# Import paths

Stable ViteHub Import Paths are ViteHub-owned app-facing import specifiers.
They may resolve to Runtime Registries, generated files, virtual modules, or
owner-package runtime code, but application code must not depend on that
implementation detail.

## Canonical application imports

Applications that install `vite-hub` use the root only for framework
composition and explicit feature subpaths for application APIs.

| Import path | Use |
| --- | --- |
| `vite-hub` | Register the framework Vite Integration with `vitehub()`. |
| `vite-hub/agent/vite` | Process Agent host and generated health and Workspace routes for Vite. |
| `vite-hub/agent` | Agent Definition, invocation, trigger, and Agent Actor APIs. |
| `vite-hub/agent/presets/workspace` | Opt-in workspace source-provenance citation preset. |
| `vite-hub/agent/capabilities` | Official Capability factories. |
| `vite-hub/agent/channels` | Official Channel Kind helpers. |
| `vite-hub/agent/gateways` | LLM proxy and gateway presets for provider Drivers. |
| `vite-hub/agent/evlog` | Host-level evlog integration for Agent lifecycle events and diagnostics. |
| `vite-hub/agent/evlog/posthog` | Optional Node.js PostHog event, Error Tracking and log exporter. |
| `vite-hub/agent/eval` | Agent Eval authoring helpers; install Evalite and the test runner explicitly. |
| `vite-hub/agent/observability` | `useObservability()` for the instance configured by `vitehub({ observability })`. |
| `vite-hub/agent/evlog` | Deprecated compatibility facade for Agent event logging. |
| `vite-hub/agent/evlog/posthog` | Deprecated compatibility facade for the PostHog event-log exporter. |
| `vite-hub/agent/presets/babysitter` | Composable Babysitter repair-loop preset. |
| `vite-hub/agent/presets/babysitter/server` | Babysitter host runtime integration. |
| `vite-hub/agent/cloudflare` | Cloudflare Agent state configuration helpers. |
| `vite-hub/agent/vue` | Vue Agent client handle and AI SDK chat composable. |
| `vite-hub/agent/server` and `vite-hub/agent/state/sqlite` | Manual server integration and libSQL-compatible durable Agent state. |
| `vite-hub/agent/server/github` | GitHub host access, App credentials, command execution and checkout lifecycle. |
| `vite-hub/agent/server/github-inbox` | Durable GitHub pull request inbox storage, webhook ingestion, hydration, claims, and [explicit waits](https://vitehub.dev/docs/reference/github-inbox-waits). |
| `vite-hub/agent/invocations/d1` | Cloudflare D1 Agent Invocation Journal and explicit schema statements. |
| `vite-hub/agent/invocations/sqlite` | LibSQL-compatible durable Agent Invocation Journal. |
| `vite-hub/agent/invocations/database` | Agent Invocation Journal backed by a discovered ViteHub Database. |
| `vite-hub/agent/mcp` | MCP Server configuration helpers. |
| `vite-hub/agent/runtime/process` | Adaptive process-local Agent capacity for self-hosted Node applications. |
| `vite-hub/console` | Route metadata for the local read-only invocation console. |
| `vite-hub/console/auth` | Define a Console-owned Auth Definition and its access policy. |
| `vite-hub/console/auth/client` | Configure Console Auth client plugins and setup. |
| `vite-hub/console/auth/cloudflare-access` | Verify Cloudflare Access tokens for the Console guard. |
| `vite-hub/console/auth/inline` | Build the Node-only inline GitHub Console Auth Definition. |
| `vite-hub/console/blob` | Read-only Blob inspection registration for framework server integrations. |
| `vite-hub/console/connections` | Connections management, connect, and callback route registration for framework server integrations. |
| `vite-hub/console/database` | Read-only Database inspection registration for framework server integrations. |
| `vite-hub/console/definitions` | Read-only Definition inspection registration for framework server integrations. |
