pm-github 2026.10.27 → 2026.10.29

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## 2026.10.29 - 2026-10-29
+
+### Added
+
+- Capture selected GitHub discussion passages as reviewed native Decisions ([pm-github-selected-discussion-decisions](https://github.com/unbraind/pm-github/blob/main/.agents/pm/features/pm-github-selected-discussion-decisions.toon))
+
+## 2026.10.28 - 2026-10-28
+
+### Added
+
+- Preview exact GitHub label migration impacts (BREAKING: PM CLI 2026.10.17 minimum) ([pm-github-2e38](https://github.com/unbraind/pm-github/blob/main/.agents/pm/features/pm-github-2e38.toon))
+
 ## 2026.10.26 - 2026-10-26
 
 ### Changed
@@ -34,7 +46,6 @@
 - Derive release merge wait from CI duration and refresh a safe main advance once ([pm-github-release-merge-wait](https://github.com/unbraind/pm-github/blob/main/.agents/pm/issues/pm-github-release-merge-wait.toon))
 - A publish spelled through a package runner was invisible to the attestation gate, so an unattested one read as clean ([pm-github-5igz](https://github.com/unbraind/pm-github/blob/main/.agents/pm/issues/pm-github-5igz.toon))
 - PM CLI filtered native Bun tests falsely report an empty run ([pm-github-2ao1](https://github.com/unbraind/pm-github/blob/main/.agents/pm/issues/pm-github-2ao1.toon))
-- Track pm-changelog rendering closed historical incidents as Fixed ([pm-github-n0mm](https://github.com/unbraind/pm-github/blob/main/.agents/pm/issues/pm-github-n0mm.toon))
 - Stabilize the watchdog startup probe under concurrent coverage ([pm-github-sah1](https://github.com/unbraind/pm-github/blob/main/.agents/pm/issues/pm-github-sah1.toon))
 - Explain privacy matches and distinguish bare-root regex literals during gated sync ([pm-github-xhtp](https://github.com/unbraind/pm-github/blob/main/.agents/pm/issues/pm-github-xhtp.toon))
 - The changelog gate stamps an untagged version with the current date, so its verdict flips every midnight with no commit ([pm-github-m8vj](https://github.com/unbraind/pm-github/blob/main/.agents/pm/issues/pm-github-m8vj.toon))
@@ -49,11 +60,6 @@
 - Closeout changelog generation attributes new deliveries to an old package release ([pm-github-lfcf](https://github.com/unbraind/pm-github/blob/main/.agents/pm/issues/pm-github-lfcf.toon))
 - The release job authenticated with a stored npm token that expired, so publishing stopped while every other gate stayed green ([pm-github-m8u2](https://github.com/unbraind/pm-github/blob/main/.agents/pm/issues/pm-github-m8u2.toon))
 - A release run bumped and committed a new version every night while publishing was impossible, because the only externally-failable step runs last ([pm-github-yq1d](https://github.com/unbraind/pm-github/blob/main/.agents/pm/issues/pm-github-yq1d.toon))
-- The daily release cannot build a changelog once the tracker outgrows the default output budget ([pm-github-ypi5](https://github.com/unbraind/pm-github/blob/main/.agents/pm/issues/pm-github-ypi5.toon))
-
-### Security
-
-- Gate historical identities and host-path privacy across every Git object ([pm-github-zqad](https://github.com/unbraind/pm-github/blob/main/.agents/pm/issues/pm-github-zqad.toon))
 
 ### Other
 
@@ -63,6 +69,11 @@
 - Audit copied fleet release workflows for canonical generation and one daily publication ([pm-github-sagl](https://github.com/unbraind/pm-github/blob/main/.agents/pm/tasks/pm-github-sagl.toon))
 - Adopt the released gated sync caller in fleet repositories ([pm-github-aiok](https://github.com/unbraind/pm-github/blob/main/.agents/pm/tasks/pm-github-aiok.toon))
 
+### Closed
+
+- Closed: Gate historical identities and host-path privacy across every Git object ([pm-github-zqad](https://github.com/unbraind/pm-github/blob/main/.agents/pm/issues/pm-github-zqad.toon))
+- Closed: The daily release cannot build a changelog once the tracker outgrows the default output budget ([pm-github-ypi5](https://github.com/unbraind/pm-github/blob/main/.agents/pm/issues/pm-github-ypi5.toon))
+
 ## 2026.10.16 - 2026-10-16
 
 ### Added
@@ -97,13 +108,16 @@
 ### Fixed
 
 - Bound native Bun CLI repeats of a completed public atomic import ([pm-github-hptv](https://github.com/unbraind/pm-github/blob/main/.agents/pm/issues/pm-github-hptv.toon))
-- Root CI runs skip the read-only-directory comment-sync fixtures visibly instead of failing them ([pm-github-rap0](https://github.com/unbraind/pm-github/blob/main/.agents/pm/issues/pm-github-rap0.toon))
 
 ### Other
 
 - Reach exact all-source coverage and include every operational script ([pm-github-9cjx](https://github.com/unbraind/pm-github/blob/main/.agents/pm/tasks/pm-github-9cjx.toon))
 - Auto-merge green Dependabot updates and group the pm toolchain into one daily PR ([pm-github-u9df](https://github.com/unbraind/pm-github/blob/main/.agents/pm/tasks/pm-github-u9df.toon))
 
+### Closed
+
+- Closed: Root CI runs skip the read-only-directory comment-sync fixtures visibly instead of failing them ([pm-github-rap0](https://github.com/unbraind/pm-github/blob/main/.agents/pm/issues/pm-github-rap0.toon))
+
 ## 2026.9.26 - 2026-09-26
 
