@vypdev/copilot 3.2.0 → 3.3.0

package/README.md

@@ -30,29 +30,62 @@ Full documentation: **[docs.page/vypdev/copilot](https://docs.page/vypdev/copilo
 
 ## Getting started
 
-1. **Create a PAT** and store it as a repo secret (e.g. `PAT`). See [Authentication](https://docs.page/vypdev/copilot/authentication).
-2. **Use the action** from the marketplace so versions are stable:
-   ```yaml
-   uses: vypdev/copilot@v3
-   ```
-3. **Install the CLI** when you want to run setup or single actions locally:
-   ```bash
-   npm install --global @vypdev/copilot
-   copilot --version
-   ```
-4. **Add workflows** — Copy the files from `setup/workflows/` into your `.github/workflows/`, or run **`copilot setup`** from your repo root (with `PERSONAL_ACCESS_TOKEN` in `.env`). See [How to use](https://docs.page/vypdev/copilot/how-to-use).
+The recommended onboarding path is to install the published package globally with
+`pnpm` and initialize the target repository with `copilot setup`:
+
+```bash
+pnpm add --global @vypdev/copilot
+copilot --version
+cd /path/to/your/repository
+copilot setup
+```
+
+`@vypdev/copilot` contains both the `copilot` CLI and the compiled GitHub Action.
+The global installation makes the CLI and the setup templates available; it does
+not install an Action into GitHub. `copilot setup` is the canonical initialization
+flow and will, according to the selected features:
+
+- copy the required workflows, issue templates, and pull request template into the repository;
+- create the labels and issue types used by the workflows;
+- configure non-sensitive Repository Variables; and
+- validate or provision the workflow PAT and provider credentials at the selected scope.
+
+The setup PAT entered by the operator is separate from the workflow `PAT` Secret.
+Use `copilot setup --dry-run` to inspect the plan before making local or remote
+changes. See the complete [How to use](https://docs.page/vypdev/copilot/how-to-use)
+guide and [Authentication](https://docs.page/vypdev/copilot/authentication).
+
+### Manual workflow integration (advanced)
+
+You can integrate the Action manually when the CLI setup flow is not suitable:
+copy selected files from `setup/workflows/` into `.github/workflows/` and add
+steps such as:
+
+```yaml
+- uses: vypdev/copilot@v3
+  with:
+    token: ${{ secrets.PAT }}
+```
+
+This is a lower-level integration path, not an alternative name for
+`copilot setup`: it does not automatically create labels, issue types, Variables,
+Secrets, templates, or the complete set of workflows. Those resources must be
+configured and kept consistent manually. See [Workflow setup](https://docs.page/vypdev/copilot/issues/workflow-setup)
+for action-level examples.
 
