@vypdev/copilot 3.9.1 → 3.9.3

package/README.md

@@ -3,122 +3,76 @@
 ![Build](https://github.com/vypdev/copilot/actions/workflows/ci_check.yml/badge.svg)
 ![License](https://img.shields.io/github/license/vypdev/copilot)
 
-
 # Copilot — GitHub with super powers
 
-**Copilot** is a GitHub Action for task management using Git-Flow: it links issues, branches, and pull requests to GitHub Projects, automates branch creation from labels, and keeps boards and progress in sync. Think of it as bringing Atlassian-style integration (boards, tasks, branches) to GitHub.
-
-Full documentation: **[docs.page/vypdev/copilot](https://docs.page/vypdev/copilot)**
+**Copilot connects the work described in a GitHub issue to its branch, implementation, pull request, review, and release.** It combines a GitHub Action for repository automation with a local CLI and web setup assistant. Enable the capabilities your team needs, including optional AI analysis and code changes.
 
-*Maintains state and configuration persisted in issue descriptions for seamless workflow automation.*
+## What can I do with it?
 
----
+| Your goal | What Copilot provides | Start here |
+|---|---|---|
+| Organize work from issues | Issue Forms, Action-managed branches, lifecycle labels, progress, and GitHub Projects updates | [Manage issues and branches](https://docs.page/vypdev/copilot/guides/issues-and-branches) |
+| Review pull requests | Bugbot findings near the code, a current review status, optional PR descriptions, and explicit requests to fix findings | [Review PRs and resolve findings](https://docs.page/vypdev/copilot/guides/review-pull-requests) |
+| Ask for help or implementation | Commands to explain code, diagnose problems, plan work, or apply an authorized change and run verification | [Work with the bot](https://docs.page/vypdev/copilot/guides/work-with-the-bot) |
+| Keep working branches current | Drift notices and an authorized synchronization command that verifies the merge before pushing | [Branch synchronization](https://docs.page/vypdev/copilot/issues/branch-synchronization) |
+| Ship releases and hotfixes | Frozen source revisions, protected promotion PRs, version tags, GitHub Releases, and reconciliation back to development | [Release and hotfix guide](https://docs.page/vypdev/copilot/guides/releases-and-hotfixes) |
 
-## Documentation index
+For example, a maintainer starts an admitted issue with `in-progress`. Copilot creates and verifies its branch. A developer or an authorized bot request contributes changes on that exact branch. A linked PR receives review findings and runs the repository's checks. After an authorized merge, a separately launched release can promote the accepted production commit and reconcile it into development.
 
-| Section | Description |
-|--------|-------------|
-| [How to use](https://docs.page/vypdev/copilot/how-to-use) | Step-by-step setup: PAT, `copilot setup`, workflows |
-| [Features & capabilities](https://docs.page/vypdev/copilot/features) | Workflow triggers, single actions, agent execution, and concurrency |
-| [Authentication](https://docs.page/vypdev/copilot/authentication) | PAT setup, permissions, token best practices |
-| [Configuration](https://docs.page/vypdev/copilot/configuration) | All inputs: branches, labels, projects, locale, agents, and more |
-| [Release orchestration](https://docs.page/vypdev/copilot/issues/deployment-orchestration) | Production-first release/hotfix flow, npm OIDC, reconciliation, and recovery |
-| [Agents](https://docs.page/vypdev/copilot/agents) | Runtime, model, CLI, policy, and failure behavior |
-| [Security & Operations](https://docs.page/vypdev/copilot/security-operations) | Credentials, trust boundaries, provisioning, verification, upgrades, and rollback |
-| [Development](https://docs.page/vypdev/copilot/development) | Architecture, testing, documentation, artifacts, and release process |
+```mermaid
+flowchart LR
+  I[Issue and plan] --> B[Verified working branch]
+  B --> C[Developer or authorized bot changes]
+  C --> P[Linked PR and review]
+  P --> M[Protected merge]
+  M --> R[Explicit release or hotfix]
+  R --> D[Development reconciliation]
+```
 
----
+AI capabilities require a configured agent runtime, an allowed model, and working authentication on the selected runner. Code-changing requests require repository write authority and run configured verification before commit/push. Release promotion follows the repository's merge policy. Installing Copilot does not grant permission to merge or deploy.
 
