opencode-ship 1.1.0 → 1.1.1

package/dist/cli.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-// opencode-ship CLI v1.1.0
+// opencode-ship CLI v1.1.1
 var __defProp = Object.defineProperty;
 var __getOwnPropNames = Object.getOwnPropertyNames;
 var __esm = (fn, res) => function __init() {
@@ -10,6 +10,351 @@ var __export = (target, all) => {
     __defProp(target, name, { get: all[name], enumerable: true });
 };
 
+// src/profile.js
+function isValidProfile(name) {
+  return typeof name === "string" && PROFILES.includes(name);
+}
+function isLegacyProfile(name) {
+  return typeof name === "string" && LEGACY_PROFILES.includes(name);
+}
+function normalizeProfile(name) {
+  if (name === void 0 || name === null) return DEFAULT_PROFILE;
+  if (isValidProfile(name)) return name;
+  if (isLegacyProfile(name)) return DEFAULT_PROFILE;
+  return null;
+}
+function isLegacyCoreProfile(name) {
+  return name === "core";
+}
+function resolveProfile({ cli = null, config = null, lock = null } = {}) {
+  if (cli !== null && cli !== void 0) {
+    if (isLegacyCoreProfile(cli)) {
+      throw new Error(
+        `unknown CLI profile 'core' (only 'engineering' is supported in this release; the 'core' profile was removed; existing persisted 'core' is promoted to engineering on next init/update)`
+      );
+    }
+    const v = normalizeProfile(cli);
+    if (v === null) {
+      throw new Error(
+        `unknown CLI profile '${cli}' (only 'engineering' is supported in current release)`
+      );
+    }
+    return { profile: v, source: "cli" };
+  }
+  if (config && typeof config === "object" && config.profile !== void 0 && config.profile !== null) {
+    if (isLegacyCoreProfile(config.profile)) {
+      return { profile: DEFAULT_PROFILE, source: "default", promotedFrom: "core" };
+    }
+    const v = normalizeProfile(config.profile);
+    if (v === null) {
+      throw new Error(
+        `unknown ship.config.json profile '${config.profile}' (only 'engineering' is supported in current release)`
+      );
+    }
+    return { profile: v, source: "config" };
+  }
+  if (lock && typeof lock === "object" && lock.manager && lock.manager.profile !== void 0 && lock.manager.profile !== null) {
+    if (isLegacyCoreProfile(lock.manager.profile)) {
+      return { profile: DEFAULT_PROFILE, source: "default", promotedFrom: "core" };
+    }
+    const v = normalizeProfile(lock.manager.profile);
+    if (v === null) {
+      throw new Error(
+        `unknown lock manager.profile '${lock.manager.profile}' (only 'engineering' is supported in current release)`
+      );
+    }
+    return { profile: v, source: "lock" };
+  }
+  return { profile: DEFAULT_PROFILE, source: "default" };
+}
+var PROFILES, DEFAULT_PROFILE, LEGACY_PROFILES;
+var init_profile = __esm({
+  "src/profile.js"() {
+    PROFILES = Object.freeze(["engineering"]);
+    DEFAULT_PROFILE = "engineering";
+    LEGACY_PROFILES = Object.freeze(["core"]);
+  }
+});
+
+// src/installer/package-root.js
+import { existsSync, readFileSync } from "node:fs";
+import { fileURLToPath } from "node:url";
+import { dirname, resolve } from "node:path";
+function resolvePackageRoot(startUrl) {
+  let candidate = dirname(fileURLToPath(startUrl ?? import.meta.url));
+  while (candidate && candidate !== "/") {
+    const pkgPath = resolve(candidate, "package.json");
+    if (existsSync(pkgPath)) {
+      try {
+        const raw = readFileSync(pkgPath, "utf8");
+        const pkg = JSON.parse(raw);
+        if (pkg && pkg.name === PACKAGE_NAME) return candidate;
+      } catch {
+      }
+    }
+    candidate = dirname(candidate);
+  }
+  throw new Error(`opencode-ship package root not found from ${startUrl ?? import.meta.url}`);
+}
+var PACKAGE_NAME;
+var init_package_root = __esm({
+  "src/installer/package-root.js"() {
+    PACKAGE_NAME = "opencode-ship";
+  }
+});
+
+// src/version.js
+import { readFileSync as readFileSync2, existsSync as existsSync2 } from "node:fs";
+import { dirname as dirname2, resolve as resolve2 } from "node:path";
+import { fileURLToPath as fileURLToPath2 } from "node:url";
+var PACKAGE_VERSION, TEMPLATE_SET;
+var init_version = __esm({
+  "src/version.js"() {
+    PACKAGE_VERSION = "1.1.1";
+    TEMPLATE_SET = `v${PACKAGE_VERSION}`;
+  }
+});
+
+// src/installer/catalog.js
+var catalog_exports = {};
+__export(catalog_exports, {
+  CATALOG: () => CATALOG,
+  PACKAGE_VERSION: () => PACKAGE_VERSION,
+  TEMPLATE_SET_ID: () => TEMPLATE_SET_ID,
+  filterCatalogByProfile: () => filterCatalogByProfile,
+  validateCatalog: () => validateCatalog
+});
+import { resolve as resolve3, relative, sep } from "node:path";
+import { existsSync as existsSync3, statSync } from "node:fs";
+function filterCatalogByProfile(catalog, profile) {
+  const effective = profile === void 0 || profile === null ? DEFAULT_PROFILE : isValidProfile(profile) ? profile : profile === "core" ? DEFAULT_PROFILE : null;
+  if (effective === null) {
+    throw new Error(
+      `filterCatalogByProfile: unknown profile '${profile}' (expected one of: ${PROFILES.join(", ")})`
+    );
+  }
+  return catalog.filter((entry) => Array.isArray(entry.profiles) && entry.profiles.includes(effective));
+}
+function validateCatalog({ catalog = CATALOG } = {}) {
+  const seenIds = /* @__PURE__ */ new Set();
+  const seenPaths = /* @__PURE__ */ new Set();
+  const issues = [];
+  for (const entry of catalog) {
+    if (!entry || typeof entry !== "object") {
+      issues.push({ id: null, kind: "shape", message: "catalog entry is not an object" });
+      continue;
+    }
+    const { id, kind, path, source, mode } = entry;
+    if (typeof id !== "string" || id.length === 0) {
+      issues.push({ id: null, kind: "id", message: `entry id missing: ${JSON.stringify(entry)}` });
+    } else if (seenIds.has(id)) {
+      issues.push({ id, kind: "duplicate-id", message: `duplicate catalog id: ${id}` });
+    } else {
+      seenIds.add(id);
+    }
+    if (typeof path !== "string" || !path.startsWith(".opencode" + sep)) {
+      issues.push({ id, kind: "path", message: `path must be rooted under .opencode/: ${path}` });
+    }
+    if (seenPaths.has(path)) {
+      issues.push({ id, kind: "duplicate-path", message: `duplicate target path: ${path}` });
+    } else {
+      seenPaths.add(path);
+    }
+    if (!ALLOWED_KINDS.has(kind)) {
+      issues.push({ id, kind: "kind", message: `unsupported entry kind: ${kind}` });
+    }
+    if (typeof source !== "string" || source.length === 0) {
+      issues.push({ id, kind: "source", message: `source path missing: ${id}` });
+    } else if (!existsSync3(source)) {
+      issues.push({ id, kind: "source-missing", message: `source file not found: ${source}` });
+    } else {
+      try {
+        const stats = statSync(source);
+        if (!stats.isFile()) {
+          issues.push({ id, kind: "source-not-file", message: `source is not a regular file: ${source}` });
+        } else if (stats.size === 0) {
+          issues.push({ id, kind: "source-empty", message: `source file is empty: ${source}` });
+        }
+      } catch (e) {
+        issues.push({ id, kind: "source-stat", message: `unable to stat source: ${e?.message ?? e}` });
+      }
+      const rel = relative(packageRoot, source);
+      if (rel.startsWith("..")) {
+        issues.push({ id, kind: "source-out-of-package", message: `source escapes package root: ${source}` });
+      }
+    }
+    if (mode !== 420) {
+      issues.push({ id, kind: "mode", message: `mode must be 0o644: ${id}` });
+    }
+    if (!Array.isArray(entry.profiles) || entry.profiles.length === 0) {
+      issues.push({ id, kind: "profiles", message: `profiles must be a non-empty array: ${id}` });
+    } else {
+      for (const p of entry.profiles) {
+        if (!isValidProfile(p)) {
+          issues.push({ id, kind: "profiles", message: `unknown profile in profiles[${entry.profiles.indexOf(p)}]: ${p} (expected one of: ${PROFILES.join(", ")})` });
+        }
+      }
+    }
+  }
+  if (issues.length > 0) {
+    const summary = issues.map((i) => i.message).join("; ");
+    const err = new Error(`opencode-ship catalog validation failed: ${summary}`);
+    err.issues = issues;
+    err.catalogValidation = true;
+    throw err;
+  }
+  return catalog;
+}
+var TEMPLATE_SET_ID, packageRoot, MATT_SKILLS, SUPER_SKILLS, ENGINEERING_AGENTS, ENGINEERING_COMMANDS, CATALOG, ALLOWED_KINDS;
+var init_catalog = __esm({
+  "src/installer/catalog.js"() {
+    init_package_root();
+    init_version();
+    init_profile();
+    TEMPLATE_SET_ID = TEMPLATE_SET;
+    packageRoot = resolvePackageRoot(import.meta.url);
+    MATT_SKILLS = [
+      "engineering-workflow",
+      "grilling",
+      "domain-modeling",
+      "grill-with-docs",
+      "triage",
+      "to-spec",
+      "to-tickets",
+      "wayfinder",
+      "handoff",
+      "research",
+      "prototype",
+      "codebase-design",
+      "code-review"
+    ];
+    SUPER_SKILLS = [
+      "brainstorming",
+      "writing-plans",
+      "executing-plans",
+      "subagent-driven-development",
+      "dispatching-parallel-agents",
+      "test-driven-development",
+      "systematic-debugging",
+      "verification-before-completion",
+      "requesting-code-review",
+      "receiving-code-review"
+    ];
+    ENGINEERING_AGENTS = [
+      "ship-controller",
+      "ship-planner",
+      "ship-task-builder",
+      "ship-task-reviewer",
+      "ship-final-standards-reviewer",
+      "ship-final-spec-reviewer"
+    ];
+    ENGINEERING_COMMANDS = [
+      "ship-deliver",
+      "ship-resume",
+      "ship-status"
+    ];
+    CATALOG = [
+      {
+        id: "plugin:opencode-ship",
+        kind: "plugin",
+        path: ".opencode/plugins/opencode-ship.js",
+        source: resolve3(packageRoot, "dist/plugin.js"),
+        mode: 420,
+        profiles: ["engineering"]
+      },
+      {
+        id: "agent:delivery-reviewer",
+        kind: "agent",
+        path: ".opencode/agents/delivery-reviewer.md",
+        source: resolve3(packageRoot, "assets/agents/delivery-reviewer.md"),
+        mode: 420,
+        profiles: ["engineering"]
+      },
+      {
+        id: "agent:delivery-verifier",
+        kind: "agent",
+        path: ".opencode/agents/delivery-verifier.md",
+        source: resolve3(packageRoot, "assets/agents/delivery-verifier.md"),
+        mode: 420,
+        profiles: ["engineering"]
+      },
+      ...ENGINEERING_AGENTS.map((name) => ({
+        id: `agent:${name}`,
+        kind: "agent",
+        path: `.opencode/agents/${name}.md`,
+        source: resolve3(packageRoot, `assets/agents/${name}.md`),
+        mode: 420,
+        profiles: ["engineering"]
+      })),
+      ...ENGINEERING_COMMANDS.map((name) => ({
+        id: `command:${name}`,
+        kind: "support",
+        path: `.opencode/commands/${name}.md`,
+        source: resolve3(packageRoot, `assets/commands/${name}.md`),
+        mode: 420,
+        profiles: ["engineering"]
+      })),
+      {
+        id: "skill:delivery-workflow",
+        kind: "skill",
+        path: ".opencode/skills/delivery-workflow/SKILL.md",
+        source: resolve3(packageRoot, "assets/skills/delivery-workflow/SKILL.md"),
+        mode: 420,
+        profiles: ["engineering"]
+      },
+      {
+        id: "skill:planning-research-checkpoint",
+        kind: "skill",
+        path: ".opencode/skills/planning-research-checkpoint/SKILL.md",
+        source: resolve3(packageRoot, "assets/skills/planning-research-checkpoint/SKILL.md"),
+        mode: 420,
+        profiles: ["engineering"]
+      },
+      ...MATT_SKILLS.map((name) => ({
+        id: `skill:matt:${name}`,
+        kind: "skill",
+        path: `.opencode/skills/${name}/SKILL.md`,
+        source: resolve3(packageRoot, `assets/skills/${name}/SKILL.md`),
+        mode: 420,
+        profiles: ["engineering"]
+      })),
+      ...SUPER_SKILLS.map((name) => ({
+        id: `skill:super:${name}`,
+        kind: "skill",
+        path: `.opencode/skills/${name}/SKILL.md`,
+        source: resolve3(packageRoot, `assets/skills/${name}/SKILL.md`),
+        mode: 420,
+        profiles: ["engineering"]
+      })),
+      {
+        id: "skill:setup-ship-workflow",
+        kind: "skill",
+        path: ".opencode/skills/setup-ship-workflow/SKILL.md",
+        source: resolve3(packageRoot, "assets/skills/setup-ship-workflow/SKILL.md"),
+        mode: 420,
+        profiles: ["engineering"]
+      },
+      {
+        id: "skill:skill-discovery",
+        kind: "skill",
+        path: ".opencode/skills/skill-discovery/SKILL.md",
+        source: resolve3(packageRoot, "assets/skills/skill-discovery/SKILL.md"),
+        mode: 420,
+        profiles: ["engineering"]
+      },
+      {
+        id: "command:setup-ship-workflow",
+        kind: "support",
+        path: ".opencode/commands/setup-ship-workflow.md",
+        source: resolve3(packageRoot, "assets/commands/setup-ship-workflow.md"),
+        mode: 420,
+        profiles: ["engineering"]
+      }
+    ];
+    ALLOWED_KINDS = /* @__PURE__ */ new Set(["plugin", "agent", "skill", "support"]);
+  }
+});
+
 // src/installer/json-pointer.js
 function unescape(token) {
   return token.replace(/~1/g, "/").replace(/~0/g, "~");
@@ -95,1223 +440,1040 @@ var init_hash = __esm({
   }
 });
 
