[efraespada]

Extending Copilot to another organization repository repeats configuration and asks for existing credentials again. This adds compatible organization reuse and a reviewed setup journey for 1–25 explicitly selected repositories, shared by CLI and web.

• Reuse typed organization Variables with repository overrides and complete Secret revision metadata. Keep equal generic agent fallbacks inherited, with exact-task precedence and real-resource provenance/grants; a reviewed generic change cannot silently change distinct task settings. Retain Secrets without reading, copying or replacing their values. Variable creation is create-only: a racing POST conflict never falls back to PATCH; existing different values require a separate reviewed update.
• Review each target's files, exact base/ref, overrides, additive grants and permission probes. Install only complete prepared commits with matching manifest receipts. Preserve completed effects during recovery, stop on uncertain cleanup, and retain validated completed outcomes without repeating Apply. Terminal reuse runs its final Write audit after approval; browser reuse defers it until Apply.
• Preserve installed job runners, source-native Action/release workflows and version-owned source guidance. Keep exact CI names containing commas, Branch Sync's all-branch filter, the merge queue's Bash shell and the independent approval observer. Changed dynamic runner contracts require separate review. Installer pushes are excluded from issue-centric Commit automation.
• Fix 🐛🧑‍💻 - bugfix oversized progress evidence is reported as a retryable provider outage #547: analyze complete comparisons in at most 16 whole-file parts, each within 256,000 UTF-8 bytes. Reserve exact paths, framing and the rendered prompt envelope before deriving the per-file Unicode prose budget. The final facts have a maximum 384,000-byte aggregate within the unchanged 512 KiB runtime ceiling. Require complete exact-file facts from every part before the final assessment and publication fences. Terminal oversized evidence is nonretryable; real transient failures keep their classification.

Validation at 9f7f93777c6591c452e61713f83a9b09e17c2e8b: 663 suites / 10,268 tests passed, with 35 existing skips. The coverage follow-up adds 142 adverse-path tests, 13 generic-inheritance regressions and 35 final changed-path cases. Uploaded Codecov for this exact commit confirms 100% of modified coverable lines covered, agreeing with zero incomplete changed lines locally. The original report was 89.81861% with 174 incomplete lines; project coverage is now 93.85%. Eleven additional setup orchestration/provider modules enforce at least 95% statements/lines and 90% branches/functions. Existing pure-policy 100% gates and Codecov settings are unchanged. Maximum-inventory tests prove 1,000-resource ceilings, at most 34 Variable pages/ten Secret pages per snapshot, three read attempts and one write attempt. Redundant unreachable control flow and an unused final-audit confirmation capability are removed; no validation or limit is weakened. Build/package, TypeScript, lint, workflow, documentation and specification checks pass. The acceptance ledger retains its 14 explicitly open existing items.

Real multi-repository setup used the packaged CLI and the organization PAT against vypdev/copilot and vypdev/platform. Operation ad56b08c-ff59-46c8-b7aa-7f16a8ade406 created reviewed installation PRs with 29/19 files, zero Variable writes and zero grants, exact prepared refs/parents and matching receipts. A controlled partial/retry retained the same commits and completed effects without duplicate PRs or ref overwrites. Platform #175 remains open for human review; its setup verification passes. Superseded source previews were closed unmerged after their native checks exposed compatibility defects that this PR corrects.

Final source installation acceptance is copilot #562, operation a2f8960d-ae01-4760-a0d5-ab6890299531, prepared commit fbaf4bbdcf5331067f2759665b2e50550e0a5a31: 16 files, zero Variable writes/grants, exact commit/parent/ref and matching receipt. Its CI, native review, Branch Sync, RepoWise and Ubuntu/macOS/Windows package-session checks pass. Direct GitHub inspection confirms retained native workflows/runners and canonical source guidance; the receipt is the sole manifest change. Optional provisioning/credential-health workflows match the currently installed source capabilities and remain disabled; their runner/profile parity work is tracked in #556. Actual completed-operation resume from the exact 9f7f9377 packaged CLI exits 0, returns the same #562 and unchanged prepared commit/ref, and repeats no permission-write probe or installation effect. Independent before/after snapshots show all six resource namespaces unchanged; the durable receipt is byte-identical. A separate read-only reconstruction also reproduces its exact reviewed plan digest and base without allocating a new operation.