 ### Other
@@ -178,22 +192,24 @@
 
 ## 2026.8.31 - 2026-08-31
 
-### Fixed
+### Closed
 
-- Pin pm-changelog 2026.8.30 before the next release ([pm-github-g9g0](https://github.com/unbraind/pm-github/blob/main/.agents/pm/issues/pm-github-g9g0.toon))
-- Regenerate the changelog after the release tag was created ([pm-github-5wzr](https://github.com/unbraind/pm-github/blob/main/.agents/pm/issues/pm-github-5wzr.toon))
+- Closed: Pin pm-changelog 2026.8.30 before the next release ([pm-github-g9g0](https://github.com/unbraind/pm-github/blob/main/.agents/pm/issues/pm-github-g9g0.toon))
+- Closed: Regenerate the changelog after the release tag was created ([pm-github-5wzr](https://github.com/unbraind/pm-github/blob/main/.agents/pm/issues/pm-github-5wzr.toon))
 
 ## 2026.8.29 - 2026-08-29
 
 ### Fixed
 
-- Validate pm CLI development dependency bump ([pm-github-j8zh](https://github.com/unbraind/pm-github/blob/main/.agents/pm/issues/pm-github-j8zh.toon))
-- The publish-attestation gate misses a publish routed through an unquoted shell variable ([pm-github-tko1](https://github.com/unbraind/pm-github/blob/main/.agents/pm/issues/pm-github-tko1.toon))
-- True round-trip GitHub sync: search provider, validate diagnostics, safe-by-default export, fix activation ([pm-github-9dqy](https://github.com/unbraind/pm-github/blob/main/.agents/pm/features/pm-github-9dqy.toon))
 - A failed provenance publish silently falls back to an unattested one ([pm-github-i5b8](https://github.com/unbraind/pm-github/blob/main/.agents/pm/issues/pm-github-i5b8.toon))
 - Fix release publish ordering ahead of protected main push ([pm-github-v2kt](https://github.com/unbraind/pm-github/blob/main/.agents/pm/issues/pm-github-v2kt.toon))
 - BREAKING: pm-github now requires pm CLI 2026.8.20 or newer; older hosts may fail installation or runtime validation ([pm-github-iswq](https://github.com/unbraind/pm-github/blob/main/.agents/pm/issues/pm-github-iswq.toon))
 
+### Closed
+
+- Closed: Validate pm CLI development dependency bump ([pm-github-j8zh](https://github.com/unbraind/pm-github/blob/main/.agents/pm/issues/pm-github-j8zh.toon))
+- Closed: The publish-attestation gate misses a publish routed through an unquoted shell variable ([pm-github-tko1](https://github.com/unbraind/pm-github/blob/main/.agents/pm/issues/pm-github-tko1.toon))
+
 ## 2026.8.18 - 2026-08-18
 
 ### Fixed
@@ -223,13 +239,16 @@
 ### Fixed
 
 - Propagate the docstring gate entry guard fix ([pm-github-wb4q](https://github.com/unbraind/pm-github/blob/main/.agents/pm/issues/pm-github-wb4q.toon))
-- Converge changelog generation and verification on replace mode ([pm-github-8f60](https://github.com/unbraind/pm-github/blob/main/.agents/pm/issues/pm-github-8f60.toon))
 - The mandatory docstring gate could skip its own scan and still exit zero ([pm-github-wxob](https://github.com/unbraind/pm-github/blob/main/.agents/pm/issues/pm-github-wxob.toon))
 
 ### Other
 
 - Adopt the canonical pm-ops docstring gate ([pm-github-pbxd](https://github.com/unbraind/pm-github/blob/main/.agents/pm/tasks/pm-github-pbxd.toon))
 
+### Closed
+
+- Closed: Converge changelog generation and verification on replace mode ([pm-github-8f60](https://github.com/unbraind/pm-github/blob/main/.agents/pm/issues/pm-github-8f60.toon))
+
 ## 2026.8.7 - 2026-08-07
 
 ### Other
@@ -238,14 +257,14 @@
 
 ## 2026.8.4 - 2026-08-04
 
-### Fixed
-
-- Fix terminal transitions for pm-cli 2026.8.3 close_reason enforcement ([pm-github-rwq9](https://github.com/unbraind/pm-github/blob/main/.agents/pm/issues/pm-github-rwq9.toon))
-
 ### Other
 
 - Resolve pm-changelog to the release that derives release dates in UTC ([pm-github-9m6j](https://github.com/unbraind/pm-github/blob/main/.agents/pm/chores/pm-github-9m6j.toon))
 
+### Closed
+
+- Closed: Fix terminal transitions for pm-cli 2026.8.3 close_reason enforcement ([pm-github-rwq9](https://github.com/unbraind/pm-github/blob/main/.agents/pm/issues/pm-github-rwq9.toon))
+
 ## 2026.7.30 - 2026-07-30
 
 ### Other
@@ -278,38 +297,34 @@
 
 ## 2026.7.26 - 2026-07-26
 
-### Fixed
-
-- Documented install command fails: pm install github.com/unbraind/pm-github cannot resolve an entry file ([pm-github-q6ql](https://github.com/unbraind/pm-github/blob/main/.agents/pm/issues/pm-github-q6ql.toon))
-
 ### Other
 
 - Enable governance duplicate-detection advisory mode and adopt pm-cli 2026.7.25 ([pm-github-suxt](https://github.com/unbraind/pm-github/blob/main/.agents/pm/chores/pm-github-suxt.toon))
 
-## 2026.7.25 - 2026-07-25
+### Closed
 
-### Added
+- Closed: Documented install command fails: pm install github.com/unbraind/pm-github cannot resolve an entry file ([pm-github-q6ql](https://github.com/unbraind/pm-github/blob/main/.agents/pm/issues/pm-github-q6ql.toon))
 
