npm - code-foundry - Versions diffs - 1.45.2 → 1.46.2 - Mend

code-foundry 1.45.2 → 1.46.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (4) hide show

package/.github/workflows/validation-billing.yml +253 -292
package/CHANGELOG.md +22 -27
package/package.json +1 -1
package/src/lib/consumer-qualification.mjs +10 -2

package/.github/workflows/validation-billing.yml CHANGED Viewed

@@ -183,6 +183,72 @@ jobs:
           HEAD_SHA: ${{ github.event.pull_request.head.sha || github.sha }}
           BEFORE_SHA: ${{ github.event.before }}
         run: node "$RUNNER_TEMP/code-foundry/src/runtime.mjs" ci should_run format >> "$GITHUB_OUTPUT"
+      # --- Build lane (mirror of ci.yml build) ---
+      - name: Detect build
+        id: build_applicability
+        if: ${{ !cancelled() }}
+        env:
+          EVENT_NAME: ${{ github.event_name }}
+          BASE_REF: ${{ github.event.pull_request.base.ref }}
+          BASE_SHA: ${{ github.event.pull_request.base.sha }}
+          HEAD_SHA: ${{ github.event.pull_request.head.sha || github.sha }}
+          BEFORE_SHA: ${{ github.event.before }}
+        run: node "$RUNNER_TEMP/code-foundry/src/runtime.mjs" ci should_run build >> "$GITHUB_OUTPUT"
+      # --- Performance lane (mirror of test.yml performance; audit tier only) ---
+      - name: Detect performance
+        id: performance_applicability
+        if: ${{ !cancelled() && inputs.mode == 'audit' }}
+        env:
+          EVENT_NAME: ${{ github.event_name }}
+          BASE_REF: ${{ github.event.pull_request.base.ref }}
+          BASE_SHA: ${{ github.event.pull_request.base.sha }}
+          HEAD_SHA: ${{ github.event.pull_request.head.sha || github.sha }}
+          BEFORE_SHA: ${{ github.event.before }}
+        run: node "$RUNNER_TEMP/code-foundry/src/runtime.mjs" ci task_profile performance >> "$GITHUB_OUTPUT"
+      # --- Smoke lane (mirror of test.yml smoke; audit tier only) ---
+      - name: Detect smoke
+        id: smoke_applicability
+        if: ${{ !cancelled() && inputs.mode == 'audit' }}
+        env:
+          EVENT_NAME: ${{ github.event_name }}
+          BASE_REF: ${{ github.event.pull_request.base.ref }}
+          BASE_SHA: ${{ github.event.pull_request.base.sha }}
+          HEAD_SHA: ${{ github.event.pull_request.head.sha || github.sha }}
+          BEFORE_SHA: ${{ github.event.before }}
+        run: node "$RUNNER_TEMP/code-foundry/src/runtime.mjs" ci task_profile smoke >> "$GITHUB_OUTPUT"
+      # --- Eval lane (mirror of eval.yml; audit tier only) ---
+      - name: Detect eval
+        id: eval_applicability
+        if: ${{ !cancelled() && inputs.mode == 'audit' }}
+        env:
+          EVENT_NAME: ${{ github.event_name }}
+          BASE_REF: ${{ github.event.pull_request.base.ref }}
+          BASE_SHA: ${{ github.event.pull_request.base.sha }}
+          HEAD_SHA: ${{ github.event.pull_request.head.sha || github.sha }}
+          BEFORE_SHA: ${{ github.event.before }}
+        run: node "$RUNNER_TEMP/code-foundry/src/runtime.mjs" ci should_run eval >> "$GITHUB_OUTPUT"
+      # --- Lint lane (mirror of ci.yml lint) ---
+      - name: Detect lint
+        id: lint_applicability
+        if: ${{ !cancelled() }}
+        env:
+          EVENT_NAME: ${{ github.event_name }}
+          BASE_REF: ${{ github.event.pull_request.base.ref }}
+          BASE_SHA: ${{ github.event.pull_request.base.sha }}
+          HEAD_SHA: ${{ github.event.pull_request.head.sha || github.sha }}
+          BEFORE_SHA: ${{ github.event.before }}
+        run: node "$RUNNER_TEMP/code-foundry/src/runtime.mjs" ci should_run lint >> "$GITHUB_OUTPUT"
+      # --- Integration lane (mirror of test.yml integration; audit tier only) ---
+      - name: Detect integration
+        id: integration_applicability
+        if: ${{ !cancelled() && inputs.mode == 'audit' }}
+        env:
+          EVENT_NAME: ${{ github.event_name }}
+          BASE_REF: ${{ github.event.pull_request.base.ref }}
+          BASE_SHA: ${{ github.event.pull_request.base.sha }}
+          HEAD_SHA: ${{ github.event.pull_request.head.sha || github.sha }}
+          BEFORE_SHA: ${{ github.event.before }}
+        run: node "$RUNNER_TEMP/code-foundry/src/runtime.mjs" ci task_profile integration >> "$GITHUB_OUTPUT"
       - name: Setup format
         if: steps.format_applicability.outputs.applicable == 'true' && steps.format_applicability.outputs.affected != 'false'
         uses: ./.github/actions/setup
@@ -195,34 +261,6 @@ jobs:
           cache-lint: 'false'
           cache-build: 'false'
           task: format
-      - name: Format
-        id: format_execute
-        if: steps.format_applicability.outputs.applicable == 'true' && steps.format_applicability.outputs.affected != 'false'
-        run: node "$RUNNER_TEMP/code-foundry/src/runtime.mjs" ci format
-      - name: Retain format task receipt
-        if: >-
