@prismer/runtime 2.2.55 → 2.2.63

package/built-in-skills/prismer-github/references/github-api-cheatsheet.md

@@ -0,0 +1,177 @@
+# GitHub REST API Cheatsheet
+
+> Prismer scope: read auth.md first. All mutations below are examples for an
+> explicitly authorized target/action, never an automatic checklist. Preserve the
+> current dirty tree and long-lived branch; resolve the actual base branch and
+> do not switch, commit, push, publish, merge, delete branches or send reviews
+> unless requested. Use structured JSON for dynamic payloads, not shell string
+> interpolation. Public visibility requires explicit intent. Collection reads
+> must use scripts/github-api.py (complete Link pagination) or gh api --paginate;
+> porcelain list limits and single-page curl output are not a complete inventory.
+> Run shell pipelines with pipefail, record each exit status, and read back writes.
+
+Base URL: `https://api.github.com`
+
+All requests need: `-H "Authorization: token $GITHUB_TOKEN"`
+
+Use the `gh-env.sh` helper to set `$GITHUB_TOKEN`, `$GH_OWNER`, `$GH_REPO` automatically:
+```bash
+# Resolve SKILL_ROOT from the installed prismer-github entry, not cwd.
+source "$SKILL_ROOT/scripts/gh-env.sh"
+AUTH="$GH_AUTH_METHOD"
+OWNER="$GH_OWNER"
+REPO="$GH_REPO"
+OWNER_REPO="$GH_OWNER_REPO"
+# token-unverified needs a successful API identity check before remote work.
+```
+
+## Repositories
+
+| Action | Method | Endpoint |
+|--------|--------|----------|
+| Get repo info | GET | `/repos/{owner}/{repo}` |
+| Create repo (user) | POST | `/user/repos` |
+| Create repo (org) | POST | `/orgs/{org}/repos` |
+| Update repo | PATCH | `/repos/{owner}/{repo}` |
+| Delete repo | DELETE | `/repos/{owner}/{repo}` |
+| List your repos | GET | `/user/repos?per_page=30&sort=updated` |
+| List org repos | GET | `/orgs/{org}/repos` |
+| Fork repo | POST | `/repos/{owner}/{repo}/forks` |
+| Create from template | POST | `/repos/{owner}/{template}/generate` |
+| Get topics | GET | `/repos/{owner}/{repo}/topics` |
+| Set topics | PUT | `/repos/{owner}/{repo}/topics` |
+
+## Pull Requests
+
+| Action | Method | Endpoint |
+|--------|--------|----------|
+| List PRs | GET | `/repos/{owner}/{repo}/pulls?state=open` |
+| Create PR | POST | `/repos/{owner}/{repo}/pulls` |
+| Get PR | GET | `/repos/{owner}/{repo}/pulls/{number}` |
+| Update PR | PATCH | `/repos/{owner}/{repo}/pulls/{number}` |
+| List PR files | GET | `/repos/{owner}/{repo}/pulls/{number}/files` |
+| Merge PR | PUT | `/repos/{owner}/{repo}/pulls/{number}/merge` |
+| Request reviewers | POST | `/repos/{owner}/{repo}/pulls/{number}/requested_reviewers` |
+| Create review | POST | `/repos/{owner}/{repo}/pulls/{number}/reviews` |
+| Inline comment | POST | `/repos/{owner}/{repo}/pulls/{number}/comments` |
+
+### PR Merge Body
+
+```json
+{"merge_method": "squash", "commit_title": "feat: description (#N)"}
+```
+
+Merge methods: `"merge"`, `"squash"`, `"rebase"`
+
+### PR Review Events
+
+`"APPROVE"`, `"REQUEST_CHANGES"`, `"COMMENT"`
+
+## Issues
+
+| Action | Method | Endpoint |
+|--------|--------|----------|
+| List issues | GET | `/repos/{owner}/{repo}/issues?state=open` |
+| Create issue | POST | `/repos/{owner}/{repo}/issues` |
+| Get issue | GET | `/repos/{owner}/{repo}/issues/{number}` |
+| Update issue | PATCH | `/repos/{owner}/{repo}/issues/{number}` |
+| Add comment | POST | `/repos/{owner}/{repo}/issues/{number}/comments` |
+| Add labels | POST | `/repos/{owner}/{repo}/issues/{number}/labels` |
+| Remove label | DELETE | `/repos/{owner}/{repo}/issues/{number}/labels/{name}` |
+| Add assignees | POST | `/repos/{owner}/{repo}/issues/{number}/assignees` |
+| List labels | GET | `/repos/{owner}/{repo}/labels` |
+| Search issues | GET | `/search/issues?q={query}+repo:{owner}/{repo}` |
+
+Note: The Issues API also returns PRs. Filter with `"pull_request" not in item` when parsing.
