Run safe-outputs MCP in the gh-aw node container by Copilot · Pull Request #39100 · github/gh-aw

Copilot · 2026-06-13T15:42:29Z

This changes safe-outputs from a separately started HTTP sidecar into a first-class MCP server entry. The generated workflow now runs safe-outputs inside the gh-aw-node container with write access to the workspace, safe-outputs runtime files, and the safe-outputs log directory.

What changed
- Replaced the generated safe-outputs HTTP server config with a containerized stdio MCP server definition.
- Added a dedicated published container constant for ghcr.io/github/gh-aw-node.
- Mounted the required writable paths directly into the MCP server:
  - workspace
  - ${RUNNER_TEMP}/gh-aw/safeoutputs
  - /tmp/gh-aw/mcp-logs/safeoutputs
Workflow generation
- Removed the dedicated “generate safe-outputs server config” / “start safe-outputs HTTP server” flow.
- Kept safe-outputs runtime file generation (config.json, tools.json) but made those files inputs to the MCP container instead of a host-side server process.
- Dropped the now-unused safe-outputs port/API-key wiring from generated env and gateway setup.
MCP server model
- Safe-outputs is now emitted alongside the rest of the MCP server list instead of being bootstrapped out-of-band.
- The generated MCP entry passes through the runtime env needed by the JS implementation (workspace, runner temp, safe-outputs config/tools paths, log dir, repo context).

Generated shape

{
  "safeoutputs": {
    "container": "ghcr.io/github/gh-aw-node",
    "mounts": [
      "${GITHUB_WORKSPACE}:${GITHUB_WORKSPACE}:rw",
      "${RUNNER_TEMP}/gh-aw/safeoutputs:${RUNNER_TEMP}/gh-aw/safeoutputs:rw",
      "/tmp/gh-aw/mcp-logs/safeoutputs:/tmp/gh-aw/mcp-logs/safeoutputs:rw"
    ],
    "args": ["-w", "${GITHUB_WORKSPACE}"]
  }
}

Related updates
- Updated renderer and setup-generation expectations to reflect stdio container transport instead of HTTP transport.
- Refreshed the affected golden outputs and focused MCP/safe-outputs workflow expectations.

Changeset\n\n- Type: patch\n- Description: Run safe-outputs as a containerized MCP server inside the runtime instead of a separate HTTP sidecar.

Generated by 📋 Changeset Generator for issue #39100 · 13.6 AIC · ⊞ 14.8K · ◷

✨ PR Review Safe Output Test - Run 27471836462

Warning

Firewall blocked 6 domains

The following domains were blocked by the firewall during workflow execution:

accounts.google.com
android.clients.google.com
clients2.google.com
contentautofill.googleapis.com
safebrowsingohttpgateway.googleapis.com
www.google.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "accounts.google.com"
    - "android.clients.google.com"
    - "clients2.google.com"
    - "contentautofill.googleapis.com"
    - "safebrowsingohttpgateway.googleapis.com"
    - "www.google.com"

See Network Configuration for more information.

💥 [THE END] — Illustrated by Smoke Claude · 84.9 AIC · ⌖ 7.94 AIC · ⊞ 8.1K · ◷

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

github-actions · 2026-06-13T16:05:34Z

💫 TO BE CONTINUED... Smoke Claude failed to deliver outputs! Our hero faces unexpected challenges...

github-actions · 2026-06-13T16:05:36Z

🚀 Smoke Antigravity MISSION COMPLETE! Antigravity has spoken. ✨

github-actions · 2026-06-13T16:05:37Z

❌ Design Decision Gate 🏗️ failed to deliver outputs during design decision gate check.

github-actions · 2026-06-13T16:05:40Z

🧪 Test Quality Sentinel completed test quality analysis.

github-actions · 2026-06-13T16:05:40Z

🧠 Matt Pocock Skills Reviewer has completed the skills-based review. ✅

github-actions · 2026-06-13T16:05:40Z

✅ All tools validated successfully! Agent Container Smoke Test confirms agent container is ready.

github-actions · 2026-06-13T16:05:42Z

⚠️ Smoke Gemini failed. Gemini encountered unexpected challenges...

github-actions · 2026-06-13T16:05:54Z

🚀 Smoke Pi MISSION COMPLETE! Pi delivered. 🥧

github-actions · 2026-06-13T16:06:08Z

🌑 The shadows whisper... Smoke Codex failed to deliver outputs. The oracle requires further meditation...

github-actions · 2026-06-13T16:06:25Z

📰 BREAKING: Smoke Copilot is now investigating this pull request. Sources say the story is developing...

github-actions · 2026-06-13T16:06:30Z

📰 BREAKING: Smoke Copilot - AOAI (Entra) is now investigating this pull request. Sources say the story is developing...