-// src/installer/plan-mode-permissions.js
-function planModePermissions() {
-  return {
-    build: {
-      bash: DENY_DEFAULT,
-      edit: {
-        "*": DENY_DEFAULT,
-        [PLANS_GLOB]: ALLOW_PLANS
-      },
-      webfetch: DENY_DEFAULT,
-      task: DENY_DEFAULT,
-      delivery_inspect: DENY_DEFAULT,
-      delivery_issue: DENY_DEFAULT,
-      delivery_worktree: DENY_DEFAULT,
-      delivery_verify: DENY_DEFAULT,
-      delivery_review: DENY_DEFAULT,
-      delivery_pr: DENY_DEFAULT,
-      delivery_ready: DENY_DEFAULT,
-      delivery_merge: DENY_DEFAULT,
-      delivery_cleanup: DENY_DEFAULT
-    }
-  };
-}
-var PLAN_PATH_PREFIX, DENY_DEFAULT, ALLOW_PLANS, PLANS_GLOB;
-var init_plan_mode_permissions = __esm({
-  "src/installer/plan-mode-permissions.js"() {
-    PLAN_PATH_PREFIX = ".git/opencode-ship/plans";
-    DENY_DEFAULT = "deny";
-    ALLOW_PLANS = "allow";
-    PLANS_GLOB = `${PLAN_PATH_PREFIX}/**`;
-  }
-});
-
-// src/installer/root-config.js
-var root_config_exports = {};
-__export(root_config_exports, {
-  PLAN_MODE_POINTER: () => PLAN_MODE_POINTER,
-  POINTER_ENTRIES: () => POINTER_ENTRIES,
-  applyOwnedPointers: () => applyOwnedPointers,
-  applyPlanModeOwnership: () => applyPlanModeOwnership,
-  defaultRootConfigPath: () => defaultRootConfigPath,
-  findRootConfig: () => findRootConfig,
-  formatRootConfig: () => formatRootConfig,
-  formatRootConfigPreserving: () => formatRootConfigPreserving,
-  parseRootConfigPreservingOrder: () => parseRootConfigPreservingOrder,
-  planModeBlock: () => planModeBlock,
-  readRootConfig: () => readRootConfig,
-  synthesizeDefaultRootConfig: () => synthesizeDefaultRootConfig
-});
-import { existsSync as existsSync5, readFileSync as readFileSync3 } from "node:fs";
-import { readFile as readFile2 } from "node:fs/promises";
-import { resolve as resolve5 } from "node:path";
-function findRootConfig(repoRoot) {
-  for (const rel of ROOT_PATH_CANDIDATES) {
-    const abs = resolve5(repoRoot, rel);
-    if (existsSync5(abs)) return { path: abs, relative: rel, format: rel.endsWith(".jsonc") ? "jsonc" : "json" };
-  }
-  return { path: null, relative: ROOT_PATH_CANDIDATES[0], format: "json" };
-}
-function defaultRootConfigPath(repoRoot) {
-  return resolve5(repoRoot, ROOT_PATH_CANDIDATES[0]);
-}
-function readRootConfig(absPath) {
-  if (!existsSync5(absPath)) {
-    return { ok: false, error: { kind: "missing", path: absPath } };
-  }
-  const raw = readFileSync3(absPath, "utf8");
-  const stripped = stripJsonc(raw);
-  try {
-    const value = JSON.parse(stripped);
-    return {
-      ok: true,
-      path: absPath,
-      raw,
-      sha256: bytesHashString(raw),
-      value,
-      before: snapshotValues(value),
-      format: absPath.endsWith(".jsonc") ? "jsonc" : "json"
+// schema/ship-config.schema.json
+var ship_config_schema_default;
+var init_ship_config_schema = __esm({
+  "schema/ship-config.schema.json"() {
+    ship_config_schema_default = {
+      $schema: "https://json-schema.org/draft/2020-12/schema",
+      $id: "https://github.com/Viktorxyz/opencode-ship/schema/ship-config.schema.json",
+      title: "opencode-ship user config",
+      type: "object",
+      required: ["schemaVersion"],
+      additionalProperties: false,
+      properties: {
+        schemaVersion: { enum: [1, 2] },
+        profile: {
+          type: "string",
+          enum: ["engineering", "core"],
+          description: "Active profile. Engineering is the only supported profile in 1.1.0; core is accepted on read for legacy consumer migration."
+        },
+        owner: {
+          type: "string",
+          description: "Optional override for the issue/manifest owner field. Defaults to the agent's local user.name."
+        },
+        project: {
+          type: "object",
+          additionalProperties: false,
+          properties: {
+            remote: { type: "string", minLength: 1 },
+            repository: { type: "string", pattern: "^[A-Za-z0-9_.-]+/[A-Za-z0-9_.-]+$" },
+            defaultBranch: { type: "string", minLength: 1 },
+            packageManager: { enum: ["npm", "pnpm", "yarn", "bun"] },
+            detectOverrides: { type: "boolean", description: "Permit detection to refresh previously persisted values." }
+          }
+        },
+        delivery: {
+          type: "object",
+          additionalProperties: false,
+          properties: {
+            worktree: {
+              type: "object",
+              additionalProperties: false,
+              properties: {
+                root: { type: "string", minLength: 1 },
+                branchTemplate: { type: "string", minLength: 1 },
+                bootstrap: {
+                  type: "array",
+                  items: {
+                    type: "array",
+                    items: { type: "string", minLength: 1 },
+                    minItems: 1
+                  }
+                }
+              }
+            },
+            verification: {
+              type: "object",
+              additionalProperties: false,
+              properties: {
+                commands: {
+                  type: "array",
+                  minItems: 1,
+                  items: {
+                    type: "object",
+                    required: ["id", "argv"],
+                    additionalProperties: false,
+                    properties: {
+                      id: { type: "string", minLength: 1 },
+                      argv: {
+                        type: "array",
+                        items: { type: "string", minLength: 1 },
+                        minItems: 1
+                      },
+                      timeoutMs: { type: "integer", minimum: 1 }
+                    }
+                  }
+                },
+                requireCleanDiffAfter: { type: "boolean" },
+                invalidateOnHeadChange: { type: "boolean" }
+              }
+            },
+            review: {
+              type: "object",
+              additionalProperties: false,
+              properties: {
+                agent: { type: "string", minLength: 1 },
+                required: { type: "boolean" },
+                invalidateOnHeadChange: { type: "boolean" }
+              }
+            },
+            ci: {
+              type: "object",
+              additionalProperties: false,
+              properties: {
+                driver: { const: "github-status-checks" },
+                requiredChecks: {
+                  type: "array",
+                  items: { type: "string", minLength: 1 },
+                  uniqueItems: true
+                },
+                wait: { type: "boolean" },
+                flakyRetry: { type: "integer", enum: [0, 1] }
+              }
+            },
+            ready: {
+              type: "object",
+              additionalProperties: false,
+              properties: {
+                requires: {
+                  type: "array",
+                  items: { enum: ["review", "local-verification", "remote-ci"] },
+                  uniqueItems: true
+                },
+                stopAfterReady: { type: "boolean" }
+              }
+            },
+            merge: {
+              type: "object",
+              additionalProperties: false,
+              properties: {
+                strategy: { const: "squash" },
+                policy: { const: "explicit-user-request-only" },
+                requireFreshGates: { type: "boolean" }
+              }
+            },
+            cleanup: {
+              type: "object",
+              additionalProperties: false,
+              properties: {
+                when: { const: "next-task" },
+                requireUnpublishedGuard: { type: "boolean" }
+              }
+            }
+          }
+        },
+        tasks: {
+          type: "object",
+          description: "Optional override of the managed-file paths. Use only to relocate a target.",
+          additionalProperties: false,
+          properties: {
+            pluginPath: { type: "string", pattern: "^\\.opencode/.+\\.js$" },
+            agentsDir: { type: "string", pattern: "^\\.opencode/agents/?$" },
+            skillsDir: { type: "string", pattern: "^\\.opencode/skills/?$" }
+          }
+        },
+        workflow: {
+          type: "object",
+          description: "Workflow configuration. Models are optional at write time; the setup-ship-workflow skill fills them in. Once all three are present, ship-deliver can start.",
+          additionalProperties: false,
+          properties: {
+            models: {
+              type: "object",
+              additionalProperties: false,
+              description: "Optional model roles. All three roles must be present before ship-deliver can run.",
+              properties: {
+                planner: {
+                  type: "string",
+                  pattern: "^[A-Za-z0-9_.-]+/[A-Za-z0-9_.-]+$",
+                  description: "Provider/model id for the strong planning child session."
+                },
+                builder: {
+                  type: "string",
+                  pattern: "^[A-Za-z0-9_.-]+/[A-Za-z0-9_.-]+$",
+                  description: "Provider/model id for the cheap builder child session."
+                },
+                finalReviewer: {
+                  type: "string",
+                  pattern: "^[A-Za-z0-9_.-]+/[A-Za-z0-9_.-]+$",
+                  description: "Provider/model id for the final Standards + Spec reviewers."
+                }
+              }
+            },
+            approval: {
+              type: "object",
+              additionalProperties: false,
+              properties: {
+                mirrorToIssue: { const: true },
+                maxFailedRounds: { const: 3 }
+              }
+            }
+          }
+        },
+        skillDiscovery: {
+          type: "object",
+          additionalProperties: false,
+          description: "Trusted-auto skill discovery policy. Default mode is trusted-auto with the canonical owner allowlist and install-count threshold.",
+          properties: {
+            mode: {
+              type: "string",
+              enum: ["suggest-only", "trusted-auto", "disabled"]
+            },
+            trustedOwners: {
+              type: "array",
+              items: { type: "string", pattern: "^[A-Za-z0-9_.-]+$" }
+            },
+            minInstalls: { type: "integer", minimum: 0 },
+            maxAutoInstall: { type: "integer", minimum: 0, maximum: 20 },
+            blocklist: {
+              type: "array",
+              items: { type: "string", pattern: "^[A-Za-z0-9_./-]+$" }
+            },
+            requireImmutableRef: { type: "boolean" }
+          }
+        }
+      }
     };
-  } catch (e) {
-    return { ok: false, error: { kind: "parse", path: absPath, message: e.message } };
   }
+});
+
+// src/installer/validation.js
+function isObject2(v) {
+  return v !== null && typeof v === "object" && !Array.isArray(v);
 }
-function snapshotValues(doc) {
-  const out = {};
-  for (const entry of POINTER_ENTRIES) {
-    out[entry.pointer] = getPointer(doc, entry.pointer);
+function validate(value, schema, pointer, issues) {
+  if (!isObject2(schema)) return;
+  if (schema.const !== void 0 && value !== schema.const) {
+    issues.push(`${pointer}: expected const ${JSON.stringify(schema.const)}, got ${JSON.stringify(value)}`);
+    return;
   }
-  return out;
-}
-function stripJsonc(text) {
-  let stripped = "";
-  let i = 0;
-  let inString = false;
-  let escape = false;
-  while (i < text.length) {
-    const ch = text[i];
-    if (inString) {
-      stripped += ch;
-      if (escape) {
-        escape = false;
-      } else if (ch === "\\") {
-        escape = true;
-      } else if (ch === '"') {
-        inString = false;
+  if (schema.enum !== void 0 && !schema.enum.includes(value)) {
+    issues.push(`${pointer}: expected one of ${JSON.stringify(schema.enum)}, got ${JSON.stringify(value)}`);
+    return;
+  }
+  if (Array.isArray(schema.allOf)) {
+    for (const sub of schema.allOf) validate(value, sub, pointer, issues);
+  }
+  if (isObject2(schema.if)) {
+    const ifIssues = [];
+    validate(value, schema.if, pointer, ifIssues);
+    if (ifIssues.length === 0) {
+      if (isObject2(schema.then)) validate(value, schema.then, pointer, issues);
+    } else if (isObject2(schema.else)) {
+      validate(value, schema.else, pointer, issues);
+    }
+  }
+  const type = schema.type;
+  if (type !== void 0) {
+    const actual = Array.isArray(value) ? "array" : value === null ? "null" : typeof value;
+    if (type !== actual) {
+      if (!(type === "integer" && typeof value === "number" && Number.isInteger(value))) {
+        issues.push(`${pointer}: expected ${type}, got ${actual}`);
+        return;
       }
-      i += 1;
-      continue;
     }
-    if (ch === '"') {
-      inString = true;
-      stripped += ch;
-      i += 1;
-      continue;
+  }
+  if (type === "string") {
+    if (schema.minLength !== void 0 && value.length < schema.minLength) {
+      issues.push(`${pointer}: shorter than minLength ${schema.minLength}`);
     }
-    if (ch === "/" && text[i + 1] === "/") {
-      while (i < text.length && text[i] !== "\n") i += 1;
-      continue;
+    if (schema.pattern !== void 0) {
+      const re = new RegExp(schema.pattern);
+      if (!re.test(value)) issues.push(`${pointer}: does not match pattern ${schema.pattern}`);
     }
-    if (ch === "/" && text[i + 1] === "*") {
-      i += 2;
-      while (i < text.length && !(text[i] === "*" && text[i + 1] === "/")) i += 1;
-      i += 2;
-      continue;
+    if (schema.format === "date-time" && !FORMAT_DATE_TIME.test(value)) {
+      issues.push(`${pointer}: not a date-time string`);
     }
-    stripped += ch;
-    i += 1;
   }
-  return stripped.replace(/,\s*([}\]])/g, "$1");
-}
-function applyOwnedPointers(rootDoc, { pointerEntries = POINTER_ENTRIES, allowEqualValues = true } = {}) {
-  const result = { doc: rootDoc, applied: [], skipped: [] };
-  let doc = rootDoc;
-  for (const entry of pointerEntries) {
-    const existing = getPointer(doc, entry.pointer);
-    if (existing === void 0) {
-      doc = setPointer(doc, entry.pointer, entry.value);
-      result.applied.push({ pointer: entry.pointer, value: entry.value });
-      continue;
+  if (type === "integer" || type === "number") {
+    if (schema.minimum !== void 0 && value < schema.minimum) {
+      issues.push(`${pointer}: less than minimum ${schema.minimum}`);
     }
-    if (existing === entry.value || stableStringify(existing) === stableStringify(entry.value)) {
-      if (allowEqualValues) {
-        result.skipped.push({ pointer: entry.pointer, reason: "already equal" });
+    if (schema.maximum !== void 0 && value > schema.maximum) {
+      issues.push(`${pointer}: greater than maximum ${schema.maximum}`);
+    }
+    if (schema.enum !== void 0) {
+    }
+  }
+  if (type === "array") {
+    if (schema.minItems !== void 0 && value.length < schema.minItems) {
+      issues.push(`${pointer}: fewer items than minItems ${schema.minItems}`);
+    }
+    if (Array.isArray(schema.items)) {
+      value.forEach((entry, i) => validate(entry, schema.items[i] ?? {}, `${pointer}/${i}`, issues));
+    } else if (schema.items) {
+      if (schema.uniqueItems) {
+        const seen = /* @__PURE__ */ new Set();
+        value.forEach((entry, i) => {
+          const key = JSON.stringify(entry);
+          if (seen.has(key)) issues.push(`${pointer}/${i}: duplicate unique item`);
+          seen.add(key);
+        });
       }
-      continue;
+      value.forEach((entry, i) => validate(entry, schema.items, `${pointer}/${i}`, issues));
     }
-    result.skipped.push({
-      pointer: entry.pointer,
-      reason: "different existing value",
-      existing,
-      desired: entry.value
-    });
   }
-  return result;
-}
-function applyPlanModeOwnership(rootDoc, { pointer = PLAN_MODE_POINTER, block = planModePermissions().build } = {}) {
-  const previous = getPointer(rootDoc, pointer);
-  const doc = setPointer(rootDoc, pointer, block);
-  return { doc, previous: previous === void 0 ? null : previous, id: pointer };
-}
-function planModeBlock() {
-  return planModePermissions().build;
-}
-function synthesizeDefaultRootConfig() {
-  return {
-    $schema: "https://opencode.ai/config.json",
-    agent: {
-      build: {
-        permission: {
-          delivery_inspect: "allow",
-          delivery_issue: "allow",
-          delivery_worktree: "allow",
-          delivery_verify: "deny",
-          delivery_review: "deny",
-          delivery_pr: "allow",
-          delivery_ready: "allow",
-          delivery_merge: "ask",
-          delivery_cleanup: "allow",
-          task: {
-            "delivery-reviewer": "allow",
-            "delivery-verifier": "allow"
-          }
-        }
+  if (type === "object" || isObject2(schema.properties) || Array.isArray(schema.required)) {
+    if (Array.isArray(schema.required)) {
+      for (const key of schema.required) {
+        if (!(key in value)) issues.push(`${pointer}: missing required field ${key}`);
       }
     }
-  };
-}
-function formatRootConfig(value) {
-  return JSON.stringify(stripSourceOrder(value), null, 2) + "\n";
-}
-function stripSourceOrder(value) {
-  if (!value || typeof value !== "object" || Array.isArray(value)) return value;
-  const out = Array.isArray(value) ? [] : {};
-  const order = Array.isArray(value.__sourceOrder__) ? value.__sourceOrder__ : null;
-  const seen = /* @__PURE__ */ new Set();
-  if (order) {
-    for (const k of order) {
-      if (k === "__sourceOrder__") continue;
-      if (!(k in value)) continue;
-      seen.add(k);
-      out[k] = stripSourceOrder(value[k]);
+    if (schema.additionalProperties === false && isObject2(schema.properties)) {
+      for (const key of Object.keys(value)) {
+        if (!(key in schema.properties)) issues.push(`${pointer}: unknown field ${key}`);
+      }
+    }
+    if (isObject2(schema.properties)) {
+      for (const key of Object.keys(schema.properties)) {
+        if (key in value) validate(value[key], schema.properties[key], `${pointer}/${key}`, issues);
+      }
     }
   }
-  for (const k of Object.keys(value)) {
-    if (k === "__sourceOrder__") continue;
-    if (seen.has(k)) continue;
-    out[k] = stripSourceOrder(value[k]);
-  }
-  return out;
 }
-function formatRootConfigPreserving(value) {
-  return formatRootConfig(value);
-}
-function parseRootConfigPreservingOrder(text) {
-  if (typeof text !== "string" || text.length === 0) {
-    return { value: {}, format: "json" };
-  }
-  const parser = new RootConfigParser(text);
-  const value = parser.parseValue(
-    0,
-    /*atTop*/
-    true
-  );
-  const isJsonc = text.includes("//") || text.includes("/*");
-  return { value, format: isJsonc ? "jsonc" : "json" };
+function validateSchema(value, schema) {
+  const issues = [];
+  validate(value, schema, "#", issues);
+  return { ok: issues.length === 0, issues };
 }
-var POINTER_ENTRIES, ROOT_PATH_CANDIDATES, PLAN_MODE_POINTER, RootConfigParser;
-var init_root_config = __esm({
-  "src/installer/root-config.js"() {
-    init_json_pointer();
-    init_hash();
-    init_plan_mode_permissions();
-    POINTER_ENTRIES = [
-      {
-        pointer: "/agent/build/permission/delivery_inspect",
-        strategy: "value",
-        value: "allow"
-      },
-      {
-        pointer: "/agent/build/permission/delivery_issue",
-        strategy: "value",
-        value: "allow"
-      },
-      {
-        pointer: "/agent/build/permission/delivery_worktree",
-        strategy: "value",
-        value: "allow"
-      },
-      {
-        pointer: "/agent/build/permission/delivery_verify",
-        strategy: "value",
-        value: "deny"
-      },
-      {
-        pointer: "/agent/build/permission/delivery_review",
-        strategy: "value",
-        value: "deny"
-      },
-      {
-        pointer: "/agent/build/permission/delivery_pr",
-        strategy: "value",
-        value: "allow"
-      },
-      {
-        pointer: "/agent/build/permission/delivery_ready",
-        strategy: "value",
-        value: "allow"
-      },
-      {
-        pointer: "/agent/build/permission/delivery_merge",
-        strategy: "value",
-        value: "ask"
-      },
-      {
-        pointer: "/agent/build/permission/delivery_cleanup",
-        strategy: "value",
-        value: "allow"
-      },
-      {
-        pointer: "/agent/build/permission/task/delivery-reviewer",
-        strategy: "value",
-        value: "allow"
-      },
-      {
-        pointer: "/agent/build/permission/task/delivery-verifier",
-        strategy: "value",
-        value: "allow"
-      }
-    ];
-    ROOT_PATH_CANDIDATES = ["opencode.json", "opencode.jsonc"];
-    PLAN_MODE_POINTER = "/agent/plan/permission";
-    RootConfigParser = class {
-      constructor(text) {
-        this.text = text;
-        this.pos = 0;
-      }
-      skipWS() {
-        while (this.pos < this.text.length) {
-          const ch = this.text[this.pos];
-          if (ch === " " || ch === "\n" || ch === "	" || ch === "\r") {
-            this.pos += 1;
-            continue;
-          }
-          if (ch === "/" && this.text[this.pos + 1] === "/") {
-            while (this.pos < this.text.length && this.text[this.pos] !== "\n") this.pos += 1;
-            continue;
-          }
-          if (ch === "/" && this.text[this.pos + 1] === "*") {
-            this.pos += 2;
-            while (this.pos < this.text.length && !(this.text[this.pos] === "*" && this.text[this.pos + 1] === "/")) this.pos += 1;
-            this.pos += 2;
-            continue;
-          }
-          break;
-        }
-      }
-      parseValue(depth, atTop) {
-        this.skipWS();
-        const ch = this.text[this.pos];
-        if (ch === "{") return this.parseObject(depth, atTop);
-        if (ch === "[") return this.parseArray(depth);
-        if (ch === '"') return this.parseString();
-        if (ch === "-" || ch >= "0" && ch <= "9") return this.parseNumber();
-        if (this.text.startsWith("true", this.pos)) {
-          this.pos += 4;
-          return true;
-        }
-        if (this.text.startsWith("false", this.pos)) {
-          this.pos += 5;
-          return false;
-        }
-        if (this.text.startsWith("null", this.pos)) {
-          this.pos += 4;
-          return null;
-        }
-        throw new Error(`unexpected token at ${this.pos}: ${this.text.slice(this.pos, this.pos + 8)}`);
-      }
-      parseObject(depth, atTop) {
-        const out = /* @__PURE__ */ Object.create(null);
-        out.__sourceOrder__ = [];
-        this.pos += 1;
-        while (this.pos < this.text.length) {
-          this.skipWS();
-          if (this.text[this.pos] === "}") {
-            this.pos += 1;
-            return out;
-          }
-          const key = this.parseString();
-          out.__sourceOrder__.push(key);
-          this.skipWS();
-          if (this.text[this.pos] !== ":") throw new Error(`expected : at ${this.pos}`);
-          this.pos += 1;
-          out[key] = this.parseValue(depth + 1, false);
-          this.skipWS();
-          if (this.text[this.pos] === ",") {
-            this.pos += 1;
-            continue;
-          }
-          if (this.text[this.pos] === "}") {
-            this.pos += 1;
-            return out;
-          }
-          throw new Error(`expected , or } at ${this.pos}`);
-        }
-        throw new Error("unterminated object");
-      }
-      parseArray(depth) {
-        const out = [];
-        this.pos += 1;
-        while (this.pos < this.text.length) {
-          this.skipWS();
-          if (this.text[this.pos] === "]") {
-            this.pos += 1;
-            return out;
-          }
-          out.push(this.parseValue(depth + 1, false));
-          this.skipWS();
-          if (this.text[this.pos] === ",") {
-            this.pos += 1;
-            continue;
-          }
-          if (this.text[this.pos] === "]") {
-            this.pos += 1;
-            return out;
-          }
-          throw new Error(`expected , or ] at ${this.pos}`);
-        }
-        throw new Error("unterminated array");
-      }
-      parseString() {
-        if (this.text[this.pos] !== '"') throw new Error(`expected " at ${this.pos}`);
-        this.pos += 1;
-        let out = "";
-        while (this.pos < this.text.length) {
-          const ch = this.text[this.pos];
-          if (ch === "\\") {
-            const next = this.text[this.pos + 1];
-            out += ch + next;
-            this.pos += 2;
-            continue;
-          }
-          if (ch === '"') {
-            this.pos += 1;
-            return JSON.parse('"' + out + '"');
-          }
-          out += ch;
-          this.pos += 1;
-        }
-        throw new Error("unterminated string");
-      }
-      parseNumber() {
-        const start = this.pos;
-        if (this.text[this.pos] === "-") this.pos += 1;
-        while (this.pos < this.text.length && /[0-9.eE+\-]/.test(this.text[this.pos])) this.pos += 1;
-        return Number(this.text.slice(start, this.pos));
-      }
-    };
+var FORMAT_DATE_TIME;
+var init_validation = __esm({
+  "src/installer/validation.js"() {
+    FORMAT_DATE_TIME = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(\.\d+)?(Z|[+-]\d{2}:?\d{2})$/;
   }
 });
 
