[efraespada]

Default recommendation setup blocked a valid fine-grained operator PAT on Checks read, a permission GitHub does not offer for these tokens. Request Checks only for guarded setup; recommendation setup keeps Actions read and accepts explicit producer tuples while readiness remains unverified. Runtime bot permissions, native approval gates, and guarded setup checks remain unchanged.

Update the permission copy in all four setup languages, authentication guidance, the approval setup SDD, catalog evidence, and packaged CLI/web assets.

Closes #536. Reproduced while dogfooding vypdev/platform#159 with a one-day fine-grained operator PAT; the patched CLI completed installation and repeat setup. All 70 expected effective Variables match; shared Variable values/visibility and organization Secret timestamps are unchanged.

Validation:

• Eight new regression cases, verified failing before the fix.
• Full setup suite: 101 suites / 2,068 tests passed.
• Full coverage: 630 suites / 9,439 tests passed (35 existing skipped); coverage and setup acceptance budgets passed.
• Build, TypeScript, Svelte, lint, documentation, workflow and specification validators passed; packaged CLI/API/web smoke and npm package validation passed again after rebuilding; regenerated assets are synchronized.
• Graphify AST graph updated.
• GitHub CI, RepoWise and setup/package sessions passed on Linux, macOS and Windows.

[docs-page]

To preview the documentation for this pull request, visit the following URL:

docs.page/vypdev/copilot~537

Documentation is deployed and generated using docs.page

[vypbot]

Copilot approval · Human review needed

Status: A protected workflow, policy, or trust-boundary file changed.
Completed: 1/1 observed checks succeeded; Bugbot complete.
Action required: Ask a human reviewer to decide.
Impact: No new approval is confirmed for this revision.
See checks

Technical evidence

Revision: bc9973b6fd10; base: 78f77f87e4b7; reason: protected-path.

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 93.37%. Comparing base (274db40) to head (bc9973b).
⚠️ Report is 1441 commits behind head on develop.

Additional details and impacted files

@@             Coverage Diff             @@
##           develop     #537      +/-   ##
===========================================
+ Coverage    90.94%   93.37%   +2.43%     
===========================================
  Files          135      896     +761     
  Lines         6251    27907   +21656     
  Branches      1338     8120    +6782     
===========================================
+ Hits          5685    26059   +20374     
- Misses         172      733     +561     
- Partials       394     1115     +721     

Files with missing lines	Coverage Δ
...lication/policies/setup_token_permission_policy.ts	100.00% <100.00%> (ø)
web/src/i18n/permissions/en.ts	100.00% <ø> (ø)
web/src/i18n/permissions/es.ts	100.00% <ø> (ø)
web/src/i18n/permissions/fr.ts	100.00% <ø> (ø)
web/src/i18n/permissions/pt.ts	100.00% <ø> (ø)

... and 958 files with indirect coverage changes

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[vypbot]

Bugbot: review complete

Current status: No active findings on bc9973b.

Pull request · Verified commit · Workflow run