code-foundry 1.53.2 → 1.53.4

package/.github/workflows/ci.yml

@@ -129,8 +129,8 @@ jobs:
           if-no-files-found: error
           retention-days: 14
 
-      - name: Save Vite+ task cache
-        uses: ./.github/actions/vite-plus-cache-save
+      - name: Save task caches
+        uses: ./.github/actions/cache-save
 
   lint:
     name: Lint
@@ -193,8 +193,8 @@ jobs:
           if-no-files-found: error
           retention-days: 14
 
-      - name: Save Vite+ task cache
-        uses: ./.github/actions/vite-plus-cache-save
+      - name: Save task caches
+        uses: ./.github/actions/cache-save
 
   type-check:
     name: Type-Check
@@ -262,8 +262,8 @@ jobs:
           if-no-files-found: error
           retention-days: 14
 
-      - name: Save Vite+ task cache
-        uses: ./.github/actions/vite-plus-cache-save
+      - name: Save task caches
+        uses: ./.github/actions/cache-save
 
   build:
     name: Build
@@ -357,5 +357,5 @@ jobs:
           if-no-files-found: error
           retention-days: 14
 
-      - name: Save Vite+ task cache
-        uses: ./.github/actions/vite-plus-cache-save
+      - name: Save task caches
+        uses: ./.github/actions/cache-save

package/.github/workflows/eval.yml

@@ -125,5 +125,5 @@ jobs:
           if-no-files-found: error
           retention-days: 14
 
-      - name: Save Vite+ task cache
-        uses: ./.github/actions/vite-plus-cache-save
+      - name: Save task caches
+        uses: ./.github/actions/cache-save

package/.github/workflows/test.yml

@@ -166,8 +166,8 @@ jobs:
           if-no-files-found: ignore
           retention-days: 14
 
-      - name: Save Vite+ task cache
-        uses: ./.github/actions/vite-plus-cache-save
+      - name: Save task caches
+        uses: ./.github/actions/cache-save
 
   performance:
     name: Performance
@@ -255,8 +255,8 @@ jobs:
           if-no-files-found: ignore
           retention-days: 14
 
-      - name: Save Vite+ task cache
-        uses: ./.github/actions/vite-plus-cache-save
+      - name: Save task caches
+        uses: ./.github/actions/cache-save
 
   integration:
     name: Integration
@@ -332,8 +332,8 @@ jobs:
           if-no-files-found: error
           retention-days: 14
 
-      - name: Save Vite+ task cache
-        uses: ./.github/actions/vite-plus-cache-save
+      - name: Save task caches
+        uses: ./.github/actions/cache-save
 
   integration-sharded:
     name: Integration shard
@@ -412,8 +412,8 @@ jobs:
           if-no-files-found: error
           retention-days: 14
 
-      - name: Save Vite+ task cache
-        uses: ./.github/actions/vite-plus-cache-save
+      - name: Save task caches
+        uses: ./.github/actions/cache-save
 
   e2e:
     name: E2E
@@ -464,6 +464,7 @@ jobs:
         if: steps.applicability.outputs.applicable == 'true' && steps.applicability.outputs.affected != 'false' && steps.applicability.outputs.browser == 'true'
         uses: ./.github/actions/cache
         with:
+          id: e2e-browsers
           save: ${{ github.event_name == 'push' }}
           path: |
             ~/.cache/ms-playwright
@@ -508,8 +509,8 @@ jobs:
           if-no-files-found: error
           retention-days: 14
 
-      - name: Save Vite+ task cache
-        uses: ./.github/actions/vite-plus-cache-save
+      - name: Save task caches
+        uses: ./.github/actions/cache-save
 
   smoke:
     name: Smoke
@@ -581,5 +582,5 @@ jobs:
           if-no-files-found: error
           retention-days: 14
 
-      - name: Save Vite+ task cache
-        uses: ./.github/actions/vite-plus-cache-save
+      - name: Save task caches
+        uses: ./.github/actions/cache-save

package/.github/workflows/validation-billing.yml

@@ -543,8 +543,8 @@ jobs:
           if-no-files-found: error
           retention-days: 14
 
-      - name: Save Vite+ task cache
-        uses: ./.github/actions/vite-plus-cache-save
+      - name: Save task caches
+        uses: ./.github/actions/cache-save
 
   lint:
     name: Lint
@@ -614,8 +614,8 @@ jobs:
           if-no-files-found: error
           retention-days: 14
 
