[lpcox]

The dispatcher failed before Copilot started because its AWF invocation combined a pinned image manifest with --build-local.

• Configuration: Adds the dispatcher to the postprocessor’s published-release workflow list, preserving the compiler-selected AWF binary and images.
• Regression coverage: Adds checks for the published-release path and the dispatcher lock’s image configuration.

The dispatcher lock still needs to be regenerated and postprocessed before the fix is complete.

• Fixes [aw] Firewall Issue Dispatcher: engine driver crashed #11567

[Copilot]

🟡 Changes recommended

The checked-in dispatcher lock still combines --build-local with the pinned image manifest, leaving an incompatible configuration that fails the new lock assertions.

1 open issue

• Regenerate and commit the dispatcher lockfile · New

What changed in this PR

This PR updates AWF workflow postprocessing to preserve the firewall issue dispatcher’s compiler-selected release binary and images, addressing the configuration conflict reported in #11567.

Changes:

• Adds the dispatcher to the published-release workflow list.
• Adds regression checks for release preservation and the dispatcher lock’s image configuration.

File	Description
scripts/​ci/​workflow-patches/​network-and-install.ts	Adds the dispatcher to the published AWF preservation list.
scripts/​ci/​apply-general-workflow-patches.test.ts	Adds dispatcher coverage and checks for pinned images without local-build overrides.

_{Review effort: Balanced (dynamic)}

[lpcox]

@copilot address review feedback

[github-actions]

✅ Copilot review passed with no inline comments.

@lpcox Add the ready-for-aw label to this PR to trigger agentic CI smoke tests.

[Copilot]

@copilot address review feedback

Addressed in c5d033d (cleanup: fbafddb). Regenerated the dispatcher lock with gh-aw v1.2.3 and ran postprocessing. It now uses the published AWF v0.29.12 binary and pinned images without --build-local. Build and all 57 targeted tests passed; secret scanning and CodeQL found no issues.

[github-actions]

✅ Coverage Check Passed

Overall Coverage

Metric	Base	PR	Delta
Lines	93.91%	93.92%	📈 +0.01%
Statements	92.47%	92.49%	📈 +0.02%
Functions	93.10%	93.14%	📈 +0.04%
Branches	86.87%	86.88%	➡️ +0.01%

📁 Per-file Coverage Changes (2 files)

File	Lines (Before → After)	Statements (Before → After)
src/routing/bootstrap.ts	90.0% → 91.0% (+1.00%)	85.2% → 86.5% (+1.34%)
src/nvx/one-shot-process.ts	81.5% → 84.0% (+2.47%)	74.7% → 76.8% (+2.11%)

---

Coverage comparison generated by scripts/ci/compare-coverage.ts