-## Getting started
+## Start with the web assistant
 
-The recommended onboarding path is to install the published package globally with
-`pnpm` and initialize the target repository with `copilot setup`:
+Use **Node.js 24 or newer**, `pnpm`, and a working checkout of the repository you want to configure:
 
 ```bash
 pnpm add --global @vypdev/copilot
 copilot --version
 cd /path/to/your/repository
-copilot setup
-# Optional local visual assistant, in the same repository:
 copilot setup --web
 ```
 
-`@vypdev/copilot` contains both the `copilot` CLI and the compiled GitHub Action.
-The global installation makes the CLI and the setup templates available; it does
-not install an Action into GitHub. `copilot setup` is the canonical initialization
-flow and will, according to the selected features:
-
-- copy the selected workflows, Issue Forms, pull request template, and repository agent guidance into the repository;
-- create the labels and issue types used by the workflows;
-- configure non-sensitive Repository Variables; and
-- validate or provision the workflow PAT and provider credentials at the selected scope.
-
-The wizard selects issue workflow kinds with a Space/Enter multi-select; `All`
-is the default. It also generates `.copilot/repository-profile.json`,
-`.copilot/AGENT_GUIDE.md`, and the Codex skill
-`.agents/skills/copilot-repository-workflow/SKILL.md` by default. The generated
-guidance makes clear that the Action owns remote branch lifecycle: agents work
-on the exact existing branch and push normal commits, but do not create, rename,
-delete, replace, or force-push managed branches.
-
-The setup PAT entered by the operator is separate from the workflow `PAT` Secret.
-Interactive setup can guide creation of both via GitHub's prefilled PAT form:
-picks the permission-affecting setup options first, then the operator creates a temporary setup token, and the bot account creates the
-persistent workflow token. GitHub handles account switching, 2FA, repository
-selection, and final creation; Copilot never creates or revokes either token.
-Use `copilot setup --dry-run` to inspect the plan before making local or remote
-changes. See the complete [How to use](https://docs.page/vypdev/copilot/how-to-use)
-guide and [Authentication](https://docs.page/vypdev/copilot/authentication).
-
-`--web` opens an ephemeral, loopback-only setup page with a six-stage progress
-rail, plan review, separate masked inputs for the two PAT roles, and a
-System/Light/Dark theme control. If the browser does not open, use the local
-URL printed in the terminal. The page does not create PATs: GitHub owns the
-form, account switch, 2FA, and token issuance. You must explicitly approve
-the plan and Apply; `--web` cannot be combined with unattended approval or
-secret-bearing command-line flags. The terminal wizard remains the default.
-
-### Manual workflow integration (advanced)
-
-You can integrate the Action manually when the CLI setup flow is not suitable:
-copy selected files from `setup/workflows/` into `.github/workflows/` and add
-steps such as:
-
-```yaml
-- uses: vypdev/copilot@v3
-  with:
-    token: ${{ secrets.PAT }}
-```
+The CLI opens a local browser page. Pair it with the code printed in the terminal, confirm the target repository, and choose **Basic guided setup**. The assistant explains the required permissions, guides the two separate PAT roles, and shows the files and GitHub resources affected before you approve changes.
+
+- The temporary **setup PAT** belongs to the operator and is used locally to configure the installation.
+- The persistent **workflow PAT** belongs to the bot account and is stored as the Actions Secret `PAT`.
+- GitHub creates both tokens in its own tabs. The assistant never creates or revokes them.
+
+Follow the [web setup tutorial](https://docs.page/vypdev/copilot/setup-web) through installing the generated files and verifying the result. Then complete the [first issue-to-PR workflow](https://docs.page/vypdev/copilot/first-workflow). A local configuration check alone does not prove that an Action can run successfully.
 
