rstack-eco-ci-debug

name	rstack-eco-ci-debug
description	Debug Rstack ecosystem CI failures for Rspack, Rsbuild, Rslib, Rspress, Rstest, and Rsdoctor, then attribute the real source PR or downstream change. Always use this skill when the user mentions Rstack eco-ci, rstack-ecosystem-ci, a suite turning red, a downstream regression, a green-to-red pivot, canary bisect, or daily eco-ci triage — even if they only ask "why is this suite failing", "which PR broke it", or "is this upstream project's fault". Use it to avoid over-blaming the first upstream commit that appears red in status data.
metadata	{"internal":true}

Rstack Eco CI Debug

Use this skill to debug Rstack ecosystem CI failures without over-blaming the first upstream commit that appears red in status data.

Supported ecosystems are rspack, rsbuild, rslib, rspress, rstest, and rsdoctor. Each maps to origin/data:<ecosystem>.json in rstack-ecosystem-ci.

Choose the ecosystem before investigating. In this skill:

• selected ecosystem or upstream is the project whose commit produced the status row, for example rslib in rslib.json.
• suite is a downstream project tested against that upstream artifact, for example the rspress suite inside rslib.json.
• Never infer the selected ecosystem from the failing suite name.

Ecosystem Priority

Treat rspack as the primary ecosystem because it has the broadest downstream matrix and is normally the highest-volume source of eco-ci failures.

• For an all-ecosystem request, inspect and live-verify rspack first, then continue through rsbuild, rslib, rspress, rstest, and rsdoctor.
• Put the Rspack row first in summary matrices and put current rspack/<suite> failure sections before failures from other ecosystems.
• Priority controls ordering and investigation attention, not coverage. Never stop after Rspack when the requested scope includes other ecosystems.

Preconditions

Use local checkout paths already supplied by the user or automation. If a required path is missing, ask for that specific path; do not assume machine-specific paths.

• Local upstream checkout — required for inspecting commits and reviewing PR diffs. Ask for the selected ecosystem's checkout before running git -C <upstream-path> unless the user or automation already provided it.
• Local downstream project checkout — required for reproduction edits. Ask for it before making approved temporary changes to package.json, pnpm-lock.yaml, or equivalent package-manager files.
• Local rstack-ecosystem-ci checkout — optional. If available, use origin/data:<ecosystem>.json as the first local status source. Pass the checkout path to scripts/ecosystem-status.sh --ecosystem <ecosystem> --repo <ecosystem-ci-path>.
• GitHub access — prefer authenticated gh for the upstream repository and rstackjs/rstack-ecosystem-ci. If gh is unavailable, use the matching origin/data:<ecosystem>.json, workflow/job URLs, and the GitHub connector or public pages where available; state any evidence gap in the report.

Fetch the local upstream repo before resolving commits:

git -C <upstream-path> fetch origin main --tags

• Treat GitHub Actions job logs as the source of truth for failure signatures.
• Do not modify project files unless the user explicitly asks for a fix or approves temporary reproduction edits. Temporary reproduction edits must be recorded and restored before reporting results unless the user asks to keep them.

Investigation Model

Each ecosystem CI runs a downstream project matrix against a freshly built artifact from the selected upstream. A suite turning red means that a specific combination failed:

current downstream project state + tested upstream artifact

It does not automatically mean the visible upstream pivot PR is the true root cause. Downstream dependency updates, snapshot changes, test logic changes, and release windows can all create misleading pivots.

Some eco-ci failures are flaky even when they appear as a clean green-to-red transition. Repeated selector timeouts, browser navigation waits, dev-server readiness failures, and network-idle waits must be checked against old commit comments, old failed runs, and automation memory before attributing them to the current pivot.

Always distinguish:

• Surface attribution: the selected upstream commit/PR where status data first shows the suite red.
• Actual source: the PR, version window, or downstream change that actually introduced the failing condition.
• Failure signature: the stable error text, command, assertion diff, stack, or log block used to compare runs.

Optional Tools

Read the linked reference before using any of these tools. Do not ask the user generically "which tool do you want"; instead, suggest the specific tool that matches the situation. Only invoke a tool when its strict trigger conditions are met; do not run it "just in case".