-          always() &&
-          (steps.format_execute.outcome == 'success' || steps.format_execute.outcome == 'failure' ||
-          steps.format_applicability.outputs.applicable == 'false' || steps.format_applicability.outputs.affected == 'false') &&
-          hashFiles('.code-foundry/results/format.json') != ''
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
-        with:
-          name: ${{ inputs.artifact-prefix }}-${{ github.run_id }}-${{ github.run_attempt }}-format
-          path: .code-foundry/results/format.json
-          include-hidden-files: true
-          if-no-files-found: error
-          retention-days: 14
-      # --- Build lane (mirror of ci.yml build) ---
-      - name: Detect build
-        id: build_applicability
-        if: ${{ !cancelled() }}
-        env:
-          EVENT_NAME: ${{ github.event_name }}
-          BASE_REF: ${{ github.event.pull_request.base.ref }}
-          BASE_SHA: ${{ github.event.pull_request.base.sha }}
-          HEAD_SHA: ${{ github.event.pull_request.head.sha || github.sha }}
-          BEFORE_SHA: ${{ github.event.before }}
-        run: node "$RUNNER_TEMP/code-foundry/src/runtime.mjs" ci should_run build >> "$GITHUB_OUTPUT"
       - name: Setup build
         if: ${{ !cancelled() && steps.build_applicability.outputs.applicable == 'true' && steps.build_applicability.outputs.affected != 'false' }}
         uses: ./.github/actions/setup
@@ -235,36 +273,6 @@ jobs:
           # time. Consumers can provide the real value; the fallback is
           # intentionally CI-only and must never be used at runtime.
           NEXTAUTH_SECRET: ${{ secrets.NEXTAUTH_SECRET || 'code-foundry-ci-placeholder-0123456789' }}
-      - name: Build
-        id: build_execute
-        if: ${{ !cancelled() && steps.build_applicability.outputs.applicable == 'true' && steps.build_applicability.outputs.affected != 'false' }}
-        env:
-          NEXTAUTH_SECRET: ${{ secrets.NEXTAUTH_SECRET || 'code-foundry-ci-placeholder-0123456789' }}
-        run: node "$RUNNER_TEMP/code-foundry/src/runtime.mjs" ci build
-      - name: Retain build task receipt
-        if: >-
-          always() &&
-          (steps.build_execute.outcome == 'success' || steps.build_execute.outcome == 'failure' ||
-          steps.build_applicability.outputs.applicable == 'false' || steps.build_applicability.outputs.affected == 'false') &&
-          hashFiles('.code-foundry/results/build.json') != ''
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
-        with:
-          name: ${{ inputs.artifact-prefix }}-${{ github.run_id }}-${{ github.run_attempt }}-build
-          path: .code-foundry/results/build.json
-          include-hidden-files: true
-          if-no-files-found: error
-          retention-days: 14
-      # --- Performance lane (mirror of test.yml performance; audit tier only) ---
-      - name: Detect performance
-        id: performance_applicability
-        if: ${{ !cancelled() && inputs.mode == 'audit' }}
-        env:
-          EVENT_NAME: ${{ github.event_name }}
-          BASE_REF: ${{ github.event.pull_request.base.ref }}
-          BASE_SHA: ${{ github.event.pull_request.base.sha }}
-          HEAD_SHA: ${{ github.event.pull_request.head.sha || github.sha }}
-          BEFORE_SHA: ${{ github.event.before }}
-        run: node "$RUNNER_TEMP/code-foundry/src/runtime.mjs" ci task_profile performance >> "$GITHUB_OUTPUT"
       - name: Setup performance
         if: ${{ !cancelled() && inputs.mode == 'audit' && steps.performance_applicability.outputs.applicable == 'true' && steps.performance_applicability.outputs.affected != 'false' }}
         uses: ./.github/actions/setup
@@ -281,51 +289,6 @@ jobs:
           task-javascript: ${{ steps.performance_applicability.outputs.javascript }}
           task-python: ${{ steps.performance_applicability.outputs.python }}
           task-rust: ${{ steps.performance_applicability.outputs.rust }}
-      - name: Performance
-        id: performance_execute
-        if: ${{ !cancelled() && inputs.mode == 'audit' && steps.performance_applicability.outputs.applicable == 'true' && steps.performance_applicability.outputs.affected != 'false' }}
-        run: node "$RUNNER_TEMP/code-foundry/src/runtime.mjs" ci performance
-      - name: Retain performance task receipt
-        if: >-
-          always() &&
-          inputs.mode == 'audit' &&
-          (steps.performance_execute.outcome == 'success' || steps.performance_execute.outcome == 'failure' ||
-          steps.performance_applicability.outputs.applicable == 'false' || steps.performance_applicability.outputs.affected == 'false') &&
-          hashFiles('.code-foundry/results/performance.json') != ''
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
-        with:
-          name: ${{ inputs.artifact-prefix }}-${{ github.run_id }}-${{ github.run_attempt }}-performance
