fix: add PR review loop, Copilot lifecycle workflow, remove assign-to-agent

- Add Phase 8 (PR Review Monitoring & Remediation) to daily pipeline
  with Copilot review request, comment triage, fix loop, and merge
- Create copilot-pr-lifecycle.md workflow for Copilot draft PR handling
- Fix reference file paths in daily-intelligence.md (.claude/skills/ prefix)
- Update Phase 9 summary template with review/merge stats
- Recompile all workflows (0 errors)

Author: zircote

.github/aw/actions-lock.json

@@ -5,10 +5,10 @@
       "version": "v9",
       "sha": "373c709c69115d41ff229c7e5df9f8788daa9553"
     },
-    "github/gh-aw-actions/setup@v0.68.1": {
+    "github/gh-aw-actions/setup@v0.68.3": {
       "repo": "github/gh-aw-actions/setup",
-      "version": "v0.68.1",
-      "sha": "2fe53acc038ba01c3bbdc767d4b25df31ca5bdfc"
+      "version": "v0.68.3",
+      "sha": "ba90f2186d7ad780ec640f364005fa24e797b360"
     }
   }
 }

.github/workflows/copilot-pr-lifecycle.lock.yml

@@ -0,0 +1,63 @@
+---
+name: "Copilot PR Lifecycle"
+description: "Marks Copilot-created draft PRs ready, requests review, and enables auto-merge"
+timeout-minutes: 5
+
+on:
+  pull_request:
+    types: [opened]
+
+if: github.event.pull_request.draft == true && github.event.pull_request.user.login == 'copilot-swe-agent[bot]'
+
+permissions:
+  contents: read
+  pull-requests: read
+
+engine:
+  id: copilot
+  model: claude-sonnet
+
+tools:
+  bash: ["gh:*", "echo"]
+
+post-steps:
+  - name: Mark PR ready for review
+    env:
+      GH_TOKEN: ${{ github.token }}
+      PR_NUMBER: ${{ github.event.pull_request.number }}
+    run: |
+      echo "Copilot PR #$PR_NUMBER detected as draft — marking ready"
+      gh pr ready "$PR_NUMBER" --repo "$GITHUB_REPOSITORY" || true
+  - name: Request Copilot review
+    env:
+      GH_TOKEN: ${{ github.token }}
+      PR_NUMBER: ${{ github.event.pull_request.number }}
+    run: |
+      gh pr edit "$PR_NUMBER" --repo "$GITHUB_REPOSITORY" --add-reviewer "@copilot" 2>/dev/null || echo "Copilot reviewer not available"
+  - name: Enable auto-merge
+    env:
+      GH_TOKEN: ${{ github.token }}
+      PR_NUMBER: ${{ github.event.pull_request.number }}
+    run: |
+      gh pr merge "$PR_NUMBER" --repo "$GITHUB_REPOSITORY" --squash --auto --delete-branch || echo "Auto-merge enabled (will merge when approved)"
+---
+
+# Copilot PR Lifecycle Handler
+
+## Context
+
+This workflow fires when GitHub Copilot's coding agent opens a draft pull request. Copilot creates draft PRs when assigned to issues, but has no built-in mechanism to mark them ready for review or enable auto-merge.
+
+## Instructions
+
+This is a lifecycle management workflow. The actual work happens in `post-steps`. Your only job is to confirm the PR exists and report its status:
+
+1. Read the PR number from the environment: the PR number is available as `$__GH_AW_GITHUB_EVENT_PULL_REQUEST_NUMBER__`.
+
+2. Check the PR:
+
+```bash
+gh pr view "$__GH_AW_GITHUB_EVENT_PULL_REQUEST_NUMBER__" --repo "$GITHUB_REPOSITORY" --json number,title,isDraft,headRefName,baseRefName
+```
+
+3. Report what you found. No edits, no code changes. The `post-steps` block handles the draft-to-ready transition, review request, and auto-merge enablement.

.github/workflows/copilot-pr-lifecycle.md

@@ -83,11 +83,11 @@ This workflow runs daily around 07:00 via fuzzy schedule, or on-demand via workf
 ## Reference Files
 
 The following files contain the skill logic and reference data:
-- `skills/aw-daily/SKILL.md` — Full 9-phase pipeline logic
-- `skills/aw-daily/references/gap-analysis-targets.md` — Reference file inventory for gap analysis
-- `skills/aw-daily/references/tracked-repos.md` — GitHub repos to query for activity
-- `skills/gh-aw-report/references/search-queries.md` — Web search query library
-- `skills/gh-aw-report/knowledge-base.md` — Persistent knowledge base
+- `.claude/skills/aw-daily/SKILL.md` — Full 9-phase pipeline logic
+- `.claude/skills/aw-daily/references/gap-analysis-targets.md` — Reference file inventory for gap analysis
+- `.claude/skills/aw-daily/references/tracked-repos.md` — GitHub repos to query for activity
+- `.claude/skills/gh-aw-report/references/search-queries.md` — Web search query library
+- `.claude/skills/gh-aw-report/knowledge-base.md` — Persistent knowledge base
 
 ## Instructions
 
@@ -206,9 +206,30 @@ Create a **draft** PR to `develop` using the `create-pull-request` safe-output:
 
 The PR is created as a draft (frontmatter `draft: true`). The `post-steps` block automatically marks it ready for review after safe-outputs complete. Do NOT merge — merging is a separate review decision.
 
-### Phase 8: Summary
+### Phase 8: PR Review Monitoring & Remediation
 
-Report what was accomplished: searches run, findings count, gaps identified, issues created, files changed, PR URL. If any phase was skipped or failed, note it clearly.
+After the PR is marked ready, the `post-steps` block requests Copilot review. Monitor the PR for review feedback and remediate:
+
+1. **Wait for review**: Poll `gh pr view` for review state every 30 seconds, up to 10 minutes. If `APPROVED`, skip to merge. If `CHANGES_REQUESTED`, proceed to remediation. If timeout, log and continue.
+
+2. **Fetch review comments**: Use `gh api repos/{owner}/{repo}/pulls/{PR_NUMBER}/comments --paginate` to get all inline comments.
+
+3. **Triage each comment**: Assess correctness and confidence. Auto-accept fixes with >= 95% confidence. Skip low-confidence fixes with an explanation reply.
+
+4. **Apply fixes**: For each accepted comment, edit the target file (use section headers as anchors). If the file has a `.claude/` mirror or canonical copy, apply to both. Commit, push.
+
+5. **Reply to every comment**: Fixed → `Fixed in {sha}.` Rejected → `Reviewed — not applying because {reason}.` Questions → direct answer.
+
+6. **Resolve all threads**: Use GraphQL `resolveReviewThread` mutation for each thread.
+
+7. **Merge the PR**: `gh pr merge {PR_NUMBER} --squash --delete-branch`. If direct merge fails (branch protection), fall back to `--auto`. Verify state is `MERGED`.
+
+**Loop limit**: Maximum 2 review-fix cycles. After that, leave PR for manual review.
+**`--no-merge` flag**: If set, skip the merge step and report "PR left open per --no-merge flag."
+
+### Phase 9: Summary
+
+Report what was accomplished: searches run, findings count, gaps identified, issues created, files changed, PR URL, review status, fixes applied, threads resolved, merge state. If any phase was skipped or failed, note it clearly.
 
 ## Edge Cases