-- Search pm items in any public GitHub repo (gh-authenticated, semantic search) ([pm-github-r8y0](https://github.com/unbraind/pm-github/blob/main/.agents/pm/features/pm-github-r8y0.toon))
-
-### Fixed
-
-- Import dies with an unexplained pm list-all failed on any tracker over 1 MiB, and non-atomic --dry-run previews every issue as a create ([pm-github-tn92](https://github.com/unbraind/pm-github/blob/main/.agents/pm/issues/pm-github-tn92.toon))
-- CHANGELOG omits the shipped --link-deps feature and mislabels 2026.7.23 work as Unreleased ([pm-github-px45](https://github.com/unbraind/pm-github/blob/main/.agents/pm/issues/pm-github-px45.toon))
+## 2026.7.25 - 2026-07-25
 
 ### Other
 
 - Adopt --respect-item-release in changelog scripts and bump pm-changelog to 2026.7.24 ([pm-github-w7m7](https://github.com/unbraind/pm-github/blob/main/.agents/pm/chores/pm-github-w7m7.toon))
 
+### Closed
+
+- Closed: Import dies with an unexplained pm list-all failed on any tracker over 1 MiB, and non-atomic --dry-run previews every issue as a create ([pm-github-tn92](https://github.com/unbraind/pm-github/blob/main/.agents/pm/issues/pm-github-tn92.toon))
+- Closed: CHANGELOG omits the shipped --link-deps feature and mislabels 2026.7.23 work as Unreleased ([pm-github-px45](https://github.com/unbraind/pm-github/blob/main/.agents/pm/issues/pm-github-px45.toon))
+
 ## 2026.7.23 - 2026-07-23
 
 ### Added
 
 - Import --link-deps: map GitHub issue-body dependency references (Blocked by/Depends on/Blocks \#N) into pm dependency edges + emit ordering-cycle advisory via collectNewOrderingCycleWarnings ([pm-github-hdai](https://github.com/unbraind/pm-github/blob/main/.agents/pm/features/pm-github-hdai.toon))
 
-### Fixed
+### Closed
 
-- Recommend pm merge reconcile (2026.7.22) over raw history-repair in Multi-agent merge safety docs ([pm-github-wpit](https://github.com/unbraind/pm-github/blob/main/.agents/pm/issues/pm-github-wpit.toon))
+- Closed: Recommend pm merge reconcile (2026.7.22) over raw history-repair in Multi-agent merge safety docs ([pm-github-wpit](https://github.com/unbraind/pm-github/blob/main/.agents/pm/issues/pm-github-wpit.toon))
 
 ## 2026.7.21 - 2026-07-21
 
@@ -348,11 +363,6 @@
 - GitHub Projects v2 bidirectional sync (import/sync/list/fields) ([pm-github-y27r](https://github.com/unbraind/pm-github/blob/main/.agents/pm/features/pm-github-y27r.toon))
 - Full pm ecosystem production pass for pm-github ([pm-github-9eei](https://github.com/unbraind/pm-github/blob/main/.agents/pm/features/pm-github-9eei.toon))
 
-### Fixed
-
-- Export --apply aborts the whole batch on the first failed item ([pm-github-q3lk](https://github.com/unbraind/pm-github/blob/main/.agents/pm/issues/pm-github-q3lk.toon))
-- export --apply exits 0 even when every item fails to write ([pm-github-77wj](https://github.com/unbraind/pm-github/blob/main/.agents/pm/issues/pm-github-77wj.toon))
-
 ### Security
 
 - Resolve final Projects v2 review findings ([pm-github-0g3p](https://github.com/unbraind/pm-github/blob/main/.agents/pm/issues/pm-github-0g3p.toon))
@@ -361,6 +371,11 @@
 
 - Full-cycle hardening wave: pm-github ([pm-github-mdcw](https://github.com/unbraind/pm-github/blob/main/.agents/pm/tasks/pm-github-mdcw.toon))
 
+### Closed
+
+- Closed: Export --apply aborts the whole batch on the first failed item ([pm-github-q3lk](https://github.com/unbraind/pm-github/blob/main/.agents/pm/issues/pm-github-q3lk.toon))
+- Closed: export --apply exits 0 even when every item fails to write ([pm-github-77wj](https://github.com/unbraind/pm-github/blob/main/.agents/pm/issues/pm-github-77wj.toon))
+
 ## 2026.7.11 - 2026-07-11
 
 ### Other
@@ -413,7 +428,6 @@
 
 ### Fixed
 
-- True round-trip GitHub sync: search provider, validate diagnostics, safe-by-default export, fix activation ([pm-github-4elt](https://github.com/unbraind/pm-github/blob/main/.agents/pm/features/pm-github-4elt.toon))
 - FIX: add 'preflight' to manifest capabilities (activation-breaking bug) ([pm-github-qndb](https://github.com/unbraind/pm-github/blob/main/.agents/pm/tasks/pm-github-qndb.toon))
 
