `stableStringify`; restore exact previous bytes when no unrelated edits occurred.
+- `src/installer/plan-mode-permissions.js`: delete the consumer-owned Plan pointer from installer ownership; record previous values for cleanup.
+- `src/installer/commands/init.js`: prompt before creating a missing root config; use `update --force-root-config` instead.
+- Add `jsonc-parser` to dependencies; use it to preserve comments, trailing commas, and key order on rewrite.
+- Pre-install snapshot stored under `<git-common-dir>/opencode-ship/install-backup/<sha>.json` so uninstall restores exact bytes when untouched.
+
+### Acceptance
+
+- [ ] Fresh root creation prompts before writing.
+- [ ] Existing JSON and JSONC retain comments, ordering, and unrelated keys.
+- [ ] Install/update/uninstall restore exact bytes when untouched.
+- [ ] Unrelated post-install edits survive uninstall.
+- [ ] Pointer drift fails closed.
+- [ ] Build cannot impersonate planner/builder/reviewers.
+- [ ] Controller cannot approve or merge.
+
+## S5: Workflow state machine
+
+### Goal
+
+Public plugin tools drive the workflow end-to-end without tests importing internal reducer helpers.
+
+### Required changes
+
+- `src/workflow/run-controller.js`: add cases for `TASK_REPORT`, `TASK_COMPLETE`, `FINAL_REVIEW`, `READY`, `READY_PENDING`, `ALL_TASKS_DONE`, `MERGE`, `DONE`. Reject out-of-order events. Reject second active task. Preserve task ID across fix rounds.
+- New `src/tools/ship-task-start.js`: dispatch a task; record child session ID, brief hash, reviewed paths.
+- New `src/tools/ship-task-commit.js`: validate HEAD, reviewed path set, evidence, trailers; append immutable commit record.
+- New `src/tools/ship-task-complete.js`: advance to next dependency-satisfied task or to final review.
+- `src/tools/ship-run-start.js`: require `revision` and `sha256`; verify approval models and live base SHA; use `createInitialState`.
+- `src/tools/ship-plan-start.js`: open workflow; record dispatched planner model.
+- `src/tools/ship-plan-submit.js`: validate configured planner model and workflow/revision equality.
+- `src/tools/ship-plan-approve.js`: persist immutable approval with model snapshot, base SHA, decision.
+- `src/tools/ship-task-report.js`: include `changes` and `tests`.
+- `src/tools/ship-task-review.js`: validate spec + quality.
+- `src/tools/ship-resume.js`: restore from disk; reconcile live Git state; never duplicate work.
+- `src/tools/ship-status.js`: return the documented compact shape.
+- `src/plugin.js`: register the four new tool definitions and ensure the schema is correct.
+
+### Acceptance
+
+- [ ] All reducer transitions have tests.
+- [ ] Public plugin schema includes every required argument.
+- [ ] Two-task flow with one failed review round passes.
+- [ ] Base SHA drift rejects `ship_run_start`.
+- [ ] Resume after each state and crash boundary.
+
+## S6: Dual final review + same-HEAD Ready gate + mirror restore
+
+### Goal
+
+Ready requires Standards and Spec reviews, verifier, and CI all bound to one HEAD, package hash, and merge base.
+
+### Required changes
+
+- `src/workflow/final-review.js`: persist axis-specific records (`standards`, `spec`) with HEAD, merge-base SHA, and package hash.
+- `src/workflow/same-head-gate.js`: bind Standards + Spec + verifier + CI + PR head to the same commit.
+- `src/workflow/plan-store.js`: mirror restoration hook used by `ship_resume`.
+- `src/tools/delivery-review.js`: support axis mode for engineering runs; preserve legacy single-review mode for legacy manifests.
+- `src/tools/delivery-ready.js`: enforce the engineering same-HEAD gate when the run is engineering.
+- `src/tools/delivery-merge.js`: fresh gate recheck on every merge.
+- `src/tools/delivery-cleanup.js`: advance merged runs to done.
+- New `src/state/issue-mirror.js`: idempotent mirror publish; restore from issue when local plan copy is missing.
