code-foundry 0.24.1 → 0.26.0

package/.github/workflows/security_self-ci.yml

@@ -0,0 +1,21 @@
+name: Security
+
+on:
+  push:
+    branches: [main, staging]
+  pull_request:
+    branches: [staging]
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  security:
+    name: Security
+    uses: ./.github/workflows/security.yml
+    with:
+      runtime-repository: 0xPlayerOne/code-foundry
+      runtime-ref: v0.22.0
+      runner: ubuntu-slim
+    secrets: inherit

package/.github/workflows/test.yml

@@ -1,22 +1,253 @@
-name: Test
+name: Code Foundry Test
 
 on:
-  push:
-    branches: [main, staging]
-  pull_request:
-    branches: [staging]
-  workflow_dispatch:
+  workflow_call:
+    inputs:
+      runtime-repository:
+        description: Repository containing the Code Foundry runtime.
+        required: false
+        type: string
+        default: 0xPlayerOne/code-foundry
+      runtime-ref:
+        description: Code Foundry runtime tag or ref.
+        required: false
+        type: string
+        default: v0.20.2
+      runner:
+        description: Runner used by non-unit test jobs.
+        required: false
+        type: string
+        default: ubuntu-latest
+      unit-runner:
+        description: Runner used by unit tests.
+        required: false
+        type: string
+        default: ubuntu-slim
 
