[ { "path": ".config/dotnet-tools.json", "content": "{\n \"version\": 1,\n \"isRoot\": true,\n \"tools\": {\n \"paket\": {\n \"version\": \"10.3.1\",\n \"commands\": [\n \"paket\"\n ],\n \"rollForward\": false\n },\n \"dotnet-serve\": {\n \"version\": \"1.10.194\",\n \"commands\": [\n \"dotnet-serve\"\n ],\n \"rollForward\": false\n },\n \"fantomas\": {\n \"version\": \"7.0.5\",\n \"commands\": [\n \"fantomas\"\n ],\n \"rollForward\": false\n }\n }\n}" }, { "path": ".editorconfig", "content": "; EditorConfig helps developers define and maintain consistent\n; coding styles between different editors and IDEs.\n\n; For more visit http://editorconfig.org.\nroot = true\n\n; Choose between lf or rf on \"end_of_line\" property\n[*]\nindent_style = space\nend_of_line = lf\ncharset = utf-8\ntrim_trailing_whitespace = true\ninsert_final_newline = true\n\n[{*.fs,*.fsx}]\nindent_size = 4\nindent_style = space\nmax_line_length=150\nfsharp_max_function_binding_width=10\nfsharp_max_infix_operator_expression=70\nfsharp_space_before_parameter=false\nfsharp_space_before_lowercase_invocation=false\nfsharp_multiline_block_brackets_on_same_column=true\nfsharp_experimental_stroustrup_style=true\nfsharp_bar_before_discriminated_union_declaration = true\nfsharp_keep_max_number_of_blank_lines=3\n" }, { "path": ".gitattributes", "content": "# Auto detect text files\n* text=auto \n\n# Custom for Visual Studio\n*.cs diff=csharp text=auto eol=lf\n*.fs diff=csharp text=auto eol=lf\n*.fsi diff=csharp text=auto eol=lf\n*.fsx diff=csharp text=auto eol=lf\n*.sln text eol=crlf merge=union\n*.csproj merge=union\n*.vbproj merge=union\n*.fsproj merge=union\n*.dbproj merge=union\n\n# Standard to msysgit\n*.doc diff=astextplain\n*.DOC diff=astextplain\n*.docx diff=astextplain\n*.DOCX diff=astextplain\n*.dot diff=astextplain\n*.DOT diff=astextplain\n*.pdf diff=astextplain\n*.PDF diff=astextplain\n*.rtf diff=astextplain\n*.RTF diff=astextplain\n\n.github/workflows/*.lock.yml linguist-generated=true merge=ours" }, { "path": ".github/ISSUE_TEMPLATE.md", "content": "### Description\n\nPlease provide a succinct description of your issue.\n\n### Repro steps\n\nPlease provide the steps required to reproduce the problem\n\n1. Type provider type definition with parameters\n\n2. Sample schema or relevant schema part\n\n### Expected behavior\n\nPlease provide a description of the behavior you expect.\n\n### Actual behavior\n\nPlease provide a description of the actual behavior you observe.\n\n### Known workarounds\n\nPlease provide a description of any known workarounds.\n\n### Affected Type Providers\n\n- [ ] SwaggerClientProvider\n- [ ] OpenApiClientProvider\n\n### Related information\n\n* Operating system\n* Branch\n* .NET Runtime, CoreCLR or Mono Version\n* Performance information, links to performance testing scripts\n" }, { "path": ".github/aw/actions-lock.json", "content": "{\n \"entries\": {\n \"actions/github-script@v9.0.0\": {\n \"repo\": \"actions/github-script\",\n \"version\": \"v9.0.0\",\n \"sha\": \"d746ffe35508b1917358783b479e04febd2b8f71\"\n },\n \"github/gh-aw-actions/setup@v0.68.3\": {\n \"repo\": \"github/gh-aw-actions/setup\",\n \"version\": \"v0.68.3\",\n \"sha\": \"ba90f2186d7ad780ec640f364005fa24e797b360\"\n },\n \"github/gh-aw/actions/setup@v0.71.1\": {\n \"repo\": \"github/gh-aw/actions/setup\",\n \"version\": \"v0.71.1\",\n \"sha\": \"f01a9d118afa6e306f3645ca31e43f4ea8fb4d22\"\n }\n },\n \"containers\": {\n \"ghcr.io/github/gh-aw-firewall/agent:0.25.20\": {\n \"image\": \"ghcr.io/github/gh-aw-firewall/agent:0.25.20\",\n \"digest\": \"sha256:9161f2415a3306a344aca34dd671ee69f122317e0a512e66dc64c94b9c508682\",\n \"pinned_image\": \"ghcr.io/github/gh-aw-firewall/agent:0.25.20@sha256:9161f2415a3306a344aca34dd671ee69f122317e0a512e66dc64c94b9c508682\"\n },\n \"ghcr.io/github/gh-aw-firewall/api-proxy:0.25.20\": {\n \"image\": \"ghcr.io/github/gh-aw-firewall/api-proxy:0.25.20\",\n \"digest\": \"sha256:6971639e381e82e45134bcd333181f456df3a52cd6f818a3e3d6de068ff91519\",\n \"pinned_image\": \"ghcr.io/github/gh-aw-firewall/api-proxy:0.25.20@sha256:6971639e381e82e45134bcd333181f456df3a52cd6f818a3e3d6de068ff91519\"\n },\n \"ghcr.io/github/gh-aw-firewall/squid:0.25.20\": {\n \"image\": \"ghcr.io/github/gh-aw-firewall/squid:0.25.20\",\n \"digest\": \"sha256:5411d903f73ee597e6a084971c2adef3eb0bd405910df3ed7bf5e3d6bd58a236\",\n \"pinned_image\": \"ghcr.io/github/gh-aw-firewall/squid:0.25.20@sha256:5411d903f73ee597e6a084971c2adef3eb0bd405910df3ed7bf5e3d6bd58a236\"\n },\n \"ghcr.io/github/gh-aw-mcpg:v0.2.19\": {\n \"image\": \"ghcr.io/github/gh-aw-mcpg:v0.2.19\",\n \"digest\": \"sha256:44d4d8de7e6c37aaea484eba489940c52df6a0b54078ddcbc9327592d5b3c3dd\",\n \"pinned_image\": \"ghcr.io/github/gh-aw-mcpg:v0.2.19@sha256:44d4d8de7e6c37aaea484eba489940c52df6a0b54078ddcbc9327592d5b3c3dd\"\n },\n \"ghcr.io/github/github-mcp-server:v0.32.0\": {\n \"image\": \"ghcr.io/github/github-mcp-server:v0.32.0\",\n \"digest\": \"sha256:2763823c63bcca718ce53850a1d7fcf2f501ec84028394f1b63ce7e9f4f9be28\",\n \"pinned_image\": \"ghcr.io/github/github-mcp-server:v0.32.0@sha256:2763823c63bcca718ce53850a1d7fcf2f501ec84028394f1b63ce7e9f4f9be28\"\n },\n \"node:lts-alpine\": {\n \"image\": \"node:lts-alpine\",\n \"digest\": \"sha256:d1b3b4da11eefd5941e7f0b9cf17783fc99d9c6fc34884a665f40a06dbdfc94f\",\n \"pinned_image\": \"node:lts-alpine@sha256:d1b3b4da11eefd5941e7f0b9cf17783fc99d9c6fc34884a665f40a06dbdfc94f\"\n }\n }\n}\n" }, { "path": ".github/dependabot.yml", "content": "version: 2\nupdates:\n - package-ecosystem: \"github-actions\"\n directory: \"/\"\n schedule:\n interval: \"weekly\"\n labels:\n - \"enhancement\"\n - package-ecosystem: \"nuget\"\n directory: \"/.config\"\n schedule:\n interval: \"weekly\"\n labels:\n - \"enhancement\"\n" }, { "path": ".github/workflows/docs.yml", "content": "name: Deploy docs to GitHub Pages\n\non:\n push:\n branches: [master]\n paths:\n - 'docs/**'\n workflow_dispatch:\n\npermissions:\n contents: read\n pages: write\n id-token: write\n\nconcurrency:\n group: pages\n cancel-in-progress: false\n\njobs:\n build:\n runs-on: ubuntu-latest\n steps:\n - uses: actions/checkout@v6\n\n - uses: actions/setup-node@v6\n with:\n node-version: 22\n\n - name: Install dependencies\n run: npm ci\n working-directory: docs\n\n - name: Build docs\n run: npm run docs:build\n working-directory: docs\n\n - uses: actions/configure-pages@v6\n\n - uses: actions/upload-pages-artifact@v5\n with:\n path: docs/.vitepress/dist\n\n deploy:\n environment:\n name: github-pages\n url: ${{ steps.deployment.outputs.page_url }}\n needs: build\n runs-on: ubuntu-latest\n steps:\n - name: Deploy to GitHub Pages\n id: deployment\n uses: actions/deploy-pages@v5\n" }, { "path": ".github/workflows/dotnetcore.yml", "content": "name: Build and Test\n\non:\n push:\n branches:\n - master\n pull_request:\n\nconcurrency:\n group: ${{ github.workflow }}-${{ github.ref }}\n cancel-in-progress: true\n\njobs:\n build:\n strategy:\n fail-fast: false\n matrix:\n os: [ubuntu-latest, windows-latest]\n runs-on: ${{ matrix.os }}\n\n steps:\n - uses: actions/checkout@v6\n - name: Setup .NET 10.0 SDK\n uses: actions/setup-dotnet@v5\n with:\n dotnet-version: \"10.0.x\"\n - name: Cache NuGet packages\n uses: actions/cache@v5\n with:\n path: |\n ~/.nuget/packages\n ~/.local/share/NuGet\n %LOCALAPPDATA%\\NuGet\\v3-cache\n key: ${{ runner.os }}-nuget-${{ hashFiles('**/paket.lock') }}\n restore-keys: |\n ${{ runner.os }}-nuget-\n - name: Cache .paket directory\n uses: actions/cache@v5\n with:\n path: .paket\n key: ${{ runner.os }}-paket-${{ hashFiles('**/paket.lock') }}\n restore-keys: |\n ${{ runner.os }}-paket-\n - name: Install local tools\n run: dotnet tool restore\n - name: Paket Restore\n run: dotnet paket restore\n - name: Build and Test\n run: dotnet fsi build.fsx\n" }, { "path": ".github/workflows/repo-assist.lock.yml", "content": "# gh-aw-metadata: {\"schema_version\":\"v3\",\"frontmatter_hash\":\"9795d605bdecebc79c8c5cbb8fbf7ffa7b3dfd48ab232f75dcff9e0b162f1b62\",\"compiler_version\":\"v0.68.3\",\"strict\":true,\"agent_id\":\"copilot\"}\n# gh-aw-manifest: {\"version\":1,\"secrets\":[\"COPILOT_GITHUB_TOKEN\",\"GH_AW_CI_TRIGGER_TOKEN\",\"GH_AW_GITHUB_MCP_SERVER_TOKEN\",\"GH_AW_GITHUB_TOKEN\",\"GITHUB_TOKEN\"],\"actions\":[{\"repo\":\"actions/checkout\",\"sha\":\"de0fac2e4500dabe0009e67214ff5f5447ce83dd\",\"version\":\"v6.0.2\"},{\"repo\":\"actions/download-artifact\",\"sha\":\"3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c\",\"version\":\"v8.0.1\"},{\"repo\":\"actions/github-script\",\"sha\":\"373c709c69115d41ff229c7e5df9f8788daa9553\",\"version\":\"v9\"},{\"repo\":\"actions/upload-artifact\",\"sha\":\"043fb46d1a93c77aae656e7c1c64a875d1fc6a0a\",\"version\":\"v7.0.1\"},{\"repo\":\"github/gh-aw-actions/setup\",\"sha\":\"ba90f2186d7ad780ec640f364005fa24e797b360\",\"version\":\"v0.68.3\"}],\"containers\":[{\"image\":\"ghcr.io/github/gh-aw-firewall/agent:0.25.20\",\"digest\":\"sha256:9161f2415a3306a344aca34dd671ee69f122317e0a512e66dc64c94b9c508682\",\"pinned_image\":\"ghcr.io/github/gh-aw-firewall/agent:0.25.20@sha256:9161f2415a3306a344aca34dd671ee69f122317e0a512e66dc64c94b9c508682\"},{\"image\":\"ghcr.io/github/gh-aw-firewall/api-proxy:0.25.20\",\"digest\":\"sha256:6971639e381e82e45134bcd333181f456df3a52cd6f818a3e3d6de068ff91519\",\"pinned_image\":\"ghcr.io/github/gh-aw-firewall/api-proxy:0.25.20@sha256:6971639e381e82e45134bcd333181f456df3a52cd6f818a3e3d6de068ff91519\"},{\"image\":\"ghcr.io/github/gh-aw-firewall/squid:0.25.20\",\"digest\":\"sha256:5411d903f73ee597e6a084971c2adef3eb0bd405910df3ed7bf5e3d6bd58a236\",\"pinned_image\":\"ghcr.io/github/gh-aw-firewall/squid:0.25.20@sha256:5411d903f73ee597e6a084971c2adef3eb0bd405910df3ed7bf5e3d6bd58a236\"},{\"image\":\"ghcr.io/github/gh-aw-mcpg:v0.2.19\",\"digest\":\"sha256:44d4d8de7e6c37aaea484eba489940c52df6a0b54078ddcbc9327592d5b3c3dd\",\"pinned_image\":\"ghcr.io/github/gh-aw-mcpg:v0.2.19@sha256:44d4d8de7e6c37aaea484eba489940c52df6a0b54078ddcbc9327592d5b3c3dd\"},{\"image\":\"ghcr.io/github/github-mcp-server:v0.32.0\",\"digest\":\"sha256:2763823c63bcca718ce53850a1d7fcf2f501ec84028394f1b63ce7e9f4f9be28\",\"pinned_image\":\"ghcr.io/github/github-mcp-server:v0.32.0@sha256:2763823c63bcca718ce53850a1d7fcf2f501ec84028394f1b63ce7e9f4f9be28\"},{\"image\":\"node:lts-alpine\",\"digest\":\"sha256:d1b3b4da11eefd5941e7f0b9cf17783fc99d9c6fc34884a665f40a06dbdfc94f\",\"pinned_image\":\"node:lts-alpine@sha256:d1b3b4da11eefd5941e7f0b9cf17783fc99d9c6fc34884a665f40a06dbdfc94f\"}]}\n# ___ _ _ \n# / _ \\ | | (_) \n# | |_| | __ _ ___ _ __ | |_ _ ___ \n# | _ |/ _` |/ _ \\ '_ \\| __| |/ __|\n# | | | | (_| | __/ | | | |_| | (__ \n# \\_| |_/\\__, |\\___|_| |_|\\__|_|\\___|\n# __/ |\n# _ _ |___/ \n# | | | | / _| |\n# | | | | ___ _ __ _ __| |_| | _____ ____\n# | |/\\| |/ _ \\ '__| |/ /| _| |/ _ \\ \\ /\\ / / ___|\n# \\ /\\ / (_) | | | | ( | | | | (_) \\ V V /\\__ \\\n# \\/ \\/ \\___/|_| |_|\\_\\|_| |_|\\___/ \\_/\\_/ |___/\n#\n# This file was automatically generated by gh-aw (v0.68.3). DO NOT EDIT.\n#\n# To update this file, edit githubnext/agentics/workflows/repo-assist.md@3de4e604a36b5190a1c7dc4719c7341500ba8a95 and run:\n# gh aw compile\n# Not all edits will cause changes to this file.\n#\n# For more information: https://github.github.com/gh-aw/introduction/overview/\n#\n# A friendly repository assistant that runs 2 times a day to support contributors and maintainers.\n# Can also be triggered on-demand via '/repo-assist ' to perform specific tasks.\n# - Labels and triages open issues\n# - Comments helpfully on open issues to unblock contributors and onboard newcomers\n# - Identifies issues that can be fixed and creates draft pull requests with fixes\n# - Improves performance, testing, and code quality via PRs\n# - Makes engineering investments: dependency updates, CI improvements, tooling\n# - Updates its own PRs when CI fails or merge conflicts arise\n# - Nudges stale PRs waiting for author response\n# - Takes the repository forward with proactive improvements\n# - Maintains a persistent memory of work done and what remains\n# Always polite, constructive, and mindful of the project's goals.\n#\n# Source: githubnext/agentics/workflows/repo-assist.md@3de4e604a36b5190a1c7dc4719c7341500ba8a95\n#\n# Secrets used:\n# - COPILOT_GITHUB_TOKEN\n# - GH_AW_CI_TRIGGER_TOKEN\n# - GH_AW_GITHUB_MCP_SERVER_TOKEN\n# - GH_AW_GITHUB_TOKEN\n# - GITHUB_TOKEN\n#\n# Custom actions used:\n# - actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2\n# - actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1\n# - actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9\n# - actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1\n# - github/gh-aw-actions/setup@ba90f2186d7ad780ec640f364005fa24e797b360 # v0.68.3\n#\n# Container images used:\n# - ghcr.io/github/gh-aw-firewall/agent:0.25.20@sha256:9161f2415a3306a344aca34dd671ee69f122317e0a512e66dc64c94b9c508682\n# - ghcr.io/github/gh-aw-firewall/api-proxy:0.25.20@sha256:6971639e381e82e45134bcd333181f456df3a52cd6f818a3e3d6de068ff91519\n# - ghcr.io/github/gh-aw-firewall/squid:0.25.20@sha256:5411d903f73ee597e6a084971c2adef3eb0bd405910df3ed7bf5e3d6bd58a236\n# - ghcr.io/github/gh-aw-mcpg:v0.2.19@sha256:44d4d8de7e6c37aaea484eba489940c52df6a0b54078ddcbc9327592d5b3c3dd\n# - ghcr.io/github/github-mcp-server:v0.32.0@sha256:2763823c63bcca718ce53850a1d7fcf2f501ec84028394f1b63ce7e9f4f9be28\n# - node:lts-alpine@sha256:d1b3b4da11eefd5941e7f0b9cf17783fc99d9c6fc34884a665f40a06dbdfc94f\n\nname: \"Repo Assist\"\n\"on\":\n discussion:\n types:\n - created\n - edited\n discussion_comment:\n types:\n - created\n - edited\n issue_comment:\n types:\n - created\n - edited\n issues:\n types:\n - opened\n - edited\n - reopened\n pull_request:\n types:\n - opened\n - edited\n - reopened\n pull_request_review_comment:\n types:\n - created\n - edited\n schedule:\n - cron: \"46 12 * * *\"\n workflow_dispatch:\n inputs:\n aw_context:\n default: \"\"\n description: Agent caller context (used internally by Agentic Workflows).\n required: false\n type: string\n\npermissions: {}\n\nconcurrency:\n group: \"gh-aw-${{ github.workflow }}-${{ github.event.issue.number || github.event.pull_request.number || github.run_id }}\"\n\nrun-name: \"Repo Assist\"\n\njobs:\n activation:\n needs: pre_activation\n if: \"needs.pre_activation.outputs.activated == 'true' && ((github.event_name == 'issues' || github.event_name == 'issue_comment' || github.event_name == 'pull_request' || github.event_name == 'pull_request_review_comment' || github.event_name == 'discussion' || github.event_name == 'discussion_comment') && (github.event_name == 'issues' && (startsWith(github.event.issue.body, '/repo-assist ') || startsWith(github.event.issue.body, '/repo-assist\\n') || github.event.issue.body == '/repo-assist') || github.event_name == 'issue_comment' && (startsWith(github.event.comment.body, '/repo-assist ') || startsWith(github.event.comment.body, '/repo-assist\\n') || github.event.comment.body == '/repo-assist') && github.event.issue.pull_request == null || github.event_name == 'issue_comment' && (startsWith(github.event.comment.body, '/repo-assist ') || startsWith(github.event.comment.body, '/repo-assist\\n') || github.event.comment.body == '/repo-assist') && github.event.issue.pull_request != null || github.event_name == 'pull_request_review_comment' && (startsWith(github.event.comment.body, '/repo-assist ') || startsWith(github.event.comment.body, '/repo-assist\\n') || github.event.comment.body == '/repo-assist') || github.event_name == 'pull_request' && (startsWith(github.event.pull_request.body, '/repo-assist ') || startsWith(github.event.pull_request.body, '/repo-assist\\n') || github.event.pull_request.body == '/repo-assist') || github.event_name == 'discussion' && (startsWith(github.event.discussion.body, '/repo-assist ') || startsWith(github.event.discussion.body, '/repo-assist\\n') || github.event.discussion.body == '/repo-assist') || github.event_name == 'discussion_comment' && (startsWith(github.event.comment.body, '/repo-assist ') || startsWith(github.event.comment.body, '/repo-assist\\n') || github.event.comment.body == '/repo-assist')) || (!