-      - name: Save Vite+ task cache
-        uses: ./.github/actions/vite-plus-cache-save
+      - name: Save task caches
+        uses: ./.github/actions/cache-save
 
   type-check:
     name: Type-Check
@@ -686,8 +686,8 @@ jobs:
           if-no-files-found: error
           retention-days: 14
 
-      - name: Save Vite+ task cache
-        uses: ./.github/actions/vite-plus-cache-save
+      - name: Save task caches
+        uses: ./.github/actions/cache-save
 
   unit:
     name: Unit
@@ -782,8 +782,8 @@ jobs:
           if-no-files-found: ignore
           retention-days: 14
 
-      - name: Save Vite+ task cache
-        uses: ./.github/actions/vite-plus-cache-save
+      - name: Save task caches
+        uses: ./.github/actions/cache-save
 
   e2e:
     name: E2E
@@ -838,6 +838,7 @@ jobs:
         if: steps.applicability.outputs.applicable == 'true' && steps.applicability.outputs.affected != 'false' && steps.applicability.outputs.browser == 'true'
         uses: ./.github/actions/cache
         with:
+          id: e2e-browsers
           save: ${{ github.event_name == 'push' }}
           path: |
             ~/.cache/ms-playwright
@@ -882,8 +883,8 @@ jobs:
           if-no-files-found: error
           retention-days: 14
 
-      - name: Save Vite+ task cache
-        uses: ./.github/actions/vite-plus-cache-save
+      - name: Save task caches
+        uses: ./.github/actions/cache-save
 
   # Profile and dependency audit merged into one job. The split orchestrators
   # run a profile job that feeds an audit matrix; here the language blocks run

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # Changelog
 
+## [1.53.4](https://github.com/0xPlayerOne/code-foundry/compare/v1.53.3...v1.53.4) (2026-10-30)
+
+
+### Performance
+
+* **ci:** run mixed unit runners concurrently ([#821](https://github.com/0xPlayerOne/code-foundry/issues/821)) ([dac0d93](https://github.com/0xPlayerOne/code-foundry/commit/dac0d9313cc2fc6309e0f55aa45274e3dbbff767))
+
+## [1.53.3](https://github.com/0xPlayerOne/code-foundry/compare/v1.53.2...v1.53.3) (2026-10-30)
+
+
+### Bug Fixes
+
+* save repository caches through an explicit save action ([#819](https://github.com/0xPlayerOne/code-foundry/issues/819)) ([a21f1d0](https://github.com/0xPlayerOne/code-foundry/commit/a21f1d0c153e14252bc784f301379029026121da))
+
 ## [1.53.2](https://github.com/0xPlayerOne/code-foundry/compare/v1.53.1...v1.53.2) (2026-10-30)
 
 
@@ -136,23 +150,9 @@
 
 * **release:** hydrate audit blobs and refresh changing PR state ([#779](https://github.com/0xPlayerOne/code-foundry/issues/779)) ([8734ed7](https://github.com/0xPlayerOne/code-foundry/commit/8734ed77d159818cd5ff613f40a5dab796789d8a))
 
-## [1.48.7](https://github.com/0xPlayerOne/code-foundry/compare/v1.48.6...v1.48.7) (2026-10-23)
-
-
-### Bug Fixes
-
-* **release:** sync bun.lock workspace versions on generated release PRs ([#777](https://github.com/0xPlayerOne/code-foundry/issues/777)) ([b24bfae](https://github.com/0xPlayerOne/code-foundry/commit/b24bfae309ac7003fcc4cd57f79ddc418c27b039))
-
-## [1.48.6](https://github.com/0xPlayerOne/code-foundry/compare/v1.48.5...v1.48.6) (2026-10-23)
-
-
-### Bug Fixes
-
-* **release:** audit generated release content for stale snapshots ([#775](https://github.com/0xPlayerOne/code-foundry/issues/775)) ([f842c27](https://github.com/0xPlayerOne/code-foundry/commit/f842c271e6b270b63a6d9b839795a849237c7a7d))
-
 <!-- code-foundry: packaged changelog -->
 
 ---
 
-This packaged changelog lists the 20 most recent releases; 273 older releases are omitted to keep the package small.
+This packaged changelog lists the 20 most recent releases; 275 older releases are omitted to keep the package small.
 See the [full changelog](https://github.com/0xPlayerOne/code-foundry/blob/main/CHANGELOG.md) for the complete history.

package/docs/CACHING.md

@@ -11,6 +11,13 @@ Repositories should measure before enabling large installed-tree or build
 caches. Set repository variables such as `REPO_FOUNDRY_CACHE_PACKAGES` and
 `REPO_FOUNDRY_CACHE_BUILD` only when a repeatable warm-cache benefit is proven.
 