 permissions:
   contents: read
 
+env:
+  TURBO_TOKEN: ${{ secrets.TURBO_TOKEN }}
+  TURBO_TEAM: ${{ vars.TURBO_TEAM }}
+  REPO_FOUNDRY_PROFILE: ${{ vars.REPO_FOUNDRY_PROFILE }}
+  REPO_FOUNDRY_LANGUAGES: ${{ vars.REPO_FOUNDRY_LANGUAGES }}
+  REPO_FOUNDRY_FEATURES: ${{ vars.REPO_FOUNDRY_FEATURES }}
+  REPO_FOUNDRY_PACKAGE_MANAGER: ${{ vars.REPO_FOUNDRY_PACKAGE_MANAGER }}
+  REPO_FOUNDRY_RUNNER: ${{ vars.REPO_FOUNDRY_RUNNER }}
+  REPO_FOUNDRY_CACHE_PACKAGES: ${{ vars.REPO_FOUNDRY_CACHE_PACKAGES || 'auto' }}
+  REPO_FOUNDRY_CACHE_BUILD: ${{ vars.REPO_FOUNDRY_CACHE_BUILD || 'auto' }}
+  REPO_FOUNDRY_BASE_SHA: ${{ github.event_name == 'pull_request' && github.event.pull_request.base.sha || github.event.before || '' }}
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.head.repo.full_name || github.repository }}-${{ github.event.pull_request.head.ref || github.ref_name }}
+  cancel-in-progress: true
+
 jobs:
-  test:
-    name: Test
-    uses: 0xPlayerOne/code-foundry/.github/workflows/reusable-test.yml@v0.22.0
-    with:
-      runtime-repository: 0xPlayerOne/code-foundry
-      runtime-ref: v0.22.0
-      runner: ubuntu-latest
-      unit-runner: ubuntu-slim
-    secrets: inherit
+  unit:
+    name: Unit
+    runs-on: ${{ inputs.unit-runner }}
+    timeout-minutes: 30
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v7
+        with:
+          fetch-depth: 2
+      - name: Runtime
+        uses: actions/checkout@v7
+        with:
+          repository: ${{ inputs.runtime-repository }}
+          ref: ${{ inputs.runtime-ref }}
+          path: .code-foundry
+          sparse-checkout: |
+            .github/actions
+            .github/scripts
+      - name: Install runtime
+        run: |
+          mkdir -p .github/actions .github/scripts
+          cp -R .code-foundry/.github/actions/. .github/actions/
+          cp -R .code-foundry/.github/scripts/. .github/scripts/
+      - name: Detect
+        id: applicability
+        run: bash .github/scripts/ci.sh task_profile unit >> "$GITHUB_OUTPUT"
+      - name: Setup
+        if: steps.applicability.outputs.applicable == 'true'
+        uses: ./.github/actions/setup
+        with:
+          install: true
+          install-javascript: ${{ steps.applicability.outputs.javascript == 'true' }}
+          install-python: ${{ steps.applicability.outputs.python == 'true' }}
+          install-rust: ${{ steps.applicability.outputs.rust == 'true' }}
+          cache-build: false
+          cache-environment: false
+          cache-packages: ${{ vars.REPO_FOUNDRY_CACHE_PACKAGES || 'auto' }}
+          task: unit
+          task-javascript: ${{ steps.applicability.outputs.javascript }}
+          task-python: ${{ steps.applicability.outputs.python }}
+          task-rust: ${{ steps.applicability.outputs.rust }}
+      - name: Unit
+        if: steps.applicability.outputs.applicable == 'true'
+        run: bash .github/scripts/ci.sh unit
+      - name: Upload coverage
+        if: >-
+          always() &&
+          steps.applicability.outputs.applicable == 'true' &&
+          hashFiles('coverage/**', 'htmlcov/**', '.coverage*', 'target/llvm-cov/**') != ''
+        uses: actions/upload-artifact@v7
+        with:
+          name: coverage-unit-${{ github.run_id }}
+          path: |
+            coverage/**
+            htmlcov/**
+            .coverage*
+            target/llvm-cov/**
+          compression-level: 1
+          if-no-files-found: ignore
+          retention-days: 14
+
+  integration:
+    name: Integration
+    runs-on: ${{ inputs.runner }}
+    timeout-minutes: 30
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v7
+        with:
+          fetch-depth: 2
+      - name: Runtime
+        uses: actions/checkout@v7
+        with:
+          repository: ${{ inputs.runtime-repository }}
+          ref: ${{ inputs.runtime-ref }}
+          path: .code-foundry
+          sparse-checkout: |
+            .github/actions
+            .github/scripts
+      - name: Install runtime
+        run: |
+          mkdir -p .github/actions .github/scripts
+          cp -R .code-foundry/.github/actions/. .github/actions/
+          cp -R .code-foundry/.github/scripts/. .github/scripts/
+      - name: Detect
+        id: applicability
+        run: bash .github/scripts/ci.sh task_profile integration >> "$GITHUB_OUTPUT"
+      - name: Setup
+        if: steps.applicability.outputs.applicable == 'true'
+        uses: ./.github/actions/setup
+        with:
+          install: true
+          install-javascript: ${{ steps.applicability.outputs.javascript == 'true' }}
+          install-python: ${{ steps.applicability.outputs.python == 'true' }}
+          install-rust: ${{ steps.applicability.outputs.rust == 'true' }}
+          cache-build: ${{ steps.applicability.outputs.rust == 'true' }}
+          cache-environment: false
+          cache-save: ${{ github.event_name == 'push' }}
+          task: integration
+          task-javascript: ${{ steps.applicability.outputs.javascript }}
+          task-python: ${{ steps.applicability.outputs.python }}
+          task-rust: ${{ steps.applicability.outputs.rust }}
+      - name: Integration
+        if: steps.applicability.outputs.applicable == 'true'
+        run: bash .github/scripts/ci.sh integration
+
+  e2e:
+    name: E2E
+    runs-on: ${{ inputs.runner }}
+    timeout-minutes: 45
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v7
+        with:
+          fetch-depth: 2
+      - name: Runtime
+        uses: actions/checkout@v7
+        with:
+          repository: ${{ inputs.runtime-repository }}
+          ref: ${{ inputs.runtime-ref }}
+          path: .code-foundry
+          sparse-checkout: |
+            .github/actions
+            .github/scripts
+      - name: Install runtime
+        run: |
+          mkdir -p .github/actions .github/scripts
+          cp -R .code-foundry/.github/actions/. .github/actions/
+          cp -R .code-foundry/.github/scripts/. .github/scripts/
+      - name: Detect
+        id: applicability
+        run: bash .github/scripts/ci.sh task_profile e2e >> "$GITHUB_OUTPUT"
+      - name: Cache browser binaries
+        if: steps.applicability.outputs.applicable == 'true' && steps.applicability.outputs.browser == 'true'
+        uses: ./.github/actions/cache
+        with:
+          save: ${{ github.event_name == 'push' }}
+          path: |
+            ~/.cache/ms-playwright
+            ~/.cache/Cypress
+            ~/.cache/puppeteer
+          key: ${{ runner.os }}-e2e-browsers-${{ hashFiles('**/package.json', '**/bun.lock', '**/bun.lockb', '**/pnpm-lock.yaml', '**/yarn.lock', '**/package-lock.json', '**/playwright.config.*', '**/cypress.config.*') }}
+          restore-keys: |
+            ${{ runner.os }}-e2e-browsers-
+      - name: Setup
+        if: steps.applicability.outputs.applicable == 'true'
+        uses: ./.github/actions/setup
+        with:
+          install: true
+          install-javascript: ${{ steps.applicability.outputs.javascript == 'true' }}
+          install-python: ${{ steps.applicability.outputs.python == 'true' }}
+          install-rust: ${{ steps.applicability.outputs.rust == 'true' }}
+          cache-build: false
+          cache-environment: false
+          cache-save: ${{ github.event_name == 'push' }}
+          task: e2e
+          task-javascript: ${{ steps.applicability.outputs.javascript }}
+          task-python: ${{ steps.applicability.outputs.python }}
+          task-rust: ${{ steps.applicability.outputs.rust }}
+      - name: E2E
+        if: steps.applicability.outputs.applicable == 'true'
+        run: bash .github/scripts/ci.sh e2e
+
+  smoke:
+    name: Smoke
+    runs-on: ${{ inputs.runner }}
+    timeout-minutes: 15
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v7
+        with:
+          fetch-depth: 2
+      - name: Runtime
+        uses: actions/checkout@v7
+        with:
+          repository: ${{ inputs.runtime-repository }}
+          ref: ${{ inputs.runtime-ref }}
+          path: .code-foundry
+          sparse-checkout: |
+            .github/actions
+            .github/scripts
+      - name: Install runtime
+        run: |
+          mkdir -p .github/actions .github/scripts
+          cp -R .code-foundry/.github/actions/. .github/actions/
+          cp -R .code-foundry/.github/scripts/. .github/scripts/
+      - name: Detect
+        id: applicability
+        run: bash .github/scripts/ci.sh task_profile smoke >> "$GITHUB_OUTPUT"
+      - name: Setup
+        if: steps.applicability.outputs.applicable == 'true'
+        uses: ./.github/actions/setup
+        with:
+          install: true
+          install-javascript: ${{ steps.applicability.outputs.javascript == 'true' }}
+          install-python: ${{ steps.applicability.outputs.python == 'true' }}
+          install-rust: ${{ steps.applicability.outputs.rust == 'true' }}
+          cache-build: false
+          cache-environment: false
+          cache-save: ${{ github.event_name == 'push' }}
+          task: smoke
+          task-javascript: ${{ steps.applicability.outputs.javascript }}
+          task-python: ${{ steps.applicability.outputs.python }}
+          task-rust: ${{ steps.applicability.outputs.rust }}
+      - name: Smoke
+        if: steps.applicability.outputs.applicable == 'true'
+        run: bash .github/scripts/ci.sh smoke