(github.event_name == 'issues')) && (!(github.event_name == 'issue_comment')) && (!(github.event_name == 'pull_request')) && (!(github.event_name == 'pull_request_review_comment')) && (!(github.event_name == 'discussion')) && (!(github.event_name == 'discussion_comment')))\"\n runs-on: ubuntu-slim\n permissions:\n actions: read\n contents: read\n discussions: write\n issues: write\n pull-requests: write\n outputs:\n body: ${{ steps.sanitized.outputs.body }}\n comment_id: ${{ steps.add-comment.outputs.comment-id }}\n comment_repo: ${{ steps.add-comment.outputs.comment-repo }}\n comment_url: ${{ steps.add-comment.outputs.comment-url }}\n lockdown_check_failed: ${{ steps.generate_aw_info.outputs.lockdown_check_failed == 'true' }}\n model: ${{ steps.generate_aw_info.outputs.model }}\n secret_verification_result: ${{ steps.validate-secret.outputs.verification_result }}\n setup-trace-id: ${{ steps.setup.outputs.trace-id }}\n slash_command: ${{ needs.pre_activation.outputs.matched_command }}\n stale_lock_file_failed: ${{ steps.check-lock-file.outputs.stale_lock_file_failed == 'true' }}\n text: ${{ steps.sanitized.outputs.text }}\n title: ${{ steps.sanitized.outputs.title }}\n steps:\n - name: Setup Scripts\n id: setup\n uses: github/gh-aw-actions/setup@ba90f2186d7ad780ec640f364005fa24e797b360 # v0.68.3\n with:\n destination: ${{ runner.temp }}/gh-aw/actions\n job-name: ${{ github.job }}\n trace-id: ${{ needs.pre_activation.outputs.setup-trace-id }}\n - name: Generate agentic run info\n id: generate_aw_info\n env:\n GH_AW_INFO_ENGINE_ID: \"copilot\"\n GH_AW_INFO_ENGINE_NAME: \"GitHub Copilot CLI\"\n GH_AW_INFO_MODEL: ${{ vars.GH_AW_MODEL_AGENT_COPILOT || 'auto' }}\n GH_AW_INFO_VERSION: \"1.0.21\"\n GH_AW_INFO_AGENT_VERSION: \"1.0.21\"\n GH_AW_INFO_CLI_VERSION: \"v0.68.3\"\n GH_AW_INFO_WORKFLOW_NAME: \"Repo Assist\"\n GH_AW_INFO_EXPERIMENTAL: \"false\"\n GH_AW_INFO_SUPPORTS_TOOLS_ALLOWLIST: \"true\"\n GH_AW_INFO_STAGED: \"false\"\n GH_AW_INFO_ALLOWED_DOMAINS: '[\"defaults\",\"dotnet\",\"node\",\"python\",\"rust\",\"java\"]'\n GH_AW_INFO_FIREWALL_ENABLED: \"true\"\n GH_AW_INFO_AWF_VERSION: \"v0.25.20\"\n GH_AW_INFO_AWMG_VERSION: \"\"\n GH_AW_INFO_FIREWALL_TYPE: \"squid\"\n GH_AW_COMPILED_STRICT: \"true\"\n uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9\n with:\n script: |\n const { setupGlobals } = require('${{ runner.temp }}/gh-aw/actions/setup_globals.cjs');\n setupGlobals(core, github, context, exec, io, getOctokit);\n const { main } = require('${{ runner.temp }}/gh-aw/actions/generate_aw_info.cjs');\n await main(core, context);\n - name: Add eyes reaction for immediate feedback\n id: react\n if: github.event_name == 'issues' || github.event_name == 'issue_comment' || github.event_name == 'pull_request_review_comment' || github.event_name == 'discussion' || github.event_name == 'discussion_comment' || github.event_name == 'pull_request' && github.event.pull_request.head.repo.id == github.repository_id\n uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9\n env:\n GH_AW_REACTION: \"eyes\"\n with:\n github-token: ${{ secrets.GITHUB_TOKEN }}\n script: |\n const { setupGlobals } = require('${{ runner.temp }}/gh-aw/actions/setup_globals.cjs');\n setupGlobals(core, github, context, exec, io, getOctokit);\n const { main } = require('${{ runner.temp }}/gh-aw/actions/add_reaction.cjs');\n await main();\n - name: Validate COPILOT_GITHUB_TOKEN secret\n id: validate-secret\n run: bash \"${RUNNER_TEMP}/gh-aw/actions/validate_multi_secret.sh\" COPILOT_GITHUB_TOKEN 'GitHub Copilot CLI' https://github.github.com/gh-aw/reference/engines/#github-copilot-default\n env:\n COPILOT_GITHUB_TOKEN: ${{ secrets.COPILOT_GITHUB_TOKEN }}\n - name: Checkout .github and .agents folders\n uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2\n with:\n persist-credentials: false\n sparse-checkout: |\n .github\n .agents\n sparse-checkout-cone-mode: true\n fetch-depth: 1\n - name: Check workflow lock file\n id: check-lock-file\n uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9\n env:\n GH_AW_WORKFLOW_FILE: \"repo-assist.lock.yml\"\n GH_AW_CONTEXT_WORKFLOW_REF: \"${{ github.workflow_ref }}\"\n with:\n script: |\n const { setupGlobals } = require('${{ runner.temp }}/gh-aw/actions/setup_globals.cjs');\n setupGlobals(core, github, context, exec, io, getOctokit);\n const { main } = require('${{ runner.temp }}/gh-aw/actions/check_workflow_timestamp_api.cjs');\n await main();\n - name: Check compile-agentic version\n uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9\n env:\n GH_AW_COMPILED_VERSION: \"v0.68.3\"\n with:\n script: |\n const { setupGlobals } = require('${{ runner.temp }}/gh-aw/actions/setup_globals.cjs');\n setupGlobals(core, github, context, exec, io, getOctokit);\n const { main } = require('${{ runner.temp }}/gh-aw/actions/check_version_updates.cjs');\n await main();\n - name: Compute current body text\n id: sanitized\n uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9\n with:\n script: |\n const { setupGlobals } = require('${{ runner.temp }}/gh-aw/actions/setup_globals.cjs');\n setupGlobals(core, github, context, exec, io, getOctokit);\n const { main } = require('${{ runner.temp }}/gh-aw/actions/compute_text.cjs');\n await main();\n - name: Add comment with workflow run link\n id: add-comment\n if: github.event_name == 'issues' || github.event_name == 'issue_comment' || github.event_name == 'pull_request_review_comment' || github.event_name == 'discussion' || github.event_name == 'discussion_comment' || github.event_name == 'pull_request' && github.event.pull_request.head.repo.id == github.repository_id\n uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9\n env:\n GH_AW_WORKFLOW_NAME: \"Repo Assist\"\n GH_AW_SAFE_OUTPUT_MESSAGES: \"{\\\"footer\\\":\\\"\\\\u003e Generated by 🌈 {workflow_name}, see [workflow run]({run_url}). [Learn more](https://github.com/githubnext/agentics/blob/main/docs/repo-assist.md).\\\",\\\"runStarted\\\":\\\"{workflow_name} is processing {event_type}, see [workflow run]({run_url})...\\\",\\\"runSuccess\\\":\\\"βœ“ {workflow_name} completed successfully, see [workflow run]({run_url}).\\\",\\\"runFailure\\\":\\\"βœ— {workflow_name} encountered {status}, see [workflow run]({run_url}).\\\"}\"\n with:\n script: |\n const { setupGlobals } = require('${{ runner.temp }}/gh-aw/actions/setup_globals.cjs');\n setupGlobals(core, github, context, exec, io, getOctokit);\n const { main } = require('${{ runner.temp }}/gh-aw/actions/add_workflow_run_comment.cjs');\n await main();\n - name: Create prompt with built-in context\n env:\n GH_AW_PROMPT: /tmp/gh-aw/aw-prompts/prompt.txt\n GH_AW_SAFE_OUTPUTS: ${{ runner.temp }}/gh-aw/safeoutputs/outputs.jsonl\n GH_AW_GITHUB_ACTOR: ${{ github.actor }}\n GH_AW_GITHUB_EVENT_COMMENT_ID: ${{ github.event.comment.id }}\n GH_AW_GITHUB_EVENT_DISCUSSION_NUMBER: ${{ github.event.discussion.number }}\n GH_AW_GITHUB_EVENT_ISSUE_NUMBER: ${{ github.event.issue.number }}\n GH_AW_GITHUB_EVENT_PULL_REQUEST_NUMBER: ${{ github.event.pull_request.number }}\n GH_AW_GITHUB_REPOSITORY: ${{ github.repository }}\n GH_AW_GITHUB_RUN_ID: ${{ github.run_id }}\n GH_AW_GITHUB_SERVER_URL: ${{ github.server_url }}\n GH_AW_GITHUB_WORKSPACE: ${{ github.workspace }}\n GH_AW_IS_PR_COMMENT: ${{ github.event.issue.pull_request && 'true' || '' }}\n GH_AW_STEPS_SANITIZED_OUTPUTS_TEXT: ${{ steps.sanitized.outputs.text }}\n GH_AW_WIKI_NOTE: ${{ '' }}\n # poutine:ignore untrusted_checkout_exec\n run: |\n bash \"${RUNNER_TEMP}/gh-aw/actions/create_prompt_first.sh\"\n {\n cat << 'GH_AW_PROMPT_2095c4ee969b23af_EOF'\n \n GH_AW_PROMPT_2095c4ee969b23af_EOF\n cat \"${RUNNER_TEMP}/gh-aw/prompts/xpia.md\"\n cat \"${RUNNER_TEMP}/gh-aw/prompts/temp_folder_prompt.md\"\n cat \"${RUNNER_TEMP}/gh-aw/prompts/markdown.md\"\n cat \"${RUNNER_TEMP}/gh-aw/prompts/repo_memory_prompt.md\"\n cat \"${RUNNER_TEMP}/gh-aw/prompts/safe_outputs_prompt.md\"\n cat << 'GH_AW_PROMPT_2095c4ee969b23af_EOF'\n \n Tools: add_comment(max:10), create_issue(max:4), update_issue, create_pull_request(max:4), add_labels(max:30), remove_labels(max:5), push_to_pull_request_branch(max:4), missing_tool, missing_data, noop\n GH_AW_PROMPT_2095c4ee969b23af_EOF\n cat \"${RUNNER_TEMP}/gh-aw/prompts/safe_outputs_create_pull_request.md\"\n cat \"${RUNNER_TEMP}/gh-aw/prompts/safe_outputs_push_to_pr_branch.md\"\n cat << 'GH_AW_PROMPT_2095c4ee969b23af_EOF'\n \n \n The following GitHub context information is available for this workflow:\n {{#if __GH_AW_GITHUB_ACTOR__ }}\n - **actor**: __GH_AW_GITHUB_ACTOR__\n {{/if}}\n {{#if __GH_AW_GITHUB_REPOSITORY__ }}\n - **repository**: __GH_AW_GITHUB_REPOSITORY__\n {{/if}}\n {{#if __GH_AW_GITHUB_WORKSPACE__ }}\n - **workspace**: __GH_AW_GITHUB_WORKSPACE__\n {{/if}}\n {{#if __GH_AW_GITHUB_EVENT_ISSUE_NUMBER__ }}\n - **issue-number**: #__GH_AW_GITHUB_EVENT_ISSUE_NUMBER__\n {{/if}}\n {{#if __GH_AW_GITHUB_EVENT_DISCUSSION_NUMBER__ }}\n - **discussion-number**: #__GH_AW_GITHUB_EVENT_DISCUSSION_NUMBER__\n {{/if}}\n {{#if __GH_AW_GITHUB_EVENT_PULL_REQUEST_NUMBER__ }}\n - **pull-request-number**: #__GH_AW_GITHUB_EVENT_PULL_REQUEST_NUMBER__\n {{/if}}\n {{#if __GH_AW_GITHUB_EVENT_COMMENT_ID__ }}\n - **comment-id**: __GH_AW_GITHUB_EVENT_COMMENT_ID__\n {{/if}}\n {{#if __GH_AW_GITHUB_RUN_ID__ }}\n - **workflow-run-id**: __GH_AW_GITHUB_RUN_ID__\n {{/if}}\n - **checkouts**: The following repositories have been checked out and are available in the workspace:\n - `$GITHUB_WORKSPACE` β†’ `__GH_AW_GITHUB_REPOSITORY__` (cwd) [full history, all branches available as remote-tracking refs] [additional refs fetched: *]\n - **Note**: If a branch you need is not in the list above and is not listed as an additional fetched ref, it has NOT been checked out. For private repositories you cannot fetch it without proper authentication. If the branch is required and not available, exit with an error and ask the user to add it to the `fetch:` option of the `checkout:` configuration (e.g., `fetch: [\"refs/pulls/open/*\"]` for all open PR refs, or `fetch: [\"main\", \"feature/my-branch\"]` for specific branches).\n \n \n GH_AW_PROMPT_2095c4ee969b23af_EOF\n cat \"${RUNNER_TEMP}/gh-aw/prompts/github_mcp_tools_with_safeoutputs_prompt.md\"\n if [ \"$GITHUB_EVENT_NAME\" = \"issue_comment\" ] && [ -n \"$GH_AW_IS_PR_COMMENT\" ] || [ \"$GITHUB_EVENT_NAME\" = \"pull_request_review_comment\" ] || [ \"$GITHUB_EVENT_NAME\" = \"pull_request_review\" ]; then\n cat \"${RUNNER_TEMP}/gh-aw/prompts/pr_context_prompt.md\"\n fi\n if [ \"$GITHUB_EVENT_NAME\" = \"issue_comment\" ] && [ -n \"$GH_AW_IS_PR_COMMENT\" ] || [ \"$GITHUB_EVENT_NAME\" = \"pull_request_review_comment\" ] || [ \"$GITHUB_EVENT_NAME\" = \"pull_request_review\" ]; then\n cat \"${RUNNER_TEMP}/gh-aw/prompts/pr_context_push_to_pr_branch_guidance.md\"\n fi\n cat << 'GH_AW_PROMPT_2095c4ee969b23af_EOF'\n \n {{#runtime-import .github/workflows/repo-assist.md}}\n GH_AW_PROMPT_2095c4ee969b23af_EOF\n } > \"$GH_AW_PROMPT\"\n - name: Interpolate variables and render templates\n uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9\n env:\n GH_AW_PROMPT: /tmp/gh-aw/aw-prompts/prompt.txt\n GH_AW_GITHUB_REPOSITORY: ${{ github.repository }}\n GH_AW_GITHUB_RUN_ID: ${{ github.run_id }}\n GH_AW_GITHUB_SERVER_URL: ${{ github.server_url }}\n GH_AW_STEPS_SANITIZED_OUTPUTS_TEXT: ${{ steps.sanitized.outputs.text }}\n with:\n script: |\n const { setupGlobals } = require('${{ runner.temp }}/gh-aw/actions/setup_globals.cjs');\n setupGlobals(core, github, context, exec, io, getOctokit);\n const { main } = require('${{ runner.temp }}/gh-aw/actions/interpolate_prompt.cjs');\n await main();\n - name: Substitute placeholders\n uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9\n env:\n GH_AW_PROMPT: /tmp/gh-aw/aw-prompts/prompt.txt\n GH_AW_GITHUB_ACTOR: ${{ github.actor }}\n GH_AW_GITHUB_EVENT_COMMENT_ID: ${{ github.event.comment.id }}\n GH_AW_GITHUB_EVENT_DISCUSSION_NUMBER: ${{ github.event.discussion.number }}\n GH_AW_GITHUB_EVENT_ISSUE_NUMBER: ${{ github.event.issue.number }}\n GH_AW_GITHUB_EVENT_PULL_REQUEST_NUMBER: ${{ github.event.pull_request.number }}\n GH_AW_GITHUB_REPOSITORY: ${{ github.repository }}\n GH_AW_GITHUB_RUN_ID: ${{ github.run_id }}\n GH_AW_GITHUB_SERVER_URL: ${{ github.server_url }}\n GH_AW_GITHUB_WORKSPACE: ${{ github.workspace }}\n GH_AW_IS_PR_COMMENT: ${{ github.event.issue.pull_request && 'true' || '' }}\n GH_AW_MEMORY_BRANCH_NAME: 'memory/repo-assist'\n GH_AW_MEMORY_CONSTRAINTS: \"\\n\\n**Constraints:**\\n- **Max File Size**: 10240 bytes (0.01 MB) per file\\n- **Max File Count**: 100 files per commit\\n- **Max Patch Size**: 10240 bytes (10 KB) total per push (max: 100 KB)\\n\"\n GH_AW_MEMORY_DESCRIPTION: ''\n GH_AW_MEMORY_DIR: '/tmp/gh-aw/repo-memory/default/'\n GH_AW_MEMORY_TARGET_REPO: ' of the current repository'\n GH_AW_NEEDS_PRE_ACTIVATION_OUTPUTS_ACTIVATED: ${{ needs.pre_activation.outputs.activated }}\n GH_AW_NEEDS_PRE_ACTIVATION_OUTPUTS_MATCHED_COMMAND: ${{ needs.pre_activation.outputs.matched_command }}\n GH_AW_STEPS_SANITIZED_OUTPUTS_TEXT: ${{ steps.sanitized.outputs.text }}\n GH_AW_WIKI_NOTE: ''\n with:\n script: |\n const { setupGlobals } = require('${{ runner.temp }}/gh-aw/actions/setup_globals.cjs');\n setupGlobals(core, github, context, exec, io, getOctokit);\n \n const substitutePlaceholders = require('${{ runner.temp }}/gh-aw/actions/substitute_placeholders.cjs');\n \n // Call the substitution function\n return await substitutePlaceholders({\n file: process.env.GH_AW_PROMPT,\n substitutions: {\n GH_AW_GITHUB_ACTOR: process.env.GH_AW_GITHUB_ACTOR,\n GH_AW_GITHUB_EVENT_COMMENT_ID: process.env.GH_AW_GITHUB_EVENT_COMMENT_ID,\n GH_AW_GITHUB_EVENT_DISCUSSION_NUMBER: process.env.GH_AW_GITHUB_EVENT_DISCUSSION_NUMBER,\n GH_AW_GITHUB_EVENT_ISSUE_NUMBER: process.env.GH_AW_GITHUB_EVENT_ISSUE_NUMBER,\n GH_AW_GITHUB_EVENT_PULL_REQUEST_NUMBER: process.env.GH_AW_GITHUB_EVENT_PULL_REQUEST_NUMBER,\n GH_AW_GITHUB_REPOSITORY: process.env.GH_AW_GITHUB_REPOSITORY,\n GH_AW_GITHUB_RUN_ID: process.env.GH_AW_GITHUB_RUN_ID,\n GH_AW_GITHUB_SERVER_URL: process.env.GH_AW_GITHUB_SERVER_URL,\n GH_AW_GITHUB_WORKSPACE: process.env.GH_AW_GITHUB_WORKSPACE,\n GH_AW_IS_PR_COMMENT: process.env.GH_AW_IS_PR_COMMENT,\n GH_AW_MEMORY_BRANCH_NAME: process.env.GH_AW_MEMORY_BRANCH_NAME,\n GH_AW_MEMORY_CONSTRAINTS: process.env.GH_AW_MEMORY_CONSTRAINTS,\n GH_AW_MEMORY_DESCRIPTION: process.env.GH_AW_MEMORY_DESCRIPTION,\n GH_AW_MEMORY_DIR: process.env.GH_AW_MEMORY_DIR,\n GH_AW_MEMORY_TARGET_REPO: process.env.GH_AW_MEMORY_TARGET_REPO,\n GH_AW_NEEDS_PRE_ACTIVATION_OUTPUTS_ACTIVATED: process.env.GH_AW_NEEDS_PRE_ACTIVATION_OUTPUTS_ACTIVATED,\n GH_AW_NEEDS_PRE_ACTIVATION_OUTPUTS_MATCHED_COMMAND: process.env.GH_AW_NEEDS_PRE_ACTIVATION_OUTPUTS_MATCHED_COMMAND,\n GH_AW_STEPS_SANITIZED_OUTPUTS_TEXT: process.env.GH_AW_STEPS_SANITIZED_OUTPUTS_TEXT,\n GH_AW_WIKI_NOTE: process.env.GH_AW_WIKI_NOTE\n }\n });\n - name: Validate prompt placeholders\n env:\n GH_AW_PROMPT: /tmp/gh-aw/aw-prompts/prompt.txt\n # poutine:ignore untrusted_checkout_exec\n run: bash \"${RUNNER_TEMP}/gh-aw/actions/validate_prompt_placeholders.sh\"\n - name: Print prompt\n env:\n GH_AW_PROMPT: /tmp/gh-aw/aw-prompts/prompt.txt\n # poutine:ignore untrusted_checkout_exec\n run: bash \"${RUNNER_TEMP}/gh-aw/actions/print_prompt_summary.sh\"\n - name: Upload activation artifact\n if: success()\n uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1\n with:\n name: activation\n path: |\n /tmp/gh-aw/aw_info.json\n /tmp/gh-aw/aw-prompts/prompt.txt\n /tmp/gh-aw/github_rate_limits.jsonl\n if-no-files-found: ignore\n