code-foundry 1.45.2 → 1.46.1

package/.github/workflows/validation-billing.yml

@@ -183,6 +183,72 @@ jobs:
           HEAD_SHA: ${{ github.event.pull_request.head.sha || github.sha }}
           BEFORE_SHA: ${{ github.event.before }}
         run: node "$RUNNER_TEMP/code-foundry/src/runtime.mjs" ci should_run format >> "$GITHUB_OUTPUT"
+      # --- Build lane (mirror of ci.yml build) ---
+      - name: Detect build
+        id: build_applicability
+        if: ${{ !cancelled() }}
+        env:
+          EVENT_NAME: ${{ github.event_name }}
+          BASE_REF: ${{ github.event.pull_request.base.ref }}
+          BASE_SHA: ${{ github.event.pull_request.base.sha }}
+          HEAD_SHA: ${{ github.event.pull_request.head.sha || github.sha }}
+          BEFORE_SHA: ${{ github.event.before }}
+        run: node "$RUNNER_TEMP/code-foundry/src/runtime.mjs" ci should_run build >> "$GITHUB_OUTPUT"
+      # --- Performance lane (mirror of test.yml performance; audit tier only) ---
+      - name: Detect performance
+        id: performance_applicability
+        if: ${{ !cancelled() && inputs.mode == 'audit' }}
+        env:
+          EVENT_NAME: ${{ github.event_name }}
+          BASE_REF: ${{ github.event.pull_request.base.ref }}
+          BASE_SHA: ${{ github.event.pull_request.base.sha }}
+          HEAD_SHA: ${{ github.event.pull_request.head.sha || github.sha }}
+          BEFORE_SHA: ${{ github.event.before }}
+        run: node "$RUNNER_TEMP/code-foundry/src/runtime.mjs" ci task_profile performance >> "$GITHUB_OUTPUT"
+      # --- Smoke lane (mirror of test.yml smoke; audit tier only) ---
+      - name: Detect smoke
+        id: smoke_applicability
+        if: ${{ !cancelled() && inputs.mode == 'audit' }}
+        env:
+          EVENT_NAME: ${{ github.event_name }}
+          BASE_REF: ${{ github.event.pull_request.base.ref }}
+          BASE_SHA: ${{ github.event.pull_request.base.sha }}
+          HEAD_SHA: ${{ github.event.pull_request.head.sha || github.sha }}
+          BEFORE_SHA: ${{ github.event.before }}
+        run: node "$RUNNER_TEMP/code-foundry/src/runtime.mjs" ci task_profile smoke >> "$GITHUB_OUTPUT"
+      # --- Eval lane (mirror of eval.yml; audit tier only) ---
+      - name: Detect eval
+        id: eval_applicability
+        if: ${{ !cancelled() && inputs.mode == 'audit' }}
+        env:
+          EVENT_NAME: ${{ github.event_name }}
+          BASE_REF: ${{ github.event.pull_request.base.ref }}
+          BASE_SHA: ${{ github.event.pull_request.base.sha }}
+          HEAD_SHA: ${{ github.event.pull_request.head.sha || github.sha }}
+          BEFORE_SHA: ${{ github.event.before }}
+        run: node "$RUNNER_TEMP/code-foundry/src/runtime.mjs" ci should_run eval >> "$GITHUB_OUTPUT"
+      # --- Lint lane (mirror of ci.yml lint) ---
+      - name: Detect lint
+        id: lint_applicability
+        if: ${{ !cancelled() }}
+        env:
+          EVENT_NAME: ${{ github.event_name }}
+          BASE_REF: ${{ github.event.pull_request.base.ref }}
+          BASE_SHA: ${{ github.event.pull_request.base.sha }}
+          HEAD_SHA: ${{ github.event.pull_request.head.sha || github.sha }}
+          BEFORE_SHA: ${{ github.event.before }}
+        run: node "$RUNNER_TEMP/code-foundry/src/runtime.mjs" ci should_run lint >> "$GITHUB_OUTPUT"
+      # --- Integration lane (mirror of test.yml integration; audit tier only) ---
+      - name: Detect integration
+        id: integration_applicability
+        if: ${{ !cancelled() && inputs.mode == 'audit' }}
+        env:
+          EVENT_NAME: ${{ github.event_name }}
+          BASE_REF: ${{ github.event.pull_request.base.ref }}
+          BASE_SHA: ${{ github.event.pull_request.base.sha }}
+          HEAD_SHA: ${{ github.event.pull_request.head.sha || github.sha }}
+          BEFORE_SHA: ${{ github.event.before }}
+        run: node "$RUNNER_TEMP/code-foundry/src/runtime.mjs" ci task_profile integration >> "$GITHUB_OUTPUT"
       - name: Setup format
         if: steps.format_applicability.outputs.applicable == 'true' && steps.format_applicability.outputs.affected != 'false'