package/.github/workflows/test_self-ci.yml

@@ -0,0 +1,22 @@
+name: Test
+
+on:
+  push:
+    branches: [main, staging]
+  pull_request:
+    branches: [staging]
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  test:
+    name: Test
+    uses: ./.github/workflows/test.yml
+    with:
+      runtime-repository: 0xPlayerOne/code-foundry
+      runtime-ref: v0.22.0
+      runner: ubuntu-latest
+      unit-runner: ubuntu-slim
+    secrets: inherit

package/CHANGELOG.md

@@ -1,5 +1,24 @@
 # Changelog
 
+## [0.26.0](https://github.com/0xPlayerOne/code-foundry/compare/v0.25.0...v0.26.0) (2026-07-28)
+
+
+### Features
+
+* default new repositories to gplv3 ([e200135](https://github.com/0xPlayerOne/code-foundry/commit/e200135939779693eb73a64aaf3587eccdc36ffc))
+
+## [0.25.0](https://github.com/0xPlayerOne/code-foundry/compare/v0.24.1...v0.25.0) (2026-07-28)
+
+
+### Features
+
+* simplify reusable workflow layout ([293b2a8](https://github.com/0xPlayerOne/code-foundry/commit/293b2a877500853778f311763cd4176e86f0b4f8))
+
+
+### Bug Fixes
+
+* use local self workflow references ([31ea5a5](https://github.com/0xPlayerOne/code-foundry/commit/31ea5a5a621039afd8e19febe9d2a9f814c9d6fa))
+
 ## [0.24.1](https://github.com/0xPlayerOne/code-foundry/compare/v0.24.0...v0.24.1) (2026-07-28)
 
 

package/README.md

@@ -56,8 +56,9 @@ The generated configuration is the one place to control the baseline. See
 guide and [Initialization and synchronization](docs/INITIALIZATION.md) for
 the two-command workflow.
 