retention-days: 1\n\n agent:\n needs: activation\n runs-on: ubuntu-latest\n permissions: read-all\n env:\n DEFAULT_BRANCH: ${{ github.event.repository.default_branch }}\n GH_AW_ASSETS_ALLOWED_EXTS: \"\"\n GH_AW_ASSETS_BRANCH: \"\"\n GH_AW_ASSETS_MAX_SIZE_KB: 0\n GH_AW_MCP_LOG_DIR: /tmp/gh-aw/mcp-logs/safeoutputs\n GH_AW_WORKFLOW_ID_SANITIZED: repoassist\n outputs:\n agentic_engine_timeout: ${{ steps.detect-copilot-errors.outputs.agentic_engine_timeout || 'false' }}\n checkout_pr_success: ${{ steps.checkout-pr.outputs.checkout_pr_success || 'true' }}\n effective_tokens: ${{ steps.parse-mcp-gateway.outputs.effective_tokens }}\n has_patch: ${{ steps.collect_output.outputs.has_patch }}\n inference_access_error: ${{ steps.detect-copilot-errors.outputs.inference_access_error || 'false' }}\n mcp_policy_error: ${{ steps.detect-copilot-errors.outputs.mcp_policy_error || 'false' }}\n model: ${{ needs.activation.outputs.model }}\n model_not_supported_error: ${{ steps.detect-copilot-errors.outputs.model_not_supported_error || 'false' }}\n output: ${{ steps.collect_output.outputs.output }}\n output_types: ${{ steps.collect_output.outputs.output_types }}\n setup-trace-id: ${{ steps.setup.outputs.trace-id }}\n steps:\n - name: Setup Scripts\n id: setup\n uses: github/gh-aw-actions/setup@ba90f2186d7ad780ec640f364005fa24e797b360 # v0.68.3\n with:\n destination: ${{ runner.temp }}/gh-aw/actions\n job-name: ${{ github.job }}\n trace-id: ${{ needs.activation.outputs.setup-trace-id }}\n - name: Set runtime paths\n id: set-runtime-paths\n run: |\n {\n echo \"GH_AW_SAFE_OUTPUTS=${RUNNER_TEMP}/gh-aw/safeoutputs/outputs.jsonl\"\n echo \"GH_AW_SAFE_OUTPUTS_CONFIG_PATH=${RUNNER_TEMP}/gh-aw/safeoutputs/config.json\"\n echo \"GH_AW_SAFE_OUTPUTS_TOOLS_PATH=${RUNNER_TEMP}/gh-aw/safeoutputs/tools.json\"\n } >> \"$GITHUB_OUTPUT\"\n - name: Checkout repository\n uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2\n with:\n persist-credentials: false\n fetch-depth: 0\n - name: Fetch additional refs\n env:\n GH_AW_FETCH_TOKEN: ${{ secrets.GH_AW_GITHUB_MCP_SERVER_TOKEN || secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}\n run: |\n header=$(printf \"x-access-token:%s\" \"${GH_AW_FETCH_TOKEN}\" | base64 -w 0)\n git -c \"http.extraheader=Authorization: Basic ${header}\" fetch origin '+refs/heads/*:refs/remotes/origin/*'\n - name: Create gh-aw temp directory\n run: bash \"${RUNNER_TEMP}/gh-aw/actions/create_gh_aw_tmp_dir.sh\"\n - name: Configure gh CLI for GitHub Enterprise\n run: bash \"${RUNNER_TEMP}/gh-aw/actions/configure_gh_for_ghe.sh\"\n env:\n GH_TOKEN: ${{ github.token }}\n - name: Start DIFC proxy for pre-agent gh calls\n env:\n GH_TOKEN: ${{ secrets.GH_AW_GITHUB_MCP_SERVER_TOKEN || secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}\n GITHUB_SERVER_URL: ${{ github.server_url }}\n DIFC_PROXY_POLICY: '{\"allow-only\":{\"min-integrity\":\"none\",\"repos\":\"all\"}}'\n DIFC_PROXY_IMAGE: 'ghcr.io/github/gh-aw-mcpg:v0.2.19'\n run: |\n bash \"${RUNNER_TEMP}/gh-aw/actions/start_difc_proxy.sh\"\n - name: Set GH_REPO for proxied steps\n run: |\n echo \"GH_REPO=${GITHUB_REPOSITORY}\" >> \"$GITHUB_ENV\"\n - env:\n GH_TOKEN: ${{ github.token }}\n name: Fetch repo data for task weighting\n run: \"mkdir -p /tmp/gh-aw\\n\\n# Fetch open issues with labels (up to 500)\\ngh issue list --state open --limit 500 --json number,labels > /tmp/gh-aw/issues.json\\n\\n# Fetch open PRs with titles (up to 200)\\ngh pr list --state open --limit 200 --json number,title > /tmp/gh-aw/prs.json\\n\\n# Compute task weights and select two tasks for this run\\npython3 - << 'EOF'\\nimport json, random, os\\n\\nwith open('/tmp/gh-aw/issues.json') as f:\\n issues = json.load(f)\\nwith open('/tmp/gh-aw/prs.json') as f:\\n prs = json.load(f)\\n\\nopen_issues = len(issues)\\nunlabelled = sum(1 for i in issues if not i.get('labels'))\\nrepo_assist_prs = sum(1 for p in prs if p['title'].startswith('[Repo Assist]'))\\nother_prs = sum(1 for p in prs if not p['title'].startswith('[Repo Assist]'))\\n\\ntask_names = {\\n 1: 'Issue Labelling',\\n 2: 'Issue Investigation and Comment',\\n 3: 'Issue Investigation and Fix',\\n 4: 'Engineering Investments',\\n 5: 'Coding Improvements',\\n 6: 'Maintain Repo Assist PRs',\\n 7: 'Stale PR Nudges',\\n 8: 'Performance Improvements',\\n 9: 'Testing Improvements',\\n 10: 'Take the Repository Forward',\\n}\\n\\nweights = {\\n 1: 1 + 3 * unlabelled,\\n 2: 3 + 1 * open_issues,\\n 3: 3 + 0.7 * open_issues,\\n 4: 5 + 0.2 * open_issues,\\n 5: 5 + 0.1 * open_issues,\\n 6: float(repo_assist_prs),\\n 7: 0.1 * other_prs,\\n 8: 3 + 0.05 * open_issues,\\n 9: 3 + 0.05 * open_issues,\\n 10: 3 + 0.05 * open_issues,\\n}\\n\\n# Seed with run ID for reproducibility within a run\\nrun_id = int(os.environ.get('GITHUB_RUN_ID', '0'))\\nrng = random.Random(run_id)\\n\\ntask_ids = list(weights.keys())\\ntask_weights = [weights[t] for t in task_ids]\\n\\n# Weighted sample without replacement (pick 2 distinct tasks)\\nchosen, seen = [], set()\\nfor t in rng.choices(task_ids, weights=task_weights, k=30):\\n if t not in seen:\\n seen.add(t)\\n chosen.append(t)\\n if len(chosen) == 2:\\n break\\n\\nprint('=== Repo Assist Task Selection ===')\\nprint(f'Open issues : {open_issues}')\\nprint(f'Unlabelled issues : {unlabelled}')\\nprint(f'Repo Assist PRs : {repo_assist_prs}')\\nprint(f'Other open PRs : {other_prs}')\\nprint()\\nprint('Task weights:')\\nfor t, w in weights.items():\\n tag = ' <-- SELECTED' if t in chosen else ''\\n print(f' Task {t:2d} ({task_names[t]}): weight {w:6.1f}{tag}')\\nprint()\\nprint(f'Selected tasks for this run: Task {chosen[0]} ({task_names[chosen[0]]}) and Task {chosen[1]} ({task_names[chosen[1]]})')\\n\\nresult = {\\n 'open_issues': open_issues, 'unlabelled_issues': unlabelled,\\n 'repo_assist_prs': repo_assist_prs, 'other_prs': other_prs,\\n 'task_names': task_names,\\n 'weights': {str(k): round(v, 2) for k, v in weights.items()},\\n 'selected_tasks': chosen,\\n}\\nwith open('/tmp/gh-aw/task_selection.json', 'w') as f:\\n json.dump(result, f, indent=2)\\nEOF\\n\"\n\n # Repo memory git-based storage configuration from frontmatter processed below\n - name: Clone repo-memory branch (default)\n env:\n GH_TOKEN: ${{ github.token }}\n GITHUB_SERVER_URL: ${{ github.server_url }}\n BRANCH_NAME: memory/repo-assist\n TARGET_REPO: ${{ github.repository }}\n MEMORY_DIR: /tmp/gh-aw/repo-memory/default\n CREATE_ORPHAN: true\n run: bash \"${RUNNER_TEMP}/gh-aw/actions/clone_repo_memory_branch.sh\"\n - name: Configure Git credentials\n env:\n REPO_NAME: ${{ github.repository }}\n SERVER_URL: ${{ github.server_url }}\n GITHUB_TOKEN: ${{ github.token }}\n run: |\n git config --global user.email \"github-actions[bot]@users.noreply.github.com\"\n git config --global user.name \"github-actions[bot]\"\n git config --global am.keepcr true\n # Re-authenticate git with GitHub token\n SERVER_URL_STRIPPED=\"${SERVER_URL#https://}\"\n git remote set-url origin \"https://x-access-token:${GITHUB_TOKEN}@${SERVER_URL_STRIPPED}/${REPO_NAME}.git\"\n echo \"Git configured with standard GitHub Actions identity\"\n - name: Checkout PR branch\n id: checkout-pr\n if: |\n github.event.pull_request || github.event.issue.pull_request\n uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9\n env:\n GH_TOKEN: ${{ secrets.GH_AW_GITHUB_MCP_SERVER_TOKEN || secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}\n with:\n github-token: ${{ secrets.GH_AW_GITHUB_MCP_SERVER_TOKEN || secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}\n script: |\n const { setupGlobals } = require('${{ runner.temp }}/gh-aw/actions/setup_globals.cjs');\n setupGlobals(core, github, context, exec, io, getOctokit);\n const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs');\n await main();\n - name: Install GitHub Copilot CLI\n run: bash \"${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh\" 1.0.21\n env:\n GH_HOST: github.com\n - name: Install AWF binary\n run: bash \"${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh\" v0.25.20\n - name: Parse integrity filter lists\n id: parse-guard-vars\n env:\n GH_AW_BLOCKED_USERS_VAR: ${{ vars.GH_AW_GITHUB_BLOCKED_USERS || '' }}\n GH_AW_TRUSTED_USERS_VAR: ${{ vars.GH_AW_GITHUB_TRUSTED_USERS || '' }}\n GH_AW_APPROVAL_LABELS_VAR: ${{ vars.GH_AW_GITHUB_APPROVAL_LABELS || '' }}\n run: bash \"${RUNNER_TEMP}/gh-aw/actions/parse_guard_list.sh\"\n - name: Stop DIFC proxy\n if: always()\n continue-on-error: true\n run: bash \"${RUNNER_TEMP}/gh-aw/actions/stop_difc_proxy.sh\"\n - name: Download container images\n run: bash \"${RUNNER_TEMP}/gh-aw/actions/download_docker_images.sh\" ghcr.io/github/gh-aw-firewall/agent:0.25.20@sha256:9161f2415a3306a344aca34dd671ee69f122317e0a512e66dc64c94b9c508682 ghcr.io/github/gh-aw-firewall/api-proxy:0.25.20@sha256:6971639e381e82e45134bcd333181f456df3a52cd6f818a3e3d6de068ff91519 ghcr.io/github/gh-aw-firewall/squid:0.25.20@sha256:5411d903f73ee597e6a084971c2adef3eb0bd405910df3ed7bf5e3d6bd58a236 ghcr.io/github/gh-aw-mcpg:v0.2.19@sha256:44d4d8de7e6c37aaea484eba489940c52df6a0b54078ddcbc9327592d5b3c3dd ghcr.io/github/github-mcp-server:v0.32.0@sha256:2763823c63bcca718ce53850a1d7fcf2f501ec84028394f1b63ce7e9f4f9be28 node:lts-alpine@sha256:d1b3b4da11eefd5941e7f0b9cf17783fc99d9c6fc34884a665f40a06dbdfc94f\n - name: Write Safe Outputs Config\n run: |\n mkdir -p \"${RUNNER_TEMP}/gh-aw/safeoutputs\"\n mkdir -p /tmp/gh-aw/safeoutputs\n mkdir -p /tmp/gh-aw/mcp-logs/safeoutputs\n cat > \"${RUNNER_TEMP}/gh-aw/safeoutputs/config.json\" << 'GH_AW_SAFE_OUTPUTS_CONFIG_0438119ce4975251_EOF'\n {\"add_comment\":{\"hide_older_comments\":true,\"max\":10,\"target\":\"*\"},\"add_labels\":{\"allowed\":[\"bug\",\"enhancement\",\"help wanted\",\"good first issue\",\"spam\",\"off topic\",\"documentation\",\"question\",\"duplicate\",\"wontfix\",\"needs triage\",\"needs investigation\",\"breaking change\",\"performance\",\"security\",\"refactor\"],\"max\":30,\"target\":\"*\"},\"create_issue\":{\"labels\":[\"automation\",\"repo-assist\"],\"max\":4,\"title_prefix\":\"[Repo Assist] \"},\"create_pull_request\":{\"draft\":true,\"labels\":[\"automation\",\"repo-assist\"],\"max\":4,\"max_patch_size\":1024,\"protected_files\":[\"package.json\",\"bun.lockb\",\"bunfig.toml\",\"deno.json\",\"deno.jsonc\",\"deno.lock\",\"global.json\",\"NuGet.Config\",\"Directory.Packages.props\",\"mix.exs\",\"mix.lock\",\"go.mod\",\"go.sum\",\"stack.yaml\",\"stack.yaml.lock\",\"pom.xml\",\"build.gradle\",\"build.gradle.kts\",\"settings.gradle\",\"settings.gradle.kts\",\"gradle.properties\",\"package-lock.json\",\"yarn.lock\",\"pnpm-lock.yaml\",\"npm-shrinkwrap.json\",\"requirements.txt\",\"Pipfile\",\"Pipfile.lock\",\"pyproject.toml\",\"setup.py\",\"setup.cfg\",\"Gemfile\",\"Gemfile.lock\",\"uv.lock\",\"CODEOWNERS\"],\"protected_files_policy\":\"fallback-to-issue\",\"protected_path_prefixes\":[\".github/\",\".agents/\"],\"title_prefix\":\"[Repo Assist] \"},\"create_report_incomplete_issue\":{},\"missing_data\":{},\"missing_tool\":{},\"noop\":{\"max\":1,\"report-as-issue\":\"true\"},\"push_repo_memory\":{\"memories\":[{\"dir\":\"/tmp/gh-aw/repo-memory/default\",\"id\":\"default\",\"max_file_count\":100,\"max_file_size\":10240,\"max_patch_size\":10240}]},\"push_to_pull_request_branch\":{\"if_no_changes\":\"warn\",\"max\":4,\"max_patch_size\":1024,\"protected_files\":[\"package.json\",\"bun.lockb\",\"bunfig.toml\",\"deno.json\",\"deno.jsonc\",\"deno.lock\",\"global.json\",\"NuGet.Config\",\"Directory.Packages.props\",\"mix.exs\",\"mix.lock\",\"go.mod\",\"go.sum\",\"stack.yaml\",\"stack.yaml.lock\",\"pom.xml\",\"build.gradle\",\"build.gradle.kts\",\"settings.gradle\",\"settings.gradle.kts\",\"gradle.properties\",\"package-lock.json\",\"yarn.lock\",\"pnpm-lock.yaml\",\"npm-shrinkwrap.json\",\"requirements.txt\",\"Pipfile\",\"Pipfile.lock\",\"pyproject.toml\",\"setup.py\",\"setup.cfg\",\"Gemfile\",\"Gemfile.lock\",\"uv.lock\",\"CODEOWNERS\"],\"protected_files_policy\":\"fallback-to-issue\",\"protected_path_prefixes\":[\".github/\",\".agents/\"],\"target\":\"*\",\"title_prefix\":\"[Repo Assist] \"},\"remove_labels\":{\"allowed\":[\"bug\",\"enhancement\",\"help wanted\",\"good first issue\",\"spam\",\"off topic\",\"documentation\",\"question\",\"duplicate\",\"wontfix\",\"needs triage\",\"needs investigation\",\"breaking change\",\"performance\",\"security\",\"refactor\"],\"max\":5,\"target\":\"*\"},\"report_incomplete\":{},\"update_issue\":{\"allow_body\":true,\"max\":1,\"target\":\"*\",\"title_prefix\":\"[Repo Assist] \"}}\n GH_AW_SAFE_OUTPUTS_CONFIG_0438119ce4975251_EOF\n - name: Write Safe Outputs Tools\n env:\n GH_AW_TOOLS_META_JSON: |\n {\n \"description_suffixes\": {\n \"add_comment\": \" CONSTRAINTS: Maximum 10 comment(s) can be added. Target: *. Supports reply_to_id for discussion threading.\",\n \"add_labels\": \" CONSTRAINTS: Maximum 30 label(s) can be added. Only these labels are allowed: [\\\"bug\\\" \\\"enhancement\\\" \\\"help wanted\\\" \\\"good first issue\\\" \\\"spam\\\" \\\"off topic\\\" \\\"documentation\\\" \\\"question\\\" \\\"duplicate\\\" \\\"wontfix\\\" \\\"needs triage\\\" \\\"needs investigation\\\" \\\"breaking change\\\" \\\"performance\\\" \\\"security\\\" \\\"refactor\\\"]. Target: *.\",\n \"create_issue\": \" CONSTRAINTS: Maximum 4 issue(s) can be created. Title will be prefixed with \\\"[Repo Assist] \\\". Labels [\\\"automation\\\" \\\"repo-assist\\\"] will be automatically added.\",\n \"create_pull_request\": \" CONSTRAINTS: Maximum 4 pull request(s) can be created. Title will be prefixed with \\\"[Repo Assist] \\\". Labels [\\\"automation\\\" \\\"repo-assist\\\"] will be automatically added. PRs will be created as drafts.\",\n \"push_to_pull_request_branch\": \" CONSTRAINTS: Maximum 4 push(es) can be made. The target pull request title must start with \\\"[Repo Assist] \\\".\",\n \"remove_labels\": \" CONSTRAINTS: Maximum 5 label(s) can be removed. Only these labels can be removed: [bug enhancement help wanted good first issue spam off topic documentation question duplicate wontfix needs triage needs investigation breaking change performance security refactor]. Target: *.\",\n \"update_issue\": \" CONSTRAINTS: Maximum 1 issue(s) can be updated. Target: *. The target issue title must start with \\\"[Repo Assist] \\\".