[#358] 🤖 - Develop by efraespada · Pull Request #358 · vypdev/copilot

efraespada · 2026-09-09T20:50:09Z

📌 Summary

Introduces durable, configurable release and hotfix orchestration with managed promotion PRs, event-driven continuation, publication verification, reconciliation, recovery, and durable Bugbot review-state presentation.

🎯 Related Issues / Tickets

Closes [#358] 🤖 - Develop #358

🧩 Scope of Changes

Added:
- Durable deployment state machine with schema-v3 snapshots and continuation workflows.
- Configurable reconciliation, merge, cleanup, presentation, and issue-completion policies.
- Merge-queue readiness validation and durable Bugbot review-state reconciliation.
- Configuration validation, setup support, documentation, specifications, and traceability.
Updated:
- Release, hotfix, pull request, commit, and deployment workflows.
- Action routing, configuration persistence, GitHub adapters, setup templates, validators, and generated bundles.
- npm publication verification and workflow contracts.
Removed:
- Legacy deployed_action post-deployment flow.
- Runner-blocking deployment merge waits and the merge-timeout input.
- Deprecated ai-pull-request-description input.
Refactored:
- Deployment orchestration into domain policies, application ports/use cases, and infrastructure adapters.
- Bugbot review publication and lifecycle handling around durable, provider-neutral state.

🛠️ Technical Details

Releases use a frozen development-branch SHA and are promoted through a managed production PR.
Tags are created only at the accepted production commit; npm publication verifies immutable tag and gitHead identity.
PR completion triggers a separate continuation workflow instead of keeping the preparation runner active.
Durable snapshots support retries, duplicate events, blocked states, immutable tag reuse, and partial-failure recovery.
Configuration is bounded, validated before mutation, persisted with the operation, and documented.
Continuation validates operation identity, repository ownership, issue and branch pairing, stored SHAs, and production reachability.
Merge-queue readiness fails closed and evaluates effective branch protection, rulesets, workflow definitions, and exact attestations.
Bugbot findings are projected into durable review state with deterministic status cards, review navigation, and reconciled publication.
Generated workflows use trusted base-branch checkouts, scoped permissions, npm trusted publishing, and exclude credentials and OIDC claims from durable state.

🔍 How to Test

Install dependencies with corepack pnpm@10.12.4 install.
Run corepack pnpm@10.12.4 run typecheck, lint, and test:coverage.
Run the workflow, documentation, build, package, specification, and generated-artifact validation commands listed in docs/development/testing.mdx.
Exercise release and hotfix preparation, managed promotion PR completion, publication continuation, reconciliation, retry, blocked, duplicate-event, manual-mode, merge-queue, and Bugbot review-state paths using the added tests and workflow contract validators.
Run git diff --check.

🧪 Test Coverage

Unit tests
Integration tests
End-to-end (E2E) tests
Manual testing only

Coverage includes deployment policies, state transitions, configuration validation, orchestration use cases, GitHub deployment repositories, merge-queue readiness, managed PR markers, Bugbot review reconciliation, security guards, workflow contracts, and architecture boundaries.

📸 Screenshots / Recordings (UI changes only)

Not applicable; user-facing changes are limited to GitHub issues, pull requests, workflow summaries, comments, and review state.

⚠️ Breaking Changes

The legacy deployed_action and label-driven post-deployment merge flow have been removed. Consumers must use durable deployment callback actions.
The merge-timeout and ai-pull-request-description inputs have been removed.
Durable configuration now requires schema version 3 and rejects missing, malformed, or older persisted payloads.
Consumer repositories must regenerate or update the release, hotfix, deployment-continuation, and merge-group workflow templates.

🚀 Deployment Notes

Requires database migration
Requires environment variable changes
Requires feature flag toggle
No special deployment steps

Details:

Regenerate or update consumer repositories with the release, hotfix, deployment-continuation, and merge-group workflow templates.
Configure repository Variables when overriding orchestration defaults.
For npm trusted publishing, configure the npm environment and GitHub Actions trusted publishers.
Ensure required checks support merge_group before selecting merge-queue mode.
Install the continuation workflow on the default branch before starting managed deployments.

