code-foundry 0.17.0 → 0.19.0

package/.github/scripts/init-repo.sh

@@ -11,7 +11,7 @@ force=false
 languages="${REPO_FOUNDRY_LANGUAGES:-auto}"
 features="${REPO_FOUNDRY_FEATURES:-all}"
 package_manager="${REPO_FOUNDRY_PACKAGE_MANAGER:-auto}"
-runtime_repository="${REPO_FOUNDRY_RUNTIME_REPOSITORY:-0xPlayerOne/code-foundry}"
+runtime_repository="${REPO_FOUNDRY_RUNTIME_REPOSITORY:-}"
 bootstrap=true
 release_type="${REPO_FOUNDRY_RELEASE_TYPE:-auto}"
 npm_publish="${REPO_FOUNDRY_NPM_PUBLISH:-false}"
@@ -38,7 +38,7 @@ Options:
   --features LIST            all or comma-separated optional features:
                              ci,codeql,security,test,draft-pr,release-pr,release,dependabot
   --package-manager NAME     auto, bun, pnpm, yarn, or npm
-  --runtime-repository OWNER/REPO  Reusable workflow runtime repository
+  --runtime-repository OWNER/REPO  Reusable workflow runtime repository (auto from source)
   --release-type NAME        auto, node, python, rust, or simple
   --license NAME             agpl-3.0-or-later, mit, preserve, or none
   --license-file PATH        Use an exact custom license file
@@ -111,9 +111,9 @@ sync_args=(
   --languages "$languages"
   --features "$features"
   --package-manager "$package_manager"
-  --runtime-repository "$runtime_repository"
   --license "$license"
 )
+if [ -n "$runtime_repository" ]; then sync_args+=(--runtime-repository "$runtime_repository"); fi
 if [ -n "$license_file" ]; then sync_args+=(--license-file "$license_file"); fi
 if [ "$dry_run" = true ]; then sync_args+=(--check); else sync_args+=(--apply); fi
 if [ "$prune" = true ]; then sync_args+=(--prune); fi

package/.github/scripts/sync-template.sh

@@ -284,6 +284,7 @@ files=("${filtered_files[@]}")
 standard_workflow() {
   case "$1" in
     ci.yml|codeql.yml|draft-pr.yml|release-pr.yml|release.yml|security.yml|test.yml) return 0 ;;
+    reusable-draft-pr.yml|reusable-release-pr.yml) return 0 ;;
     *) return 1 ;;
   esac
 }
@@ -370,16 +371,22 @@ for file in "${files[@]}"; do
 done
 
 # Reusable workflow callers must use a literal repository/ref. Render the
-# selected runtime repository while leaving custom workflows untouched.
+# selected runtime repository while leaving custom workflows untouched. Read
+# the source's configured runtime first so forks remain self-contained.
+source_runtime_repository=""
+if [ -f "$template_root/.github/template.yml" ]; then
+  source_runtime_repository="$(awk -F': ' '/^runtime_repository:/ {print $2; exit}' "$template_root/.github/template.yml")"
+fi
+[ -n "$source_runtime_repository" ] || source_runtime_repository="0xPlayerOne/code-foundry"
 for file in .github/workflows/ci.yml .github/workflows/test.yml .github/workflows/security.yml .github/workflows/codeql.yml; do
   [ -f "$file" ] || continue
-  if grep -q '0xPlayerOne/code-foundry' "$file"; then
+  if grep -qF "$source_runtime_repository" "$file" && [ "$source_runtime_repository" != "$runtime_repository" ]; then
     changed=$((changed + 1))
     if [ "$mode" = "check" ]; then
       printf 'Would render runtime repository in %s\n' "$file"
     else
       rendered_workflow="$(mktemp)"
-      sed "s#0xPlayerOne/code-foundry#$runtime_repository#g" "$file" > "$rendered_workflow"
+      sed "s#${source_runtime_repository}#${runtime_repository}#g" "$file" > "$rendered_workflow"
       mv "$rendered_workflow" "$file"
       printf 'Rendered runtime repository in %s\n' "$file"
     fi