+
+## CI / GitHub Actions
+
+| Action | Method | Endpoint |
+|--------|--------|----------|
+| List workflows | GET | `/repos/{owner}/{repo}/actions/workflows` |
+| List runs | GET | `/repos/{owner}/{repo}/actions/runs?per_page=10` |
+| List runs (branch) | GET | `/repos/{owner}/{repo}/actions/runs?branch={branch}` |
+| Get run | GET | `/repos/{owner}/{repo}/actions/runs/{run_id}` |
+| Download logs | GET | `/repos/{owner}/{repo}/actions/runs/{run_id}/logs` |
+| Re-run | POST | `/repos/{owner}/{repo}/actions/runs/{run_id}/rerun` |
+| Re-run failed | POST | `/repos/{owner}/{repo}/actions/runs/{run_id}/rerun-failed-jobs` |
+| Trigger dispatch | POST | `/repos/{owner}/{repo}/actions/workflows/{id}/dispatches` |
+| Commit status | GET | `/repos/{owner}/{repo}/commits/{sha}/status` |
+| Check runs | GET | `/repos/{owner}/{repo}/commits/{sha}/check-runs` |
+
+## Releases
+
+| Action | Method | Endpoint |
+|--------|--------|----------|
+| List releases | GET | `/repos/{owner}/{repo}/releases` |
+| Create release | POST | `/repos/{owner}/{repo}/releases` |
+| Get release | GET | `/repos/{owner}/{repo}/releases/{id}` |
+| Delete release | DELETE | `/repos/{owner}/{repo}/releases/{id}` |
+| Upload asset | POST | `https://uploads.github.com/repos/{owner}/{repo}/releases/{id}/assets?name={filename}` |
+
+## Secrets
+
+| Action | Method | Endpoint |
+|--------|--------|----------|
+| List secrets | GET | `/repos/{owner}/{repo}/actions/secrets` |
+| Get public key | GET | `/repos/{owner}/{repo}/actions/secrets/public-key` |
+| Set secret | PUT | `/repos/{owner}/{repo}/actions/secrets/{name}` |
+| Delete secret | DELETE | `/repos/{owner}/{repo}/actions/secrets/{name}` |
+
+## Branch Protection
+
+| Action | Method | Endpoint |
+|--------|--------|----------|
+| Get protection | GET | `/repos/{owner}/{repo}/branches/{branch}/protection` |
+| Set protection | PUT | `/repos/{owner}/{repo}/branches/{branch}/protection` |
+| Delete protection | DELETE | `/repos/{owner}/{repo}/branches/{branch}/protection` |
+
+## User / Auth
+
+| Action | Method | Endpoint |
+|--------|--------|----------|
+| Get current user | GET | `/user` |
+| List user repos | GET | `/user/repos` |
+| List user gists | GET | `/gists` |
+| Create gist | POST | `/gists` |
+| Search repos | GET | `/search/repositories?q={query}` |
+
+## Pagination
+
+Most list endpoints support:
+- `?per_page=100` (max 100)
+- `?page=2` for next page
+- Check `Link` header for `rel="next"` URL
+
+## Rate Limits
+
+- Authenticated: 5,000 requests/hour
+- Check remaining: `python3 "$SKILL_ROOT/scripts/github-api.py" https://api.github.com/rate_limit`
+
+## Common curl Patterns
+
+```bash
+# GET
+curl --fail-with-body -sS --max-time 30 -H "Authorization: token $GITHUB_TOKEN" \
+  https://api.github.com/repos/$GH_OWNER/$GH_REPO
+
+# POST with JSON body
+curl --fail-with-body -sS --max-time 30 -X POST \
+  -H "Authorization: token $GITHUB_TOKEN" \
+  https://api.github.com/repos/$GH_OWNER/$GH_REPO/issues \
+  -d '{"title": "...", "body": "..."}'
+
+# PATCH (update)
+curl --fail-with-body -sS --max-time 30 -X PATCH \
+  -H "Authorization: token $GITHUB_TOKEN" \
+  https://api.github.com/repos/$GH_OWNER/$GH_REPO/issues/42 \
+  -d '{"state": "closed"}'
+
+# DELETE
+curl --fail-with-body -sS --max-time 30 -X DELETE \
+  -H "Authorization: token $GITHUB_TOKEN" \
+  https://api.github.com/repos/$GH_OWNER/$GH_REPO/issues/42/labels/bug
+
+# Parse JSON response with python3
+curl --fail-with-body -sS --max-time 30 ... | python3 -c "import sys,json; data=json.load(sys.stdin); print(data['field'])"
+```

package/built-in-skills/prismer-github/references/issue-to-pr.md

@@ -0,0 +1,74 @@
+# GitHub Issue to Pull Request
+
+> Prismer scope: read auth.md first. All mutations below are examples for an
+> explicitly authorized target/action, never an automatic checklist. Preserve the
+> current dirty tree and long-lived branch; resolve the actual base branch and
+> do not switch, commit, push, publish, merge, delete branches or send reviews
+> unless requested. Use structured JSON for dynamic payloads, not shell string
+> interpolation. Public visibility requires explicit intent. Collection reads
+> must use scripts/github-api.py (complete Link pagination) or gh api --paginate;
+> porcelain list limits and single-page curl output are not a complete inventory.
