opencode-ship 1.1.3 → 1.1.4

package/CHANGELOG.md

@@ -2,6 +2,14 @@
 
 All notable changes to `opencode-ship` are recorded here.
 
+## 1.1.4 — `ship-plan` primary planning agent
+
+> Branch: `feat/1.1.4-ship-plan`.
+
+- **Write-capable `ship-plan` planning agent.** OpenCode's built-in lowercase `plan` Tab injects a read-only reminder (`packages/opencode/src/session/prompt/plan.txt`) that cannot be bypassed by `opencode.json` permissions. The native experimental Plan mode (`OPENCODE_EXPERIMENTAL_PLAN_MODE`) is environment-only, dotenv autoload is disabled in the production binary, and plugins initialise after `RuntimeFlags` is constructed — there is no supported repo-local path to turn on the native workflow. From 1.1.4 the installer installs a new primary agent `ship-plan` (under `.opencode/agents/ship-plan.md`) and sets `agent.plan.disable: true`. `ship-plan` is write-capable but only under `.opencode/plans/*.md` (`edit["*"]: "deny"` with `.opencode/plans/*.md: "allow"` ordered last). Tab cycles to Build / ship-plan; the old read-only Plan identity is disabled so the UX is no longer confusing.
+- **`/agent/plan/disable` pointer.** New matrix leaf with `value: true`. Install / update set it; uninstall restores the previous value. The pointer is the single declaration that the installer owns; consumers who explicitly set `plan.disable: false` are surfaced as a conflict and refused.
+- **No native `plan_exit` or `Session.plan()` filename.** The replacement is deliberately not the experimental Plan workflow. There is no `plan_exit` tool, no canonical plan filename supplied by OpenCode, and no synthetic build-handoff message. If OpenCode eventually ships the per-agent `plan: true` proposal (`anomalyco/opencode#31868`), this agent can migrate onto the native facility cleanly.
+
 ## 1.1.3 — Tool permission regression + setup-ship-workflow loader
 
 > Branch: `fix/1.1.3-tool-permissions`. Hotfix on top of `1.1.2`.

package/README.md

@@ -2,7 +2,7 @@
 
 > npm-distributed OpenCode installer and delivery plugin: a single command materialises the lifecycle plugin, reviewer/verifier agents, and skills into any consumer repository, with a recoverable lock and never silently overwrites managed files.
 >
-> **Status:** `1.1.3` is on `npm dist-tag latest` and supersedes the `1.1.2 stabilization` line. `1.1.2` published a `permission: { "*": "deny" }` leaf that masked the consumer-owned built-ins and broke `/setup-ship-workflow`; `1.1.3` drops the wildcard, adds a stale-pointer removal path so `update` cleans the orphan key on the first run, and makes the `/setup-ship-workflow` command self-loading. The `1.1.0` tag is immutable. Consumers of `opencode-delivery@0.1.x` should run `pnpm dlx opencode-ship@latest init` from the same checkout; migration recognises the legacy artifacts and adopts them when their bytes match.
+> **Status:** `1.1.4` is on `npm dist-tag latest` and adds a write-capable `ship-plan` primary planning agent. OpenCode's built-in lowercase `plan` Tab is now disabled by the installer (the native experimental Plan mode is env-only and cannot be activated from a repo-local install); `ship-plan` writes Markdown only under `.opencode/plans/*.md` and never touches source files. `1.1.3` supersedes the `1.1.2 stabilization` line by dropping the broken `permission: { "*": "deny" }` wildcard and adding a stale-pointer removal path so `update` cleans the orphan key on the first run. The `1.1.0` tag is immutable. Consumers of `opencode-delivery@0.1.x` should run `pnpm dlx opencode-ship@latest init` from the same checkout; migration recognises the legacy artifacts and adopts them when their bytes match.
 >
 > Consumers should use `opencode-ship@1.1.0` (or `@latest`) until `1.1.1` ships. The previous `1.0.0` is on `next`; consumers who pinned to `1.0.x` will continue to receive updates on that channel.
 

