ca-fix git:20261101.e484ec4A

Immutable. This exact content never changes and is served at /api/v1/blob/7c0c5484de9b4130.

---
name: ca-fix
description: "Fix a confirmed bug: a failing regression test first, then a minimal fix, then the rest of the tdd gates."
argument-hint: "<what's happening vs. what should happen>"
---

# $ca-fix — regression-first bug fix

The only permitted entry to bug-fix work. No fix code is written before a regression test reproduces the defect and goes red for the right reason. Give the observed behavior and the expected behavior, plus a stack trace or reproduction when you have one.

## Work identity after confirmation

Use the installed `hooks/work.py` facade through [includes/helper-invocation.md](../../includes/helper-invocation.md)
from the selected worktree. A diagnosis, unresolved cause, `no_action` result
or design question creates no work item. Once the caller has authorized an
actionable repair and the regression is red for the right reason, select the
explicit `WORK-ID` if supplied. Otherwise create one `--type fix` item with
the observed symptom and expected behavior as its intent, using an exact
durable source key as `--origin` when available. Without an origin, pass a stable
`--operation-id` and reuse it for an uncertain retry. Retain the returned work ID
through repair, verification and delivery. A second bug with the same title is
distinct unless its exact ID or origin proves otherwise.

On resume use `work.py context <WORK-ID>` and current evidence, not a new
title match or transient debug attempt. Attach a real existing spec/plan only
when the repair uses one. Keep root-cause citations and regression outcomes in
their current owners. For native-owned work, refresh and report the local derived
page with `work.py view <WORK-ID> --save`; it is a snapshot of canonical work.
Legacy board work has no native derived view; use its selected board owner.
`work.py complete` means local implementation progress only. Unknown checks,
PR delivery and provider effects remain separately reported. In a native
project with an explicit transition map, that one completion also saves its
bounded tracker intent or waiting reason locally. Sending remains an explicit
`work.py sync-mapped <WORK-ID>` step under the configured merge timing; a
provider outage does not call for rerunning the regression or reviewers.

**Orientation:** if the code map is present (`.codearbiter/code-map.md`, or its HTML knowledge document), read it before diagnosing — a coarse concern→path→role map that helps locate the defect. Absent is fine; it is read-on-demand.

For a confirmed bug, the author reads the current scoped map,
provenance, command declarations and collector observations, applicable
constraints, and host-effective instructions. Resolve missing task-critical
inputs and applicable conflicts before dependent work; provenance warnings are
advisory. Direct implementation continues from these inputs.

When delegating, the coordinator calls `_contextselectlib.compose_fix_or_test_actor_input`
with `route='fix'`, `caller='fix'`, the actual task paths, and the observed,
expected, reproduction, cited evidence, and named regression test from the
bug-origin handoff. Supply `required_refs` for task-critical inputs identified
during orientation. Send its returned `input` to the actual author. A directly
confirmed bug may supply the same evidence without re-entering `debug`. Keep
command cwd and verification state; a historical pass does not prove a current
run. The packet is orientation with `requires_actor_check`, never permission to
change code. Resolve applicable critical context before material action.
Call `_contextselectlib.prepare_actor_delivery` for that returned packet and
the actual author/task/worktree/current epochs. Send its bounded
`delivery_text` to the author on `deliver` and retain the attempt. On `advisory`,
record the unknown delivery observation and continue authorized work without
further delivery retries. Missing required refs and applicable constraint or
instruction conflicts still stop dependent work; provenance warnings do not.
Re-select after resume, compaction or scope change.

## Flow

Routes to the `tdd` skill, bug variant — Phase 1 is framed around confirming the defect, not building
new behavior:

1. **Establish the defect** from an observed reproduction or a supported source/contract causal trace, with its evidence and limits. A runtime replay is not mandatory when the causal trace proves the defect.
2. **Locate the root cause** — the exact code path producing the wrong behavior.
3. **Write or reuse the named regression test** from the confirmed bug handoff. It must fail in the
   current state for the precise reason the bug causes (not an unrelated error).
4. **Confirm it's red for the right reason** — the failure message matches the described defect.