-New repositories default to AGPL-3.0-or-later. Synchronization preserves an
-existing license unless a replacement is explicitly selected. Authored
+New repositories default to GPL-3.0-or-later. Existing projects preserve an
+authored license unless a replacement is explicitly selected. Our maintained
+repositories explicitly select AGPL-3.0-or-later. Authored
 documentation, application files, custom workflows, and existing `.mise.toml`
 files are preserved by default.
 

package/docs/CONFIGURATION.md

@@ -36,7 +36,7 @@ repository manifests and source
 | `runtime_ref` | tag or branch | Reusable workflow version |
 | `release_type` | `node`, `python`, `rust`, `simple`, `none` | Release strategy |
 | `npm_publish` | `true` or `false` | Opt into npm publication |
-| `license` | license name, `preserve`, `none` | License policy |
+| `license` | `gpl-3.0-or-later`, `agpl-3.0-or-later`, `mit`, `preserve`, `none` | License policy; new repositories default to GPLv3 |
 | `runner` fields | GitHub runner names | Per-workflow runner policy |
 
 Supported features are `ci`, `codeql`, `security`, `test`, `draft-pr`,

package/docs/INITIALIZATION.md

@@ -25,6 +25,9 @@ manifests, lockfiles, source extensions, workspace metadata, and existing
 project scripts. The generated values are explicit, so later syncs are stable
 until a maintainer changes the file.
 
+New repositories receive the GNU GPLv3. Existing repositories with an authored
+`LICENSE` keep that license unless the generated configuration is changed.
+
 ## Runtime selection
 
 Workflow callers use `runtime_repository` and `runtime_ref` from

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "code-foundry",
-  "version": "0.24.1",
+  "version": "0.26.0",
   "description": "A fast, language-aware repository factory for agent-ready workflows, testing, security, and release automation.",
   "type": "module",
   "license": "AGPL-3.0-or-later",