+
+### Acceptance
+
+- [ ] Missing Standards or Spec review blocks Ready.
+- [ ] Different HEAD blocks Ready.
+- [ ] Different package hash blocks Ready.
+- [ ] Failed review blocks Ready.
+- [ ] Ready does not merge.
+- [ ] Merge requires explicit `merge it` subject.
+- [ ] Cleanup succeeds only on a clean, published-PR worktree.
+
+## S7: Trusted skill lifecycle
+
+### Goal
+
+Trusted auto-install works with immutable provenance, audit, and uninstall.
+
+### Required changes
+
+- New `src/skills/policy.js`: read/write trusted-owner list, install threshold, auto-install cap.
+- New `src/skills/registry.js`: pinned version of the `skills` CLI; `shell: false`; immutable ref extraction.
+- New `src/skills/inventory.js`: write/read `.opencode/ship.skills.lock.json` under the consumer repo (not Git common dir).
+- New `src/tools/ship-skill-discover.js`: parse `npx skills find`; partition candidates.
+- New `src/tools/ship-skill-install.js`: enforce policy; install only into active issue worktree.
+- New `src/tools/ship-skill-audit.js`: report missing, drifted, unpinned, colliding skills.
+- New `src/tools/ship-skill-uninstall.js`: remove only unchanged recorded files.
+- `schema/ship-config.schema.json`: add `skillDiscovery` schema.
+- `schema/ship-lock.schema.json`: keep install lock clean; skill inventory is a sibling lock.
+- `assets/agents/ship-controller.md`: remove raw `npx skills add` permission.
+- Remove direct network fetches from `ship-deliver`; only the typed tools fetch.
+- Reject path escape, symlink, managed-skill collision, malformed frontmatter, oversize tree.
+
+### Acceptance
+
+- [ ] Trusted pinned skill auto-installs.
+- [ ] Trusted unpinned skill requires approval.
+- [ ] Untrusted skill requires approval.
+- [ ] Sixth trusted skill is not auto-installed.
+- [ ] Install into main worktree is rejected.
+- [ ] Linked worktree uses the resolved Git common dir.
+- [ ] Audit detects missing, drifted, untracked skills.
+- [ ] Uninstall removes only files matching lock hash.
+- [ ] Modified skill files are preserved as conflicts.
+
+## S8: Setup workflow
+
+### Goal
+
+After `init`, the user only chats; setup is GitHub-only.
+
+### Required changes
+
+- Rename `assets/skills/setup-engineering-workflow` to `assets/skills/setup-ship-workflow`.
+- Remove duplicate entry from `MATT_SKILLS` in `src/installer/catalog.js`.
+- Install every companion file for every bundled skill.
+- `assets/commands/setup-ship-workflow.md`: thin command wrapper around the canonical skill.
+- Skill reads root `opencode.json` or `opencode.jsonc`; uses `opencode providers list` and `opencode models <provider>` for validation.
+- Apply model selections through `opencode-ship update --planner-model ... --builder-model ... --final-reviewer-model ... --force-config` so config + lock + rendered agents + setup marker all update in one transaction.
+- Do not manually delete the setup marker.
+- Limit supported tracker to GitHub in 1.1.1; surface others as unsupported.
+- Add `## Ship workflow` block to `AGENTS.md` if absent.
+- Add `docs/agents/issue-tracker.md`, `domain.md`, and `triage-labels.md` if absent.
+- No `TODO.md`, `FOLLOW_UP.md`, or `BACKLOG.md`.
+
+### Acceptance
+
+- [ ] Exactly one installed skill has `name: setup-ship-workflow`.
+- [ ] Every relative link in each installed skill resolves in the consumer.
+- [ ] Setup rerun is no-op for completed sections.
+- [ ] Custom delivery config survives model setup.
+- [ ] Unsupported tracker stops before writing.
+- [ ] Setup completes with no global `opencode-ship` install.
+
+## S9: Packed self-hosting E2E
+
+### Goal
+
+Prove the packed artifact works end-to-end through the public plugin tools.