         uses: ./.github/actions/setup
@@ -195,34 +261,6 @@ jobs:
           cache-lint: 'false'
           cache-build: 'false'
           task: format
-      - name: Format
-        id: format_execute
-        if: steps.format_applicability.outputs.applicable == 'true' && steps.format_applicability.outputs.affected != 'false'
-        run: node "$RUNNER_TEMP/code-foundry/src/runtime.mjs" ci format
-      - name: Retain format task receipt
-        if: >-
-          always() &&
-          (steps.format_execute.outcome == 'success' || steps.format_execute.outcome == 'failure' ||
-          steps.format_applicability.outputs.applicable == 'false' || steps.format_applicability.outputs.affected == 'false') &&
-          hashFiles('.code-foundry/results/format.json') != ''
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
-        with:
-          name: ${{ inputs.artifact-prefix }}-${{ github.run_id }}-${{ github.run_attempt }}-format
-          path: .code-foundry/results/format.json
-          include-hidden-files: true
-          if-no-files-found: error
-          retention-days: 14
-      # --- Build lane (mirror of ci.yml build) ---
-      - name: Detect build
-        id: build_applicability
-        if: ${{ !cancelled() }}
-        env:
-          EVENT_NAME: ${{ github.event_name }}
-          BASE_REF: ${{ github.event.pull_request.base.ref }}
-          BASE_SHA: ${{ github.event.pull_request.base.sha }}
-          HEAD_SHA: ${{ github.event.pull_request.head.sha || github.sha }}
-          BEFORE_SHA: ${{ github.event.before }}
-        run: node "$RUNNER_TEMP/code-foundry/src/runtime.mjs" ci should_run build >> "$GITHUB_OUTPUT"
       - name: Setup build
         if: ${{ !cancelled() && steps.build_applicability.outputs.applicable == 'true' && steps.build_applicability.outputs.affected != 'false' }}
         uses: ./.github/actions/setup
@@ -235,36 +273,6 @@ jobs:
           # time. Consumers can provide the real value; the fallback is
           # intentionally CI-only and must never be used at runtime.
           NEXTAUTH_SECRET: ${{ secrets.NEXTAUTH_SECRET || 'code-foundry-ci-placeholder-0123456789' }}
-      - name: Build
-        id: build_execute
-        if: ${{ !cancelled() && steps.build_applicability.outputs.applicable == 'true' && steps.build_applicability.outputs.affected != 'false' }}
-        env:
-          NEXTAUTH_SECRET: ${{ secrets.NEXTAUTH_SECRET || 'code-foundry-ci-placeholder-0123456789' }}
-        run: node "$RUNNER_TEMP/code-foundry/src/runtime.mjs" ci build
-      - name: Retain build task receipt
-        if: >-
-          always() &&
-          (steps.build_execute.outcome == 'success' || steps.build_execute.outcome == 'failure' ||
-          steps.build_applicability.outputs.applicable == 'false' || steps.build_applicability.outputs.affected == 'false') &&
-          hashFiles('.code-foundry/results/build.json') != ''
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
-        with:
-          name: ${{ inputs.artifact-prefix }}-${{ github.run_id }}-${{ github.run_attempt }}-build
-          path: .code-foundry/results/build.json
-          include-hidden-files: true
-          if-no-files-found: error
-          retention-days: 14
-      # --- Performance lane (mirror of test.yml performance; audit tier only) ---
-      - name: Detect performance
-        id: performance_applicability
-        if: ${{ !cancelled() && inputs.mode == 'audit' }}
-        env:
-          EVENT_NAME: ${{ github.event_name }}
-          BASE_REF: ${{ github.event.pull_request.base.ref }}
-          BASE_SHA: ${{ github.event.pull_request.base.sha }}
-          HEAD_SHA: ${{ github.event.pull_request.head.sha || github.sha }}
-          BEFORE_SHA: ${{ github.event.before }}
-        run: node "$RUNNER_TEMP/code-foundry/src/runtime.mjs" ci task_profile performance >> "$GITHUB_OUTPUT"
       - name: Setup performance
         if: ${{ !cancelled() && inputs.mode == 'audit' && steps.performance_applicability.outputs.applicable == 'true' && steps.performance_applicability.outputs.affected != 'false' }}
         uses: ./.github/actions/setup