-This is a lower-level integration path, not an alternative name for
-`copilot setup`: it does not automatically create labels, issue types, Variables,
-Secrets, templates, or the complete set of workflows. Those resources must be
-configured and kept consistent manually. See [Workflow setup](https://docs.page/vypdev/copilot/issues/workflow-setup)
-for action-level examples.
+`copilot setup` without `--web` launches the terminal assistant. Use `copilot setup --web --dry-run` for a no-change preview. The npm package installs the CLI and templates; running setup and installing its generated files enables the Action in your repository.
 
----
+## Choose your next step
 
-## What it does
+| You need… | Documentation |
+|---|---|
+| A short installation checklist | [Quick start](https://docs.page/vypdev/copilot/quick-start) |
+| A walkthrough of browser setup | [Set up with the web assistant](https://docs.page/vypdev/copilot/setup-web) |
+| Observable proof that the installation works | [First workflow](https://docs.page/vypdev/copilot/first-workflow) |
+| A guide for a specific outcome | [Choose a goal](https://docs.page/vypdev/copilot/guides) |
+| Version selection, contextual or offline help | [Use the documentation](https://docs.page/vypdev/copilot/using-the-docs) |
+| Token ownership, permissions, or account recovery | [Authentication](https://docs.page/vypdev/copilot/authentication) |
+| Existing-installation updates, batch setup, or manual integration | [Setup and maintenance reference](https://docs.page/vypdev/copilot/how-to-use) |
+| Every feature, input, and operational control | [Capabilities](https://docs.page/vypdev/copilot/features), [Configuration](https://docs.page/vypdev/copilot/configuration), [Security & Operations](https://docs.page/vypdev/copilot/security-operations) |
 
-- **Issues** — Branch creation from labels (feature, bugfix, hotfix, release, docs, chore), project linking, assignees, lifecycle/size/progress labels; new issues receive a contextual `@vypbot` welcome; from comments you can ask for help, explain/diagnose/analyze code, plan work, fix findings, or request an authorized implementation.
-- **Pull requests** — Link PRs to issues, update project columns, assign reviewers; optional AI-generated PR description and automatic Bugbot review with stable finding threads; use `/copilot analyze` or `@vypbot analyze ...` for read-only review, or request an authorized change.
-- **Push (commits)** — Notify the issue, update size/progress, and optionally run Bugbot; a separate agent-free observer watches every branch and recommends synchronizing children when their parent moves.
-- **Projects** — Link issues and PRs to boards and move them to the right columns.
-- **Single actions** — On-demand maintenance and analysis, plus workflow-owned callbacks for durable release and hotfix operations.
-- **Branch synchronization** — Authorized issue/PR commands merge parent into working branch, call the fixer only for eligible conflicts, run verification, reject remote races, push, and report exactly what happened.
-- **Release and hotfix orchestration** — Cut from the correct immutable origin, promote through a protected production PR, publish only the accepted production commit, and reconcile it back through resumable managed PRs without keeping a runner polling checks.
-- **Evidence and safety** — Every run writes a bounded Job Summary; PR findings are reconciled from GitHub into one status card, historical review status blocks, and a `Copilot / Review` Check Run. Actionable findings are neutral by default and fail it only when `bugbot-fail-on-unresolved` is enabled, while unknown/incomplete state always fails closed. Agent sandboxes run without approval or network access, and all agent/comment content remains bounded, secret-redacted, and treated as untrusted data.
-- **Bugbot quality** — Hierarchical rules, semantic finding identity, safe GitHub suggestions, analysis-only dry runs, a multilingual regression corpus, real-agent benchmark runner, content-free telemetry/analytics, and the provider-neutral `@vypdev/copilot/bugbot` API.
-- **Concurrency** — Durable mutation workflows wait only for older active runs of that same workflow, with rate-limit-aware polling and a 90-minute deadline. Commit and Pull Request templates share a branch-scoped latest-revision group so a newer Bugbot review supersedes an older one; provider re-reads and head guards make interrupted finding transitions retryable. Event templates can also skip bot-authored jobs before runner allocation through `COPILOT_BOT_LOGIN`. See [Features → Workflow concurrency](https://docs.page/vypdev/copilot/features#workflow-concurrency-and-sequential-execution).
+Setup installs the selected workflows, Issue Forms, labels, issue types, Variables, credentials, and repository agent guidance. Projects, agent routing, release/hotfix workflows, and other capabilities follow your selections. New setup offers PR approval assessment in `recommend` mode; native bot approval requires explicitly selecting `guarded` and meeting its prerequisites. See [guarded approval](https://docs.page/vypdev/copilot/pull-requests/guarded-approval).
 
