fix: keep Pages view when policy report fetch fails

[AlexanderLanin]

Why

A missing policy-sync artifact currently allows the Pages workflow to publish a dashboard without the policy-sync view. Failing the refresh preserves the existing deployed site until a complete view can be produced.

Changes

• Make fetch-policy-report fail when the configured report is unavailable, stopping the Pages refresh before it publishes an incomplete dashboard.
• Log the selected workflow run and, after a download failure, report the artifacts attached to that run, including expiration status and size. If the expected file is missing after download, log the downloaded filenames.
• Document the required report behavior.

[Copilot]

Copilot review overview

🟡 Changes recommended

The deployment-blocking exit behavior and new diagnostic path need automated test coverage.

Review effort: Balanced
Findings: 2

Open (2)

• Add CLI tests for policy report exit statuses · New
• Test download-failure diagnostics and API invocation · New

What changed in this PR

Updates policy-report fetching so Pages deployment stops when a complete policy view cannot be produced.

Changes:

• Fails the CLI command when the report is unavailable.
• Adds workflow-run and artifact diagnostics.
• Documents the required-report behavior.

File	Description
src/​generate_repo_overview/​policy_sync.py	Adds fetch diagnostics and artifact details.
src/​generate_repo_overview/​cli.py	Returns failure when fetching fails.
docs/​repo-overview/​usage-and-extension.md	Documents failure semantics.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[Copilot]

Copilot review overview

🔵 Needs a closer look

Artifact diagnostics omit paginated results, and the publication-blocking failure path lacks regression coverage.

Review effort: Balanced
Findings: 2

Open (2)

• Test download-failure diagnostics and API invocation
• Add CLI tests for policy report exit statuses

Previously missed (1)

In code that hasn't changed since last review

Artifacts endpoint reads only the first page

src/​generate_repo_overview/​policy_sync.py:363

The artifacts endpoint is paginated, but this request reads only its first page (30 artifacts by default). A run with more artifacts can therefore produce an incomplete diagnostic and omit the expected artifact. Paginate and slurp the page objects before selecting their artifact entries.

[Copilot]

Copilot review overview

🟡 Changes recommended

The downloaded-filenames diagnostic lacks coverage despite being an explicit new behavior.

Review effort: Balanced
Findings: 2 · 1

Open (3)

• Test download-failure diagnostics and API invocation
• Add CLI tests for policy report exit statuses
• Add test for missing filename error listing downloaded files · New

[MaximilianSoerenPollak]

If you download stuff here ,is there any possibility of it being thigns we do not want to leak?

[AlexanderLanin]

you mean private stuff? like if you have private policies that you do not show in your overview page? Then dont tell it where to dowload the report.

[MaximilianSoerenPollak]

Seems alright, question answered.

Issue / Bug was demonstrated.