✨ - Browser extension H8 Action producer versioned extension discovery status and request contracts #709

Is there an existing issue or feature request for this?

• I have searched the existing issues and feature requests.

What area does this improvement affect?

New Feature

What actions does this improvement affect?

Issue, Pull Request, Commit

Description of the idea or improvement

H8 — Action producer: versioned extension discovery, status and request contracts. Part of the complete product from merged PR #699 and milestone GitHub browser extension — complete product. Implementation order does not reduce product scope or the 803-case acceptance floor.

Ownership: cross-cutting engineering/integration evidence; no additional or duplicate claim over the 150-feature inventory.

Implement the Action side of the exact repository manifest-v1, status-v1 and requests-v2 contracts in the integration SDD, using existing authoritative read/status/authorization/publication policies. Discovery is default-branch/repository/producer/workflow bound; snapshots are bounded, sanitized, current and verifiable with native facts, not comment text as authority. Preserve existing commands and lifecycle; version negotiation degrades safely for old/unknown schemas and missing producer support. Implement reviewed opt-in publication/config and all compatible declared request-family advertisements without widening authority. Include semantic issue/PR/check/Job Summary content, localization, idempotent publication/noise budgets, current-revision links and explicit partial/retry states. Read and update the existing owning Action SDDs/catalog evidence when their contracts change.

Normative baseline: specs/github-browser-extension.md, specs/github-browser-extension-functional-catalog.md, specs/github-browser-extension-platforms-and-delivery.md, specs/github-browser-extension-action-integration.md, specs/github-browser-extension-control-center-and-setup.md, and the versioned structured schemas/catalog. Follow specs/README.md and _template.md; update owning SDDs, current catalog evidence, tests and user docs in the implementation PR. Before starting, refine exact current-code acceptance and prerequisite evidence through the Action's pre-branch SDD flow.

Tests and acceptance: Own integration producer/parser/publication/request-schema subsets of the existing 96 core cases, with golden schema examples, invalid/duplicate/oversized fields, forged producer/repo/workflow, old/new schema, out-of-order/duplicate publication, private-data redaction and compatibility replays. List concrete owned IDs in the SDD/PR; no consumer or feature completion is claimed. Existing Action coverage/architecture/workflow/npm gates all remain mandatory.

All new pure evidence/eligibility/intent/approval policies require 100% branches; other new modules require at least 95% statements/90% branches with changed executable lines covered. Modules at most 220 lines/Svelte components 90 unless reviewed decomposition exception. Add risk-derived cases beyond the baseline where needed; every required behavior maps to executable evidence and docs. Full product acceptance remains all 150 functions/all three desktop targets, not this issue alone.

Current limitations or challenges

PR #699 specifies the product; this milestone's behavior is not implemented merely because the specifications or earlier engineering increments exist. Dependencies: #702. Use the roadmap's linked issues to verify those dependencies before starting; do not advertise future features, runtime compatibility or store approval as already verified.

Expected impact

Action producer: versioned extension discovery, status and request contracts becomes a complete, tested and documented part of the original premium GitHub productivity application. Users receive observable outcomes, safe defaults and useful failure/recovery paths across Chrome, Firefox and Safari, with explicit source/freshness/permission boundaries where applicable.

Alternatives considered

Reject reduced catalog scope, copied implementation/assets, speculative compatibility claims, placeholder acceptance, duplicate Action authority and weaker existing test gates. Deliver in reviewable increments while retaining the complete accepted product contract.

Version of copilot

Published Action 3.10.5; develop baseline includes merged #699. Extension versions independently; future implementation selects and locks compatible dependencies using primary documentation.

Additional context or comments

Backlog milestone. Do not add in-progress or create a branch until its dependencies are ready and it is deliberately started. The Action owns admission/SDD/remote branch lifecycle. PRs link their issue and include actual test/browser/docs receipts; merge/deploy/store publication is not implied. First active increment: #702.