\"\n },\n \"repo_params\": {},\n \"dynamic_tools\": []\n }\n GH_AW_VALIDATION_JSON: |\n {\n \"add_comment\": {\n \"defaultMax\": 1,\n \"fields\": {\n \"body\": {\n \"required\": true,\n \"type\": \"string\",\n \"sanitize\": true,\n \"maxLength\": 65000\n },\n \"item_number\": {\n \"issueOrPRNumber\": true\n },\n \"reply_to_id\": {\n \"type\": \"string\",\n \"maxLength\": 256\n },\n \"repo\": {\n \"type\": \"string\",\n \"maxLength\": 256\n }\n }\n },\n \"add_labels\": {\n \"defaultMax\": 5,\n \"fields\": {\n \"item_number\": {\n \"issueNumberOrTemporaryId\": true\n },\n \"labels\": {\n \"required\": true,\n \"type\": \"array\",\n \"itemType\": \"string\",\n \"itemSanitize\": true,\n \"itemMaxLength\": 128\n },\n \"repo\": {\n \"type\": \"string\",\n \"maxLength\": 256\n }\n }\n },\n \"create_issue\": {\n \"defaultMax\": 1,\n \"fields\": {\n \"body\": {\n \"required\": true,\n \"type\": \"string\",\n \"sanitize\": true,\n \"maxLength\": 65000\n },\n \"labels\": {\n \"type\": \"array\",\n \"itemType\": \"string\",\n \"itemSanitize\": true,\n \"itemMaxLength\": 128\n },\n \"parent\": {\n \"issueOrPRNumber\": true\n },\n \"repo\": {\n \"type\": \"string\",\n \"maxLength\": 256\n },\n \"temporary_id\": {\n \"type\": \"string\"\n },\n \"title\": {\n \"required\": true,\n \"type\": \"string\",\n \"sanitize\": true,\n \"maxLength\": 128\n }\n }\n },\n \"create_pull_request\": {\n \"defaultMax\": 1,\n \"fields\": {\n \"body\": {\n \"required\": true,\n \"type\": \"string\",\n \"sanitize\": true,\n \"maxLength\": 65000\n },\n \"branch\": {\n \"required\": true,\n \"type\": \"string\",\n \"sanitize\": true,\n \"maxLength\": 256\n },\n \"draft\": {\n \"type\": \"boolean\"\n },\n \"labels\": {\n \"type\": \"array\",\n \"itemType\": \"string\",\n \"itemSanitize\": true,\n \"itemMaxLength\": 128\n },\n \"repo\": {\n \"type\": \"string\",\n \"maxLength\": 256\n },\n \"title\": {\n \"required\": true,\n \"type\": \"string\",\n \"sanitize\": true,\n \"maxLength\": 128\n }\n }\n },\n \"missing_data\": {\n \"defaultMax\": 20,\n \"fields\": {\n \"alternatives\": {\n \"type\": \"string\",\n \"sanitize\": true,\n \"maxLength\": 256\n },\n \"context\": {\n \"type\": \"string\",\n \"sanitize\": true,\n \"maxLength\": 256\n },\n \"data_type\": {\n \"type\": \"string\",\n \"sanitize\": true,\n \"maxLength\": 128\n },\n \"reason\": {\n \"type\": \"string\",\n \"sanitize\": true,\n \"maxLength\": 256\n }\n }\n },\n \"missing_tool\": {\n \"defaultMax\": 20,\n \"fields\": {\n \"alternatives\": {\n \"type\": \"string\",\n \"sanitize\": true,\n \"maxLength\": 512\n },\n \"reason\": {\n \"required\": true,\n \"type\": \"string\",\n \"sanitize\": true,\n \"maxLength\": 256\n },\n \"tool\": {\n \"type\": \"string\",\n \"sanitize\": true,\n \"maxLength\": 128\n }\n }\n },\n \"noop\": {\n \"defaultMax\": 1,\n \"fields\": {\n \"message\": {\n \"required\": true,\n \"type\": \"string\",\n \"sanitize\": true,\n \"maxLength\": 65000\n }\n }\n },\n \"push_to_pull_request_branch\": {\n \"defaultMax\": 1,\n \"fields\": {\n \"branch\": {\n \"required\": true,\n \"type\": \"string\",\n \"sanitize\": true,\n \"maxLength\": 256\n },\n \"message\": {\n \"required\": true,\n \"type\": \"string\",\n \"sanitize\": true,\n \"maxLength\": 65000\n },\n \"pull_request_number\": {\n \"issueOrPRNumber\": true\n }\n }\n },\n \"remove_labels\": {\n \"defaultMax\": 5,\n \"fields\": {\n \"item_number\": {\n \"issueNumberOrTemporaryId\": true\n },\n \"labels\": {\n \"required\": true,\n \"type\": \"array\",\n \"itemType\": \"string\",\n \"itemSanitize\": true,\n \"itemMaxLength\": 128\n },\n \"repo\": {\n \"type\": \"string\",\n \"maxLength\": 256\n }\n }\n },\n \"report_incomplete\": {\n \"defaultMax\": 5,\n \"fields\": {\n \"details\": {\n \"type\": \"string\",\n \"sanitize\": true,\n \"maxLength\": 65000\n },\n \"reason\": {\n \"required\": true,\n \"type\": \"string\",\n \"sanitize\": true,\n \"maxLength\": 1024\n }\n }\n },\n \"update_issue\": {\n \"defaultMax\": 1,\n \"fields\": {\n \"assignees\": {\n \"type\": \"array\",\n \"itemType\": \"string\",\n \"itemSanitize\": true,\n \"itemMaxLength\": 39\n },\n \"body\": {\n \"type\": \"string\",\n \"sanitize\": true,\n \"maxLength\": 65000\n },\n \"issue_number\": {\n \"issueOrPRNumber\": true\n },\n \"labels\": {\n \"type\": \"array\",\n \"itemType\": \"string\",\n \"itemSanitize\": true,\n \"itemMaxLength\": 128\n },\n \"milestone\": {\n \"optionalPositiveInteger\": true\n },\n \"operation\": {\n \"type\": \"string\",\n \"enum\": [\n \"replace\",\n \"append\",\n \"prepend\",\n \"replace-island\"\n ]\n },\n \"repo\": {\n \"type\": \"string\",\n \"maxLength\": 256\n },\n \"status\": {\n \"type\": \"string\",\n \"enum\": [\n \"open\",\n \"closed\"\n ]\n },\n \"title\": {\n \"type\": \"string\",\n \"sanitize\": true,\n \"maxLength\": 128\n }\n },\n \"customValidation\": \"requiresOneOf:status,title,body\"\n }\n }\n uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9\n with:\n script: |\n const { setupGlobals } = require('${{ runner.temp }}/gh-aw/actions/setup_globals.cjs');\n setupGlobals(core, github, context, exec, io, getOctokit);\n const { main } = require('${{ runner.temp }}/gh-aw/actions/generate_safe_outputs_tools.cjs');\n await main();\n - name: Generate Safe Outputs MCP Server Config\n id: safe-outputs-config\n run: |\n # Generate a secure random API key (360 bits of entropy, 40+ chars)\n # Mask immediately to prevent timing vulnerabilities\n API_KEY=$(openssl rand -base64 45 | tr -d '/+=')\n echo \"::add-mask::${API_KEY}\"\n \n PORT=3001\n \n # Set outputs for next steps\n {\n echo \"safe_outputs_api_key=${API_KEY}\"\n echo \"safe_outputs_port=${PORT}\"\n } >> \"$GITHUB_OUTPUT\"\n \n echo \"Safe Outputs MCP server will run on port ${PORT}\"\n \n - name: Start Safe Outputs MCP HTTP Server\n id: safe-outputs-start\n env:\n DEBUG: '*'\n GH_AW_SAFE_OUTPUTS: ${{ steps.set-runtime-paths.outputs.GH_AW_SAFE_OUTPUTS }}\n GH_AW_SAFE_OUTPUTS_PORT: ${{ steps.safe-outputs-config.outputs.safe_outputs_port }}\n GH_AW_SAFE_OUTPUTS_API_KEY: ${{ steps.safe-outputs-config.outputs.safe_outputs_api_key }}\n GH_AW_SAFE_OUTPUTS_TOOLS_PATH: ${{ runner.temp }}/gh-aw/safeoutputs/tools.json\n GH_AW_SAFE_OUTPUTS_CONFIG_PATH: ${{ runner.temp }}/gh-aw/safeoutputs/config.json\n GH_AW_MCP_LOG_DIR: /tmp/gh-aw/mcp-logs/safeoutputs\n run: |\n # Environment variables are set above to prevent template injection\n export DEBUG\n export GH_AW_SAFE_OUTPUTS\n export GH_AW_SAFE_OUTPUTS_PORT\n export GH_AW_SAFE_OUTPUTS_API_KEY\n export GH_AW_SAFE_OUTPUTS_TOOLS_PATH\n export GH_AW_SAFE_OUTPUTS_CONFIG_PATH\n export GH_AW_MCP_LOG_DIR\n \n bash \"${RUNNER_TEMP}/gh-aw/actions/start_safe_outputs_server.sh\"\n \n - name: Start MCP Gateway\n id: start-mcp-gateway\n env:\n GH_AW_SAFE_OUTPUTS: ${{ steps.set-runtime-paths.outputs.GH_AW_SAFE_OUTPUTS }}\n GH_AW_SAFE_OUTPUTS_API_KEY: ${{ steps.safe-outputs-start.outputs.api_key }}\n GH_AW_SAFE_OUTPUTS_PORT: ${{ steps.safe-outputs-start.outputs.port }}\n GITHUB_MCP_SERVER_TOKEN: ${{ secrets.GH_AW_GITHUB_MCP_SERVER_TOKEN || secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}\n run: |\n set -eo pipefail\n mkdir -p /tmp/gh-aw/mcp-config\n \n # Export gateway environment variables for MCP config and gateway script\n export MCP_GATEWAY_PORT=\"80\"\n export MCP_GATEWAY_DOMAIN=\"host.docker.internal\"\n MCP_GATEWAY_API_KEY=$(openssl rand -base64 45 | tr -d '/+=')\n echo \"::add-mask::${MCP_GATEWAY_API_KEY}\"\n export MCP_GATEWAY_API_KEY\n export MCP_GATEWAY_PAYLOAD_DIR=\"/tmp/gh-aw/mcp-payloads\"\n mkdir -p \"${MCP_GATEWAY_PAYLOAD_DIR}\"\n export MCP_GATEWAY_PAYLOAD_SIZE_THRESHOLD=\"524288\"\n export DEBUG=\"*\"\n \n export GH_AW_ENGINE=\"copilot\"\n export MCP_GATEWAY_DOCKER_COMMAND='docker run -i --rm --network host -v /var/run/docker.sock:/var/run/docker.sock -e MCP_GATEWAY_PORT -e MCP_GATEWAY_DOMAIN -e MCP_GATEWAY_API_KEY -e MCP_GATEWAY_PAYLOAD_DIR -e MCP_GATEWAY_PAYLOAD_SIZE_THRESHOLD -e DEBUG -e MCP_GATEWAY_LOG_DIR -e GH_AW_MCP_LOG_DIR -e GH_AW_SAFE_OUTPUTS -e GH_AW_SAFE_OUTPUTS_CONFIG_PATH -e GH_AW_SAFE_OUTPUTS_TOOLS_PATH -e GH_AW_ASSETS_BRANCH -e GH_AW_ASSETS_MAX_SIZE_KB -e GH_AW_ASSETS_ALLOWED_EXTS -e DEFAULT_BRANCH -e GITHUB_MCP_SERVER_TOKEN -e GITHUB_MCP_GUARD_MIN_INTEGRITY -e GITHUB_MCP_GUARD_REPOS -e GITHUB_REPOSITORY -e GITHUB_SERVER_URL -e GITHUB_SHA -e GITHUB_WORKSPACE -e GITHUB_TOKEN -e GITHUB_RUN_ID -e GITHUB_RUN_NUMBER -e GITHUB_RUN_ATTEMPT -e GITHUB_JOB -e GITHUB_ACTION -e GITHUB_EVENT_NAME -e GITHUB_EVENT_PATH -e GITHUB_ACTOR -e GITHUB_ACTOR_ID -e GITHUB_TRIGGERING_ACTOR -e GITHUB_WORKFLOW -e GITHUB_WORKFLOW_REF -e GITHUB_WORKFLOW_SHA -e GITHUB_REF -e GITHUB_REF_NAME -e GITHUB_REF_TYPE -e GITHUB_HEAD_REF -e GITHUB_BASE_REF -e GH_AW_SAFE_OUTPUTS_PORT -e GH_AW_SAFE_OUTPUTS_API_KEY -v /tmp/gh-aw/mcp-payloads:/tmp/gh-aw/mcp-payloads:rw -v /opt:/opt:ro -v /tmp:/tmp:rw -v '\"${GITHUB_WORKSPACE}\"':'\"${GITHUB_WORKSPACE}\"':rw ghcr.io/github/gh-aw-mcpg:v0.2.19'\n \n mkdir -p /home/runner/.copilot\n cat << GH_AW_MCP_CONFIG_567b4b2b7203b398_EOF | bash \"${RUNNER_TEMP}/gh-aw/actions/start_mcp_gateway.sh\"\n {\n \"mcpServers\": {\n \"github\": {\n \"type\": \"stdio\",\n \"container\": \"ghcr.io/github/github-mcp-server:v0.32.0\",\n \"env\": {\n \"GITHUB_HOST\": \"\\${GITHUB_SERVER_URL}\",\n \"GITHUB_PERSONAL_ACCESS_TOKEN\": \"\\${GITHUB_MCP_SERVER_TOKEN}\",\n \"GITHUB_READ_ONLY\": \"1\",\n \"GITHUB_TOOLSETS\": \"all\"\n },\n \"guard-policies\": {\n \"allow-only\": {\n \"approval-labels\": ${{ steps.parse-guard-vars.outputs.approval_labels }},\n \"blocked-users\": ${{ steps.parse-guard-vars.outputs.blocked_users }},\n \"min-integrity\": \"none\",\n \"repos\": \"all\",\n \"trusted-users\": ${{ steps.parse-guard-vars.outputs.trusted_users }}\n }\n }\n },\n \"safeoutputs\": {\n \"type\": \"http\",\n \"url\": \"http://host.docker.internal:$GH_AW_SAFE_OUTPUTS_PORT\",\n \"headers\": {\n \"Authorization\": \"\\${GH_AW_SAFE_OUTPUTS_API_KEY}\"\n },\n \"guard-policies\": {\n \"write-sink\": {\n \"accept\": [\n \"*\"\n ]\n }\n }\n }\n },\n \"gateway\": {\n \"port\": $MCP_GATEWAY_PORT,\n \"domain\": \"${MCP_GATEWAY_DOMAIN}\",\n \"apiKey\": \"${MCP_GATEWAY_API_KEY}\",\n \"payloadDir\": \"${MCP_GATEWAY_PAYLOAD_DIR}\"\n }\n }\n GH_AW_MCP_CONFIG_567b4b2b7203b398_EOF\n - name: Download activation artifact\n uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1\n with:\n name: activation\n path: /tmp/gh-aw\n - name: Clean git credentials\n continue-on-error: true\n run: bash \"${RUNNER_TEMP}/gh-aw/actions/clean_git_credentials.sh\"\n - name: Execute GitHub Copilot CLI\n id: agentic_execution\n # Copilot CLI tool arguments (sorted):\n timeout-minutes: 60\n run: |\n set -o pipefail\n touch /tmp/gh-aw/agent-step-summary.md\n (umask 177 && touch /tmp/gh-aw/agent-stdio.log)\n # shellcheck disable=SC1003\n sudo -E awf --container-workdir \"${GITHUB_WORKSPACE}\" --mount \"${RUNNER_TEMP}/gh-aw:${RUNNER_TEMP}/gh-aw:ro\" --mount \"${RUNNER_TEMP}/gh-aw:/host${RUNNER_TEMP}/gh-aw:ro\" --env-all --exclude-env COPILOT_GITHUB_TOKEN --exclude-env GITHUB_MCP_SERVER_TOKEN --exclude-env MCP_GATEWAY_API_KEY --allow-domains '*.gradle-enterprise.cloud,*.pythonhosted.org,*.vsblob.vsassets.io,adoptium.net,anaconda.org,api.adoptium.net,api.business.githubcopilot.com,api.enterprise.githubcopilot.com,api.foojay.io,api.github.com,api.githubcopilot.com,api.individual.githubcopilot.com,api.npms.io,api.nuget.org,api.snapcraft.io,archive.apache.org,archive.ubuntu.com,azure.archive.ubuntu.com,azuresearch-usnc.nuget.org,azuresearch-ussc.nuget.org,binstar.org,bootstrap.pypa.io,builds.dotnet.microsoft.com,bun.sh,cdn.azul.com,cdn.jsdelivr.net,central.sonatype.com,ci.dot.net,conda.anaconda.org,conda.binstar.org,crates.io,crl.geotrust.com,crl.globalsign.com,crl.identrust.com,crl.sectigo.com,crl.thawte.com,crl.usertrust.com,crl.verisign.com,crl3.digicert.com,crl4.digicert.com,crls.ssl.com,dc.services.visualstudio.com,deb.nodesource.com,deno.land,develocity.apache.org,dist.nuget.org,dl.google.com,dlcdn.apache.org,dot.net,dotnet.microsoft.com,dotnetcli.blob.core.windows.net,download.eclipse.org,download.java.net,download.oracle.com,downloads.gradle-dn.com,esm.sh,files.pythonhosted.org,ge.spockframework.org,get.pnpm.io,github.com,googleapis.deno.dev,googlechromelabs.github.io,gradle.org,host.docker.internal,index.crates.io,jcenter.bintray.com,jdk.java.net,json-schema.org,json.schemastore.org,jsr.io,keyserver.ubuntu.com,maven-central.storage-download.googleapis.com,maven.apache.org,maven.google.com,maven.oracle.com,maven.pkg.github.com,nodejs.org,npm.pkg.github.com,npmjs.com,npmjs.org,nuget.org,nuget.pkg.github.com,nugetregistryv2prod.blob.core.windows.net,ocsp.digicert.com,ocsp.geotrust.com,ocsp.globalsign.com,ocsp.identrust.com,ocsp.sectigo.com,ocsp.ssl.com,ocsp.thawte.com,ocsp.usertrust.com,ocsp.verisign.com,oneocsp.microsoft.com,packagecloud.io,packages.cloud.google.com,packages.microsoft.com,pip.pypa.io,pkgs.dev.azure.com,plugins-artifacts.gradle.org,plugins.gradle.org,ppa.launchpad.net,pypi.org,pypi.python.org,raw.githubusercontent.com,registry.bower.io,registry.npmjs.com,registry.npmjs.org,registry.yarnpkg.com,repo.anaconda.com,repo.continuum.io,repo.gradle.org,repo.grails.org,repo.maven.apache.org,repo.spring.io,repo.yarnpkg.com,repo1.maven.org,repository.apache.org,s.symcb.com,s.symcd.com,scans-in.gradle.com,security.ubuntu.com,services.gradle.org,sh.rustup.rs,skimdb.npmjs.com,static.crates.io,static.rust-lang.org,storage.googleapis.com,telemetry.enterprise.githubcopilot.com,telemetry.vercel.com,ts-crl.ws.symantec.com,ts-ocsp.ws.symantec.com,www.googleapis.com,www.java.com,www.microsoft.com,www.npmjs.com,www.npmjs.org,yarnpkg.com' --log-level info --proxy-logs-dir /tmp/gh-aw/sandbox/firewall/logs --audit-dir /tmp/gh-aw/sandbox/firewall/audit --enable-host-access --image-tag 0.25.20 --skip-pull --enable-api-proxy \\\n -- /bin/bash -c 'node ${RUNNER_TEMP}/gh-aw/actions/copilot_driver.cjs /usr/local/bin/copilot --add-dir /tmp/gh-aw/ --log-level all --log-dir /tmp/gh-aw/sandbox/agent/logs/ --disable-builtin-mcps --no-ask-user --allow-all-tools --allow-all-paths --add-dir \"${GITHUB_WORKSPACE}\" --prompt \"$(cat /tmp/gh-aw/aw-prompts/prompt.txt)\"' 2>&1 | tee -a /tmp/gh-aw/agent-stdio.log\n env:\n COPILOT_AGENT_RUNNER_TYPE: STANDALONE\n COPILOT_GITHUB_TOKEN: ${{ secrets.COPILOT_GITHUB_TOKEN }}\n COPILOT_MODEL: ${{ vars.GH_AW_MODEL_AGENT_COPILOT || '' }}\n GH_AW_MCP_CONFIG: /home/runner/.copilot/mcp-config.json\n GH_AW_PHASE: agent\n GH_AW_PROMPT: /tmp/gh-aw/aw-prompts/prompt.txt\n GH_AW_SAFE_OUTPUTS: ${{ steps.set-runtime-paths.outputs.GH_AW_SAFE_OUTPUTS }}\n GH_AW_VERSION: v0.68.3\n GITHUB_API_URL: ${{ github.api_url }}\n GITHUB_AW: true\n GITHUB_HEAD_REF: ${{ github.head_ref }}\n GITHUB_MCP_SERVER_TOKEN: ${{ secrets.GH_AW_GITHUB_MCP_SERVER_TOKEN || secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}\n GITHUB_REF_NAME: ${{ github.ref_name }}\n GITHUB_SERVER_URL: ${{ github.server_url }}\n GITHUB_STEP_SUMMARY: /tmp/gh-aw/agent-step-summary.md\n GITHUB_WORKSPACE: ${{ github.workspace }}\n GIT_AUTHOR_EMAIL: github-actions[bot]@users.noreply.github.com\n GIT_AUTHOR_NAME: github-actions[bot]\n GIT_COMMITTER_EMAIL: github-actions[bot]@users.noreply.github.com\n GIT_COMMITTER_NAME: github-actions[bot]\n XDG_CONFIG_HOME: /home/runner\n - name: Detect Copilot errors\n id: detect-copilot-errors\n if: always()\n continue-on-error: true\n run: node \"${RUNNER_TEMP}/gh-aw/actions/detect_copilot_errors.cjs\"\n - name: Configure Git credentials\n env:\n REPO_NAME: ${{ github.repository }}\n SERVER_URL: ${{ github.server_url }}\n GITHUB_TOKEN: ${{ github.token }}\n run: |\n git config --global user.email \"github-actions[bot]@users.noreply.github.com\"\n git config --global user.name \"github-actions[bot]\"\n git config --global am.keepcr true\n # Re-authenticate git with GitHub token\n SERVER_URL_STRIPPED=\"${SERVER_URL#https://}\"\n git remote set-url origin \"https://x-access-token:${GITHUB_TOKEN}@${SERVER_URL_STRIPPED}/${REPO_NAME}.git\"\n echo \"Git configured with standard GitHub Actions identity\"\n - name: Copy Copilot session state files to logs\n if: always()\n continue-on-error: true\n run: bash \"${RUNNER_TEMP}/gh-aw/actions/copy_copilot_session_state.sh\"\n - name: Stop MCP Gateway\n if: always()\n continue-on-error: true\n env:\n MCP_GATEWAY_PORT: ${{ steps.start-mcp-gateway.outputs.gateway-port }}\n MCP_GATEWAY_API_KEY: ${{ steps.start-mcp-gateway.outputs.gateway-api-key }}\n GATEWAY_PID: ${{ steps.start-mcp-gateway.outputs.gateway-pid }}\n run: |\n bash \"${RUNNER_TEMP}/gh-aw/actions/stop_mcp_gateway.sh\" \"$GATEWAY_PID\"\n - name: Redact secrets in logs\n if: always()\n uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9\n with:\n script: |\n const { setupGlobals } = require('${{ runner.temp }}/gh-aw/actions/setup_globals.cjs');\n setupGlobals(core, github, context, exec, io, getOctokit);\n const { main } = require('${{ runner.temp }}/gh-aw/actions/redact_secrets.cjs');\n await main();\n env:\n GH_AW_SECRET_NAMES: 'COPILOT_GITHUB_TOKEN,GH_AW_GITHUB_MCP_SERVER_TOKEN,GH_AW_GITHUB_TOKEN,GITHUB_TOKEN'\n SECRET_COPILOT_GITHUB_TOKEN: ${{ secrets.COPILOT_GITHUB_TOKEN }}\n SECRET_GH_AW_GITHUB_MCP_SERVER_TOKEN: ${{ secrets.GH_AW_GITHUB_MCP_SERVER_TOKEN }}\n SECRET_GH_AW_GITHUB_TOKEN: ${{ secrets.GH_AW_GITHUB_TOKEN }}\n SECRET_GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}\n - name: Append agent step summary\n if: always()\n run: bash \"${RUNNER_TEMP}/gh-aw/actions/append_agent_step_summary.sh\"\n - name: Copy Safe Outputs\n if: always()\n env:\n GH_AW_SAFE_OUTPUTS: ${{ steps.set-runtime-paths.outputs.GH_AW_SAFE_OUTPUTS }}\n run: |\n mkdir -p /tmp/gh-aw\n cp \"$GH_AW_SAFE_OUTPUTS\" /tmp/gh-aw/safeoutputs.jsonl 2>/dev/null || true\n - name: Ingest agent output\n id: collect_output\n if: always()\n uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9\n env:\n GH_AW_SAFE_OUTPUTS: ${{ steps.set-runtime-paths.outputs.GH_AW_SAFE_OUTPUTS }}\n GH_AW_ALLOWED_DOMAINS: \"*.gradle-enterprise.cloud,*.pythonhosted.org,*.vsblob.vsassets.io,adoptium.net,anaconda.org,api.adoptium.net,api.business.githubcopilot.com,api.enterprise.githubcopilot.com,api.foojay.io,api.github.com,api.githubcopilot.com,api.individual.githubcopilot.com,api.npms.io,api.nuget.org,api.snapcraft.io,archive.apache.org,archive.ubuntu.com,azure.archive.ubuntu.com,azuresearch-usnc.nuget.org,azuresearch-ussc.nuget.org,binstar.org,bootstrap.pypa.io,builds.dotnet.microsoft.com,bun.sh,cdn.azul.com,cdn.jsdelivr.net,central.sonatype.com,ci.dot.net,conda.anaconda.org,conda.binstar.org,crates.io,crl.geotrust.com,crl.globalsign.com,crl.identrust.com,crl.sectigo.com,crl.thawte.com,crl.usertrust.com,crl.verisign.com,crl3.digicert.com,crl4.digicert.com,crls.ssl.com,dc.services.visualstudio.com,deb.nodesource.com,deno.land,develocity.apache.org,dist.nuget.org,dl.google.com,dlcdn.apache.org,dot.net,dotnet.microsoft.com,dotnetcli.blob.core.windows.net,download.eclipse.org,download.java.net,download.oracle.com,downloads.gradle-dn.com,esm.sh,files.pythonhosted.org,ge.spockframework.org,get.pnpm.io,github.com,googleapis.deno.dev,googlechromelabs.github.io,gradle.org,host.docker.internal,index.crates.io,jcenter.bintray.com,jdk.java.net,json-schema.org,json.schemastore.org,jsr.io,keyserver.ubuntu.com,maven-central.storage-download.googleapis.com,maven.apache.org,maven.google.com,maven.oracle.com,maven.pkg.github.com,nodejs.org,npm.pkg.github.com,npmjs.com,npmjs.org,nuget.org,nuget.pkg.github.com,nugetregistryv2prod.blob.core.windows.net,ocsp.digicert.com,ocsp.geotrust.com,ocsp.globalsign.com,ocsp.identrust.com,ocsp.sectigo.com,ocsp.ssl.com,ocsp.thawte.com,ocsp.usertrust.com,ocsp.verisign.com,oneocsp.microsoft.com,packagecloud.io,packages.cloud.google.com,packages.microsoft.com,pip.pypa.io,pkgs.dev.azure.com,plugins-artifacts.gradle.org,plugins.gradle.org,ppa.launchpad.net,pypi.org,pypi.python.org,raw.githubusercontent.com,registry.bower.io,registry.npmjs.com,registry.npmjs.org,registry.yarnpkg.com,repo.anaconda.com,repo.continuum.io,repo.gradle.org,repo.grails.org,repo.maven.apache.org,repo.spring.io,repo.yarnpkg.com,repo1.maven.org,repository.apache.org,s.symcb.com,s.symcd.com,scans-in.gradle.com,security.ubuntu.com,services.gradle.org,sh.rustup.rs,skimdb.npmjs.com,static.crates.io,static.rust-lang.org,storage.googleapis.com,telemetry.enterprise.githubcopilot.com,telemetry.vercel.com,ts-crl.ws.symantec.com,ts-ocsp.ws.symantec.com,www.googleapis.com,www.java.com,www.microsoft.com,www.npmjs.com,www.npmjs.org,yarnpkg.com\"\n GITHUB_SERVER_URL: ${{ github.server_url }}\n GITHUB_API_URL: ${{ github.api_url }}\n GH_AW_COMMAND: repo-assist\n with:\n script: |\n const { setupGlobals } = require('${{ runner.temp }}/gh-aw/actions/setup_globals.cjs');\n setupGlobals(core, github, context, exec, io, getOctokit);\n const { main } = require('${{ runner.temp }}/gh-aw/actions/collect_ndjson_output.cjs');\n await main();\n - name: Parse agent logs for step summary\n if: always()\n uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9\n env:\n GH_AW_AGENT_OUTPUT: /tmp/gh-aw/sandbox/agent/logs/\n with:\n script: |\n const { setupGlobals } = require('${{ runner.temp }}/gh-aw/actions/setup_globals.cjs');\n setupGlobals(core, github, context, exec, io, getOctokit);\n const { main } = require('${{ runner.temp }}/gh-aw/actions/parse_copilot_log.cjs');\n await main();\n - name: Parse MCP Gateway logs for step summary\n if: always()\n id: parse-mcp-gateway\n uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9\n with:\n script: |\n const { setupGlobals } = require('${{ runner.temp }}/gh-aw/actions/setup_globals.cjs');\n setupGlobals(core, github, context, exec, io, getOctokit);\n const { main } = require('${{ runner.temp }}/gh-aw/actions/parse_mcp_gateway_log.cjs');\n await main();\n - name: Print firewall logs\n if: always()\n continue-on-error: true\n env:\n AWF_LOGS_DIR: /tmp/gh-aw/sandbox/firewall/logs\n run: |\n # Fix permissions on firewall logs so they can be uploaded as artifacts\n # AWF runs with sudo, creating files owned by root\n sudo chmod -R a+r /tmp/gh-aw/sandbox/firewall/logs 2>/dev/null || true\n # Only run awf logs summary if awf command exists (it may not be installed if workflow failed before install step)\n if command -v awf &> /dev/null; then\n awf logs summary | tee -a \"$GITHUB_STEP_SUMMARY\"\n else\n echo 'AWF binary not installed, skipping firewall log summary'\n fi\n - name: Parse token usage for step summary\n if: always()\n continue-on-error: true\n uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9\n with:\n script: |\n const { setupGlobals } = require('${{ runner.temp }}/gh-aw/actions/setup_globals.cjs');\n setupGlobals(core, github, context, exec, io, getOctokit);\n const { main } = require('${{ runner.temp }}/gh-aw/actions/parse_token_usage.cjs');\n await main();\n - name: Write agent output placeholder if missing\n if: always()\n run: |\n if [ ! -f /tmp/gh-aw/agent_output.json ]; then\n echo '{\"items\":[]}' > /tmp/gh-aw/agent_output.json\n fi\n # Upload repo memory as artifacts for push job\n - name: Upload repo-memory artifact (default)\n if: always()\n uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1\n with:\n name: repo-memory-default\n path: /tmp/gh-aw/repo-memory/default\n retention-days: 1\n if-no-files-found: ignore\n - name: Upload agent artifacts\n if: always()\n continue-on-error: true\n uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1\n with:\n name: agent\n path: |\n /tmp/gh-aw/aw-prompts/prompt.txt\n /tmp/gh-aw/sandbox/agent/logs/\n /tmp/gh-aw/redacted-urls.log\n /tmp/gh-aw/mcp-logs/\n /tmp/gh-aw/proxy-logs/\n !/tmp/gh-aw/proxy-logs/proxy-tls/\n /tmp/gh-aw/agent_usage.json\n /tmp/gh-aw/agent-stdio.log\n /tmp/gh-aw/agent/\n /tmp/gh-aw/github_rate_limits.jsonl\n /tmp/gh-aw/safeoutputs.jsonl\n /tmp/gh-aw/agent_output.json\n /tmp/gh-aw/aw-*.patch\n /tmp/gh-aw/aw-*.bundle\n /tmp/gh-aw/sandbox/firewall/logs/\n /tmp/gh-aw/sandbox/firewall/audit/\n if-no-files-found: ignore\n\n conclusion:\n needs:\n - activation\n - agent\n - detection\n - push_repo_memory\n - safe_outputs\n if: >\n always() && (needs.agent.result != 'skipped' || needs.activation.outputs.lockdown_check_failed == 'true' ||\n needs.activation.outputs.stale_lock_file_failed == 'true')\n runs-on: ubuntu-slim\n permissions:\n contents: write\n discussions: write\n issues: write\n pull-requests: write\n concurrency:\n group: \"gh-aw-conclusion-repo-assist\"\n cancel-in-progress: false\n outputs:\n incomplete_count: ${{ steps.report_incomplete.outputs.incomplete_count }}\n noop_message: ${{ steps.noop.outputs.noop_message }}\n tools_reported: ${{ steps.missing_tool.outputs.tools_reported }}\n total_count: ${{ steps.missing_tool.outputs.total_count }}\n steps:\n - name: Setup Scripts\n id: setup\n uses: github/gh-aw-actions/setup@ba90f2186d7ad780ec640f364005fa24e797b360 # v0.68.3\n with:\n destination: ${{ runner.temp }}/gh-aw/actions\n job-name: ${{ github.job }}\n trace-id: ${{ needs.activation.outputs.setup-trace-id }}\n - name: Download agent output artifact\n id: download-agent-output\n continue-on-error: true\n uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1\n with:\n name: agent\n path: /tmp/gh-aw/\n - name: Setup agent output environment variable\n id: setup-agent-output-env\n if: steps.download-agent-output.outcome == 'success'\n run: |\n mkdir -p /tmp/gh-aw/\n find \"/tmp/gh-aw/\" -type f -print\n echo \"GH_AW_AGENT_OUTPUT=/tmp/gh-aw/agent_output.json\" >> \"$GITHUB_OUTPUT\"\n - name: Process no-op messages\n id: noop\n uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9\n env:\n GH_AW_AGENT_OUTPUT: ${{ steps.setup-agent-output-env.outputs.GH_AW_AGENT_OUTPUT }}\n GH_AW_NOOP_MAX: \"1\"\n GH_AW_WORKFLOW_NAME: \"Repo Assist\"\n GH_AW_WORKFLOW_SOURCE: \"githubnext/agentics/workflows/repo-assist.md@3de4e604a36b5190a1c7dc4719c7341500ba8a95\"\n GH_AW_WORKFLOW_SOURCE_URL: \"${{ github.server_url }}/githubnext/agentics/blob/3de4e604a36b5190a1c7dc4719c7341500ba8a95/workflows/repo-assist.md\"\n GH_AW_RUN_URL: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}\n GH_AW_AGENT_CONCLUSION: ${{ needs.agent.result }}\n GH_AW_NOOP_REPORT_AS_ISSUE: \"true\"\n with:\n github-token: ${{ secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}\n script: |\n const { setupGlobals } = require('${{ runner.temp }}/gh-aw/actions/setup_globals.cjs');\n setupGlobals(core, github, context, exec, io, getOctokit);\n const { main } = require('${{ runner.temp }}/gh-aw/actions/handle_noop_message.cjs');\n await main();\n - name: Log detection run\n id: detection_runs\n uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9\n env:\n GH_AW_AGENT_OUTPUT: ${{ steps.setup-agent-output-env.outputs.GH_AW_AGENT_OUTPUT }}\n GH_AW_WORKFLOW_NAME: \"Repo Assist\"\n GH_AW_WORKFLOW_SOURCE: \"githubnext/agentics/workflows/repo-assist.md@3de4e604a36b5190a1c7dc4719c7341500ba8a95\"\n GH_AW_WORKFLOW_SOURCE_URL: \"${{ github.server_url }}/githubnext/agentics/blob/3de4e604a36b5190a1c7dc4719c7341500ba8a95/workflows/repo-assist.md\"\n GH_AW_RUN_URL: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}\n GH_AW_DETECTION_CONCLUSION: ${{ needs.detection.outputs.detection_conclusion }}\n GH_AW_DETECTION_REASON: ${{ needs.detection.outputs.detection_reason }}\n with:\n github-token: ${{ secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}\n script: |\n const { setupGlobals } = require('${{ runner.temp }}/gh-aw/actions/setup_globals.cjs');\n setupGlobals(core, github, context, exec, io, getOctokit);\n const { main } = require('${{ runner.temp }}/gh-aw/actions/handle_detection_runs.cjs');\n await main();\n - name: Record missing tool\n id: missing_tool\n uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9\n env:\n GH_AW_AGENT_OUTPUT: ${{ steps.setup-agent-output-env.outputs.GH_AW_AGENT_OUTPUT }}\n GH_AW_MISSING_TOOL_CREATE_ISSUE: \"true\"\n GH_AW_WORKFLOW_NAME: \"Repo Assist\"\n GH_AW_WORKFLOW_SOURCE: \"githubnext/agentics/workflows/repo-assist.md@3de4e604a36b5190a1c7dc4719c7341500ba8a95\"\n GH_AW_WORKFLOW_SOURCE_URL: \"${{ github.server_url }}/githubnext/agentics/blob/3de4e604a36b5190a1c7dc4719c7341500ba8a95/workflows/repo-assist.md\"\n with:\n github-token: ${{ secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}\n script: |\n const { setupGlobals } = require('${{ runner.temp }}/gh-aw/actions/setup_globals.cjs');\n setupGlobals(core, github, context, exec, io, getOctokit);\n const { main } = require('${{ runner.temp }}/gh-aw/actions/missing_tool.cjs');\n await main();\n - name: Record incomplete\n id: report_incomplete\n uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9\n env:\n GH_AW_AGENT_OUTPUT: ${{ steps.setup-agent-output-env.outputs.GH_AW_AGENT_OUTPUT }}\n GH_AW_REPORT_INCOMPLETE_CREATE_ISSUE: \"true\"\n GH_AW_WORKFLOW_NAME: \"Repo Assist\"\n GH_AW_WORKFLOW_SOURCE: \"githubnext/agentics/workflows/repo-assist.md@3de4e604a36b5190a1c7dc4719c7341500ba8a95\"\n GH_AW_WORKFLOW_SOURCE_URL: \"${{ github.server_url }}/githubnext/agentics/blob/3de4e604a36b5190a1c7dc4719c7341500ba8a95/workflows/repo-assist.md\"\n with:\n github-token: ${{ secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}\n script: |\n const { setupGlobals } = require('${{ runner.temp }}/gh-aw/actions/setup_globals.cjs');\n setupGlobals(core, github, context, exec, io, getOctokit);\n const { main } = require('${{ runner.temp }}/gh-aw/actions/report_incomplete_handler.cjs');\n await main();\n - name: Handle agent failure\n id: handle_agent_failure\n if: always()\n uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9\n env:\n GH_AW_AGENT_OUTPUT: ${{ steps.setup-agent-output-env.outputs.GH_AW_AGENT_OUTPUT }}\n GH_AW_WORKFLOW_NAME: \"Repo Assist\"\n GH_AW_WORKFLOW_SOURCE: \"githubnext/agentics/workflows/repo-assist.md@3de4e604a36b5190a1c7dc4719c7341500ba8a95\"\n GH_AW_WORKFLOW_SOURCE_URL: \"${{ github.server_url }}/githubnext/agentics/blob/3de4e604a36b5190a1c7dc4719c7341500ba8a95/workflows/repo-assist.md\"\n GH_AW_RUN_URL: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}\n GH_AW_AGENT_CONCLUSION: ${{ needs.agent.result }}\n GH_AW_WORKFLOW_ID: \"repo-assist\"\n GH_AW_ENGINE_ID: \"copilot\"\n GH_AW_SECRET_VERIFICATION_RESULT: ${{ needs.activation.outputs.secret_verification_result }}\n GH_AW_CHECKOUT_PR_SUCCESS: ${{ needs.agent.outputs.checkout_pr_success }}\n GH_AW_INFERENCE_ACCESS_ERROR: ${{ needs.agent.outputs.inference_access_error }}\n GH_AW_MCP_POLICY_ERROR: ${{ needs.agent.outputs.mcp_policy_error }}\n GH_AW_AGENTIC_ENGINE_TIMEOUT: ${{ needs.agent.outputs.agentic_engine_timeout }}\n GH_AW_MODEL_NOT_SUPPORTED_ERROR: ${{ needs.agent.outputs.model_not_supported_error }}\n GH_AW_CODE_PUSH_FAILURE_ERRORS: ${{ needs.safe_outputs.outputs.code_push_failure_errors }}\n GH_AW_CODE_PUSH_FAILURE_COUNT: ${{ needs.safe_outputs.outputs.code_push_failure_count }}\n GH_AW_LOCKDOWN_CHECK_FAILED: ${{ needs.activation.outputs.lockdown_check_failed }}\n GH_AW_STALE_LOCK_FILE_FAILED: ${{ needs.activation.outputs.stale_lock_file_failed }}\n GH_AW_SAFE_OUTPUT_MESSAGES: \"{\\\"footer\\\":\\\"\\\\u003e Generated by 🌈 {workflow_name}, see [workflow run]({run_url}). [Learn more](https://github.com/githubnext/agentics/blob/main/docs/repo-assist.md).\\\",\\\"runStarted\\\":\\\"{workflow_name} is processing {event_type}, see [workflow run]({run_url})...\\\",\\\"runSuccess\\\":\\\"βœ“ {workflow_name} completed successfully, see [workflow run]({run_url}).\\\",\\\"runFailure\\\":\\\"βœ— {workflow_name} encountered {status}, see [workflow run]({run_url}).\\\"}\"\n GH_AW_PUSH_REPO_MEMORY_RESULT: ${{ needs.push_repo_memory.result }}\n GH_AW_REPO_MEMORY_VALIDATION_FAILED_default: ${{ needs.push_repo_memory.outputs.validation_failed_default }}\n GH_AW_REPO_MEMORY_VALIDATION_ERROR_default: ${{ needs.push_repo_memory.outputs.validation_error_default }}\n GH_AW_REPO_MEMORY_PATCH_SIZE_EXCEEDED_default: ${{ needs.push_repo_memory.outputs.patch_size_exceeded_default }}\n GH_AW_GROUP_REPORTS: \"false\"\n GH_AW_FAILURE_REPORT_AS_ISSUE: \"true\"\n GH_AW_TIMEOUT_MINUTES: \"60\"\n with:\n github-token: ${{ secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}\n script: |\n const { setupGlobals } = require('${{ runner.temp }}/gh-aw/actions/setup_globals.cjs');\n setupGlobals(core, github, context, exec, io, getOctokit);\n const { main } = require('${{ runner.temp }}/gh-aw/actions/handle_agent_failure.cjs');\n await main();\n - name: Update reaction comment with completion status\n id: conclusion\n uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9\n env:\n GH_AW_AGENT_OUTPUT: ${{ steps.setup-agent-output-env.outputs.GH_AW_AGENT_OUTPUT }}\n GH_AW_COMMENT_ID: ${{ needs.activation.outputs.comment_id }}\n GH_AW_COMMENT_REPO: ${{ needs.activation.outputs.comment_repo }}\n GH_AW_RUN_URL: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}\n GH_AW_WORKFLOW_NAME: \"Repo Assist\"\n GH_AW_AGENT_CONCLUSION: ${{ needs.agent.result }}\n GH_AW_DETECTION_CONCLUSION: ${{ needs.detection.outputs.detection_conclusion }}\n GH_AW_DETECTION_REASON: ${{ needs.detection.outputs.detection_reason }}\n GH_AW_SAFE_OUTPUT_MESSAGES: \"{\\\"footer\\\":\\\"\\\\u003e Generated by 🌈 {workflow_name}, see [workflow run]({run_url}). [Learn more](https://github.com/githubnext/agentics/blob/main/docs/repo-assist.md).\\\",\\\"runStarted\\\":\\\"{workflow_name} is processing {event_type}, see [workflow run]({run_url})...