code-foundry 0.30.1 → 0.30.3

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # Changelog
 
+## [0.30.3](https://github.com/0xPlayerOne/code-foundry/compare/v0.30.2...v0.30.3) (2026-07-29)
+
+
+### Bug Fixes
+
+* **fleet:** branch upgrades from remote staging ([58d4389](https://github.com/0xPlayerOne/code-foundry/commit/58d43890436789ec5289e0aaeea71dea0375a140))
+
+## [0.30.2](https://github.com/0xPlayerOne/code-foundry/compare/v0.30.1...v0.30.2) (2026-07-29)
+
+
+### Bug Fixes
+
+* **fleet:** support explicit repository exclusions ([2c3a641](https://github.com/0xPlayerOne/code-foundry/commit/2c3a641814de392457f94f3581f01e5b625056ee))
+
 ## [0.30.1](https://github.com/0xPlayerOne/code-foundry/compare/v0.30.0...v0.30.1) (2026-07-29)
 
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "code-foundry",
-  "version": "0.30.1",
+  "version": "0.30.3",
   "description": "A fast, language-aware repository factory for agent-ready workflows, testing, security, and release automation.",
   "type": "module",
   "license": "AGPL-3.0-or-later",

package/src/cli.mjs

@@ -11,7 +11,7 @@ import { syncRepository } from './commands/sync.mjs'
 
 const packageRoot = resolve(fileURLToPath(new URL('..', import.meta.url)))
 
-/** @typedef {{ target: string, root: string, dryRun: boolean, force: boolean, github: boolean, createPr: boolean, base: string, head: string, tag: string, workflow: string, mode: string, version: string, releaseSubcommand?: string, fleetSubcommand?: string }} Options */
+/** @typedef {{ target: string, root: string, dryRun: boolean, force: boolean, github: boolean, createPr: boolean, exclude: string[], base: string, head: string, tag: string, workflow: string, mode: string, version: string, releaseSubcommand?: string, fleetSubcommand?: string }} Options */
 /** @typedef {{ command: string, options: Options }} ParsedArgs */
 
 const usage = `code-foundry — initialize and maintain agent-ready repositories
@@ -42,6 +42,7 @@ Options:
   --root PATH     Fleet root containing repositories (default: current directory)
   --create-pr     Create isolated upgrade branches and pull requests
   --version TAG   Runtime tag to report in fleet upgrade branches
+  --exclude NAME  Skip a repository path or owner/name in fleet operations
   -h, --help      Show this help
 `
 
@@ -57,7 +58,7 @@ function parseArgs(argv) {
   const hasCommand = Boolean(first && !first.startsWith('-'))
   const command = hasCommand ? /** @type {string} */ (argv.shift()) : 'init'
   /** @type {Options} */
-  const options = { target: process.cwd(), root: process.cwd(), dryRun: false, force: false, github: false, createPr: false, base: 'main', head: 'staging', tag: '', workflow: '', mode: 'auto', version: `v${readPackageVersion(packageRoot)}` }
+  const options = { target: process.cwd(), root: process.cwd(), dryRun: false, force: false, github: false, createPr: false, exclude: [], base: 'main', head: 'staging', tag: '', workflow: '', mode: 'auto', version: `v${readPackageVersion(packageRoot)}` }
 
   if (command === 'release') {
     const subcommand = argv.shift() ?? ''
@@ -90,6 +91,7 @@ function parseArgs(argv) {
     else if (arg === '--root') options.root = argv.shift() ?? fail('--root requires a path')
     else if (arg === '--create-pr') options.createPr = true
     else if (arg === '--version') options.version = argv.shift() ?? fail('--version requires a tag')
+    else if (arg === '--exclude') options.exclude.push(argv.shift() ?? fail('--exclude requires a name'))
     else fail(`unknown option: ${arg}; run --help for the supported options`)
   }
 
@@ -132,7 +134,7 @@ function main() {
     try {
       const root = resolve(options.root)
       if (options.fleetSubcommand === 'status') console.log(JSON.stringify(discoverRepositories(root), null, 2))
-      else upgradeFleet(root, packageRoot, { createPr: options.createPr, dryRun: options.dryRun, force: options.force, version: options.version })
+      else upgradeFleet(root, packageRoot, { createPr: options.createPr, dryRun: options.dryRun, force: options.force, version: options.version, exclude: options.exclude })
     } catch (error) {
       fail(error instanceof Error ? error.message : String(error))
     }

package/src/commands/fleet.mjs

@@ -29,11 +29,15 @@ export function discoverRepositories(root) {
   return result.sort((a, b) => a.path.localeCompare(b.path))
 }
 