+
+### Required changes
+
+- Rewrite `tests/package/two-task-workflow.test.mjs` to operate through the packed plugin's public tool surface. No direct imports of `src/workflow/*` or `src/state/*`.
+- `tests/package/packed-artifact.test.mjs`: install into a neutral Git repo; run setup, model render, root permissions, skill install/uninstall, package uninstall.
+- `tests/package/neutral-consumer.test.mjs`: real OpenCode discovery against supported versions.
+- `tests/release/opencode-discovery.test.mjs`: same coverage as S10.
+- Replace the no-op `scripts/dogfood-local.mjs` with a real disposable-repository driver.
+
+### Acceptance
+
+- [ ] No E2E step imports internal helpers to manufacture state.
+- [ ] Every lifecycle change is produced through a registered tool.
+- [ ] Packed artifact has no source-tree or `node_modules` dependency.
+- [ ] Discovery exposes the canonical tool set on both supported OpenCode versions.
+
+## S10: CI + release policy
+
+### Goal
+
+Every qualification job runs against the same tag SHA and tarball.
+
+### Required changes
+
+- `.github/workflows/release.yml`:
+  - Resolve the release ref once from tag push or `workflow_dispatch` input.
+  - All `actions/checkout` use that exact ref.
+  - `workflow-e2e` runs the packed self-hosting test from S9.
+  - Release policy rejects tags not reachable from `origin/main`.
+  - `node-compat` matrix uploads per-row Node versions under unique artifact names.
+  - `opencode-discovery` matrix is mandatory; skip is a release failure.
+  - Publish job is the only place pinned to Node 22.14.0 / npm 11.5.2.
+- `.github/workflows/verify.yml`: trigger on PRs to `main`, `merge_group`, and pushes to `main` and stabilization branches.
+- `tests/release/release-metadata.test.mjs`: assert single resolved ref per job.
+- `tests/release/node-compat-policy.test.mjs`: assert each matrix lane uploads its own observed Node version.
+- `tests/release/no-disabled-tests.test.mjs`: gate.
+- Generate tool/agent/skill counts from canonical inventories at build time.
+
+### Acceptance
+
+- [ ] Workflow tests pass on the qualification ref.
+- [ ] Dispatch and tag paths use the same checkout SHA.
+- [ ] Qualification report SHA matches the tag SHA.
+- [ ] `workflow-e2e` runs the real packed flow.
+
+## S11: Docs hygiene
+
+### Goal
+
+Docs reflect the actual shipped state.
+
+### Required changes
+
+- Remove tracked `tsconfig.dts.json`; rely on the `.tmp` generation.
+- New `tests/release/no-tracked-temp-configs.test.mjs`: fail if any tracked file is a generated config.
+- Rewrite README around the actual 1.1.1 flow.
+- Rewrite RELEASING around the `1.1.x` trunk-based RC cycle.
+- Add `## 1.1.1` changelog entry that explicitly identifies `1.1.0` as an incomplete workflow release.
+- Update THIRD_PARTY_NOTICES to reflect the actual shipped skill count.
+- Remove false claims about green E2E, core downgrade, unsupported trackers, automatic skill auditing, and stale matrix lanes.
+- Restore provenance for unchanged Matt companion files under the canonical setup skill; do not classify copied bytes as first-party.
+
+### Acceptance
+
+- [ ] No tracked file contains developer-specific absolute paths.
+- [ ] README, CHANGELOG, RELEASING, package metadata, GitHub release, and npm dist-tags all agree.
+- [ ] Skill count and tool count are generated, not hand-written.
+
+## S12: `1.1.1-rc.1`
+
+### Goal
+
+Publish the first self-hosting RC.
+
+### Steps
+
+1. Merge stabilization PR into `main` after Gate B.
+2. Push the `1.1.1-rc.1` tag from the merged commit.
+3. Watch the release workflow to `publish` step.
+4. Verify npm integrity, provenance, GitHub release digest, and qualification artifact.
+5. Post the S12 evidence comment to issue #40.
+
+### Acceptance
+
+- [ ] `npm view opencode-ship dist-tags` shows `next: 1.1.1-rc.1`.