| `vite-hub/console/env` | Server Env declaration inventory registration for framework server integrations. |
| `vite-hub/console/kv` | Read-only KV inspection registration for framework server integrations. |
| `vite-hub/console/sections` | Console section manifest registration for framework server integrations. |
| `vite-hub/console/server` | Local console invocation journal for server integrations. |
| `vite-hub/content` and `vite-hub/content/client` | Comark Content definition, Source adaptation, generated runtime handler, and typed client. |
| `vite-hub/auth` and `vite-hub/auth/server` | Auth Definitions and server runtime helpers. |
| `vite-hub/auth/agent` | Better Auth session mapping into Agent Invokers. |
| `vite-hub/auth/vue` | Better Auth Vue client and normalized session composables. |
| `vite-hub/blob` | Blob Runtime Helpers and Blob Store access. |
| `vite-hub/blob/client` | Framework-neutral browser upload helpers: `uploadFiles()` and `createMultipartUploader()`. |
| `vite-hub/blob/content-type` | Detect common image and PDF signatures from leading bytes before upload. |
| `vite-hub/blob/vue` | Vue upload composables: `useUpload()` and `useMultipartUpload()`. |
| `vite-hub/browser` | Browser Definitions, invocation-scoped Playwright sessions, and named Browser runs. |
| `vite-hub/browser/actions` | ViteHub Browser actions backed by Cloudflare Browser Run. |
| `vite-hub/browser/controllers/cdp` and `vite-hub/browser/controllers/playwright` | Advanced raw CDP and Playwright Browser Session controllers. |
| `vite-hub/browser/providers/cloudflare` and `vite-hub/browser/providers/local` | Advanced explicit provider selection for low-level Browser Clients. |
| `vite-hub/channels` and `vite-hub/channels/server` | Outbound Channel Definitions with `defineOutboundChannel()` and discovered named delivery. |
| `vite-hub/connections`, `vite-hub/connections/google`, and `vite-hub/connections/server` | Connection Definitions, the Google preset with typed Gmail Operations, and runtime access. |
| `vite-hub/connections/agent` and `vite-hub/connections/http` | Agent primitive handle, and the management and OAuth routes that the Console mounts. |
| `vite-hub/box` | Box Definitions and built-in runtime selection for trusted-host, Crabbox, ASCII, Cloudflare Sandbox, Cloudflare Computer, and Vercel Sandbox execution. |
| `vite-hub/box/ssh` | `sshLaunch` for provider Driver launch callbacks and `serveSsh` for a trusted SSH runner. |
| `vite-hub/database` and `vite-hub/database/drizzle` | Database Definitions and generated `useDatabase()` access. |
| `vite-hub/env` | Env Declaration helpers and authoring types. |
| `vite-hub/env/http` | Authenticated HTTP adapter for declared Env Bridge credentials. |
| `vite-hub/env/auth` | Env Bridge authentication adapters |
| `vite-hub/env/bridge` | Runtime credential replacement, scoped grants, and durable activity. |
| `vite-hub/env/database` | Encrypted Env Bridge storage on ViteHub SQLite/Drizzle databases. |
| `vite-hub/env/provider` | Define read-only runtime providers for application-owned external Env storage. |
| `vite-hub/email`, `vite-hub/email/server`, and `vite-hub/email/markdown` | Email clients, configured runtime delivery, and Dynamic Markdown HTML with a composed Markdown text fallback. |
| `vite-hub/env/presets` and `vite-hub/env/schema` | Reusable Env presets and schema helpers. |
| `vite-hub/env/secret` and `vite-hub/env/server` | Secret declarations and server-only Env access. |
| `vite-hub/kv` | KV Runtime Helper. |
| `vite-hub/markdown-template` | Portable Markdown rendering from template strings. |
| `vite-hub/markdown-template/file` | Filesystem Markdown rendering from explicit file paths or `file:` URLs. |
| `vite-hub/queue` | Queue Definitions and dispatch helpers. |
| `vite-hub/rate-limit` | Source-local managed Rate Limit handles and direct Rate Limiters. |