-AI features use the configured agent runtime and qualified model; see the [Agents](https://docs.page/vypdev/copilot/agents) and [Security & Operations](https://docs.page/vypdev/copilot/security-operations) documentation. You can run progress and Bugbot locally through the [Single actions → Workflow & CLI](https://docs.page/vypdev/copilot/single-actions/workflow-and-cli) path.
+Release templates are registry-neutral. Publishing your application or package requires your own build, validation, and deployment steps. This repository's npm publishing workflow is an example, not something setup installs into every consumer repository.
 
-The programmatic Bugbot API is request-only: `review(BugbotReviewRequest)` is
-the sole review entrypoint, and internal runtime aggregates are not exported.
-See the [Programmatic API](https://docs.page/vypdev/copilot/bugbot/programmatic-api).
+## Advanced integrations and contributing
 
----
+For a manually maintained workflow, use `vypdev/copilot@v3` and supply `token: ${{ secrets.PAT }}`. Follow the [manual integration instructions](https://docs.page/vypdev/copilot/how-to-use#manual-workflow-integration-advanced) to install the supporting resources and event workflows.
 
-## Contributing
+The request-only `@vypdev/copilot/bugbot` API is documented in the [programmatic API guide](https://docs.page/vypdev/copilot/bugbot/programmatic-api). For local commands, see [Workflow & CLI](https://docs.page/vypdev/copilot/single-actions/workflow-and-cli).
 
-See [CONTRIBUTING.md](CONTRIBUTING.md) for development setup, conventions, and how to submit changes.
+See [CONTRIBUTING.md](CONTRIBUTING.md) for development setup and contribution requirements.

package/action.yml

@@ -45,7 +45,7 @@ inputs:
     description: "Hours without issue activity before the scheduled inactivity action closes a waiting issue."
     default: "168"
   emoji-labeled-title:
-    description: "Enable titles with emojis based on issue labels."
+    description: "Enable label-based issue titles and conventional linked PR titles, preserving author Conventional Commits headers."
     default: "true"
   issue-managed-branches:
     description: "Let the Action create linked branches after an authorized in-progress start."