-// src/profile.js
-var PROFILES = Object.freeze(["engineering"]);
-var DEFAULT_PROFILE = "engineering";
-function isValidProfile(name) {
-  return typeof name === "string" && PROFILES.includes(name);
+// src/installer/config.js
+var config_exports = {};
+__export(config_exports, {
+  configPath: () => configPath,
+  hasCompletedModels: () => hasCompletedModels,
+  loadConfig: () => loadConfig,
+  renderDefaultConfig: () => renderDefaultConfig,
+  writeConfig: () => writeConfig
+});
+import { readFile, writeFile, rename, mkdir } from "node:fs/promises";
+import { existsSync as existsSync4 } from "node:fs";
+import { dirname as dirname3, resolve as resolve4 } from "node:path";
+function configPath(repoRoot) {
+  return resolve4(repoRoot, ".opencode", "ship.config.json");
 }
-function normalizeProfile(name) {
-  if (name === void 0 || name === null) return DEFAULT_PROFILE;
-  if (!isValidProfile(name)) return null;
-  return name;
+async function loadConfig(repoRoot) {
+  const path = configPath(repoRoot);
+  if (!existsSync4(path)) return null;
+  const raw = await readFile(path, "utf8");
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch (e) {
+    return { ok: false, error: { kind: "parse", path, message: e.message } };
+  }
+  const validation = validateSchema(parsed, ship_config_schema_default);
+  if (!validation.ok) {
+    return { ok: false, error: { kind: "contract", path, issues: validation.issues } };
+  }
+  return {
+    ok: true,
+    path,
+    raw,
+    sha256: bytesHashString(raw),
+    canonicalSha256: bytesHashString(stableStringify(parsed)),
+    value: parsed
+  };
 }
-function isLegacyCoreProfile(name) {
-  return name === "core";
+async function writeConfig(repoRoot, value) {
+  const path = configPath(repoRoot);
+  await mkdir(dirname3(path), { recursive: true });
+  const raw = JSON.stringify(value, null, 2) + "\n";
+  const tmp = `${path}.tmp`;
+  await writeFile(tmp, raw, "utf8");
+  await rename(tmp, path);
+  return { path, raw, sha256: bytesHashString(raw) };
 }
-function resolveProfile({ cli = null, config = null, lock = null } = {}) {
-  if (cli !== null && cli !== void 0) {
-    const v = normalizeProfile(cli);
-    if (v === null) {
-      throw new Error(
-        `unknown CLI profile '${cli}' (only 'engineering' is supported in 1.1.0; the 'core' profile was removed)`
-      );
-    }
-    return { profile: v, source: "cli" };
-  }
-  if (config && typeof config === "object" && config.profile !== void 0 && config.profile !== null) {
-    const v = normalizeProfile(config.profile);
-    if (v === null) {
-      if (isLegacyCoreProfile(config.profile)) {
-        return { profile: DEFAULT_PROFILE, source: "default" };
-      }
-      throw new Error(
-        `unknown ship.config.json profile '${config.profile}' (only 'engineering' is supported in 1.1.0)`
-      );
+function renderDefaultConfig(detection, overrides = {}) {
+  const pm = detection?.packageManager ?? "npm";
+  const safeBootstrap = Array.isArray(detection?.worktreeBootstrap) && detection.worktreeBootstrap.length ? detection.worktreeBootstrap : [["npm", "install"]];
+  const safeVerification = Array.isArray(detection?.verificationPlan) && detection.verificationPlan.length ? detection.verificationPlan.map((step) => ({ id: step.id, argv: step.argv })) : [{ id: "typecheck", argv: ["npm", "run", "typecheck"] }];
+  const repo = detection?.repository ?? overrides.repository ?? "owner/repo";
+  return {
+    schemaVersion: 2,
+    profile: "engineering",
+    project: {
+      remote: detection?.remote ?? "origin",
+      repository: repo,
+      defaultBranch: detection?.defaultBranch ?? "main",
+      packageManager: pm,
+      detectOverrides: false
+    },
+    delivery: {
+      worktree: {
+        root: detection?.worktreeRoot ?? ".worktrees",
+        branchTemplate: "{actor}/{slug}",
+        bootstrap: safeBootstrap
+      },
+      verification: {
+        commands: safeVerification,
+        requireCleanDiffAfter: true,
+        invalidateOnHeadChange: true
+      },
+      review: { agent: "delivery-reviewer", required: true, invalidateOnHeadChange: true },
+      ci: {
+        driver: "github-status-checks",
+        requiredChecks: ["delivery-verify"],
+        wait: true,
+        flakyRetry: 1
+      },
+      ready: { requires: ["review", "local-verification", "remote-ci"], stopAfterReady: true },
+      merge: { strategy: "squash", policy: "explicit-user-request-only", requireFreshGates: true },
+      cleanup: { when: "next-task", requireUnpublishedGuard: true }
+    },
+    workflow: {
+      models: {},
+      approval: { mirrorToIssue: true, maxFailedRounds: 3 }
     }
-    return { profile: v, source: "config" };
+  };
+}
+function hasCompletedModels(configValue) {
+  const models = configValue?.workflow?.models;
+  if (!models || typeof models !== "object") return false;
+  const idRe = /^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/;
+  return typeof models.planner === "string" && idRe.test(models.planner) && typeof models.builder === "string" && idRe.test(models.builder) && typeof models.finalReviewer === "string" && idRe.test(models.finalReviewer);
+}
+var init_config = __esm({
+  "src/installer/config.js"() {
+    init_ship_config_schema();
+    init_validation();
+    init_json_pointer();
+    init_hash();
   }
-  if (lock && typeof lock === "object" && lock.manager && lock.manager.profile !== void 0) {
-    const v = normalizeProfile(lock.manager.profile);
-    if (v === null) {
-      if (isLegacyCoreProfile(lock.manager.profile)) {
-        return { profile: DEFAULT_PROFILE, source: "default" };
-      }
-      throw new Error(
-        `unknown lock manager.profile '${lock.manager.profile}' (only 'engineering' is supported in 1.1.0)`
-      );
+});
+
+// src/installer/plan-mode-permissions.js
+function planModePermissions() {
+  return {
+    build: {
+      bash: DENY_DEFAULT,
+      edit: {
+        "*": DENY_DEFAULT,
+        [PLANS_GLOB]: ALLOW_PLANS
+      },
+      webfetch: DENY_DEFAULT,
+      task: DENY_DEFAULT,
+      delivery_inspect: DENY_DEFAULT,
+      delivery_issue: DENY_DEFAULT,
+      delivery_worktree: DENY_DEFAULT,
+      delivery_verify: DENY_DEFAULT,
+      delivery_review: DENY_DEFAULT,
+      delivery_pr: DENY_DEFAULT,
+      delivery_ready: DENY_DEFAULT,
+      delivery_merge: DENY_DEFAULT,
+      delivery_cleanup: DENY_DEFAULT
     }
-    return { profile: v, source: "lock" };
-  }
-  return { profile: DEFAULT_PROFILE, source: "default" };
+  };
 }
+var PLAN_PATH_PREFIX, DENY_DEFAULT, ALLOW_PLANS, PLANS_GLOB;
+var init_plan_mode_permissions = __esm({
+  "src/installer/plan-mode-permissions.js"() {
+    PLAN_PATH_PREFIX = ".git/opencode-ship/plans";
+    DENY_DEFAULT = "deny";
+    ALLOW_PLANS = "allow";
+    PLANS_GLOB = `${PLAN_PATH_PREFIX}/**`;
+  }
+});
 