-          path: .code-foundry/results/performance.json
-          include-hidden-files: true
-          if-no-files-found: error
-          retention-days: 14
-      - name: Upload performance results
-        if: >-
-          always() &&
-          inputs.mode == 'audit' &&
-          steps.performance_applicability.outputs.applicable == 'true' &&
-          hashFiles('artifacts/performance/**', 'performance-results.json', 'performance-results/**') != ''
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
-        with:
-          name: performance-${{ github.run_id }}
-          path: |
-            artifacts/performance/**
-            performance-results.json
-            performance-results/**
-          compression-level: 1
-          if-no-files-found: ignore
-          retention-days: 14
-      # --- Smoke lane (mirror of test.yml smoke; audit tier only) ---
-      - name: Detect smoke
-        id: smoke_applicability
-        if: ${{ !cancelled() && inputs.mode == 'audit' }}
-        env:
-          EVENT_NAME: ${{ github.event_name }}
-          BASE_REF: ${{ github.event.pull_request.base.ref }}
-          BASE_SHA: ${{ github.event.pull_request.base.sha }}
-          HEAD_SHA: ${{ github.event.pull_request.head.sha || github.sha }}
-          BEFORE_SHA: ${{ github.event.before }}
-        run: node "$RUNNER_TEMP/code-foundry/src/runtime.mjs" ci task_profile smoke >> "$GITHUB_OUTPUT"
       - name: Setup smoke
         if: ${{ !cancelled() && inputs.mode == 'audit' && steps.smoke_applicability.outputs.applicable == 'true' && steps.smoke_applicability.outputs.affected != 'false' }}
         uses: ./.github/actions/setup
@@ -342,35 +305,6 @@ jobs:
           task-javascript: ${{ steps.smoke_applicability.outputs.javascript }}
           task-python: ${{ steps.smoke_applicability.outputs.python }}
           task-rust: ${{ steps.smoke_applicability.outputs.rust }}
-      - name: Smoke
-        id: smoke_execute
-        if: ${{ !cancelled() && inputs.mode == 'audit' && steps.smoke_applicability.outputs.applicable == 'true' && steps.smoke_applicability.outputs.affected != 'false' }}
-        run: node "$RUNNER_TEMP/code-foundry/src/runtime.mjs" ci smoke
-      - name: Retain smoke task receipt
-        if: >-
-          always() &&
-          inputs.mode == 'audit' &&
-          (steps.smoke_execute.outcome == 'success' || steps.smoke_execute.outcome == 'failure' ||
-          steps.smoke_applicability.outputs.applicable == 'false' || steps.smoke_applicability.outputs.affected == 'false') &&
-          hashFiles('.code-foundry/results/smoke.json') != ''
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
-        with:
-          name: ${{ inputs.artifact-prefix }}-${{ github.run_id }}-${{ github.run_attempt }}-smoke
-          path: .code-foundry/results/smoke.json
-          include-hidden-files: true
-          if-no-files-found: error
-          retention-days: 14
-      # --- Eval lane (mirror of eval.yml; audit tier only) ---
-      - name: Detect eval
-        id: eval_applicability
-        if: ${{ !cancelled() && inputs.mode == 'audit' }}
-        env:
-          EVENT_NAME: ${{ github.event_name }}
-          BASE_REF: ${{ github.event.pull_request.base.ref }}
-          BASE_SHA: ${{ github.event.pull_request.base.sha }}
-          HEAD_SHA: ${{ github.event.pull_request.head.sha || github.sha }}
-          BEFORE_SHA: ${{ github.event.before }}
-        run: node "$RUNNER_TEMP/code-foundry/src/runtime.mjs" ci should_run eval >> "$GITHUB_OUTPUT"
       - name: Setup eval
         if: ${{ !cancelled() && inputs.mode == 'audit' && steps.eval_applicability.outputs.applicable == 'true' && steps.eval_applicability.outputs.affected != 'false' }}
         uses: ./.github/actions/setup
@@ -380,99 +314,196 @@ jobs:
           install: 'true'
           cache-build: 'true'
           task: eval
-      - name: Eval
-        id: eval_execute
-        if: ${{ !cancelled() && inputs.mode == 'audit' && steps.eval_applicability.outputs.applicable == 'true' && steps.eval_applicability.outputs.affected != 'false' }}
-        run: node "$RUNNER_TEMP/code-foundry/src/runtime.mjs" ci eval
-      - name: Retain eval task receipt
-        if: >-
-          always() &&
-          inputs.mode == 'audit' &&
-          (steps.eval_execute.outcome == 'success' || steps.eval_execute.outcome == 'failure' ||
-          steps.eval_applicability.outputs.applicable == 'false' || steps.eval_applicability.outputs.affected == 'false') &&
-          hashFiles('.code-foundry/results/eval.json') != ''
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
-        with:
-          name: ${{ inputs.artifact-prefix }}-${{ github.run_id }}-${{ github.run_attempt }}-eval
-          path: .code-foundry/results/eval.json
-          include-hidden-files: true
-          if-no-files-found: error
-          retention-days: 14
-      - name: Retain eval report