@@ -281,10 +289,118 @@ jobs:
           task-javascript: ${{ steps.performance_applicability.outputs.javascript }}
           task-python: ${{ steps.performance_applicability.outputs.python }}
           task-rust: ${{ steps.performance_applicability.outputs.rust }}
-      - name: Performance
-        id: performance_execute
-        if: ${{ !cancelled() && inputs.mode == 'audit' && steps.performance_applicability.outputs.applicable == 'true' && steps.performance_applicability.outputs.affected != 'false' }}
-        run: node "$RUNNER_TEMP/code-foundry/src/runtime.mjs" ci performance
+      - name: Setup smoke
+        if: ${{ !cancelled() && inputs.mode == 'audit' && steps.smoke_applicability.outputs.applicable == 'true' && steps.smoke_applicability.outputs.affected != 'false' }}
+        uses: ./.github/actions/setup
+        with:
+          install: true
+          install-javascript: ${{ steps.smoke_applicability.outputs.javascript == 'true' }}
+          install-python: ${{ steps.smoke_applicability.outputs.python == 'true' }}
+          install-rust: ${{ steps.smoke_applicability.outputs.rust == 'true' }}
+          cache-build: false
+          cache-environment: false
+          cache-save: ${{ github.event_name == 'push' }}
+          cache-packages: ${{ vars.REPO_FOUNDRY_CACHE_PACKAGES || 'auto' }}
+          task: smoke
+          task-javascript: ${{ steps.smoke_applicability.outputs.javascript }}
+          task-python: ${{ steps.smoke_applicability.outputs.python }}
+          task-rust: ${{ steps.smoke_applicability.outputs.rust }}
+      - name: Setup eval
+        if: ${{ !cancelled() && inputs.mode == 'audit' && steps.eval_applicability.outputs.applicable == 'true' && steps.eval_applicability.outputs.affected != 'false' }}
+        uses: ./.github/actions/setup
+        with:
+          # Eval harnesses run through the repository's own package scripts and
+          # need their dependencies installed before the task executes.
+          install: 'true'
+          cache-build: 'true'
+          task: eval
+      - name: Setup lint
+        if: ${{ !cancelled() && steps.lint_applicability.outputs.applicable == 'true' && steps.lint_applicability.outputs.affected != 'false' }}
+        uses: ./.github/actions/setup
+        with:
+          install: 'true'
+          cache-lint: 'true'
+          task: lint
+      - name: Setup integration
+        if: ${{ !cancelled() && inputs.mode == 'audit' && steps.integration_applicability.outputs.applicable == 'true' && steps.integration_applicability.outputs.affected != 'false' }}
+        uses: ./.github/actions/setup
+        with:
+          install: true
+          install-javascript: ${{ steps.integration_applicability.outputs.javascript == 'true' }}
+          install-python: ${{ steps.integration_applicability.outputs.python == 'true' }}
+          install-rust: ${{ steps.integration_applicability.outputs.rust == 'true' }}
+          cache-build: ${{ steps.integration_applicability.outputs.rust == 'true' }}
+          cache-environment: false
+          cache-save: ${{ github.event_name == 'push' }}
+          cache-packages: ${{ vars.REPO_FOUNDRY_CACHE_PACKAGES || 'auto' }}
+          task: integration
+          task-javascript: ${{ steps.integration_applicability.outputs.javascript }}
+          task-python: ${{ steps.integration_applicability.outputs.python }}
+          task-rust: ${{ steps.integration_applicability.outputs.rust }}
+      - parallel:
+          # --- Format execute ---
+          - name: Format
+            id: format_execute
+            if: steps.format_applicability.outputs.applicable == 'true' && steps.format_applicability.outputs.affected != 'false'
+            run: node "$RUNNER_TEMP/code-foundry/src/runtime.mjs" ci format
+          # --- Build execute ---
+          - name: Build
+            id: build_execute
+            if: ${{ !cancelled() && steps.build_applicability.outputs.applicable == 'true' && steps.build_applicability.outputs.affected != 'false' }}
+            env:
+              NEXTAUTH_SECRET: ${{ secrets.NEXTAUTH_SECRET || 'code-foundry-ci-placeholder-0123456789' }}
