code-foundry 1.48.3 → 1.48.5

package/.github/code-foundry.schema.json

@@ -0,0 +1,13 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "Code Foundry configuration",
+  "type": "object",
+  "properties": {
+    "formatter": {
+      "description": "Explicit JavaScript formatter. Omit to preserve repository scripts and the Oxfmt fallback.",
+      "type": "string",
+      "enum": ["oxfmt", "prettier", "bun"]
+    }
+  },
+  "additionalProperties": true
+}

package/.github/workflows/cloudflare-delivery.yml

@@ -48,7 +48,7 @@ on:
       bun-version:
         required: false
         type: string
-        default: '1.4.0'
+        default: '1.4.4'
       wrangler-version:
         description: 'local uses the locked workspace installation; otherwise specify an exact version.'
         required: false

package/.github/workflows/cloudflare-deploy.yml

@@ -38,7 +38,7 @@ on:
       bun-version:
         required: false
         type: string
-        default: '1.4.0'
+        default: '1.4.4'
       runner:
         required: false
         type: string

package/.github/workflows/release.yml

@@ -802,7 +802,7 @@ jobs:
         # fail with `bun: command not found` before publish.
         uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2
         with:
-          bun-version: latest
+          bun-version: 1.4.4
       - name: Enable Corepack (pnpm/yarn managers)
         run: corepack enable
       - name: Install dependencies

package/.github/workflows/security.yml

@@ -311,7 +311,7 @@ jobs:
           steps.audit-toolchain.outputs.package_manager == 'bun'
         uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2
         with:
-          bun-version: 1.4.3
+          bun-version: 1.4.4
       - name: Enable Corepack
         if: >-
           matrix.entry.language == 'javascript' &&

