hns-workflow-ci-loop

name	hns-workflow-ci-loop
description	Unified CI watch + auto-fix loop skill. Polls gh pr checks after /moai sync PR creation, classifies required vs auxiliary failures, attempts safe automated patches (max 3 iterations), and escalates semantic failures to the user. Use for CI loop workflow — NOT for general loop iteration patterns (see moai-workflow-loop).
when_to_use	Use for the CI watch and auto-fix loop after /moai sync PR creation: polling gh pr checks, classifying required vs auxiliary failures, safe automated patch attempts (max 3 iterations), and escalation of semantic failures.
license	Apache-2.0
compatibility	Designed for Claude Code
allowed-tools	Bash, Read
user-invocable	false
metadata	{"version":"0.1.0","category":"workflow","status":"active","updated":"2026-05-22","tags":"ci, watch, autofix, polling, github-actions, required-checks, force-push-prohibited"}
progressive_disclosure	{"enabled":true,"level1_tokens":120,"level2_tokens":5000}

CI Loop (hns-workflow-ci-loop)

Unified CI watch + auto-fix loop. The orchestrator invokes this skill after /moai sync Phase 4 (gh pr create) returns a PR number. The skill polls required checks, classifies failures into mechanical vs semantic, attempts safe patches up to 3 iterations, and escalates semantic failures via AskUserQuestion.

Quick Reference

Trigger: /moai sync Phase 4 PR-create returns a PR number, or an existing PR needs CI monitoring.

Two phases, one skill:

1. Watch — Poll gh pr checks every 30s, classify required vs auxiliary via .github/required-checks.yml SSoT; exit on green/fail/timeout.
2. Auto-fix — On required-fail (exit 2), receive JSON handoff, run up to 3 patch iterations, escalate semantic failures immediately.

One-liner:

MOAI_CIWATCH_GH=gh sh scripts/ci-watch/run.sh <PR_NUMBER> <BRANCH>

Exit codes:

• 0 — all required passed → ready-to-merge AskUserQuestion
• 1 — fatal error → surface remediation
• 2 — required failure → JSON handoff → auto-fix phase
• 3 — 30-min hard timeout → blocker message, return control

HARD invariants:

• AskUserQuestion is orchestrator-only — CLI, shell scripts, and the manager-develop (cycle_type=autofix) subagent MUST NOT call it.
• Force-push is absolutely prohibited (--force, -f, --force-with-lease all banned).
• Max 3 auto-fix iterations; iteration 4+ triggers mandatory blocking AskUserQuestion.
• Semantic failures (race, deadlock, panic, assertion) are never auto-patched.
• Protected files: .env*, credentials, .claude/settings*.json, .github/required-checks.yml, scripts/ci-watch/run.sh.

Implementation Guide

Phase 1 — Watch Loop

Polling cadence: 30 seconds minimum (GitHub API rate-limit). Override via CIWATCH_POLL_INTERVAL env, never below 30 in production. Test mode uses MOAI_CIWATCH_NO_SLEEP=1 (single-tick exit).