 ### Other
@@ -425,7 +439,6 @@
 - Export: dry-run default + upsert existing issues by provenance ([pm-github-fv0x](https://github.com/unbraind/pm-github/blob/main/.agents/pm/tasks/pm-github-fv0x.toon))
 - github search provider (search capability) ([pm-github-5sbx](https://github.com/unbraind/pm-github/blob/main/.agents/pm/tasks/pm-github-5sbx.toon))
 - github validate diagnostics command ([pm-github-rroh](https://github.com/unbraind/pm-github/blob/main/.agents/pm/tasks/pm-github-rroh.toon))
-- preflight capability: validate token/gh auth + repo reachability before mutating github commands ([pm-github-jget](https://github.com/unbraind/pm-github/blob/main/.agents/pm/tasks/pm-github-jget.toon))
 - pm github sync: push pm status -\> GitHub close/reopen, guarded by token+--repo+--dry-run ([pm-github-yted](https://github.com/unbraind/pm-github/blob/main/.agents/pm/tasks/pm-github-yted.toon))
 - renderers capability: register 'github' output format (pm items as GitHub-issue markdown) ([pm-github-vvov](https://github.com/unbraind/pm-github/blob/main/.agents/pm/tasks/pm-github-vvov.toon))
 - Rate-limit/backoff handling (Retry-After / X-RateLimit-Reset) + useful afterCommand hook ([pm-github-rx1q](https://github.com/unbraind/pm-github/blob/main/.agents/pm/tasks/pm-github-rx1q.toon))

package/README.md

@@ -273,12 +273,63 @@ There are no saved plans, leases, idempotency keys, or retries in the completion
 adapter. Every call re-reads native state, and the semantic form digest is only
 a source identifier. Imports and sync do not use this opt-in export adapter.
 
+## Label migration impact plans
+
+Preview an exact GitHub label rename or explicit consolidation across stored
+provider tag occurrences, declared import filters and local export mappings:
+
+```sh
+pm github labels plan --input label-migration.json --limit 10 --json
+pm github labels plan --input label-migration.json --approve <approval>
+```
+
+Start with the [JSON example](docs/label-migration.json) and
+[SDK/CLI contract](docs/label-migrations.md). Provider node IDs stay distinct even
+when their names normalize to the same native tag. Complete counts accompany a
+bounded page of exact affected item/policy identities and explicit choices.
+Checking an application plan revalidates current label IDs and SDK revisions;
+both commands are read-only. Filters/mappings must be explicitly inventoried.
+Provider policy names match without case (`bug`, `BUG`, `BuG`); node IDs stay
+distinct. Exports and issue-form label composition use the same comparison,
+keeping the first spelling of each effective provider label.
+Provider label names use the importer's exported `githubLabelsToTags` conversion:
+a label named `one,two` produces tags `one` and `two`. Stored native tag elements
+use only SDK array-tag normalization: a literal `one,two` remains one tag and
+matches neither `one` nor `two`. Tag rows retain the destination label
+in `after` and expose its complete native expansion in `after_tags`, including
+an empty array when the destination produces no tags. Approval checks use the
+same conversion and refuse unresolved tag choices across every affected row.
+
+## Selected discussion decision capture
+
+Turn explicitly selected GitHub **issue-comment** passages into reviewable native
+Decisions with author attribution, source revision and exact quoted spans. Start
+with [the selection example](docs/discussion-capture-example.json), then review:
+
+```sh
+pm github discussion capture --input selection.json --json
+pm github discussion capture --input selection.json --approve REVIEWED_DIGEST --json
+```
+
+Only spans carrying `marked: true` are eligible. Empty selections write nothing;
+unmarked prose is never interpreted as a decision. Apply re-reads current source
+and native history, refuses stale approvals, and preserves existing captures on
+retry. Quotes remain inert JSON data. Independent invalid records have bounded
+refusal/remedy rows. TOON and JSON expose the same compact report.
+
+The typed SDK surface is `captureGithubDiscussion(pmRoot, input, hostSdk, options)`.
+It uses the host-injected SDK client; no local git repository is needed. Read the
+[contract and SDK example](docs/discussion-capture.md) for exact offsets, bounds,
+retry semantics and the remaining optimistic read-to-create concurrency window.
+
 ## Without git
 
 With an explicit repository, GitHub import, export, refresh, sync, project commands,
 blocker checks, issue-form compilation/completion, closeout and webhook receive/reconcile work in a plain pm tracker
 without a git executable.
 `pm github identity` also works there, entirely offline and without credentials.
+`pm github labels plan` works on read-only non-git trackers; `--catalog` supplies
+an offline complete label snapshot, otherwise it reads current GitHub labels.
 The provider commands still require their normal GitHub access and credentials. Privacy scanning
 with `github gate --diff <file>` also works there. Reading a proposed tracker diff
 with `github gate` requires a git repository; otherwise pass an explicit diff.
@@ -296,9 +347,15 @@ See [SDK adoption evidence](docs/sdk-adoption-1025.md).
 
 ## Revalidate GitHub blockers
 
-**Compatibility:** pm-github now requires PM CLI 2026.10.5 or newer for complete
-SDK reads and structured command exit statuses. Older hosts refuse installation
-or activation through the matching peer dependency and manifest floor.
+**Compatibility:** pm-github requires PM CLI 2026.10.17 or newer. Lossless table
+decoding first appeared in 2026.10.9, while the transaction `match` guard used
+by identity repair first appeared in 2026.10.17. The declared minimum must
+support both. Older hosts refuse installation or activation through matching
+peer/development minimum ranges and the top-level manifest floor. Development
+keeps an exact, integrity-locked SDK resolution. CI separately installs the exact
+minimum from npm, type-checks all production and operational SDK imports, then
+loads and exercises the packed artifact in a non-git tracker. See the
+[published SDK evidence](docs/sdk-minimum.md).
 
 `pm github blockers` reads a certified complete tracker and checks every blocked
 item, plus non-terminal items with an external GitHub `blocked_by` dependency.
@@ -832,6 +889,13 @@ for schedules, groups, commit messages and labels.
 
