code-foundry 1.46.6 → 1.47.1

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # Changelog
 
+## [1.47.1](https://github.com/0xPlayerOne/code-foundry/compare/v1.47.0...v1.47.1) (2026-10-08)
+
+
+### Tests
+
+* **doctor:** pin the machine-hook shadow warning ([#753](https://github.com/0xPlayerOne/code-foundry/issues/753)) ([f634269](https://github.com/0xPlayerOne/code-foundry/commit/f634269424580d8d34323319288747587b6d6ae3))
+
+## [1.47.0](https://github.com/0xPlayerOne/code-foundry/compare/v1.46.6...v1.47.0) (2026-10-08)
+
+
+### Features
+
+* **release:** configurable dev channel on top of batched releases ([#749](https://github.com/0xPlayerOne/code-foundry/issues/749)) ([8fd8556](https://github.com/0xPlayerOne/code-foundry/commit/8fd85567a1a89735ab0db589649741253fbbeb21)), closes [#699](https://github.com/0xPlayerOne/code-foundry/issues/699)
+
 ## [1.46.6](https://github.com/0xPlayerOne/code-foundry/compare/v1.46.5...v1.46.6) (2026-10-08)
 
 
@@ -126,23 +140,9 @@
 
 * **ci:** declare the e2e shard inputs on the no-codeql orchestrator ([#714](https://github.com/0xPlayerOne/code-foundry/issues/714)) ([7500208](https://github.com/0xPlayerOne/code-foundry/commit/7500208f3b25dfe55c41ea45b382e021cf804012))
 
-## [1.44.3](https://github.com/0xPlayerOne/code-foundry/compare/v1.44.2...v1.44.3) (2026-10-03)
-
-
-### Tests
-
-* **cli:** assert expected doctor warnings ([#712](https://github.com/0xPlayerOne/code-foundry/issues/712)) ([d036bee](https://github.com/0xPlayerOne/code-foundry/commit/d036beee79a9b200315cdbee5509fc3c2a6c4a04))
-
-## [1.44.2](https://github.com/0xPlayerOne/code-foundry/compare/v1.44.1...v1.44.2) (2026-10-03)
-
-
-### Bug Fixes
-
-* **ci:** cancel only superseded pull-request runs in managed workflows ([#710](https://github.com/0xPlayerOne/code-foundry/issues/710)) ([f5fead6](https://github.com/0xPlayerOne/code-foundry/commit/f5fead677c032d253f2e1a2a256da4f207ddfa2a))
-
 <!-- code-foundry: packaged changelog -->
 
 ---
 
-This packaged changelog lists the 20 most recent releases; 241 older releases are omitted to keep the package small.
+This packaged changelog lists the 20 most recent releases; 243 older releases are omitted to keep the package small.
 See the [full changelog](https://github.com/0xPlayerOne/code-foundry/blob/main/CHANGELOG.md) for the complete history.

package/docs/CONFIGURATION.md

@@ -141,6 +141,8 @@ See [Merge queue validation](merge-queues.md) before enabling it.
 | `release_batching_prerelease`             | `true`, `false`                                      | Defaults to `true` with a schedule. Sync enables `draft` and `force-tag-creation` in Release Please; the producer publishes the draft with the selected visibility. `false` keeps scheduled releases stable-visible.                                                                                                                                                                                                                                                                                                                                  |
 | `release_batching_soak_hours`             | `1`–`336`                                            | Generate a daily promoter that promotes the newest prerelease when the oldest candidate since the last stable has soaked this many hours, stitching batch notes. Requires a batching schedule and prerelease publication. Set `STABLE_PROMOTION_HELD=true` in repository Actions variables to hold scheduled and manual promotion; `force` overrides the hold or soak, and `version` selects a plain semantic version.                                                                                                                                |
 | `release_batching_qualification_workflow` | workflow filename (for example `release-assets.yml`) | Require the latest release-event run of this workflow for the candidate tag’s exact source commit to succeed before stable promotion. Requires a batching soak. Running, missing, failed, or cancelled runs hold promotion, including named and forced promotions; `force` only bypasses hold and soak. The promoter receives read-only Actions access.                                                                                                                                                                                               |
+| `release_batching_dev_channel`            | `true`, `false`                                      | Publish a dev channel: every push to main tags a `v<stable>-dev.<run>` pre-release on top of the newest stable and dispatches the configured asset lane. Dev builds are never promoted to stable, auto builds pause with `CI_BILLING_PAUSED`, and manual dispatches accept a `version` input for repairs. Defaults to `false`.                                                                                                                                                                                                                        |
+| `release_batching_dev_workflow`           | workflow filename                                    | The `workflow_dispatch` asset lane the dev channel dispatches with a `version` input; the lane and its version injection stay app-provided because packaging differs per app. Required by `release_batching_dev_channel`.                                                                                                                                                                                                                                                                                                                             |
 