package/.github/workflows/reusable-draft-pr.yml

@@ -0,0 +1,51 @@
+name: Code Foundry Draft PR
+
+on:
+  workflow_call:
+
+permissions:
+  contents: read
+  pull-requests: write
+
+env:
+  GH_TOKEN: ${{ github.token }}
+
+jobs:
+  create-draft-pr:
+    name: Create
+    runs-on: ubuntu-slim
+    timeout-minutes: 10
+    concurrency:
+      group: ${{ github.workflow }}-${{ github.ref }}
+      cancel-in-progress: true
+    steps:
+      - name: Check
+        id: check-pr
+        run: |
+          BRANCH="${{ github.ref_name }}"
+          EXISTING=$(gh pr list --limit 1 --base staging --head "$BRANCH" --state open --json number,title 2>/dev/null | jq 'length')
+          echo "existing=$EXISTING" >> "$GITHUB_OUTPUT"
+
+      - name: Create
+        if: steps.check-pr.outputs.existing == '0'
+        run: |
+          BRANCH="${{ github.ref_name }}"
+          gh pr create \
+            --base staging \
+            --head "$BRANCH" \
+            --draft \
+            --title "[WIP] $BRANCH" \
+            --body "Draft PR created automatically by CI.
+
+            This PR is a draft and should not be merged until CI passes and a reviewer (or the Daily Review agent) marks it ready.
+
+            **CI Status:** Pending — this workflow triggered on push to \`$BRANCH\`."
+
+      - name: Mark ready
+        if: steps.check-pr.outputs.existing == '0'
+        run: |
+          BRANCH="${{ github.ref_name }}"
+          PR_NUMBER=$(gh pr list --limit 1 --base staging --head "$BRANCH" --state open --json number 2>/dev/null | jq '.[0].number')
+          if [ -n "$PR_NUMBER" ]; then
+            gh pr ready "$PR_NUMBER"
+          fi

package/.github/workflows/reusable-release-pr.yml

@@ -0,0 +1,86 @@
+name: Code Foundry Release PR
+
+on:
+  workflow_call:
+
+permissions:
+  contents: read
+  pull-requests: write
+
+env:
+  GH_TOKEN: ${{ github.token }}
+
+jobs:
+  create-release-pr:
+    name: Create
+    runs-on: ubuntu-slim
+    timeout-minutes: 10
+    concurrency:
+      group: ${{ github.workflow }}-${{ github.ref }}
+      cancel-in-progress: true
+    steps:
+      - name: Check
+        id: check-pr
+        run: |
+          set -euo pipefail
+          EXISTING=$(gh pr list \
+            --repo "$GITHUB_REPOSITORY" \
+            --limit 1 \
+            --base main \
+            --head staging \
+            --state open \
+            --json number | jq 'length')
+          echo "existing=$EXISTING" >> "$GITHUB_OUTPUT"
+
+      - name: Create
+        if: steps.check-pr.outputs.existing == '0'
+        run: |
+          DATE=$(date +%Y-%m-%d)
+          BODY_FILE="$RUNNER_TEMP/release-pr.md"
+          COMPARE_URL="repos/${GITHUB_REPOSITORY}/compare/main...staging"
+          COMPARE_FILE="$RUNNER_TEMP/release-compare.json"
+          gh api "$COMPARE_URL?per_page=100" > "$COMPARE_FILE"
+          TOTAL_COMMITS=$(jq -r '.total_commits // 0' "$COMPARE_FILE")
+          if [ "$TOTAL_COMMITS" -gt 100 ]; then
+            LAST_PAGE=$(( (TOTAL_COMMITS + 99) / 100 ))
+            gh api "$COMPARE_URL?per_page=100&page=$LAST_PAGE" > "$COMPARE_FILE"
+          fi
+          COMMITS=$(jq -r '.commits[] | "- \(.commit.message | split("\\n")[0]) (\(.sha[0:7]))"' "$COMPARE_FILE")
+          if [ -z "$COMMITS" ]; then
+            COMMITS='- No commits found since main.'
+          fi
+
+          if [ "$TOTAL_COMMITS" -eq 1 ]; then
+            CHANGE_LABEL=change
+          else
+            CHANGE_LABEL=changes
+          fi
+
+          cat > "$BODY_FILE" <<EOF
+          ## Environment promotion
+
+          Promote the validated \`staging\` environment into \`main\`.
+          This is a deployment-promotion PR, not the version-release PR.
+
+          - **Source:** \`staging\`
+          - **Target:** \`main\`
+          - **Changes:** $TOTAL_COMMITS $CHANGE_LABEL
+          - **Created:** $DATE
+
+          ### Commit summary
+
+          $COMMITS
+
+          ### Validation
+
+          - Required CI, test, security, and CodeQL checks must pass before merge.
+          - Merge with **rebase** to preserve the linear Conventional Commit history.
+          - After merge, Release Please opens a separate versioned release PR with the changelog.
+          EOF
+
+          gh pr create \
+            --repo "$GITHUB_REPOSITORY" \
+            --base main \
+            --head staging \
+            --title "Promote staging -> main ($DATE)" \
+            --body-file "$BODY_FILE"

