… mcp add docs, command group tests (#23912)

* Initial plan

* Fix 4 CLI consistency issues: column width, flag description, mcp add help, command group tests

Agent-Logs-Url: https://github.com/github/gh-aw/sessions/689abb50-e6bc-4a50-bedc-3186351920aa

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

…ation, and config parsing (#23911)

* Initial plan

* refactor: split checkout_manager.go into state management and step generation

Agent-Logs-Url: https://github.com/github/gh-aw/sessions/cca3ed78-7874-44d7-bb65-ecd009e76b22

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Co-authored-by: Peli de Halleux <pelikhan@users.noreply.github.com>

* Initial plan

* feat: split constants.go into domain-grouped files

Split pkg/constants/constants.go (1083 lines) into domain-grouped files:
- engine_constants.go: EngineName type, engine constants, EngineOption/EngineOptions, SystemSecrets, env vars, CopilotStemCommands
- job_constants.go: JobName, StepID, MCPServerID types + all job/step/artifact constants
- url_constants.go: URL, DocURL types + all URL/DocURL constants
- version_constants.go: Version, ModelName types + all Default*Version constants
- feature_constants.go: FeatureFlag type + all feature flag constants
- tool_constants.go: AllowedExpressions, DangerousPropertyNames, GitHub tool lists, bash tools
- constants.go: trimmed to 294 lines with LineLength, CommandPrefix, WorkflowID types + general constants

All files under 300 lines. No type/constant names or method signatures changed.

Agent-Logs-Url: https://github.com/github/gh-aw/sessions/1e2cd369-fabb-463f-891f-ffaf3f5ce912

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

* chore: update cli version checker to v0.65.3

Bump minimumVersion and minRecommendedVersion in releases.json to
v0.65.3 (latest release) to reflect current supported version."

Agent-Logs-Url: https://github.com/github/gh-aw/sessions/ac204928-7d5c-4a71-a453-75a61395b9e8

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

* fix: update CI to parse version constants from version_constants.go

After splitting constants.go, version constants (DefaultFirewallVersion,
DefaultMCPGatewayVersion, DefaultGitHubMCPServerVersion) moved to
version_constants.go. Update the CI script to read from the correct file.

Agent-Logs-Url: https://github.com/github/gh-aw/sessions/cc641d74-5f60-44e4-89fc-871e598cabac

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Co-authored-by: Peli de Halleux <pelikhan@users.noreply.github.com>

…23915)

* Initial plan

* fix: paginate label fetch in create_discussion and update_discussion

Both fetchLabelIds (create_discussion.cjs) and fetchLabelNodeIds
(update_discussion.cjs) only fetched the first 100 repository labels
via a non-paginated GraphQL query. Repositories with >100 labels would
silently miss any labels beyond page 1.

Fix both functions to use cursor-based pagination (pageInfo.hasNextPage /
endCursor), accumulating all label nodes before building the name→ID map.

Update tests to include pageInfo in mock responses and add explicit
pagination tests that verify multi-page label lookup works correctly.

Agent-Logs-Url: https://github.com/github/gh-aw/sessions/6ccd6af4-ab2d-4187-8c6a-967119fd798f

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

* refactor: extract fetchAllRepoLabels shared helper into github_api_helpers

Move the paginated label fetch loop out of create_discussion.cjs and
update_discussion.cjs into a single fetchAllRepoLabels() function in
github_api_helpers.cjs. Both fetchLabelIds and fetchLabelNodeIds now
call this shared helper instead of duplicating the GraphQL query and
pagination loop.

Add unit tests for fetchAllRepoLabels covering single-page, multi-page,
empty, and missing-data cases.

Agent-Logs-Url: https://github.com/github/gh-aw/sessions/434e06f2-a49f-49c2-a289-5c831c6a8b3a

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

* fix: address review comments on log truncation and mock ordering

- create_discussion.cjs: truncate available-labels list in the unmatched
  warning to first 20 names + total count, preventing huge log lines when
  a repo has hundreds of labels
- create_discussion_labels.test.cjs: move addLabelsToLabelable branch
  before labels(first:) in all mock implementations so the mutation
  (which contains labels(first: 10) in its selection set) is never
  accidentally matched by the broader labels(first:) condition

Agent-Logs-Url: https://github.com/github/gh-aw/sessions/09c78f34-838a-45bd-8bb7-5fb21f84f5fb

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

…3917)

* Initial plan

* refactor: extract business logic from trial_command.go into separate files

- trial_command.go: trimmed to NewTrialCommand() only (141 lines, down from 1007)
- trial_types.go (new, 45 lines): WorkflowTrialResult, CombinedTrialResult, RepoConfig, TrialOptions
- trial_runner.go (new, 261 lines): RunWorkflowTrials + getCurrentGitHubUsername
- trial_helpers.go (new, 374 lines): executeTrialRun + triggerWorkflowRun + parseIssueSpec + saveTrialResult + copyTrialResultsToHostRepo
- trial_confirmation.go (new, 220 lines): showTrialConfirmation

No exported names or function signatures changed. All tests pass.

Agent-Logs-Url: https://github.com/github/gh-aw/sessions/9a0ed25c-8ccf-4d01-8b17-719913f928b9

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Co-authored-by: Peli de Halleux <pelikhan@users.noreply.github.com>

…h push fails (#23926)

* Initial plan

* fix: treat push branch failure as warning with manual instructions (#issue)

Agent-Logs-Url: https://github.com/github/gh-aw/sessions/77801893-44e8-42c5-8cca-85982ecd34ce

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

…ontext (#23961)

When the agent produces a patch (has_patch == 'true'), the detection job
now checks out the target repository so the threat detection engine can
analyze code changes in the context of the surrounding codebase. This
allows the engine to distinguish legitimate patterns from suspicious ones
by examining existing dependencies, module structure, and calling code.

Changes:
- Add buildWorkspaceCheckoutForDetectionStep() that emits a conditional
  actions/checkout step with persist-credentials: false
- Always grant contents: read on the detection job (was previously only
  in dev/script mode) since the checkout requires it
- Update threat detection prompt template with codebase context section
  instructing the engine to use $GITHUB_WORKSPACE when a patch is present
- Add 4 unit tests covering step presence, permissions, ordering, and
  custom steps scenarios
- Recompile all 179 workflows and update wasm golden files

Closes #23191

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

…engine.version, and tools.timeout (#23947)

…y git setup (#23929)

…ssion subdirectories (#23992)

Remove repetitive code blocks in the debug logging section by combining
five separate bash examples into a single annotated block. Simplify the
Copilot license diagnosis steps and the timeout explanation.

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>