-        if: >-
-          always() &&
-          inputs.mode == 'audit' &&
-          steps.eval_execute.outcome == 'failure' &&
-          hashFiles('eval-results/result.json') != ''
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
-        with:
-          name: ${{ inputs.artifact-prefix }}-${{ github.run_id }}-${{ github.run_attempt }}-eval-report
-          path: |
-            eval-results/result.json
-            eval-results/summary.json
-          if-no-files-found: error
-          retention-days: 14
-  lint:
-    name: Lint
-    if: vars.CI_BILLING_PAUSED != 'true'
-    runs-on: ${{ inputs.ci-runner }}
-    timeout-minutes: 30
-    steps:
-      - name: Checkout
-        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
-        with:
-          persist-credentials: false
-      - name: Runtime
-        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
-        with:
-          persist-credentials: false
-          repository: ${{ inputs.runtime-repository }}
-          ref: ${{ inputs.runtime-ref }}
-          path: .github/.code-foundry
-          sparse-checkout: |
-            .github/actions
-            src/lib
-            src/runtime-core.mjs
-            src/runtime.mjs
-      - name: Install runtime
-        run: |
-          mkdir -p .github/actions
-          mv .github/.code-foundry "$RUNNER_TEMP/code-foundry"
-          cp -R "$RUNNER_TEMP/code-foundry/.github/actions/." .github/actions/
-      - name: Detect
-        id: applicability
-        env:
-          EVENT_NAME: ${{ github.event_name }}
-          BASE_REF: ${{ github.event.pull_request.base.ref }}
-          BASE_SHA: ${{ github.event.pull_request.base.sha }}
-          HEAD_SHA: ${{ github.event.pull_request.head.sha || github.sha }}
-          BEFORE_SHA: ${{ github.event.before }}
-        run: node "$RUNNER_TEMP/code-foundry/src/runtime.mjs" ci should_run lint >> "$GITHUB_OUTPUT"
-      - name: Setup
-        if: steps.applicability.outputs.applicable == 'true' && steps.applicability.outputs.affected != 'false'
+      - name: Setup lint
+        if: ${{ !cancelled() && steps.lint_applicability.outputs.applicable == 'true' && steps.lint_applicability.outputs.affected != 'false' }}
         uses: ./.github/actions/setup
         with:
           install: 'true'
           cache-lint: 'true'
           task: lint
-      - name: Lint
-        id: execute
-        if: steps.applicability.outputs.applicable == 'true' && steps.applicability.outputs.affected != 'false'
-        run: node "$RUNNER_TEMP/code-foundry/src/runtime.mjs" ci lint
-      - name: Retain task receipt
-        if: >-
-          always() &&
-          (steps.execute.outcome == 'success' || steps.execute.outcome == 'failure' ||
-          steps.applicability.outputs.applicable == 'false' || steps.applicability.outputs.affected == 'false') &&
-          hashFiles('.code-foundry/results/lint.json') != ''
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+      - name: Setup integration
+        if: ${{ !cancelled() && inputs.mode == 'audit' && steps.integration_applicability.outputs.applicable == 'true' && steps.integration_applicability.outputs.affected != 'false' }}
+        uses: ./.github/actions/setup
         with:
-          name: ${{ inputs.artifact-prefix }}-${{ github.run_id }}-${{ github.run_attempt }}-lint
-          path: .code-foundry/results/lint.json
-          include-hidden-files: true
-          if-no-files-found: error
-          retention-days: 14
+          install: true
+          install-javascript: ${{ steps.integration_applicability.outputs.javascript == 'true' }}
+          install-python: ${{ steps.integration_applicability.outputs.python == 'true' }}
+          install-rust: ${{ steps.integration_applicability.outputs.rust == 'true' }}
+          cache-build: ${{ steps.integration_applicability.outputs.rust == 'true' }}
+          cache-environment: false
+          cache-save: ${{ github.event_name == 'push' }}
+          cache-packages: ${{ vars.REPO_FOUNDRY_CACHE_PACKAGES || 'auto' }}
+          task: integration
+          task-javascript: ${{ steps.integration_applicability.outputs.javascript }}
+          task-python: ${{ steps.integration_applicability.outputs.python }}
+          task-rust: ${{ steps.integration_applicability.outputs.rust }}
+      - parallel:
+          # --- Format execute ---
+          - name: Format
+            id: format_execute
+            if: steps.format_applicability.outputs.applicable == 'true' && steps.format_applicability.outputs.affected != 'false'
+            run: node "$RUNNER_TEMP/code-foundry/src/runtime.mjs" ci format
+          # --- Build execute ---
+          - name: Build
+            id: build_execute
+            if: ${{ !cancelled() && steps.build_applicability.outputs.applicable == 'true' && steps.build_applicability.outputs.affected != 'false' }}