+- [ ] `npm install --prefix /tmp/fresh opencode-ship@next` exits 0; CLI prints `opencode-ship 1.1.1-rc.1`.
+
+## S13: Real registry dogfood
+
+### Goal
+
+End-to-end proof of the engineering workflow using the npm-published RC.
+
+### Steps
+
+1. Provision the existing disposable `Viktorxyz/opencode-ship-dogfood` or create a fresh one.
+2. Install `opencode-ship@1.1.1-rc.N` with the exact `--planner-model`, `--builder-model`, `--final-reviewer-model` flags.
+3. Restart OpenCode.
+4. Run the full 14-step dogfood from `docs/release/1.0.0-execution-plan.md` (S5), adapted to `ship-planner`, dual final review, mirror restore, `ship_resume`, and cleanup.
+5. Capture evidence in the issue comment.
+
+### Acceptance
+
+- [ ] Real planner, real builder, real final reviewers.
+- [ ] One failed review round + fix + retry succeeds.
+- [ ] User-controlled restart + `ship_resume` restores from ledger.
+- [ ] Local plan deletion + mirror restore succeeds.
+- [ ] Standards + Spec + verifier + CI all bind to one HEAD.
+- [ ] Ready-before-merge snapshot proves no premature merge.
+- [ ] Explicit `merge it` merges, cleans up, and leaves no unpublished commits.
+
+## S14: `1.1.1` stable
+
+### Goal
+
+Promote the validated RC to stable.
+
+### Steps
+
+1. Bump `package.json`, `package-lock.json` from `1.1.1-rc.1` to `1.1.1`.
+2. Update README status and CHANGELOG `## 1.1.1` header.
+3. Open the stable promotion PR; merge after Gate C.
+4. Push the `1.1.1` tag.
+5. Watch the release workflow to `publish`.
+6. User resolves npm 2FA + `npm dist-tag add opencode-ship@1.1.1 latest` (Gate G).
+7. `npm dist-tag deprecate opencode-ship@1.1.0` with an upgrade note.
+
+### Acceptance
+
+- [ ] `npm view opencode-ship dist-tags` shows `latest: 1.1.1`, `next: 1.0.0`.
+- [ ] `npm view opencode-ship@1.1.0` deprecation warning points to `1.1.1`.
+- [ ] Runtime-source digest matches the accepted RC.
+
+## S15: Self-hosting bootstrap
+
+### Goal
+
+Install `opencode-ship@1.1.1` into its own repository as the LKG control plane.
+
+### Steps
+
+1. Bootstrap from a fresh worktree based on `origin/main` after `1.1.1` is on `latest`.
+2. `pnpm dlx opencode-ship@1.1.1 init --force-root-config` (only if root config is missing).
+3. In chat: `/setup-ship-workflow`. Provide planner, builder, final reviewer, GitHub repo, triage defaults.
+4. Restart OpenCode.
+5. Commit the complete managed snapshot: `opencode.json`, `.opencode/plugins/opencode-ship.js`, `.opencode/agents/*.md`, `.opencode/commands/*.md`, `.opencode/skills/**`, `.opencode/ship.config.json`, `.opencode/ship.lock.json`, `.opencode/ship.skills.lock.json`, `AGENTS.md` block, `docs/agents/**`.
+6. Open bootstrap PR; merge after Gate D.
+7. Restart OpenCode again so the merged snapshot is loaded.
+
+### Acceptance
+
+- [ ] Exactly one plugin instance.
+- [ ] Expected ship and delivery agents discoverable.
+- [ ] Expected typed tools discoverable (24 + 4 task/final + 4 skill = 32).
+- [ ] `doctor --json` exits 0.
+- [ ] `diff --json` exits 0 with status `noop`.
+- [ ] Setup marker absent.
+- [ ] No use of `@latest`, local `dist`, local tarball, or dev-source plugin.
+
+## S16: Self-host acceptance
+
+### Goal
+
+Prove the installed `opencode-ship@1.1.1` drives one real issue through the full workflow inside this repo.
+
+### Steps
+
+1. Open a small docs-only issue (suggested: "docs: add a short self-hosting recovery example to RELEASING.md").