package/.github/workflows/validation-billing.yml

@@ -352,122 +352,121 @@ jobs:
             id: integration_execute
             if: ${{ !cancelled() && inputs.mode == 'audit' && steps.integration_applicability.outputs.applicable == 'true' && steps.integration_applicability.outputs.affected != 'false' }}
             run: node "$RUNNER_TEMP/code-foundry/src/runtime.mjs" ci integration
-      # Receipts are independent artifact uploads; a second parallel
-      # group joins them instead of serializing 8+ uploads after the
-      # executes.
-      - parallel:
-          - name: Retain format task receipt
-            if: >-
-              always() &&
-              (steps.format_execute.outcome == 'success' || steps.format_execute.outcome == 'failure' ||
-              steps.format_applicability.outputs.applicable == 'false' || steps.format_applicability.outputs.affected == 'false') &&
-              hashFiles('.code-foundry/results/format.json') != ''
-            uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
-            with:
-              name: ${{ inputs.artifact-prefix }}-${{ github.run_id }}-${{ github.run_attempt }}-format
-              path: .code-foundry/results/format.json
-              include-hidden-files: true
-              if-no-files-found: error
-              retention-days: 14
-          - name: Retain build task receipt
-            if: >-
-              always() &&
-              (steps.build_execute.outcome == 'success' || steps.build_execute.outcome == 'failure' ||
-              steps.build_applicability.outputs.applicable == 'false' || steps.build_applicability.outputs.affected == 'false') &&
-              hashFiles('.code-foundry/results/build.json') != ''
-            uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
-            with:
-              name: ${{ inputs.artifact-prefix }}-${{ github.run_id }}-${{ github.run_attempt }}-build
-              path: .code-foundry/results/build.json
-              include-hidden-files: true
-              if-no-files-found: error
-              retention-days: 14
-          - name: Retain performance task receipt
-            if: >-
-              always() &&
-              inputs.mode == 'audit' &&
-              (steps.performance_execute.outcome == 'success' || steps.performance_execute.outcome == 'failure' ||
-              steps.performance_applicability.outputs.applicable == 'false' || steps.performance_applicability.outputs.affected == 'false') &&
-              hashFiles('.code-foundry/results/performance.json') != ''
-            uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
-            with:
-              name: ${{ inputs.artifact-prefix }}-${{ github.run_id }}-${{ github.run_attempt }}-performance
-              path: .code-foundry/results/performance.json
-              include-hidden-files: true
-              if-no-files-found: error
-              retention-days: 14
-          - name: Upload performance results
-            if: >-
-              always() &&
-              inputs.mode == 'audit' &&
-              steps.performance_applicability.outputs.applicable == 'true' &&
-              hashFiles('artifacts/performance/**', 'performance-results.json', 'performance-results/**') != ''
-            uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
-            with:
-              name: performance-${{ github.run_id }}
-              path: |
-                artifacts/performance/**
-                performance-results.json
-                performance-results/**
-              compression-level: 1
-              if-no-files-found: ignore
-              retention-days: 14
-          - name: Retain smoke task receipt
-            if: >-
-              always() &&
-              inputs.mode == 'audit' &&
-              (steps.smoke_execute.outcome == 'success' || steps.smoke_execute.outcome == 'failure' ||
-              steps.smoke_applicability.outputs.applicable == 'false' || steps.smoke_applicability.outputs.affected == 'false') &&
-              hashFiles('.code-foundry/results/smoke.json') != ''
-            uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
-            with:
-              name: ${{ inputs.artifact-prefix }}-${{ github.run_id }}-${{ github.run_attempt }}-smoke
-              path: .code-foundry/results/smoke.json
-              include-hidden-files: true
-              if-no-files-found: error
-              retention-days: 14
-          - name: Retain eval task receipt
-            if: >-
-              always() &&
-              inputs.mode == 'audit' &&
-              (steps.eval_execute.outcome == 'success' || steps.eval_execute.outcome == 'failure' ||
-              steps.eval_applicability.outputs.applicable == 'false' || steps.eval_applicability.outputs.affected == 'false') &&
-              hashFiles('.code-foundry/results/eval.json') != ''
-            uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
-            with:
-              name: ${{ inputs.artifact-prefix }}-${{ github.run_id }}-${{ github.run_attempt }}-eval
-              path: .code-foundry/results/eval.json
-              include-hidden-files: true
-              if-no-files-found: error
-              retention-days: 14
-          - name: Retain eval report
-            if: >-
-              always() &&
-              inputs.mode == 'audit' &&
-              steps.eval_execute.outcome == 'failure' &&
-              hashFiles('eval-results/result.json') != ''
-            uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
-            with:
-              name: ${{ inputs.artifact-prefix }}-${{ github.run_id }}-${{ github.run_attempt }}-eval-report
-              path: |
-                eval-results/result.json
-                eval-results/summary.json
-              if-no-files-found: error
-              retention-days: 14
-          - name: Retain integration task receipt
-            if: >-
-              always() &&
-              inputs.mode == 'audit' &&
-              (steps.integration_execute.outcome == 'success' || steps.integration_execute.outcome == 'failure' ||
-              steps.integration_applicability.outputs.applicable == 'false' || steps.integration_applicability.outputs.affected == 'false') &&
