code-foundry 1.39.0 → 1.39.1

package/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## [1.39.1](https://github.com/0xPlayerOne/code-foundry/compare/v1.39.0...v1.39.1) (2026-10-01)
+
+
+### Bug Fixes
+
+* report inactive main rulesets in github doctor ([#682](https://github.com/0xPlayerOne/code-foundry/issues/682)) ([695a0b4](https://github.com/0xPlayerOne/code-foundry/commit/695a0b437910aa8e664a481c1648dbadcc1a2de8))
+
 ## [1.39.0](https://github.com/0xPlayerOne/code-foundry/compare/v1.38.1...v1.39.0) (2026-10-01)
 
 

package/docs/WORKFLOWS.md

@@ -311,6 +311,12 @@ features and enforce only checks that actually run:
 Apply only checks for enabled workflows.
 ```
 
+`code-foundry doctor --github` treats a matching `main` ruleset in `disabled`
+or `evaluate` mode as an error because neither mode blocks merges. If GitHub
+does not expose branch protection or rulesets for the repository, the doctor
+warns that enforcement could not be confirmed instead of inferring an active
+policy from unavailable data.
+
 Keep strict status checks, linear history, and conversation resolution enabled
 where required. For a repository with optional features disabled, do not require
 checks that will never run.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "code-foundry",
-  "version": "1.39.0",
+  "version": "1.39.1",
   "description": "A fast, language-aware repository factory for agent-ready workflows, testing, security, and release automation.",
   "homepage": "https://github.com/0xPlayerOne/code-foundry#readme",
   "bugs": {

package/src/lib/github-doctor.mjs

@@ -18,6 +18,24 @@ export function doctorGithub(root) {
   const details = { repository }
   const rulesets = hydrateRulesets(repository, ghJson(['api', `repos/${repository}/rulesets`]))
   const mainRulesets = rulesetsForBranch(rulesets, 'main')
+  details.mainRulesets = mainRulesets.map((ruleset) => ({
+    id: ruleset.id ?? null,
+    name: ruleset.name ?? String(ruleset.id ?? 'unnamed'),
+    enforcement: ruleset.enforcement ?? null,
+  }))
+  for (const ruleset of mainRulesets) {
+    const name = ruleset.name ?? ruleset.id ?? 'unnamed'
+    if (ruleset.enforcement === 'disabled') {
+      errors.push(`main ruleset ${name} is disabled; its branch rules are not enforced.`)
+    } else if (ruleset.enforcement === 'evaluate') {
+      errors.push(`main ruleset ${name} is evaluate-only; its branch rules are not enforced.`)
+    } else if (ruleset.enforcement !== 'active') {
+      const state = ruleset.enforcement ?? 'missing'
+      warnings.push(
+        `main ruleset ${name} enforcement state '${state}' could not be confirmed; expected active.`
+      )
+    }
+  }
   const protection = ghJson(['api', `repos/${repository}/branches/main/protection`])
   const required = mainRulesets.length
     ? requiredContextsFromRulesets(mainRulesets)