package/THIRD_PARTY_NOTICES.md

@@ -1,6 +1,6 @@
 # Third-Party Notices
 
-`opencode-ship@1.1.3` ships the complete Matt Pocock and Superpowers
+`opencode-ship@1.1.4` ships the complete Matt Pocock and Superpowers
 methodology under the MIT license, plus the Ship-owned installer,
 plugin, agents, and skills. The complete immutable pin list is in
 `vendor/sources.json`; the upstream snapshots are under

package/assets/agents/ship-plan.md

@@ -0,0 +1,66 @@
+---
+description: Planning agent. Does not modify project source files. Writes Markdown only under .opencode/plans/*.md.
+mode: primary
+temperature: 0.3
+steps: 50
+permission:
+  edit:
+    "*": deny
+    ".opencode/plans/*.md": allow
+  bash:
+    "*": deny
+    "git status *": allow
+    "git diff *": allow
+    "git log *": allow
+    "git show *": allow
+    "git rev-parse *": allow
+    "git ls-files *": allow
+    "git ls-remote *": allow
+    "ls *": allow
+    "cat *": allow
+    "head *": allow
+    "tail *": allow
+    "stat *": allow
+    "gh issue list *": allow
+    "gh issue view *": allow
+    "gh pr list *": allow
+    "gh pr view *": allow
+  task:
+    "*": deny
+    explore: allow
+    general: allow
+  webfetch: allow
+  question: allow
+---
+
+# Ship Plan
+
+You are the primary planning agent for this repo. Use this Tab (Build is for implementation).
+
+## What you do
+
+1. Read the user's request and any context files they cite (`@file`).
+2. Explore the codebase with `bash` (read-only git / ls / cat / gh issue / gh pr) and `task explore` agents. Never `cat` secrets.
+3. Ask clarifying questions through `question` when tradeoffs need the user's call.
+4. Write your plan to a single Markdown file under `.opencode/plans/<filename>.md`. Filename: lowercase, dashes, no spaces, ends in `.md` (e.g. `2026-08-20-customer-final-ux.md`).
+5. Tell the user the file path and ask for confirmation before any edits after the first write.
+
+## What you never do
+
+- Never edit source files, configs, tests, or anything outside `.opencode/plans/*.md`.
+- Never run mutating bash (`git commit`, `git push`, `npm install`, `rm`, `pnpm add`, …).
+- Never claim you have OpenCode's native `plan_exit` workflow. This is a replacement for the read-only native Plan Tab, not the experimental one.
+- Never invoke `task plan` or `task build`. Build runs the plan, not you.
+
+## Style
+
+- Write for the cheap builder model that will execute the plan. Be concrete: file paths, function names, the exact commit messages you'll commit to.
+- Prefer small, vertical slices over big-bang rewrites.
+- Quote the source lines you'll touch.
+- When you must choose, recommend and justify in one sentence. Don't enumerate "alternatives" in the file.
+
+## Hard rules
+
+- One question per turn via `question`. Don't batch.
+- If a write fails, surface the error verbatim. Do not retry silently.
+- Don't claim a file is written until `bash` confirms it.