-              hashFiles('.code-foundry/results/integration.json') != ''
-            uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
-            with:
-              name: ${{ inputs.artifact-prefix }}-${{ github.run_id }}-${{ github.run_attempt }}-integration
-              path: .code-foundry/results/integration.json
-              include-hidden-files: true
-              if-no-files-found: error
-              retention-days: 14
+      # Upload only after execution joins, and keep uploads sequential: the
+      # runner rewrites GITHUB_EVENT_PATH for each action, racing the event
+      # JSON read in upload-artifact's context initialization (runner#4641).
+      - name: Retain format task receipt
+        if: >-
+          always() &&
+          (steps.format_execute.outcome == 'success' || steps.format_execute.outcome == 'failure' ||
+          steps.format_applicability.outputs.applicable == 'false' || steps.format_applicability.outputs.affected == 'false') &&
+          hashFiles('.code-foundry/results/format.json') != ''
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        with:
+          name: ${{ inputs.artifact-prefix }}-${{ github.run_id }}-${{ github.run_attempt }}-format
+          path: .code-foundry/results/format.json
+          include-hidden-files: true
+          if-no-files-found: error
+          retention-days: 14
+      - name: Retain build task receipt
+        if: >-
+          always() &&
+          (steps.build_execute.outcome == 'success' || steps.build_execute.outcome == 'failure' ||
+          steps.build_applicability.outputs.applicable == 'false' || steps.build_applicability.outputs.affected == 'false') &&
+          hashFiles('.code-foundry/results/build.json') != ''
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        with:
+          name: ${{ inputs.artifact-prefix }}-${{ github.run_id }}-${{ github.run_attempt }}-build
+          path: .code-foundry/results/build.json
+          include-hidden-files: true
+          if-no-files-found: error
+          retention-days: 14
+      - name: Retain performance task receipt
+        if: >-
+          always() &&
+          inputs.mode == 'audit' &&
+          (steps.performance_execute.outcome == 'success' || steps.performance_execute.outcome == 'failure' ||
+          steps.performance_applicability.outputs.applicable == 'false' || steps.performance_applicability.outputs.affected == 'false') &&
+          hashFiles('.code-foundry/results/performance.json') != ''
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        with:
+          name: ${{ inputs.artifact-prefix }}-${{ github.run_id }}-${{ github.run_attempt }}-performance
+          path: .code-foundry/results/performance.json
+          include-hidden-files: true
+          if-no-files-found: error
+          retention-days: 14
+      - name: Upload performance results
+        if: >-
+          always() &&
+          inputs.mode == 'audit' &&
+          steps.performance_applicability.outputs.applicable == 'true' &&
+          hashFiles('artifacts/performance/**', 'performance-results.json', 'performance-results/**') != ''
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        with:
+          name: performance-${{ github.run_id }}
+          path: |
+            artifacts/performance/**
+            performance-results.json
+            performance-results/**
+          compression-level: 1
+          if-no-files-found: ignore
+          retention-days: 14
+      - name: Retain smoke task receipt
+        if: >-
+          always() &&
+          inputs.mode == 'audit' &&
+          (steps.smoke_execute.outcome == 'success' || steps.smoke_execute.outcome == 'failure' ||
+          steps.smoke_applicability.outputs.applicable == 'false' || steps.smoke_applicability.outputs.affected == 'false') &&
+          hashFiles('.code-foundry/results/smoke.json') != ''
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        with:
+          name: ${{ inputs.artifact-prefix }}-${{ github.run_id }}-${{ github.run_attempt }}-smoke
+          path: .code-foundry/results/smoke.json
+          include-hidden-files: true
+          if-no-files-found: error
+          retention-days: 14
+      - name: Retain eval task receipt
+        if: >-
+          always() &&
+          inputs.mode == 'audit' &&
+          (steps.eval_execute.outcome == 'success' || steps.eval_execute.outcome == 'failure' ||
+          steps.eval_applicability.outputs.applicable == 'false' || steps.eval_applicability.outputs.affected == 'false') &&
+          hashFiles('.code-foundry/results/eval.json') != ''
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        with:
+          name: ${{ inputs.artifact-prefix }}-${{ github.run_id }}-${{ github.run_attempt }}-eval
+          path: .code-foundry/results/eval.json
+          include-hidden-files: true
+          if-no-files-found: error
+          retention-days: 14
+      - name: Retain eval report
+        if: >-
+          always() &&
+          inputs.mode == 'audit' &&
+          steps.eval_execute.outcome == 'failure' &&
+          hashFiles('eval-results/result.json') != ''
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        with:
+          name: ${{ inputs.artifact-prefix }}-${{ github.run_id }}-${{ github.run_attempt }}-eval-report
+          path: |
+            eval-results/result.json
+            eval-results/summary.json
+          if-no-files-found: error
+          retention-days: 14
+      - name: Retain integration task receipt
+        if: >-
+          always() &&
+          inputs.mode == 'audit' &&
+          (steps.integration_execute.outcome == 'success' || steps.integration_execute.outcome == 'failure' ||
+          steps.integration_applicability.outputs.applicable == 'false' || steps.integration_applicability.outputs.affected == 'false') &&
+          hashFiles('.code-foundry/results/integration.json') != ''
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        with:
+          name: ${{ inputs.artifact-prefix }}-${{ github.run_id }}-${{ github.run_attempt }}-integration
+          path: .code-foundry/results/integration.json
+          include-hidden-files: true
+          if-no-files-found: error
+          retention-days: 14
 