\\\",\\\"runSuccess\\\":\\\"βœ“ {workflow_name} completed successfully, see [workflow run]({run_url}).\\\",\\\"runFailure\\\":\\\"βœ— {workflow_name} encountered {status}, see [workflow run]({run_url}).\\\"}\"\n with:\n github-token: ${{ secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}\n script: |\n const { setupGlobals } = require('${{ runner.temp }}/gh-aw/actions/setup_globals.cjs');\n setupGlobals(core, github, context, exec, io, getOctokit);\n const { main } = require('${{ runner.temp }}/gh-aw/actions/notify_comment_error.cjs');\n await main();\n\n detection:\n needs:\n - activation\n - agent\n if: >\n always() && needs.agent.result != 'skipped' && (needs.agent.outputs.output_types != '' || needs.agent.outputs.has_patch == 'true')\n runs-on: ubuntu-latest\n permissions:\n contents: read\n outputs:\n detection_conclusion: ${{ steps.detection_conclusion.outputs.conclusion }}\n detection_reason: ${{ steps.detection_conclusion.outputs.reason }}\n detection_success: ${{ steps.detection_conclusion.outputs.success }}\n steps:\n - name: Setup Scripts\n id: setup\n uses: github/gh-aw-actions/setup@ba90f2186d7ad780ec640f364005fa24e797b360 # v0.68.3\n with:\n destination: ${{ runner.temp }}/gh-aw/actions\n job-name: ${{ github.job }}\n trace-id: ${{ needs.activation.outputs.setup-trace-id }}\n - name: Download agent output artifact\n id: download-agent-output\n continue-on-error: true\n uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1\n with:\n name: agent\n path: /tmp/gh-aw/\n - name: Setup agent output environment variable\n id: setup-agent-output-env\n if: steps.download-agent-output.outcome == 'success'\n run: |\n mkdir -p /tmp/gh-aw/\n find \"/tmp/gh-aw/\" -type f -print\n echo \"GH_AW_AGENT_OUTPUT=/tmp/gh-aw/agent_output.json\" >> \"$GITHUB_OUTPUT\"\n - name: Checkout repository for patch context\n if: needs.agent.outputs.has_patch == 'true'\n uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2\n with:\n persist-credentials: false\n # --- Threat Detection ---\n - name: Clean stale firewall files from agent artifact\n run: |\n rm -rf /tmp/gh-aw/sandbox/firewall/logs\n rm -rf /tmp/gh-aw/sandbox/firewall/audit\n - name: Download container images\n run: bash \"${RUNNER_TEMP}/gh-aw/actions/download_docker_images.sh\" ghcr.io/github/gh-aw-firewall/agent:0.25.20@sha256:9161f2415a3306a344aca34dd671ee69f122317e0a512e66dc64c94b9c508682 ghcr.io/github/gh-aw-firewall/api-proxy:0.25.20@sha256:6971639e381e82e45134bcd333181f456df3a52cd6f818a3e3d6de068ff91519 ghcr.io/github/gh-aw-firewall/squid:0.25.20@sha256:5411d903f73ee597e6a084971c2adef3eb0bd405910df3ed7bf5e3d6bd58a236\n - name: Check if detection needed\n id: detection_guard\n if: always()\n env:\n OUTPUT_TYPES: ${{ needs.agent.outputs.output_types }}\n HAS_PATCH: ${{ needs.agent.outputs.has_patch }}\n run: |\n if [[ -n \"$OUTPUT_TYPES\" || \"$HAS_PATCH\" == \"true\" ]]; then\n echo \"run_detection=true\" >> \"$GITHUB_OUTPUT\"\n echo \"Detection will run: output_types=$OUTPUT_TYPES, has_patch=$HAS_PATCH\"\n else\n echo \"run_detection=false\" >> \"$GITHUB_OUTPUT\"\n echo \"Detection skipped: no agent outputs or patches to analyze\"\n fi\n - name: Clear MCP configuration for detection\n if: always() && steps.detection_guard.outputs.run_detection == 'true'\n run: |\n rm -f /tmp/gh-aw/mcp-config/mcp-servers.json\n rm -f /home/runner/.copilot/mcp-config.json\n rm -f \"$GITHUB_WORKSPACE/.gemini/settings.json\"\n - name: Prepare threat detection files\n if: always() && steps.detection_guard.outputs.run_detection == 'true'\n run: |\n mkdir -p /tmp/gh-aw/threat-detection/aw-prompts\n cp /tmp/gh-aw/aw-prompts/prompt.txt /tmp/gh-aw/threat-detection/aw-prompts/prompt.txt 2>/dev/null || true\n cp /tmp/gh-aw/agent_output.json /tmp/gh-aw/threat-detection/agent_output.json 2>/dev/null || true\n for f in /tmp/gh-aw/aw-*.patch; do\n [ -f \"$f\" ] && cp \"$f\" /tmp/gh-aw/threat-detection/ 2>/dev/null || true\n done\n for f in /tmp/gh-aw/aw-*.bundle; do\n [ -f \"$f\" ] && cp \"$f\" /tmp/gh-aw/threat-detection/ 2>/dev/null || true\n done\n echo \"Prepared threat detection files:\"\n ls -la /tmp/gh-aw/threat-detection/ 2>/dev/null || true\n - name: Setup threat detection\n if: always() && steps.detection_guard.outputs.run_detection == 'true'\n uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9\n env:\n WORKFLOW_NAME: \"Repo Assist\"\n WORKFLOW_DESCRIPTION: \"A friendly repository assistant that runs 2 times a day to support contributors and maintainers.\\nCan also be triggered on-demand via '/repo-assist ' to perform specific tasks.\\n- Labels and triages open issues\\n- Comments helpfully on open issues to unblock contributors and onboard newcomers\\n- Identifies issues that can be fixed and creates draft pull requests with fixes\\n- Improves performance, testing, and code quality via PRs\\n- Makes engineering investments: dependency updates, CI improvements, tooling\\n- Updates its own PRs when CI fails or merge conflicts arise\\n- Nudges stale PRs waiting for author response\\n- Takes the repository forward with proactive improvements\\n- Maintains a persistent memory of work done and what remains\\nAlways polite, constructive, and mindful of the project's goals.\"\n HAS_PATCH: ${{ needs.agent.outputs.has_patch }}\n with:\n script: |\n const { setupGlobals } = require('${{ runner.temp }}/gh-aw/actions/setup_globals.cjs');\n setupGlobals(core, github, context, exec, io, getOctokit);\n const { main } = require('${{ runner.temp }}/gh-aw/actions/setup_threat_detection.cjs');\n await main();\n - name: Ensure threat-detection directory and log\n if: always() && steps.detection_guard.outputs.run_detection == 'true'\n run: |\n mkdir -p /tmp/gh-aw/threat-detection\n touch /tmp/gh-aw/threat-detection/detection.log\n - name: Install GitHub Copilot CLI\n run: bash \"${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh\" 1.0.21\n env:\n GH_HOST: github.com\n - name: Install AWF binary\n run: bash \"${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh\" v0.25.20\n - name: Execute GitHub Copilot CLI\n if: always() && steps.detection_guard.outputs.run_detection == 'true'\n id: detection_agentic_execution\n # Copilot CLI tool arguments (sorted):\n timeout-minutes: 20\n run: |\n set -o pipefail\n touch /tmp/gh-aw/agent-step-summary.md\n (umask 177 && touch /tmp/gh-aw/threat-detection/detection.log)\n # shellcheck disable=SC1003\n sudo -E awf --container-workdir \"${GITHUB_WORKSPACE}\" --mount \"${RUNNER_TEMP}/gh-aw:${RUNNER_TEMP}/gh-aw:ro\" --mount \"${RUNNER_TEMP}/gh-aw:/host${RUNNER_TEMP}/gh-aw:ro\" --env-all --exclude-env COPILOT_GITHUB_TOKEN --allow-domains api.business.githubcopilot.com,api.enterprise.githubcopilot.com,api.github.com,api.githubcopilot.com,api.individual.githubcopilot.com,github.com,host.docker.internal,telemetry.enterprise.githubcopilot.com --log-level info --proxy-logs-dir /tmp/gh-aw/sandbox/firewall/logs --audit-dir /tmp/gh-aw/sandbox/firewall/audit --enable-host-access --image-tag 0.25.20 --skip-pull --enable-api-proxy \\\n -- /bin/bash -c 'node ${RUNNER_TEMP}/gh-aw/actions/copilot_driver.cjs /usr/local/bin/copilot --add-dir /tmp/gh-aw/ --log-level all --log-dir /tmp/gh-aw/sandbox/agent/logs/ --disable-builtin-mcps --no-ask-user --allow-all-tools --add-dir \"${GITHUB_WORKSPACE}\" --prompt \"$(cat /tmp/gh-aw/aw-prompts/prompt.txt)\"' 2>&1 | tee -a /tmp/gh-aw/threat-detection/detection.log\n env:\n COPILOT_AGENT_RUNNER_TYPE: STANDALONE\n COPILOT_GITHUB_TOKEN: ${{ secrets.COPILOT_GITHUB_TOKEN }}\n COPILOT_MODEL: ${{ vars.GH_AW_MODEL_DETECTION_COPILOT || '' }}\n GH_AW_PHASE: detection\n GH_AW_PROMPT: /tmp/gh-aw/aw-prompts/prompt.txt\n GH_AW_VERSION: v0.68.3\n GITHUB_API_URL: ${{ github.api_url }}\n GITHUB_AW: true\n GITHUB_HEAD_REF: ${{ github.head_ref }}\n GITHUB_REF_NAME: ${{ github.ref_name }}\n GITHUB_SERVER_URL: ${{ github.server_url }}\n GITHUB_STEP_SUMMARY: /tmp/gh-aw/agent-step-summary.md\n GITHUB_WORKSPACE: ${{ github.workspace }}\n GIT_AUTHOR_EMAIL: github-actions[bot]@users.noreply.github.com\n GIT_AUTHOR_NAME: github-actions[bot]\n GIT_COMMITTER_EMAIL: github-actions[bot]@users.noreply.github.com\n GIT_COMMITTER_NAME: github-actions[bot]\n XDG_CONFIG_HOME: /home/runner\n - name: Upload threat detection log\n if: always() && steps.detection_guard.outputs.run_detection == 'true'\n uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1\n with:\n name: detection\n path: /tmp/gh-aw/threat-detection/detection.log\n if-no-files-found: ignore\n - name: Parse and conclude threat detection\n id: detection_conclusion\n if: always()\n uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9\n env:\n RUN_DETECTION: ${{ steps.detection_guard.outputs.run_detection }}\n GH_AW_DETECTION_CONTINUE_ON_ERROR: \"true\"\n with:\n script: |\n const { setupGlobals } = require('${{ runner.temp }}/gh-aw/actions/setup_globals.cjs');\n setupGlobals(core, github, context, exec, io, getOctokit);\n const { main } = require('${{ runner.temp }}/gh-aw/actions/parse_threat_detection_results.cjs');\n await main();\n\n pre_activation:\n if: \"(github.event_name == 'issues' || github.event_name == 'issue_comment' || github.event_name == 'pull_request' || github.event_name == 'pull_request_review_comment' || github.event_name == 'discussion' || github.event_name == 'discussion_comment') && (github.event_name == 'issues' && (startsWith(github.event.issue.body, '/repo-assist ') || startsWith(github.event.issue.body, '/repo-assist\\n') || github.event.issue.body == '/repo-assist') || github.event_name == 'issue_comment' && (startsWith(github.event.comment.body, '/repo-assist ') || startsWith(github.event.comment.body, '/repo-assist\\n') || github.event.comment.body == '/repo-assist') && github.event.issue.pull_request == null || github.event_name == 'issue_comment' && (startsWith(github.event.comment.body, '/repo-assist ') || startsWith(github.event.comment.body, '/repo-assist\\n') || github.event.comment.body == '/repo-assist') && github.event.issue.pull_request != null || github.event_name == 'pull_request_review_comment' && (startsWith(github.event.comment.body, '/repo-assist ') || startsWith(github.event.comment.body, '/repo-assist\\n') || github.event.comment.body == '/repo-assist') || github.event_name == 'pull_request' && (startsWith(github.event.pull_request.body, '/repo-assist ') || startsWith(github.event.pull_request.body, '/repo-assist\\n') || github.event.pull_request.body == '/repo-assist') || github.event_name == 'discussion' && (startsWith(github.event.discussion.body, '/repo-assist ') || startsWith(github.event.discussion.body, '/repo-assist\\n') || github.event.discussion.body == '/repo-assist') || github.event_name == 'discussion_comment' && (startsWith(github.event.comment.body, '/repo-assist ') || startsWith(github.event.comment.body, '/repo-assist\\n') || github.event.comment.body == '/repo-assist')) || (!(github.event_name == 'issues')) && (!(github.event_name == 'issue_comment')) && (!(github.event_name == 'pull_request')) && (!(github.event_name == 'pull_request_review_comment')) && (!(github.event_name == 'discussion')) && (!(github.event_name == 'discussion_comment'))\"\n runs-on: ubuntu-slim\n outputs:\n activated: ${{ steps.check_membership.outputs.is_team_member == 'true' && steps.check_command_position.outputs.command_position_ok == 'true' }}\n matched_command: ${{ steps.check_command_position.outputs.matched_command }}\n setup-trace-id: ${{ steps.setup.outputs.trace-id }}\n steps:\n - name: Setup Scripts\n id: setup\n uses: github/gh-aw-actions/setup@ba90f2186d7ad780ec640f364005fa24e797b360 # v0.68.3\n with:\n destination: ${{ runner.temp }}/gh-aw/actions\n job-name: ${{ github.job }}\n - name: Check team membership for command workflow\n id: check_membership\n uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9\n env:\n GH_AW_REQUIRED_ROLES: \"admin,maintainer,write\"\n with:\n github-token: ${{ secrets.GITHUB_TOKEN }}\n script: |\n const { setupGlobals } = require('${{ runner.temp }}/gh-aw/actions/setup_globals.cjs');\n setupGlobals(core, github, context, exec, io, getOctokit);\n const { main } = require('${{ runner.temp }}/gh-aw/actions/check_membership.cjs');\n await main();\n - name: Check command position\n id: check_command_position\n uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9\n env:\n GH_AW_COMMANDS: \"[\\\"repo-assist\\\"]\"\n with:\n script: |\n const { setupGlobals } = require('${{ runner.temp }}/gh-aw/actions/setup_globals.cjs');\n setupGlobals(core, github, context, exec, io, getOctokit);\n const { main } = require('${{ runner.temp }}/gh-aw/actions/check_command_position.cjs');\n await main();\n\n push_repo_memory:\n needs:\n - activation\n - agent\n - detection\n if: >\n always() && (!cancelled()) && (needs.detection.result == 'success' || needs.detection.result == 'skipped') &&\n needs.agent.result != 'skipped'\n runs-on: ubuntu-slim\n permissions:\n contents: write\n concurrency:\n group: \"push-repo-memory-${{ github.repository }}|memory/repo-assist\"\n cancel-in-progress: false\n outputs:\n patch_size_exceeded_default: ${{ steps.push_repo_memory_default.outputs.patch_size_exceeded }}\n validation_error_default: ${{ steps.push_repo_memory_default.outputs.validation_error }}\n validation_failed_default: ${{ steps.push_repo_memory_default.outputs.validation_failed }}\n steps:\n - name: Setup Scripts\n id: setup\n uses: github/gh-aw-actions/setup@ba90f2186d7ad780ec640f364005fa24e797b360 # v0.68.3\n with:\n destination: ${{ runner.temp }}/gh-aw/actions\n job-name: ${{ github.job }}\n trace-id: ${{ needs.activation.outputs.setup-trace-id }}\n - name: Checkout repository\n uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2\n with:\n persist-credentials: false\n sparse-checkout: .\n - name: Configure Git credentials\n env:\n REPO_NAME: ${{ github.repository }}\n SERVER_URL: ${{ github.server_url }}\n GITHUB_TOKEN: ${{ github.token }}\n run: |\n git config --global user.email \"github-actions[bot]@users.noreply.github.com\"\n git config --global user.name \"github-actions[bot]\"\n git config --global am.keepcr true\n # Re-authenticate git with GitHub token\n SERVER_URL_STRIPPED=\"${SERVER_URL#https://}\"\n git remote set-url origin \"https://x-access-token:${GITHUB_TOKEN}@${SERVER_URL_STRIPPED}/${REPO_NAME}.git\"\n echo \"Git configured with standard GitHub Actions identity\"\n - name: Download repo-memory artifact (default)\n uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1\n continue-on-error: true\n with:\n name: repo-memory-default\n path: /tmp/gh-aw/repo-memory/default\n - name: Push repo-memory changes (default)\n id: push_repo_memory_default\n if: always()\n uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9\n env:\n GH_TOKEN: ${{ github.token }}\n GITHUB_RUN_ID: ${{ github.run_id }}\n GITHUB_SERVER_URL: ${{ github.server_url }}\n ARTIFACT_DIR: /tmp/gh-aw/repo-memory/default\n MEMORY_ID: default\n TARGET_REPO: ${{ github.repository }}\n BRANCH_NAME: memory/repo-assist\n MAX_FILE_SIZE: 10240\n MAX_FILE_COUNT: 100\n MAX_PATCH_SIZE: 10240\n ALLOWED_EXTENSIONS: '[]'\n with:\n script: |\n const { setupGlobals } = require('${{ runner.temp }}/gh-aw/actions/setup_globals.cjs');\n setupGlobals(core, github, context, exec, io, getOctokit);\n const { main } = require('${{ runner.temp }}/gh-aw/actions/push_repo_memory.cjs');\n await main();\n\n safe_outputs:\n needs:\n - activation\n - agent\n - detection\n if: (!cancelled()) && needs.agent.result != 'skipped' && needs.detection.result == 'success'\n runs-on: ubuntu-slim\n permissions:\n contents: write\n discussions: write\n issues: write\n pull-requests: write\n timeout-minutes: 15\n env:\n GH_AW_CALLER_WORKFLOW_ID: \"${{ github.repository }}/repo-assist\"\n GH_AW_DETECTION_CONCLUSION: ${{ needs.detection.outputs.detection_conclusion }}\n GH_AW_DETECTION_REASON: ${{ needs.detection.outputs.detection_reason }}\n GH_AW_EFFECTIVE_TOKENS: ${{ needs.agent.outputs.effective_tokens }}\n GH_AW_ENGINE_ID: \"copilot\"\n GH_AW_ENGINE_MODEL: ${{ needs.agent.outputs.model }}\n GH_AW_SAFE_OUTPUT_MESSAGES: \"{\\\"footer\\\":\\\"\\\\u003e Generated by 🌈 {workflow_name}, see [workflow run]({run_url}). [Learn more](https://github.com/githubnext/agentics/blob/main/docs/repo-assist.md).