+These caches are restored on every event and saved on push only, so pull
+requests and scheduled runs cannot poison them. The setup action restores them
+and publishes a save contract; the `.github/actions/cache-save` action at the
+end of each task job saves every published cache that did not restore an exact
+key. Custom workflows that use `.github/actions/setup` must call it after their
+tasks, or nothing is saved.
+
 ## Turborepo and Vercel Remote Caching
 
 Turborepo repositories can opt into Vercel Remote Caching with:
@@ -35,7 +42,8 @@ When opted in, the setup action:
 - restores `node_modules/.vite/task-cache` as its last step, after Install and
   after every step that archives `node_modules` (Install can replace it);
 - publishes a cache path, key, and save-intent contract for the explicit
-  `.github/actions/vite-plus-cache-save` action to use after repository tasks;
+  `.github/actions/cache-save` action, which also saves the repository caches,
+  to use after repository tasks;
 - saves it push-only, so pull requests and scheduled runs cannot poison it;
 - keeps it out of the generic JavaScript build-state archive.
 

package/docs/CONFIGURATION.md

@@ -350,7 +350,7 @@ behavior:
   (not a config key). It controls the local Vite+ task cache only when
   `monorepo_tool: vite-plus` is set.
 - Custom workflows using the setup action must add
-  `.github/actions/vite-plus-cache-save` after task execution. The generated
+  `.github/actions/cache-save` after task execution. The generated
   Code Foundry workflows already include this save boundary; see
   [Caching and remote caching](CACHING.md).
 

package/docs/PERFORMANCE.md

@@ -31,7 +31,7 @@ changelog size and its packaged (trimmed) size as informational metrics. At
 v1.44.0 the measured artifact was 280,902 packed bytes, 1,070,333 unpacked bytes,
 and 118 files.
 
-v1.52.1 main no-changelog: 316,788 packed, 1,224,968 unpacked, 120 files. Branch checker: 316,744 packed, 1,224,894 unpacked, 120 files. v1.52.0 published (trimmed changelog): 316,867 packed, 1,225,194 unpacked. Limits: 317,000 packed, 1,225,000 unpacked, 120 files.
+v1.53.3 main no-changelog, plus the concurrent unit runner (`src/lib/run-concurrent.mjs`): 317,788 packed, 1,226,187 unpacked, 120 files. Limits: 318,000 packed, 1,227,000 unpacked, 120 files.
 
 The published package ships a changelog trimmed to the 20 most recent releases
 with a link to the full history on GitHub. `scripts/package-changelog.mjs`

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "code-foundry",
-  "version": "1.53.2",
+  "version": "1.53.4",
   "description": "A fast, language-aware repository factory for agent-ready workflows, testing, security, and release automation.",
   "homepage": "https://github.com/0xPlayerOne/code-foundry#readme",
   "bugs": {

package/src/lib/run-concurrent.mjs

@@ -0,0 +1,45 @@
+#!/usr/bin/env node
+// Runs independent test commands at the same time so a mixed repository's
+// unit wall time is its slowest runner, not the sum of all of them. Each line
+// of output is prefixed with its runner's label, and the exit status is the
+// first failing command's in the order given, so the result stays stable.
+import { spawn } from 'node:child_process'
+import { createInterface } from 'node:readline'
+import { resolve } from 'node:path'
+import { pathToFileURL } from 'node:url'
+
+/** @typedef {{ label: string, command: string, args: string[] }} Job */
+
+/** @param {Job} job @returns {Promise<number>} */
+function runJob(job) {
+  return new Promise((resolvePromise) => {
+    const child = spawn(job.command, job.args, {
+      cwd: process.cwd(),
+      env: process.env,
+      stdio: ['ignore', 'pipe', 'pipe'],
+    })
+    const prefix = `[${job.label}] `
+    /** @param {import('node:stream').Readable} stream @param {NodeJS.WriteStream} sink */
+    const relay = (stream, sink) =>
+      createInterface({ input: stream, crlfDelay: Infinity }).on('line', (line) =>
+        sink.write(`${prefix}${line}\n`)
+      )
+    relay(child.stdout, process.stdout)
+    relay(child.stderr, process.stderr)
+    child.on('error', (error) => {
+      process.stderr.write(`${prefix}${error.message}\n`)
+      resolvePromise(1)
+    })
+    child.on('close', (code, signal) => resolvePromise(signal ? 1 : (code ?? 1)))
+  })
+}
+
+/** @param {Job[]} jobs */
+export async function runConcurrent(jobs) {
+  const statuses = await Promise.all(jobs.map(runJob))
+  return statuses.find((status) => status !== 0) ?? 0
+}
+
+if (process.argv[1] && import.meta.url === pathToFileURL(resolve(process.argv[1])).href) {
+  process.exitCode = await runConcurrent(JSON.parse(process.argv[2] ?? '[]'))
+}