+            env:
+              NEXTAUTH_SECRET: ${{ secrets.NEXTAUTH_SECRET || 'code-foundry-ci-placeholder-0123456789' }}
+            run: node "$RUNNER_TEMP/code-foundry/src/runtime.mjs" ci build
+          # --- Performance execute ---
+          - name: Performance
+            id: performance_execute
+            if: ${{ !cancelled() && inputs.mode == 'audit' && steps.performance_applicability.outputs.applicable == 'true' && steps.performance_applicability.outputs.affected != 'false' }}
+            run: node "$RUNNER_TEMP/code-foundry/src/runtime.mjs" ci performance
+          # --- Smoke execute ---
+          - name: Smoke
+            id: smoke_execute
+            if: ${{ !cancelled() && inputs.mode == 'audit' && steps.smoke_applicability.outputs.applicable == 'true' && steps.smoke_applicability.outputs.affected != 'false' }}
+            run: node "$RUNNER_TEMP/code-foundry/src/runtime.mjs" ci smoke
+          # --- Eval execute ---
+          - name: Eval
+            id: eval_execute
+            if: ${{ !cancelled() && inputs.mode == 'audit' && steps.eval_applicability.outputs.applicable == 'true' && steps.eval_applicability.outputs.affected != 'false' }}
+            run: node "$RUNNER_TEMP/code-foundry/src/runtime.mjs" ci eval
+          # --- Lint execute ---
+          - name: Lint
+            id: lint_execute
+            if: ${{ !cancelled() && steps.lint_applicability.outputs.applicable == 'true' && steps.lint_applicability.outputs.affected != 'false' }}
+            run: node "$RUNNER_TEMP/code-foundry/src/runtime.mjs" ci lint
+          # --- Integration execute ---
+          - name: Integration
+            id: integration_execute
+            if: ${{ !cancelled() && inputs.mode == 'audit' && steps.integration_applicability.outputs.applicable == 'true' && steps.integration_applicability.outputs.affected != 'false' }}
+            run: node "$RUNNER_TEMP/code-foundry/src/runtime.mjs" ci integration
+      # Receipts are independent artifact uploads; a second parallel
+      # group joins them instead of serializing 8+ uploads after the
+      # executes.
+      - parallel:
+          - name: Retain format task receipt
+            if: >-
+              always() &&
+              (steps.format_execute.outcome == 'success' || steps.format_execute.outcome == 'failure' ||
+              steps.format_applicability.outputs.applicable == 'false' || steps.format_applicability.outputs.affected == 'false') &&
+              hashFiles('.code-foundry/results/format.json') != ''
+            uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+            with:
+              name: ${{ inputs.artifact-prefix }}-${{ github.run_id }}-${{ github.run_attempt }}-format
+              path: .code-foundry/results/format.json
+              include-hidden-files: true
+              if-no-files-found: error
+              retention-days: 14
+          - name: Retain build task receipt
+            if: >-
+              always() &&
+              (steps.build_execute.outcome == 'success' || steps.build_execute.outcome == 'failure' ||
+              steps.build_applicability.outputs.applicable == 'false' || steps.build_applicability.outputs.affected == 'false') &&
+              hashFiles('.code-foundry/results/build.json') != ''
+            uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+            with:
+              name: ${{ inputs.artifact-prefix }}-${{ github.run_id }}-${{ github.run_attempt }}-build
+              path: .code-foundry/results/build.json
+              include-hidden-files: true
+              if-no-files-found: error
+              retention-days: 14
+          - name: Retain performance task receipt
+            if: >-
+              always() &&
+              inputs.mode == 'audit' &&
+              (steps.performance_execute.outcome == 'success' || steps.performance_execute.outcome == 'failure' ||
+              steps.performance_applicability.outputs.applicable == 'false' || steps.performance_applicability.outputs.affected == 'false') &&
+              hashFiles('.code-foundry/results/performance.json') != ''
+            uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+            with:
+              name: ${{ inputs.artifact-prefix }}-${{ github.run_id }}-${{ github.run_attempt }}-performance
+              path: .code-foundry/results/performance.json
+              include-hidden-files: true
+              if-no-files-found: error
+              retention-days: 14
+          - name: Upload performance results
+            if: >-
+              always() &&
+              inputs.mode == 'audit' &&
+              steps.performance_applicability.outputs.applicable == 'true' &&
+              hashFiles('artifacts/performance/**', 'performance-results.json', 'performance-results/**') != ''
+            uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+            with:
+              name: performance-${{ github.run_id }}
+              path: |
+                artifacts/performance/**
+                performance-results.json
+                performance-results/**
+              compression-level: 1
+              if-no-files-found: ignore
+              retention-days: 14
+          - name: Retain smoke task receipt
+            if: >-
+              always() &&
+              inputs.mode == 'audit' &&
+              (steps.smoke_execute.outcome == 'success' || steps.smoke_execute.outcome == 'failure' ||
+              steps.smoke_applicability.outputs.applicable == 'false' || steps.smoke_applicability.outputs.affected == 'false') &&
+              hashFiles('.code-foundry/results/smoke.json') != ''
+            uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+            with:
+              name: ${{ inputs.artifact-prefix }}-${{ github.run_id }}-${{ github.run_attempt }}-smoke
+              path: .code-foundry/results/smoke.json
+              include-hidden-files: true
+              if-no-files-found: error
+              retention-days: 14
+          - name: Retain eval task receipt
+            if: >-
+              always() &&
+              inputs.mode == 'audit' &&
+              (steps.eval_execute.outcome == 'success' || steps.eval_execute.outcome == 'failure' ||
+              steps.eval_applicability.outputs.applicable == 'false' || steps.eval_applicability.outputs.affected == 'false') &&
+              hashFiles('.code-foundry/results/eval.json') != ''
+            uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+            with:
+              name: ${{ inputs.artifact-prefix }}-${{ github.run_id }}-${{ github.run_attempt }}-eval
+              path: .code-foundry/results/eval.json
+              include-hidden-files: true
+              if-no-files-found: error
+              retention-days: 14
+          - name: Retain eval report
+            if: >-
+              always() &&
+              inputs.mode == 'audit' &&
+              steps.eval_execute.outcome == 'failure' &&
+              hashFiles('eval-results/result.json') != ''
+            uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+            with:
+              name: ${{ inputs.artifact-prefix }}-${{ github.run_id }}-${{ github.run_attempt }}-eval-report
+              path: |
+                eval-results/result.json
+                eval-results/summary.json
+              if-no-files-found: error
+              retention-days: 14
+          - name: Retain lint task receipt
+            if: >-
+              always() &&
+              (steps.lint_execute.outcome == 'success' || steps.lint_execute.outcome == 'failure' ||
+              steps.lint_applicability.outputs.applicable == 'false' || steps.lint_applicability.outputs.affected == 'false') &&
+              hashFiles('.code-foundry/results/lint.json') != ''
+            uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+            with:
+              name: ${{ inputs.artifact-prefix }}-${{ github.run_id }}-${{ github.run_attempt }}-lint
+              path: .code-foundry/results/lint.json
+              include-hidden-files: true
+              if-no-files-found: error
+              retention-days: 14
+          - name: Retain integration task receipt
+            if: >-
+              always() &&
+              inputs.mode == 'audit' &&
+              (steps.integration_execute.outcome == 'success' || steps.integration_execute.outcome == 'failure' ||
+              steps.integration_applicability.outputs.applicable == 'false' || steps.integration_applicability.outputs.affected == 'false') &&
+              hashFiles('.code-foundry/results/integration.json') != ''
+            uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+            with:
+              name: ${{ inputs.artifact-prefix }}-${{ github.run_id }}-${{ github.run_attempt }}-integration
+              path: .code-foundry/results/integration.json
+              include-hidden-files: true
+              if-no-files-found: error
+              retention-days: 14
   type-check:
     name: Type-Check
@@ -621,76 +652,6 @@ jobs:
           if-no-files-found: ignore
           retention-days: 14
-  integration:
-    name: Integration
-    if: vars.CI_BILLING_PAUSED != 'true' && inputs.mode == 'audit'
-    runs-on: ${{ inputs.test-runner }}
-    timeout-minutes: 30
-    steps:
-      - name: Checkout
-        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
-        with:
-          persist-credentials: false
-          fetch-depth: 2
-      - name: Runtime
-        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
-        with:
-          persist-credentials: false
-          repository: ${{ inputs.runtime-repository }}
-          ref: ${{ inputs.runtime-ref }}
-          path: .github/.code-foundry