+> Run shell pipelines with pipefail, record each exit status, and read back writes.
+
+Turn a GitHub issue into a tested, verified PR. This skill owns the end-to-end discipline — premise validation, duplicate sweeps, class-level fixes, and honest CI reporting; the sibling GitHub and development skills own their own mechanics.
+
+## When to Use
+
+- "Fix issue #123 and open a PR."
+- "Implement this GitHub feature request."
+- "Take this bug from issue to green CI."
+
+Don't use for: reviewing an existing PR, or answering a code question with no requested change.
+
+## Procedure
+
+### 1. Read the live issue — body AND full thread
+
+Use `terminal` to run `gh issue view <N> --comments`. The body is a snapshot from filing time; the newest comments carry the live state: partial fixes already merged, new root-cause analyses, maintainer decisions, or questions directed at you that change the task. Also read repository instructions (`AGENTS.md`, contribution docs) with `read_file`. Done when the currently requested behavior, non-goals, and any unanswered thread questions are known.
+
+### 2. Sweep for existing and duplicate work
+
+Before writing anything, run `gh pr list --search "#<N>" --state all` plus at least two keyword/synonym variants of the symptom (`gh pr list --search "<subsystem> <symptom>" --state open`). Popular issues attract multiple independent fixes; building a duplicate wastes the work and the credit. Also check whether a recent commit already fixed it: `git log --oneline -20 -- <relevant files>`. Done when you know every open PR and recent commit touching this issue, or that none exist.
+
+### 3. Validate the premise against current code — and against design intent
+
+Reproduce the bug or demonstrate the missing behavior on the current default branch with a failing test or fixture, using `search_files` and `read_file` to trace the reported path. Then check the second question: is the "bug" actually deliberate design? Run `git log -p -S "<symbol>"` on the code the issue wants changed and read the original commit's intent — a missing link or restriction is often the feature. Challenge stale or flawed issue prose instead of implementing it blindly. Done when the root cause or feature gap is demonstrated in current code AND the change doesn't fight an intentional design.
+
+### 4. Define acceptance and risk
+
+List acceptance criteria, interfaces, migrations/state changes, compatibility, security/privacy, rollout, and rollback. Map every criterion to a test or explicit verification. Done when review has a finite contract.
+
+### 5. Implement the smallest complete change — and fix the class
+
+Work on an isolated branch or worktree, loading `systematic-debugging` or `test-driven-development` when the bug class calls for them. Add regression tests first, then implement. When the fix is in hand, `search_files` for the same bug shape at sibling call sites and fix the whole class in this PR — an incomplete fix that leaves known siblings broken is worse than none. Every changed line must trace to the issue; no drive-by cleanup. Done when targeted tests pass, the original failure no longer reproduces, and sibling sites are fixed or explicitly ruled out.
+
+### 6. Prove the regression test bites (sabotage run)
+
+Temporarily restore the old behavior of the exact function under test, run the new test, and confirm it FAILS; then restore the fix and confirm it passes. A regression test that passes with and without the fix proves nothing. Done when the test demonstrably fails on pre-fix code.
