@resolveio/server-lib 22.3.187 → 22.3.189

package/util/aicoder-runner-v6.d.ts

@@ -202,10 +202,13 @@ export interface ResolveIOAICoderNextActionContract {
         workflowProofCheckpointStatus: string;
         failureClass: string;
         evidenceHash: string;
+        hotfixCommitRequired: boolean;
+        liveHotfixBlockedUntilCommit: boolean;
     };
     preconditions: string[];
     expectedStateTransition: string;
     successEvidence: string[];
+    requiredHotfixCommitProof: string[];
     stopConditions: string[];
     forbiddenActions: string[];
     nextCommands: string[];

package/util/aicoder-runner-v6.js

@@ -1676,6 +1676,13 @@ function buildResolveIOAICoderNextActionContract(input) {
     var last = history[history.length - 1];
     var command = aicoderNextActionPrimaryCommand(input.action, workflowReadiness);
     var costRisk = aicoderNextActionCostRisk(input.action, command, workflowReadiness);
+    var hotfixCommitRequired = command === 'repair_aicoder_release_gate'
+        || workflowReadiness.releaseBlocked
+        || workflowReadiness.nextGate === 'release';
+    var liveHotfixBlockedUntilCommit = hotfixCommitRequired;
+    var requiredHotfixCommitProof = hotfixCommitRequired
+        ? ['sourceCommitSha', 'githubCommitUrl', 'gitCommitStatus=passed', 'gitPushStatus=passed']
+        : [];
     var requiresHumanApproval = input.action === 'park'
         || input.action === 'budget_stop'
         || input.action === 'ready_to_publish'
@@ -1700,18 +1707,28 @@ function buildResolveIOAICoderNextActionContract(input) {
         && workflowProofCheckpoint.requiredEvidence.length > 0
         && workflowProofCheckpoint.nextAction.length > 0;
     var blockers = Array.from(new Set(__spreadArray(__spreadArray([], __read(workflowReadiness.blockers), false), __read((workflowProofCheckpoint.status === 'waiting_for_new_evidence' ? workflowProofCheckpoint.requiredResetEvidence : [])), false))).slice(0, 12);
-    var preconditions = Array.from(new Set(__spreadArray(__spreadArray(__spreadArray(__spreadArray([
+    var preconditions = Array.from(new Set(__spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray([
         workflowProofCheckpoint.nextAction
-    ], __read(workflowProofCheckpoint.requiredEvidence), false), __read((workflowReadiness.journeyContractReady ? [] : ['validated APP_JOURNEY_CONTRACT.md journey_contract JSON'])), false), __read((workflowReadiness.canRunWorkflowQa ? ['workflow QA rows generated from the journey contract'] : [])), false), __read((workflowReadiness.releaseBlocked ? ['release blocker artifact or hotfix-first release evidence'] : [])), false).map(function (entry) { return cleanText(entry, 300); }).filter(Boolean))).slice(0, 12);
-    var successEvidence = Array.from(new Set(__spreadArray(__spreadArray(__spreadArray(__spreadArray([], __read(workflowProofCheckpoint.requiredEvidence), false), __read((workflowReadiness.businessProofReady ? ['retained AIQaBusinessAssertion artifact'] : [])), false), __read((workflowReadiness.canPublish ? ['release gate accepts the workflow-proven artifact'] : [])), false), __read((command === 'repair_aicoder_release_gate' ? ['hotfix evidence or explicit one-time force release decision'] : [])), false).map(function (entry) { return cleanText(entry, 300); }).filter(Boolean))).slice(0, 12);
+    ], __read(workflowProofCheckpoint.requiredEvidence), false), __read((workflowReadiness.journeyContractReady ? [] : ['validated APP_JOURNEY_CONTRACT.md journey_contract JSON'])), false), __read((workflowReadiness.canRunWorkflowQa ? ['workflow QA rows generated from the journey contract'] : [])), false), __read((workflowReadiness.releaseBlocked ? ['release blocker artifact or hotfix-first release evidence'] : [])), false), __read((hotfixCommitRequired ? ['sourceCommitSha, githubCommitUrl, passed gitCommitStatus, and passed gitPushStatus before live hotfix apply'] : [])), false).map(function (entry) { return cleanText(entry, 300); }).filter(Boolean))).slice(0, 12);
+    var successEvidence = Array.from(new Set(__spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray([], __read(workflowProofCheckpoint.requiredEvidence), false), __read((workflowReadiness.businessProofReady ? ['retained AIQaBusinessAssertion artifact'] : [])), false), __read((workflowReadiness.canPublish ? ['release gate accepts the workflow-proven artifact'] : [])), false), __read((command === 'repair_aicoder_release_gate' ? ['hotfix evidence or explicit one-time force release decision'] : [])), false), __read((hotfixCommitRequired ? ['GitHub commit and push proof for any manager-applied hotfix'] : [])), false).map(function (entry) { return cleanText(entry, 300); }).filter(Boolean))).slice(0, 12);