github-actions · 2026-06-13T16:06:34Z

📰 BREAKING: Smoke Copilot - AOAI (apikey) is now investigating this pull request. Sources say the story is developing...

github-actions · 2026-06-13T16:09:28Z

Agent Container Tool Check

Tool	Status	Version
bash	✅	5.2.21
sh	✅	available
git	✅	2.54.0
jq	✅	1.7
yq	✅	4.53.3
curl	✅	8.5.0
gh	✅	2.93.0
node	✅	22.22.3
python3	✅	3.11.15 (PyPy 7.3.23)
go	✅	1.24.13
java	✅	21.0.11 (Temurin)
dotnet	✅	10.0.300

Result: 12/12 tools available ✅

Overall Status: PASS

🔧 Tool validation by Agent Container Smoke Test · 40.1 AIC · ⌖ 12.6 AIC · ⊞ 28.1K · ◷

pelikhan · 2026-06-14T16:38:34Z

@copilot merge main, recompile

Investigate https://github.com/github/gh-aw/actions/runs/27505145830/job/81294978998#step:27:1

…H, GITHUB_TOKEN to gateway step env for safeoutputs container Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot · 2026-06-14T16:53:15Z

@copilot merge main, recompile

Investigate https://github.com/github/gh-aw/actions/runs/27505145830/job/81294978998#step:27:1

The CI failure was: Configuration validation failed: undefined environment variable referenced: GH_AW_SAFE_OUTPUTS_CONFIG_PATH (plus GH_AW_SAFE_OUTPUTS_TOOLS_PATH and GITHUB_TOKEN).

Root cause: collectMCPEnvironmentVariables only added GH_AW_SAFE_OUTPUTS to the gateway step env: block, but not GH_AW_SAFE_OUTPUTS_CONFIG_PATH or GH_AW_SAFE_OUTPUTS_TOOLS_PATH. The MCP gateway uses resolveEnvPlaceholders to expand ${VAR} references in the safeoutputs container env JSON — if those vars aren't in process.env, startup fails.

Fixed in the latest commit by adding all three to mcp_environment.go in the hasSafeOutputs block, and recompiled all 246 lock files. Also merged latest main (1 new commit).

github-actions · 2026-06-14T17:39:32Z

@copilot review all comments and address the remaining blocker.
Please reply to the review comments and rerun validation.

Generated by 👨‍🍳 PR Sous Chef · 63.3 AIC · ⌖ 1.03 AIC · ⊞ 17.4K · ◷

github-actions · 2026-06-14T18:22:18Z

✨ The prophecy is fulfilled... Smoke Codex has completed its mystical journey. The stars align. 🌟

github-actions · 2026-06-14T18:22:18Z

🚀 Smoke Antigravity MISSION COMPLETE! Antigravity has spoken. ✨

github-actions · 2026-06-14T18:22:19Z

🎬 THE END — Smoke Claude MISSION: ACCOMPLISHED! The hero saves the day! ✨

github-actions · 2026-06-14T18:22:21Z

🚀 Smoke Pi MISSION COMPLETE! Pi delivered. 🥧

github-actions · 2026-06-14T18:22:22Z

✅ All tools validated successfully! Agent Container Smoke Test confirms agent container is ready.

github-actions · 2026-06-14T18:22:24Z

⚠️ Smoke Gemini failed. Gemini encountered unexpected challenges...

github-actions · 2026-06-14T18:22:55Z

📰 BREAKING: Smoke Copilot is now investigating this pull request. Sources say the story is developing...

github-actions · 2026-06-14T18:23:10Z

📰 BREAKING: Smoke Copilot - AOAI (Entra) is now investigating this pull request. Sources say the story is developing...

github-actions · 2026-06-14T18:23:27Z

📰 BREAKING: Smoke Copilot - AOAI (apikey) is now investigating this pull request. Sources say the story is developing...

github-actions · 2026-06-14T18:53:12Z

``
@copilot review all comments and address the unresolved review feedback.
Please refresh the branch, rerun checks, and summarize any remaining blockers.

Generated by 👨‍🍳 PR Sous Chef · 53.4 AIC · ⌖ 0.977 AIC · ⊞ 17.4K · ◷

alinasisi

Logic looks correct. One suggestion: the early return on line prevents the cleanup function from running — worth adding a finally block.

pelikhan · 2026-06-14T22:44:34Z

@copilot review issues https://github.com/github/gh-aw/actions/runs/27507414622/job/81302411023

Containerize safe-outputs MCP server

ddb10e7

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot AI assigned Copilot and pelikhan Jun 13, 2026

Copilot AI changed the title ~~Configure safe-outputs MCP in gh-aw node container~~ Run safe-outputs MCP in the gh-aw node container Jun 13, 2026

Copilot created this pull request from a session on behalf of pelikhan June 13, 2026 15:42 View session

