fix: check remote for newer incremental tags before skipping re-clone

needsReclone now queries ls-remote to compare the local incremental tag
against the latest upstream variant, so a checkout at -0 will re-clone
when -2 is published. Falls back gracefully if the remote is unreachable.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: critesjosh

src/utils/git.ts

@@ -373,11 +373,16 @@ export async function needsReclone(config: RepoConfig): Promise<boolean> {
     if (currentTag === null) return true;
     if (currentTag === config.tag || currentTag === alternateTagName(config.tag)) return false;
     // For incremental tags (e.g., "4.2.0-rc.1-2"), check if the current tag
-    // is a versioned variant of the requested tag
+    // is a versioned variant and whether a newer one exists upstream
     if (config.matchLatestIncrementalTag) {
       const bare = config.tag.startsWith("v") ? config.tag.slice(1) : config.tag;
       const currentBare = currentTag.startsWith("v") ? currentTag.slice(1) : currentTag;
-      if (currentBare.startsWith(bare + "-")) return false;
+      if (currentBare.startsWith(bare + "-")) {
+        const latest = await findLatestIncrementalTag(config.url, config.tag);
+        if (!latest) return false; // can't reach remote, assume current is fine
+        const latestBare = latest.startsWith("v") ? latest.slice(1) : latest;
+        return currentBare !== latestBare;
+      }
     }
     return true;
   }

tests/utils/git.test.ts

@@ -606,18 +606,61 @@ describe("needsReclone", () => {
     expect(result).toBe(false);
   });
 
-  it("returns false when current tag is an incremental variant and matchLatestIncrementalTag is set", async () => {
+  it("returns false when at latest incremental tag and matchLatestIncrementalTag is set", async () => {
     mockExistsSync.mockReturnValue(true);
     // Repo is checked out at "4.2.0-aztecnr-rc.2-2" but config requests "v4.2.0-aztecnr-rc.2"
     mockGitInstance.raw.mockResolvedValue("4.2.0-aztecnr-rc.2-2\n");
+    // ls-remote confirms -2 is the latest
+    mockGitInstance.listRemote.mockResolvedValueOnce(
+      "abc123\trefs/tags/4.2.0-aztecnr-rc.2-0\n" +
+      "def456\trefs/tags/4.2.0-aztecnr-rc.2-1\n" +
+      "ghi789\trefs/tags/4.2.0-aztecnr-rc.2-2\n"
+    );
 
     const result = await needsReclone({
       name: "test",
-      url: "test",
+      url: "https://github.com/test/test",
+      tag: "v4.2.0-aztecnr-rc.2",
+      matchLatestIncrementalTag: true,
+      description: "test",
+    });
+    expect(result).toBe(false);
+  });
+
+  it("returns true when a newer incremental tag exists upstream", async () => {
+    mockExistsSync.mockReturnValue(true);
+    // Repo is checked out at "-0" but "-2" exists upstream
+    mockGitInstance.raw.mockResolvedValue("4.2.0-aztecnr-rc.2-0\n");
+    mockGitInstance.listRemote.mockResolvedValueOnce(
+      "abc123\trefs/tags/4.2.0-aztecnr-rc.2-0\n" +
+      "def456\trefs/tags/4.2.0-aztecnr-rc.2-1\n" +
+      "ghi789\trefs/tags/4.2.0-aztecnr-rc.2-2\n"
+    );
+
+    const result = await needsReclone({
+      name: "test",
+      url: "https://github.com/test/test",
+      tag: "v4.2.0-aztecnr-rc.2",
+      matchLatestIncrementalTag: true,
+      description: "test",
+    });
+    expect(result).toBe(true);
+  });
+
+  it("returns false when remote check fails for incremental tag", async () => {
+    mockExistsSync.mockReturnValue(true);
+    mockGitInstance.raw.mockResolvedValue("4.2.0-aztecnr-rc.2-0\n");
+    // ls-remote fails (network error)
+    mockGitInstance.listRemote.mockRejectedValue(new Error("network error"));
+
+    const result = await needsReclone({
+      name: "test",
+      url: "https://github.com/test/test",
       tag: "v4.2.0-aztecnr-rc.2",
       matchLatestIncrementalTag: true,
       description: "test",
     });
+    // Can't reach remote, assume current is fine
     expect(result).toBe(false);
   });