🔒 Security Considerations

No security impact
Input validation changes
Authentication / authorization changes
Sensitive data handling changes

Continuation validates managed operation identity, repository ownership, issue and branch pairing, stored SHAs, and production reachability before mutation. Workflows use trusted base-branch checkouts and scoped permissions; credentials and OIDC claims are excluded from durable state. Merge-queue readiness fails closed for unknown or inaccessible checks.

📈 Performance Impact

No performance impact
Improves performance
Potential performance regression (explain)

PR checks and human review no longer occupy a runner while pending. Continuation workflows run only after relevant managed PR events, with bounded queue and job timeouts.

📝 Notes for Reviewers

Pay particular attention to:

State-machine transitions, retries, blocked states, and duplicate-event handling.
Production SHA, immutable tag, npm gitHead, and publication verification.
Reconciliation target and sync-branch selection.
Merge-queue readiness, workflow permissions, marker parsing, and merge-group compatibility.
Bugbot review-state identity, status projection, and publication reconciliation.
Consistency between Action inputs, setup templates, persisted configuration, documentation, and generated bundles.
Migration impact from removed legacy deployment actions and schema-v2 configuration.

✅ Checklist

I have self-reviewed my code
Code follows project standards and conventions
Tests have been added or updated
Documentation has been updated
No new warnings or lint errors
Breaking contract changes and required consumer updates are documented

📚 Additional Context

See Release and hotfix orchestration, configurable-release-orchestration.md, configurable-release-orchestration-traceability.md, and bugbot-review-state-reconciliation.md.

Merge release/3.3.1 into develop

docs-page · 2026-09-09T20:50:12Z

To preview the documentation for this pull request, visit the following URL:

docs.page/vypdev/copilot~358

Documentation is deployed and generated using docs.page

vypbot

Current status: All findings originating in this review are resolved.
Last reconciled on 2fec5c2. See aggregate Bugbot status.

🤖 Bugbot review snapshot

Bugbot reported 1 potential problem(s) when commit df97249 was analyzed. This snapshot is historical; use the status block above for current state.

Findings

medium: Merge-queue mode is accepted without workflow support validation — src/actions/github_action_execution.ts:81

^{Written by vypdev/copilot for commit df9724909f7ec33f4666eacac4d19e5c2098c6c2. This will update automatically on new commits.}

codecov-commenter · 2026-09-10T08:34:59Z

Codecov Report

❌ Patch coverage is 94.33962% with 15 lines in your changes missing coverage. Please review.
✅ Project coverage is 87.91%. Comparing base (45c9e54) to head (2fec5c2).

Files with missing lines	Patch %	Lines
src/actions/deployment_configuration_builder.ts	78.57%	5 Missing and 1 partial ⚠️
...plication/policies/bugbot_finding_status_policy.ts	44.44%	2 Missing and 3 partials ⚠️
src/actions/github_action_completion.ts	81.81%	3 Missing and 1 partial ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##           master     #358      +/-   ##
==========================================
+ Coverage   87.89%   87.91%   +0.02%     
==========================================
  Files         568      584      +16     
  Lines       12282    13822    +1540     
  Branches     2960     3559     +599     
==========================================
+ Hits        10795    12152    +1357     
- Misses        701      760      +59     
- Partials      786      910     +124

Files with missing lines	Coverage Δ
src/actions/configuration_builders.ts	`100.00% <100.00%> (ø)`
src/actions/github_action.ts	`92.42% <ø> (ø)`
src/actions/github_action_ai_inputs.ts	`88.88% <ø> (+3.88%)`	⬆️
src/actions/github_action_execution.ts	`91.83% <100.00%> (+0.34%)`	⬆️
src/actions/local_action_configuration_sections.ts	`85.48% <100.00%> (+2.43%)`	⬆️
src/actions/local_action_execution.ts	`92.30% <ø> (ø)`
src/api.ts	`95.00% <100.00%> (+3.33%)`	⬆️
src/application/contracts/input_keys.ts	`100.00% <ø> (ø)`
src/application/policies/action_summary_policy.ts	`85.71% <100.00%> (+4.31%)`	⬆️
src/application/policies/agent_activity_policy.ts	`80.00% <100.00%> (ø)`
... and 64 more

... and 70 files with indirect coverage changes

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

vypbot · 2026-09-10T08:35:21Z

🪄 Automatic Actions

Waiting state cleared.

