[TheGreatAxios]

The policy file read no longer fails when the open policy pull request cannot be listed or its branch copy cannot be read. It returns the default branch's file with pullUnread: true, so "could not check" is no longer shown as "no pull request". A repository the shared listing does not cover is asked of the host directly; if that read fails it is pullUnread too. A refused listing or an error row is pullUnread as before. Opening a policy pull request no longer turns into an error when the listing refresh afterwards fails: the refresh failure is logged and the opened pull request is returned.

• The code is in policy-file.ts (pullCopy, opened), which both GitHub and Bitbucket Data Center records go through, so one fix covers both hosts. The files named in the issue do not hold this path.
• One optional field is added to the policy file response, pullUnread; older clients ignore it. It is documented in docs/ARCHITECTURE.md and the route's OpenAPI description.
• Verified: policy-file.postgres.test.ts covers a listing that throws, a branch read that fails, a repository the listing omits (asked of the host, and unread when that fails) and a refresh that fails after opening. bun run check and bun run lint pass (existing warnings only).

Closes CL-11706

[linear-code]

CL-11706

[corbits-triage]

Triage: Pass

No changes needed from you. A maintainer will review this pull request.

Notes:

• Risk: medium (2 recently fixed files)

[corbits-triage]

Adds a pullUnread flag to the policy file response so that when the open policy pull request cannot be listed or its branch copy cannot be read, the default branch file is returned instead of reporting "no pull request". It also stops an opened policy pull request from becoming an error when the follow-up listing refresh fails, logging the refresh failure and returning the opened pull request.