-/** @param {string} root @param {string} source @param {{ createPr?: boolean, dryRun?: boolean, force?: boolean, version: string }} options */
+/** @param {string} root @param {string} source @param {{ createPr?: boolean, dryRun?: boolean, force?: boolean, version: string, exclude?: string[] }} options */
 export function upgradeFleet(root, source, options) {
   const repositories = discoverRepositories(root)
   const report = []
   for (const repository of repositories) {
+    if ((options.exclude ?? []).some((value) => repository.path === value || repository.repository === value || repository.path.endsWith(`/${value}`))) {
+      report.push({ path: repository.path, status: 'skipped', reason: 'excluded by fleet policy' })
+      continue
+    }
     if (!repository.configured) {
       report.push({ path: repository.path, status: 'skipped', reason: 'missing .github/code-foundry.yml' })
       continue
@@ -62,7 +66,11 @@ function upgradeRepository(repository, source, version) {
   const branch = `codex/code-foundry-upgrade-${version.replace(/^v/, '')}`
   const temporary = mkdtempSync(join(tmpdir(), 'code-foundry-fleet-'))
   try {
-    const add = spawnSync('git', ['-C', repository.path, 'worktree', 'add', '-b', branch, temporary, 'HEAD'], { encoding: 'utf8' })
+    const fetch = spawnSync('git', ['-C', repository.path, 'fetch', 'origin', 'staging', '--quiet'], { encoding: 'utf8' })
+    if (fetch.status !== 0) return { path: repository.path, status: 'skipped', reason: fetch.stderr.trim() || 'unable to refresh staging baseline' }
+    const baseline = spawnSync('git', ['-C', repository.path, 'rev-parse', 'origin/staging'], { encoding: 'utf8' })
+    if (baseline.status !== 0) return { path: repository.path, status: 'skipped', reason: 'remote staging branch is unavailable' }
+    const add = spawnSync('git', ['-C', repository.path, 'worktree', 'add', '-b', branch, temporary, baseline.stdout.trim()], { encoding: 'utf8' })
     if (add.status !== 0) return { path: repository.path, status: 'skipped', reason: add.stderr.trim() || 'unable to create isolated worktree' }
     const result = syncRepository({ target: temporary, source, force: false })
     if (!result.changed.length) return { path: repository.path, status: 'unchanged', branch }

package/src/commands/sync.mjs

@@ -56,7 +56,7 @@ export function syncRepository(options) {
     const missing = Object.keys(defaults).filter((key) => !(key in existingConfig))
     if (missing.length) {
       const current = readFileSync(configPath, 'utf8').trimEnd()
-      const additions = missing.map((key) => `${key}: ${defaults[key]}`).join('\n')
+      const additions = missing.map((key) => renderConfigLine(key, defaults[key])).join('\n')
       writeOrReport(configPath, `${current}\n${additions}\n`, dryRun)
     }
   }
@@ -64,7 +64,8 @@ export function syncRepository(options) {
   const languages = configured(config.languages, detectLanguages(target).join(','))
   const features = configured(config.features, 'all')
   const runtimeRepository = configured(config.runtime_repository, '0xPlayerOne/code-foundry')
-  const runtimeRef = configured(config.runtime_ref, `v${readPackageVersion(source)}`)
+  const sourceRuntimeRef = `v${readPackageVersion(source)}`
+  let runtimeRef = configured(config.runtime_ref, sourceRuntimeRef)
   const toolchain = configured(config.toolchain, 'auto')
   const overlays = overlayPolicy(target, config)
   if (!['auto', 'native', 'mise'].includes(toolchain)) {
@@ -73,6 +74,18 @@ export function syncRepository(options) {
   const license = configured(config.license, existsSync(join(target, 'LICENSE')) ? 'preserve' : 'gpl-3.0-or-later')
   const changed = []
 
+  // Keep normal semver pins current during sync while preserving intentional
+  // refs such as `main`, `staging`, or a custom immutable SHA.
+  if (existingConfig.runtime_ref && /^v\d+\.\d+\.\d+$/.test(existingConfig.runtime_ref) && existingConfig.runtime_ref !== sourceRuntimeRef) {
+    runtimeRef = sourceRuntimeRef
+    const current = readFileSync(configPath, 'utf8')
+    const updated = current.replace(/^runtime_ref:\s*.*$/m, `runtime_ref: ${sourceRuntimeRef}`)
+    if (updated !== current) {
+      changed.push('.github/code-foundry.yml')
+      writeOrReport(configPath, updated, dryRun)
+    }
+  }
+
   for (const file of standardFiles) {
     if (!shouldInclude(file, languages, features, config)) continue
     const sourceFile = sourcePath(source, file)
@@ -259,7 +272,9 @@ function createDefaultConfig(root, source) {
 }
 
 /** @param {Record<string,string>} config */
-function renderConfig(config) { return `${Object.entries(config).map(([key, value]) => `${key}: ${value}`).join('\n')}\n` }
+function renderConfig(config) { return `${Object.entries(config).map(([key, value]) => renderConfigLine(key, value)).join('\n')}\n` }
+/** @param {string} key @param {string} value */
+function renderConfigLine(key, value) { return value === '' ? `${key}:` : `${key}: ${value}` }
 /** @param {string} root */
 function readPackageVersion(root) {
   try { return JSON.parse(readFileSync(join(root, 'package.json'), 'utf8')).version ?? '0.0.0' } catch { return '0.0.0' }