name: Bug report
description: Report a reproducible product, API, or operations bug.
title: "[Bug]: "
labels: ["bug", "needs-triage"]
body:
  - type: markdown
    attributes:
      value: |
        Thanks for helping improve yedir-ai.

        Do not include secrets, cookies, Authorization headers, OAuth codes, signed URLs, `.env.local` values, private prompts, base64 data, or private user content. If this is a security issue, do not open a public issue. Follow `SECURITY.md` instead.

  - type: textarea
    id: summary
    attributes:
      label: Summary
      description: What happened, and what did you expect instead?
    validations:
      required: true

  - type: textarea
    id: steps
    attributes:
      label: Reproduction steps
      description: Provide the smallest reliable reproduction.
      placeholder: |
        1. Go to ...
        2. Click ...
        3. Observe ...
    validations:
      required: true

  - type: textarea
    id: impact
    attributes:
      label: Impact
      description: Who is affected and how severe is it?
    validations:
      required: true

  - type: textarea
    id: environment
    attributes:
      label: Environment
      description: Browser, OS, deployment target, Node/pnpm versions, or route/API involved.
      placeholder: |
        Browser:
        OS:
        Node:
        pnpm:
        Route/API:

  - type: textarea
    id: logs
    attributes:
      label: Sanitized logs or screenshots
      description: Include only sanitized output. Remove prompts, URLs, tokens, cookies, headers, base64, and private content.

  - type: checkboxes
    id: checks
    attributes:
      label: Pre-submit checklist
      options:
        - label: I removed secrets, tokens, signed URLs, cookies, private prompts, and private user content.
          required: true
        - label: I searched existing issues and docs before filing this.
          required: true