+            run: node "$RUNNER_TEMP/code-foundry/src/runtime.mjs" ci build
+          # --- Performance execute ---
+          - name: Performance
+            id: performance_execute
+            if: ${{ !cancelled() && inputs.mode == 'audit' && steps.performance_applicability.outputs.applicable == 'true' && steps.performance_applicability.outputs.affected != 'false' }}
+            run: node "$RUNNER_TEMP/code-foundry/src/runtime.mjs" ci performance
+          # --- Smoke execute ---
+          - name: Smoke
+            id: smoke_execute
+            if: ${{ !cancelled() && inputs.mode == 'audit' && steps.smoke_applicability.outputs.applicable == 'true' && steps.smoke_applicability.outputs.affected != 'false' }}
+            run: node "$RUNNER_TEMP/code-foundry/src/runtime.mjs" ci smoke
+          # --- Eval execute ---
+          - name: Eval
+            id: eval_execute
+            if: ${{ !cancelled() && inputs.mode == 'audit' && steps.eval_applicability.outputs.applicable == 'true' && steps.eval_applicability.outputs.affected != 'false' }}
+            run: node "$RUNNER_TEMP/code-foundry/src/runtime.mjs" ci eval
+          # --- Lint execute ---
+          - name: Lint
+            id: lint_execute
+            if: ${{ !cancelled() && steps.lint_applicability.outputs.applicable == 'true' && steps.lint_applicability.outputs.affected != 'false' }}
+            run: node "$RUNNER_TEMP/code-foundry/src/runtime.mjs" ci lint
+          # --- Integration execute ---
+          - name: Integration
+            id: integration_execute
+            if: ${{ !cancelled() && inputs.mode == 'audit' && steps.integration_applicability.outputs.applicable == 'true' && steps.integration_applicability.outputs.affected != 'false' }}
+            run: node "$RUNNER_TEMP/code-foundry/src/runtime.mjs" ci integration
+      - name: Retain format task receipt
+        if: >-
+          always() &&
+          (steps.format_execute.outcome == 'success' || steps.format_execute.outcome == 'failure' ||
+          steps.format_applicability.outputs.applicable == 'false' || steps.format_applicability.outputs.affected == 'false') &&
+          hashFiles('.code-foundry/results/format.json') != ''
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        with:
+          name: ${{ inputs.artifact-prefix }}-${{ github.run_id }}-${{ github.run_attempt }}-format
+          path: .code-foundry/results/format.json
+          include-hidden-files: true
+          if-no-files-found: error
+          retention-days: 14
+      - name: Retain build task receipt
+        if: >-
+          always() &&
+          (steps.build_execute.outcome == 'success' || steps.build_execute.outcome == 'failure' ||
+          steps.build_applicability.outputs.applicable == 'false' || steps.build_applicability.outputs.affected == 'false') &&
+          hashFiles('.code-foundry/results/build.json') != ''
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        with:
+          name: ${{ inputs.artifact-prefix }}-${{ github.run_id }}-${{ github.run_attempt }}-build
+          path: .code-foundry/results/build.json
+          include-hidden-files: true
+          if-no-files-found: error
+          retention-days: 14
       - name: Retain performance task receipt
         if: >-
           always() &&
@@ -315,37 +431,6 @@ jobs:
           compression-level: 1
           if-no-files-found: ignore
           retention-days: 14
-      # --- Smoke lane (mirror of test.yml smoke; audit tier only) ---
-      - name: Detect smoke
-        id: smoke_applicability
-        if: ${{ !cancelled() && inputs.mode == 'audit' }}
-        env:
-          EVENT_NAME: ${{ github.event_name }}
-          BASE_REF: ${{ github.event.pull_request.base.ref }}
-          BASE_SHA: ${{ github.event.pull_request.base.sha }}
-          HEAD_SHA: ${{ github.event.pull_request.head.sha || github.sha }}
-          BEFORE_SHA: ${{ github.event.before }}
-        run: node "$RUNNER_TEMP/code-foundry/src/runtime.mjs" ci task_profile smoke >> "$GITHUB_OUTPUT"
-      - name: Setup smoke