+
+### 7. Run repository quality gates, then open the PR immediately
+
+Run the formatter, lint, typecheck, and the repo's canonical test entrypoint on affected areas; use the native `codebase-design` review method on the diff. Then push and open the PR right away — the PR is what dispatches CI, and CI latency is the long pole; do not sit on finished work. Load `pr-workflow.md` for PR mechanics: conventional branch/commit, body linking the issue with problem, approach, tests, risk, and exclusions. Read the PR back and verify head SHA, base, title, and files. Done when the PR exists with the intended diff and CI is running.
+
+### 8. Shepherd CI honestly and close the loop
+
+Inspect live checks and failure logs via `gh pr checks` / `gh run view --log-failed`. Distinguish failures introduced by your diff from pre-existing baseline or infrastructure failures — reproduce on the default branch when unsure, and rerun once only for genuine infra flakes. Never say "green," "merged," or "released" without live evidence of that exact state. When the PR lands, comment on the issue with the PR link and a one-line explanation so the reporter gets a traceable resolution. Done when CI state, remaining blockers, and the issue thread all reflect reality.
+
+## Pitfalls
+
+- Coding before reading issue comments, sweeping for duplicate PRs, or reading current code.
+- "Fixing" behavior that the original commit shows is intentional design.
+- Fixing a symptom at one call site while sibling sites keep the same bug.
+- Shipping a regression test that also passes without the fix.
+- Opening a PR with unrun tests or unrelated formatting churn.
+- Claiming the issue is delivered because a PR exists.
+
+## Verification
+
+- [ ] Full issue thread read; newest comment state reflected in the plan.
+- [ ] Duplicate-PR sweep run with issue number + 2 keyword variants.
+- [ ] Premise reproduced on current code; design intent checked via git history.
+- [ ] Regression test proven to fail without the fix.
+- [ ] Sibling call sites fixed or explicitly ruled out.
+- [ ] Every changed line traces to the issue.
+- [ ] CI state reported from live evidence only; issue commented with the PR link.

package/built-in-skills/prismer-github/references/issues.md

@@ -0,0 +1,336 @@
+# GitHub Issues Management
+
+> Prismer scope: read auth.md first. All mutations below are examples for an
+> explicitly authorized target/action, never an automatic checklist. Preserve the
+> current dirty tree and long-lived branch; resolve the actual base branch and
+> do not switch, commit, push, publish, merge, delete branches or send reviews
+> unless requested. Use structured JSON for dynamic payloads, not shell string
+> interpolation. Public visibility requires explicit intent. Collection reads
+> must use scripts/github-api.py (complete Link pagination) or gh api --paginate;
+> porcelain list limits and single-page curl output are not a complete inventory.
+> Run shell pipelines with pipefail, record each exit status, and read back writes.
+
+Create, search, triage, and manage GitHub issues. Each section shows `gh` first, then the `curl` fallback.
+
+## Prerequisites
+
+- Authenticated with GitHub (see `auth.md` reference)
+- Inside a git repo with a GitHub remote, or specify the repo explicitly
+
+### Setup
+
+```bash
+# Resolve SKILL_ROOT from the installed prismer-github entry, not cwd.
+source "$SKILL_ROOT/scripts/gh-env.sh"
+AUTH="$GH_AUTH_METHOD"
+OWNER="$GH_OWNER"
+REPO="$GH_REPO"
+OWNER_REPO="$GH_OWNER_REPO"
+# token-unverified needs a successful API identity check before remote work.