**Remediation strategy (conditional).** Only after step 2 has confirmed the root cause, and only when
materially distinct remediation strategies exist (for example, a local guard versus a contract
change), run a SMARTS comparison per [includes/smarts/core.md](../../includes/smarts/core.md) inline before any fix
code. A single obvious fix gets no SMARTS table. SMARTS never ranks hypotheses or confirms the cause;
diagnosis stays evidence-led in `debug`.

Only then does `tdd` proceed: minimal fix to green, then the remaining `tdd` gates. When delegating,
select `backend-author`, `frontend-author`, or `infra-author` by where the bug lives. If
the defect cannot be pinned by a failing test, STOP and surface the question.

## Debug handoff and direct-fix prerequisite

For an authorized direct fix that needs a small investigation to establish its cause, take one internal diagnostic prerequisite through the debug owner, then return to the same original fix caller and its existing scope and TDD gates. Keep the count at one for this fix attempt. No public command recursion or compulsory public route retyping is needed, and no feature artifact is fabricated. If diagnosis is unresolved, non-code, or exposes an authority blocker, report the result and stop the dependent repair; do not force a code patch or an ADR.

When a debug handoff packet is actually available, resolve the absolute installed `debug-handoff.py` helper from the trusted package and invoke Python 3 with `-B`, that absolute path, and literal `validate`. Pass the bounded packet bytes on stdin. Accept the packet only on exit 0, `valid: true`, and no errors. An invalid or rejected packet (exit 2), unavailable helper (exit 3), or other failure must stop the handoff; report its bounded error code and field path. There is no unvalidated repair fallback, silent packet rewrite, or retry through another interpreter. Structural validation alone does not prove evidence truth, freshness, or authorization.

Recheck the actual caller authority and scope independently of the packet. A `request.intent` value such as `repair_requested` cannot authorize repair; a diagnosis-only caller must stop after the recommendation, even if `next_step.target` says `fix`. Keep any separate access or approval blocker. Continue a repair only under the original caller's repair authority and the existing fix gates; a task promotion or ADR still needs its own owner and authority.

Only a validated `confirmed_code_defect` packet with `next_step.target` `fix` and a supported regression obligation may resume the original caller's authorized repair path, subject to the current-evidence checks and target-red gate below. Every other valid disposition returns its evidence and recommendation without repair. For `design_question`, report the actual intended-behavior decision and stop; do not create an ADR automatically. For `no_action`, return its positive closure evidence and stop without a board write or other state mutation. A valid non-code or unresolved result likewise stops the dependent fix and retains its owner, blocker, or resume condition.

A separately authorized concrete follow-up goes to the existing `/task` owner with its action, provenance, and completion evidence. The debug result or handoff packet alone does not authorize that board write; the task owner uses its existing writer gates.

Recheck current evidence in the actual worktree before using a validated packet: compare repository and worktree identity, relevant source and runtime binding, commit, index and working-tree dirty state, and any available fingerprint and recipe against the packet's snapshots and cited observations. The same commit in another worktree does not establish freshness when its index, dirty source, runtime, or evidence differs. If relevant source or evidence has changed, revalidate the affected claim from accessible citations or block; do not silently treat a stale packet as current. Admit unavailable retained context and reconstruct only from accessible cited evidence. Keep unknown facts unknown.

Consume the validated symptom, observed behavior, expected behavior and expectation citations, reproduction status and limits, evidence and source binding, supported cause, and regression obligation with its oracle and cited evidence. Do not re-ask known answered questions about symptom, expectation, or reproduction; ask only for a genuinely missing or changed fact. Use these fields to derive the bug-origin TDD obligations in the existing ledger, without creating an independent replacement ledger. A supported causal trace can establish the diagnosis without runtime replay, but `/fix` must observe its precise target test red at the production layer before any fix code. An import error, setup failure, unrelated red, or passing test does not clear that gate.

## Routes to

`tdd` ([routines/tdd/SKILL.md](../../routines/tdd/SKILL.md)) — all phases, Phase 1 framed for bug confirmation.

## When NOT to use

- New behavior → `$ca-feature`.
- A behavior-preserving restructure → `$ca-refactor`.
- "Why does it do this?" → ask it directly; no command needed.
- Persisting fix code already written → `$ca-commit` (the gates still apply).

## Hard gate

MUST NOT write fix code before the regression test is red for the right reason. MUST NOT accept a test
that passes against the broken state as proof of the defect.