       - name: Save Vite+ task cache
         uses: ./.github/actions/vite-plus-cache-save
@@ -950,7 +949,7 @@ jobs:
           steps.audit-toolchain.outputs.package_manager == 'bun'
         uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2
         with:
-          bun-version: 1.4.3
+          bun-version: 1.4.4
       - name: Enable Corepack
         if: >-
           steps.profile.outputs.javascript == 'true' &&

package/.mise.toml

@@ -1,6 +1,6 @@
 [tools]
 node = "24.18.0"
-bun = "1.4.3"
+bun = "1.4.4"
 
 [settings]
 experimental = true

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # Changelog
 
+## [1.48.5](https://github.com/0xPlayerOne/code-foundry/compare/v1.48.4...v1.48.5) (2026-10-22)
+
+
+### Bug Fixes
+
+* **ci:** serialize billing receipt and report uploads ([#773](https://github.com/0xPlayerOne/code-foundry/issues/773)) ([6497225](https://github.com/0xPlayerOne/code-foundry/commit/6497225bf2d672380b6b5231378b424dffb8afbb))
+
+## [1.48.4](https://github.com/0xPlayerOne/code-foundry/compare/v1.48.3...v1.48.4) (2026-10-22)
+
+
+### Maintenance
+
+* bun-1.4.4-cloud ([#771](https://github.com/0xPlayerOne/code-foundry/issues/771)) ([c99f0ed](https://github.com/0xPlayerOne/code-foundry/commit/c99f0ed8b66129f3b599326bc67d900719b921f4))
+
 ## [1.48.3](https://github.com/0xPlayerOne/code-foundry/compare/v1.48.2...v1.48.3) (2026-10-17)
 
 
@@ -126,23 +140,9 @@
 
 * **billing:** emit the codeql input as a YAML boolean ([#735](https://github.com/0xPlayerOne/code-foundry/issues/735)) ([e0b348c](https://github.com/0xPlayerOne/code-foundry/commit/e0b348c9a3c730e46210fe0b9dc46af49c9db605))
 
-## [1.45.1](https://github.com/0xPlayerOne/code-foundry/compare/v1.45.0...v1.45.1) (2026-10-06)
-
-
-### Bug Fixes
-
-* **billing:** declare the runner inputs the callers always forward ([#733](https://github.com/0xPlayerOne/code-foundry/issues/733)) ([f7a29cb](https://github.com/0xPlayerOne/code-foundry/commit/f7a29cb6dbc9a8695a9bef9e85ccce82aa9c84db))
-
-## [1.45.0](https://github.com/0xPlayerOne/code-foundry/compare/v1.44.11...v1.45.0) (2026-10-06)
-
-
-### Features
-
-* add a merged-lane billing orchestrator for minute-billed consumers ([#731](https://github.com/0xPlayerOne/code-foundry/issues/731)) ([a91402e](https://github.com/0xPlayerOne/code-foundry/commit/a91402e701f458ece0d2ea4715f9586a06b15108))
-
 <!-- code-foundry: packaged changelog -->
 
 ---
 
-This packaged changelog lists the 20 most recent releases; 251 older releases are omitted to keep the package small.
+This packaged changelog lists the 20 most recent releases; 253 older releases are omitted to keep the package small.
 See the [full changelog](https://github.com/0xPlayerOne/code-foundry/blob/main/CHANGELOG.md) for the complete history.

package/docs/CONFIGURATION.md

@@ -1,5 +1,43 @@
 # Configuration reference
 
+## JavaScript formatter
+
+Set `formatter: oxfmt`, `formatter: prettier`, or `formatter: bun` in
+`.github/code-foundry.yml` to select the formatter explicitly. The shipped
+`.github/code-foundry.schema.json` describes this enum; sync, doctor, task
+discovery and execution reject unknown choices. With no key, existing package
+format scripts retain precedence and the existing Oxfmt fallback is unchanged.
+Current application repositories continue to use Oxfmt.
+
+An explicit choice controls the format gate without changing lint, type-check,
+test or build scripts. Sync retains repository-owned Prettier configuration
+for Prettier/Bun choices, and only installs/migrates the Oxfmt baseline for
+Oxfmt. It does not install packages or rewrite dependency lockfiles: install
+the selected Prettier/Oxfmt dependency using the repository's package manager,
+or install official Bun 1.4.4 for the Bun choice.
+
+`code-foundry format --check` checks the selected formatter; omit `--check`
+to write. Bun opt-in also supports `code-foundry format --staged` and
+`code-foundry format --changed REF`, with optional `--check`. These invoke
+`bun fmt --no-script --staged` and `bun fmt --no-script --changed=REF`.
+The scopes are mutually exclusive and fail for other formatters. Changed mode
+does not stage files. Staged write mode restages formatted files and refuses
+partially staged files before running Bun, protecting intentionally unstaged
+edits. The commit gate uses check-only staged formatting and continues its
+independent staged lint, type-check, Python and Rust checks.
+
+For Bun opt-in, a hook can replace its **formatter-only** lint-staged operation
+with `code-foundry format --staged`. Retain every other lint-staged lint/test
+command and any hook ordering. Remove the lint-staged dependency only when no
+remaining command needs it, and regenerate the dependency lockfile normally.
+Sync never removes lint-staged, its configuration or other hook operations
+automatically. Oxfmt/Prettier consumers retain them unchanged.
+
+Type-check-only native fallbacks use `bun check --no-script -p tsconfig.json`
+on Bun 1.4.4. Repository scripts remain authoritative, including framework
+checks and declaration-emitting builds. Bun's checker emits no files; it must
+not replace a `tsc` build that emits declarations or other compiler output.
+
 Code Foundry has one repository-owned control plane:
 `.github/code-foundry.yml`. `init` creates it, `sync` renders the selected
 baseline, and `doctor` checks local and GitHub-facing prerequisites.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "code-foundry",
-  "version": "1.48.3",
+  "version": "1.48.5",
   "description": "A fast, language-aware repository factory for agent-ready workflows, testing, security, and release automation.",
   "homepage": "https://github.com/0xPlayerOne/code-foundry#readme",
   "bugs": {
@@ -47,7 +47,7 @@
     "performance:check": "node scripts/performance-check.mjs",
     "test": "node --test",
     "test:unit": "node --test",
-    "type-check": "tsc --project jsconfig.json",
+    "type-check": "bun check --no-script -p jsconfig.json",
     "pack:check": "npm pack --dry-run",
     "prepublishOnly": "npm test && npm run pack:check"
   },
@@ -60,5 +60,5 @@
   "engines": {
     "node": ">=24"
   },
-  "packageManager": "bun@1.4.3"
+  "packageManager": "bun@1.4.4"
 }