Independent pre/post hashes prove all six resource namespaces unchanged in the final installation: 73 organization Variables, six organization Secret metadata records, 12 copilot Variables, three copilot Secret metadata records, three platform Variables and no platform Secrets. The initial controlled run added only platform's missing AGENT_ALLOWED_MODELS; all earlier resources were retained. A separate disposable live Variable test returned 201 then 409, preserved the original value, and confirmed deletion. Permission-probe cleanup was verified; owned residual probe workflow runs were canceled separately.

Native multipart progress at the final head completed all four source parts, final assessment and current publication with zero Action errors. Native review completed all 18 analysis partitions: 22 findings fixed, zero open, with complete admitted source coverage and no omissions or dismissals. All current-head CI checks pass, including CI Check, RepoWise and Ubuntu/macOS/Windows package/session validation. A captured 149-file GitHub comparison replay preserves every source patch, and the long-path/worst-escaping 299-file regression fits the actual runtime ceiling without truncation.

Platform's released Action still fails its PR-description response-shape contract after one explicit retry; runtime verification is pending. Its dependency audit is deferred under the existing vulnerability issue. Installation PRs require human merge. This PR does not publish a release, tag or deployment.

The SDD, catalog, tests and user/operator documentation cover configuration reuse, access, additive grants, recovery, installer ownership, runner preservation and source compatibility.

Closes #538.
Fixes #547.

[docs-page]

To preview the documentation for this pull request, visit the following URL:

docs.page/vypdev/copilot~546

Documentation is deployed and generated using docs.page

[vypbot]

Current status: All findings originating in this review are resolved.
Last reconciled on 9f7f937. See aggregate Bugbot status.

🤖 Bugbot review snapshot

Bugbot reported 2 potential problems when commit e6622da was analyzed. This snapshot is historical; use the status block above for current state. 2 findings are linked to changed code.

Findings

• medium: Secret revision changes are not detected before Apply — src/application/usecases/actions/setup_resource_provisioning.ts:187
• low: Blank input accepts the preselected repository — src/cli/setup_batch_adapter.ts:89

[vypbot]

Bugbot: review complete

Current status: No active findings on 9f7f937.

Pull request · Verified commit · Workflow run

[vypbot]

Copilot approval · Human review needed

Status: A protected workflow, policy, or trust-boundary file changed.
Completed: 1/1 observed checks succeeded; Bugbot complete.
Action required: Ask a human reviewer to decide.
Impact: No new approval is confirmed for this revision.
See checks

Technical evidence

Revision: 9f7f93777c65; base: b6d9910fb7b2; reason: protected-path.

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 93.85%. Comparing base (274db40) to head (9f7f937).
⚠️ Report is 1451 commits behind head on develop.

Additional details and impacted files

@@             Coverage Diff             @@
##           develop     #546      +/-   ##
===========================================
+ Coverage    90.94%   93.85%   +2.91%     
===========================================
  Files          135      926     +791     
  Lines         6251    29571   +23320     
  Branches      1338     8608    +7270     
===========================================
+ Hits          5685    27754   +22069     
- Misses         172      715     +543     
- Partials       394     1102     +708     

Files with missing lines	Coverage Δ
src/actions/local_action_configuration_sections.ts	86.00% <100.00%> (ø)
...application/policies/agent_output_locale_policy.ts	100.00% <ø> (ø)
...tion/policies/application_error_message_catalog.ts	100.00% <ø> (ø)
...pplication/policies/issue_resource_input_policy.ts	100.00% <100.00%> (ø)
...ication/policies/progress_diff_partition_policy.ts	100.00% <100.00%> (ø)
...ion/policies/progress_partition_response_policy.ts	100.00% <100.00%> (ø)
...ation/policies/repository_agent_guidance_policy.ts	100.00% <ø> (ø)
.../application/policies/setup_batch_access_policy.ts	100.00% <100.00%> (ø)
src/application/policies/setup_batch_policy.ts	100.00% <100.00%> (ø)
...c/application/policies/setup_batch_retry_policy.ts	100.00% <100.00%> (ø)
... and 74 more

... and 909 files with indirect coverage changes

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[vypbot]

Current status: All findings originating in this review are resolved.
Last reconciled on 9f7f937. See aggregate Bugbot status.