package/dist/cli.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-// opencode-ship CLI v1.1.3
+// opencode-ship CLI v1.1.4
 var __defProp = Object.defineProperty;
 var __getOwnPropNames = Object.getOwnPropertyNames;
 var __esm = (fn, res) => function __init() {
@@ -110,7 +110,7 @@ import { fileURLToPath as fileURLToPath2 } from "node:url";
 var PACKAGE_VERSION, TEMPLATE_SET;
 var init_version = __esm({
   "src/version.js"() {
-    PACKAGE_VERSION = "1.1.3";
+    PACKAGE_VERSION = "1.1.4";
     TEMPLATE_SET = `v${PACKAGE_VERSION}`;
   }
 });
@@ -242,6 +242,7 @@ var init_catalog = __esm({
     ];
     ENGINEERING_AGENTS = [
       "ship-controller",
+      "ship-plan",
       "ship-planner",
       "ship-task-builder",
       "ship-task-reviewer",
@@ -1052,7 +1053,7 @@ function setPath(doc, tokens, value) {
   cursor[tokens[tokens.length - 1]] = value;
   return root;
 }
-var PLAN_PATH_PREFIX, SUPERPOWERS_PATH_PREFIX, DENY_DEFAULT, ALLOW_PLANS, PLANS_GLOB, SUPERPOWERS_GLOB, PLAN_EDIT_GLOB, PLAN_EDIT_PLANS_GLOB, PLAN_EDIT_GLOB_POINTER, PLAN_EDIT_PLANS_GLOB_POINTER, PLAN_EDIT_PARENT_POINTER;
+var PLAN_PATH_PREFIX, SUPERPOWERS_PATH_PREFIX, DENY_DEFAULT, ALLOW_PLANS, PLANS_GLOB, SUPERPOWERS_GLOB, PLAN_EDIT_GLOB, PLAN_EDIT_PLANS_GLOB, PLAN_EDIT_GLOB_POINTER, PLAN_EDIT_PLANS_GLOB_POINTER, PLAN_EDIT_PARENT_POINTER, PLAN_DISABLE_POINTER;
 var init_plan_mode_permissions = __esm({
   "src/installer/plan-mode-permissions.js"() {
     PLAN_PATH_PREFIX = ".git/opencode-ship/plans";
@@ -1066,6 +1067,7 @@ var init_plan_mode_permissions = __esm({
     PLAN_EDIT_GLOB_POINTER = "/agent/plan/permission/edit/docs~1superpowers~1**";
     PLAN_EDIT_PLANS_GLOB_POINTER = "/agent/plan/permission/edit/.git~1opencode-ship~1plans~1**";
     PLAN_EDIT_PARENT_POINTER = "/agent/plan/permission/edit";
+    PLAN_DISABLE_POINTER = "/agent/plan/disable";
   }
 });
 
@@ -1952,6 +1954,7 @@ function matrixLeafPointers() {
   }
   out.push({ pointer: PLAN_EDIT_GLOB_POINTER, strategy: "value", value: "allow", scope: "engineering" });
   out.push({ pointer: PLAN_EDIT_PLANS_GLOB_POINTER, strategy: "value", value: "allow", scope: "engineering" });
+  out.push({ pointer: PLAN_DISABLE_POINTER, strategy: "value", value: true, scope: "engineering" });
   return out;
 }
 
@@ -5246,7 +5249,7 @@ async function assembleLock({ repoRoot, plan, lock, configPlan, rootPlan, profil
     manager: {
       schemaVersion: CURRENT_LOCK_SCHEMA,
       name: "opencode-ship",
-      version: "1.1.3",
+      version: "1.1.4",
       templateSet: TEMPLATE_SET_ID,
       profile: resolvedProfile,
       appliedAt: (/* @__PURE__ */ new Date()).toISOString(),

package/dist/core.js

@@ -1,4 +1,4 @@
-// opencode-ship/core v1.1.3
+// opencode-ship/core v1.1.4
 
 // src/adapter.js
 import { readFile, writeFile, mkdir, rename } from "node:fs/promises";

package/dist/plugin.js

@@ -1,4 +1,4 @@
-// opencode-ship v1.1.3
+// opencode-ship v1.1.4
 var __defProp = Object.defineProperty;
 var __getOwnPropNames = Object.getOwnPropertyNames;
 var __esm = (fn, res) => function __init() {
@@ -19328,7 +19328,7 @@ function selectRuntimeAdapter({ config: config2, shipAdapter, legacyAdapter }) {
 import { readFileSync as readFileSync4, existsSync as existsSync27 } from "node:fs";
 import { dirname as dirname12, resolve as resolve21 } from "node:path";
 import { fileURLToPath } from "node:url";
-var PACKAGE_VERSION = "1.1.3";
+var PACKAGE_VERSION = "1.1.4";
 var TEMPLATE_SET = `v${PACKAGE_VERSION}`;
 
 // src/plugin.js

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "opencode-ship",
-  "version": "1.1.3",
+  "version": "1.1.4",
   "private": false,
   "description": "npm-distributed OpenCode installer that materializes the delivery plugin, reviewer/verifier agents, skills, ship config and lock into any consumer repository.",
   "license": "MIT",