\\\",\\\"runStarted\\\":\\\"{workflow_name} is processing {event_type}, see [workflow run]({run_url})...\\\",\\\"runSuccess\\\":\\\"βœ“ {workflow_name} completed successfully, see [workflow run]({run_url}).\\\",\\\"runFailure\\\":\\\"βœ— {workflow_name} encountered {status}, see [workflow run]({run_url}).\\\"}\"\n GH_AW_WORKFLOW_ID: \"repo-assist\"\n GH_AW_WORKFLOW_NAME: \"Repo Assist\"\n GH_AW_WORKFLOW_SOURCE: \"githubnext/agentics/workflows/repo-assist.md@3de4e604a36b5190a1c7dc4719c7341500ba8a95\"\n GH_AW_WORKFLOW_SOURCE_URL: \"${{ github.server_url }}/githubnext/agentics/blob/3de4e604a36b5190a1c7dc4719c7341500ba8a95/workflows/repo-assist.md\"\n outputs:\n code_push_failure_count: ${{ steps.process_safe_outputs.outputs.code_push_failure_count }}\n code_push_failure_errors: ${{ steps.process_safe_outputs.outputs.code_push_failure_errors }}\n comment_id: ${{ steps.process_safe_outputs.outputs.comment_id }}\n comment_url: ${{ steps.process_safe_outputs.outputs.comment_url }}\n create_discussion_error_count: ${{ steps.process_safe_outputs.outputs.create_discussion_error_count }}\n create_discussion_errors: ${{ steps.process_safe_outputs.outputs.create_discussion_errors }}\n created_issue_number: ${{ steps.process_safe_outputs.outputs.created_issue_number }}\n created_issue_url: ${{ steps.process_safe_outputs.outputs.created_issue_url }}\n created_pr_number: ${{ steps.process_safe_outputs.outputs.created_pr_number }}\n created_pr_url: ${{ steps.process_safe_outputs.outputs.created_pr_url }}\n process_safe_outputs_processed_count: ${{ steps.process_safe_outputs.outputs.processed_count }}\n process_safe_outputs_temporary_id_map: ${{ steps.process_safe_outputs.outputs.temporary_id_map }}\n push_commit_sha: ${{ steps.process_safe_outputs.outputs.push_commit_sha }}\n push_commit_url: ${{ steps.process_safe_outputs.outputs.push_commit_url }}\n steps:\n - name: Setup Scripts\n id: setup\n uses: github/gh-aw-actions/setup@ba90f2186d7ad780ec640f364005fa24e797b360 # v0.68.3\n with:\n destination: ${{ runner.temp }}/gh-aw/actions\n job-name: ${{ github.job }}\n trace-id: ${{ needs.activation.outputs.setup-trace-id }}\n - name: Download agent output artifact\n id: download-agent-output\n continue-on-error: true\n uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1\n with:\n name: agent\n path: /tmp/gh-aw/\n - name: Setup agent output environment variable\n id: setup-agent-output-env\n if: steps.download-agent-output.outcome == 'success'\n run: |\n mkdir -p /tmp/gh-aw/\n find \"/tmp/gh-aw/\" -type f -print\n echo \"GH_AW_AGENT_OUTPUT=/tmp/gh-aw/agent_output.json\" >> \"$GITHUB_OUTPUT\"\n - name: Download patch artifact\n continue-on-error: true\n uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1\n with:\n name: agent\n path: /tmp/gh-aw/\n - name: Checkout repository\n if: (!cancelled()) && needs.agent.result != 'skipped' && contains(needs.agent.outputs.output_types, 'create_pull_request') || (!cancelled()) && needs.agent.result != 'skipped' && contains(needs.agent.outputs.output_types, 'push_to_pull_request_branch')\n uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2\n with:\n ref: ${{ github.base_ref || github.event.pull_request.base.ref || github.ref_name || github.event.repository.default_branch }}\n token: ${{ secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}\n persist-credentials: false\n fetch-depth: 1\n - name: Configure Git credentials\n if: (!cancelled()) && needs.agent.result != 'skipped' && contains(needs.agent.outputs.output_types, 'create_pull_request') || (!cancelled()) && needs.agent.result != 'skipped' && contains(needs.agent.outputs.output_types, 'push_to_pull_request_branch')\n env:\n REPO_NAME: ${{ github.repository }}\n SERVER_URL: ${{ github.server_url }}\n GIT_TOKEN: ${{ secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}\n run: |\n git config --global user.email \"github-actions[bot]@users.noreply.github.com\"\n git config --global user.name \"github-actions[bot]\"\n git config --global am.keepcr true\n # Re-authenticate git with GitHub token\n SERVER_URL_STRIPPED=\"${SERVER_URL#https://}\"\n git remote set-url origin \"https://x-access-token:${GIT_TOKEN}@${SERVER_URL_STRIPPED}/${REPO_NAME}.git\"\n echo \"Git configured with standard GitHub Actions identity\"\n - name: Configure GH_HOST for enterprise compatibility\n id: ghes-host-config\n shell: bash\n run: |\n # Derive GH_HOST from GITHUB_SERVER_URL so the gh CLI targets the correct\n # GitHub instance (GHES/GHEC). On github.com this is a harmless no-op.\n GH_HOST=\"${GITHUB_SERVER_URL#https://}\"\n GH_HOST=\"${GH_HOST#http://}\"\n echo \"GH_HOST=${GH_HOST}\" >> \"$GITHUB_ENV\"\n - name: Process Safe Outputs\n id: process_safe_outputs\n uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9\n env:\n GH_AW_AGENT_OUTPUT: ${{ steps.setup-agent-output-env.outputs.GH_AW_AGENT_OUTPUT }}\n GH_AW_ALLOWED_DOMAINS: \"*.gradle-enterprise.cloud,*.pythonhosted.org,*.vsblob.vsassets.io,adoptium.net,anaconda.org,api.adoptium.net,api.business.githubcopilot.com,api.enterprise.githubcopilot.com,api.foojay.io,api.github.com,api.githubcopilot.com,api.individual.githubcopilot.com,api.npms.io,api.nuget.org,api.snapcraft.io,archive.apache.org,archive.ubuntu.com,azure.archive.ubuntu.com,azuresearch-usnc.nuget.org,azuresearch-ussc.nuget.org,binstar.org,bootstrap.pypa.io,builds.dotnet.microsoft.com,bun.sh,cdn.azul.com,cdn.jsdelivr.net,central.sonatype.com,ci.dot.net,conda.anaconda.org,conda.binstar.org,crates.io,crl.geotrust.com,crl.globalsign.com,crl.identrust.com,crl.sectigo.com,crl.thawte.com,crl.usertrust.com,crl.verisign.com,crl3.digicert.com,crl4.digicert.com,crls.ssl.com,dc.services.visualstudio.com,deb.nodesource.com,deno.land,develocity.apache.org,dist.nuget.org,dl.google.com,dlcdn.apache.org,dot.net,dotnet.microsoft.com,dotnetcli.blob.core.windows.net,download.eclipse.org,download.java.net,download.oracle.com,downloads.gradle-dn.com,esm.sh,files.pythonhosted.org,ge.spockframework.org,get.pnpm.io,github.com,googleapis.deno.dev,googlechromelabs.github.io,gradle.org,host.docker.internal,index.crates.io,jcenter.bintray.com,jdk.java.net,json-schema.org,json.schemastore.org,jsr.io,keyserver.ubuntu.com,maven-central.storage-download.googleapis.com,maven.apache.org,maven.google.com,maven.oracle.com,maven.pkg.github.com,nodejs.org,npm.pkg.github.com,npmjs.com,npmjs.org,nuget.org,nuget.pkg.github.com,nugetregistryv2prod.blob.core.windows.net,ocsp.digicert.com,ocsp.geotrust.com,ocsp.globalsign.com,ocsp.identrust.com,ocsp.sectigo.com,ocsp.ssl.com,ocsp.thawte.com,ocsp.usertrust.com,ocsp.verisign.com,oneocsp.microsoft.com,packagecloud.io,packages.cloud.google.com,packages.microsoft.com,pip.pypa.io,pkgs.dev.azure.com,plugins-artifacts.gradle.org,plugins.gradle.org,ppa.launchpad.net,pypi.org,pypi.python.org,raw.githubusercontent.com,registry.bower.io,registry.npmjs.com,registry.npmjs.org,registry.yarnpkg.com,repo.anaconda.com,repo.continuum.io,repo.gradle.org,repo.grails.org,repo.maven.apache.org,repo.spring.io,repo.yarnpkg.com,repo1.maven.org,repository.apache.org,s.symcb.com,s.symcd.com,scans-in.gradle.com,security.ubuntu.com,services.gradle.org,sh.rustup.rs,skimdb.npmjs.com,static.crates.io,static.rust-lang.org,storage.googleapis.com,telemetry.enterprise.githubcopilot.com,telemetry.vercel.com,ts-crl.ws.symantec.com,ts-ocsp.ws.symantec.com,www.googleapis.com,www.java.com,www.microsoft.com,www.npmjs.com,www.npmjs.org,yarnpkg.com\"\n GITHUB_SERVER_URL: ${{ github.server_url }}\n GITHUB_API_URL: ${{ github.api_url }}\n GH_AW_SAFE_OUTPUTS_HANDLER_CONFIG: \"{\\\"add_comment\\\":{\\\"hide_older_comments\\\":true,\\\"max\\\":10,\\\"target\\\":\\\"*\\\"},\\\"add_labels\\\":{\\\"allowed\\\":[\\\"bug\\\",\\\"enhancement\\\",\\\"help wanted\\\",\\\"good first issue\\\",\\\"spam\\\",\\\"off topic\\\",\\\"documentation\\\",\\\"question\\\",\\\"duplicate\\\",\\\"wontfix\\\",\\\"needs triage\\\",\\\"needs investigation\\\",\\\"breaking change\\\",\\\"performance\\\",\\\"security\\\",\\\"refactor\\\"],\\\"max\\\":30,\\\"target\\\":\\\"*\\\"},\\\"create_issue\\\":{\\\"labels\\\":[\\\"automation\\\",\\\"repo-assist\\\"],\\\"max\\\":4,\\\"title_prefix\\\":\\\"[Repo Assist] \\\"},\\\"create_pull_request\\\":{\\\"draft\\\":true,\\\"labels\\\":[\\\"automation\\\",\\\"repo-assist\\\"],\\\"max\\\":4,\\\"max_patch_size\\\":1024,\\\"protected_files\\\":[\\\"package.json\\\",\\\"bun.lockb\\\",\\\"bunfig.toml\\\",\\\"deno.json\\\",\\\"deno.jsonc\\\",\\\"deno.lock\\\",\\\"global.json\\\",\\\"NuGet.Config\\\",\\\"Directory.Packages.props\\\",\\\"mix.exs\\\",\\\"mix.lock\\\",\\\"go.mod\\\",\\\"go.sum\\\",\\\"stack.yaml\\\",\\\"stack.yaml.lock\\\",\\\"pom.xml\\\",\\\"build.gradle\\\",\\\"build.gradle.kts\\\",\\\"settings.gradle\\\",\\\"settings.gradle.kts\\\",\\\"gradle.properties\\\",\\\"package-lock.json\\\",\\\"yarn.lock\\\",\\\"pnpm-lock.yaml\\\",\\\"npm-shrinkwrap.json\\\",\\\"requirements.txt\\\",\\\"Pipfile\\\",\\\"Pipfile.lock\\\",\\\"pyproject.toml\\\",\\\"setup.py\\\",\\\"setup.cfg\\\",\\\"Gemfile\\\",\\\"Gemfile.lock\\\",\\\"uv.lock\\\",\\\"CODEOWNERS\\\",\\\"AGENTS.md\\\"],\\\"protected_files_policy\\\":\\\"fallback-to-issue\\\",\\\"protected_path_prefixes\\\":[\\\".github/\\\",\\\".agents/\\\"],\\\"title_prefix\\\":\\\"[Repo Assist] \\\"},\\\"create_report_incomplete_issue\\\":{},\\\"missing_data\\\":{},\\\"missing_tool\\\":{},\\\"noop\\\":{\\\"max\\\":1,\\\"report-as-issue\\\":\\\"true\\\"},\\\"push_to_pull_request_branch\\\":{\\\"if_no_changes\\\":\\\"warn\\\",\\\"max\\\":4,\\\"max_patch_size\\\":1024,\\\"protected_files\\\":[\\\"package.json\\\",\\\"bun.lockb\\\",\\\"bunfig.toml\\\",\\\"deno.json\\\",\\\"deno.jsonc\\\",\\\"deno.lock\\\",\\\"global.json\\\",\\\"NuGet.Config\\\",\\\"Directory.Packages.props\\\",\\\"mix.exs\\\",\\\"mix.lock\\\",\\\"go.mod\\\",\\\"go.sum\\\",\\\"stack.yaml\\\",\\\"stack.yaml.lock\\\",\\\"pom.xml\\\",\\\"build.gradle\\\",\\\"build.gradle.kts\\\",\\\"settings.gradle\\\",\\\"settings.gradle.kts\\\",\\\"gradle.properties\\\",\\\"package-lock.json\\\",\\\"yarn.lock\\\",\\\"pnpm-lock.yaml\\\",\\\"npm-shrinkwrap.json\\\",\\\"requirements.txt\\\",\\\"Pipfile\\\",\\\"Pipfile.lock\\\",\\\"pyproject.toml\\\",\\\"setup.py\\\",\\\"setup.cfg\\\",\\\"Gemfile\\\",\\\"Gemfile.lock\\\",\\\"uv.lock\\\",\\\"CODEOWNERS\\\",\\\"AGENTS.md\\\"],\\\"protected_files_policy\\\":\\\"fallback-to-issue\\\",\\\"protected_path_prefixes\\\":[\\\".github/\\\",\\\".agents/\\\"],\\\"target\\\":\\\"*\\\",\\\"title_prefix\\\":\\\"[Repo Assist] \\\"},\\\"remove_labels\\\":{\\\"allowed\\\":[\\\"bug\\\",\\\"enhancement\\\",\\\"help wanted\\\",\\\"good first issue\\\",\\\"spam\\\",\\\"off topic\\\",\\\"documentation\\\",\\\"question\\\",\\\"duplicate\\\",\\\"wontfix\\\",\\\"needs triage\\\",\\\"needs investigation\\\",\\\"breaking change\\\",\\\"performance\\\",\\\"security\\\",\\\"refactor\\\"],\\\"max\\\":5,\\\"target\\\":\\\"*\\\"},\\\"report_incomplete\\\":{},\\\"update_issue\\\":{\\\"allow_body\\\":true,\\\"max\\\":1,\\\"target\\\":\\\"*\\\",\\\"title_prefix\\\":\\\"[Repo Assist] \\\"}}\"\n GH_AW_CI_TRIGGER_TOKEN: ${{ secrets.GH_AW_CI_TRIGGER_TOKEN }}\n with:\n github-token: ${{ secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}\n script: |\n const { setupGlobals } = require('${{ runner.temp }}/gh-aw/actions/setup_globals.cjs');\n setupGlobals(core, github, context, exec, io, getOctokit);\n const { main } = require('${{ runner.temp }}/gh-aw/actions/safe_output_handler_manager.cjs');\n await main();\n - name: Upload Safe Outputs Items\n if: always()\n uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1\n with:\n name: safe-outputs-items\n path: |\n /tmp/gh-aw/safe-output-items.jsonl\n /tmp/gh-aw/temporary-id-map.json\n if-no-files-found: ignore\n\n" }, { "path": ".github/workflows/repo-assist.md", "content": "---\ndescription: |\n A friendly repository assistant that runs 2 times a day to support contributors and maintainers.\n Can also be triggered on-demand via '/repo-assist ' to perform specific tasks.\n - Labels and triages open issues\n - Comments helpfully on open issues to unblock contributors and onboard newcomers\n - Identifies issues that can be fixed and creates draft pull requests with fixes\n - Improves performance, testing, and code quality via PRs\n - Makes engineering investments: dependency updates, CI improvements, tooling\n - Updates its own PRs when CI fails or merge conflicts arise\n - Nudges stale PRs waiting for author response\n - Takes the repository forward with proactive improvements\n - Maintains a persistent memory of work done and what remains\n Always polite, constructive, and mindful of the project's goals.\n\non:\n schedule: daily\n workflow_dispatch:\n slash_command:\n name: repo-assist\n reaction: \"eyes\"\n\ntimeout-minutes: 60\n\npermissions: read-all\n\nnetwork:\n allowed:\n - defaults\n - dotnet\n - node\n - python\n - rust\n - java\n\ncheckout:\n fetch: [\"*\"] # fetch all remote branches to allow working on PR branches\n fetch-depth: 0 # fetch full history\n\ntools:\n web-fetch:\n github:\n toolsets: [all]\n allowed-repos: all\n min-integrity: none # This workflow is allowed to examine and comment on any issues or PRs\n bash: true\n repo-memory: true\n\nsafe-outputs:\n messages:\n footer: \"> Generated by 🌈 {workflow_name}, see [workflow run]({run_url}). [Learn more](https://github.com/githubnext/agentics/blob/main/docs/repo-assist.md).\"\n run-started: \"{workflow_name} is processing {event_type}, see [workflow run]({run_url})...\"\n run-success: \"βœ“ {workflow_name} completed successfully, see [workflow run]({run_url}).\"\n run-failure: \"βœ— {workflow_name} encountered {status}, see [workflow run]({run_url}).