+```
+
+---
+
+## 1. Viewing Issues
+
+**With gh:**
+
+```bash
+gh issue list
+gh issue list --state open --label "bug"
+gh issue list --assignee @me
+gh issue list --search "authentication error" --state all
+gh issue view 42
+```
+
+**With curl:**
+
+```bash
+# List open issues
+python3 "$SKILL_ROOT/scripts/github-api.py" "https://api.github.com/repos/$OWNER/$REPO/issues?state=open&per_page=20" \
+  | python -c "
+import sys, json
+for i in json.load(sys.stdin):
+    if 'pull_request' not in i:  # GitHub API returns PRs in /issues too
+        labels = ', '.join(l['name'] for l in i['labels'])
+        print(f\"#{i['number']:5}  {i['state']:6}  {labels:30}  {i['title']}\")"
+
+# Filter by label
+python3 "$SKILL_ROOT/scripts/github-api.py" "https://api.github.com/repos/$OWNER/$REPO/issues?state=open&labels=bug&per_page=20" \
+  | python -c "
+import sys, json
+for i in json.load(sys.stdin):
+    if 'pull_request' not in i:
+        print(f\"#{i['number']}  {i['title']}\")"
+
+# View a specific issue
+python3 "$SKILL_ROOT/scripts/github-api.py" https://api.github.com/repos/$OWNER/$REPO/issues/42 \
+  | python -c "
+import sys, json
+i = json.load(sys.stdin)
+labels = ', '.join(l['name'] for l in i['labels'])
+assignees = ', '.join(a['login'] for a in i['assignees'])
+print(f\"#{i['number']}: {i['title']}\")
+print(f\"State: {i['state']}  Labels: {labels}  Assignees: {assignees}\")
+print(f\"Author: {i['user']['login']}  Created: {i['created_at']}\")
+print(f\"\n{i['body']}\")"
+
+# Search issues
+python3 "$SKILL_ROOT/scripts/github-api.py" "https://api.github.com/search/issues?q=authentication+error+repo:$OWNER/$REPO" \
+  | python -c "
+import sys, json
+for i in json.load(sys.stdin)['items']:
+    print(f\"#{i['number']}  {i['state']:6}  {i['title']}\")"
+```
+
+## 2. Creating Issues
+
+**With gh:**
+
+```bash
+gh issue create \
+  --title "Login redirect ignores ?next= parameter" \
+  --body "## Description
+After logging in, users always land on /dashboard.
+
+## Steps to Reproduce
+1. Navigate to /settings while logged out
+2. Get redirected to /login?next=/settings
+3. Log in
+4. Actual: redirected to /dashboard (should go to /settings)
+
+## Expected Behavior
+Respect the ?next= query parameter." \
+  --label "bug,backend" \
+  --assignee "username"
+```
+
+**With curl:**
+
+```bash
+curl --fail-with-body -sS --max-time 30 -X POST \
+  -H "Authorization: token $GITHUB_TOKEN" \
+  https://api.github.com/repos/$OWNER/$REPO/issues \
+  -d '{
+    "title": "Login redirect ignores ?next= parameter",
+    "body": "## Description\nAfter logging in, users always land on /dashboard.\n\n## Steps to Reproduce\n1. Navigate to /settings while logged out\n2. Get redirected to /login?next=/settings\n3. Log in\n4. Actual: redirected to /dashboard\n\n## Expected Behavior\nRespect the ?next= query parameter.",
+    "labels": ["bug", "backend"],
+    "assignees": ["username"]
+  }'
+```
+
+### Bug Report Template
+
+```
+## Bug Description
+<What's happening>
+
+## Steps to Reproduce
+1. <step>
+2. <step>
+
+## Expected Behavior
+<What should happen>
+
+## Actual Behavior
+<What actually happens>
+
+## Environment
+- OS: <os>
+- Version: <version>
+```
+
+### Feature Request Template
+
+```
+## Feature Description
+<What you want>
+
+## Motivation
+<Why this would be useful>
+
+## Proposed Solution
+<How it could work>
+
+## Alternatives Considered
+<Other approaches>
+```
+
+## 3. Managing Issues
+
+### Add/Remove Labels
+
+**With gh:**
+
+```bash
+gh issue edit 42 --add-label "priority:high,bug"
+gh issue edit 42 --remove-label "needs-triage"
+```
+
+**With curl:**
+
+```bash
+# Add labels
+curl --fail-with-body -sS --max-time 30 -X POST \
+  -H "Authorization: token $GITHUB_TOKEN" \
+  https://api.github.com/repos/$OWNER/$REPO/issues/42/labels \
+  -d '{"labels": ["priority:high", "bug"]}'
+
+# Remove a label
+curl --fail-with-body -sS --max-time 30 -X DELETE \
+  -H "Authorization: token $GITHUB_TOKEN" \
+  https://api.github.com/repos/$OWNER/$REPO/issues/42/labels/needs-triage
+
+# List available labels in the repo
+python3 "$SKILL_ROOT/scripts/github-api.py" https://api.github.com/repos/$OWNER/$REPO/labels \
+  | python -c "
+import sys, json
+for l in json.load(sys.stdin):
+    print(f\"  {l['name']:30}  {l.get('description', '')}\")"
+```
+
+### Assignment
+
+**With gh:**
+
+```bash
+gh issue edit 42 --add-assignee username
+gh issue edit 42 --add-assignee @me
+```
+
+**With curl:**
+
+```bash
+curl --fail-with-body -sS --max-time 30 -X POST \
+  -H "Authorization: token $GITHUB_TOKEN" \
+  https://api.github.com/repos/$OWNER/$REPO/issues/42/assignees \
+  -d '{"assignees": ["username"]}'
+```
+
+### Commenting
+
+**With gh:**
+
+```bash
+gh issue comment 42 --body "Investigated — root cause is in auth middleware. Working on a fix."