+2. Run `Ship issue N` through plan, approval, trusted skill discovery, worktree, builder, task review, dual final reviews, verifier, CI, Ready.
+3. Stop at Ready.
+4. After Gate F (`merge it`), merge, cleanup.
+5. Post S16 evidence.
+
+### Acceptance
+
+- [ ] `1.1.1` is now a validated self-hosting LKG.
+
+## S17: Leo migration
+
+### Goal
+
+Migrate `Viktorxyz/leo` to `opencode-ship@1.1.1` engineering profile without losing user-owned config.
+
+### Steps
+
+1. Create a fresh worktree from `origin/main`. Do not touch the dirty local `main` or any existing worktree.
+2. Open a new Leo migration issue that supersedes PR #221.
+3. `pnpm dlx opencode-ship@1.1.1 diff --root . --json` (exit 1 expected).
+4. Reconcile: preserve `pnpm verify:workspace`, `pnpm accept:dev`, `dev-acceptance` CI gate, `agent.plan.permission`, all force-push/reset/cleanup restrictions.
+5. Remove legacy `.opencode/delivery.json`, `.opencode/delivery.lock.json`, legacy `opencode-delivery` skills path, explicit plugin entry, stale `pnpm-lock.yaml` importer.
+6. `pnpm dlx opencode-ship@1.1.1 diff --root . --json` (no conflicts expected).
+7. `pnpm dlx opencode-ship@1.1.1 update --root . --json`.
+8. `pnpm dlx opencode-ship@1.1.1 doctor --root . --json` (exit 0).
+9. `pnpm dlx opencode-ship@1.1.1 diff --root . --json` (exit 0, status `noop`).
+10. Commit and open the migration PR. Do not use `--replace-managed`, `--force-config`, or `--force-root-config` to mask conflicts.
+11. After Gate E, merge.
+12. User restarts OpenCode.
+13. Close PR #221 as superseded.
+
+### Acceptance
+
+- [ ] `opencode-ship doctor --json` exits 0.
+- [ ] No `opencode-delivery` references remain in active config.
+- [ ] `pnpm verify:workspace` exits 0.
+- [ ] `pnpm accept:dev` exits 0.
+- [ ] Lock: exact `1.1.1`, engineering profile, `setupComplete: true`, no cleanup pending.
+
+## S18: Leo dogfood
+
+### Goal
+
+Prove Leo's installed `opencode-ship@1.1.1` drives one real Leo issue through the full workflow.
+
+### Steps
+
+1. Open a small docs-only Leo issue (suggested: small docs drift fix).
+2. Run `Ship issue N` through the full workflow.
+3. Stop at Ready. Merge only after Gate F.
+4. Post S18 evidence.
+
+### Acceptance
+
+- [ ] Standards + Spec + verifier + CI all bind to one HEAD.
+- [ ] Ready-before-merge snapshot proves no premature merge.
+- [ ] Explicit `merge it` merges and cleans up with no unpublished commits.
+
+---
+
+## Rescue procedures
+
+If startup is broken after self-host bootstrap:
+
+```sh
+OPENCODE_DISABLE_PROJECT_CONFIG=1 opencode
+```
+
+If the plugin loader is broken:
+
+```sh
+OPENCODE_PURE=1 opencode
+```
+
+If both fail, open a rescue worktree at the known-good commit and use the exact registry CLI to repair; do not load the candidate plugin.
+
+## Rollback
+
+Before merge: stop on conflict; add a corrective commit or close the PR. Preserve the worktree.
+
+After self-host bootstrap: open a normal revert PR; user restarts OpenCode.
+
+After Leo migration: open a normal revert PR; re-run `pnpm verify:workspace` and `pnpm accept:dev`; user restarts OpenCode.
+
+Do not use `opencode-ship uninstall --purge-config` as a primary rollback; a Git revert restores the exact prior state.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "opencode-ship",
-  "version": "1.1.0",
+  "version": "1.1.1-rc.9",
   "private": false,
   "description": "npm-distributed OpenCode installer that materializes the delivery plugin, reviewer/verifier agents, skills, ship config and lock into any consumer repository.",
   "license": "MIT",