-// src/installer/cli-args.js
-var USAGE = `opencode-ship <command> [options]
-
-Commands:
-  init        Install managed files in this project. One-liner: pnpm dlx opencode-ship@latest init
-  diff        Show what would change without writing.
-  update      Apply pending updates after recovering the journal.
-  doctor      Validate environment, lock, and references.
-  uninstall   Remove managed files that still match the lock.
-  --version   Print the version and exit.
-  --help      Show this usage and exit.
-
-Options:
-  --root <path>               Project root (defaults to cwd).
-  --profile engineering       Override active profile (engineering only).
-  --force-config              Rewrite the user config from detection (init only).
-  --force-root-config         Create opencode.json when absent (init only).
-  --strict-doctor             Fail init when doctor reports unhealthy checks.
-  --replace-managed           Replace locally-modified managed files (update only).
-  --purge-config              Remove ship.config.json when uninstalling.
-  --planner-model <id>        Strong planner model id (init only, optional).
-  --builder-model <id>        Cheap builder model id (init only, optional).
-  --final-reviewer-model <id> Final Standards + Spec reviewer model id (init only, optional).
-  --json                      Emit a JSON envelope instead of human output.
-
-After init succeeds, restart OpenCode and run /setup-ship-workflow to
-fill in the workflow.models fields and the per-repo docs.
-`;
-var MODEL_ID_RE = /^[a-zA-Z0-9_.-]+\/[a-zA-Z0-9_.-]+$/;
-function parseFlags(argv) {
-  const options = {
-    rootPath: null,
-    profile: null,
-    json: false,
-    replaceManaged: false,
-    purgeConfig: false,
-    forceConfig: false,
-    forceRootConfig: false,
-    strictDoctor: false,
-    plannerModel: null,
-    builderModel: null,
-    finalReviewerModel: null
-  };
-  for (let i = 0; i < argv.length; i++) {
-    const arg = argv[i];
-    if (arg === "--json") options.json = true;
-    else if (arg === "--replace-managed") options.replaceManaged = true;
-    else if (arg === "--purge-config") options.purgeConfig = true;
-    else if (arg === "--force-config") options.forceConfig = true;
-    else if (arg === "--force-root-config") options.forceRootConfig = true;
-    else if (arg === "--strict-doctor") options.strictDoctor = true;
-    else if (arg === "--root") options.rootPath = argv[++i];
-    else if (arg === "--profile") {
-      const value = argv[++i];
-      if (value === void 0) {
-        return { error: "--profile requires a value" };
-      }
-      if (value === "core") {
-        return {
-          error: "the 'core' profile was removed in opencode-ship 1.1.0; only 'engineering' is supported. Run /setup-ship-workflow to migrate."
-        };
-      }
-      if (!isValidProfile(value)) {
-        return { error: `unknown profile '${value}' (expected one of: ${PROFILES.join(", ")})` };
-      }
-      options.profile = value;
-    } else if (arg === "--planner-model" || arg === "--builder-model" || arg === "--final-reviewer-model") {
-      const value = argv[++i];
-      if (value === void 0) return { error: `${arg} requires a value` };
-      if (!MODEL_ID_RE.test(value)) {
-        return { error: `${arg} must be a "<provider>/<model>" id, got ${JSON.stringify(value)}` };
-      }
-      if (arg === "--planner-model") options.plannerModel = value;
-      else if (arg === "--builder-model") options.builderModel = value;
-      else options.finalReviewerModel = value;
-    } else if (arg === "-h" || arg === "--help") return { help: true };
-    else if (arg === "-v" || arg === "--version") return { version: true };
-    else return { error: `unknown flag ${arg}` };
+// src/installer/root-config.js
+var root_config_exports = {};
+__export(root_config_exports, {
+  PLAN_MODE_POINTER: () => PLAN_MODE_POINTER,
+  POINTER_ENTRIES: () => POINTER_ENTRIES,
+  applyOwnedPointers: () => applyOwnedPointers,
+  applyPlanModeOwnership: () => applyPlanModeOwnership,
+  defaultRootConfigPath: () => defaultRootConfigPath,
+  findRootConfig: () => findRootConfig,
+  formatRootConfig: () => formatRootConfig,
+  formatRootConfigPreserving: () => formatRootConfigPreserving,
+  parseRootConfigPreservingOrder: () => parseRootConfigPreservingOrder,
+  planModeBlock: () => planModeBlock,
+  readRootConfig: () => readRootConfig,
+  synthesizeDefaultRootConfig: () => synthesizeDefaultRootConfig
+});
+import { existsSync as existsSync5, readFileSync as readFileSync3 } from "node:fs";
+import { readFile as readFile2 } from "node:fs/promises";
+import { resolve as resolve5 } from "node:path";
+function findRootConfig(repoRoot) {
+  for (const rel of ROOT_PATH_CANDIDATES) {
+    const abs = resolve5(repoRoot, rel);
+    if (existsSync5(abs)) return { path: abs, relative: rel, format: rel.endsWith(".jsonc") ? "jsonc" : "json" };
   }
-  return options;
+  return { path: null, relative: ROOT_PATH_CANDIDATES[0], format: "json" };
 }
-function parseCommand(argv) {
-  for (const arg of argv) {
-    if (arg === "--help" || arg === "-h") return { command: "help" };
-    if (arg === "--version" || arg === "-v") return { command: "version" };
+function defaultRootConfigPath(repoRoot) {
+  return resolve5(repoRoot, ROOT_PATH_CANDIDATES[0]);
+}
+function readRootConfig(absPath) {
+  if (!existsSync5(absPath)) {
+    return { ok: false, error: { kind: "missing", path: absPath } };
   }
-  const [cmd, ...rest] = argv;
-  if (!cmd) return { command: "help" };
-  const flags = parseFlags(rest);
-  if ("help" in flags) return { command: "help" };
-  if ("version" in flags) return { command: "version" };
-  if ("error" in flags) return { error: flags.error };
-  switch (cmd) {
-    case "init":
-    case "diff":
-    case "update":
-    case "doctor":
-    case "uninstall":
-      return { command: cmd, options: flags };
-    default:
-      return { error: `unknown command ${cmd}` };
+  const raw = readFileSync3(absPath, "utf8");
+  const stripped = stripJsonc(raw);
+  try {
+    const value = JSON.parse(stripped);
+    return {
+      ok: true,
+      path: absPath,
+      raw,
+      sha256: bytesHashString(raw),
+      value,
+      before: snapshotValues(value),
+      format: absPath.endsWith(".jsonc") ? "jsonc" : "json"
+    };
+  } catch (e) {
+    return { ok: false, error: { kind: "parse", path: absPath, message: e.message } };
   }
 }
-function helpText() {
-  return USAGE;
+function snapshotValues(doc) {
+  const out = {};
+  for (const entry of POINTER_ENTRIES) {
+    out[entry.pointer] = getPointer(doc, entry.pointer);
+  }
+  return out;
 }
-
-// src/installer/commands/init.js
-import { promisify as promisify2 } from "node:util";
-import { writeFile as writeFile7, mkdir as mkdirAsync2 } from "node:fs/promises";
-import { dirname as dirname9, resolve as resolvePath } from "node:path";
-
-// src/installer/executor.js
-import { existsSync as existsSync13 } from "node:fs";
-import { mkdir as mkdir5, readFile as readFile8, rename as rename5, unlink as unlink3, writeFile as writeFile5 } from "node:fs/promises";
-import { dirname as dirname7, resolve as resolve12 } from "node:path";
-
-// src/installer/catalog.js
-import { resolve as resolve3, relative, sep } from "node:path";
-import { existsSync as existsSync3, statSync } from "node:fs";
-
-// src/installer/package-root.js
-import { existsSync, readFileSync } from "node:fs";
-import { fileURLToPath } from "node:url";
-import { dirname, resolve } from "node:path";
-var PACKAGE_NAME = "opencode-ship";
-function resolvePackageRoot(startUrl) {
-  let candidate = dirname(fileURLToPath(startUrl ?? import.meta.url));
-  while (candidate && candidate !== "/") {
-    const pkgPath = resolve(candidate, "package.json");
-    if (existsSync(pkgPath)) {
-      try {
-        const raw = readFileSync(pkgPath, "utf8");
-        const pkg = JSON.parse(raw);
-        if (pkg && pkg.name === PACKAGE_NAME) return candidate;
-      } catch {
+function stripJsonc(text) {
+  let stripped = "";
+  let i = 0;
+  let inString = false;
+  let escape = false;
+  while (i < text.length) {
+    const ch = text[i];
+    if (inString) {
+      stripped += ch;
+      if (escape) {
+        escape = false;
+      } else if (ch === "\\") {
+        escape = true;
+      } else if (ch === '"') {
+        inString = false;
       }
+      i += 1;
+      continue;
     }
-    candidate = dirname(candidate);
-  }
-  throw new Error(`opencode-ship package root not found from ${startUrl ?? import.meta.url}`);
-}
-
-// src/version.js
-import { readFileSync as readFileSync2, existsSync as existsSync2 } from "node:fs";
-import { dirname as dirname2, resolve as resolve2 } from "node:path";
-import { fileURLToPath as fileURLToPath2 } from "node:url";
-var PACKAGE_VERSION = "1.1.0";
-var TEMPLATE_SET = `v${PACKAGE_VERSION}`;
-
-// src/installer/catalog.js
-var TEMPLATE_SET_ID = TEMPLATE_SET;
-var packageRoot = resolvePackageRoot(import.meta.url);
-var MATT_SKILLS = [
-  "setup-engineering-workflow",
-  "engineering-workflow",
-  "grilling",
-  "domain-modeling",
-  "grill-with-docs",
-  "triage",
-  "to-spec",
-  "to-tickets",
-  "wayfinder",
-  "handoff",
-  "research",
-  "prototype",
-  "codebase-design",
-  "code-review"
-];
-var SUPER_SKILLS = [
-  "brainstorming",
-  "writing-plans",
-  "executing-plans",
-  "subagent-driven-development",
-  "dispatching-parallel-agents",
-  "test-driven-development",
-  "systematic-debugging",
-  "verification-before-completion",
-  "requesting-code-review",
-  "receiving-code-review"
-];
-var ENGINEERING_AGENTS = [
-  "ship-controller",
-  "ship-planner",
-  "ship-task-builder",
-  "ship-task-reviewer",
-  "ship-final-standards-reviewer",
-  "ship-final-spec-reviewer"
-];
-var ENGINEERING_COMMANDS = [
-  "ship-deliver",
-  "ship-resume",
-  "ship-status"
-];
-var CATALOG = [
-  {
-    id: "plugin:opencode-ship",
-    kind: "plugin",
-    path: ".opencode/plugins/opencode-ship.js",
-    source: resolve3(packageRoot, "dist/plugin.js"),
-    mode: 420,
-    profiles: ["engineering"]
-  },
-  {
-    id: "agent:delivery-reviewer",
-    kind: "agent",
-    path: ".opencode/agents/delivery-reviewer.md",
-    source: resolve3(packageRoot, "assets/agents/delivery-reviewer.md"),
-    mode: 420,
-    profiles: ["engineering"]
-  },
-  {
-    id: "agent:delivery-verifier",
-    kind: "agent",
-    path: ".opencode/agents/delivery-verifier.md",
-    source: resolve3(packageRoot, "assets/agents/delivery-verifier.md"),
-    mode: 420,
-    profiles: ["engineering"]
-  },
-  ...ENGINEERING_AGENTS.map((name) => ({
-    id: `agent:${name}`,
-    kind: "agent",
-    path: `.opencode/agents/${name}.md`,
-    source: resolve3(packageRoot, `assets/agents/${name}.md`),
-    mode: 420,
-    profiles: ["engineering"]
-  })),
-  ...ENGINEERING_COMMANDS.map((name) => ({
-    id: `command:${name}`,
-    kind: "support",
-    path: `.opencode/commands/${name}.md`,
-    source: resolve3(packageRoot, `assets/commands/${name}.md`),
-    mode: 420,
-    profiles: ["engineering"]
-  })),
-  {
-    id: "skill:delivery-workflow",
-    kind: "skill",
-    path: ".opencode/skills/delivery-workflow/SKILL.md",
-    source: resolve3(packageRoot, "assets/skills/delivery-workflow/SKILL.md"),
-    mode: 420,
-    profiles: ["engineering"]
-  },
-  {
-    id: "skill:planning-research-checkpoint",
-    kind: "skill",
-    path: ".opencode/skills/planning-research-checkpoint/SKILL.md",
-    source: resolve3(packageRoot, "assets/skills/planning-research-checkpoint/SKILL.md"),
-    mode: 420,
-    profiles: ["engineering"]
-  },
-  ...MATT_SKILLS.map((name) => ({
-    id: `skill:matt:${name}`,
-    kind: "skill",
-    path: `.opencode/skills/${name}/SKILL.md`,
-    source: resolve3(packageRoot, `assets/skills/${name}/SKILL.md`),
-    mode: 420,
-    profiles: ["engineering"]
-  })),
-  ...SUPER_SKILLS.map((name) => ({
-    id: `skill:super:${name}`,
-    kind: "skill",
-    path: `.opencode/skills/${name}/SKILL.md`,
-    source: resolve3(packageRoot, `assets/skills/${name}/SKILL.md`),
-    mode: 420,
-    profiles: ["engineering"]
-  })),
-  {
-    id: "skill:setup-ship-workflow",
-    kind: "skill",
-    path: ".opencode/skills/setup-ship-workflow/SKILL.md",
-    source: resolve3(packageRoot, "assets/skills/setup-engineering-workflow/SKILL.md"),
-    mode: 420,
-    profiles: ["engineering"]
-  },
-  {
-    id: "skill:skill-discovery",
-    kind: "skill",
-    path: ".opencode/skills/skill-discovery/SKILL.md",
-    source: resolve3(packageRoot, "assets/skills/skill-discovery/SKILL.md"),
-    mode: 420,
-    profiles: ["engineering"]
-  },
-  {
-    id: "command:setup-ship-workflow",
-    kind: "support",
-    path: ".opencode/commands/setup-ship-workflow.md",
-    source: resolve3(packageRoot, "assets/commands/setup-ship-workflow.md"),
-    mode: 420,
-    profiles: ["engineering"]
-  }
-];
-function filterCatalogByProfile(catalog, profile) {
-  const effective = profile === void 0 || profile === null ? DEFAULT_PROFILE : profile;
-  if (!isValidProfile(effective)) {
-    throw new Error(
-      `filterCatalogByProfile: unknown profile '${profile}' (expected one of: ${PROFILES.join(", ")})`
-    );
-  }
-  return catalog.filter((entry) => Array.isArray(entry.profiles) && entry.profiles.includes(effective));
-}
-var ALLOWED_KINDS = /* @__PURE__ */ new Set(["plugin", "agent", "skill", "support"]);
-function validateCatalog({ catalog = CATALOG } = {}) {
-  const seenIds = /* @__PURE__ */ new Set();
-  const seenPaths = /* @__PURE__ */ new Set();
-  const issues = [];
-  for (const entry of catalog) {
-    if (!entry || typeof entry !== "object") {
-      issues.push({ id: null, kind: "shape", message: "catalog entry is not an object" });
+    if (ch === '"') {
+      inString = true;
+      stripped += ch;
+      i += 1;
       continue;
     }
-    const { id, kind, path, source, mode } = entry;
-    if (typeof id !== "string" || id.length === 0) {
-      issues.push({ id: null, kind: "id", message: `entry id missing: ${JSON.stringify(entry)}` });
-    } else if (seenIds.has(id)) {
-      issues.push({ id, kind: "duplicate-id", message: `duplicate catalog id: ${id}` });
-    } else {
-      seenIds.add(id);
+    if (ch === "/" && text[i + 1] === "/") {
+      while (i < text.length && text[i] !== "\n") i += 1;
+      continue;
     }
-    if (typeof path !== "string" || !path.startsWith(".opencode" + sep)) {
-      issues.push({ id, kind: "path", message: `path must be rooted under .opencode/: ${path}` });
+    if (ch === "/" && text[i + 1] === "*") {
+      i += 2;
+      while (i < text.length && !(text[i] === "*" && text[i + 1] === "/")) i += 1;
+      i += 2;
+      continue;
     }
-    if (seenPaths.has(path)) {
-      issues.push({ id, kind: "duplicate-path", message: `duplicate target path: ${path}` });
-    } else {
-      seenPaths.add(path);
+    stripped += ch;
+    i += 1;
+  }
+  return stripped.replace(/,\s*([}\]])/g, "$1");
+}
+function applyOwnedPointers(rootDoc, { pointerEntries = POINTER_ENTRIES, allowEqualValues = true } = {}) {
+  const result = { doc: rootDoc, applied: [], skipped: [] };
+  let doc = rootDoc;
+  for (const entry of pointerEntries) {
+    const existing = getPointer(doc, entry.pointer);
+    if (existing === void 0) {
+      doc = setPointer(doc, entry.pointer, entry.value);
+      result.applied.push({ pointer: entry.pointer, value: entry.value });
+      continue;
     }
-    if (!ALLOWED_KINDS.has(kind)) {
-      issues.push({ id, kind: "kind", message: `unsupported entry kind: ${kind}` });
+    if (existing === entry.value || stableStringify(existing) === stableStringify(entry.value)) {
+      if (allowEqualValues) {
+        result.skipped.push({ pointer: entry.pointer, reason: "already equal" });
+      }
+      continue;
     }
-    if (typeof source !== "string" || source.length === 0) {
-      issues.push({ id, kind: "source", message: `source path missing: ${id}` });
-    } else if (!existsSync3(source)) {
-      issues.push({ id, kind: "source-missing", message: `source file not found: ${source}` });
-    } else {
-      try {
-        const stats = statSync(source);
-        if (!stats.isFile()) {
-          issues.push({ id, kind: "source-not-file", message: `source is not a regular file: ${source}` });
