code-foundry 0.30.2 → 0.30.3

package/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## [0.30.3](https://github.com/0xPlayerOne/code-foundry/compare/v0.30.2...v0.30.3) (2026-07-29)
+
+
+### Bug Fixes
+
+* **fleet:** branch upgrades from remote staging ([58d4389](https://github.com/0xPlayerOne/code-foundry/commit/58d43890436789ec5289e0aaeea71dea0375a140))
+
 ## [0.30.2](https://github.com/0xPlayerOne/code-foundry/compare/v0.30.1...v0.30.2) (2026-07-29)
 
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "code-foundry",
-  "version": "0.30.2",
+  "version": "0.30.3",
   "description": "A fast, language-aware repository factory for agent-ready workflows, testing, security, and release automation.",
   "type": "module",
   "license": "AGPL-3.0-or-later",

package/src/commands/fleet.mjs

@@ -66,7 +66,11 @@ function upgradeRepository(repository, source, version) {
   const branch = `codex/code-foundry-upgrade-${version.replace(/^v/, '')}`
   const temporary = mkdtempSync(join(tmpdir(), 'code-foundry-fleet-'))
   try {
-    const add = spawnSync('git', ['-C', repository.path, 'worktree', 'add', '-b', branch, temporary, 'HEAD'], { encoding: 'utf8' })
+    const fetch = spawnSync('git', ['-C', repository.path, 'fetch', 'origin', 'staging', '--quiet'], { encoding: 'utf8' })
+    if (fetch.status !== 0) return { path: repository.path, status: 'skipped', reason: fetch.stderr.trim() || 'unable to refresh staging baseline' }
+    const baseline = spawnSync('git', ['-C', repository.path, 'rev-parse', 'origin/staging'], { encoding: 'utf8' })
+    if (baseline.status !== 0) return { path: repository.path, status: 'skipped', reason: 'remote staging branch is unavailable' }
+    const add = spawnSync('git', ['-C', repository.path, 'worktree', 'add', '-b', branch, temporary, baseline.stdout.trim()], { encoding: 'utf8' })
     if (add.status !== 0) return { path: repository.path, status: 'skipped', reason: add.stderr.trim() || 'unable to create isolated worktree' }
     const result = syncRepository({ target: temporary, source, force: false })
     if (!result.changed.length) return { path: repository.path, status: 'unchanged', branch }

package/src/commands/sync.mjs

@@ -64,7 +64,8 @@ export function syncRepository(options) {
   const languages = configured(config.languages, detectLanguages(target).join(','))
   const features = configured(config.features, 'all')
   const runtimeRepository = configured(config.runtime_repository, '0xPlayerOne/code-foundry')
-  const runtimeRef = configured(config.runtime_ref, `v${readPackageVersion(source)}`)
+  const sourceRuntimeRef = `v${readPackageVersion(source)}`
+  let runtimeRef = configured(config.runtime_ref, sourceRuntimeRef)
   const toolchain = configured(config.toolchain, 'auto')
   const overlays = overlayPolicy(target, config)
   if (!['auto', 'native', 'mise'].includes(toolchain)) {
@@ -73,6 +74,18 @@ export function syncRepository(options) {
   const license = configured(config.license, existsSync(join(target, 'LICENSE')) ? 'preserve' : 'gpl-3.0-or-later')
   const changed = []
 
+  // Keep normal semver pins current during sync while preserving intentional
+  // refs such as `main`, `staging`, or a custom immutable SHA.
+  if (existingConfig.runtime_ref && /^v\d+\.\d+\.\d+$/.test(existingConfig.runtime_ref) && existingConfig.runtime_ref !== sourceRuntimeRef) {
+    runtimeRef = sourceRuntimeRef
+    const current = readFileSync(configPath, 'utf8')
+    const updated = current.replace(/^runtime_ref:\s*.*$/m, `runtime_ref: ${sourceRuntimeRef}`)
+    if (updated !== current) {
+      changed.push('.github/code-foundry.yml')
+      writeOrReport(configPath, updated, dryRun)
+    }
+  }
+
   for (const file of standardFiles) {
     if (!shouldInclude(file, languages, features, config)) continue
     const sourceFile = sourcePath(source, file)