| `vite-hub/realtime`, `vite-hub/realtime/server`, and `vite-hub/realtime/vue` | Realtime Definitions, manual server integration, and Vue collaborative editing with canonical [Realtime checkpoints](https://vitehub.dev/docs/realtime). |
| `vite-hub/runtime` | Runtime Host Context, policy, approval, trace, and capability APIs. |
| `vite-hub/runtime/h3` | H3 Runtime Context adapter with request bindings and tracked background work. |
| `vite-hub/runtime/node` | Node process, host, and Linux cgroup resource observations. |
| `vite-hub/sandbox` | Sandbox Definitions and Sandbox Run helpers. |
| `vite-hub/schedule` and `vite-hub/schedule/runtime` | Static and runtime Schedule APIs. |
| `vite-hub/schedule/runtime/driver` and `vite-hub/schedule/runtime/process` | Host wake registration and process-backed runtime Schedule controls. |
| `vite-hub/schedule/runtime/kv` | ViteHub KV storage adapter for Runtime Schedules and Schedule Runs. |
| `vite-hub/shell` | Shell runtime and command analysis APIs. |
| `vite-hub/shell/providers/cloudflare` and `vite-hub/shell/providers/just-bash` | Cloudflare and Just Bash Shell providers. |
| `vite-hub/shell/workspace` | Workspace-backed Shell execution helpers. |
| `vite-hub/source` | Runtime-neutral Source Definitions, custom loaders, and registry APIs. |
| `vite-hub/source/client` and `vite-hub/source/server` | Vue Collection pagination and the H3 Collection route adapter. |
| `vite-hub/source/file`, `vite-hub/source/glob`, and `vite-hub/source/markdown` | Local file implementations, loaded only when selected. |
| `vite-hub/source/github` | GitHub Source implementation, loaded only when selected. |
| `vite-hub/source/mcp` | MCP Resources implementation with its private SDK closure. |
| `vite-hub/source/vite` | Source discovery, generated artifacts, and Nitro route integration for custom Vite plugin composition. |
| `vite-hub/ui`, `vite-hub/ui/headless`, and `vite-hub/ui/styles.css` | AI interface components, headless message scrolling, and default styles. |
| `vite-hub/ui/agent-chat`, `vite-hub/ui/agent-chat-message`, `vite-hub/ui/agent-chat-prompt`, `vite-hub/ui/agent-message-parts` | Focused imports for chat components. |
| `vite-hub/ui/agent-invocation`, `vite-hub/ui/agent-invocation-inspector`, `vite-hub/ui/agent-invocation-list`, `vite-hub/ui/agent-invocation-timeline` | Focused imports for agent Invocation components. |
| `vite-hub/ui/agent-capability-inspector`, `vite-hub/ui/agent-tool-list`, `vite-hub/ui/agent-trace` | Focused imports for capability and trace inspection components. |
| `vite-hub/ui/agent-code-view`, `vite-hub/ui/agent-file`, `vite-hub/ui/agent-file-diff`, `vite-hub/ui/agent-multi-file-diff`, `vite-hub/ui/agent-patch-diff`, `vite-hub/ui/agent-unresolved-file` | Focused imports for code and diff components. |
| `vite-hub/ui/agent-file-tree`, `vite-hub/ui/agent-markdown`, `vite-hub/ui/agent-session` | Focused imports for file tree, Markdown, and session components. |
| `vite-hub/ui/nuxt` and `vite-hub/ui/vite` | Register the canonical UI package for Nuxt or Vue with Vite. |
| `vite-hub/tsconfig` | TypeScript config that includes ViteHub's generated declaration entry without taking ownership of application source includes. |
| `vite-hub/workflow` | Workflow Definitions and run helpers. |
| `vite-hub/workspace` and `vite-hub/workspace/runtime` | Workspace Definitions, Sources, history contracts, runtime facades, and registry APIs. |
| `vite-hub/workspace/cloudflare` | Cloudflare Workspace runtime setup. |
| `vite-hub/workspace/blob-database` | Content-addressed Workspace history Store and Database schema. Requires `drizzle-orm`. |
| `vite-hub/workspace/collections` and `vite-hub/workspace/collections/client` | Bounded Workspace Collection queries and optional Vue client composables. |
| `vite-hub/workspace/loader`, `vite-hub/workspace/publish`, and `vite-hub/workspace/server` | Workspace loader, publisher, and manual server extension APIs. |