-        if: ${{ !cancelled() && inputs.mode == 'audit' && steps.smoke_applicability.outputs.applicable == 'true' && steps.smoke_applicability.outputs.affected != 'false' }}
-        uses: ./.github/actions/setup
-        with:
-          install: true
-          install-javascript: ${{ steps.smoke_applicability.outputs.javascript == 'true' }}
-          install-python: ${{ steps.smoke_applicability.outputs.python == 'true' }}
-          install-rust: ${{ steps.smoke_applicability.outputs.rust == 'true' }}
-          cache-build: false
-          cache-environment: false
-          cache-save: ${{ github.event_name == 'push' }}
-          cache-packages: ${{ vars.REPO_FOUNDRY_CACHE_PACKAGES || 'auto' }}
-          task: smoke
-          task-javascript: ${{ steps.smoke_applicability.outputs.javascript }}
-          task-python: ${{ steps.smoke_applicability.outputs.python }}
-          task-rust: ${{ steps.smoke_applicability.outputs.rust }}
-      - name: Smoke
-        id: smoke_execute
-        if: ${{ !cancelled() && inputs.mode == 'audit' && steps.smoke_applicability.outputs.applicable == 'true' && steps.smoke_applicability.outputs.affected != 'false' }}
-        run: node "$RUNNER_TEMP/code-foundry/src/runtime.mjs" ci smoke
       - name: Retain smoke task receipt
         if: >-
           always() &&
@@ -360,30 +445,6 @@ jobs:
           include-hidden-files: true
           if-no-files-found: error
           retention-days: 14
-      # --- Eval lane (mirror of eval.yml; audit tier only) ---
-      - name: Detect eval
-        id: eval_applicability
-        if: ${{ !cancelled() && inputs.mode == 'audit' }}
-        env:
-          EVENT_NAME: ${{ github.event_name }}
-          BASE_REF: ${{ github.event.pull_request.base.ref }}
-          BASE_SHA: ${{ github.event.pull_request.base.sha }}
-          HEAD_SHA: ${{ github.event.pull_request.head.sha || github.sha }}
-          BEFORE_SHA: ${{ github.event.before }}
-        run: node "$RUNNER_TEMP/code-foundry/src/runtime.mjs" ci should_run eval >> "$GITHUB_OUTPUT"
-      - name: Setup eval
-        if: ${{ !cancelled() && inputs.mode == 'audit' && steps.eval_applicability.outputs.applicable == 'true' && steps.eval_applicability.outputs.affected != 'false' }}
-        uses: ./.github/actions/setup
-        with:
-          # Eval harnesses run through the repository's own package scripts and
-          # need their dependencies installed before the task executes.
-          install: 'true'
-          cache-build: 'true'
-          task: eval
-      - name: Eval
-        id: eval_execute
-        if: ${{ !cancelled() && inputs.mode == 'audit' && steps.eval_applicability.outputs.applicable == 'true' && steps.eval_applicability.outputs.affected != 'false' }}
-        run: node "$RUNNER_TEMP/code-foundry/src/runtime.mjs" ci eval
       - name: Retain eval task receipt
         if: >-
           always() &&
@@ -412,59 +473,11 @@ jobs:
             eval-results/summary.json
           if-no-files-found: error
           retention-days: 14
-
-  lint:
-    name: Lint
-    if: vars.CI_BILLING_PAUSED != 'true'
-    runs-on: ${{ inputs.ci-runner }}
-    timeout-minutes: 30
-    steps:
-      - name: Checkout
-        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
-        with:
-          persist-credentials: false
-      - name: Runtime
-        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
-        with:
-          persist-credentials: false
-          repository: ${{ inputs.runtime-repository }}
-          ref: ${{ inputs.runtime-ref }}
-          path: .github/.code-foundry
-          sparse-checkout: |
-            .github/actions
-            src/lib
-            src/runtime-core.mjs
-            src/runtime.mjs
-      - name: Install runtime
-        run: |
-          mkdir -p .github/actions
-          mv .github/.code-foundry "$RUNNER_TEMP/code-foundry"
-          cp -R "$RUNNER_TEMP/code-foundry/.github/actions/." .github/actions/
-      - name: Detect
-        id: applicability
-        env:
-          EVENT_NAME: ${{ github.event_name }}