package/build/api/index.js

@@ -5152,6 +5152,8 @@ var _ApplicationError_cause;
 Object.defineProperty(exports, "__esModule", ({ value: true }));
 exports.ApplicationError = exports.APPLICATION_ERROR_METADATA = exports.APPLICATION_ERROR_RECOVERY_IDS = void 0;
 exports.isApplicationErrorCorrelationId = isApplicationErrorCorrelationId;
+const closed_issue_reconciliation_1 = __nccwpck_require__(1565);
+const approval_evidence_diagnostic_1 = __nccwpck_require__(8205);
 const branch_sync_validation_1 = __nccwpck_require__(981);
 exports.APPLICATION_ERROR_RECOVERY_IDS = Object.freeze([
     'pull-request-link-restored',
@@ -5167,6 +5169,8 @@ exports.APPLICATION_ERROR_RECOVERY_IDS = Object.freeze([
     'sdd-draft-size-exceeded',
     'sdd-draft-format-invalid',
     'workspace-changes-rejected',
+    'closed-issue-reconciliation-failed',
+    'approval-evidence-read-failed',
 ]);
 const PRESERVED_STATE = 'Existing persisted state and completed external effects were preserved.';
 const UNCHANGED_STATE = 'No new state or external effect was created.';
@@ -5358,6 +5362,8 @@ class ApplicationError extends Error {
 exports.ApplicationError = ApplicationError;
 _ApplicationError_cause = new WeakMap();
 const RECOVERY_VARIABLE_KEYS = Object.freeze({
+    'closed-issue-reconciliation-failed': Object.freeze(['resultId', 'phase', 'state', 'reason', 'changed', 'remaining']),
+    'approval-evidence-read-failed': Object.freeze(['operation', 'reason', 'permission']),
     'pull-request-link-restored': Object.freeze([]),
     'pull-request-link-base-retained': Object.freeze([]),
     'pull-request-link-reference-retained': Object.freeze([]),
@@ -5410,6 +5416,20 @@ function normalizeApplicationErrorRecovery(recovery) {
         && !branch_sync_validation_1.BRANCH_SYNC_VALIDATION_CODES.some(code => code === variables.validationCode)) {
         throw new TypeError('Application error recovery synchronization validation code is invalid.');
     }
+    if (recovery.id === 'closed-issue-reconciliation-failed'
+        && (!closed_issue_reconciliation_1.CLOSED_ISSUE_RESULTS.some(value => value === variables.resultId)
+            || !closed_issue_reconciliation_1.CLOSED_ISSUE_PHASES.some(value => value === variables.phase)
+            || !['open', 'closed', 'unavailable'].includes(variables.state)
+            || !closed_issue_reconciliation_1.CLOSED_ISSUE_REASONS.some(value => value === variables.reason)
+            || ![variables.changed, variables.remaining].every(value => typeof value === 'number' && Number.isSafeInteger(value) && value >= 0 && value <= 3000))) {
+        throw new TypeError('Closed issue reconciliation diagnostic is invalid.');
+    }
+    if (recovery.id === 'approval-evidence-read-failed'
+        && (!Object.prototype.hasOwnProperty.call(approval_evidence_diagnostic_1.APPROVAL_EVIDENCE_PERMISSIONS, variables.operation)
+            || !approval_evidence_diagnostic_1.APPROVAL_EVIDENCE_REASONS.some(reason => reason === variables.reason)
+            || approval_evidence_diagnostic_1.APPROVAL_EVIDENCE_PERMISSIONS[variables.operation] !== variables.permission)) {
+        throw new TypeError('Approval evidence diagnostic is invalid.');
+    }
     return Object.freeze({
         id: recovery.id,
         variables: Object.freeze({ ...variables }),
@@ -5468,6 +5488,43 @@ function isAgentConfigurationReady(configuration) {
 }
 
 
+/***/ }),
+
+/***/ 8205:
+/***/ ((__unused_webpack_module, exports) => {
+
+
+Object.defineProperty(exports, "__esModule", ({ value: true }));
+exports.APPROVAL_EVIDENCE_REASONS = exports.APPROVAL_EVIDENCE_PERMISSIONS = void 0;
+/** Closed vocabulary: no provider text, URLs, headers, policy values or credentials. */
+exports.APPROVAL_EVIDENCE_PERMISSIONS = Object.freeze({
+    'evidence': 'repository-read',
+    'pull-request': 'pull-requests-read',
+    'base-ref': 'contents-read',
+    'merge-commit': 'contents-read',
+    'policy': 'actions-variables-read',
+    'files': 'pull-requests-read',
+    'reviews': 'pull-requests-read',
+    'comments': 'issues-read',
+    'head-checks': 'checks-read',
+    'merge-checks': 'checks-read',
+    'head-runs': 'actions-read',
+    'merge-runs': 'actions-read',
+    'jobs': 'actions-read',
+    'rules': 'metadata-read',
+    'classic-protection': 'administration-read',
+    'authenticated-user': 'authenticated-user-read',
+    'coverage-artifacts': 'actions-read',
+    'coverage-download': 'actions-read',
+    'coverage-parse': 'actions-read',
+});
+exports.APPROVAL_EVIDENCE_REASONS = Object.freeze([
+    'http-400', 'http-401', 'http-403', 'http-404', 'http-409', 'http-422', 'http-429',
+    'http-500', 'http-502', 'http-503', 'http-504', 'transport-unavailable',
+    'invalid-response', 'invalid-page', 'page-limit', 'artifact-unavailable', 'artifact-invalid', 'artifact-mismatch',
+]);
+
+
 /***/ }),
 
