@volter/supercode-orchestrator 0.4.134 → 0.4.136

package/board/ci.mjs

@@ -78,22 +78,43 @@ export function observeCompletionEvidence(board, id, entry, payload = {}) {
     }
     const configured = entry.params.completion_ci.workflows?.[repo] ?? entry.params.completion_ci.workflows?.['*'];
     if (!Array.isArray(configured) || !configured.length) throw new Error(`No deployment workflow is declared for ${repo} in completion_ci.workflows.`);
-    const matchedRules = (entry.params.completion_ci.path_workflows?.[repo] ?? []).filter(rule =>
-      records.some(([, , names]) => names.split('\n').some(path => rule.paths.some(prefix => path.startsWith(prefix)))));
-    const deploymentWorkflows = matchedRules.length ? configured.filter(name => matchedRules.every(rule => rule.workflows.includes(name))) : configured;
+    const matchedRules = (entry.params.completion_ci.path_workflows?.[repo] ?? []).map(rule => ({ ...rule,
+      changed_at: records.find(([, , names]) => names.split('\n').some(path => rule.paths.some(prefix => path.startsWith(prefix))))?.[1]
+    })).filter(rule => rule.changed_at);
     const requestedRun = payload.ci_run ?? payload['ci-run'] ?? payload.metadata?.ci_run ?? (old?.commit === commit ? old?.run_id : null);
     let receipt;
     if (requestedRun) {
       receipt = JSON.parse(run('gh', ['run', 'view', String(requestedRun), '--repo', repo, '--json', 'databaseId,workflowName,headSha,status,conclusion,url'], path));
     } else {
       const runs = JSON.parse(run('gh', ['run', 'list', '--repo', repo, '--commit', commit, '--limit', '100', '--json', 'databaseId,workflowName,headSha,status,conclusion,url'], path));
-      receipt = runs.find(row => deploymentWorkflows.includes(row.workflowName));
+      receipt = runs.find(row => configured.includes(row.workflowName));
     }
     if (!receipt) throw new Error(`No deployment CI run exists for ${repo}@${commit}.`);
     Object.assign(state, { run_id: receipt.databaseId, workflow: receipt.workflowName, status: receipt.status, conclusion: receipt.conclusion, url: receipt.url });
     if (receipt.headSha !== commit) throw new Error(`CI run ${receipt.databaseId} is for ${receipt.headSha}, not ${commit}.`);
-    if (!deploymentWorkflows.includes(receipt.workflowName)) throw new Error(`${receipt.workflowName} is not a declared deployment workflow for ${repo}.`);
+    if (!configured.includes(receipt.workflowName)) throw new Error(`${receipt.workflowName} is not a declared deployment workflow for ${repo}.`);
     if (receipt.status !== 'completed' || receipt.conclusion !== 'success') throw new Error(`Deployment CI ${receipt.databaseId} is ${receipt.status}/${receipt.conclusion || 'pending'}.`);
+    // A later SDK publication need not rebuild unchanged native code. It does
+    // need a successful native deployment containing this task's native changes.
+    // Retain each artifact's actual SHA, rather than calling the SDK run a native release.
+    state.coverage = [];
+    let successful;
+    for (const rule of matchedRules) {
+      if (rule.workflows.includes(receipt.workflowName)) continue;
+      successful ??= JSON.parse(run('gh', ['run', 'list', '--repo', repo, '--status', 'success', '--limit', '100', '--json', 'databaseId,workflowName,headSha,status,conclusion,url'], path));
+      const covering = successful.find(row => {
+        if (!rule.workflows.includes(row.workflowName) || !configured.includes(row.workflowName)) return false;
+        try {
+          run('git', ['merge-base', '--is-ancestor', rule.changed_at, row.headSha], path);
+          run('git', ['merge-base', '--is-ancestor', row.headSha, commit], path);
+          // Any later change in these paths requires another native deployment,
+          // even when a different task authored that change.
+          return run('git', ['diff', '--name-only', row.headSha, commit], path).split('\n').every(name => !rule.paths.some(prefix => name.startsWith(prefix)));
+        } catch { return false; }
+      });
+      if (!covering) throw new Error(`No successful ${rule.workflows.join('/')} deployment covers ${rule.paths.join(', ')} through ${commit}.`);
+      state.coverage.push({ paths: rule.paths, commit: covering.headSha, workflow: covering.workflowName, run_id: covering.databaseId, conclusion: covering.conclusion, url: covering.url });
+    }
     state.deployed_sha = commit;
     state.ready = true;
     state.reason = null;

package/board/wake.mjs

@@ -74,7 +74,12 @@ export function watchBoard({ root, binary, env, log = () => {} }) {
     const mail = join(config, 'mail');
     directory(mail, 'mailbox-registry', name => name.startsWith('board-'));
     if (existsSync(mail)) for (const name of readdirSync(mail)) {
-      if (name.startsWith('board-')) directory(join(mail, name, 'new'), 'board-mail', name => name.endsWith('.json'));
+      if (name.startsWith('board-')) {
+        const inbox = join(mail, name, 'new');
+        // Reading mail moves it out of new/. That removal is not new work and
+        // must not make the dispatcher schedule another tick for its own read.
+        directory(inbox, 'board-mail', file => file.endsWith('.json') && existsSync(join(inbox, file)));
+      }
     }
   };
   // The retained Teams catalogue includes local and remote session changes.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@volter/supercode-orchestrator",
-  "version": "0.4.134",
+  "version": "0.4.136",
   "type": "module",
   "description": "The orchestrator runtime over the Volter Harness ontology: one typed operational model whose folder is its serialization, read and written through the harness orchestration doors (docs/ORCHESTRATOR-IR.md)",
   "exports": {