 ## Automated closeout workflow
 
+For scheduled failures, see the [run evidence and refusal guide](docs/scheduled-workflow-refusals.md).
+Both maintenance workflows select one actionable reason from private command
+receipts and privacy-scan it before emitting an error annotation. Closeout
+accepts GitHub's numeric pagination aliases only after verifying repository
+identity; denied reads identify the endpoint and status, and close validation
+identifies the item and required fields without exposing raw exception prose.
+
 [`.github/workflows/pm-github-closeout.yml`](.github/workflows/pm-github-closeout.yml)
 is a reusable `workflow_call` that opens or updates **one** PR titled
 `chore(pm): close items delivered by merged pull requests` from `pm-github/closeout`.
@@ -1113,6 +1177,14 @@ Before creating an item, import checks the complete tracker for its provenance t
 
 With `--gate` and a nonempty filtered issue list, both preview and apply results include a `plan` with source dates, closure reason, release, target identity, link/create/update action and state-conflict decision. An empty filtered issue list returns without a `plan`, including with `--gate --dry-run`. GitHub wins lifecycle conflicts for GitHub-owned imports. A canceled item that GitHub later reports as completed uses the SDK's explicit repeat-closure transition with the source reason. A linked external owner keeps its local status, and the plan records `preserve-provider-owner`; `github_state` still records the source state. Atomic transaction identity includes the latest external edit or different lifecycle generation in history. Local state edits and repeated state cycles force reconciliation, while staging and compensation keep crash retries on the same journal. Finalization runs before the SDK commits and is compensated with the batch on failure. It is idempotent and runs again after a recovered atomic journal, so an interrupted finalization can be repaired by retrying the same import before the gate permits a push.
 
+An atomic apply whose complete normalized source projection already matches every item
+reports `unchanged: true`, zero imports/updates, and no transaction ID. It leaves
+native timestamps and item history untouched, including after a mixed batch of
+new and existing items. This shortcut is disabled while any GitHub SDK journal
+is unfinished; normal recovery still runs. Native annotation synchronization,
+dependency linking, and the post-write privacy gate still run on an unchanged
+item projection.
+
 SDK limitation: native `updated_at` remains the local mutation clock because the bulk SDK uses it to address rollback history. The GitHub update date is retained exactly in `github_updated_at`, and the gated plan discloses this policy. Backdating native `updated_at` safely requires an SDK import mutation whose version identity is independent of source time. Native creation, closure and completion dates still preserve GitHub lifetimes for momentum and cycle-time readers.
 
 ## Provider identity collisions

package/dist/closeout.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"closeout.d.ts","sourceRoot":"","sources":["../closeout.ts"],"names":[],"mappings":"AAIA,6EAA6E;AAC7E,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjE,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;CACzC;AAED,gFAAgF;AAChF,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,cAAc,CAAC;IAC1C,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,gBAAgB,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,YAAY,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACxE,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,YAAY,CAAC;CACpB;AAED,mEAAmE;AACnE,MAAM,MAAM,YAAY,GAAG,kBAAkB,GAAG,kBAAkB,GAAG,qBAAqB,GAAG,eAAe,GACxG,cAAc,GAAG,cAAc,GAAG,MAAM,GAAG,iBAAiB,GAAG,cAAc,GAAG,cAAc,GAC9F,oBAAoB,GAAG,oBAAoB,GAAG,2BAA2B,GAAG,4BAA4B,GAAG,YAAY,GAAG,kBAAkB,CAAC;AAEjJ,2EAA2E;AAC3E,UAAU,SAAS;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,YAAY,CAAC;IACnB,IAAI,EAAE,UAAU,GAAG,UAAU,GAAG,UAAU,GAAG,aAAa,CAAC;IAC3D,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,EAAE,EAAE,OAAO,CAAC;CACb;AAED,iFAAiF;AACjF,UAAU,WAAW;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,OAAO,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IACtB,IAAI,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE;YAAE,SAAS,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC;CACpD;AAuKD,oGAAoG;AACpG,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,WAAW,EAAE,QAAQ,GAAE,MAAM,EAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CA0DpI;AAoBD;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,SAAK,GAAG,OAAO,CAwBrE;AAED,+FAA+F;AAC/F,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAE,EAAE,CAyBtG;AAkDD,4FAA4F;AAC5F,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAO5D;AAED,sHAAsH;AACtH,qBAAa,kBAAmB,SAAQ,KAAK;CAAG;AAOhD;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,SAAS,GAAG,MAAM,CAMrD;AAqBD,gFAAgF;AAChF,MAAM,MAAM,gBAAgB,GAAG,CAAC,QAAQ,EAAE,QAAQ,GAAG,UAAU,GAAG,SAAS,GAAG,WAAW,GAAG,cAAc,GAAG,QAAQ,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAExI,0FAA0F;AAC1F,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,QAAQ,CAAC,EAAE,gBAAgB;aAM1I,MAAM;UAAQ,MAAM;aAAW,OAAO;UAAQ,WAAW,EAAE;YAAU,SAAS,EAAE;YAAU,MAAM;YAAU,MAAM;GAJ1H;AAuPD,8FAA8F;AAC9F,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,WAAW,CAAC,CAAC;aApP1E,MAAM;UAAQ,MAAM;aAAW,OAAO;YAAoD,MAAM;YAAU,MAAM;;cAvcnH,MAAM;YACR,MAAM;qBAEG,MAAM,EAAE;2BACF;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,YAAY,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,EAAE;gBAC/D,MAAM;cACR,YAAY;;;;;EAisBnB"}
+{"version":3,"file":"closeout.d.ts","sourceRoot":"","sources":["../closeout.ts"],"names":[],"mappings":"AAMA,6EAA6E;AAC7E,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjE,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;CACzC;AAED,gFAAgF;AAChF,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,cAAc,CAAC;IAC1C,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,gBAAgB,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,YAAY,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACxE,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,YAAY,CAAC;CACpB;AAED,mEAAmE;AACnE,MAAM,MAAM,YAAY,GAAG,kBAAkB,GAAG,kBAAkB,GAAG,qBAAqB,GAAG,eAAe,GACxG,cAAc,GAAG,cAAc,GAAG,MAAM,GAAG,iBAAiB,GAAG,cAAc,GAAG,cAAc,GAC9F,oBAAoB,GAAG,oBAAoB,GAAG,2BAA2B,GAAG,4BAA4B,GAAG,YAAY,GAAG,kBAAkB,CAAC;AAEjJ,2EAA2E;AAC3E,UAAU,SAAS;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,YAAY,CAAC;IACnB,IAAI,EAAE,UAAU,GAAG,UAAU,GAAG,UAAU,GAAG,aAAa,CAAC;IAC3D,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,EAAE,EAAE,OAAO,CAAC;CACb;AAED,iFAAiF;AACjF,UAAU,WAAW;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,OAAO,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IACtB,IAAI,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE;YAAE,SAAS,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC;CACpD;AAgMD,oGAAoG;AACpG,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,WAAW,EAAE,QAAQ,GAAE,MAAM,EAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CA2DpI;AAiBD;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,SAAK,GAAG,OAAO,CAwBrE;AAED,+FAA+F;AAC/F,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAE,EAAE,CAyBtG;AAkDD,4FAA4F;AAC5F,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAY5D;AAED,sHAAsH;AACtH,qBAAa,kBAAmB,SAAQ,KAAK;CAAG;AAOhD;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,SAAS,GAAG,MAAM,CAMrD;AAqBD,gFAAgF;AAChF,MAAM,MAAM,gBAAgB,GAAG,CAAC,QAAQ,EAAE,QAAQ,GAAG,UAAU,GAAG,SAAS,GAAG,WAAW,GAAG,cAAc,GAAG,QAAQ,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAExI,0FAA0F;AAC1F,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,QAAQ,CAAC,EAAE,gBAAgB;aAM1I,MAAM;UAAQ,MAAM;aAAW,OAAO;UAAQ,WAAW,EAAE;YAAU,SAAS,EAAE;YAAU,MAAM;YAAU,MAAM;GAJ1H;AA4PD,8FAA8F;AAC9F,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,WAAW,CAAC,CAAC;aAzP1E,MAAM;UAAQ,MAAM;aAAW,OAAO;YAAoD,MAAM;YAAU,MAAM;;cAnenH,MAAM;YACR,MAAM;qBAEG,MAAM,EAAE;2BACF;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,YAAY,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,EAAE;gBAC/D,MAAM;cACR,YAAY;;;;;EAkuBnB"}