ViteHub-owned adapters use canonical `vite-hub/*` imports. Their optional
third-party providers and SDKs remain explicit dependencies. Provider Output,
build integrations, tests, and unlisted provider-specific modules stay on their
owner packages.

## Direct owner-package imports

Every owner package remains independently installable. These paths are stable
for libraries, focused integrations, and advanced composition.

| Import path | Owner | Use |
| --- | --- | --- |
| `@vite-hub/agent` | Agent Package | Agent Definition helpers, invocation helpers, trigger helpers, and trusted caller types. |
| `@vite-hub/agent/presets/workspace` | Agent Package | Opt-in workspace source-provenance citation preset. |
| `@vite-hub/agent/capabilities` | Agent Package | Official Capability factories such as `access()`, `browser()`, `workspaceShell()`, and `inputCommands()`. |
| `@vite-hub/agent/channels` | Agent Package | Official Channel Kind helpers such as `github()`, `teams()`, `telegram()`, `webChat()`, and `defineChannel()`. |
| `@vite-hub/agent/evlog` | Agent Package | Host-level evlog integration. |
| `@vite-hub/agent/observability` | Agent Package | `useObservability()` and observability types. |
| `@vite-hub/agent/evlog/posthog` | Agent Package | Optional PostHog exporter. |
| `@vite-hub/agent/observability/host` | Agent Package | `installObservability()` for hosts without `vitehub()`. |
| `@vite-hub/agent/observability/posthog` | Agent Package | Optional PostHog exporter. |
| `@vite-hub/agent/evlog` | Agent Package | Deprecated compatibility facade for Agent event logging. |
| `@vite-hub/agent/evlog/posthog` | Agent Package | Deprecated compatibility facade for the PostHog event-log exporter. |
| `@vite-hub/agent/eval` | Agent Package | Agent Eval authoring helpers. |
| `@vite-hub/agent/runtime/process` | Agent Package | Adaptive process-local Agent capacity for self-hosted Node applications. |
| `@vite-hub/agent/test` | Agent Package | Agent test runner helpers for local and CI Agent Invocation checks. |
| `@vite-hub/agent/cloudflare` | Agent Package | Cloudflare Agent state helpers. |
| `@vite-hub/agent/vue` | Agent Package | Vue Agent client handle and AI SDK chat composable. |
| `@vite-hub/auth` | Auth Package | Auth Definition helpers. |
| `@vite-hub/auth/server` | Auth Package | Better Auth runtime creation, request handlers, and session access for manual host integration. |
| `@vite-hub/blob` | Blob Package | Blob Runtime Helpers and Blob Store access. |
| `@vite-hub/blob/client` | Blob Package | Framework-neutral browser upload helpers. |
| `@vite-hub/blob/content-type` | Blob Package | Detect common image and PDF signatures from leading bytes before upload. |
| `@vite-hub/blob/vue` | Blob Package | Vue upload composables. |
| `@vite-hub/browser` | Browser Package | Browser Definitions, invocation-scoped sessions, and low-level Browser Client lifecycle. |
| `@vite-hub/browser/actions` | Browser Package | ViteHub Browser actions backed by Cloudflare Browser Run. |
| `@vite-hub/browser/controllers/cdp` and `@vite-hub/browser/controllers/playwright` | Browser Package | Raw CDP and Playwright Browser Session controllers. |
| `@vite-hub/browser/providers/cloudflare` and `@vite-hub/browser/providers/local` | Browser Package | Cloudflare Browser Run and local Chromium providers. |
| `@vite-hub/box` | Box Package | Box Definitions, sessions, and built-in runtime selection. |
| `@vite-hub/box/ssh` | Box Package | `sshLaunch` and `serveSsh` for a trusted SSH command transport. |
| `@vite-hub/channels` | Channels Package | Outbound Channel Definitions with `defineOutboundChannel()`, explicit clients, portable types, and normalized delivery results. |
| `@vite-hub/channels/server` | Channels Runtime | Server-only discovered named delivery. |
| `@vite-hub/connections` and `@vite-hub/connections/google` | Connections Package | Connection Definitions, `oauth2()`, `apiKey()`, `useConnection()`, the Google preset, and typed Gmail Operations. |
| `@vite-hub/connections/server`, `@vite-hub/connections/http`, and `@vite-hub/connections/agent` | Connections Runtime | Runtime access, management and OAuth routes, and the Agent primitive handle. |
| `@vite-hub/content` and `@vite-hub/content/client` | Content Package | Comark Content runtime definition, ViteHub Source adaptation, server handler, and typed client. |