 Supported task capabilities are `format`, `lint`, `type_check`, `build`, `unit`,
 `integration`, `e2e`, `smoke`, `eval`, and `performance`. `coverage` is a policy

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "code-foundry",
-  "version": "1.46.6",
+  "version": "1.47.1",
   "description": "A fast, language-aware repository factory for agent-ready workflows, testing, security, and release automation.",
   "homepage": "https://github.com/0xPlayerOne/code-foundry#readme",
   "bugs": {

package/src/commands/sync.mjs

@@ -308,6 +308,13 @@ function synchronize(options) {
       const promoterPath = join(target, '.github/workflows/promote-stable.yml')
       if (promoter) writeOrReport(promoterPath, promoter, dryRun)
       else if (existsSync(promoterPath) && !dryRun) rmSync(promoterPath)
+      // The dev channel rides along the same way: rendered from
+      // release_batching_dev_channel, removed when the key is gone so a
+      // disabled channel stops tagging dev builds on every push.
+      const devChannel = renderDevChannel(config)
+      const devChannelPath = join(target, '.github/workflows/dev-channel.yml')
+      if (devChannel) writeOrReport(devChannelPath, devChannel, dryRun)
+      else if (existsSync(devChannelPath) && !dryRun) rmSync(devChannelPath)
     }
     if (file === '.github/dependabot.yml') {
       content = Buffer.from(renderDependabot(content.toString('utf8'), config, languages))
@@ -936,6 +943,29 @@ function validateReleaseBatchingConfig(config) {
       )
     }
   }
+  if (
+    config.release_batching_dev_channel &&
+    !['true', 'false'].includes(config.release_batching_dev_channel)
+  ) {
+    throw new Error(
+      `Unsupported release_batching_dev_channel: ${config.release_batching_dev_channel}; use true or false.`
+    )
+  }
+  if (configured(config.release_batching_dev_channel, 'false') === 'true') {
+    if (
+      !config.release_batching_dev_workflow ||
+      !/^[A-Za-z0-9_.-]+\.ya?ml$/.test(config.release_batching_dev_workflow)
+    ) {
+      throw new Error(
+        'Unsupported release_batching_dev_workflow: use the filename of the workflow_dispatch asset lane the dev build should dispatch.'
+      )
+    }
+  }
+  if (config.release_batching_dev_workflow && config.release_batching_dev_channel !== 'true') {
+    throw new Error(
+      'Unsupported release_batching_dev_workflow: requires release_batching_dev_channel: true.'
+    )
+  }
 }
 
 /** Render the batch-soak promoter for a repository, or null when the
@@ -953,6 +983,102 @@ export function renderPromoteStable(config) {
   )
 }
 