+```
+
+**With curl:**
+
+```bash
+curl --fail-with-body -sS --max-time 30 -X POST \
+  -H "Authorization: token $GITHUB_TOKEN" \
+  https://api.github.com/repos/$OWNER/$REPO/issues/42/comments \
+  -d '{"body": "Investigated — root cause is in auth middleware. Working on a fix."}'
+```
+
+### Closing and Reopening
+
+**With gh:**
+
+```bash
+gh issue close 42
+gh issue close 42 --reason "not planned"
+gh issue reopen 42
+```
+
+**With curl:**
+
+```bash
+# Close
+curl --fail-with-body -sS --max-time 30 -X PATCH \
+  -H "Authorization: token $GITHUB_TOKEN" \
+  https://api.github.com/repos/$OWNER/$REPO/issues/42 \
+  -d '{"state": "closed", "state_reason": "completed"}'
+
+# Reopen
+curl --fail-with-body -sS --max-time 30 -X PATCH \
+  -H "Authorization: token $GITHUB_TOKEN" \
+  https://api.github.com/repos/$OWNER/$REPO/issues/42 \
+  -d '{"state": "open"}'
+```
+
+### Linking Issues to PRs
+
+Issues are automatically closed when a PR merges with the right keywords in the body:
+
+```
+Closes #42
+Fixes #42
+Resolves #42
+```
+
+To create a branch from an issue:
+
+**With gh:**
+
+```bash
+gh issue develop 42 --checkout
+```
+
+**With git (manual equivalent):**
+
+```bash
+# Preserve the current branch/worktree. Sync only via the repository-approved branch procedure.
+git checkout -b fix/issue-42-login-redirect
+```
+
+## 4. Issue Triage Workflow
+
+When asked to triage issues:
+
+1. **List untriaged issues:**
+
+```bash
+# With gh
+gh issue list --label "needs-triage" --state open
+
+# With curl
+python3 "$SKILL_ROOT/scripts/github-api.py" "https://api.github.com/repos/$OWNER/$REPO/issues?labels=needs-triage&state=open" \
+  | python -c "
+import sys, json
+for i in json.load(sys.stdin):
+    if 'pull_request' not in i:
+        print(f\"#{i['number']}  {i['title']}\")"
+```
+
+2. **Read and categorize** each issue (view details, understand the bug/feature)
+
+3. **Apply labels and priority** (see Managing Issues above)
+
+4. **Assign** if the owner is clear
+
+5. **Comment with triage notes** if needed
+
+## 5. Bulk Operations
+
+For batch operations, combine API calls with shell scripting:
+
+**With gh:**
+
+```bash
+# Enumerate completely before authorizing a specific set of issue IDs.
+gh api --paginate "repos/$OWNER/$REPO/issues?labels=wontfix&state=open" --jq '.[] | select(.pull_request == null) | .number'
+# Close only explicitly authorized IDs; read back each result.
+```
+
+**With curl:**
+
+```bash
+# Complete list only; review the exact IDs before any write.
+python3 "$SKILL_ROOT/scripts/github-api.py" "https://api.github.com/repos/$OWNER/$REPO/issues?labels=wontfix&state=open" | python3 -c "import sys,json; [print(i['number']) for i in json.load(sys.stdin) if 'pull_request' not in i]"
+# Verify each resulting state before claiming closure; never close PR entries.
+```
+
+## Quick Reference Table
+
+| Action | gh | curl endpoint |
+|--------|-----|--------------|
+| List issues | `gh issue list` | `GET /repos/{o}/{r}/issues` |
+| View issue | `gh issue view N` | `GET /repos/{o}/{r}/issues/N` |
+| Create issue | `gh issue create ...` | `POST /repos/{o}/{r}/issues` |
+| Add labels | `gh issue edit N --add-label ...` | `POST /repos/{o}/{r}/issues/N/labels` |
+| Assign | `gh issue edit N --add-assignee ...` | `POST /repos/{o}/{r}/issues/N/assignees` |
+| Comment | `gh issue comment N --body ...` | `POST /repos/{o}/{r}/issues/N/comments` |
+| Close | `gh issue close N` | `PATCH /repos/{o}/{r}/issues/N` |
+| Search | `gh issue list --search "..."` | `GET /search/issues?q=...` |