-        } else if (stats.size === 0) {
-          issues.push({ id, kind: "source-empty", message: `source file is empty: ${source}` });
+    result.skipped.push({
+      pointer: entry.pointer,
+      reason: "different existing value",
+      existing,
+      desired: entry.value
+    });
+  }
+  return result;
+}
+function applyPlanModeOwnership(rootDoc, { pointer = PLAN_MODE_POINTER, block = planModePermissions().build } = {}) {
+  const previous = getPointer(rootDoc, pointer);
+  const doc = setPointer(rootDoc, pointer, block);
+  return { doc, previous: previous === void 0 ? null : previous, id: pointer };
+}
+function planModeBlock() {
+  return planModePermissions().build;
+}
+function synthesizeDefaultRootConfig() {
+  return {
+    $schema: "https://opencode.ai/config.json",
+    agent: {
+      build: {
+        permission: {
+          delivery_inspect: "allow",
+          delivery_issue: "allow",
+          delivery_worktree: "allow",
+          delivery_verify: "deny",
+          delivery_review: "deny",
+          delivery_pr: "allow",
+          delivery_ready: "allow",
+          delivery_merge: "ask",
+          delivery_cleanup: "allow",
+          task: {
+            "delivery-reviewer": "allow",
+            "delivery-verifier": "allow"
+          }
         }
-      } catch (e) {
-        issues.push({ id, kind: "source-stat", message: `unable to stat source: ${e?.message ?? e}` });
-      }
-      const rel = relative(packageRoot, source);
-      if (rel.startsWith("..")) {
-        issues.push({ id, kind: "source-out-of-package", message: `source escapes package root: ${source}` });
       }
     }
-    if (mode !== 420) {
-      issues.push({ id, kind: "mode", message: `mode must be 0o644: ${id}` });
+  };
+}
+function formatRootConfig(value) {
+  return JSON.stringify(stripSourceOrder(value), null, 2) + "\n";
+}
+function stripSourceOrder(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return value;
+  const out = Array.isArray(value) ? [] : {};
+  const order = Array.isArray(value.__sourceOrder__) ? value.__sourceOrder__ : null;
+  const seen = /* @__PURE__ */ new Set();
+  if (order) {
+    for (const k of order) {
+      if (k === "__sourceOrder__") continue;
+      if (!(k in value)) continue;
+      seen.add(k);
+      out[k] = stripSourceOrder(value[k]);
     }
-    if (!Array.isArray(entry.profiles) || entry.profiles.length === 0) {
-      issues.push({ id, kind: "profiles", message: `profiles must be a non-empty array: ${id}` });
-    } else {
-      for (const p of entry.profiles) {
-        if (!isValidProfile(p)) {
-          issues.push({ id, kind: "profiles", message: `unknown profile in profiles[${entry.profiles.indexOf(p)}]: ${p} (expected one of: ${PROFILES.join(", ")})` });
+  }
+  for (const k of Object.keys(value)) {
+    if (k === "__sourceOrder__") continue;
+    if (seen.has(k)) continue;
+    out[k] = stripSourceOrder(value[k]);
+  }
+  return out;
+}
+function formatRootConfigPreserving(value) {
+  return formatRootConfig(value);
+}
+function parseRootConfigPreservingOrder(text) {
+  if (typeof text !== "string" || text.length === 0) {
+    return { value: {}, format: "json" };
+  }
+  const parser = new RootConfigParser(text);
+  const value = parser.parseValue(
+    0,
+    /*atTop*/
+    true
+  );
+  const isJsonc = text.includes("//") || text.includes("/*");
+  return { value, format: isJsonc ? "jsonc" : "json" };
+}
+var POINTER_ENTRIES, ROOT_PATH_CANDIDATES, PLAN_MODE_POINTER, RootConfigParser;
+var init_root_config = __esm({
+  "src/installer/root-config.js"() {
+    init_json_pointer();
+    init_hash();
+    init_plan_mode_permissions();
+    POINTER_ENTRIES = [
+      {
+        pointer: "/agent/build/permission/delivery_inspect",
+        strategy: "value",
+        value: "allow"
+      },
+      {
+        pointer: "/agent/build/permission/delivery_issue",
+        strategy: "value",
+        value: "allow"
+      },
+      {
+        pointer: "/agent/build/permission/delivery_worktree",
+        strategy: "value",
+        value: "allow"
+      },
+      {
+        pointer: "/agent/build/permission/delivery_verify",
+        strategy: "value",
+        value: "deny"
+      },
+      {
+        pointer: "/agent/build/permission/delivery_review",
+        strategy: "value",
+        value: "deny"
+      },
+      {
+        pointer: "/agent/build/permission/delivery_pr",
+        strategy: "value",
+        value: "allow"
+      },
+      {
+        pointer: "/agent/build/permission/delivery_ready",
+        strategy: "value",
+        value: "allow"
+      },
+      {
+        pointer: "/agent/build/permission/delivery_merge",
+        strategy: "value",
+        value: "ask"
+      },
+      {
+        pointer: "/agent/build/permission/delivery_cleanup",
+        strategy: "value",
+        value: "allow"
+      },
+      {
+        pointer: "/agent/build/permission/task/delivery-reviewer",
+        strategy: "value",
+        value: "allow"
+      },
+      {
+        pointer: "/agent/build/permission/task/delivery-verifier",
+        strategy: "value",
+        value: "allow"
+      }
+    ];
+    ROOT_PATH_CANDIDATES = ["opencode.json", "opencode.jsonc"];
+    PLAN_MODE_POINTER = "/agent/plan/permission";
+    RootConfigParser = class {
+      constructor(text) {
+        this.text = text;
+        this.pos = 0;
+      }
+      skipWS() {
+        while (this.pos < this.text.length) {
+          const ch = this.text[this.pos];
+          if (ch === " " || ch === "\n" || ch === "	" || ch === "\r") {
+            this.pos += 1;
+            continue;
+          }
+          if (ch === "/" && this.text[this.pos + 1] === "/") {
+            while (this.pos < this.text.length && this.text[this.pos] !== "\n") this.pos += 1;
+            continue;
+          }
+          if (ch === "/" && this.text[this.pos + 1] === "*") {
+            this.pos += 2;
+            while (this.pos < this.text.length && !(this.text[this.pos] === "*" && this.text[this.pos + 1] === "/")) this.pos += 1;
+            this.pos += 2;
+            continue;
+          }
+          break;
         }
       }
-    }
-  }
-  if (issues.length > 0) {
-    const summary = issues.map((i) => i.message).join("; ");
-    const err = new Error(`opencode-ship catalog validation failed: ${summary}`);
-    err.issues = issues;
-    err.catalogValidation = true;
-    throw err;
-  }
-  return catalog;
-}
-
-// src/installer/planner.js
-import { existsSync as existsSync7 } from "node:fs";
-import { readFile as readFile3, stat } from "node:fs/promises";
-init_hash();
-
-// src/installer/config.js
-import { readFile, writeFile, rename, mkdir } from "node:fs/promises";
-import { existsSync as existsSync4 } from "node:fs";
-import { dirname as dirname3, resolve as resolve4 } from "node:path";
-
-// schema/ship-config.schema.json
-var ship_config_schema_default = {
-  $schema: "https://json-schema.org/draft/2020-12/schema",
-  $id: "https://github.com/Viktorxyz/opencode-ship/schema/ship-config.schema.json",
-  title: "opencode-ship user config",
-  type: "object",
-  required: ["schemaVersion"],
-  additionalProperties: false,
-  properties: {
-    schemaVersion: { enum: [1, 2] },
-    profile: {
-      type: "string",
-      enum: ["engineering"],
-      description: "Active profile. Engineering is the only supported profile in 1.1.0."
-    },
-    owner: {
-      type: "string",
-      description: "Optional override for the issue/manifest owner field. Defaults to the agent's local user.name."
-    },
-    project: {
-      type: "object",
-      additionalProperties: false,
-      properties: {
-        remote: { type: "string", minLength: 1 },
-        repository: { type: "string", pattern: "^[A-Za-z0-9_.-]+/[A-Za-z0-9_.-]+$" },
-        defaultBranch: { type: "string", minLength: 1 },
-        packageManager: { enum: ["npm", "pnpm", "yarn", "bun"] },
-        detectOverrides: { type: "boolean", description: "Permit detection to refresh previously persisted values." }
+      parseValue(depth, atTop) {
+        this.skipWS();
+        const ch = this.text[this.pos];
+        if (ch === "{") return this.parseObject(depth, atTop);
+        if (ch === "[") return this.parseArray(depth);
+        if (ch === '"') return this.parseString();
+        if (ch === "-" || ch >= "0" && ch <= "9") return this.parseNumber();
+        if (this.text.startsWith("true", this.pos)) {
+          this.pos += 4;
+          return true;
+        }
+        if (this.text.startsWith("false", this.pos)) {
+          this.pos += 5;
+          return false;
+        }
+        if (this.text.startsWith("null", this.pos)) {
+          this.pos += 4;
+          return null;
+        }
+        throw new Error(`unexpected token at ${this.pos}: ${this.text.slice(this.pos, this.pos + 8)}`);
       }
-    },
-    delivery: {
-      type: "object",
-      additionalProperties: false,
-      properties: {
-        worktree: {
-          type: "object",
-          additionalProperties: false,
-          properties: {
-            root: { type: "string", minLength: 1 },
-            branchTemplate: { type: "string", minLength: 1 },
-            bootstrap: {
-              type: "array",
-              items: {
-                type: "array",
-                items: { type: "string", minLength: 1 },
-                minItems: 1
-              }
-            }
-          }
-        },
-        verification: {
-          type: "object",
-          additionalProperties: false,
-          properties: {
-            commands: {
-              type: "array",
-              minItems: 1,
-              items: {
-                type: "object",
-                required: ["id", "argv"],
-                additionalProperties: false,
-                properties: {
-                  id: { type: "string", minLength: 1 },
-                  argv: {
-                    type: "array",
-                    items: { type: "string", minLength: 1 },
-                    minItems: 1
-                  },
-                  timeoutMs: { type: "integer", minimum: 1 }
-                }
-              }
-            },
-            requireCleanDiffAfter: { type: "boolean" },
-            invalidateOnHeadChange: { type: "boolean" }
+      parseObject(depth, atTop) {
+        const out = /* @__PURE__ */ Object.create(null);
+        out.__sourceOrder__ = [];
+        this.pos += 1;
+        while (this.pos < this.text.length) {
+          this.skipWS();
+          if (this.text[this.pos] === "}") {
+            this.pos += 1;
+            return out;
           }
-        },
-        review: {
-          type: "object",
-          additionalProperties: false,
-          properties: {
-            agent: { type: "string", minLength: 1 },
-            required: { type: "boolean" },
-            invalidateOnHeadChange: { type: "boolean" }
+          const key = this.parseString();
+          out.__sourceOrder__.push(key);
+          this.skipWS();
+          if (this.text[this.pos] !== ":") throw new Error(`expected : at ${this.pos}`);
+          this.pos += 1;
+          out[key] = this.parseValue(depth + 1, false);
+          this.skipWS();
+          if (this.text[this.pos] === ",") {
+            this.pos += 1;
+            continue;
           }
-        },
-        ci: {
-          type: "object",
-          additionalProperties: false,
-          properties: {
-            driver: { const: "github-status-checks" },
-            requiredChecks: {
-              type: "array",
-              items: { type: "string", minLength: 1 },
-              uniqueItems: true
-            },
-            wait: { type: "boolean" },
-            flakyRetry: { type: "integer", enum: [0, 1] }
+          if (this.text[this.pos] === "}") {
+            this.pos += 1;
+            return out;
           }
-        },
-        ready: {
-          type: "object",
-          additionalProperties: false,
-          properties: {
-            requires: {
-              type: "array",
-              items: { enum: ["review", "local-verification", "remote-ci"] },
-              uniqueItems: true
-            },
-            stopAfterReady: { type: "boolean" }
+          throw new Error(`expected , or } at ${this.pos}`);
+        }
+        throw new Error("unterminated object");
+      }
+      parseArray(depth) {
+        const out = [];
+        this.pos += 1;
+        while (this.pos < this.text.length) {
+          this.skipWS();
+          if (this.text[this.pos] === "]") {
+            this.pos += 1;
+            return out;
           }
-        },
-        merge: {
-          type: "object",
-          additionalProperties: false,
-          properties: {
-            strategy: { const: "squash" },
-            policy: { const: "explicit-user-request-only" },
-            requireFreshGates: { type: "boolean" }
+          out.push(this.parseValue(depth + 1, false));
+          this.skipWS();
+          if (this.text[this.pos] === ",") {
+            this.pos += 1;
+            continue;
           }
-        },
-        cleanup: {
-          type: "object",
-          additionalProperties: false,
-          properties: {
-            when: { const: "next-task" },
-            requireUnpublishedGuard: { type: "boolean" }
+          if (this.text[this.pos] === "]") {
+            this.pos += 1;
+            return out;
           }
+          throw new Error(`expected , or ] at ${this.pos}`);
         }
+        throw new Error("unterminated array");
       }
-    },
-    tasks: {
-      type: "object",
-      description: "Optional override of the managed-file paths. Use only to relocate a target.",
-      additionalProperties: false,
-      properties: {
-        pluginPath: { type: "string", pattern: "^\\.opencode/.+\\.js$" },
-        agentsDir: { type: "string", pattern: "^\\.opencode/agents/?$" },
-        skillsDir: { type: "string", pattern: "^\\.opencode/skills/?$" }
-      }
-    },
-    workflow: {
-      type: "object",
-      description: "Workflow configuration. Models are optional at write time; the setup-ship-workflow skill fills them in. Once all three are present, ship-deliver can start.",
-      additionalProperties: false,
-      properties: {
-        models: {
-          type: "object",
-          additionalProperties: false,
-          description: "Optional model roles. All three roles must be present before ship-deliver can run.",
-          properties: {
-            planner: {
-              type: "string",
-              pattern: "^[A-Za-z0-9_.-]+/[A-Za-z0-9_.-]+$",
-              description: "Provider/model id for the strong planning child session."
-            },
-            builder: {
-              type: "string",
-              pattern: "^[A-Za-z0-9_.-]+/[A-Za-z0-9_.-]+$",
-              description: "Provider/model id for the cheap builder child session."
-            },
-            finalReviewer: {
-              type: "string",
-              pattern: "^[A-Za-z0-9_.-]+/[A-Za-z0-9_.-]+$",
-              description: "Provider/model id for the final Standards + Spec reviewers."
-            }
+      parseString() {
+        if (this.text[this.pos] !== '"') throw new Error(`expected " at ${this.pos}`);
+        this.pos += 1;
+        let out = "";
+        while (this.pos < this.text.length) {
+          const ch = this.text[this.pos];
+          if (ch === "\\") {
+            const next = this.text[this.pos + 1];
+            out += ch + next;
+            this.pos += 2;
+            continue;
           }
-        },
-        approval: {
-          type: "object",
-          additionalProperties: false,
-          properties: {
-            mirrorToIssue: { const: true },
-            maxFailedRounds: { const: 3 }
+          if (ch === '"') {
+            this.pos += 1;
+            return JSON.parse('"' + out + '"');
           }
+          out += ch;
+          this.pos += 1;
         }
+        throw new Error("unterminated string");
       }
-    }
+      parseNumber() {
+        const start = this.pos;
+        if (this.text[this.pos] === "-") this.pos += 1;
+        while (this.pos < this.text.length && /[0-9.eE+\-]/.test(this.text[this.pos])) this.pos += 1;
+        return Number(this.text.slice(start, this.pos));
+      }
+    };
   }
-};
+});
 