package/src/cli.mjs

@@ -16,6 +16,7 @@ Usage:
   npx code-foundry init [--target PATH]
   npx code-foundry sync [--target PATH]
   npx code-foundry doctor [--target PATH]
+  npx code-foundry format [--target PATH] [--check] [--staged | --changed REF]
   npx code-foundry plan [--target PATH] [--tier fast|audit] [--changed] [--base REF] [--json]
   npx code-foundry check [--target PATH] [--tier fast|audit] [--changed] [--base REF] [--timeout SECONDS] [--json]
   npx code-foundry affected [--target PATH] [--base REF] [--head REF] [--tool auto|turbo|vite-plus]
@@ -179,6 +180,19 @@ function parseArgs(argv) {
 }
 
 async function main() {
+  if (process.argv[2] === 'format') {
+    if (process.argv.slice(3).some((arg) => arg === '--help' || arg === '-h')) {
+      console.log('Usage: code-foundry format [--target PATH] [--check] [--staged | --changed REF]')
+      return
+    }
+    try {
+      const { formatCommand } = await import('./commands/format.mjs')
+      process.exitCode = formatCommand(process.argv.slice(3))
+    } catch (error) {
+      fail(error instanceof Error ? error.message : String(error))
+    }
+    return
+  }
   if (['plan', 'check'].includes(process.argv[2])) {
     const { agentCommand } = await import('./commands/agent-check.mjs')
     process.exitCode = agentCommand(process.argv.slice(2))

package/src/commands/doctor.mjs

@@ -8,6 +8,7 @@ import { recommendRunners, resolveMonorepoTool, resolveProfile } from '../lib/pr
 import { packageManagerForLockfile } from '../lib/lockfiles.mjs'
 import { doctorGithub } from '../lib/github-doctor.mjs'
 import { isGeneratedEventCaller } from './sync.mjs'
+import { formatterChoice } from '../lib/formatter.mjs'
 
 /** @param {string} message */
 function warn(message) {
@@ -28,6 +29,11 @@ export function doctor(root, options = {}) {
   }
 
   const toolchain = config.toolchain ?? 'auto'
+  try {
+    formatterChoice(config.formatter)
+  } catch (cause) {
+    error(cause instanceof Error ? cause.message : String(cause))
+  }
   if (!['auto', 'native', 'mise'].includes(toolchain)) error(`unsupported toolchain: ${toolchain}`)
   if (toolchain === 'mise' && !existsSync(join(target, '.mise.toml')))
     error('.mise.toml is required when toolchain: mise')
@@ -237,7 +243,7 @@ export function doctor(root, options = {}) {
       error('validation caller registers draft-time checks; run code-foundry sync.')
     }
     if (
-      !/uses:\s+(?:\.\/\.github\/workflows\/validation(?:-no-codeql)?\.yml|\S+\/\.github\/workflows\/validation(?:-no-codeql)?\.yml@)/.test(
+      !/uses:\s+(?:\.\/\.github\/workflows\/validation(?:-no-codeql|-billing)?\.yml|\S+\/\.github\/workflows\/validation(?:-no-codeql|-billing)?\.yml@)/.test(
         caller
       )
     ) {