package/dist/closeout.js

@@ -1,6 +1,8 @@
+import { readGithubWorkspace, githubStatusIsTerminal } from "./workspace.js";
 import { ownValue } from "./own-record.js";
+import { normalizeImportValue } from "./import-fidelity.js";
 /** Close delivered tracker items using merged pull requests and head-check evidence. */
-import { close, hashDocument, locateItem, readLocatedItem, readSettings, resolveItemTypeRegistry, runWithActiveExtensions, setActiveExtensionHooks, listAllComplete, certifyCompleteListResult, getHistoryPath, readHistoryEntries, verifyHistoryEntries, PmCliError, EXIT_CODE } from "@unbrained/pm-cli/sdk";
+import { close, hashDocument, locateItem, readLocatedItem, runWithActiveExtensions, setActiveExtensionHooks, listAllComplete, certifyCompleteListResult, getHistoryPath, readHistoryEntries, verifyHistoryEntries, PmCliError, EXIT_CODE } from "@unbrained/pm-cli/sdk";
 /** Reject non-object API payloads before reading safety-critical fields. */
 function record(value) {
     if (value === null || typeof value !== "object" || Array.isArray(value))
@@ -41,9 +43,22 @@ function requiredContexts(value) {
         throw new Error("--required-checks requires newline-separated context names.");
     return values.flatMap(entry => entry.split("\n")).map(line => line.trim()).filter(Boolean);
 }
+/** A safe read diagnostic contains a known endpoint and no response or exception prose. */
+class CloseoutReadError extends Error {
+}
+/** Identify a failed read without copying tokens, API bodies or transport errors. */
+async function evidenceRead(api, url) {
+    try {
+        return await api.get(url);
+    }
+    catch (error) {
+        const status = error instanceof Error ? /HTTP (\d{3})\b/.exec(error.message)?.[1] : undefined;
+        throw new CloseoutReadError(`GitHub GET ${new URL(url).pathname} failed; verify token read access and retry${status ? `: HTTP ${status}` : "."}`);
+    }
+}
 /** Read one payload with the shared authenticated retry/redirect transport. */
 async function payload(api, endpoint) {
-    return JSON.parse((await api.get(`${api.base}${endpoint}`)).body);
+    return JSON.parse((await evidenceRead(api, `${api.base}${endpoint}`)).body);
 }
 /** Drain same-endpoint pagination; reject cycles, foreign links and truncated totals. */
 async function pages(api, endpoint, checks = false, done) {
@@ -52,12 +67,26 @@ async function pages(api, endpoint, checks = false, done) {
     const seen = new Set();
     const rows = [];
     let total;
+    let numericPath;
     while (next) {
         const url = new URL(next);
-        if (url.origin !== initial.origin || url.pathname !== initial.pathname || seen.has(next))
-            throw new Error("Unverifiable GitHub pagination.");
+        if (url.origin !== initial.origin || seen.has(next))
+            throw new CloseoutReadError(`Unverifiable GitHub pagination for GET ${initial.pathname}; retry with a same-repository next-page link.`);
+        if (url.pathname !== initial.pathname && url.pathname !== numericPath) {
+            // GitHub emits numeric repository aliases in Link headers even when the
+            // first request used owner/name. Verify the alias before following it.
+            const named = /^\/repos\/([^/]+\/[^/]+)(\/.*)$/.exec(initial.pathname);
+            const numeric = /^\/repositories\/([1-9]\d*)(\/.*)$/.exec(url.pathname);
+            if (!named || !numeric || named[2] !== numeric[2])
+                throw new CloseoutReadError(`Unverifiable GitHub pagination for GET ${initial.pathname}; next-page endpoint changed.`);
+            const identity = record(await payload(api, `/repos/${named[1]}`));
+            if (!Number.isSafeInteger(identity.id) || String(identity.id) !== numeric[1]
+                || text(identity.full_name).toLowerCase() !== named[1].toLowerCase())
+                throw new CloseoutReadError(`Unverifiable GitHub pagination for GET ${initial.pathname}; repository ID does not match.`);
+            numericPath = url.pathname;
+        }
         seen.add(next);
-        const response = await api.get(next);
+        const response = await evidenceRead(api, next);
         const value = JSON.parse(response.body);
         let page = value;
         if (checks) {
@@ -120,20 +149,23 @@ function mergeEvidence(pr) {
     return mergeEvidenceGaps(pr).length === 0;
 }
 /** Treat only permission and not-found responses as protection metadata gaps. */
-async function readProtectionSource(read) {
+async function readProtectionSource(read, gaps) {
     try {
         return await read();
     }
     catch (error) {
-        if (error instanceof Error && /HTTP (403|404)$/.test(error.message))
+        if (error instanceof Error && /HTTP (403|404)$/.test(error.message)) {
+            gaps.push(error.message);
             return null;
+        }
         throw error;
     }
 }
 /** Combine all readable app-bound contexts without discarding known requirements. */
 async function requirements(api, repo, branch) {
