Compile unified AWF enclaves through mcpg - #50920
Conversation
Compile AWF-owned script and agent enclaves through mcpg with run-scoped capability handoff, timeout derivation, network validation, schemas, tests, and documentation. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
There was a problem hiding this comment.
Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.
Note
This error may be related to your runner configuration. You can now configure runners for Copilot code review separately from Copilot cloud agent by creating a copilot-code-review.yml file with your setup steps. Read the docs for details.
|
@copilot Please refresh this PR branch if needed and run the
|
PR finisher complete. Local validation passed ( |
|
Nice work on the enclave compiler integration! 🎯 This PR looks solid: ✅ Focused scope — all changes align with unified AWF enclave compilation through mcpg The PR properly addresses the AWF integration prerequisite per the firewall schema alignment, and the inline agentic workflow attribution is noted. Ready for review! 🚀
|
|
@copilot Please triage this PR and run the Refresh the branch if needed.
|
PR finisher complete.
Actions taken: Local validation confirmed green. No code changes needed. |
|
@copilot Please triage this PR and run the Refresh the branch if needed.
|
PR finisher complete (second pass, no changes needed).
Hand-off: A maintainer needs to approve the pending deployment gates (CGO/CWI/Doc Build) to unblock merge. |
|
@copilot Please triage this PR, refresh the branch if needed, and run the Branch refresh was requested. Copilot review appears to have errored earlier, so please re-check reviewer feedback state as part of triage. Run context: https://github.com/github/gh-aw/actions/runs/31146242452
|
Branch has been refreshed (merged with
Hand-off: A maintainer needs to approve the pending deployment gates (CGO/CWI/Doc Build) to unblock merge. |
PR finisher complete.
No further maintainer follow-up is required beyond approving the pending deployment gates (CGO/CWI/Doc Build) before merge. |
|
@copilot Quick triage nudge for this PR. Please refresh the branch if GitHub can update it cleanly, re-confirm whether anything maintainer-facing remains on the current head, and run the Run: https://github.com/github/gh-aw/actions/runs/31255838666
|
PR finisher complete.
No further maintainer follow-up is required beyond approving the pending deployment gates (CGO/CWI/Doc Build) before merge. |
|
@copilot Quick triage nudge for this PR. Please refresh the branch if GitHub can update it cleanly, review any maintainer-facing follow-up, and run the Run: https://github.com/github/gh-aw/actions/runs/31257633580
|
PR finisher complete.
No further maintainer follow-up is required beyond approving the pending deployment gates (CGO/CWI/Doc Build) before merge. |
|
@copilot Quick triage nudge for this PR. Please refresh the branch if GitHub can update it cleanly, review any maintainer-facing follow-up, and run the
Run: https://github.com/github/gh-aw/actions/runs/31260610434
|
PR finisher complete.
No further maintainer follow-up is required beyond approving the pending deployment gates (CGO/CWI/Doc Build) before merge. |
|
@copilot Quick triage nudge for this PR. Please refresh the branch if GitHub can update it cleanly, review any maintainer-facing follow-up, and run the
Run: https://github.com/github/gh-aw/actions/runs/31262341296
|
PR finisher complete.
No further maintainer follow-up is required beyond approving the pending deployment gates (CGO/CWI/Doc Build) before merge. |
|
@copilot Quick triage nudge for this PR. Please refresh the branch if GitHub can update it cleanly, re-confirm whether anything maintainer-facing remains on the current head, and run the Run: https://github.com/github/gh-aw/actions/runs/31271510664
|
PR finisher complete.
No further maintainer follow-up is required beyond approving the pending deployment gates (CGO/CWI/Doc Build) before merge. |
|
@copilot Quick triage nudge for this PR. Please refresh the branch if GitHub can update it cleanly, re-confirm whether anything maintainer-facing remains beyond deployment approvals, run the Open items (newest first):
Branch refresh was requested. Run: https://github.com/github/gh-aw/actions/runs/31274764960
|
PR finisher complete.
Confirmed: the only remaining blockers are the CGO/CWI/Doc Build deployment-approval gates. No follow-up fixes are needed. |
Summary
enclavescompiler/frontmatter support aligned with the unified firewall schemaenclave_run_script/enclave_run_agenttools on the syntheticawf-enclaveHTTP upstreamExample
This produces the
awf-enclaveupstream athttp://awf-enclave-mcp:8080/mcp,connectTimeout: 120, andtoolTimeout: 210.Dependency
This is the gh-aw compiler prerequisite for github/gh-aw-firewall#6992. The current default AWF release (
v0.27.44) predates unified enclaves; firewall final removal ofboundedQueries/boundedAgentsmust wait for this compiler PR, and enclave workflows require the release containing #6992.The integration targets mcpg
v0.4.8. Its HTTP transport connects lazily, does not cache failed connection attempts, and retries on later readiness requests, so mcpg may start before the AWF-owned enclave upstream without compiler-owned restart logic.Validation
make agent-report-progressgo test ./pkg/parser ./pkg/workflow -count=1@copilotPlease triage this PR, refresh the branch if possible, and run thepr-finisherskill before handing back to maintainers.Branch refresh is requested if GitHub can update it cleanly.
Run context: https://github.com/github/gh-aw/actions/runs/31183485569> Generated by 👨🍳 PR Sous Chef · gpt54 · 11.6 AIC · ⊞ 5.9K · ◷
Run: https://github.com/github/gh-aw/actions/runs/31240022087> Generated by 👨🍳 PR Sous Chef · gpt54 · 17 AIC · ⌖ 5.44 AIC · ⊞ 6.1K · ◷
Run: https://github.com/github/gh-aw/actions/runs/31243800835> Generated by 👨🍳 PR Sous Chef · gpt54 · 25.5 AIC · ⌖ 6.69 AIC · ⊞ 8.5K · ◷
Run: https://github.com/github/gh-aw/actions/runs/31248214015> Generated by 👨🍳 PR Sous Chef · gpt54 · 19.2 AIC · ⌖ 6.73 AIC · ⊞ 6.1K · ◷
Run context: https://github.com/github/gh-aw/actions/runs/31250442499> Generated by 👨🍳 PR Sous Chef · gpt54 · 10.2 AIC · ⌖ 5.36 AIC · ⊞ 6.1K · ◷
Run: https://github.com/github/gh-aw/actions/runs/31251975204> Generated by 👨🍳 PR Sous Chef · gpt54 · 16.7 AIC · ⌖ 5.39 AIC · ⊞ 8.5K · ◷
Run: https://github.com/github/gh-aw/actions/runs/31255838666> Generated by 👨🍳 PR Sous Chef · gpt54 · 9.08 AIC · ⌖ 5.36 AIC · ⊞ 8.5K · ◷
Run: https://github.com/github/gh-aw/actions/runs/31257633580> Generated by 👨🍳 PR Sous Chef · gpt54 · 8.32 AIC · ⌖ 5.34 AIC · ⊞ 6.1K · ◷
Run: https://github.com/github/gh-aw/actions/runs/31262341296> Generated by 👨🍳 PR Sous Chef · gpt54 · 10 AIC · ⌖ 5.39 AIC · ⊞ 8.5K · ◷