package/src/commands/format.mjs

@@ -0,0 +1,44 @@
+// @ts-check
+
+import { resolve } from 'node:path'
+import { spawnSync } from 'node:child_process'
+import { readConfig } from '../lib/config.mjs'
+import { formatterCommand } from '../lib/formatter.mjs'
+
+/** @param {string[]} argv */
+export function formatCommand(argv) {
+  let target = process.cwd()
+  let check = false
+  let staged = false
+  /** @type {string|undefined} */
+  let changed
+  while (argv.length) {
+    const arg = argv.shift()
+    if (arg === '--target') target = argv.shift() || ''
+    else if (arg === '--check') check = true
+    else if (arg === '--staged') staged = true
+    else if (arg === '--changed') changed = argv.shift() || ''
+    else throw new Error(`Unknown format option: ${arg}`)
+  }
+  if (!target || target.startsWith('-')) throw new Error('--target requires a path')
+  target = resolve(target)
+  const config = readConfig(resolve(target, '.github/code-foundry.yml'))
+  const [tool, ...args] = formatterCommand(config.formatter, { check, staged, changed })
+  if (staged && !check) {
+    // Bun restages working-tree contents. Refuse partial staging rather than
+    // silently including edits that the caller deliberately left out.
+    /** @param {string[]} diffArgs */
+    const paths = (diffArgs) => {
+      const result = spawnSync('git', diffArgs, { cwd: target, encoding: 'utf8' })
+      if (result.status !== 0) throw new Error('Cannot inspect staged formatter changes')
+      return result.stdout.split('\0').filter(Boolean)
+    }
+    const index = new Set(paths(['diff', '--cached', '--name-only', '-z']))
+    if (paths(['diff', '--name-only', '-z']).some((file) => index.has(file)))
+      throw new Error('Partially staged files: format and stage those files explicitly first')
+  }
+  const command = tool === 'bun' ? [tool, ...args] : ['npx', '--no-install', tool, ...args]
+  const result = spawnSync(command[0], command.slice(1), { cwd: target, stdio: 'inherit' })
+  if (result.error) throw result.error
+  return result.status ?? 1
+}

package/src/commands/sync.mjs

@@ -27,6 +27,7 @@ import {
 } from '../lib/config.mjs'
 import { buildReleaseConfig, buildReleaseManifest } from '../lib/release-manifest.mjs'
 import { customWorkflowFiles, overlayPolicy } from '../lib/overlay.mjs'
+import { formatterChoice } from '../lib/formatter.mjs'
 import {
   inspectQueueCaller,
   mergeQueueEnabled,
@@ -54,6 +55,7 @@ const standardFiles = [
   '.github/PULL_REQUEST_TEMPLATE.md',
   '.github/SECURITY.md',
   '.github/dependabot.yml',
+  '.github/code-foundry.schema.json',
   '.github/ISSUE_TEMPLATE/bug_report.yml',
   '.github/ISSUE_TEMPLATE/config.yml',
   '.github/ISSUE_TEMPLATE/feature_request.yml',
@@ -153,6 +155,7 @@ function synchronize(options) {
   }
   const defaults = createDefaultConfig(target, source, existingConfig.git_workflow)
   let config = { ...defaults, ...existingConfig }
+  formatterChoice(config.formatter)
   const workflow = gitWorkflow(config.git_workflow)
   if (!['direct', 'staging-release'].includes(workflow)) {
     throw new Error(`Unsupported git_workflow: ${workflow}; use direct or staging-release.`)
@@ -514,7 +517,7 @@ function synchronize(options) {
       else rmSync(join(target, file), { force: true })
     }
   }
-  if (includesValue(languages, 'typescript')) {
+  if (includesValue(languages, 'typescript') && formatterChoice(config.formatter) === 'oxfmt') {
     // The Oxfmt baseline supersedes .prettierrc/.prettierignore. Entries the
     // consumer added beyond the baseline survive the migration inside the
     // .oxfmtrc.json ignorePatterns list.
@@ -543,7 +546,7 @@ function synchronize(options) {
       changed,
       dryRun
     )
-  } else {
+  } else if (!includesValue(languages, 'typescript')) {
     for (const file of ['.prettierrc', '.prettierignore']) {
       if (existsSync(join(target, file))) {
         changed.push(file)
@@ -690,9 +693,11 @@ function renderReleaseConfig(target, sourceFile, config) {
 