-// src/installer/validation.js
-var FORMAT_DATE_TIME = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(\.\d+)?(Z|[+-]\d{2}:?\d{2})$/;
-function isObject2(v) {
-  return v !== null && typeof v === "object" && !Array.isArray(v);
+// src/installer/agent-renderer.js
+var agent_renderer_exports = {};
+__export(agent_renderer_exports, {
+  AGENT_ROLE_MAP: () => AGENT_ROLE_MAP,
+  buildRenderedOverride: () => buildRenderedOverride,
+  computeRenderedAgents: () => computeRenderedAgents,
+  modelMarker: () => modelMarker,
+  renderAgentFrontmatter: () => renderAgentFrontmatter,
+  renderedModelFor: () => renderedModelFor
+});
+import { dirname as dirname7, join as join6 } from "node:path";
+import { readFile as readFile8, writeFile as writeFile5, mkdir as mkdir5 } from "node:fs/promises";
+function modelMarker() {
+  return MODEL_FROM_CONFIG;
 }
-function validate(value, schema, pointer, issues) {
-  if (!isObject2(schema)) return;
-  if (schema.const !== void 0 && value !== schema.const) {
-    issues.push(`${pointer}: expected const ${JSON.stringify(schema.const)}, got ${JSON.stringify(value)}`);
-    return;
-  }
-  if (schema.enum !== void 0 && !schema.enum.includes(value)) {
-    issues.push(`${pointer}: expected one of ${JSON.stringify(schema.enum)}, got ${JSON.stringify(value)}`);
-    return;
-  }
-  if (Array.isArray(schema.allOf)) {
-    for (const sub of schema.allOf) validate(value, sub, pointer, issues);
-  }
-  if (isObject2(schema.if)) {
-    const ifIssues = [];
-    validate(value, schema.if, pointer, ifIssues);
-    if (ifIssues.length === 0) {
-      if (isObject2(schema.then)) validate(value, schema.then, pointer, issues);
-    } else if (isObject2(schema.else)) {
-      validate(value, schema.else, pointer, issues);
-    }
-  }
-  const type = schema.type;
-  if (type !== void 0) {
-    const actual = Array.isArray(value) ? "array" : value === null ? "null" : typeof value;
-    if (type !== actual) {
-      if (!(type === "integer" && typeof value === "number" && Number.isInteger(value))) {
-        issues.push(`${pointer}: expected ${type}, got ${actual}`);
-        return;
-      }
-    }
-  }
-  if (type === "string") {
-    if (schema.minLength !== void 0 && value.length < schema.minLength) {
-      issues.push(`${pointer}: shorter than minLength ${schema.minLength}`);
-    }
-    if (schema.pattern !== void 0) {
-      const re = new RegExp(schema.pattern);
-      if (!re.test(value)) issues.push(`${pointer}: does not match pattern ${schema.pattern}`);
-    }
-    if (schema.format === "date-time" && !FORMAT_DATE_TIME.test(value)) {
-      issues.push(`${pointer}: not a date-time string`);
-    }
-  }
-  if (type === "integer" || type === "number") {
-    if (schema.minimum !== void 0 && value < schema.minimum) {
-      issues.push(`${pointer}: less than minimum ${schema.minimum}`);
-    }
-    if (schema.maximum !== void 0 && value > schema.maximum) {
-      issues.push(`${pointer}: greater than maximum ${schema.maximum}`);
-    }
-    if (schema.enum !== void 0) {
+function renderAgentFrontmatter(source, model) {
+  if (typeof source !== "string") return source;
+  if (typeof model !== "string" || !model) return source;
+  return source.replaceAll(MODEL_FROM_CONFIG, model);
+}
+async function computeRenderedAgents({ models, catalog }) {
+  const out = [];
+  if (!models || typeof models !== "object") return out;
+  for (const [role, agentNames] of Object.entries(AGENT_ROLE_MAP)) {
+    const model = models[role];
+    if (typeof model !== "string" || !model) continue;
+    for (const agentName of agentNames) {
+      const entry = (catalog ?? []).find((c) => c.kind === "agent" && c.path.endsWith(`/${agentName}.md`));
+      if (!entry) continue;
+      const source = await readFile8(entry.source, "utf8");
+      const renderedText = renderAgentFrontmatter(source, model);
+      const bytes = Buffer.from(renderedText, "utf8");
+      const sha256 = bytesHashString(renderedText);
+      out.push({ relPath: entry.path, bytes, sha256, role, agentName, target: join6(process.cwd(), entry.path) });
     }
   }
-  if (type === "array") {
-    if (schema.minItems !== void 0 && value.length < schema.minItems) {
-      issues.push(`${pointer}: fewer items than minItems ${schema.minItems}`);
-    }
-    if (Array.isArray(schema.items)) {
-      value.forEach((entry, i) => validate(entry, schema.items[i] ?? {}, `${pointer}/${i}`, issues));
-    } else if (schema.items) {
-      if (schema.uniqueItems) {
-        const seen = /* @__PURE__ */ new Set();
-        value.forEach((entry, i) => {
-          const key = JSON.stringify(entry);
-          if (seen.has(key)) issues.push(`${pointer}/${i}: duplicate unique item`);
-          seen.add(key);
-        });
-      }
-      value.forEach((entry, i) => validate(entry, schema.items, `${pointer}/${i}`, issues));
+  return out;
+}
+async function buildRenderedOverride({ models, catalog }) {
+  const rendered = await computeRenderedAgents({ models, catalog });
+  const map = /* @__PURE__ */ new Map();
+  for (const entry of rendered) {
+    map.set(entry.relPath, entry);
+  }
+  return { rendered, map };
+}
+function renderedModelFor({ agentName, models }) {
+  for (const [role, agentNames] of Object.entries(AGENT_ROLE_MAP)) {
+    if (agentNames.includes(agentName)) {
+      const m = models?.[role];
+      return typeof m === "string" && m ? m : MODEL_FROM_CONFIG;
     }
   }
-  if (type === "object" || isObject2(schema.properties) || Array.isArray(schema.required)) {
-    if (Array.isArray(schema.required)) {
-      for (const key of schema.required) {
-        if (!(key in value)) issues.push(`${pointer}: missing required field ${key}`);
+  return MODEL_FROM_CONFIG;
+}
+var MODEL_FROM_CONFIG, AGENT_ROLE_MAP;
+var init_agent_renderer = __esm({
+  "src/installer/agent-renderer.js"() {
+    init_hash();
+    MODEL_FROM_CONFIG = "<model-from-config>";
+    AGENT_ROLE_MAP = Object.freeze({
+      planner: ["ship-planner"],
+      builder: ["ship-controller", "ship-task-builder", "ship-task-reviewer"],
+      finalReviewer: ["ship-final-standards-reviewer", "ship-final-spec-reviewer"]
+    });
+  }
+});
+
+// src/installer/cli-args.js
+init_profile();
+var USAGE = `opencode-ship <command> [options]
+
+Commands:
+  init        Install managed files in this project. One-liner: pnpm dlx opencode-ship@latest init
+  diff        Show what would change without writing.
+  update      Apply pending updates after recovering the journal.
+  doctor      Validate environment, lock, and references.
+  uninstall   Remove managed files that still match the lock.
+  --version   Print the version and exit.
+  --help      Show this usage and exit.
+
+Options:
+  --root <path>               Project root (defaults to cwd).
+  --profile engineering       Override active profile (engineering only).
+  --force-config              Rewrite the user config from detection (init only).
+  --force-root-config         Create opencode.json when absent (init only).
+  --strict-doctor             Fail init when doctor reports unhealthy checks.
+  --replace-managed           Replace locally-modified managed files (update only).
+  --purge-config              Remove ship.config.json when uninstalling.
+  --planner-model <id>        Strong planner model id (init only, optional).
+  --builder-model <id>        Cheap builder model id (init only, optional).
+  --final-reviewer-model <id> Final Standards + Spec reviewer model id (init only, optional).
+  --json                      Emit a JSON envelope instead of human output.
+
+After init succeeds, restart OpenCode and run /setup-ship-workflow to
+fill in the workflow.models fields and the per-repo docs.
+`;
+var MODEL_ID_RE = /^[a-zA-Z0-9_.-]+\/[a-zA-Z0-9_.-]+$/;
+function parseFlags(argv) {
+  const options = {
+    rootPath: null,
+    profile: null,
+    json: false,
+    replaceManaged: false,
+    purgeConfig: false,
+    forceConfig: false,
+    forceRootConfig: false,
+    strictDoctor: false,
+    plannerModel: null,
+    builderModel: null,
+    finalReviewerModel: null
+  };
+  for (let i = 0; i < argv.length; i++) {
+    const arg = argv[i];
+    if (arg === "--json") options.json = true;
+    else if (arg === "--replace-managed") options.replaceManaged = true;
+    else if (arg === "--purge-config") options.purgeConfig = true;
+    else if (arg === "--force-config") options.forceConfig = true;
+    else if (arg === "--force-root-config") options.forceRootConfig = true;
+    else if (arg === "--strict-doctor") options.strictDoctor = true;
+    else if (arg === "--root") options.rootPath = argv[++i];
+    else if (arg === "--profile") {
+      const value = argv[++i];
+      if (value === void 0) {
+        return { error: "--profile requires a value" };
       }
-    }
-    if (schema.additionalProperties === false && isObject2(schema.properties)) {
-      for (const key of Object.keys(value)) {
-        if (!(key in schema.properties)) issues.push(`${pointer}: unknown field ${key}`);
+      if (value === "core") {
+        return {
+          error: "the 'core' profile was removed in opencode-ship 1.1.0; only 'engineering' is supported. Run /setup-ship-workflow to migrate."
+        };
       }
-    }
-    if (isObject2(schema.properties)) {
-      for (const key of Object.keys(schema.properties)) {
-        if (key in value) validate(value[key], schema.properties[key], `${pointer}/${key}`, issues);
+      if (!isValidProfile(value)) {
+        return { error: `unknown profile '${value}' (expected one of: ${PROFILES.join(", ")})` };
       }
-    }
+      options.profile = value;
+    } else if (arg === "--planner-model" || arg === "--builder-model" || arg === "--final-reviewer-model") {
+      const value = argv[++i];
+      if (value === void 0) return { error: `${arg} requires a value` };
+      if (!MODEL_ID_RE.test(value)) {
+        return { error: `${arg} must be a "<provider>/<model>" id, got ${JSON.stringify(value)}` };
+      }
+      if (arg === "--planner-model") options.plannerModel = value;
+      else if (arg === "--builder-model") options.builderModel = value;
+      else options.finalReviewerModel = value;
+    } else if (arg === "-h" || arg === "--help") return { help: true };
+    else if (arg === "-v" || arg === "--version") return { version: true };
+    else return { error: `unknown flag ${arg}` };
   }
+  return options;
 }
-function validateSchema(value, schema) {
-  const issues = [];
-  validate(value, schema, "#", issues);
-  return { ok: issues.length === 0, issues };
-}
-
-// src/installer/config.js
-init_json_pointer();
-init_hash();
-function configPath(repoRoot) {
-  return resolve4(repoRoot, ".opencode", "ship.config.json");
-}
-async function loadConfig(repoRoot) {
-  const path = configPath(repoRoot);
-  if (!existsSync4(path)) return null;
-  const raw = await readFile(path, "utf8");
-  let parsed;
-  try {
-    parsed = JSON.parse(raw);
-  } catch (e) {
-    return { ok: false, error: { kind: "parse", path, message: e.message } };
+function parseCommand(argv) {
+  for (const arg of argv) {
+    if (arg === "--help" || arg === "-h") return { command: "help" };
+    if (arg === "--version" || arg === "-v") return { command: "version" };
   }
-  const validation = validateSchema(parsed, ship_config_schema_default);
-  if (!validation.ok) {
-    return { ok: false, error: { kind: "contract", path, issues: validation.issues } };
+  const [cmd, ...rest] = argv;
+  if (!cmd) return { command: "help" };
+  const flags = parseFlags(rest);
+  if ("help" in flags) return { command: "help" };
+  if ("version" in flags) return { command: "version" };
+  if ("error" in flags) return { error: flags.error };
+  switch (cmd) {
+    case "init":
+    case "diff":
+    case "update":
+    case "doctor":
+    case "uninstall":
+      return { command: cmd, options: flags };
+    default:
+      return { error: `unknown command ${cmd}` };
   }
-  return {
-    ok: true,
-    path,
-    raw,
-    sha256: bytesHashString(raw),
-    canonicalSha256: bytesHashString(stableStringify(parsed)),
-    value: parsed
-  };
-}
-function renderDefaultConfig(detection, overrides = {}) {
-  const pm = detection?.packageManager ?? "npm";
-  const safeBootstrap = Array.isArray(detection?.worktreeBootstrap) && detection.worktreeBootstrap.length ? detection.worktreeBootstrap : [["npm", "install"]];
-  const safeVerification = Array.isArray(detection?.verificationPlan) && detection.verificationPlan.length ? detection.verificationPlan.map((step) => ({ id: step.id, argv: step.argv })) : [{ id: "typecheck", argv: ["npm", "run", "typecheck"] }];
-  const repo = detection?.repository ?? overrides.repository ?? "owner/repo";
-  return {
-    schemaVersion: 2,
-    profile: "engineering",
-    project: {
-      remote: detection?.remote ?? "origin",
-      repository: repo,
-      defaultBranch: detection?.defaultBranch ?? "main",
-      packageManager: pm,
-      detectOverrides: false
-    },
-    delivery: {
-      worktree: {
-        root: detection?.worktreeRoot ?? ".worktrees",
-        branchTemplate: "{actor}/{slug}",
-        bootstrap: safeBootstrap
-      },
-      verification: {
-        commands: safeVerification,
-        requireCleanDiffAfter: true,
-        invalidateOnHeadChange: true
-      },
-      review: { agent: "delivery-reviewer", required: true, invalidateOnHeadChange: true },
-      ci: {
-        driver: "github-status-checks",
-        requiredChecks: ["delivery-verify"],
-        wait: true,
-        flakyRetry: 1
-      },
-      ready: { requires: ["review", "local-verification", "remote-ci"], stopAfterReady: true },
-      merge: { strategy: "squash", policy: "explicit-user-request-only", requireFreshGates: true },
-      cleanup: { when: "next-task", requireUnpublishedGuard: true }
-    },
-    workflow: {
-      models: {},
-      approval: { mirrorToIssue: true, maxFailedRounds: 3 }
-    }
-  };
 }
-function hasCompletedModels(configValue) {
-  const models = configValue?.workflow?.models;
-  if (!models || typeof models !== "object") return false;
-  const idRe = /^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/;
-  return typeof models.planner === "string" && idRe.test(models.planner) && typeof models.builder === "string" && idRe.test(models.builder) && typeof models.finalReviewer === "string" && idRe.test(models.finalReviewer);
+function helpText() {
+  return USAGE;
 }
 
