feat: manual dispatch release workflow

.gitea/workflows/release.yml

@@ -0,0 +1,27 @@
+name: release
+
+# Manual release: publishes the latest CHANGELOG.md version to the Gitea npm registry, tags it and
+# links the package to this repo. Idempotent - safe to re-run (repairs partial releases, skips
+# already-published versions). Nightly handles upstream-sync releases automatically.
+on:
+  workflow_dispatch:
+
+jobs:
+  release:
+    if: gitea.ref == 'refs/heads/main'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 24
+      - run: npm ci
+      - run: npm run check
+      - run: npm test
+      - run: npm run build
+      - run: node scripts/release.ts
+        env:
+          SERVER_URL: ${{ gitea.server_url }}
+          REPOSITORY: ${{ gitea.repository }}
+          SHA: ${{ gitea.sha }}
+          TOKEN: ${{ secrets.PACKAGE_TOKEN }}

TODO.md

@@ -39,13 +39,16 @@ State: `.opencode/state/status.md`. Design: `docs/architecture.md`.
 
 - [x] 2.1 deep per-skill analysis → .opencode/state/classification.json + docs/skill-mapping.md
       (done in phase 0; generator must regenerate mapping doc from classification.json — keep in 1.3 scope)
-- [ ] 2.2 guardrails plugin hook (opt-in, tool.hook execute.before on shell) + tests
-- [ ] 2.3 pocock-reviewer: CONFIRMED by analysis (D8) — implement template + skill-permission scoping
-- [ ] 2.4 orchestrator V2 flow wiring (background-subagent status in V2? batch fallback; worktree
-      permission guidance; slash UX for user-invoked skills)
-- [ ] 2.5 per-skill regression checks + manual orchestration smoke (token-spending, documented)
-- [ ] 2.6 README usage guide + finalize skill-mapping
-- [ ] 2.7 one week of green nightlies → declare stable
+- [x] 2.2 guardrails plugin hook (opt-in, tool.hook execute.before on shell) + tests — shipped in
+      Phase 1.4 (src/guardrails.ts); pattern list faithful to upstream block-dangerous-git.sh
+- [x] 2.3 pocock-reviewer: CONFIRMED by analysis (D8) — implemented in 1.6 with read-only
+      permissions (edit/subagent/webfetch deny, git-read shell allow-list, skill allow code-review)
+- [x] 2.4 orchestrator V2 flow wiring — done in 1.6: agent text covers background AND batch
+      dispatch; slash UX + /tmp default documented in README from runtime findings
+- [ ] 2.5 per-skill regression checks (drift suite exists; add manual token-spending orchestration
+      run: fixture spec + 3 tickets like pocock-agents smoke) + record in docs/runtime-checks.md
+- [x] 2.6 README usage guide + finalize skill-mapping (matrix generated from classification.json)
+- [ ] 2.7 one week of green nightlies -> declare stable (BLOCKED on PACKAGE_TOKEN secret)
 
 ## Open questions