fix: LPB_PI_REF is branch name, not version tag

- lpb.stack.env: LPB_PI_REF=lpb-dev (branch for cloning)
- CI: bump VERSION only, not LPB_PI_REF
- pre-commit: check LPB_PI_REF is branch name
- Images tagged with bumped VERSION
- Builds clone from branch (stable), tag with version (unique)

Author: localpibox

.githooks/pre-commit

@@ -31,16 +31,15 @@ else
 fi
 echo ""
 
-# 2. Validate lpb.stack.env
+# 2. Validate lpb.stack.env LPB_PI_REF is a branch name (not version)
 echo "=== Environment Sync ==="
 if [ -f "$DEVSTACK_DIR/lpb.stack.env" ]; then
     PI_REF=$(grep '^LPB_PI_REF=' "$DEVSTACK_DIR/lpb.stack.env" | cut -d= -f2)
-    if [ "$PI_REF" != "$CURRENT_VERSION" ]; then
-        error "lpb.stack.env: LPB_PI_REF=$PI_REF (expected $CURRENT_VERSION)"
-        sed -i "s/^LPB_PI_REF=.*/LPB_PI_REF=$CURRENT_VERSION/" "$DEVSTACK_DIR/lpb.stack.env"
-        echo "  🔧 Fixed LPB_PI_REF to $CURRENT_VERSION"
+    # LPB_PI_REF should be a branch name (lpb, lpb-dev), not a version tag
+    if echo "$PI_REF" | grep -qE '^(lpb|lpb-dev)$'; then
+        info "LPB_PI_REF=$PI_REF (branch)"
     else
-        info "LPB_PI_REF=$PI_REF"
+        error "lpb.stack.env: LPB_PI_REF=$PI_REF (should be branch name: lpb or lpb-dev)"
     fi
 else
     warn "lpb.stack.env not found"

.github/workflows/build-and-publish.yml

@@ -113,12 +113,11 @@ jobs:
           echo "Bumping $VERSION → $NEW_VERSION"
           echo "version=$NEW_VERSION" >> "$GITHUB_OUTPUT"
 
-          # Persist bumped version (excluded from CI paths, won't re-trigger)
+          # Persist bumped version (VERSION excluded from CI paths, won't re-trigger)
           echo "$NEW_VERSION" > VERSION
-          sed -i "s/^LPB_PI_REF=.*/LPB_PI_REF=$NEW_VERSION/" lpb.stack.env
           git config user.name "ci-localpibox"
           git config user.email "ci@localpibox.dev"
-          git add VERSION lpb.stack.env
+          git add VERSION
           git commit -m "chore: bump VERSION $NEW_VERSION" || echo "Nothing to commit"
           git commit -m "chore: bump VERSION $NEW_VERSION" || echo "Nothing to commit"
           git push origin dev --force-with-lease || echo "Push failed (already up-to-date)"

lpb.stack.env

@@ -13,8 +13,8 @@
 # ─── Pi Monorepo ────────────────────────────────────────────────────────
 # Fork URL — cumulative patches on top of earendil-works/pi
 LPB_PI_FORK=https://github.com/localpibox/pi.git
-# Branch — which branch to build from (the lpb branch is the stable base)
-LPB_PI_REF=0.0.31-lpb-dev
+# Branch — which branch to build from (lpb-dev for dev, lpb for stable)
+LPB_PI_REF=lpb-dev
 # Upstream — original repo (for reference / rebasing)
 LPB_PI_UPSTREAM=https://github.com/earendil-works/pi.git