+// src/installer/commands/init.js
+import { promisify as promisify2 } from "node:util";
+import { writeFile as writeFile8, mkdir as mkdirAsync2 } from "node:fs/promises";
+import { dirname as dirname10, resolve as resolvePath } from "node:path";
+
+// src/installer/executor.js
+init_catalog();
+init_version();
+import { existsSync as existsSync13 } from "node:fs";
+import { mkdir as mkdir6, readFile as readFile9, rename as rename5, unlink as unlink3, writeFile as writeFile6 } from "node:fs/promises";
+import { dirname as dirname8, resolve as resolve12 } from "node:path";
+
 // src/installer/planner.js
+init_catalog();
+init_hash();
+init_config();
 init_json_pointer();
 init_root_config();
+import { existsSync as existsSync7 } from "node:fs";
+import { readFile as readFile3, stat } from "node:fs/promises";
 
 // src/installer/root-reconciliation.js
 init_root_config();
@@ -1320,9 +1482,8 @@ init_hash();
 init_plan_mode_permissions();
 import { existsSync as existsSync6 } from "node:fs";
 import { join } from "node:path";
-var PLAN_MODE_POINTER2 = "/agent/plan/permission";
 function desiredPointersForProfile(profile) {
-  const out = POINTER_ENTRIES.map((entry) => ({
+  return POINTER_ENTRIES.map((entry) => ({
     pointer: entry.pointer,
     strategy: (
       /** @type {"value" | "object-entry" | "array-member"} */
@@ -1330,28 +1491,10 @@ function desiredPointersForProfile(profile) {
     ),
     scope: (
       /** @type {Profile} */
-      "core"
+      "engineering"
     ),
     value: entry.value
   }));
-  if (profile === "engineering") {
-    out.push({
-      pointer: PLAN_MODE_POINTER2,
-      strategy: (
-        /** @type {"value" | "object-entry" | "array-member"} */
-        "value"
-      ),
-      scope: (
-        /** @type {Profile} */
-        "engineering"
-      ),
-      value: (
-        /** @type {any} */
-        planModePermissions().build
-      )
-    });
-  }
-  return out;
 }
 async function planRootReconciliation(input) {
   const profile = input.profile;
@@ -1400,10 +1543,6 @@ async function planRootReconciliation(input) {
   let doc;
   if (fileMissing && input.forceRepair) {
     doc = synthesizeDefaultRootConfig();
-    if (mode === "install" && profile === "engineering") {
-      const applied = applyPlanModeOwnership(doc, { block: planModePermissions().build });
-      doc = applied.doc;
-    }
     const bytes = Buffer.from(formatRootConfig(doc), "utf8");
     return {
       kind: "create",
@@ -1823,11 +1962,12 @@ function lookupLockedFile(lock, targetPath) {
   if (!lock?.files) return null;
   return lock.files.find((entry) => entry.path === targetPath) ?? null;
 }
-async function planManagedFile({ entry, repoRoot, lock, allowUnowned }) {
+async function planManagedFile({ entry, repoRoot, lock, allowUnowned, renderedOverride = null }) {
+  const override = renderedOverride && renderedOverride.get?.(entry.path);
   const targetPath = `${repoRoot}/${entry.path}`;
   const locked = lookupLockedFile(lock, entry.path);
   const current = await readBytes(targetPath);
-  const desired = await readDesiredBytes(entry.source);
+  const desired = override ? { bytes: override.bytes, hash: override.sha256 } : await readDesiredBytes(entry.source);
   if (!current) {
     return {
       kind: "create",
@@ -1838,7 +1978,7 @@ async function planManagedFile({ entry, repoRoot, lock, allowUnowned }) {
       bytes: desired?.bytes ?? Buffer.alloc(0),
       sha256: desired?.hash,
       mode: 420,
-      reason: "managed file missing"
+      reason: override ? "rendered agent with configured model" : "managed file missing"
     };
   }
   if (desired.hash === current.hash) {
@@ -1862,7 +2002,7 @@ async function planManagedFile({ entry, repoRoot, lock, allowUnowned }) {
       bytes: desired?.bytes ?? Buffer.alloc(0),
       sha256: desired?.hash,
       mode: 420,
-      reason: "safe update: previous lock matches current bytes"
+      reason: override ? "rendered agent with new configured model" : "safe update: previous lock matches current bytes"
     };
   }
   if (locked?.sha256 && locked.sha256 !== current.hash && allowUnowned) {
@@ -1888,10 +2028,10 @@ async function planManagedFile({ entry, repoRoot, lock, allowUnowned }) {
     reason: locked?.sha256 == null ? "managed file already exists; bytes differ from upstream" : "managed file is locally modified"
   };
 }
-async function planFileInstall({ repoRoot, lock, allowUnowned = false, catalog = CATALOG }) {
+async function planFileInstall({ repoRoot, lock, allowUnowned = false, catalog = CATALOG, renderedOverride = null }) {
   const plan = [];
   for (const entry of catalog) {
-    plan.push(await planManagedFile({ entry, repoRoot, lock, allowUnowned }));
+    plan.push(await planManagedFile({ entry, repoRoot, lock, allowUnowned, renderedOverride }));
   }
   return plan;
 }
@@ -2006,7 +2146,8 @@ async function planUninstall({ repoRoot, lock }) {
 }
 async function planConfigSynthesis({ repoRoot, detection, lock, forceOverwrite, migrationSeed = null, models = null }) {
   const existing = await loadConfig(repoRoot);
-  if (existing?.ok && !forceOverwrite) {
+  const hasModelFlags = Boolean(models && (models.planner || models.builder || models.finalReviewer));
+  if (existing?.ok && !forceOverwrite && !hasModelFlags) {
     return {
       kind: "noop",
       op: "config",
@@ -2018,9 +2159,9 @@ async function planConfigSynthesis({ repoRoot, detection, lock, forceOverwrite,
       reason: "user config already present"
     };
   }
-  let desiredValue = migrationSeed ?? renderDefaultConfig(detection);
-  if (models && (models.planner || models.builder || models.finalReviewer)) {
-    const merged = {
+  let desiredValue = migrationSeed ?? (existing?.ok ? structuredClone(existing.value) : renderDefaultConfig(detection));
+  if (hasModelFlags) {
+    desiredValue = {
       ...desiredValue,
       schemaVersion: 2,
       profile: "engineering",
@@ -2038,12 +2179,12 @@ async function planConfigSynthesis({ repoRoot, detection, lock, forceOverwrite,
         }
       }
     };
-    desiredValue = merged;
   }
+  if (desiredValue.profile === "core") desiredValue.profile = "engineering";
   const desiredJson = JSON.stringify(desiredValue, null, 2) + "\n";
   const desiredSha = bytesHashString(desiredJson);
-  const kind = existing?.ok && forceOverwrite ? "update" : "create";
-  const reason = existing?.ok ? "user config overwritten via --force-config" : migrationSeed ? "synthesising a default config from legacy adapter migration" : "synthesising a default config from detection";
+  const kind = existing?.ok && (forceOverwrite || hasModelFlags) ? "update" : "create";
+  const reason = existing?.ok ? hasModelFlags && !forceOverwrite ? "patching workflow.models from CLI model flags" : "user config overwritten via --force-config" : migrationSeed ? "synthesising a default config from legacy adapter migration" : "synthesising a default config from detection";
   return {
     kind,
     op: "config",
@@ -2059,8 +2200,8 @@ async function planConfigSynthesis({ repoRoot, detection, lock, forceOverwrite,
 async function planRootConfigApply({ repoRoot, lock, forceRepair, planMode = null }) {
   const previous = (lock?.manager?.rootDocuments ?? []).flatMap((d) => d.pointers ?? []);
   const previousProfile = lock?.manager?.profile ?? null;
-  const desiredProfile = planMode && planMode.scope === "engineering" ? "engineering" : "core";
-  const isTransition = previousProfile !== null && previousProfile !== desiredProfile;
+  const desiredProfile = "engineering";
+  const isTransition = previousProfile !== null && previousProfile !== "engineering" && previousProfile !== "core";
   const mode = previous.length === 0 ? "install" : isTransition ? "profile-transition" : "install";
   return planRootReconciliation({
     repoRoot,
@@ -2074,10 +2215,11 @@ async function planRootConfigApply({ repoRoot, lock, forceRepair, planMode = nul
 // src/installer/lock.js
 init_hash();
 init_json_pointer();
+init_profile();
 import { readFile as readFile4, writeFile as writeFile2, rename as rename2, mkdir as mkdir2 } from "node:fs/promises";
 import { existsSync as existsSync8 } from "node:fs";
 import { dirname as dirname4, resolve as resolve6 } from "node:path";
-var CURRENT_LOCK_SCHEMA = 3;
+var CURRENT_LOCK_SCHEMA = 4;
 function lockPath(repoRoot) {
   return resolve6(repoRoot, ".opencode", "ship.lock.json");
 }
@@ -2088,6 +2230,12 @@ function computeIntegrity(lock) {
     lockSha256: bytesHashString(stableStringify(without))
   };
 }
+function normalizeLegacyLock(lock) {
+  if (!lock || typeof lock !== "object") return lock;
+  const { cleanupPending: _drop, ...rest } = lock;
+  void _drop;
+  return rest;
+}
 function validateLock(rawLock) {
   if (rawLock === null || rawLock === void 0) {
     return { ok: true, kind: "missing", issues: [] };
@@ -2097,8 +2245,8 @@ function validateLock(rawLock) {
   }
   const issues = [];
   let kind = "ok";
-  if (rawLock.contractVersion !== CURRENT_LOCK_SCHEMA && rawLock.contractVersion !== 1 && rawLock.contractVersion !== 2) {
-    issues.push(`unsupported contractVersion: ${JSON.stringify(rawLock.contractVersion)} (expected ${CURRENT_LOCK_SCHEMA}, 2, or 1)`);
+  if (rawLock.contractVersion !== CURRENT_LOCK_SCHEMA && rawLock.contractVersion !== 3 && rawLock.contractVersion !== 2 && rawLock.contractVersion !== 1) {
+    issues.push(`unsupported contractVersion: ${JSON.stringify(rawLock.contractVersion)} (expected ${CURRENT_LOCK_SCHEMA}, 3, 2, or 1)`);
     kind = "schema";
   }
   const manager = rawLock.manager;
@@ -2108,14 +2256,14 @@ function validateLock(rawLock) {
   } else if (typeof manager !== "object" || manager === null) {
     issues.push("manager section must be an object");
     kind = kind === "ok" ? "shape" : kind;
-  } else if (manager.schemaVersion !== CURRENT_LOCK_SCHEMA && manager.schemaVersion !== 2 && manager.schemaVersion !== 1) {
-    issues.push(`unsupported manager.schemaVersion: ${JSON.stringify(manager.schemaVersion)} (expected ${CURRENT_LOCK_SCHEMA}, 2, or 1)`);
+  } else if (manager.schemaVersion !== CURRENT_LOCK_SCHEMA && manager.schemaVersion !== 3 && manager.schemaVersion !== 2 && manager.schemaVersion !== 1) {
+    issues.push(`unsupported manager.schemaVersion: ${JSON.stringify(manager.schemaVersion)} (expected ${CURRENT_LOCK_SCHEMA}, 3, 2, or 1)`);
     kind = "schema";
   } else if (manager.name !== "opencode-ship") {
     issues.push(`unknown manager.name: ${JSON.stringify(manager.name)}`);
     kind = "shape";
-  } else if (rawLock.contractVersion >= 2 && manager.schemaVersion >= 2 && manager.profile !== void 0 && !isValidProfile(manager.profile)) {
-    issues.push(`invalid manager.profile: ${JSON.stringify(manager.profile)} (expected one of: core, engineering)`);
+  } else if (rawLock.contractVersion >= 2 && manager.schemaVersion >= 2 && manager.profile !== void 0 && manager.profile !== "core" && manager.profile !== "engineering") {
+    issues.push(`invalid manager.profile: ${JSON.stringify(manager.profile)} (expected one of: engineering, core [legacy])`);
     kind = "shape";
   }
   if (!rawLock.files || !Array.isArray(rawLock.files)) {
@@ -2151,10 +2299,18 @@ async function readValidatedLock(repoRoot) {
     };
   }
   const validation = validateLock(raw);
-  return { kind: validation.kind, lock: validation.ok ? raw : null, issues: validation.issues };
+  if (validation.ok) {
+    return {
+      kind: validation.kind,
+      lock: normalizeLegacyLock(raw),
+      issues: []
+    };
+  }
+  return { kind: validation.kind, lock: null, issues: validation.issues };
 }
 