\"\n add-comment:\n max: 10\n target: \"*\"\n hide-older-comments: true\n create-pull-request:\n draft: true\n title-prefix: \"[Repo Assist] \"\n labels: [automation, repo-assist]\n protected-files: fallback-to-issue\n max: 4\n push-to-pull-request-branch:\n target: \"*\"\n title-prefix: \"[Repo Assist] \"\n max: 4\n protected-files: fallback-to-issue\n create-issue:\n title-prefix: \"[Repo Assist] \"\n labels: [automation, repo-assist]\n max: 4\n update-issue:\n target: \"*\"\n title-prefix: \"[Repo Assist] \"\n max: 1\n add-labels:\n allowed: [bug, enhancement, \"help wanted\", \"good first issue\", \"spam\", \"off topic\", documentation, question, duplicate, wontfix, \"needs triage\", \"needs investigation\", \"breaking change\", performance, security, refactor]\n max: 30\n target: \"*\"\n remove-labels:\n allowed: [bug, enhancement, \"help wanted\", \"good first issue\", \"spam\", \"off topic\", documentation, question, duplicate, wontfix, \"needs triage\", \"needs investigation\", \"breaking change\", performance, security, refactor]\n max: 5\n target: \"*\"\n\nsteps:\n - name: Fetch repo data for task weighting\n env:\n GH_TOKEN: ${{ github.token }}\n run: |\n mkdir -p /tmp/gh-aw\n\n # Fetch open issues with labels (up to 500)\n gh issue list --state open --limit 500 --json number,labels > /tmp/gh-aw/issues.json\n\n # Fetch open PRs with titles (up to 200)\n gh pr list --state open --limit 200 --json number,title > /tmp/gh-aw/prs.json\n\n # Compute task weights and select two tasks for this run\n python3 - << 'EOF'\n import json, random, os\n\n with open('/tmp/gh-aw/issues.json') as f:\n issues = json.load(f)\n with open('/tmp/gh-aw/prs.json') as f:\n prs = json.load(f)\n\n open_issues = len(issues)\n unlabelled = sum(1 for i in issues if not i.get('labels'))\n repo_assist_prs = sum(1 for p in prs if p['title'].startswith('[Repo Assist]'))\n other_prs = sum(1 for p in prs if not p['title'].startswith('[Repo Assist]'))\n\n task_names = {\n 1: 'Issue Labelling',\n 2: 'Issue Investigation and Comment',\n 3: 'Issue Investigation and Fix',\n 4: 'Engineering Investments',\n 5: 'Coding Improvements',\n 6: 'Maintain Repo Assist PRs',\n 7: 'Stale PR Nudges',\n 8: 'Performance Improvements',\n 9: 'Testing Improvements',\n 10: 'Take the Repository Forward',\n }\n\n weights = {\n 1: 1 + 3 * unlabelled,\n 2: 3 + 1 * open_issues,\n 3: 3 + 0.7 * open_issues,\n 4: 5 + 0.2 * open_issues,\n 5: 5 + 0.1 * open_issues,\n 6: float(repo_assist_prs),\n 7: 0.1 * other_prs,\n 8: 3 + 0.05 * open_issues,\n 9: 3 + 0.05 * open_issues,\n 10: 3 + 0.05 * open_issues,\n }\n\n # Seed with run ID for reproducibility within a run\n run_id = int(os.environ.get('GITHUB_RUN_ID', '0'))\n rng = random.Random(run_id)\n\n task_ids = list(weights.keys())\n task_weights = [weights[t] for t in task_ids]\n\n # Weighted sample without replacement (pick 2 distinct tasks)\n chosen, seen = [], set()\n for t in rng.choices(task_ids, weights=task_weights, k=30):\n if t not in seen:\n seen.add(t)\n chosen.append(t)\n if len(chosen) == 2:\n break\n\n print('=== Repo Assist Task Selection ===')\n print(f'Open issues : {open_issues}')\n print(f'Unlabelled issues : {unlabelled}')\n print(f'Repo Assist PRs : {repo_assist_prs}')\n print(f'Other open PRs : {other_prs}')\n print()\n print('Task weights:')\n for t, w in weights.items():\n tag = ' <-- SELECTED' if t in chosen else ''\n print(f' Task {t:2d} ({task_names[t]}): weight {w:6.1f}{tag}')\n print()\n print(f'Selected tasks for this run: Task {chosen[0]} ({task_names[chosen[0]]}) and Task {chosen[1]} ({task_names[chosen[1]]})')\n\n result = {\n 'open_issues': open_issues, 'unlabelled_issues': unlabelled,\n 'repo_assist_prs': repo_assist_prs, 'other_prs': other_prs,\n 'task_names': task_names,\n 'weights': {str(k): round(v, 2) for k, v in weights.items()},\n 'selected_tasks': chosen,\n }\n with open('/tmp/gh-aw/task_selection.json', 'w') as f:\n json.dump(result, f, indent=2)\n EOF\n\nsource: githubnext/agentics/workflows/repo-assist.md@3de4e604a36b5190a1c7dc4719c7341500ba8a95\n---\n\n# Repo Assist\n\n## Command Mode\n\nTake heed of **instructions**: \"${{ steps.sanitized.outputs.text }}\"\n\nIf these are non-empty (not \"\"), then you have been triggered via `/repo-assist `. Follow the user's instructions instead of the normal scheduled workflow. Focus exclusively on those instructions. Apply all the same guidelines (read AGENTS.md, run formatters/linters/tests, be polite, use AI disclosure). Skip the weighted task selection and Task 11 reporting, and instead directly do what the user requested. If no specific instructions were provided (empty or blank), proceed with the normal scheduled workflow below.\n\nThen exit - do not run the normal workflow after completing the instructions.\n\n## Non-Command Mode\n\nYou are Repo Assist for `${{ github.repository }}`. Your job is to support human contributors, help onboard newcomers, identify improvements, and fix bugs by creating pull requests. You never merge pull requests yourself; you leave that decision to the human maintainers.\n\nAlways be:\n\n- **Polite and encouraging**: Every contributor deserves respect. Use warm, inclusive language.\n- **Concise**: Keep comments focused and actionable. Avoid walls of text.\n- **Mindful of project values**: Prioritize **stability**, **correctness**, and **minimal dependencies**. Do not introduce new dependencies without clear justification.\n- **Transparent about your nature**: Always clearly identify yourself as Repo Assist, an automated AI assistant. Never pretend to be a human maintainer.\n- **Restrained**: When in doubt, do nothing. It is always better to stay silent than to post a redundant, unhelpful, or spammy comment. Human maintainers' attention is precious - do not waste it.\n\n## Memory\n\nUse persistent repo memory to track:\n\n- issues already commented on (with timestamps to detect new human activity)\n- fix attempts and outcomes, improvement ideas already submitted, a short to-do list\n- a **backlog cursor** so each run continues where the previous one left off\n- previously checked off items (checked off by maintainer) in the Monthly Activity Summary to maintain an accurate pending actions list for maintainers\n\nRead memory at the **start** of every run; update it at the **end**.\n\n**Important**: Memory may not be 100% accurate. Issues may have been created, closed, or commented on; PRs may have been created, merged, commented on, or closed since the last run. Always verify memory against current repository state β€” reviewing recent activity since your last run is wise before acting on stale assumptions.\n\n**Memory backlog tracking**: Your memory may contain notes about issues or PRs that still need attention (e.g., \"issues #384, #336 have labels but no comments\"). These are **action items for you**, not just informational notes. Each run, check your memory's `notes` field and other tracking fields for any explicitly flagged backlog work, and prioritise acting on it.\n\n## Workflow\n\nEach run, the deterministic pre-step collects live repo data (open issue count, unlabelled issue count, open Repo Assist PRs, other open PRs), computes a **weighted probability** for each task, and selects **two tasks** for this run using a seeded random draw. The weights and selected tasks are printed in the workflow logs. You will find the selection in `/tmp/gh-aw/task_selection.json`.\n\n**Read the task selection**: at the start of your run, read `/tmp/gh-aw/task_selection.json` and confirm the two selected tasks in your opening reasoning. Execute **those two tasks** (plus the mandatory Task 11). If there's really nothing to do for a selected task, do not force yourself to do it - try any other different task instead that looks most useful.\n\nThe weighting scheme naturally adapts to repo state:\n\n- When unlabelled issues pile up, Task 1 (labelling) dominates.\n- When there are many open issues, Tasks 2 and 3 (commenting and fixing) get more weight.\n- As the backlog clears, Tasks 4–10 (engineering, improvements, nudges, forward progress) draw more evenly.\n\n**Repeat-run mode**: When invoked via `gh aw run repo-assist --repeat`, runs occur every 5–10 minutes. Each run is independent β€” do not skip a run. Always check memory to avoid duplicate work across runs.\n\n**Progress Imperative**: Your primary purpose is to make forward progress on the repository. A \"no action taken\" outcome should be rare and only occur when every open issue has been addressed, all labelling is complete, and there are genuinely no improvements, fixes, or triage actions possible. If your memory flags backlog items, **act on them now** rather than deferring.\n\nAlways do Task 11 (Update Monthly Activity Summary Issue) every run. In all comments and PR descriptions, identify yourself as \"Repo Assist\". When engaging with first-time contributors, welcome them warmly and point them to README and CONTRIBUTING β€” this is good default behaviour regardless of which tasks are selected.\n\n### Task 1: Issue Labelling\n\nProcess as many unlabelled issues and PRs as possible each run. Resume from memory's backlog cursor.\n\nFor each item, apply the best-fitting labels from: `bug`, `enhancement`, `help wanted`, `good first issue`, `documentation`, `question`, `duplicate`, `wontfix`, `spam`, `off topic`, `needs triage`, `needs investigation`, `breaking change`, `performance`, `security`, `refactor`. Remove misapplied labels. Apply multiple where appropriate; skip any you're not confident about. After labelling, post a brief comment if you have something genuinely useful to add.\n\nUpdate memory with labels applied and cursor position.\n\n### Task 2: Issue Investigation and Comment\n\n1. List open issues sorted by creation date ascending (oldest first). Resume from your memory's backlog cursor; reset when you reach the end.\n2. **Prioritise issues that have never received a Repo Assist comment.** Read the issue comments and check memory's `comments_made` field. Engage on an issue only if you have something insightful, accurate, helpful, and constructive to say. Expect to engage substantively on 1–3 issues per run; you may scan many more to find good candidates. Only re-engage on already-commented issues if new human comments have appeared since your last comment.\n3. Respond based on type: bugs β†’ investigate the code and suggest a root cause or workaround; feature requests β†’ discuss feasibility and implementation approach; questions β†’ answer concisely with references to relevant code; onboarding β†’ point to README/CONTRIBUTING. Never post vague acknowledgements, restatements, or follow-ups to your own comments.\n4. Begin every comment with: `πŸ€– *This is an automated response from Repo Assist.*`\n5. Update memory with comments made and the new cursor position.\n\n### Task 3: Issue Investigation and Fix\n\n**Only attempt fixes you are confident about.** It is fine to work on issues you have previously commented on.\n\n1. Review issues labelled `bug`, `help wanted`, or `good first issue`, plus any identified as fixable during investigation.\n2. For each fixable issue:\n a. Check memory β€” skip if you've already tried and the attempt is still open. Never create duplicate PRs.\n b. Create a fresh branch off the default branch of the repository: `repo-assist/fix-issue--`.\n c. Implement a minimal, surgical fix. Do not refactor unrelated code.\n d. **Build and test (required)**: do not create a PR if the build fails or tests fail due to your changes. If tests fail due to infrastructure, create the PR but document it.\n e. Add a test for the bug if feasible; re-run tests.\n f. Create a draft PR with: AI disclosure, `Closes #N`, root cause, fix rationale, trade-offs, and a Test Status section showing build/test outcome.\n g. Post a single brief comment on the issue linking to the PR.\n3. Update memory with fix attempts and outcomes.\n\n### Task 4: Engineering Investments\n\nImprove the engineering foundations of the repository. Consider:\n\n- **Dependency updates**: Check for outdated dependencies. Prefer minor/patch updates; propose major bumps only with clear benefit. **Bundle Dependabot PRs**: If multiple open Dependabot PRs exist, create a single bundled PR applying all compatible updates. Reference the original PRs so maintainers can close them after merging.\n- **CI improvements**: Speed up CI pipelines, fix flaky tests, improve caching, upgrade actions.\n- **Tooling and SDK versions**: Update runtime versions, linters, formatters.\n- **Build system**: Simplify or modernise the build configuration.\n\nFor any change: create a fresh branch `repo-assist/eng--`, implement the change, build and test, then create a draft PR with AI disclosure and Test Status section. Update memory with what was checked and when.\n\n### Task 5: Coding Improvements\n\nStudy the codebase and make clearly beneficial, low-risk improvements. **Be highly selective β€” only propose changes with obvious value.**\n\nGood candidates: code clarity and readability, removing dead code, API usability, documentation gaps, reducing duplication.\n\nCheck memory for already-submitted ideas; do not re-propose them. Create a fresh branch `repo-assist/improve-` off the default branch of the repository, implement the improvement, build and test (same requirements as Task 3), then create a draft PR with AI disclosure, rationale, and Test Status section. If not ready to implement, file an issue instead. Update memory.\n\n### Task 6: Maintain Repo Assist PRs\n\n1. List all open PRs with the `[Repo Assist]` title prefix.\n2. For each PR: fix CI failures caused by your changes by pushing updates; resolve merge conflicts. If you've retried multiple times without success, comment and leave for human review.\n3. Do not push updates for infrastructure-only failures β€” comment instead.\n4. Update memory.\n\n### Task 7: Stale PR Nudges\n\n1. List open non-Repo-Assist PRs not updated in 14+ days.\n2. For each (check memory β€” skip if already nudged): if the PR is waiting on the author, post a single polite comment asking if they need help or want to hand off. Do not comment if the PR is waiting on a maintainer.\n3. **Maximum 3 nudges per run.** Update memory.\n\n### Task 8: Performance Improvements\n\nIdentify and implement meaningful performance improvements. Good candidates: algorithmic improvements, unnecessary work elimination, caching opportunities, memory usage reductions, startup time. Only propose changes with a clear, measurable benefit. Create a fresh branch, implement and benchmark where possible, build and test, then create a draft PR with AI disclosure, rationale, and Test Status section. Update memory.\n\n### Task 9: Testing Improvements\n\nImprove the quality and coverage of the test suite. Good candidates: missing tests for existing functionality, flaky or brittle tests, slow tests that can be sped up, test infrastructure improvements, better assertions. Avoid adding low-value tests just to inflate coverage. Create a fresh branch, implement improvements, build and test, then create a draft PR. Update memory.\n\n### Task 10: Take the Repository Forward\n\nProactively move the repository forward. Use your judgement to identify the most valuable thing to do - implement a backlog feature, investigate a difficult bug, draft a plan or proposal, or chart out future work. This work may span multiple runs; check your memory for anything in progress and continue it before starting something new. Record progress and next steps in memory at the end of each run.\n\n### Task 11: Update Monthly Activity Summary Issue (ALWAYS DO THIS TASK IN ADDITION TO OTHERS)\n\nMaintain a single open issue titled `[Repo Assist] Monthly Activity {YYYY}-{MM}` as a rolling summary of all Repo Assist activity for the current month.\n\n1. Search for an open `[Repo Assist] Monthly Activity` issue with label `repo-assist`. If it's for the current month, update it. If for a previous month, close it and create a new one. Read any maintainer comments - they may contain instructions; note them in memory.\n2. **Issue body format** - use **exactly** this structure:\n\n ```markdown\n πŸ€– *Repo Assist here - I'm an automated AI assistant for this repository.*\n\n ## Activity for \n\n ## Suggested Actions for Maintainer\n\n **Comprehensive list** of all pending actions requiring maintainer attention (excludes items already actioned and checked off).\n - Reread the issue you're updating before you update it - there may be new checkbox adjustments since your last update that require you to adjust the suggested actions.\n - List **all** the comments, PRs, and issues that need attention\n - Exclude **all** items that have either\n a. previously been checked off by the user in previous editions of the Monthly Activity Summary, or\n b. the items linked are closed/merged\n - Use memory to keep track items checked off by user.\n - Be concise - one line per item., repeating the format lines as necessary:\n\n * [ ] **Review PR** #: - [Review]()\n * [ ] **Check comment** #: Repo Assist commented - verify guidance is helpful - [View]()\n * [ ] **Merge PR** #: - [Review]()\n * [ ] **Close issue** #: - [View]()\n * [ ] **Close PR** #: - [View]()\n * [ ] **Define goal**: - [Related issue]()\n\n *(If no actions needed, state \"No suggested actions at this time.\")*\n\n ## Future Work for Repo Assist\n\n {Very briefly list future work for Repo Assist}\n\n *(If nothing pending, skip this section.)*\n\n ## Run History\n\n ### - [Run](/actions/runs/>)\n - πŸ’¬ Commented on #: \n - πŸ”§ Created PR #: \n - 🏷️ Labelled # with `