| `@vite-hub/email` | Email Package | Explicit clients, portable types, and normalized errors. |
| `@vite-hub/email/server` | Email Runtime | Server-only configured `email` Runtime Helper. |
| `@vite-hub/email/markdown` | Email Package | Dynamic Markdown composition into HTML and a composed Markdown text fallback. |
| `@vite-hub/email/test` | Email Package | Isolated in-memory message capture for tests. |
| `#vitehub/emails/<name>` | Email Package | Generated async renderer for a discovered `server/emails/**/*.md` template. |
| `@vite-hub/database/drizzle` | Database Package | Generated `useDatabase()` access to a Drizzle database and schema. |
| `@vite-hub/env` | Env Package | Env Declaration helpers. |
| `@vite-hub/env/auth` | Env Package | Env Bridge authentication adapters. |
| `@vite-hub/env/http` | Env Package | Authenticated HTTP adapter for declared credentials. |
| `@vite-hub/env/bridge` | Env Package | Runtime credential replacement, scoped grants, and durable activity. |
| `@vite-hub/env/database` | Env Package | Encrypted SQLite/Drizzle storage for Env Bridge. |
| `@vite-hub/env/provider` | Env Package | Define read-only runtime providers for application-owned external Env storage. |
| `#vitehub/env/public` | Env Package | Generated Public Env access. |
| `#vitehub/env/server` | Env Package | Generated Server Env access. |
| `@vite-hub/kv` | KV Package | KV Runtime Helper. |
| `@vite-hub/markdown-template` | Markdown Template Package | Portable Markdown rendering from template strings. |
| `@vite-hub/markdown-template/file` | Markdown Template Package | Filesystem Markdown rendering from explicit file paths or `file:` URLs. |
| `@vite-hub/queue` | Queue Package | Queue Definition and enqueue Runtime Helper. |
| `@vite-hub/rate-limit` | Rate Limit Package | Source-local managed Rate Limit handles and direct Rate Limiters. |
| `@vite-hub/rate-limit/drivers/memory` | Rate Limit Package | Local, test, and single-process fixed-window enforcement. |
| `@vite-hub/rate-limit/drivers/cloudflare` | Rate Limit Package | Direct access to a Cloudflare Rate Limiting binding. |
| `@vite-hub/realtime` | Realtime Package | Realtime Definitions and portable collaboration types. |
| `@vite-hub/realtime/server` and `@vite-hub/realtime/vue` | Realtime Package | Manual server integration and Vue collaborative editing. |
| `@vite-hub/runtime` | Runtime Package | Runtime Host Context, capability handles, policy, approvals, traces, leases, and execution authority. |
| `@vite-hub/runtime/node` | Runtime Package | Node process and host resource observations. |
| `@vite-hub/shell` | Shell Package | Command analysis and provider-neutral Shell runtime execution. |
| `@vite-hub/shell/providers/cloudflare` and `@vite-hub/shell/providers/just-bash` | Shell Package | Cloudflare and Just Bash Shell providers. |
| `@vite-hub/shell/workspace` | Shell Package | Read-only Workspace filesystem adapters and mount paths for Shell providers. |
| `@vite-hub/ui`, `@vite-hub/ui/agent-*`, and `@vite-hub/ui/headless` | UI Package | AI SDK-native Vue components and headless message scrolling. |
| `@vite-hub/sandbox` | Sandbox Package | Sandbox Definition and Sandbox Run helpers. |
| `@vite-hub/schedule/runtime` | Schedule Package | Runtime schedule helpers. |
| `@vite-hub/schedule/runtime/kv` | Schedule Package | Explicit storage adapter; requires the optional `@vite-hub/kv` peer. |
| `@vite-hub/schedule/runtime/driver` | Schedule Package | Host integration boundary for reconciling stored Runtime Schedules with native wake registrations. |
| `#vitehub/schedule/registry` | Schedule Package | Generated static schedule registry for host bridges. |
| `@vite-hub/workflow` | Workflow Package | Workflow Definition and run helpers. |
| `@vite-hub/workflow/runtime/openworkflow-worker` | Workflow Package | OpenWorkflow-specific worker lifecycle helpers; install `openworkflow` explicitly. |
| `@vite-hub/workspace` | Workspace Package | Workspace Definition, Source helpers, history contracts, Workspace facade access, and authoring types. |
| `@vite-hub/workspace/runtime` | Workspace Package | Workspace runtime registry, `useWorkspace()`, and source resolution/request helpers for integrations. |