 // src/installer/executor.js
+init_config();
 init_hash();
 init_json_pointer();
 
@@ -2744,6 +2900,7 @@ async function rollback(lockDir, journal) {
 import { readFile as readFile7 } from "node:fs/promises";
 import { existsSync as existsSync12 } from "node:fs";
 import { resolve as resolve11 } from "node:path";
+init_config();
 function legacyAdapterPath(repoRoot) {
   return resolve11(repoRoot, ".opencode", "delivery.json");
 }
@@ -2845,10 +3002,10 @@ function legacyToShipConfig(legacy, detection = null) {
 }
 
 // src/installer/executor.js
-init_plan_mode_permissions();
+init_profile();
 async function readCurrentBytes(targetPath) {
   if (!existsSync13(targetPath)) return null;
-  const buf = await readFile8(targetPath);
+  const buf = await readFile9(targetPath);
   return { bytes: buf, hash: bytesHashString(buf.toString("utf8")) };
 }
 async function previewInstall({ rootPath, profile = null, replaceManaged, forceConfig, forceRootConfig, models = null }) {
@@ -2873,6 +3030,21 @@ async function previewInstall({ rootPath, profile = null, replaceManaged, forceC
     config: configValue,
     lock
   });
+  if (resolved.profile === "engineering" && forceConfig) {
+    const existingModels = configValue?.workflow?.models ?? {};
+    const planner = models?.planner ?? existingModels.planner;
+    const builder = models?.builder ?? existingModels.builder;
+    const finalReviewer = models?.finalReviewer ?? existingModels.finalReviewer;
+    if (!planner || !builder || !finalReviewer) {
+      return {
+        ok: false,
+        error: {
+          kind: "engineering-models-required",
+          message: "engineering profile with --force-config requires --planner-model, --builder-model, and --final-reviewer-model"
+        }
+      };
+    }
+  }
   if (resolved.profile === "engineering") {
     const candidate = await planConfigSynthesis({
       repoRoot,
@@ -2901,7 +3073,19 @@ async function previewInstall({ rootPath, profile = null, replaceManaged, forceC
     migrationSeed: migrationReport?.proposedConfigSeed ?? null,
     models
   });
-  const filePlan = await planFileInstall({ repoRoot, lock, allowUnowned: Boolean(replaceManaged), catalog: activeCatalog });
+  const { buildRenderedOverride: buildRenderedOverride2 } = await Promise.resolve().then(() => (init_agent_renderer(), agent_renderer_exports));
+  const configModels = configPlan?.configValue?.workflow?.models ?? {};
+  const rendered = await buildRenderedOverride2({
+    models: resolved.profile === "engineering" ? configModels : null,
+    catalog: CATALOG
+  });
+  const filePlan = await planFileInstall({
+    repoRoot,
+    lock,
+    allowUnowned: Boolean(replaceManaged),
+    catalog: activeCatalog,
+    renderedOverride: rendered.map
+  });
   const staleFilePlan = await planStaleFileRemoval({ repoRoot, lock, staleCatalog });
   const migrationPlan = await planMigrationCleanup({
     repoRoot,
@@ -2909,9 +3093,9 @@ async function previewInstall({ rootPath, profile = null, replaceManaged, forceC
     migrationReport,
     allowUnowned: Boolean(replaceManaged)
   });
-  const planMode = resolved.profile === "engineering" ? { id: "/agent/plan/permission", block: planModePermissions().build, scope: "engineering" } : null;
+  const planMode = null;
   const rootPlan = await planRootConfigApply({ repoRoot, lock, forceRepair: Boolean(forceRootConfig), planMode });
-  const setupPending = resolved.profile === "engineering" && !lock?.manager?.setupComplete && !hasCompletedModels(configValue?.workflow?.models ?? {}) && !models?.planner;
+  const setupPending = resolved.profile === "engineering" && !lock?.manager?.setupComplete && !hasCompletedModels(configValue) && !models?.planner;
   const plan = [...filePlan ?? [], ...staleFilePlan, ...migrationPlan, configPlan, rootPlan];
   const conflicts = plan.filter((p) => p && p.kind === "conflict");
   const summary = summarise(plan);
@@ -2990,16 +3174,17 @@ async function assembleLock({ repoRoot, plan, lock, configPlan, rootPlan, profil
   const rootPointers = rootPlan?.pointerRecords ?? lock?.manager?.rootDocuments?.[0]?.pointers ?? [];
   const hasRootPlan = Boolean(rootPlan?.target || rootPlan?.pointerRecords && rootPlan.pointerRecords.length > 0);
   const hasRootDocuments = rootPlan?.pointerRecords && rootPlan.pointerRecords.length > 0 || lock?.manager?.rootDocuments && lock.manager.rootDocuments.length > 0;
-  const configModels = configPlan?.configValue?.workflow?.models ?? lock?.manager?.config?.models ?? {};
-  const completedModels = hasCompletedModels({ workflow: { models: configModels } });
+  const assembledConfig = configPlan?.configValue ?? (lock?.manager?.config?.models ? { workflow: { models: lock.manager.config.models } } : null);
+  const completedModels = hasCompletedModels(assembledConfig);
+  const resolvedProfile = profile ?? (lock?.manager?.profile === "core" ? "engineering" : lock?.manager?.profile) ?? "engineering";
   return {
     contractVersion: CURRENT_LOCK_SCHEMA,
     manager: {
       schemaVersion: CURRENT_LOCK_SCHEMA,
       name: "opencode-ship",
-      version: "1.1.0",
+      version: "1.1.1",
       templateSet: TEMPLATE_SET_ID,
-      profile: profile ?? lock?.manager?.profile,
+      profile: resolvedProfile,
       appliedAt: (/* @__PURE__ */ new Date()).toISOString(),
       setupComplete: completedModels,
       config: {
@@ -3013,8 +3198,7 @@ async function assembleLock({ repoRoot, plan, lock, configPlan, rootPlan, profil
         pointers: rootPlan?.pointerRecords && rootPlan.pointerRecords.length > 0 ? rootPlan.pointerRecords : lock?.manager?.rootDocuments?.[0]?.pointers ?? []
       }] : []
     },
-    files,
-    cleanupPending: lock?.cleanupPending ?? []
+    files
   };
 }
 async function commitInstall(preview, { json, command }) {
@@ -3145,9 +3329,11 @@ function relativeTemplate(source) {
 // src/installer/commands/doctor.js
 import { existsSync as existsSync14, readFileSync as readFileSync5 } from "node:fs";
 import { spawnSync as spawnSync2 } from "node:child_process";
+init_config();
 init_hash();
-import { resolve as resolve13 } from "node:path";
+init_catalog();
 init_root_config();
+import { resolve as resolve13 } from "node:path";
 
 // src/installer/report.js
 var REPORT_VERSION = 1;
@@ -3197,6 +3383,7 @@ function renderJson({ command, plan, conflicts, summary, diagnostics = [], exitC
 }
 
 // src/installer/commands/doctor.js
+init_profile();
 function checkNode() {
   return { name: "node>=22.6.0", ok: /^v2[2-9]/.test(process.version), detail: process.version };
 }
@@ -3244,7 +3431,7 @@ function buildSourceHashIndex() {
   }
   return idx;
 }
-function checkCatalogInstall(repoRoot, sourceHashes, profile) {
+async function checkCatalogInstall(repoRoot, sourceHashes, profile, renderedAgentMap = /* @__PURE__ */ new Map()) {
   const rows = [];
   const scoped = profile ? filterCatalogByProfile(CATALOG, profile) : CATALOG;
   for (const entry of scoped) {
@@ -3256,7 +3443,8 @@ function checkCatalogInstall(repoRoot, sourceHashes, profile) {
     try {
       const buf = readFileSync5(target, "utf8");
       const actual = bytesHashString(buf);
-      const expected = sourceHashes.get(entry.source);
+      const rendered = renderedAgentMap.get(entry.path);
+      const expected = rendered ? rendered.sha256 : sourceHashes.get(entry.source);
       if (expected && expected !== actual) {
         rows.push(`${entry.id}: drift`);
       } else {
@@ -3307,6 +3495,7 @@ async function checkManagedHashes(repoRoot, validatedLock) {
     return { name: "managed hashes", ok: false, detail: "no usable lock" };
   }
   const drift = [];
+  const renderedAgents = await loadRenderedAgentOverrides(repoRoot);
   for (const entry of validatedLock.lock.files ?? []) {
     const p = resolve13(repoRoot, entry.path);
     if (!existsSync14(p)) {
@@ -3319,6 +3508,18 @@ async function checkManagedHashes(repoRoot, validatedLock) {
   }
   return { name: "managed hashes", ok: drift.length === 0, detail: drift.length ? drift.join(",") : "match" };
 }
+async function loadRenderedAgentOverrides(repoRoot) {
+  const { loadConfig: loadConfig2 } = await Promise.resolve().then(() => (init_config(), config_exports));
+  const { CATALOG: CATALOG2 } = await Promise.resolve().then(() => (init_catalog(), catalog_exports));
+  const { computeRenderedAgents: computeRenderedAgents2 } = await Promise.resolve().then(() => (init_agent_renderer(), agent_renderer_exports));
+  const cfg = await loadConfig2(repoRoot);
+  const models = cfg?.ok ? cfg.value?.workflow?.models : null;
+  if (!models) return /* @__PURE__ */ new Map();
+  const rendered = await computeRenderedAgents2({ models, catalog: CATALOG2 });
+  const map = /* @__PURE__ */ new Map();
+  for (const e of rendered) map.set(e.relPath, e);
+  return map;
+}
 async function checkActiveProfileFootprint(repoRoot, validatedLock, profile) {
   if (validatedLock.kind !== "ok" || !validatedLock.lock) {
     return { name: "profile footprint", ok: true, detail: "no lock; n/a" };
@@ -3393,7 +3594,7 @@ async function runDoctor({ rootPath, profile, json, writeOutput = true }) {
     checkGh(),
     checkGhAuth(),
     packageIntegrity,
-    checkCatalogInstall(repoRoot, sourceHashes, resolved.profile),
+    await checkCatalogInstall(repoRoot, sourceHashes, resolved.profile, await loadRenderedAgentOverrides(repoRoot)),
     await checkLock(repoRoot),
     await checkConfig(repoRoot),
     await checkManagedHashes(repoRoot, validatedLock),
@@ -3418,11 +3619,15 @@ async function runDoctor({ rootPath, profile, json, writeOutput = true }) {
   return { issues, exitCode, plan, checks, profile: resolved };
 }
 
+// src/installer/commands/init.js
+init_catalog();
+init_config();
+
 // src/installer/setup-pending.js
-import { existsSync as existsSync15, readFileSync as readFileSync6, unlinkSync, writeFile as writeFile6, mkdir as mkdirAsync } from "node:fs";
+import { existsSync as existsSync15, readFileSync as readFileSync6, unlinkSync, writeFile as writeFile7, mkdir as mkdirAsync } from "node:fs";
 import { promisify } from "node:util";
-import { resolve as resolve14, dirname as dirname8 } from "node:path";
-var writeFileAsync = promisify(writeFile6);
+import { resolve as resolve14, dirname as dirname9 } from "node:path";
+var writeFileAsync = promisify(writeFile7);
 var mkdirAsyncAsync = promisify(mkdirAsync);
 var REL_PATH = ".opencode/ship.setup-pending.json";
 function setupPendingPath(repoRoot) {
@@ -3430,7 +3635,7 @@ function setupPendingPath(repoRoot) {
 }
 async function writeSetupPending(repoRoot, payload) {
   const path = setupPendingPath(repoRoot);
-  await mkdirAsyncAsync(dirname8(path), { recursive: true });
+  await mkdirAsyncAsync(dirname9(path), { recursive: true });
   await writeFileAsync(path, JSON.stringify(payload, null, 2) + "\n", "utf8");
 }
 function clearSetupPending(repoRoot) {
@@ -3445,7 +3650,7 @@ function clearSetupPending(repoRoot) {
 }
 
 // src/installer/commands/init.js
-var writeFileAsync2 = promisify2(writeFile7);
+var writeFileAsync2 = promisify2(writeFile8);
 var mkdirAsyncAsync2 = promisify2(mkdirAsync2);
 async function runInit(options) {
   try {
@@ -3594,6 +3799,7 @@ function emitFailure(code, message, json, command) {
 }
 
 // src/installer/commands/diff.js
+init_catalog();
 function summarise3(plan) {
   const counts = { create: 0, update: 0, noop: 0, delete: 0, conflict: 0, converge: 0, lock: 0, config: 0, rootConfig: 0 };
   for (const op of plan) {
@@ -3707,6 +3913,7 @@ async function runDiff(options) {
 }
 
 // src/installer/commands/update.js
+init_catalog();
 async function runUpdate(options) {
   try {
     validateCatalog();
@@ -3785,6 +3992,7 @@ function emitFailure2(code, message, json, command) {
 }
 
 // src/installer/commands/uninstall.js
+init_config();
 import { unlink as unlink4 } from "node:fs/promises";
 async function runUninstall(options) {
   const preview = await previewUninstall({ rootPath: options.rootPath });
@@ -3868,6 +4076,7 @@ function emitReport(plan, conflicts, summary, json, exitCode, diagnostics) {
 }
 
 // src/cli.js
+init_version();
 var VERSION = PACKAGE_VERSION;
 async function main() {
   const parsed = parseCommand(process.argv.slice(2));