• Ecosystem status helper — use scripts/ecosystem-status.sh --ecosystem <ecosystem> --repo <ecosystem-ci-path> when you need the latest and previous rows for one supported ecosystem, including failed suite names, job URLs, and suite-set delta. Pass --source <json-path-or-git-ref> for a snapshot or non-default ref. scripts/rspack-status.sh remains as a compatibility wrapper for Rspack. The helper only summarizes status data; it does not inspect logs or attribute root causes.

• Rspack canary date bisect — use only when the selected ecosystem is rspack, its commit window is too coarse to attribute a PR, and downstream causes have already been ruled out. Trigger this when all of the following are true:

  • The green-to-red pivot spans more than 3 Rspack commits or crosses a release/canary boundary.
  • The failure signature is stable across the red rows in that window.
  • The same Rspack commit does not appear in both green and red runs (which would indicate a downstream cause). Do not trigger when the pivot is a single commit or when the surface PR diff already explains the signature. Read references/canary-date-bisect.md and ask the user for the local downstream checkout path and the narrowest failing command.

• Rsbuild config debug — use in Phase 1 or Phase 2 only when generated Rsbuild/Rspack config evidence is required to decide whether the failing case is related to the current PR. Trigger it when the user mentions DEBUG=rsbuild, asks whether a config is active, or the candidate PR changes behavior controlled by an option, plugin, loader, target, devtool, SSR setting, cache mode, or other config-gated path. Do not run it just because the suite is Rsbuild-based. Read references/rsbuild-config-debug.md before using it.

• Automation daily triage — use instead of the local quick path when the request is a recurring/daily automation, asks for today's/latest Rstack ecosystem CI status, provides an automation id/memory, or requires delivery to a user/chat. Read references/automation-daily-triage.md before inspecting runs.

• Deep PR debug — use in Phase 2 only after a specific selected-upstream PR or version window has been identified and the user wants the technical reason behind the failure. Trigger this when of the following are true:

Two-Phase Debug Workflow

Eco-ci debugging has two phases. Do not mix them up.

Local Triage Quick Path

Use this path for local/manual runs, such as a provided workflow run/job, PR, commit window, or specific suite. For daily automation or latest-status monitoring, read references/automation-daily-triage.md instead.

1. Determine the scope from the user request: workflow run/job, PR, commit window, suite, or explicit local reproduction.
2. Read prior memory only when it is relevant to the named suite, signature, PR, or commit window; do not force daily automation history into a local run.
3. Pull the current failure log and identify the selected ecosystem and tested upstream commit.
4. Compare against the user-provided baseline, previous green, prev release, or visible history when needed.
5. For every failing suite in scope, classify the conclusion as one of:
   • reused: same suite and same failure signature as prior memory.
   • new-signature: current signature differs from prior memory or baseline.
   • new investigation: no reliable prior conclusion exists for this scope.
   • flaky/pre-existing: the same signature predates the candidate PR or appears intermittently.
   • inconclusive: evidence is insufficient or conflicting.
6. Run Phase 1 for any suite the user asks to investigate or any new-signature / new investigation item.
7. Run Phase 2 only when Phase 1 finds a non-flaky candidate PR or version window in the selected upstream with enough evidence. Do not run Phase 2 for known flaky, pre-existing, or downstream-only failures.
8. Use PR report comments only when pr-report-comment.md guardrails are satisfied and the user explicitly asks to comment. Otherwise report no PR comment: <reason>.

Phase 1: PR Location

Goal: identify the actual source PR, date window, or downstream change that caused the suite to become red.

Fast-Exit Checks

Run these checks first before doing deep pivot analysis. If any check fires with high confidence, produce the Phase 1 output immediately and skip unnecessary steps.

1. Same upstream commit, different outcome

   • If the exact same tested upstream commit appears in both a green run and a red run of the same suite, the cause is not that upstream commit.
   • Stop and attribute the failure to a downstream change, test expectation change, dependency update, or environment difference between the two runs.
   • Output example: Actual source: downstream/test change (same <ecosystem> SHA <sha> succeeded in run <green-id> and failed in run <red-id>).