🤖 Bugbot review snapshot

Bugbot reported 2 potential problems when commit c6405f7 was analyzed. This snapshot is historical; use the status block above for current state. 2 findings are linked to changed code.

Findings

• medium: Customize mode still requires existing shared credentials — src/application/usecases/setup/configure_setup_batch_target_use_case.ts:36
• medium: Repository visibility drift bypasses reuse revalidation — src/application/usecases/actions/setup_resource_provisioning.ts:185

[vypbot]

Current status: All findings originating in this review are resolved.
Last reconciled on 9f7f937. See aggregate Bugbot status.

🤖 Bugbot review snapshot

Bugbot reported 3 potential problems when commit d16e644 was analyzed. This snapshot is historical; use the status block above for current state. 3 findings are linked to changed code.

Findings

• medium: Revalidate credential-health workflow state before Apply — src/application/usecases/actions/setup_resource_provisioning.ts:203
• low: Rate-limited requests are never retried — src/infrastructure/setup_batch_github_read_adapter.ts:37
• low: Partial source guidance inventory can rewrite existing artifacts — src/infrastructure/setup_batch_workspace_adapter.ts:30

[vypbot]

Current status: All findings originating in this review are resolved.
Last reconciled on 9f7f937. See aggregate Bugbot status.

🤖 Bugbot review snapshot

Bugbot reported 2 potential problems when commit 08584ae was analyzed. This snapshot is historical; use the status block above for current state. 2 findings are linked to changed code.

Findings

• medium: Imports target-specific project columns as answered organization settings — src/application/policies/setup_organization_import_policy.ts:79
• medium: Partitioned progress analysis can fail on valid large file lists — src/application/usecases/actions/summarize_progress_diff_workflow.ts:30

[vypbot]

Current status: All findings originating in this review are resolved.
Last reconciled on 9f7f937. See aggregate Bugbot status.

🤖 Bugbot review snapshot

Bugbot reported 3 potential problems when commit 5631e54 was analyzed. This snapshot is historical; use the status block above for current state. 3 findings are linked to changed code.

Findings

• medium: Organization reuse skips the final permission audit in terminal setup — src/cli/commands/setup_execution.ts:306
• low: Incomplete Secret revisions can produce a ready plan — src/application/usecases/setup/prepare_setup_batch_use_case.ts:54
• low: Schema and parser disagree on Unicode fact length — specs/semantic-github-publication-and-notification.md:1772

[vypbot]

Current status: All findings originating in this review are resolved.
Last reconciled on 9f7f937. See aggregate Bugbot status.

🤖 Bugbot review snapshot

Bugbot reported 2 potential problems when commit b279591 was analyzed. This snapshot is historical; use the status block above for current state. 2 findings are linked to changed code.

Findings

• medium: Credential reuse ignores existing repository Secret overrides — src/application/usecases/setup/configure_setup_batch_target_use_case.ts:46
• low: Local schema validation still counts UTF-16 code units — specs/semantic-github-publication-and-notification.md:1771

[vypbot]

Current status: All findings originating in this review are resolved.
Last reconciled on 9f7f937. See aggregate Bugbot status.

🤖 Bugbot review snapshot

Bugbot reported 1 potential problem when commit 7165bbb was analyzed. This snapshot is historical; use the status block above for current state. 1 finding is linked to changed code.

Findings

• medium: Reuse writes repository overrides for inherited agent settings — src/application/policies/setup_organization_variable_reuse_policy.ts:53