package/.github/workflows/reusable-ci.yml

@@ -1,184 +0,0 @@
-name: Code Foundry CI
-
-on:
-  workflow_call:
-    inputs:
-      runtime-repository:
-        description: Repository containing the Code Foundry runtime.
-        required: false
-        type: string
-        default: 0xPlayerOne/code-foundry
-      runtime-ref:
-        description: Code Foundry runtime tag or ref.
-        required: false
-        type: string
-        default: v0.20.2
-      runner:
-        description: Runner used by CI jobs.
-        required: false
-        type: string
-        default: ubuntu-latest
-
-permissions:
-  contents: read
-
-env:
-  TURBO_TOKEN: ${{ secrets.TURBO_TOKEN }}
-  TURBO_TEAM: ${{ vars.TURBO_TEAM }}
-  REPO_FOUNDRY_PROFILE: ${{ vars.REPO_FOUNDRY_PROFILE }}
-  REPO_FOUNDRY_LANGUAGES: ${{ vars.REPO_FOUNDRY_LANGUAGES }}
-  REPO_FOUNDRY_FEATURES: ${{ vars.REPO_FOUNDRY_FEATURES }}
-  REPO_FOUNDRY_PACKAGE_MANAGER: ${{ vars.REPO_FOUNDRY_PACKAGE_MANAGER }}
-  REPO_FOUNDRY_RUNNER: ${{ vars.REPO_FOUNDRY_RUNNER }}
-  REPO_FOUNDRY_CACHE_PACKAGES: ${{ vars.REPO_FOUNDRY_CACHE_PACKAGES || 'auto' }}
-  REPO_FOUNDRY_CACHE_BUILD: ${{ vars.REPO_FOUNDRY_CACHE_BUILD || 'auto' }}
-  REPO_FOUNDRY_BASE_SHA: ${{ github.event_name == 'pull_request' && github.event.pull_request.base.sha || github.event.before || '' }}
-
-concurrency:
-  group: ${{ github.workflow }}-${{ github.event.pull_request.head.repo.full_name || github.repository }}-${{ github.event.pull_request.head.ref || github.ref_name }}
-  cancel-in-progress: true
-
-jobs:
-  format:
-    name: Format
-    runs-on: ${{ inputs.runner }}
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v7
-      - name: Runtime
-        uses: actions/checkout@v7
-        with:
-          repository: ${{ inputs.runtime-repository }}
-          ref: ${{ inputs.runtime-ref }}
-          path: .code-foundry
-          sparse-checkout: |
-            .github/actions
-            .github/scripts
-      - name: Install runtime
-        run: |
-          mkdir -p .github/actions .github/scripts
-          cp -R .code-foundry/.github/actions/. .github/actions/
-          cp -R .code-foundry/.github/scripts/. .github/scripts/
-      - name: Detect
-        id: applicability
-        run: bash .github/scripts/ci.sh should_run format >> "$GITHUB_OUTPUT"
-      - name: Fast path
-        if: steps.applicability.outputs.applicable == 'true'
-        run: bash .github/scripts/format-fast-path.sh
-      - name: Setup
-        if: steps.applicability.outputs.applicable == 'true'
-        uses: ./.github/actions/setup
-        with:
-          install: 'false'
-          cache-format: 'true'
-          cache-lint: 'false'
-          cache-build: 'false'
-          task: format
-          task-javascript: 'true'
-          task-python: 'false'
-          task-rust: 'false'
-      - name: Format
-        if: steps.applicability.outputs.applicable == 'true'
-        run: bash .github/scripts/ci.sh format
-
-  lint:
-    name: Lint
-    runs-on: ${{ inputs.runner }}
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v7
-      - name: Runtime
-        uses: actions/checkout@v7
-        with:
-          repository: ${{ inputs.runtime-repository }}
-          ref: ${{ inputs.runtime-ref }}
-          path: .code-foundry
-          sparse-checkout: |
-            .github/actions
-            .github/scripts
-      - name: Install runtime
-        run: |
-          mkdir -p .github/actions .github/scripts
-          cp -R .code-foundry/.github/actions/. .github/actions/
-          cp -R .code-foundry/.github/scripts/. .github/scripts/
-      - name: Detect
-        id: applicability
-        run: bash .github/scripts/ci.sh should_run lint >> "$GITHUB_OUTPUT"
-      - name: Setup
-        if: steps.applicability.outputs.applicable == 'true'
-        uses: ./.github/actions/setup
-        with:
-          install: 'true'
-          cache-lint: 'true'
-          task: lint
-      - name: Lint
-        if: steps.applicability.outputs.applicable == 'true'
-        run: bash .github/scripts/ci.sh lint
-
-  type-check:
-    name: Type-Check
-    runs-on: ${{ inputs.runner }}
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v7
-      - name: Runtime
-        uses: actions/checkout@v7
-        with:
-          repository: ${{ inputs.runtime-repository }}
-          ref: ${{ inputs.runtime-ref }}
-          path: .code-foundry
-          sparse-checkout: |
-            .github/actions
-            .github/scripts
-      - name: Install runtime
-        run: |
-          mkdir -p .github/actions .github/scripts
-          cp -R .code-foundry/.github/actions/. .github/actions/
-          cp -R .code-foundry/.github/scripts/. .github/scripts/
-      - name: Detect
-        id: applicability
-        run: bash .github/scripts/ci.sh should_run type_check >> "$GITHUB_OUTPUT"
-      - name: Setup
-        if: steps.applicability.outputs.applicable == 'true'
-        uses: ./.github/actions/setup
-        with:
-          install: 'true'
-          cache-build: 'true'
-          task: type_check
-      - name: Type-Check
-        if: steps.applicability.outputs.applicable == 'true'
-        run: bash .github/scripts/ci.sh type_check
-
-  build:
-    name: Build
-    runs-on: ${{ inputs.runner }}
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v7
-      - name: Runtime
-        uses: actions/checkout@v7
-        with:
-          repository: ${{ inputs.runtime-repository }}
-          ref: ${{ inputs.runtime-ref }}
-          path: .code-foundry
-          sparse-checkout: |
-            .github/actions
-            .github/scripts
-      - name: Install runtime
-        run: |
-          mkdir -p .github/actions .github/scripts
-          cp -R .code-foundry/.github/actions/. .github/actions/
-          cp -R .code-foundry/.github/scripts/. .github/scripts/
-      - name: Detect
-        id: applicability
-        run: bash .github/scripts/ci.sh should_run build >> "$GITHUB_OUTPUT"
-      - name: Setup
-        if: steps.applicability.outputs.applicable == 'true'
-        uses: ./.github/actions/setup
-        with:
-          install: 'true'
-          cache-build: 'true'
-          task: build
-      - name: Build
-        if: steps.applicability.outputs.applicable == 'true'
-        run: bash .github/scripts/ci.sh build