-          BASE_REF: ${{ github.event.pull_request.base.ref }}
-          BASE_SHA: ${{ github.event.pull_request.base.sha }}
-          HEAD_SHA: ${{ github.event.pull_request.head.sha || github.sha }}
-          BEFORE_SHA: ${{ github.event.before }}
-        run: node "$RUNNER_TEMP/code-foundry/src/runtime.mjs" ci should_run lint >> "$GITHUB_OUTPUT"
-      - name: Setup
-        if: steps.applicability.outputs.applicable == 'true' && steps.applicability.outputs.affected != 'false'
-        uses: ./.github/actions/setup
-        with:
-          install: 'true'
-          cache-lint: 'true'
-          task: lint
-      - name: Lint
-        id: execute
-        if: steps.applicability.outputs.applicable == 'true' && steps.applicability.outputs.affected != 'false'
-        run: node "$RUNNER_TEMP/code-foundry/src/runtime.mjs" ci lint
-      - name: Retain task receipt
+      - name: Retain lint task receipt
         if: >-
           always() &&
-          (steps.execute.outcome == 'success' || steps.execute.outcome == 'failure' ||
-          steps.applicability.outputs.applicable == 'false' || steps.applicability.outputs.affected == 'false') &&
+          (steps.lint_execute.outcome == 'success' || steps.lint_execute.outcome == 'failure' ||
+          steps.lint_applicability.outputs.applicable == 'false' || steps.lint_applicability.outputs.affected == 'false') &&
           hashFiles('.code-foundry/results/lint.json') != ''
         uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
         with:
@@ -473,7 +486,20 @@ jobs:
           include-hidden-files: true
           if-no-files-found: error
           retention-days: 14
-
+      - name: Retain integration task receipt
+        if: >-
+          always() &&
+          inputs.mode == 'audit' &&
+          (steps.integration_execute.outcome == 'success' || steps.integration_execute.outcome == 'failure' ||
+          steps.integration_applicability.outputs.applicable == 'false' || steps.integration_applicability.outputs.affected == 'false') &&
+          hashFiles('.code-foundry/results/integration.json') != ''
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        with:
+          name: ${{ inputs.artifact-prefix }}-${{ github.run_id }}-${{ github.run_attempt }}-integration
+          path: .code-foundry/results/integration.json
+          include-hidden-files: true
+          if-no-files-found: error
+          retention-days: 14
   type-check:
     name: Type-Check
     if: vars.CI_BILLING_PAUSED != 'true'
@@ -621,76 +647,6 @@ jobs:
           if-no-files-found: ignore
           retention-days: 14
 
-  integration:
-    name: Integration
-    if: vars.CI_BILLING_PAUSED != 'true' && inputs.mode == 'audit'
-    runs-on: ${{ inputs.test-runner }}
-    timeout-minutes: 30
-    steps:
-      - name: Checkout
-        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
-        with:
-          persist-credentials: false
-          fetch-depth: 2
-      - name: Runtime
-        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
-        with:
-          persist-credentials: false
-          repository: ${{ inputs.runtime-repository }}
-          ref: ${{ inputs.runtime-ref }}
-          path: .github/.code-foundry
-          sparse-checkout: |
-            .github/actions
-            src/lib
-            src/runtime-core.mjs
-            src/runtime.mjs
-      - name: Install runtime
-        run: |
-          mkdir -p .github/actions
-          mv .github/.code-foundry "$RUNNER_TEMP/code-foundry"
-          cp -R "$RUNNER_TEMP/code-foundry/.github/actions/." .github/actions/
-      - name: Detect
-        id: applicability
-        env:
-          EVENT_NAME: ${{ github.event_name }}
-          BASE_REF: ${{ github.event.pull_request.base.ref }}
-          BASE_SHA: ${{ github.event.pull_request.base.sha }}
-          HEAD_SHA: ${{ github.event.pull_request.head.sha || github.sha }}
-          BEFORE_SHA: ${{ github.event.before }}
-        run: node "$RUNNER_TEMP/code-foundry/src/runtime.mjs" ci task_profile integration >> "$GITHUB_OUTPUT"
-      - name: Setup
