fix: restore semantic closure owner boundary

Author: PLeVasseur

.github/workflows/reviewer-bot-sweeper-repair.yml

@@ -12,7 +12,7 @@ on:
         type: choice
         options: [sync-members, show-state, check-overdue, repair-review-status-labels]
       issue_number:
-        description: Optional issue or PR number for targeted reviewer-board preview
+        description: Optional issue or PR number for targeted actions
         required: false
         type: string
 
@@ -70,6 +70,8 @@ jobs:
           WORKFLOW_RUN_ID: ${{ github.run_id }}
           WORKFLOW_NAME: ${{ github.workflow }}
           WORKFLOW_JOB_NAME: ${{ github.job }}
+          REVIEWER_BOARD_ENABLED: ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.action == 'preview-reviewer-board' && 'true' || 'false' }}
+          REVIEWER_BOARD_TOKEN: ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.action == 'preview-reviewer-board' && secrets.REVIEWER_BOARD_TOKEN || '' }}
         run: uv run --project "$BOT_SRC_ROOT" reviewer-bot
       - name: Workflow summary
         run: |

tests/contract/reviewer_bot/test_preview_workflow_contracts.py

@@ -33,14 +33,7 @@ def test_preview_workflow_remains_sole_retained_owner_of_preview_actions():
     sweeper_on_block = sweeper_data.get("on", sweeper_data.get(True))
     sweeper_action_input = sweeper_on_block["workflow_dispatch"]["inputs"]["action"]
 
-    assert sweeper_action_input["options"] == [
-        "sync-members",
-        "show-state",
-        "check-overdue",
-        "repair-review-status-labels",
-    ]
-    assert "REVIEWER_BOARD_ENABLED:" not in sweeper_text
-    assert "REVIEWER_BOARD_TOKEN:" not in sweeper_text
+    assert "preview-reviewer-board" not in sweeper_action_input["options"]
 
 
 def test_preview_workflow_run_name_and_env_contract_are_frozen():

tests/contract/reviewer_bot/test_reviewer_board_workflow_contracts.py

@@ -17,11 +17,17 @@ def test_sweeper_repair_workflow_removes_reviewer_board_preview_dispatch():
     assert issue_number_input["required"] is False
     assert issue_number_input["type"] == "string"
 
-def test_sweeper_repair_workflow_no_longer_exports_reviewer_board_preview_env():
+def test_sweeper_repair_workflow_retains_reviewer_board_env_wiring_without_dispatch_option():
     workflow_text = Path(".github/workflows/reviewer-bot-sweeper-repair.yml").read_text(encoding="utf-8")
     assert "ISSUE_NUMBER: ${{ github.event.inputs.issue_number }}" in workflow_text
-    assert "REVIEWER_BOARD_ENABLED:" not in workflow_text
-    assert "REVIEWER_BOARD_TOKEN:" not in workflow_text
+    assert (
+        "REVIEWER_BOARD_ENABLED: ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.action == 'preview-reviewer-board' && 'true' || 'false' }}"
+        in workflow_text
+    )
+    assert (
+        "REVIEWER_BOARD_TOKEN: ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.action == 'preview-reviewer-board' && secrets.REVIEWER_BOARD_TOKEN || '' }}"
+        in workflow_text
+    )
 
 
 def test_sweeper_repair_workflow_exports_retained_manual_dispatch_env_contract():