 ---
 
 ## What it does
 
-- **Issues** — Branch creation from labels (feature, bugfix, hotfix, release, docs, chore), project linking, assignees, lifecycle/size/progress labels; optional Bugbot (AI) on the issue; from a comment you can plan, recheck, fix, or dismiss findings.
-- **Pull requests** — Link PRs to issues, update project columns, assign reviewers; optional AI-generated PR description and automatic Bugbot review with stable finding threads; from a PR review comment you can request a read-only recheck or an authorized autofix.
-- **Push (commits)** — Notify the issue, update size/progress; optional Bugbot (detection) and prefix checks.
+- **Issues** — Branch creation from labels (feature, bugfix, hotfix, release, docs, chore), project linking, assignees, lifecycle/size/progress labels; new issues receive a contextual `@vypbot` welcome; from comments you can ask for help, explain/diagnose/analyze code, plan work, fix findings, or request an authorized implementation.
+- **Pull requests** — Link PRs to issues, update project columns, assign reviewers; optional AI-generated PR description and automatic Bugbot review with stable finding threads; use `/copilot analyze` or `@vypbot analyze ...` for read-only review, or request an authorized change.
+- **Push (commits)** — Notify the issue, update size/progress, and optionally run Bugbot; a separate agent-free observer watches every branch and recommends synchronizing children when their parent moves.
 - **Projects** — Link issues and PRs to boards and move them to the right columns.
 - **Single actions** — On-demand: check progress, think, create release/tag, mark deployed, etc.
-- **Evidence and safety** — Every run writes a bounded Job Summary; PR reviews expose a `Copilot / Review` Check Run, active findings fail that check, and all agent/comment content remains bounded and treated as untrusted data.
-- **Concurrency** — Uses a repository-wide application queue across the seven Copilot/Task mutation workflows. Polling is adaptive and rate-limit-aware, with a 90-minute queue deadline and no cancellation or overwrite of intermediate runs. See [Features → Workflow concurrency](https://docs.page/vypdev/copilot/features#workflow-concurrency-and-sequential-execution).
+- **Branch synchronization** — Authorized issue/PR commands merge parent into working branch, call the fixer only for eligible conflicts, run verification, reject remote races, push, and report exactly what happened.
+- **Evidence and safety** — Every run writes a bounded Job Summary; PR reviews expose a `Copilot / Review` Check Run, active findings fail that check, agent sandboxes run without approval or network access, and all agent/comment content remains bounded, secret-redacted, and treated as untrusted data.
+- **Bugbot quality** — Hierarchical rules, semantic finding identity, safe GitHub suggestions, analysis-only dry runs, a multilingual regression corpus, real-agent benchmark runner, content-free telemetry/analytics, and the provider-neutral `@vypdev/copilot/bugbot` API.
+- **Concurrency** — Each workflow waits only for older active runs of that same workflow. Polling is adaptive and rate-limit-aware, with a 90-minute queue deadline and no cancellation or overwrite of intermediate runs. Event templates can also skip bot-authored jobs before runner allocation through the optional, generic `COPILOT_BOT_LOGIN` Repository Variable. See [Features → Workflow concurrency](https://docs.page/vypdev/copilot/features#workflow-concurrency-and-sequential-execution).
 
 AI features use the configured agent runtime and qualified model; see the [Agents](https://docs.page/vypdev/copilot/agents) and [Security & Operations](https://docs.page/vypdev/copilot/security-operations) documentation. You can run progress and Bugbot locally through the [Single actions → Workflow & CLI](https://docs.page/vypdev/copilot/single-actions/workflow-and-cli) path.
 