+/**
+ * The dev channel for repositories with `release_batching_dev_channel`. Every
+ * push to main tags a `v<stable>-dev.<run>` pre-release on top of the newest
+ * stable and dispatches the repository's own asset lane with a `version`
+ * input; the oldest dev builds are pruned so the channel stays bounded. Dev
+ * builds are never promoted: the batch-soak promoter's batch selector already
+ * excludes `-dev.` tags, so the channel lives beside stable forever.
+ * `__DEV_WORKFLOW__` is replaced with the configured asset lane at render
+ * time; the lane stays app-provided because packaging differs per app.
+ */
+const DEV_CHANNEL_TEMPLATE = `# Generated by Code Foundry sync from release_batching_dev_channel; rerun sync after changing or removing the key.
+
+name: Publish dev channel
+
+on:
+  push:
+    branches: [main]
+  workflow_dispatch:
+    inputs:
+      version:
+        description: Publish this dev version now (for example v0.75.1-dev.42). Leave empty to derive it from the newest stable.
+        required: false
+        type: string
+
+permissions:
+  contents: write
+  actions: write
+
+concurrency:
+  group: dev-channel
+  cancel-in-progress: false
+
+jobs:
+  publish:
+    name: Tag the dev build and dispatch the asset lane
+    # Auto dev builds pause with the shared billing pause; the manual dispatch
+    # (the repair path) still runs.
+    if: github.event_name == 'workflow_dispatch' || vars.CI_BILLING_PAUSED != 'true'
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - name: Publish the dev prerelease and dispatch the asset lane
+        env:
+          GH_TOKEN: \${{ github.token }}
+          DEV_WORKFLOW: '__DEV_WORKFLOW__'
+          REQUESTED: \${{ inputs.version }}
+        run: |
+          set -euo pipefail
+          repo="$GITHUB_REPOSITORY"
+          if [ -n "$REQUESTED" ]; then
+            tag="$REQUESTED"
+          else
+            stable="$(gh api --paginate --slurp "repos/$repo/releases?per_page=100" | jq -r '
+              [ .[] | select(.draft == false and .prerelease == false)
+                | select(.tag_name | test("^v[0-9]+[.][0-9]+[.][0-9]+$")) ]
+              | sort_by(.published_at) | .[-1].tag_name // empty')"
+            if [ -z "$stable" ]; then
+              echo "No stable release exists yet; a dev channel needs a stable baseline." | tee "$GITHUB_STEP_SUMMARY"
+              exit 0
+            fi
+            tag="\${stable}-dev.\${GITHUB_RUN_NUMBER}"
+          fi
+          if gh release view "$tag" --repo "$repo" >/dev/null 2>&1; then
+            echo "$tag already exists; nothing to do." | tee "$GITHUB_STEP_SUMMARY"
+            exit 0
+          fi
+          gh release create "$tag" --repo "$repo" --prerelease --target "$GITHUB_SHA" \
+            --title "$tag" --notes "Dev build of \${GITHUB_SHA::7}; a dev-channel build is never promoted to stable."
+          gh workflow run "$DEV_WORKFLOW" --repo "$repo" --ref main -f version="$tag"
+          echo "Dispatched $DEV_WORKFLOW for $tag." | tee "$GITHUB_STEP_SUMMARY"
+
+          # Keep the channel bounded: the newest dev builds stay, the rest go.
+          gh api --paginate --slurp "repos/$repo/releases?per_page=100" | jq -r '
+            [ .[] | select(.draft == false and .prerelease == true)
+              | select(.tag_name | test("^v[0-9]+[.][0-9]+[.][0-9]+-dev[.][0-9]+$")) ]
+            | sort_by(.created_at) | reverse | .[3:] | .[].tag_name' | while read -r stale; do
+            echo "Pruning $stale."
+            gh release delete "$stale" --repo "$repo" --yes --cleanup-tag
+          done
+`
+
+/**
+ * Render the dev channel workflow for a repository, or null when the
+ * repository has not opted in.
+ *
+ * @param {Record<string, string>} config
+ * @returns {string | null}
+ */
+export function renderDevChannel(config) {
+  if (configured(config.release_batching_dev_channel, 'false') !== 'true') return null
+  return DEV_CHANNEL_TEMPLATE.replaceAll(
+    '__DEV_WORKFLOW__',
+    config.release_batching_dev_workflow ?? ''
+  )
+}
+
 /**
  * @param {string} content
  * @param {Record<string,string>} config