 /** @param {string} file @param {string} languages @param {string} features @param {Record<string, string>} config */
 function shouldInclude(file, languages, features, config) {
+  if (file === '.github/code-foundry.schema.json') return includesValue(languages, 'typescript')
   if (file === 'ruff.toml') return includesValue(languages, 'python')
-  if (file === '.oxfmtrc.json' || file === '.oxlintrc.json')
-    return includesValue(languages, 'typescript')
+  if (file === '.oxfmtrc.json')
+    return includesValue(languages, 'typescript') && formatterChoice(config.formatter) === 'oxfmt'
+  if (file === '.oxlintrc.json') return includesValue(languages, 'typescript')
   if (file === '.github/dependabot.yml')
     return (
       configured(config.dependency_updater, 'dependabot') === 'dependabot' &&

package/src/lib/formatter.mjs

@@ -0,0 +1,32 @@
+// @ts-check
+
+/** Explicit formatter choices. An absent key preserves repository-script precedence. */
+export const FORMATTERS = Object.freeze(['oxfmt', 'prettier', 'bun'])
+
+/** @param {string|undefined} value */
+export function formatterChoice(value) {
+  const choice = value || 'oxfmt'
+  if (!FORMATTERS.includes(choice))
+    throw new Error(`Unsupported formatter: ${choice}; use oxfmt, prettier, or bun.`)
+  return choice
+}
+
+/** @param {string|undefined} value @param {{check?: boolean, staged?: boolean, changed?: string, files?: string[]}} [options] */
+export function formatterCommand(value, options = {}) {
+  const choice = formatterChoice(value)
+  const { check = true, staged = false, changed, files = ['.'] } = options
+  if (staged && changed !== undefined) throw new Error('--staged and --changed are exclusive')
+  if ((staged || changed !== undefined) && choice !== 'bun')
+    throw new Error('--staged and --changed require formatter: bun')
+  if (changed !== undefined && (!changed.trim() || changed.startsWith('-')))
+    throw new Error('--changed requires a Git branch or commit')
+  if (choice === 'bun')
+    return [
+      'bun',
+      'fmt',
+      '--no-script',
+      ...(check ? ['--check'] : []),
+      ...(staged ? ['--staged'] : changed !== undefined ? [`--changed=${changed}`] : files),
+    ]
+  return [choice, ...(check ? ['--check'] : ['--write']), ...files]
+}

package/src/lib/pre-commit.mjs

@@ -20,7 +20,8 @@ const LINTABLE = /\.(?:[cm]?[jt]sx?|vue|svelte|astro)$/i
 const TYPED = /\.(?:ts|tsx|mts|cts)$|(?:^|\/)tsconfig[^/]*\.json$/i
 /** JavaScript sources, type-checked only when the repository opts in with a root jsconfig. */
 const JAVASCRIPT = /\.(?:js|jsx|mjs|cjs)$|(?:^|\/)jsconfig[^/]*\.json$/i
-const FORMAT_CONFIG = /^(?:\.oxfmtrc\.jsonc?|oxfmt\.config\.[^/]+|\.prettierignore)$/
+const FORMAT_CONFIG =
+  /^(?:\.oxfmtrc\.jsonc?|oxfmt\.config\.[^/]+|\.prettierrc(?:\.[^/]+)?|prettier\.config\.[^/]+|\.prettierignore|bunfig\.toml|\.github\/code-foundry\.yml)$/
 const LINT_CONFIG = /^(?:\.oxlintrc\.json|oxlint\.config\.[^/]+)$/
 const PYTHON = /\.pyi?$/i
 const PYTHON_CONFIG =

package/src/lib/task-policy.mjs

@@ -5,6 +5,7 @@ import { spawnSync } from 'node:child_process'
 import { isAbsolute, relative, resolve, sep } from 'node:path'
 import { createHash } from 'node:crypto'
 import { listValue, readConfig } from './config.mjs'
+import { formatterChoice } from './formatter.mjs'
 