Debug log

[DEBUG] Setup done. Issue number: 358, isSingleAction: false, isIssue: true, isPullRequest: false, isPush: false
[INFO] Added Copilot agent activity label on target #358.
[INFO] Running IssueCommentUseCase for issue #358.
[INFO] IssueCommentUseCase started.
[INFO] 🌐 Executing CheckIssueCommentLanguageUseCase.
[DEBUG] CheckIssueCommentLanguageUseCase: language check status=done.
[INFO] Skipping natural-language intent detection because the bot was not mentioned.
[INFO] Main run finished. Results: 1, total steps: 0.
[INFO] Removed Copilot agent activity label on target #358.
[INFO] Publishing result: 2 result(s), 1 step(s), 0 error(s).
[INFO] 📄 Executing PublishResultUseCase.

🚀 Happy coding!

^{Made with ❤️ by vypdev/copilot}

vypbot · 2026-09-11T09:32:24Z

🪄 Automatic Actions

Waiting state cleared.

Debug log

[DEBUG] Setup done. Issue number: 358, isSingleAction: false, isIssue: true, isPullRequest: false, isPush: false
[INFO] Added Copilot agent activity label on target #358.
[INFO] Running IssueCommentUseCase for issue #358.
[INFO] IssueCommentUseCase started.
[INFO] 🌐 Executing CheckIssueCommentLanguageUseCase.
[DEBUG] CheckIssueCommentLanguageUseCase: language check status=done.
[INFO] Skipping natural-language intent detection because the bot was not mentioned.
[INFO] Main run finished. Results: 1, total steps: 0.
[INFO] Removed Copilot agent activity label on target #358.
[INFO] Publishing result: 2 result(s), 1 step(s), 0 error(s).
[INFO] 📄 Executing PublishResultUseCase.

🚀 Happy coding!

^{Made with ❤️ by vypdev/copilot}

vypbot

Current status: All findings originating in this review are resolved.
Last reconciled on 2fec5c2. See aggregate Bugbot status.

🤖 Bugbot review snapshot

Bugbot reported 1 potential problem(s) when commit 227e5ce was analyzed. This snapshot is historical; use the status block above for current state. 1 finding(s) are linked to changed code.

Findings

medium: Missing existing findings are treated as clean — src/application/usecases/steps/commit/bugbot/reconcile_bugbot_review_state_use_case.ts:169

^{Written by vypdev/copilot for commit 227e5ce249bd68bddbe3adf19985d9e3d149e7ff. This will update automatically on new commits.}

vypbot · 2026-09-11T09:32:57Z

🤖 Bugbot status

Current status: No active findings on 2fec5c2.

Action required: No action required.

Current state

State	Count
Open / reopened	0
Verification required	0
Fixed	2
Obsolete	0
Dismissed	0
Unknown	0

Findings

fixed — Merge-queue mode is accepted without workflow support validation
fixed — Missing existing findings are treated as clean

Pull request · Verified commit · Workflow run

Technical details

Projection: complete · Analyzed head: 2fec5c2 · Digest: 994c5d25

No pending operations.

^{Written by vypdev/copilot for commit 2fec5c24a80135dd0611d3bc37e7dc3a8ab1b41a. This will update automatically on new commits.}

vypbot · 2026-09-11T10:51:41Z

🪄 Automatic Actions

Waiting state cleared.

