Convert safe_outputs job to use setup action and require mode

[Copilot]

The safe_outputs job was generating inline bash scripts to write JavaScript files and embedding full script content in YAML. This converts it to use the actions/setup action and require mode for loading scripts.

Changes

• Replaced inline bash with actions/setup action (compiler_safe_outputs_core.go)

  • Removed GenerateWriteScriptsStep call and script collection logic
  • Added sparse checkout of actions folder (dev mode) + setup action invocation
  • Scripts now copied from pkg/workflow/js/ to /tmp/gh-aw/actions/ via action

• Converted to require mode (compiler_safe_outputs_core.go)

  • Changed buildConsolidatedSafeOutputStep from inlining scripts to using require pattern
  • Scripts loaded via const { main } = require('/tmp/gh-aw/actions/script.cjs'); await main()
  • Exposes GitHub Actions globals to required modules

• Fixed GitHub App token insertion (compiler_safe_outputs_core.go)

  • Updated insertion index to account for setup action steps
  • Prevents YAML key conflicts with subsequent steps

• Fixed update_cache_memory job (cache.go)

  • Moved setup action addition after restore-only cache check
  • Prevents empty job creation when all caches are restore-only

Before/After

# Before: Inline mode
- name: Setup JavaScript files
  shell: bash
  run: |
    mkdir -p /tmp/gh-aw/scripts
    cat > /tmp/gh-aw/scripts/add_comment.cjs << 'EOF'
    // ... 500+ lines of embedded JavaScript ...
    EOF

- name: Add Comment
  uses: actions/github-script@v8
  with:
    script: |
      // ... 500+ lines of inlined JavaScript ...

# After: Require mode
- name: Setup Scripts
  uses: ./actions/setup
  with:
    destination: /tmp/gh-aw/actions

- name: Add Comment
  uses: actions/github-script@v8
  with:
    script: |
      global.core = core;
      global.github = github;
      global.context = context;
      global.exec = exec;
      global.io = io;
      const { main } = require('/tmp/gh-aw/actions/add_comment.cjs');
      await main();

Note

TestActivationJobNoCheckoutStep failure is pre-existing from base commit e203925 (unrelated to these changes).

Original prompt

Convert to using the require action mode in the safe_outputs job:

• setup scripts
• use require mode instead of inline for all safe output scripts

See run, it is still using the inline mode:

Reference: https://github.com/githubnext/gh-aw/actions/runs/20461070211/job/58793909094

---

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.