## Integration imports

| Import path | Use |
| --- | --- |
| `vite-hub` | Canonical application import for `vitehub()`. |
| `vite-hub/nuxt` | Register the framework Nuxt module and carry Vite integration configuration into Nitro. |
| `vite-hub/doctor` | ViteHub [Doctor rules](https://vitehub.dev/docs/reference/doctor-rules) for Vite Doctor. `vitehub()` and `vite-hub/nuxt` register it. |
| `@vite-hub/agent/vite` | Register the Agent Vite Integration. |
| `@vite-hub/auth/vite` | Register the Auth Vite Integration. |
| `@vite-hub/blob/vite` | Register the Blob Vite Integration. |
| `@vite-hub/browser/vite` | Register Cloudflare Browser Run Provider Output. |
| `@vite-hub/channels/vite` | Register Channel Definition discovery and generated runtime bindings. |
| `@vite-hub/connections/vite` | Register Connection Definition discovery and the generated runtime module. |
| `@vite-hub/database/vite` | Register the Database Vite Integration. |
| `@vite-hub/email/vite` | Configure one built-in Email provider and generate its runtime binding. |
| `@vite-hub/env/vite` | Register the Env Vite Integration and `env()` declaration helper. |
| `@vite-hub/ui/nuxt` and `@vite-hub/ui/vite` | Register the UI package for Nuxt or Vue with Vite. |
| `@vite-hub/kv/vite` | Register the KV Vite Integration. |
| `@vite-hub/queue/vite` | Register the Queue Vite Integration. |
| `@vite-hub/rate-limit/vite` | Register Rate Limit source collection and provider output. |
| `@vite-hub/realtime/vite` | Register Realtime Definition discovery and generated runtime wiring. |
| `@vite-hub/sandbox/vite` | Register the Sandbox Vite Integration. |
| `@vite-hub/schedule/vite` | Register the Schedule Vite Integration. |
| `@vite-hub/source/vite` | Register Source discovery, generated artifacts, and Nitro route integration. |
| `@vite-hub/workflow/vite` | Register the Workflow Vite Integration. |
| `@vite-hub/workspace/vite` | Register the Workspace Vite Integration. |

Applications composing `@vite-hub/source/vite` directly should extend
`@vite-hub/source/tsconfig`. The config includes the generated Collection registry
without requiring a framework-owned TypeScript entry or an application `.vitehub` glob.

TypeScript replaces inherited array options. If an application defines its own `rootDirs`
or `files`, its `include` must retain the generated Source declarations:

```json
{
  "extends": ["@vite-hub/source/tsconfig"],
  "include": ["src", ".vitehub/types/source/**/*.d.ts"]
}
```

## Generated and internal paths

| Path family | Status | Guidance |
| --- | --- | --- |
| `.vitehub/**` | Generated | Inspect during development; do not author imports against these files. |
| `.vercel/output/**` | Generated Provider Output | Deploy or inspect as Vercel Build Output. |
| `.netlify/v1/**` | Generated Provider Output | Deploy or inspect as Netlify function output. |
| `dist/**/wrangler.json` | Generated Provider Output | Deploy or inspect as Cloudflare output. |
| Vite virtual module ids with `\0` prefixes | Internal | Never import directly. |
| `vite-hub/_internal/*` | Internal | Generated ViteHub code only; application imports are unsupported. |
| `@vite-hub/internal/*` | Internal | Package implementation only. |

The Agent Package does not expose an `@vite-hub/agent/netlify` application import. Netlify Agent output is generated Provider Output under `.netlify/v1` plus the `.vitehub/agent/netlify-function.mjs` source wrapper.
With Nuxt, that source wrapper is generated under `<buildDir>/vitehub/agent/netlify-function.mjs` (normally `.nuxt/vitehub/agent/netlify-function.mjs`).

The framework distribution exposes `vite-hub/source/vite` for custom Source
integration. It does not introduce other public `vite-hub/*/vite` or
provider-specific application aliases. Use root `vitehub()` for framework
composition and the owner-package paths above for advanced integration control.

## Related

- [Generated files](https://vitehub.dev/docs/development/generated-files)
- [File conventions](https://vitehub.dev/docs/reference/file-conventions)
- [Package reference](https://vitehub.dev/docs/reference)
- [Runtime and host support](https://vitehub.dev/docs/frameworks-hosts/support-matrix)

`@vite-hub/agent/server/github` also exports
`createGitHubRequiredCheckPolicyReader` and `evaluateGitHubRequiredChecks`.
These inspect active rulesets and classic required-check protection, preserve App
bindings, and classify complete check evidence for an exact head. Unknown policy
is distinct from a known policy with no required checks. Cached results are for
scheduling and inspection, not merge authorization. Invalidate the policy reader
after branch-protection or ruleset changes.