     var stopConditions = buildResolveIOAICoderNextActionStopConditions(workflowReadiness, command);
-    var forbiddenActions = Array.from(new Set(__spreadArray(__spreadArray(__spreadArray(__spreadArray([
+    if (hotfixCommitRequired) {
+        stopConditions.push('Do not apply a live AICoder backend/static hotfix until sourceCommitSha, githubCommitUrl, passed gitCommitStatus, and passed gitPushStatus are recorded.');
+    }
+    var forbiddenActions = Array.from(new Set(__spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray([
         'accepting route-only proof as app success',
         'accepting scorecard-only or wow-score-only proof as app success'
-    ], __read((workflowReadiness.journeyContractReady ? [] : ['building product routes before the journey contract validates'])), false), __read((workflowReadiness.businessProofReady ? [] : ['publishing before north-star workflow business proof passes'])), false), __read((workflowReadiness.releaseBlocked ? ['rerunning full deploy/publish without changed release evidence'] : [])), false), __read((workflowReadiness.sameFailureParked ? ['retrying the same repair loop without new evidence'] : [])), false))).slice(0, 12);
+    ], __read((workflowReadiness.journeyContractReady ? [] : ['building product routes before the journey contract validates'])), false), __read((workflowReadiness.businessProofReady ? [] : ['publishing before north-star workflow business proof passes'])), false), __read((workflowReadiness.releaseBlocked ? ['rerunning full deploy/publish without changed release evidence'] : [])), false), __read((hotfixCommitRequired ? ['applying live hotfix before pushed GitHub commit proof'] : [])), false), __read((workflowReadiness.sameFailureParked ? ['retrying the same repair loop without new evidence'] : [])), false))).slice(0, 12);
     var nextCommands = Array.from(new Set(__spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray([
         command
-    ], __read((command === 'repair_aicoder_journey_contract' ? ['validate_aicoder_journey_contract', 'generate_workflow_qa_rows'] : [])), false), __read((command === 'run_aicoder_workflow_qa' ? ['execute_contract_qa_assertions', 'record_aiqa_business_assertion'] : [])), false), __read((command === 'repair_aicoder_release_gate' ? ['collect_release_blocker_evidence', 'prefer_hotfix_before_full_deploy'] : [])), false), __read((command === 'repair_aicoder_compile_gate' ? ['rerun_compile_gate_only', 'record_compile_evidence_hash'] : [])), false), __read((command === 'repair_aicoder_infra_gate' ? ['rerun_preflight_gate_only', 'record_infra_evidence_hash'] : [])), false), [
+    ], __read((command === 'repair_aicoder_journey_contract' ? ['validate_aicoder_journey_contract', 'generate_workflow_qa_rows'] : [])), false), __read((command === 'run_aicoder_workflow_qa' ? ['execute_contract_qa_assertions', 'record_aiqa_business_assertion'] : [])), false), __read((command === 'repair_aicoder_release_gate' ? [
+        'collect_release_blocker_evidence',
+        'prefer_hotfix_before_full_deploy',
+        'prepare_hotfix_patch_without_live_apply',
+        'commit_and_push_hotfix_to_github',
+        'record_github_commit_for_hotfix',
+        'apply_live_hotfix_only_after_github_commit_proof'
+    ] : [])), false), __read((command === 'repair_aicoder_compile_gate' ? ['rerun_compile_gate_only', 'record_compile_evidence_hash'] : [])), false), __read((command === 'repair_aicoder_infra_gate' ? ['rerun_preflight_gate_only', 'record_infra_evidence_hash'] : [])), false), [
         'record_aicoder_next_action_result'
     ], false))).slice(0, 12);
     var contractBasis = {
@@ -1761,11 +1778,14 @@ function buildResolveIOAICoderNextActionContract(input) {
             workflowReadinessStatus: workflowReadiness.status,
             workflowProofCheckpointStatus: workflowProofCheckpoint.status,
             failureClass: contractBasis.failureClass,
-            evidenceHash: cleanText((last === null || last === void 0 ? void 0 : last.evidenceHash) || contractBasis.evidenceHash, 160)
+            evidenceHash: cleanText((last === null || last === void 0 ? void 0 : last.evidenceHash) || contractBasis.evidenceHash, 160),
+            hotfixCommitRequired: hotfixCommitRequired,
+            liveHotfixBlockedUntilCommit: liveHotfixBlockedUntilCommit
         },
         preconditions: preconditions,
         expectedStateTransition: aicoderNextActionExpectedTransition(command),
         successEvidence: successEvidence,
+        requiredHotfixCommitProof: requiredHotfixCommitProof,
         stopConditions: stopConditions,
         forbiddenActions: forbiddenActions,
         nextCommands: nextCommands,