-    const classic = await readProtectionSource(async () => record(await payload(api, `/repos/${repo}/branches/${encodeURIComponent(branch)}/protection/required_status_checks`)));
-    const rules = await readProtectionSource(() => pages(api, `/repos/${repo}/rules/branches/${encodeURIComponent(branch)}?per_page=100`));
+    const gaps = [];
+    const classic = await readProtectionSource(async () => record(await payload(api, `/repos/${repo}/branches/${encodeURIComponent(branch)}/protection/required_status_checks`)), gaps);
+    const rules = await readProtectionSource(() => pages(api, `/repos/${repo}/rules/branches/${encodeURIComponent(branch)}?per_page=100`), gaps);
     const checks = [];
     if (classic !== null) {
         if (!Array.isArray(classic.contexts) || !Array.isArray(classic.checks))
@@ -167,7 +199,7 @@ async function requirements(api, repo, branch) {
             checks.push({ name: text(check.context), app: typeof app === "number" ? app : null });
         }
     }
-    return { checks, fallback: checks.length === 0, unavailable: classic === null || rules === null };
+    return { checks, fallback: checks.length === 0, unavailable: classic === null || rules === null, gaps };
 }
 /** Verify metadata-backed or caller-declared requirements before considering observed head runs. */
 export async function checkCloseoutHead(api, repo, pr, declared = []) {
@@ -177,7 +209,7 @@ export async function checkCloseoutHead(api, repo, pr, declared = []) {
         if (policy.unavailable) {
             if (declared.length === 0) {
                 result.code = "required_checks_unverified";
-                result.reason = "Required-check metadata unavailable; declare --required-checks to verify the required contexts.";
+                result.reason = `${policy.gaps[0]}. Required-check metadata unavailable; declare --required-checks (workflow input required-checks) to verify the required contexts. GITHUB_TOKEN cannot read administration-only branch protection.`;
                 return result;
             }
             policy.checks.push(...declared.map(name => ({ name, app: null })));
@@ -233,14 +265,14 @@ export async function checkCloseoutHead(api, repo, pr, declared = []) {
         result.code = "head_checks_passed";
         result.ok = true;
     }
-    catch {
+    catch (error) {
         result.code = "head_evidence_unavailable";
+        if (error instanceof CloseoutReadError)
+            result.reason = error.message;
         // Never echo an API body, exception payload, PR body or comment into the report.
     }
     return result;
 }
-/** Statuses that already ended an item's lifecycle. */
-const TERMINAL_STATUSES = ["closed", "canceled"];
 /** GitHub-style closing keywords that declare delivery of the link they directly precede. */
 const CLOSING_KEYWORDS = new Set(["close", "closes", "closed", "fix", "fixes", "fixed", "resolve", "resolves", "resolved", "deliver", "delivers", "delivered"]);
 /**
@@ -389,8 +421,12 @@ function closeReason(pr, passed) {
 export function closeoutFailureReason(error) {
     if (error instanceof PmCliError) {
         const code = error.code;
-        if (typeof code === "string" && /^[a-z][a-z0-9_]{0,79}$/.test(code))
-            return `SDK close refused: ${code}.`;
+        if (typeof code === "string" && /^[a-z][a-z0-9_]{0,79}$/.test(code)) {
+            const fields = [...new Set([...(error.context.recovery?.missing_required_fields ?? []), ...(error.context.field ? [error.context.field] : []),
+                    ...(error.context.policy_violations ?? []).flatMap(violation => violation.missing_fields)]
+                    .filter(field => /^[a-z][a-z0-9_]{0,79}$/.test(field)))];
+            return `SDK close refused: ${code}.${fields.length ? ` Supply required fields: ${fields.join(", ")}.` : ""}`;
+        }
         return `SDK close refused (exit ${error.exitCode}).`;
     }
     return "SDK close failed (unclassified error).";
@@ -446,7 +482,7 @@ export function runCloseout(pmRoot, repo, options, api, observer) {
     return closeoutAttempt(pmRoot, repo, options, api, true, observer);
 }
 /** Re-select a conflicted item once; each attempt installs a lock-scoped SDK precondition. */
-async function closeoutAttempt(pmRoot, repo, options, api, retry, observer, onlyItem) {
+async function closeoutAttempt(pmPath, repo, options, api, retry, observer, onlyItem) {
     if (!repo || !/^(?!\.{1,2}\/)[A-Za-z0-9_.-]+\/(?!\.{1,2}$)[A-Za-z0-9_.-]+$/.test(repo))
         throw new CloseoutUsageError("closeout requires --repo owner/repo or PM_GITHUB_REPO.");
     const numbers = usage(() => repeated(options, "pr")).map(value => {
@@ -475,10 +511,15 @@ async function closeoutAttempt(pmRoot, repo, options, api, retry, observer, only
             }
         }
     }
+    const workspace = await readGithubWorkspace(pmPath);
+    const pmRoot = workspace.pmRoot;
     const corpus = certifyCompleteListResult(await listAllComplete({}, { pmRoot, noExtensions: true }));
     await observer?.("listed");
-    const settings = await readSettings(pmRoot);
