Hotfix Skill

<!-- CANONICAL SOURCE: docs/development/CONTRIBUTION_GUIDE.md -->

Hotfix Criteria (ALL must be true)

• Issue is in production (deployed, not development branch)
• Issue prevents core functionality (not feature degradation)
• Fix cannot wait for next release cycle
• Issue affects active users or critical systems

If criteria not met: Use the

bug-fix

skill instead.

Workflow

1. Create branch from latest release tag:

   git tag --sort=-v:refname | head -5  # Find latest tag
   git checkout -b hotfix/<issue>-description <latest-tag>
   

2. Implement fix with minimal changes — no refactoring, no extras

3. Fast-track review: Security label + P1 = single-reviewer approval sufficient

4. Quality gates:

   pnpm lint && pnpm typecheck && pnpm test
   

5. Merge to main AND cherry-pick to release branch

6. Immediate release with patch version bump:

   # Add changeset for patch bump
   pnpm changeset  # select patch
   git add . && git commit -m "chore: changeset for hotfix"
   git push origin main --tags
   # CI handles npm publish via OIDC trusted publishing
   # Or trigger manually: gh workflow run publish.yml
   

Rollback (if needed)

npm unpublish nexus-agents@<version>  # Within 72 hours only
git tag -d v<version> && git push --delete origin v<version>