-        if: steps.applicability.outputs.applicable == 'true' && steps.applicability.outputs.affected != 'false'
-        uses: ./.github/actions/setup
-        with:
-          install: true
-          install-javascript: ${{ steps.applicability.outputs.javascript == 'true' }}
-          install-python: ${{ steps.applicability.outputs.python == 'true' }}
-          install-rust: ${{ steps.applicability.outputs.rust == 'true' }}
-          cache-build: ${{ steps.applicability.outputs.rust == 'true' }}
-          cache-environment: false
-          cache-save: ${{ github.event_name == 'push' }}
-          task: integration
-          task-javascript: ${{ steps.applicability.outputs.javascript }}
-          task-python: ${{ steps.applicability.outputs.python }}
-          task-rust: ${{ steps.applicability.outputs.rust }}
-      - name: Integration
-        id: execute
-        if: steps.applicability.outputs.applicable == 'true' && steps.applicability.outputs.affected != 'false'
-        run: node "$RUNNER_TEMP/code-foundry/src/runtime.mjs" ci integration
-      - name: Retain task receipt
-        if: >-
-          always() &&
-          (steps.execute.outcome == 'success' || steps.execute.outcome == 'failure' ||
-          steps.applicability.outputs.applicable == 'false' || steps.applicability.outputs.affected == 'false') &&
-          hashFiles('.code-foundry/results/integration.json') != ''
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
-        with:
-          name: ${{ inputs.artifact-prefix }}-${{ github.run_id }}-${{ github.run_attempt }}-integration
-          path: .code-foundry/results/integration.json
-          include-hidden-files: true
-          if-no-files-found: error
-          retention-days: 14
-
   e2e:
     name: E2E
     if: vars.CI_BILLING_PAUSED != 'true' && inputs.mode == 'audit'
@@ -1113,7 +1069,7 @@ jobs:
   # evaluateValidationGate's mode truth table is reused unchanged.
   gate:
     name: Gate
-    needs: [fast-lanes, lint, type-check, unit, integration, e2e, audit, codeql]
+    needs: [fast-lanes, type-check, unit, e2e, audit, codeql]
     if: vars.CI_BILLING_PAUSED != 'true' && always()
     runs-on: ubuntu-slim
     timeout-minutes: 10
@@ -1121,12 +1077,12 @@ jobs:
       FOUNDRY_MODE: ${{ inputs.mode }}
       # CI category: lint and type-check always run; the merged fast-lanes job
       # carries the format and build lanes.
-      FOUNDRY_CI: ${{ (needs.lint.result != 'success' && needs.lint.result) || (needs.type-check.result != 'success' && needs.type-check.result) || (needs.fast-lanes.result != 'success' && needs.fast-lanes.result) || 'success' }}
+      FOUNDRY_CI: ${{ (needs.type-check.result != 'success' && needs.type-check.result) || (needs.fast-lanes.result != 'success' && needs.fast-lanes.result) || 'success' }}
       # Test category: unit always runs and must succeed; integration and e2e
       # are audit-tier jobs whose expected skip on fast/release is not a
       # failure; the merged fast-lanes job carries performance, smoke, and
       # eval-mode lanes, so its result joins the category too.
-      FOUNDRY_TEST: ${{ needs.unit.result == 'success' && needs.fast-lanes.result == 'success' && (needs.integration.result == 'success' || needs.integration.result == 'skipped') && (needs.e2e.result == 'success' || needs.e2e.result == 'skipped') && 'success' || ((needs.integration.result != 'success' && needs.integration.result != 'skipped' && needs.integration.result) || (needs.e2e.result != 'success' && needs.e2e.result != 'skipped' && needs.e2e.result) || (needs.unit.result != 'success' && needs.unit.result) || (needs.fast-lanes.result != 'success' && needs.fast-lanes.result) || 'failure') }}
+      FOUNDRY_TEST: ${{ needs.unit.result == 'success' && needs.fast-lanes.result == 'success' && (needs.e2e.result == 'success' || needs.e2e.result == 'skipped') && 'success' || ((needs.e2e.result != 'success' && needs.e2e.result != 'skipped' && needs.e2e.result) || (needs.unit.result != 'success' && needs.unit.result) || (needs.fast-lanes.result != 'success' && needs.fast-lanes.result) || 'failure') }}
