code-foundry 0.30.4 → 0.31.0

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## [0.31.0](https://github.com/0xPlayerOne/code-foundry/compare/v0.30.4...v0.31.0) (2026-07-29)
+
+
+### Features
+
+* **release:** open safe staging sync PRs ([6adb1dc](https://github.com/0xPlayerOne/code-foundry/commit/6adb1dc63966e5bfe70deb3ccd3c3aa5e93ccfad))
+
+
+### Bug Fixes
+
+* **release:** compare promoted branch tips ([081666b](https://github.com/0xPlayerOne/code-foundry/commit/081666b774418ab333d34eb9a3ca2a8c3bd60c78))
+
 ## [0.30.4](https://github.com/0xPlayerOne/code-foundry/compare/v0.30.3...v0.30.4) (2026-07-29)
 
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "code-foundry",
-  "version": "0.30.4",
+  "version": "0.31.0",
   "description": "A fast, language-aware repository factory for agent-ready workflows, testing, security, and release automation.",
   "type": "module",
   "license": "AGPL-3.0-or-later",

package/src/commands/release.mjs

@@ -22,8 +22,12 @@ export function reconcileRelease(root, options) {
   const mainSha = git(target, ['rev-parse', `origin/${base}`]) || git(target, ['rev-parse', base])
   const stagingSha = git(target, ['rev-parse', `origin/${head}`]) || git(target, ['rev-parse', head])
   const mergeBaseSha = git(target, ['merge-base', mainSha, stagingSha])
-  const mainChangedPaths = diffNames(target, mergeBaseSha, mainSha)
-  const stagingChangedPaths = diffNames(target, mergeBaseSha, stagingSha)
+  // Compare the branch tips directly. Release Please may rebase or recreate
+  // commits during promotion, leaving equivalent code with different ancestry.
+  // Comparing both tips preserves the fail-closed behavior for real content
+  // differences without mistaking that normal history rewrite for a change.
+  const mainChangedPaths = diffNames(target, stagingSha, mainSha)
+  const stagingChangedPaths = diffNames(target, mainSha, stagingSha)
   const plan = classifyReconciliation({
     mainSha,
     stagingSha,
@@ -34,6 +38,23 @@ export function reconcileRelease(root, options) {
   })
   console.log(JSON.stringify({ base, head, ...plan }, null, 2))
   if (plan.action === 'fail') throw new Error(plan.reason + (plan.unexpected?.length ? ` Unexpected paths: ${plan.unexpected.join(', ')}` : ''))
+  if (plan.action === 'pull-request' && options.github && !options.dryRun) {
+    if (!process.env.GITHUB_REPOSITORY) throw new Error('GITHUB_REPOSITORY is required for synchronization PRs.')
+    const token = process.env.GH_TOKEN || process.env.GITHUB_TOKEN
+    if (!token) throw new Error('GH_TOKEN or GITHUB_TOKEN is required for synchronization PRs.')
+    const existing = ghJson(target, ['pr', 'list', '--repo', process.env.GITHUB_REPOSITORY, '--state', 'open', '--base', head, '--head', base, '--json', 'number,url'])
+    if (Array.isArray(existing) && existing.length) {
+      return { ...plan, synchronizationPullRequest: existing[0].url ?? existing[0].number }
+    }
+    const result = spawnSync('gh', [
+      'pr', 'create', '--repo', process.env.GITHUB_REPOSITORY,
+      '--base', head, '--head', base,
+      '--title', `chore(release): synchronize ${base} -> ${head}`,
+      '--body', `Synchronize ${head} with ${base} after Release Please publication.\n\nOnly approved release metadata differs between the branch tips; Code Foundry verified the content before opening this PR.`,
+    ], { cwd: resolve(root), encoding: 'utf8', env: { ...process.env, GH_TOKEN: token } })
+    if (result.status !== 0) throw new Error(`Failed to create synchronization PR: ${result.stderr.trim()}`)
+    return { ...plan, synchronizationPullRequest: result.stdout.trim() }
+  }
   if (plan.action !== 'fast-forward' || !options.github || options.dryRun) return plan
   if (!process.env.GITHUB_REPOSITORY) throw new Error('GITHUB_REPOSITORY is required for --github reconciliation.')
   const token = process.env.GH_TOKEN || process.env.GITHUB_TOKEN