# Release Publish: 1.5.0

## Metadata

- Timestamp: 2026-06-12 23:08:13 +0900
- Branch: `main`
- Release commit: `afe616e`
- Tag: `v1.5.0`
- npm package: `opencode-orchestrator@1.5.0`
- Release type: minor

## Result

`opencode-orchestrator@1.5.0` was published to npm with the `latest` tag.

## Verification

| Check | Result |
| :--- | :--- |
| `npm run release:minor` | Completed through version bump, preflight, Docker Linux x64/arm64 builds, and publish after artifact sync recovery. |
| `npm view opencode-orchestrator version --json` | `1.5.0` |
| `npm view opencode-orchestrator@1.5.0 version --json` | `1.5.0` |
| `git push origin main` | Pushed `afe616e` to `main`. |
| `git push origin v1.5.0` | Pushed release tag. |

## Release Notes

- Adds the explicit `orchestrator shell-listener` CLI for authorized lab TCP session management with multi-session accept, per-session routing, raw-output buffering, sentinel command completion markers, and manual PTY-upgrade helpers.
- Keeps shell-listener outside the OpenCode JSON-RPC tool registry.
- Updates OpenCode SDK/plugin dependencies to `1.17.4`.
- Cleans Rust clippy warnings across CLI/core paths.
- Fixes `scripts/release-sync-artifacts.mjs` path parsing so ignored `bin/` release artifacts are recognized correctly.

## Residual Risk

- npm publish succeeded, so `1.5.0` cannot be republished with different bits. Any follow-up fix must use a later version.
- A previously embedded GitHub token was observed in the local remote URL earlier in the session. It was removed from the local remote, but the token should still be rotated if valid.