       FOUNDRY_SECURITY: ${{ needs.audit.result }}
       # This orchestrator runs CodeQL only when the consumer's canonical
       # configuration enables it; otherwise the unavailability decision is

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # Changelog
 
+## [1.46.1](https://github.com/0xPlayerOne/code-foundry/compare/v1.46.0...v1.46.1) (2026-10-07)
+
+
+### Bug Fixes
+
+* **qualification:** skip parallel-syntax files until actionlint supports them ([#740](https://github.com/0xPlayerOne/code-foundry/issues/740)) ([db98c7f](https://github.com/0xPlayerOne/code-foundry/commit/db98c7f40cae080cdc9dcab7baac4976e5e0656e))
+
+## [1.46.0](https://github.com/0xPlayerOne/code-foundry/compare/v1.45.2...v1.46.0) (2026-10-07)
+
+
+### Features
+
+* **billing:** run fast-lane executes concurrently ([#738](https://github.com/0xPlayerOne/code-foundry/issues/738)) ([b40e82a](https://github.com/0xPlayerOne/code-foundry/commit/b40e82a0709b288a8be46998cfdc8b909f92c23c))
+
 ## [1.45.2](https://github.com/0xPlayerOne/code-foundry/compare/v1.45.1...v1.45.2) (2026-10-06)
 
 
@@ -126,28 +140,9 @@
 
 * release-batching ([#700](https://github.com/0xPlayerOne/code-foundry/issues/700)) ([3dd5c5f](https://github.com/0xPlayerOne/code-foundry/commit/3dd5c5fd50883608baa3e2f9daef6b8aa83f269f))
 
-## [1.42.0](https://github.com/0xPlayerOne/code-foundry/compare/v1.41.0...v1.42.0) (2026-10-02)
-
-
-### Features
-
-* **validation:** shard the managed E2E lane via e2e_shards ([#697](https://github.com/0xPlayerOne/code-foundry/issues/697)) ([edb20b4](https://github.com/0xPlayerOne/code-foundry/commit/edb20b4e32e2055bf22e6f6f94b51f234a24687d))
-
-## [1.41.0](https://github.com/0xPlayerOne/code-foundry/compare/v1.40.0...v1.41.0) (2026-10-02)
-
-
-### Features
-
-* **validation:** skip default-branch CodeQL on release-please merges ([#694](https://github.com/0xPlayerOne/code-foundry/issues/694)) ([25fc22e](https://github.com/0xPlayerOne/code-foundry/commit/25fc22e6d4b76f0b7e06601f6dc420085949f127))
-
-
-### Bug Fixes
-
-* give the release artifact budgets several releases of headroom ([#696](https://github.com/0xPlayerOne/code-foundry/issues/696)) ([a504607](https://github.com/0xPlayerOne/code-foundry/commit/a504607e16f097a5075191fd24cb26953b06a340))
-
 <!-- code-foundry: packaged changelog -->
 
 ---
 
-This packaged changelog lists the 20 most recent releases; 234 older releases are omitted to keep the package small.
+This packaged changelog lists the 20 most recent releases; 236 older releases are omitted to keep the package small.
 See the [full changelog](https://github.com/0xPlayerOne/code-foundry/blob/main/CHANGELOG.md) for the complete history.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "code-foundry",
-  "version": "1.45.2",
+  "version": "1.46.1",
   "description": "A fast, language-aware repository factory for agent-ready workflows, testing, security, and release automation.",
   "homepage": "https://github.com/0xPlayerOne/code-foundry#readme",
   "bugs": {

package/src/lib/consumer-qualification.mjs

@@ -157,8 +157,16 @@ function lintContracts(consumer, candidate, destination, actionlint, version) {
     paths.push(target)
   }
   // Check all candidate callees as well as rendered callers, without executing them.
-  const workflows = readdirSync(join(destination, '.github/workflows')).filter((name) =>
-    /\.ya?ml$/.test(name)
+  // actionlint v1.7.12 (still the latest release as of 2026-10-07) predates
+  // the June 2026 step parallelism keywords (background/wait/wait-all/
+  // cancel/parallel), so files using them are excluded from this pass until
+  // actionlint ships support — GitHub's own loader accepts the syntax, which
+  // is verified by live runs and pinned in test/billing-lanes.test.mjs.
+  // Restore the removal of this exclusion when rhysd/actionlint releases
+  // post-parallel support.
+  const actionlintPendingParallelSyntax = new Set(['validation-billing.yml'])
+  const workflows = readdirSync(join(destination, '.github/workflows')).filter(
+    (name) => /\.ya?ml$/.test(name) && !actionlintPendingParallelSyntax.has(name)
   )
   run(
     actionlint,