package/action.yml

@@ -20,6 +20,18 @@ inputs:
   single-action-changelog:
     description: "Changelog target for executing single action."
     default: ""
+  single-action-message:
+    description: "Markdown message for the publish_issue_comment single action."
+    default: ""
+  single-action-comment-id:
+    description: "Optional issue comment ID to replace or append to."
+    default: ""
+  single-action-comment-mode:
+    description: "Comment publication mode: create, replace, or append. Defaults to create without an ID and replace with an ID."
+    default: ""
+  inactivity-threshold-hours:
+    description: "Hours without issue activity before the scheduled inactivity action closes a waiting issue."
+    default: "168"
   emoji-labeled-title:
     description: "Enable titles with emojis based on issue labels."
     default: "true"
@@ -104,30 +116,36 @@ inputs:
   size-xs-label:
     description: "Label to indicate a task of size XS."
     default: "size: XS"
-  copilot-state-analyzing-label:
-    description: "Label for the Copilot lifecycle state: analyzing."
-    default: "copilot:state:analyzing"
-  copilot-state-planned-label:
+  state-ai-processing-label:
+    description: "Temporary label while a Copilot agent is analyzing or working."
+    default: "state:ai-processing"
+  state-planned-label:
     description: "Label for the Copilot lifecycle state: planned."
-    default: "copilot:state:planned"
-  copilot-state-in-progress-label:
+    default: "state:planned"
+  state-in-progress-label:
     description: "Label for the Copilot lifecycle state: implementation in progress."
-    default: "copilot:state:in-progress"
-  copilot-state-reviewing-label:
+    default: "state:in-progress"
+  state-reviewing-label:
     description: "Label for the Copilot lifecycle state: reviewing."
-    default: "copilot:state:reviewing"
-  copilot-state-changes-requested-label:
+    default: "state:reviewing"
+  state-changes-requested-label:
     description: "Label for the Copilot lifecycle state: changes requested."
-    default: "copilot:state:changes-requested"
-  copilot-state-verified-label:
+    default: "state:changes-requested"
+  state-verified-label:
     description: "Label for the Copilot lifecycle state: verified."
-    default: "copilot:state:verified"
-  copilot-state-ready-label:
+    default: "state:verified"
+  state-ready-label:
     description: "Label for the Copilot lifecycle state: ready."
-    default: "copilot:state:ready"
-  copilot-state-blocked-label:
+    default: "state:ready"
+  state-blocked-label:
     description: "Label for the Copilot lifecycle state: blocked."
-    default: "copilot:state:blocked"
+    default: "state:blocked"
+  state-awaiting-maintainer-label:
+    description: "Label for work waiting on a maintainer response or approval."
+    default: "state:awaiting-maintainer"
+  state-awaiting-issue-author-label:
+    description: "Label for work waiting on more information or changes from the issue author."
+    default: "state:awaiting-issue-author"
   size-xxl-threshold-lines:
     description: "Threshold for size XXL in lines."
     default: "1000"
@@ -510,25 +528,12 @@ inputs:
   tester-command:
     description: "Optional CLI command override for test tasks."
     default: ""
-  release-provider:
-    description: "Optional provider override for release planning tasks."
-    default: ""
-  release-model-provider:
-    description: "Optional model-provider override for release planning tasks."
-    default: ""
-  release-effort:
-    description: "Optional reasoning effort or model variant override for release tasks."
-    default: ""
-  release-model:
-    description: "Optional model override for release planning tasks."
-    default: ""
-  release-command:
-    description: "Optional CLI command override for release planning tasks."
-    default: ""
-
   ai-pull-request-description:
     description: "Enable AI-powered automatic updates for pull request descriptions."
     default: "true"
+  ai-pull-request-description-mode:
+    description: "PR description policy: replace (full ownership), append (preserve human text), preserve (only explicit /copilot description), or disabled."
+    default: "replace"
   ai-ignore-files:
     description: "Comma-separated list of files to ignore for AI operations."
     default: ""
@@ -536,8 +541,8 @@ inputs:
     description: "Restrict AI features to only organization/project members."
     default: "false"
   ai-include-reasoning:
-    description: "Include reasoning or chain-of-thought in AI responses when supported by the model."
-    default: "true"
+    description: "Include concise provider-supplied explanation metadata when available; never requests hidden chain-of-thought."
+    default: "false"
   bugbot-severity:
     description: "Minimum severity for potential-problem detections to be published (info, low, medium, high). Findings below this are not posted as comments."
     default: "low"
@@ -547,6 +552,33 @@ inputs:
   bugbot-fix-verify-commands:
     description: "Comma-separated commands to run after bugbot autofix (e.g. pnpm run build, pnpm test, pnpm run lint). The selected agent runtime runs these in its workspace; the runner can re-run them before commit. If empty, no additional verification commands are requested."
     default: ""
+  bugbot-dry-run:
+    description: "Analyze and return findings without publishing comments, resolving threads, updating checks, or performing autofix."
+    default: "false"
+  bugbot-effort:
+    description: "Review effort policy: low, default, high, or smart (selected from diff complexity)."
+    default: "default"
+  bugbot-review-drafts:
+    description: "Review draft pull requests when true."
+    default: "false"
+  bugbot-trace-rules:
+    description: "Include the ordered rule sources used by the review in its summary."
+    default: "false"
+  bugbot-suggested-changes:
+    description: "Allow safe line-local suggestions to be rendered as GitHub suggested changes."
+    default: "true"
+  bugbot-telemetry:
+    description: "Emit redacted structured review telemetry and include it in the action result."
+    default: "true"
+  bugbot-fail-on-unresolved:
+    description: "Fail this action invocation when the latest Bugbot result still contains open or reopened findings. Disabled by default."
+    default: "false"
+  bugbot-organization-rules:
+    description: "Semicolon- or newline-separated organization rules applied before repository and path-scoped rules."
+    default: ""
+outputs:
+  bugbot-telemetry:
+    description: "JSON array of content-free Bugbot telemetry snapshots for this action run."
 runs:
   using: "node24"
   main: "build/github_action/index.js"