Debug log

[DEBUG] Setup done. Issue number: 358, isSingleAction: false, isIssue: true, isPullRequest: false, isPush: false
[INFO] Added Copilot agent activity label on target #358.
[INFO] Running IssueCommentUseCase for issue #358.
[INFO] IssueCommentUseCase started.
[INFO] 🌐 Executing CheckIssueCommentLanguageUseCase.
[DEBUG] CheckIssueCommentLanguageUseCase: language check status=done.
[INFO] Skipping natural-language intent detection because the bot was not mentioned.
[INFO] Main run finished. Results: 1, total steps: 0.
[INFO] Removed Copilot agent activity label on target #358.
[INFO] Publishing result: 2 result(s), 1 step(s), 0 error(s).
[INFO] 📄 Executing PublishResultUseCase.

🚀 Happy coding!

^{Made with ❤️ by vypdev/copilot}

vypbot · 2026-09-11T13:23:47Z

🪄 Automatic Actions

Waiting state cleared.

Debug log

[DEBUG] Setup done. Issue number: 358, isSingleAction: false, isIssue: true, isPullRequest: false, isPush: false
[INFO] Added Copilot agent activity label on target #358.
[INFO] Running IssueCommentUseCase for issue #358.
[INFO] IssueCommentUseCase started.
[INFO] 🌐 Executing CheckIssueCommentLanguageUseCase.
[DEBUG] CheckIssueCommentLanguageUseCase: language check status=done.
[INFO] Skipping natural-language intent detection because the bot was not mentioned.
[INFO] Main run finished. Results: 1, total steps: 0.
[INFO] Removed Copilot agent activity label on target #358.
[INFO] Publishing result: 2 result(s), 1 step(s), 0 error(s).
[INFO] 📄 Executing PublishResultUseCase.

🚀 Happy coding!

^{Made with ❤️ by vypdev/copilot}

vypbot · 2026-09-11T15:25:23Z

✨ Feature Actions

Lifecycle state synchronized to verified.
Waiting state cleared.

Debug log

[DEBUG] Setup done. Issue number: 358, isSingleAction: false, isIssue: false, isPullRequest: true, isPush: false
[INFO] Running PullRequestUseCase for PR #358.
[INFO] 🔀 Executing PullRequestUseCase.
[DEBUG] PR action closed
[DEBUG] PR isOpened false
[DEBUG] PR isMerged true
[DEBUG] PR isClosed true
[INFO] ✅ Executing CloseIssueAfterMergingUseCase.
[DEBUG] Issue #358 state: closed
[DEBUG] Issue #358 is already closed.
[DEBUG] Issue #358 was already closed or close failed after merge.
[INFO] Main run finished. Results: 1, total steps: 0.
[INFO] Publishing result: 2 result(s), 2 step(s), 0 error(s).
[INFO] 📄 Executing PublishResultUseCase.

🚀 Happy coding!

^{Made with ❤️ by vypdev/copilot}

efraespada added 3 commits September 8, 2026 13:07

Merge pull request #357 from vypdev/release/3.3.1

129dd7d

Merge release/3.3.1 into develop

develop: add SDD standard and release orchestration spec

4442aae

develop: add configurable deployment orchestration

df97249

vypbot added the state:ai-processing label Sep 9, 2026

vypbot changed the title ~~Develop~~ [#358] 🤖 - Develop Sep 9, 2026

vypbot assigned efraespada Sep 9, 2026

vypbot self-requested a review September 9, 2026 20:50

vypbot removed the state:ai-processing label Sep 9, 2026

vypbot added this to vypdev Sep 9, 2026

vypbot moved this to In Progress in vypdev Sep 9, 2026

vypbot reviewed Sep 9, 2026

View reviewed changes

Comment thread src/actions/github_action_execution.ts

vypbot added state:changes-requested state:awaiting-issue-author labels Sep 9, 2026