Copilot AI requested a review from pelikhan June 13, 2026 15:42

Copilot finished work on behalf of pelikhan June 13, 2026 15:42

pelikhan marked this pull request as ready for review June 13, 2026 16:04

Copilot AI review requested due to automatic review settings June 13, 2026 16:04

pelikhan added the smoke label Jun 13, 2026

Copilot started reviewing on behalf of pelikhan June 13, 2026 16:04 View session

github-actions Bot temporarily deployed to aoai-model June 13, 2026 16:05 Inactive

github-actions Bot temporarily deployed to aoai-model June 13, 2026 16:06 Inactive

This was referenced Jun 13, 2026

[aw] Smoke Antigravity produced no safe outputs #39104

Closed

[aw] Smoke Pi produced no safe outputs #39105

Closed

[aw] Smoke Gemini failed #39106

Closed

Add changeset

0f12637

Copilot started work on behalf of pelikhan June 14, 2026 16:39 View session

This was referenced Jun 14, 2026

[aw] Smoke Codex produced no safe outputs #39258

Open

[aw] Smoke Claude produced no safe outputs #39259

Open

Fix: add GH_AW_SAFE_OUTPUTS_CONFIG_PATH, GH_AW_SAFE_OUTPUTS_TOOLS_PAT…

5094277

…H, GITHUB_TOKEN to gateway step env for safeoutputs container Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot finished work on behalf of pelikhan June 14, 2026 16:53

pelikhan added smoke and removed smoke labels Jun 14, 2026

github-actions Bot temporarily deployed to aoai-model June 14, 2026 18:22 Inactive

github-actions Bot temporarily deployed to aoai-model June 14, 2026 18:23 Inactive

This was referenced Jun 14, 2026

[aw] Agent Container Smoke Test produced no safe outputs #39267

Open

[aw] Smoke Copilot - AOAI (apikey) produced no safe outputs #39268

Open

github-actions Bot deployed to aoai-model June 14, 2026 18:34 Active

This was referenced Jun 14, 2026

[aw] Smoke Copilot - AOAI (Entra) produced no safe outputs #39269

Open

[aw] Smoke Copilot exceeded max AI credits #39270

Open

alinasisi reviewed Jun 14, 2026

View reviewed changes

Copilot started work on behalf of pelikhan June 14, 2026 22:45 View session

Conversation

Copilot AI commented Jun 13, 2026 • edited by github-actions Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Changeset\n\n- Type: patch\n- Description: Run safe-outputs as a containerized MCP server inside the runtime instead of a separate HTTP sidecar.

Uh oh!

github-actions Bot commented Jun 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jun 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jun 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jun 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jun 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jun 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jun 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jun 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jun 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jun 13, 2026

Uh oh!

github-actions Bot commented Jun 13, 2026

Uh oh!

github-actions Bot commented Jun 13, 2026

Uh oh!

github-actions Bot commented Jun 13, 2026

Agent Container Tool Check

Uh oh!

pelikhan commented Jun 14, 2026

Uh oh!

Copilot AI commented Jun 14, 2026

Uh oh!

github-actions Bot commented Jun 14, 2026

Uh oh!

github-actions Bot commented Jun 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jun 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jun 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jun 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jun 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jun 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jun 14, 2026

Uh oh!

github-actions Bot commented Jun 14, 2026

Uh oh!

github-actions Bot commented Jun 14, 2026

Uh oh!

github-actions Bot commented Jun 14, 2026

Uh oh!

alinasisi left a comment

Choose a reason for hiding this comment

Uh oh!

pelikhan commented Jun 14, 2026

Uh oh!

Reviewers

Assignees

Copilot AI commented Jun 13, 2026 •

edited by github-actions Bot

Loading

github-actions Bot commented Jun 13, 2026 •

edited

Loading

github-actions Bot commented Jun 13, 2026 •

edited

Loading

github-actions Bot commented Jun 13, 2026 •

edited

Loading

github-actions Bot commented Jun 13, 2026 •

edited

Loading

github-actions Bot commented Jun 13, 2026 •

edited

Loading

github-actions Bot commented Jun 13, 2026 •

edited

Loading

github-actions Bot commented Jun 13, 2026 •

edited

Loading

github-actions Bot commented Jun 13, 2026 •

edited

Loading

github-actions Bot commented Jun 13, 2026 •

edited

Loading

github-actions Bot commented Jun 14, 2026 •

edited

Loading

github-actions Bot commented Jun 14, 2026 •

edited

Loading

github-actions Bot commented Jun 14, 2026 •

edited

Loading

github-actions Bot commented Jun 14, 2026 •

edited

Loading

github-actions Bot commented Jun 14, 2026 •

edited

Loading

github-actions Bot commented Jun 14, 2026 •

edited

Loading