2. Known flaky or recurring failure signature

   • Search prior run history, automation memory, and upstream commit/PR comments for the exact failure signature before blaming a new pivot.
   • If the same error appeared before the candidate PR was in the tested commit, classify it as flaky or pre-existing recurring failure unless new evidence proves the PR made it deterministic.
   • Example: modernjs pure-esm-project client navigation timeouts waiting for #data have appeared before; do not attribute that signature to a surface pivot just because the latest visible pivot looks plausibly related.
   • Output example: Actual source: flaky/pre-existing (same selector timeout was reported before candidate PR #<n>).

3. Surface PR diff is unrelated to the failure signature

   • After fetching the surface PR, if its changed files and diff have no plausible connection to the observed error text, assertion, stack frame, or generated output, treat the surface PR as innocent.
   • Shift focus to downstream changes or an earlier selected-upstream commit that actually touched the failing path.
   • Output example: Actual source: not surface PR #<n> (diff only touches <unrelated-paths>; failure signature is <signature>).

4. Config-gated hypothesis not active

   • If the attribution depends on a downstream option, plugin, loader, target, mode, or feature being enabled, verify that generated/runtime config actually enables it before using the PR as the actual source.
   • For Rsbuild-based suites, load references/rsbuild-config-debug.md only when this check is needed.
   • Output example: Actual source: not surface PR #<n> (generated config does not enable <required option>, but the hypothesis requires it).

Only continue with the full process below if none of the fast-exit checks gives a clear answer.

Use these evidence sources:

• Eco-ci status data, including current failed runs and previous green runs.
• GitHub Actions logs for current failure and candidate pivot failure.
• Selected-upstream commit history and release tags. For Rspack only, canary versions may also be relevant.
• Downstream project history, dependency updates, snapshots, and test/config changes.
• Generated or runtime config only when the attribution hypothesis depends on config-gated behavior.
• For Rspack only, @rspack-canary/core overrides in the downstream repo when the date or PR window is still too coarse.

Process:

1. Identify the selected ecosystem, run/job/PR/commit window in scope, the tested upstream commit, and the nearest relevant comparison point when one is needed.
2. List failed suites in scope, failed count, run URL or run id, and the tested upstream commit.
3. For each failed suite, find the green-to-red pivot in the matching ecosystem history. If the same tested upstream commit appears in both green and red runs, apply fast-exit check #1 and stop.
4. Pull logs for the current failure and the candidate pivot failure.
5. Check whether the same failure signature appeared in older runs, commit comments, PR comments, or automation memory before the candidate PR.
6. Compare failure signatures before attributing a root cause. After inspecting the surface PR diff, apply fast-exit checks #2 through #5 when the relationship between the diff and the signature is clear.
7. If the signature changed, search forward or binary-search red rows until the current signature appears.
8. Check whether the downstream project changed in the same window.
9. If the hypothesis depends on generated config, read the relevant config-debug reference and verify the active config before attributing the failure.
10. Reproduce enough combinations to decide whether the failure comes from the selected upstream, downstream, flaky infrastructure, or their interaction.
11. If the selected ecosystem is Rspack and its release versions or eco-ci rows are too coarse, ask whether to run the canary date bisect tool. For other ecosystems, use their release artifacts or commit builds only when a project-specific method is available; do not assume Rspack canaries apply.

Phase 1 output:

Surface attribution: <PR shown by eco-ci pivot>
Actual source: <real PR, downstream PR, or version window>
Failure signature: <short signature>
Evidence: <run URLs, logs, canary results, or green/red pivots>
Confidence: high | medium | low
Notes: <why surface attribution is or is not responsible>

Only move to Phase 2 when there is a specific source PR or version window with enough evidence to inspect deeply.

Phase 2: Deep Root Cause Debug

Goal: explain why the identified PR caused the observed behavior.

Use this phase after Phase 1 has identified a candidate source. Read references/deep-pr-debug.md when the user asks for root cause, mechanism, or a fix direction.