 export const TASKS = Object.freeze([
   'format',
@@ -36,6 +37,7 @@ export const TASK_SCRIPTS = Object.freeze({
 /** @param {string} root */
 export function readTaskPolicy(root) {
   const config = readConfig(resolve(root, '.github/code-foundry.yml'))
+  formatterChoice(config.formatter)
   const required = listValue(config.required_capabilities ?? '')
   for (const capability of required) {
     if (![...TASKS, 'coverage'].includes(capability))
@@ -114,7 +116,9 @@ export function describeTask(root, task, profile) {
       rust ||
       (['format', 'lint'].includes(task) && python) ||
       (task === 'type_check' && existsSync(resolve(root, 'tsconfig.json'))) ||
-      (js && task === 'format' && hasNativeToolSetup(root, pkg, 'oxfmt')) ||
+      (js &&
+        task === 'format' &&
+        (Boolean(policy.config.formatter) || hasNativeToolSetup(root, pkg, 'oxfmt'))) ||
       (js && task === 'lint' && hasNativeToolSetup(root, pkg, 'oxlint'))
     if (!native) {
       applicable = false

package/src/runtime-core.mjs

@@ -28,6 +28,7 @@ import {
   freshCloneBuildHint,
 } from './lib/pre-commit.mjs'
 import { runNodePackagePerformance } from './lib/node-package-performance.mjs'
+import { formatterChoice, formatterCommand } from './lib/formatter.mjs'
 import {
   EVAL_BUDGET_FILE_DEFAULT,
   EVAL_REPORT_FILE,
@@ -38,6 +39,7 @@ import {
 
 const root = process.cwd()
 const config = readConfig(resolve(root, '.github/code-foundry.yml'))
+formatterChoice(config.formatter)
 const repoProfile = resolveProfile(root)
 /** @type {string[]} */
 const languages = configured(config.languages, repoProfile.languages).split(',').filter(Boolean)
@@ -737,7 +739,8 @@ function ci(task) {
     return
   }
   if (task === 'format') {
-    const scripted = runScript(['format:check', 'format', 'fmt'])
+    if (config.formatter && hasRootJavascriptProject()) runSelectedFormatter()
+    const scripted = config.formatter || runScript(['format:check', 'format', 'fmt'])
     if (
       !scripted &&
       (hasLanguage('typescript') || hasLanguage('javascript')) &&
@@ -774,7 +777,8 @@ function ci(task) {
   }
   if (task === 'type_check') {
     const scripted = runScript(['type-check', 'typecheck', 'type:check'])
-    if (!scripted && existsSync(resolve(root, 'tsconfig.json'))) runTool('tsc', ['--noEmit'])
+    if (!scripted && existsSync(resolve(root, 'tsconfig.json')))
+      run('bun', ['check', '--no-script', '-p', 'tsconfig.json'])
     if (hasLanguage('rust') && hasRootRustProject()) run('cargo', ['check', '--all-targets'])
     return
   }
@@ -1189,6 +1193,13 @@ function runToolOnFiles(tool, args, files) {
   for (const chunk of chunkFiles(files)) runTool(tool, [...args, ...chunk])
 }
 
+/** @param {{staged?: boolean, files?: string[]}} [options] */
+function runSelectedFormatter(options = {}) {
+  const [tool, ...args] = formatterCommand(config.formatter, options)
+  if (tool === 'bun') run(tool, args)
+  else runTool(tool, args)
+}
+
 /**
  * The local commit gate.
  *
@@ -1221,7 +1232,15 @@ export function preCommit() {
   const js = (hasLanguage('typescript') || hasLanguage('javascript')) && hasRootJavascriptProject()
 
   if (js && (plan.formatAll || plan.formatFiles.length)) {
-    if (plan.formatAll) {
+    if (config.formatter) {
+      runSelectedFormatter(
+        plan.formatAll
+          ? {}
+          : config.formatter === 'bun'
+            ? { staged: true }
+            : { files: plan.formatFiles }
+      )
+    } else if (plan.formatAll) {
       if (!runScript(['format:check', 'format', 'fmt']) && hasOxfmtSetup())
         runTool('oxfmt', ['--check', '.'])
     } else if (hasOxfmtSetup()) {
@@ -1265,7 +1284,7 @@ export function preCommit() {
       onFailure: buildHint,
     })
     if (!scripted && existsSync(resolve(root, 'tsconfig.json')))
-      runTool('tsc', ['--noEmit'], { onFailure: buildHint })
+      run('bun', ['check', '--no-script', '-p', 'tsconfig.json'], { onFailure: buildHint })
   }
   if (plan.rust) {
     run('cargo', ['fmt', '--check'])