 /***/ 981:
@@ -5913,6 +5970,24 @@ function countActionableBugbotFindings(counts) {
 }
 
 
+/***/ }),
+
+/***/ 1565:
+/***/ ((__unused_webpack_module, exports) => {
+
+
+Object.defineProperty(exports, "__esModule", ({ value: true }));
+exports.CLOSED_ISSUE_REASONS = exports.CLOSED_ISSUE_PHASES = exports.CLOSED_ISSUE_RESULTS = void 0;
+exports.CLOSED_ISSUE_RESULTS = Object.freeze([
+    'ReconcileClosedIssueMetadataUseCase', 'CloseIssueAfterMergingUseCase', 'RetireBranchSyncUseCase', 'RetireProgressUseCase',
+]);
+exports.CLOSED_ISSUE_PHASES = Object.freeze([
+    'identity', 'read', 'native-fence', 'label-remove', 'label-add', 'metadata-verification',
+    'card-inventory', 'card-freshness', 'card-update', 'card-verification',
+]);
+exports.CLOSED_ISSUE_REASONS = Object.freeze(['completed', 'not_planned', 'duplicate', 'reopened', 'unknown', 'unavailable']);
+
+
 /***/ }),
 
 /***/ 8623:

package/build/api/src/data/model/application_error.d.ts

@@ -1,9 +1,13 @@
+import { type ClosedIssueReconciliationFacts } from '../../domain/closed_issue_reconciliation';
+import { type ApprovalEvidenceDiagnostic } from '../../domain/approval_evidence_diagnostic';
 import { type BranchSyncValidationCode } from '../../domain/branch_sync_validation';
 export type ApplicationErrorKind = 'configuration' | 'authorization' | 'provider' | 'agent' | 'validation' | 'workflow' | 'unknown';
 export type ApplicationErrorCode = 'configuration.invalid' | 'configuration.unsupported' | 'authorization.denied' | 'authorization.credential-invalid' | 'provider.not-found' | 'provider.conflict' | 'provider.rate-limited' | 'provider.unavailable' | 'provider.contract-invalid' | 'agent.policy-rejected' | 'agent.failed' | 'locale.output-invalid' | 'locale.translation-failed' | 'validation.invalid-input' | 'validation.evidence-too-large' | 'validation.evidence-unavailable' | 'workflow.invalid-event' | 'workflow.stale' | 'workflow.cancelled' | 'workflow.failed' | 'workflow.presentation-pending' | 'timeout' | 'unexpected';
-export declare const APPLICATION_ERROR_RECOVERY_IDS: readonly ["pull-request-link-restored", "pull-request-link-base-retained", "pull-request-link-reference-retained", "pull-request-link-base-and-reference-retained", "managed-branch-enrichment-failed", "inactivity-explanation-failed", "bugbot-review-blocks-pending", "branch-sync-agent-disabled", "branch-sync-fixer-unavailable", "branch-sync-resolution-invalid", "sdd-draft-size-exceeded", "sdd-draft-format-invalid", "workspace-changes-rejected"];
+export declare const APPLICATION_ERROR_RECOVERY_IDS: readonly ["pull-request-link-restored", "pull-request-link-base-retained", "pull-request-link-reference-retained", "pull-request-link-base-and-reference-retained", "managed-branch-enrichment-failed", "inactivity-explanation-failed", "bugbot-review-blocks-pending", "branch-sync-agent-disabled", "branch-sync-fixer-unavailable", "branch-sync-resolution-invalid", "sdd-draft-size-exceeded", "sdd-draft-format-invalid", "workspace-changes-rejected", "closed-issue-reconciliation-failed", "approval-evidence-read-failed"];
 export type ApplicationErrorRecoveryId = typeof APPLICATION_ERROR_RECOVERY_IDS[number];
 interface ApplicationErrorRecoveryVariables {
+    readonly 'closed-issue-reconciliation-failed': ClosedIssueReconciliationFacts;
+    readonly 'approval-evidence-read-failed': ApprovalEvidenceDiagnostic;
     readonly 'pull-request-link-restored': Readonly<Record<string, never>>;
     readonly 'pull-request-link-base-retained': Readonly<Record<string, never>>;
     readonly 'pull-request-link-reference-retained': Readonly<Record<string, never>>;