-    const types = resolveItemTypeRegistry(settings).type_to_folder;
+    const { settings, types: registry } = workspace;
+    const types = registry.type_to_folder;
+    const typeNames = new Map(Object.entries(registry.alias_to_type));
+    /** Container eligibility uses the same registry as persisted item types. */
+    const isEpic = (type) => normalizeImportValue("type", type, typeNames) === normalizeImportValue("type", "Epic", typeNames);
     const snapshots = new Map();
     const documents = new Map();
     const items = new Map(corpus.items.map(item => [item.id, item]));
@@ -497,21 +538,21 @@ async function closeoutAttempt(pmRoot, repo, options, api, retry, observer, only
     const activeChildren = new Map();
     for (const item of items.values()) {
         const parent = item.parent;
-        if (typeof parent === "string" && !TERMINAL_STATUSES.includes(item.status))
+        if (typeof parent === "string" && !githubStatusIsTerminal(item.status, workspace.statuses))
             activeChildren.set(parent, (activeChildren.get(parent) ?? 0) + 1);
     }
     const plan = [];
     const checks = [];
     const closures = [];
     const candidates = new Map();
-    const unreadable = [];
+    const unreadable = new Map();
     for (const number of [...new Set(numbers)].sort((a, b) => a - b)) {
         let evidence;
         try {
             evidence = await payload(api, `/repos/${repo}/pulls/${number}`);
         }
-        catch {
-            unreadable.push(number);
+        catch (error) {
+            unreadable.set(number, error instanceof CloseoutReadError ? error.message : "Pull-request evidence unavailable or incomplete.");
             continue;
         }
         const pr = pullRequest(evidence, repo, number);
@@ -562,7 +603,7 @@ async function closeoutAttempt(pmRoot, repo, options, api, retry, observer, only
                 code = "explicit_skip";
                 reason = "Explicitly excluded by --skip.";
             }
-            else if (TERMINAL_STATUSES.includes(items.get(ref.item).status)) {
+            else if (githubStatusIsTerminal(items.get(ref.item).status, workspace.statuses)) {
                 code = "already_terminal";
                 reason = "Item is already closed or canceled.";
             }
@@ -570,7 +611,7 @@ async function closeoutAttempt(pmRoot, repo, options, api, retry, observer, only
                 code = "not_merged";
                 reason = "Pull request is confirmed unmerged and cannot deliver this item.";
             }
-            else if (items.get(ref.item).type === "Epic") {
+            else if (isEpic(items.get(ref.item).type)) {
                 code = "epic";
                 reason = "Epics close when their children are done, not by a pull request.";
             }
@@ -609,8 +650,8 @@ async function closeoutAttempt(pmRoot, repo, options, api, retry, observer, only
             const row = { item: ref.item, pr: number, action: "skip", code, reason };
             plan.push(row);
             if (role !== "context" && pr.merged !== false && items.has(ref.item) && ref.repo.toLowerCase() === repo.toLowerCase()
-                && !skip.has(ref.item) && !TERMINAL_STATUSES.includes(items.get(ref.item).status)
-                && items.get(ref.item).type !== "Epic" && !activeChildren.has(ref.item)) {
+                && !skip.has(ref.item) && !githubStatusIsTerminal(items.get(ref.item).status, workspace.statuses)
+                && !isEpic(items.get(ref.item).type) && !activeChildren.has(ref.item)) {
                 const group = candidates.get(ref.item) ?? [];
                 group.push({ row, pr, declared: ref.declared, commitsReadable });
                 candidates.set(ref.item, group);
@@ -619,12 +660,12 @@ async function closeoutAttempt(pmRoot, repo, options, api, retry, observer, only
     }
     // A failed PR read can hide linkage and a competing claim. Retain its number for
     // every active eligible item; without the PR evidence no item can be proved unrelated.
-    for (const number of unreadable) {
+    for (const [number, reason] of unreadable) {
         const url = `https://github.com/${repo}/pull/${number}`;
         for (const item of items.values()) {
-            if (skip.has(item.id) || TERMINAL_STATUSES.includes(item.status) || item.type === "Epic" || activeChildren.has(item.id))
+            if (skip.has(item.id) || githubStatusIsTerminal(item.status, workspace.statuses) || isEpic(item.type) || activeChildren.has(item.id))
                 continue;
-            const row = { item: item.id, pr: number, action: "skip", code: "head_evidence_unavailable", reason: "Pull-request fetch failed; merge, linkage and delivery evidence unavailable." };
+            const row = { item: item.id, pr: number, action: "skip", code: "head_evidence_unavailable", reason };
             plan.push(row);
             const group = candidates.get(item.id) ?? [];
             group.push({ row, pr: { number, html_url: url, body: null, merged: true, merged_at: null, merge_commit_sha: null, commits: null,