Process:

1. Review the candidate PR metadata, commit, and diff.
2. Re-read the concrete failure log block and failing downstream assertion or stack.
3. Locate the downstream code path that produces the failure.
4. If the hypothesis depends on generated config, run the appropriate config-debug tool before claiming that the relevant option is active in the failing path.
5. Trace from downstream behavior into selected-upstream APIs, plugin hooks, loaders, generated output, source maps, runtime modules, or diagnostics.
6. Compare before/after behavior when needed, using canaries or local builds.
7. State the mechanical behavior change, not only the PR number.
8. Separate confirmed evidence from inference.

Phase 2 output:

Candidate PR: <pr-number> <title>
Suite: <suite>
Verdict: caused | likely caused | not caused | inconclusive
Mechanism: <3-5 sentence explanation>
Evidence: <log URLs, code refs, reproduction results>
Confidence: high | medium | low
Next action: <fix in selected upstream | fix downstream expectation | gather more evidence>

Use gh for specific job logs when available:

gh run view --job <job-id> --repo rstackjs/rstack-ecosystem-ci --log

For noisy logs, first isolate likely terminal failure blocks:

gh run view --job <job-id> --repo rstackjs/rstack-ecosystem-ci --log \
  | grep -E -i -C 3 'error|fail|panic|✖' \
  | head -200

Fall back to full logs when the filtered output misses the real failure.

Reproduce Combination Relationships

Use combination testing in Phase 1 to separate selected-upstream changes from downstream changes.

Start with four conceptual combinations:

old downstream + old upstream
old downstream + new upstream
new downstream + old upstream
new downstream + new upstream

Keep the downstream command fixed and use the narrowest failing command possible.

For finer Rspack windows only, ask whether to use the canary date bisect tool, then follow references/canary-date-bisect.md.

Downstream Interaction Check

If the downstream project changed during the same window, test these pairs when practical:

old downstream + bad-window upstream
old downstream + fixed upstream
new downstream + bad-window upstream
new downstream + fixed upstream

This prevents wrongly attributing a downstream dependency/snapshot update to a later unrelated selected-upstream PR.

Reporting Requirements

Keep reports compact and evidence-based:

• Name every currently failing suite.
• Name the selected ecosystem and include run URL or run id plus tested upstream commit when available.
• State whether each suite is newly investigated or reused from a matching known signature.
• Include the first visible start commit when there is a clear green-to-red pivot.
• Say when a failure predates the visible window.
• Include short log snippets only when they directly identify the failure.
• When surface attribution is misleading, explicitly say the selected-upstream surface PR is likely innocent and explain why.

For triage reports, use this structure for daily automation and local/manual runs:

Scope: <ecosystem>; <latest completed status | workflow run/job | PR | commit window | suite>.
Current run/job: <run-url>, testing <sha> — "<commit msg>". Omit fields that do not apply.
Comparison baseline: <previous run | previous green | prev release | provided baseline | none>.
Failing suites in scope: <suite list>.
Delta: <new-suite/new-signature/recovered/unchanged/not applicable>.
PR comments: <posted links or "none: <reason>">.

### <suite> — <new investigation | reused | updated | flaky/pre-existing>

Attribution: <exact attribution line>

Root cause: <3-5 sentences. Separate confirmed facts from likely inference. If flaky or pre-existing, say so in the first sentence and do not force a PR root cause.>

Evidence: <log URLs actually read; include current and pivot/baseline URLs when used>

Use exactly one attribution line shape per suite:

This failure started from <sha> — "<commit msg>". PR: <url>; author: <author>; date: <date>.
The prev release 66e23b5 was already failing with this same error.
This specific failure started from <sha> — "<commit msg>"; before that the suite was failing for a different reason already at prev release 66e23b5. PR: <url>; author: <author>; date: <date>.
This is a known flaky/pre-existing failure; the same signature appeared before <candidate-sha-or-pr>.
The current evidence is inconclusive; <candidate> is only a surface pivot because <missing-or-conflicting-evidence>.

Do not present a candidate PR as caused/likely-caused in the triage report unless the flaky-history check and any relevant config-gated check have both passed. Prefer inconclusive over a weak attribution.