code-foundry 1.44.0 → 1.44.2

package/docs/PERFORMANCE.md

@@ -6,27 +6,37 @@ budget is exceeded. Reports are generated-run evidence and are ignored by Git.
 
 ## Enforced budgets
 
-| Metric                              |   Budget | Why it is bounded                                    |
-| ----------------------------------- | -------: | ---------------------------------------------------- |
-| CLI help startup p95                |   250 ms | Detect eager imports and startup regressions         |
-| Runtime mode startup p95            |   250 ms | Detect baseline runtime initialization regressions   |
-| Focused runtime tests               |     10 s | Keep the representative runtime contract inexpensive |
-| Format, lint, type-check, and build |     15 s | Bound the local CI feedback loop                     |
-| Runtime dependencies                |        0 | Keep the installed CLI dependency-free               |
-| Development dependencies            |        4 | Prevent unreviewed toolchain growth                  |
-| Packed artifact                     |   260 kB | Bound registry transfer and install cost             |
-| Unpacked artifact                   | 1,000 kB | Bound installed footprint                            |
-| Packed files                        |      115 | Detect accidental release contents                   |
+| Metric                                |   Budget | Why it is bounded                                    |
+| ------------------------------------- | -------: | ---------------------------------------------------- |
+| CLI help startup p95                  |   250 ms | Detect eager imports and startup regressions         |
+| Runtime mode startup p95              |   750 ms | Detect baseline runtime initialization regressions   |
+| Focused runtime tests                 |     10 s | Keep the representative runtime contract inexpensive |
+| Format, lint, type-check, and build   |     15 s | Bound the local CI feedback loop                     |
+| Runtime dependencies                  |        0 | Keep the installed CLI dependency-free               |
+| Development dependencies              |        4 | Prevent unreviewed toolchain growth                  |
+| Packed artifact (without changelog)   |   296 kB | Bound registry transfer and install cost             |
+| Unpacked artifact (without changelog) | 1,136 kB | Bound installed footprint                            |
+| Packed files (without changelog)      |      120 | Detect accidental release contents                   |
 
 The source-of-truth budgets live in `scripts/performance-check.mjs`. When those
 limits change, update this table and include before/after measurements in the
-same change. The Cloudflare delivery and qualified-publication changes in this release
-moved the measured artifact from 990,481 to 994,555 unpacked bytes (257,384 to
-258,647 packed bytes, with 112 files in both measurements). Draft protection
-configuration, reusable-workflow inputs, documentation, and regression tests
-increased the measured artifact to 998,348 unpacked bytes (259,532 packed bytes,
-with 112 files). The unpacked budget is therefore 1,000 kB; the packed and
-file-count budgets remain unchanged.
+same change. Latency budgets are evaluated against the fastest of the timed
+samples so a single load spike on a shared runner cannot fail the gate.
+
+The artifact budgets measure the package **without `CHANGELOG.md`**. Release
+Please prepends every release to the repository changelog, so a budget that
+included it eroded on every release and repeatedly failed release pull requests.
+The check packs a staging copy without the changelog and reports the repository
+changelog size and its packaged (trimmed) size as informational metrics. At
+v1.44.0 the measured artifact was 280,902 packed bytes, 1,070,333 unpacked bytes,
+and 118 files, leaving roughly 5% packed and 6% unpacked headroom for source
+growth.
+
+The published package ships a changelog trimmed to the 20 most recent releases
+with a link to the full history on GitHub. `scripts/package-changelog.mjs`
+rewrites only the ephemeral checkout in the qualification pack job, immediately
+before the lifecycle-free `npm pack --ignore-scripts`; the repository keeps the
+complete `CHANGELOG.md` that Release Please maintains.
 
 The performance workflow disables build-cache reads and writes for this task.
 Timing comparisons therefore do not depend on a warm protected-branch cache, and

package/docs/qualified-publication.md

@@ -51,7 +51,9 @@ identity checks.
 
 The producer must:
 
-- pack the candidate with lifecycle scripts disabled;
+- pack the candidate with lifecycle scripts disabled, after trimming the
+  checkout's `CHANGELOG.md` to recent releases with
+  `scripts/package-changelog.mjs`;
 - create or reuse a draft release for the exact package version;
 - attach the package archive before the release is published;
 - keep the tag at the qualified source commit;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "code-foundry",
-  "version": "1.44.0",
+  "version": "1.44.2",
   "description": "A fast, language-aware repository factory for agent-ready workflows, testing, security, and release automation.",
   "homepage": "https://github.com/0xPlayerOne/code-foundry#readme",
   "bugs": {