Merge branch 'master' of https://github.com/vypdev/copilot into develop

cb1a819

vypbot added state:ai-processing and removed state:ai-processing labels Sep 9, 2026

develop: align release orchestration guidance

627ad78

vypbot added state:ai-processing and removed state:ai-processing labels Sep 9, 2026

develop: remove legacy compatibility paths

010a17e

vypbot added the state:ai-processing label Sep 10, 2026

vypbot removed state:awaiting-issue-author state:ai-processing labels Sep 10, 2026

vypbot added the state:awaiting-issue-author label Sep 10, 2026

develop: enforce merge queue readiness

e6089b9

vypbot added state:ai-processing and removed state:awaiting-issue-author labels Sep 10, 2026

vypbot removed the state:ai-processing label Sep 11, 2026

vypbot reviewed Sep 11, 2026

View reviewed changes

Comment thread src/application/usecases/steps/commit/bugbot/reconcile_bugbot_review_state_use_case.ts Outdated

vypbot added state:changes-requested state:awaiting-issue-author and removed state:ready labels Sep 11, 2026

develop: harden review state reconciliation

37c2983

vypbot added state:ai-processing and removed state:awaiting-issue-author state:ai-processing labels Sep 11, 2026

vypbot added state:awaiting-maintainer state:ready and removed state:changes-requested labels Sep 11, 2026

develop: add retrospective specification catalog

4db563a

vypbot added state:ai-processing and removed state:ai-processing labels Sep 11, 2026

develop: stabilize process-group timeout verification

2fec5c2

vypbot added state:ai-processing and removed state:awaiting-maintainer state:ai-processing labels Sep 11, 2026

vypbot added the state:awaiting-maintainer label Sep 11, 2026

efraespada merged commit 510f03e into master Sep 11, 2026
16 checks passed

github-project-automation Bot moved this from In Progress to Done in vypdev Sep 11, 2026

vypbot added state:verified and removed state:awaiting-maintainer state:ready labels Sep 11, 2026

Navigation Menu

Uh oh!

[#358] 🤖 - Develop - #358

[#358] 🤖 - Develop#358
efraespada merged 11 commits into
masterfrom
develop

efraespada commented Sep 9, 2026 •

edited by vypbot

Loading

Uh oh!

docs-page Bot commented Sep 9, 2026

Uh oh!

vypbot left a comment •

edited

Loading

Uh oh!

Uh oh!

codecov-commenter commented Sep 10, 2026 •

edited

Loading

Uh oh!

vypbot commented Sep 10, 2026

Uh oh!

vypbot commented Sep 11, 2026

Uh oh!

vypbot left a comment •

edited

Loading

Uh oh!

Uh oh!

vypbot commented Sep 11, 2026 •

edited

Loading

Uh oh!

vypbot commented Sep 11, 2026

Uh oh!

vypbot commented Sep 11, 2026

Uh oh!

Uh oh!

vypbot commented Sep 11, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Uh oh!

Conversation

efraespada commented Sep 9, 2026 • edited by vypbot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

📌 Summary

🎯 Related Issues / Tickets

🧩 Scope of Changes

🛠️ Technical Details

🔍 How to Test

🧪 Test Coverage

📸 Screenshots / Recordings (UI changes only)

⚠️ Breaking Changes

🚀 Deployment Notes

🔒 Security Considerations

📈 Performance Impact

📝 Notes for Reviewers

✅ Checklist

📚 Additional Context

Uh oh!

docs-page Bot commented Sep 9, 2026

Uh oh!

vypbot left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

🤖 Bugbot review snapshot

Findings

Uh oh!

Uh oh!

codecov-commenter commented Sep 10, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

vypbot commented Sep 10, 2026

🪄 Automatic Actions

Uh oh!

vypbot commented Sep 11, 2026

🪄 Automatic Actions

Uh oh!

vypbot left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

🤖 Bugbot review snapshot

Findings

Uh oh!

Uh oh!

vypbot commented Sep 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🤖 Bugbot status

Current state

Findings

Uh oh!

vypbot commented Sep 11, 2026

🪄 Automatic Actions

Uh oh!

vypbot commented Sep 11, 2026

🪄 Automatic Actions

Uh oh!

Uh oh!

vypbot commented Sep 11, 2026

✨ Feature Actions

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

efraespada commented Sep 9, 2026 •

edited by vypbot

Loading

vypbot left a comment •

edited

Loading

codecov-commenter commented Sep 10, 2026 •

edited

Loading

vypbot left a comment •

edited

Loading

vypbot commented Sep 11, 2026 •

edited

Loading