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # Changelog
 
+## [0.19.0](https://github.com/0xPlayerOne/code-foundry/compare/v0.18.0...v0.19.0) (2026-07-28)
+
+
+### Features
+
+* **workflows:** add reusable promotion runtimes ([ac113a9](https://github.com/0xPlayerOne/code-foundry/commit/ac113a902700957cbf26d4a47b4e7828b157dd13))
+
+## [0.18.0](https://github.com/0xPlayerOne/code-foundry/compare/v0.17.0...v0.18.0) (2026-07-28)
+
+
+### Features
+
+* **init:** infer runtime from source template ([81a545b](https://github.com/0xPlayerOne/code-foundry/commit/81a545bc6a2d89c31be51a711e477c4e4ceca7dd))
+
 ## [0.17.0](https://github.com/0xPlayerOne/code-foundry/compare/v0.16.0...v0.17.0) (2026-07-28)
 
 

package/README.md

@@ -36,11 +36,12 @@ npx code-foundry init --license agpl-3.0-or-later
 npx code-foundry init --license-file ./legal/LICENSE.txt
 ```
 
-Reusable workflow callers default to this package's public runtime. Use
-`--runtime-repository OWNER/REPO` when initializing from an organization fork;
-the selected repository is saved in `.github/template.yml` and rendered into
-the small `ci.yml` and `test.yml` wrappers automatically. The equivalent
-environment variable is `REPO_FOUNDRY_RUNTIME_REPOSITORY`.
+Reusable workflow callers use the source template's runtime automatically. For
+example, initializing from `NiftyLeague/template-repo` selects that fork's
+runtime without extra flags. Use `--runtime-repository OWNER/REPO` (or
+`REPO_FOUNDRY_RUNTIME_REPOSITORY`) only when you want to override it. The
+selected repository is saved in `.github/template.yml` and rendered into the
+small CI, Test, Security, and CodeQL wrappers automatically.
 
 Normal synchronization imports only the local hook, agent-facing command,
 profile/release, initializer, doctor, ownership, and protection entrypoints.
@@ -60,6 +61,11 @@ main-branch wrapper while the shared runtime handles Release Please, GitHub
 release metadata, optional npm publication, provenance, and token/trusted
 publishing fallback.
 
+The promotion runtimes for Draft PR and Release PR are maintained in the same
+versioned repository. They are introduced before their consumer wrappers move
+to a release tag, avoiding a bootstrap cycle when a new runtime version is
+being published.
+
 Initialization defaults to AGPL for new repositories. Synchronization defaults
 to `--license preserve`, so an existing repository's license is never replaced
 unless you explicitly select a license or provide `--license-file`.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "code-foundry",
-  "version": "0.17.0",
+  "version": "0.19.0",
   "description": "A fast, language-aware repository factory for agent-ready workflows, testing, security, and release automation.",
   "type": "module",
   "license": "AGPL-3.0-or-later",

package/src/cli.mjs

@@ -50,7 +50,10 @@ function parseArgs(argv) {
     languages: process.env.REPO_FOUNDRY_LANGUAGES || 'auto',
     features: process.env.REPO_FOUNDRY_FEATURES || 'all',
     packageManager: process.env.REPO_FOUNDRY_PACKAGE_MANAGER || 'auto',
-    runtimeRepository: process.env.REPO_FOUNDRY_RUNTIME_REPOSITORY || '0xPlayerOne/code-foundry',
+    // Leave this empty unless the caller explicitly selects a runtime. The
+    // initializer can then derive the runtime from --source, which keeps
+    // organization forks plug-and-play.
+    runtimeRepository: process.env.REPO_FOUNDRY_RUNTIME_REPOSITORY || '',
     releaseType: process.env.REPO_FOUNDRY_RELEASE_TYPE || 'auto',
     license: process.env.REPO_FOUNDRY_LICENSE || (command === 'init' ? 'agpl-3.0-or-later' : 'preserve'),
     licenseFile: process.env.REPO_FOUNDRY_LICENSE_FILE || '',
@@ -123,7 +126,7 @@ function main() {
   if (options.licenseFile) common.push('--license-file', options.licenseFile)
   if (options.languagesSet) common.push('--languages', options.languages)
   if (options.featuresSet) common.push('--features', options.features)
-  common.push('--runtime-repository', options.runtimeRepository)
+  if (options.runtimeRepository) common.push('--runtime-repository', options.runtimeRepository)
   if (options.prune) common.push('--prune')
   if (options.force) common.push('--force')
   if (options.dryRun) common.push('--check')
@@ -137,10 +140,10 @@ function main() {
       '--languages', options.languages,
       '--features', options.features,
       '--package-manager', options.packageManager,
-      '--runtime-repository', options.runtimeRepository,
       '--release-type', options.releaseType,
       '--license', options.license,
     ]
+    if (options.runtimeRepository) initArgs.push('--runtime-repository', options.runtimeRepository)
     if (options.licenseFile) initArgs.push('--license-file', options.licenseFile)
     if (options.protection) initArgs.push('--protection')
     if (options.dryRun) initArgs.push('--dry-run')