-          sparse-checkout: |
-            .github/actions
-            src/lib
-            src/runtime-core.mjs
-            src/runtime.mjs
-      - name: Install runtime
-        run: |
-          mkdir -p .github/actions
-          mv .github/.code-foundry "$RUNNER_TEMP/code-foundry"
-          cp -R "$RUNNER_TEMP/code-foundry/.github/actions/." .github/actions/
-      - name: Detect
-        id: applicability
-        env:
-          EVENT_NAME: ${{ github.event_name }}
-          BASE_REF: ${{ github.event.pull_request.base.ref }}
-          BASE_SHA: ${{ github.event.pull_request.base.sha }}
-          HEAD_SHA: ${{ github.event.pull_request.head.sha || github.sha }}
-          BEFORE_SHA: ${{ github.event.before }}
-        run: node "$RUNNER_TEMP/code-foundry/src/runtime.mjs" ci task_profile integration >> "$GITHUB_OUTPUT"
-      - name: Setup
-        if: steps.applicability.outputs.applicable == 'true' && steps.applicability.outputs.affected != 'false'
-        uses: ./.github/actions/setup
-        with:
-          install: true
-          install-javascript: ${{ steps.applicability.outputs.javascript == 'true' }}
-          install-python: ${{ steps.applicability.outputs.python == 'true' }}
-          install-rust: ${{ steps.applicability.outputs.rust == 'true' }}
-          cache-build: ${{ steps.applicability.outputs.rust == 'true' }}
-          cache-environment: false
-          cache-save: ${{ github.event_name == 'push' }}
-          task: integration
-          task-javascript: ${{ steps.applicability.outputs.javascript }}
-          task-python: ${{ steps.applicability.outputs.python }}
-          task-rust: ${{ steps.applicability.outputs.rust }}
-      - name: Integration
-        id: execute
-        if: steps.applicability.outputs.applicable == 'true' && steps.applicability.outputs.affected != 'false'
-        run: node "$RUNNER_TEMP/code-foundry/src/runtime.mjs" ci integration
-      - name: Retain task receipt
-        if: >-
-          always() &&
-          (steps.execute.outcome == 'success' || steps.execute.outcome == 'failure' ||
-          steps.applicability.outputs.applicable == 'false' || steps.applicability.outputs.affected == 'false') &&
-          hashFiles('.code-foundry/results/integration.json') != ''
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
-        with:
-          name: ${{ inputs.artifact-prefix }}-${{ github.run_id }}-${{ github.run_attempt }}-integration
-          path: .code-foundry/results/integration.json
-          include-hidden-files: true
-          if-no-files-found: error
-          retention-days: 14
   e2e:
     name: E2E
     if: vars.CI_BILLING_PAUSED != 'true' && inputs.mode == 'audit'
@@ -1113,7 +1074,7 @@ jobs:
   # evaluateValidationGate's mode truth table is reused unchanged.
   gate:
     name: Gate
-    needs: [fast-lanes, lint, type-check, unit, integration, e2e, audit, codeql]
+    needs: [fast-lanes, type-check, unit, e2e, audit, codeql]
     if: vars.CI_BILLING_PAUSED != 'true' && always()
     runs-on: ubuntu-slim
     timeout-minutes: 10
@@ -1121,12 +1082,12 @@ jobs:
       FOUNDRY_MODE: ${{ inputs.mode }}
       # CI category: lint and type-check always run; the merged fast-lanes job
       # carries the format and build lanes.
-      FOUNDRY_CI: ${{ (needs.lint.result != 'success' && needs.lint.result) || (needs.type-check.result != 'success' && needs.type-check.result) || (needs.fast-lanes.result != 'success' && needs.fast-lanes.result) || 'success' }}
+      FOUNDRY_CI: ${{ (needs.type-check.result != 'success' && needs.type-check.result) || (needs.fast-lanes.result != 'success' && needs.fast-lanes.result) || 'success' }}
       # Test category: unit always runs and must succeed; integration and e2e
       # are audit-tier jobs whose expected skip on fast/release is not a
       # failure; the merged fast-lanes job carries performance, smoke, and
       # eval-mode lanes, so its result joins the category too.
-      FOUNDRY_TEST: ${{ needs.unit.result == 'success' && needs.fast-lanes.result == 'success' && (needs.integration.result == 'success' || needs.integration.result == 'skipped') && (needs.e2e.result == 'success' || needs.e2e.result == 'skipped') && 'success' || ((needs.integration.result != 'success' && needs.integration.result != 'skipped' && needs.integration.result) || (needs.e2e.result != 'success' && needs.e2e.result != 'skipped' && needs.e2e.result) || (needs.unit.result != 'success' && needs.unit.result) || (needs.fast-lanes.result != 'success' && needs.fast-lanes.result) || 'failure') }}
+      FOUNDRY_TEST: ${{ needs.unit.result == 'success' && needs.fast-lanes.result == 'success' && (needs.e2e.result == 'success' || needs.e2e.result == 'skipped') && 'success' || ((needs.e2e.result != 'success' && needs.e2e.result != 'skipped' && needs.e2e.result) || (needs.unit.result != 'success' && needs.unit.result) || (needs.fast-lanes.result != 'success' && needs.fast-lanes.result) || 'failure') }}
