CI: SESSIONS_WEB_AOT_SMOKE_GATE opt-in in ci-local after #1891 lands

[PurHur]

Problem

#1891 ✅ landed PHPUnit + script/examples-aot-smoke.sh coverage for 005-SessionsWeb two-request AOT execute (cookie jar + $_SESSION flash). Today there is no ci-local hook — contributors only discover regressions via manual SESSIONS_WEB_AOT_SMOKE_GATE=1 runs.

VM session curls are default-on (#1887 ✅, #1894 ✅). AOT session persistence needs the same staged gate pattern as MiniWebApp execute (#676) and M3 strict (#1866).

Status (May 2026): Blocker #1891 is closed — this issue is ready to implement (wire opt-in gate only).

Goal

1. Add SESSIONS_WEB_AOT_SMOKE_GATE="${SESSIONS_WEB_AOT_SMOKE_GATE:-0}" to script/ci-defaults.env
2. ci_run_sessions_web_aot_smoke() in script/ci-common.sh — runs after examples-aot-smoke.sh in llvm tail only
3. Wire into script/ci-local.sh (skip when LLVM missing — exit 0 like other aot smokes)
4. Document in docs/local-ci-matrix.md; cross-link CI: Default SESSIONS_WEB_AOT_SMOKE_GATE=1 in ci-local after #1921 green #1923 for default-on flip

Implementation hints

Piece	Path	Notes
Env	script/ci-defaults.env	Default 0 until harness stable on all hosts
Hook	script/ci-common.sh	Mirror ci_run_examples_aot_smoke()
Smoke	script/examples-aot-smoke.sh	EXAMPLES_AOT_SMOKE_ONLY=005 slice (see #2013 pattern for 006)
Test	test/aot/SessionsWebAotExecuteTest.php	From #1891 — @group llvm
Cookie	test/support/ or inline in smoke	Reuse jar helper from #1891
Session dir	PHP_COMPILER_SESSION_DIR	Isolate per run under /tmp
Doctor	lib/Doctor.php (#1903)	List gate; remove “blocked by #1891” when wired
Matrix test	test/unit/CiScriptsTest.php	Assert env default + hook name

Wire order in ci-local.sh

examples-aot-smoke (000–004, 006…) → SESSIONS_WEB_AOT_SMOKE_GATE=1 block → deploy smokes

Verify (host)

SESSIONS_WEB_AOT_SMOKE_GATE=1 ./script/ci-local.sh --filter SessionsWebAot
EXAMPLES_AOT_SMOKE_ONLY=005 ./script/examples-aot-smoke.sh

Verify (harness — required)

./script/docker-exec.sh -- bash -lc 'source script/php-env.sh && SESSIONS_WEB_AOT_SMOKE_GATE=1 ./script/ci-local.sh --filter SessionsWebAot'
make test-harness   # full gate before merge

Do not use raw docker run -v "$(pwd):/compiler" on Runforge (#272 ✅).

Acceptance criteria

• Gate listed in phpc doctor --gates (DevEx: phpc doctor --gates lists 005-SessionsWeb ladder (#1887–#1894) #1903)
• SESSIONS_WEB_AOT_SMOKE_GATE=0 skips block with one-line message
• SESSIONS_WEB_AOT_SMOKE_GATE=1 runs two-request flash on harness Docker image
• No GitHub Actions required (Disable github actions for now #394 ✅)

Dependencies

• Testing: 005-SessionsWeb AOT link + two-request CGI execute smoke #1891 ✅ — AOT link + two-request execute
• Examples: 005-SessionsWeb — session_start + flash message reference app #1881 ✅ — example tree
• JIT: session_start lowering for self-host spine (ext/standard/session_start.php) #1882 ✅ — session_start JIT/AOT
• Testing: ExamplesCompileTest 005-SessionsWeb AOT link (-l) before CGI execute #1946 ✅ — AOT link default-on (orthogonal)
• Follow-up: CI: Default SESSIONS_WEB_AOT_SMOKE_GATE=1 in ci-local after #1921 green #1923 default-on flip in ci-local.sh

Links

• ROADMAP 🗺️ ROADMAP: Self-host + web-capable PHP subset (living) #78 Phase 3 Web AOT
• VM precedent: CI: Default SESSIONS_WEB_SMOKE_GATE=1 in ci-fast after #1887 green #1894 ✅ · example README: examples/005-SessionsWeb/README.md

[PurHur]

PM sync — batch 93

Still blocked on #1891. PR #1942 adds opt-in SESSIONS_WEB_AOT_SMOKE_GATE (default 0). Flip to default-on is #1923 after gate=1 verify passes in Docker.

No label/state change — waiting on LLVM verify + merge of #1942.