package/src/runtime-core.mjs

@@ -835,8 +835,18 @@ function ci(task) {
     e2e: ['test:e2e', 'e2e'],
     smoke: ['test:smoke', 'smoke'],
   }
-  const scripts = scriptsByTask[task]
-  const scripted = scripts ? runScript(scripts) : false
+  // Unit runners share no state, so they run together and the task takes as
+  // long as its slowest runner. Other categories may share services or ports
+  // and keep running one after another.
+  /** @type {{ label: string, command: string, args: string[] }[]} */
+  const jobs = []
+  /** @param {string} label @param {string} command @param {string[]} args */
+  const queue = (label, command, args) =>
+    task === 'unit' ? jobs.push({ label, command, args }) : run(command, args)
+  const scriptName = scriptsByTask[task]?.find((candidate) => hasScript(candidate))
+  const [scriptManager, scriptArgs] = scriptName ? packageCommand(['run', scriptName]) : [null, []]
+  const scripted = Boolean(scriptManager)
+  if (scriptName && scriptManager) queue(scriptName, scriptManager, scriptArgs)
   const testFiles = taskTestFiles(/** @type {'unit'|'integration'|'e2e'|'smoke'} */ (task))
   const javascriptTests = testFiles.filter((file) => /\.(?:[cm]?[jt]sx?)$/i.test(file))
   const pythonTests = testFiles.filter((file) => /\.py$/i.test(file))
@@ -851,14 +861,16 @@ function ci(task) {
     (hasLanguage('typescript') || hasLanguage('javascript') || hasLanguage('solidity')) &&
     hasRootJavascriptProject()
   ) {
-    if (javascriptTests.length > 0 || task === 'unit') run('bun', ['test', ...javascriptTests])
+    if (javascriptTests.length > 0 || task === 'unit')
+      queue('bun', 'bun', ['test', ...javascriptTests])
   }
 
   if (hasLanguage('python') && hasRootPythonProject()) {
     const python = existsSync(resolve(root, '.venv/bin/python'))
       ? resolve(root, '.venv/bin/python')
       : 'python'
-    if (pythonTests.length > 0 || task === 'unit') run(python, ['-m', 'pytest', ...pythonTests])
+    if (pythonTests.length > 0 || task === 'unit')
+      queue('pytest', python, ['-m', 'pytest', ...pythonTests])
   }
 
   if (hasLanguage('rust') && hasRootRustProject()) {
@@ -872,7 +884,7 @@ function ci(task) {
       const args = [...testArgs]
       if (existsSync(resolve(root, 'src/lib.rs'))) args.push('--lib')
       if (existsSync(resolve(root, 'src/main.rs'))) args.push('--bin', packageName())
-      run('cargo', args)
+      queue('cargo', 'cargo', args)
     } else {
       // Keep --test selection narrow; --tests includes unit targets.
       const targets = rustTests.flatMap((file) => {
@@ -882,6 +894,13 @@ function ci(task) {
       if (targets.length > 0) run('cargo', [...testArgs, ...targets])
     }
   }
+
+  if (jobs.length === 1) run(jobs[0].command, jobs[0].args)
+  else if (jobs.length > 1)
+    run(process.execPath, [
+      fileURLToPath(new URL('./lib/run-concurrent.mjs', import.meta.url)),
+      JSON.stringify(jobs),
+    ])
 }
 
 function packageName() {