package/build/api/src/domain/approval_evidence_diagnostic.d.ts

@@ -0,0 +1,30 @@
+/** Closed vocabulary: no provider text, URLs, headers, policy values or credentials. */
+export declare const APPROVAL_EVIDENCE_PERMISSIONS: Readonly<{
+    readonly evidence: "repository-read";
+    readonly 'pull-request': "pull-requests-read";
+    readonly 'base-ref': "contents-read";
+    readonly 'merge-commit': "contents-read";
+    readonly policy: "actions-variables-read";
+    readonly files: "pull-requests-read";
+    readonly reviews: "pull-requests-read";
+    readonly comments: "issues-read";
+    readonly 'head-checks': "checks-read";
+    readonly 'merge-checks': "checks-read";
+    readonly 'head-runs': "actions-read";
+    readonly 'merge-runs': "actions-read";
+    readonly jobs: "actions-read";
+    readonly rules: "metadata-read";
+    readonly 'classic-protection': "administration-read";
+    readonly 'authenticated-user': "authenticated-user-read";
+    readonly 'coverage-artifacts': "actions-read";
+    readonly 'coverage-download': "actions-read";
+    readonly 'coverage-parse': "actions-read";
+}>;
+export type ApprovalEvidenceOperation = keyof typeof APPROVAL_EVIDENCE_PERMISSIONS;
+export declare const APPROVAL_EVIDENCE_REASONS: readonly ["http-400", "http-401", "http-403", "http-404", "http-409", "http-422", "http-429", "http-500", "http-502", "http-503", "http-504", "transport-unavailable", "invalid-response", "invalid-page", "page-limit", "artifact-unavailable", "artifact-invalid", "artifact-mismatch"];
+export type ApprovalEvidenceReason = typeof APPROVAL_EVIDENCE_REASONS[number];
+export type ApprovalEvidenceDiagnostic = {
+    readonly operation: ApprovalEvidenceOperation;
+    readonly reason: ApprovalEvidenceReason;
+    readonly permission: typeof APPROVAL_EVIDENCE_PERMISSIONS[ApprovalEvidenceOperation];
+};

package/build/api/src/domain/closed_issue_reconciliation.d.ts

@@ -0,0 +1,11 @@
+export declare const CLOSED_ISSUE_RESULTS: readonly ["ReconcileClosedIssueMetadataUseCase", "CloseIssueAfterMergingUseCase", "RetireBranchSyncUseCase", "RetireProgressUseCase"];
+export declare const CLOSED_ISSUE_PHASES: readonly ["identity", "read", "native-fence", "label-remove", "label-add", "metadata-verification", "card-inventory", "card-freshness", "card-update", "card-verification"];
+export declare const CLOSED_ISSUE_REASONS: readonly ["completed", "not_planned", "duplicate", "reopened", "unknown", "unavailable"];
+export type ClosedIssueReconciliationFacts = {
+    readonly resultId: typeof CLOSED_ISSUE_RESULTS[number];
+    readonly phase: typeof CLOSED_ISSUE_PHASES[number];
+    readonly state: 'open' | 'closed' | 'unavailable';
+    readonly reason: typeof CLOSED_ISSUE_REASONS[number];
+    readonly changed: number;
+    readonly remaining: number;
+};