       FOUNDRY_SECURITY: ${{ needs.audit.result }}
       # This orchestrator runs CodeQL only when the consumer's canonical
       # configuration enables it; otherwise the unavailability decision is

package/CHANGELOG.md CHANGED Viewed

@@ -1,5 +1,26 @@
 # Changelog
+## [1.46.2](https://github.com/0xPlayerOne/code-foundry/compare/v1.46.1...v1.46.2) (2026-10-07)
+### Bug Fixes
+* **billing:** join fast-lane receipts in a second parallel group ([#742](https://github.com/0xPlayerOne/code-foundry/issues/742)) ([c63a39c](https://github.com/0xPlayerOne/code-foundry/commit/c63a39cf5e236d6747bd85cf10b04bd10f690b11))
+## [1.46.1](https://github.com/0xPlayerOne/code-foundry/compare/v1.46.0...v1.46.1) (2026-10-07)
+### Bug Fixes
+* **qualification:** skip parallel-syntax files until actionlint supports them ([#740](https://github.com/0xPlayerOne/code-foundry/issues/740)) ([db98c7f](https://github.com/0xPlayerOne/code-foundry/commit/db98c7f40cae080cdc9dcab7baac4976e5e0656e))
+## [1.46.0](https://github.com/0xPlayerOne/code-foundry/compare/v1.45.2...v1.46.0) (2026-10-07)
+### Features
+* **billing:** run fast-lane executes concurrently ([#738](https://github.com/0xPlayerOne/code-foundry/issues/738)) ([b40e82a](https://github.com/0xPlayerOne/code-foundry/commit/b40e82a0709b288a8be46998cfdc8b909f92c23c))
 ## [1.45.2](https://github.com/0xPlayerOne/code-foundry/compare/v1.45.1...v1.45.2) (2026-10-06)
@@ -119,35 +140,9 @@
 * **release:** make batched publication and stable promotion reliable ([#703](https://github.com/0xPlayerOne/code-foundry/issues/703)) ([271731d](https://github.com/0xPlayerOne/code-foundry/commit/271731d8fac3bff42a99b3d5f4a774eccc0a7788))
-## [1.43.0](https://github.com/0xPlayerOne/code-foundry/compare/v1.42.0...v1.43.0) (2026-10-03)
-### Features
-* release-batching ([#700](https://github.com/0xPlayerOne/code-foundry/issues/700)) ([3dd5c5f](https://github.com/0xPlayerOne/code-foundry/commit/3dd5c5fd50883608baa3e2f9daef6b8aa83f269f))
-## [1.42.0](https://github.com/0xPlayerOne/code-foundry/compare/v1.41.0...v1.42.0) (2026-10-02)
-### Features
-* **validation:** shard the managed E2E lane via e2e_shards ([#697](https://github.com/0xPlayerOne/code-foundry/issues/697)) ([edb20b4](https://github.com/0xPlayerOne/code-foundry/commit/edb20b4e32e2055bf22e6f6f94b51f234a24687d))
-## [1.41.0](https://github.com/0xPlayerOne/code-foundry/compare/v1.40.0...v1.41.0) (2026-10-02)
-### Features
-* **validation:** skip default-branch CodeQL on release-please merges ([#694](https://github.com/0xPlayerOne/code-foundry/issues/694)) ([25fc22e](https://github.com/0xPlayerOne/code-foundry/commit/25fc22e6d4b76f0b7e06601f6dc420085949f127))
-### Bug Fixes
-* give the release artifact budgets several releases of headroom ([#696](https://github.com/0xPlayerOne/code-foundry/issues/696)) ([a504607](https://github.com/0xPlayerOne/code-foundry/commit/a504607e16f097a5075191fd24cb26953b06a340))
 <!-- code-foundry: packaged changelog -->
 ---
-This packaged changelog lists the 20 most recent releases; 234 older releases are omitted to keep the package small.
+This packaged changelog lists the 20 most recent releases; 237 older releases are omitted to keep the package small.
 See the [full changelog](https://github.com/0xPlayerOne/code-foundry/blob/main/CHANGELOG.md) for the complete history.

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "code-foundry",
-  "version": "1.45.2",
+  "version": "1.46.2",
   "description": "A fast, language-aware repository factory for agent-ready workflows, testing, security, and release automation.",
   "homepage": "https://github.com/0xPlayerOne/code-foundry#readme",
   "bugs": {

package/src/lib/consumer-qualification.mjs CHANGED Viewed

@@ -157,8 +157,16 @@ function lintContracts(consumer, candidate, destination, actionlint, version) {
     paths.push(target)
   }
   // Check all candidate callees as well as rendered callers, without executing them.
-  const workflows = readdirSync(join(destination, '.github/workflows')).filter((name) =>
-    /\.ya?ml$/.test(name)
+  // actionlint v1.7.12 (still the latest release as of 2026-10-07) predates
+  // the June 2026 step parallelism keywords (background/wait/wait-all/
+  // cancel/parallel), so files using them are excluded from this pass until
+  // actionlint ships support — GitHub's own loader accepts the syntax, which
+  // is verified by live runs and pinned in test/billing-lanes.test.mjs.
+  // Restore the removal of this exclusion when rhysd/actionlint releases
+  // post-parallel support.
+  const actionlintPendingParallelSyntax = new Set(['validation-billing.yml'])
+  const workflows = readdirSync(join(destination, '.github/workflows')).filter(
+    (name) => /\.ya?ml$/.test(name) && !actionlintPendingParallelSyntax.has(name)
   )
   run(
     actionlint,