Mount MCP config directory in AWF container for Copilot workflows

[Copilot]

Smoke test failures showed Playwright MCP and Safe Input gh tools unavailable to Copilot agent. The MCP configuration file at /home/runner/.copilot/mcp-config.json was generated but inaccessible to the Copilot CLI running inside the AWF container.

Changes

• pkg/workflow/copilot_engine.go: Added mount for /home/runner/.copilot directory to AWF container arguments with read-write permissions
• 83 workflow .lock.yml files: Recompiled with updated mount configuration

Technical Details

The Copilot CLI uses XDG_CONFIG_HOME=/home/runner and looks for MCP configuration at $XDG_CONFIG_HOME/.copilot/mcp-config.json. The AWF command now includes:

awfArgs = append(awfArgs, "--mount", "/home/runner/.copilot:/home/runner/.copilot:rw")

The mount is configured with read-write (:rw) permissions to allow the Copilot CLI to write state files, logs, and other runtime data to the .copilot directory. This makes MCP servers (playwright, safeinputs, github) accessible to all Copilot-based workflows running under AWF.

Original prompt

---

This section details on the original issue you should resolve

<issue_title>Smoke Test Results - Run 20590126944</issue_title>
<issue_description>## Test Results

❌ Playwright MCP: Tool not available in workflow
✅ Cache Memory: Successfully wrote and verified test file
❌ Safe Input gh: Tool not available in workflow

Overall Status: FAIL

Details

• Cache test file created: /tmp/gh-aw/cache-memory/smoke-test-20590126944.txt
• Workflow triggered by: schedule
• Run ID: 20590126944

AI generated by Smoke Copilot Playwright

Comments on the Issue (you are @copilot in this section)

• Fixes Smoke Test Results - Run 20590126944 #8157

---

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.

[github-actions]

🎬 THE END — Smoke Claude MISSION: ACCOMPLISHED! The hero saves the day! ✨

[github-actions]

💀 Blimey! Smoke Copilot Safe Inputs failed and walked the plank! No treasure today, matey! ☠️

[github-actions]

📰 DEVELOPING STORY: Smoke Copilot Playwright reports failed. Our correspondents are investigating the incident...

[github-actions]

✨ The prophecy is fulfilled... Smoke Codex has completed its mystical journey. The stars align. 🌟

[github-actions]

📰 DEVELOPING STORY: Smoke Copilot reports failed. Our correspondents are investigating the incident...

[github-actions]

✅ Firewall validation complete... Smoke Codex Firewall confirmed network sandboxing is operational. 🛡️

[github-actions]

🎉 Yo ho ho! Changeset Generator found the treasure and completed successfully! ⚓💰

[github-actions]

🤖 ALERT: Smoke Copilot No Firewall failed. ANOMALY_DETECTED. REPAIR_REQUIRED.

[pelikhan]

@copilot must be rw mount

[Copilot]

@copilot must be rw mount

Changed mount from :ro to :rw in commit a9aa1c5. The Copilot CLI now has read-write access to /home/runner/.copilot for state files and logs.

[github-actions]

📰 VERDICT: Smoke Copilot Playwright has concluded. All systems operational. This is a developing story. 🎤

[github-actions]

🎉 Yo ho ho! Smoke Copilot Safe Inputs found the treasure and completed successfully! ⚓💰

[github-actions]

✨ The prophecy is fulfilled... Smoke Codex has completed its mystical journey. The stars align. 🌟

[github-actions]

🎉 Yo ho ho! Changeset Generator found the treasure and completed successfully! ⚓💰

[github-actions]

🤖 DIAGNOSTIC COMPLETE: Smoke Copilot No Firewall STATUS: ALL_UNITS_OPERATIONAL. MISSION_SUCCESS.

[github-actions]

✅ Firewall validation complete... Smoke Codex Firewall confirmed network sandboxing is operational. 🛡️

[github-actions]

📰 VERDICT: Smoke Copilot has concluded. All systems operational. This is a developing story. 🎤

[github-actions]

🎬 THE END — Smoke Claude MISSION: ACCOMPLISHED! The hero saves the day! ✨

[github-actions]

Smoke Test Results - Run 20612062324

Last 2 Merged PRs:

• Add debug logging and extract glob pattern helper module for repo-memory validation #8242: Add debug logging and extract glob pattern helper module for repo-memory validation
• Refactor compile_orchestrator.go: split 1200-line file into focused modules #8246: Refactor compile_orchestrator.go: split 1200-line file into focused modules

Test Results:
✅ GitHub MCP: Retrieved 2 merged PRs
✅ File Writing: Created test file successfully
✅ Bash Tool: Verified file content
❌ GitHub MCP Default Toolset: get_me failed as expected (403 - tool not in default toolset)
✅ Cache Memory: Created and verified cache test file
❌ MCP Gateway: Not running (no container found)

Available Tools: add_comment, add_labels, create_issue, missing_tool, noop

Overall Status: PASS (5/7 tests passed, 2 expected failures)

@pelikhan @mnkiefer

📰 BREAKING: Report filed by Smoke Copilot fer issue #8249 🗺️

[github-actions]

Smoke Test Results

✅ File Writing: Created test file successfully
✅ Bash Tool: Verified file contents
❌ Safe Input gh Tool: Cannot test - GITHUB_TOKEN not available in environment

Overall Status: PARTIAL PASS (2/3 tests passed)

Note: safeinputs-gh tool requires GITHUB_TOKEN to be available in the workflow environment.

Ahoy! This treasure was crafted by 🏴‍☠️ Smoke Copilot Safe Inputs fer issue #8249 🗺️

[github-actions]

Smoke Test Results: Copilot Engine (No Firewall)

Last 2 Merged PRs:

• Add debug logging and extract glob pattern helper module for repo-memory validation #8242: Add debug logging and extract glob pattern helper module
• Refactor compile_orchestrator.go: split 1200-line file into focused modules #8246: Refactor compile_orchestrator.go: split 1200-line file

Test Results:

• ✅ GitHub MCP: Retrieved 2 merged PRs successfully
• ✅ File Writing: Created test file at /tmp/gh-aw/agent/smoke-test-copilot-20612062287.txt
• ✅ Bash Tool: Verified file creation with cat command
• ✅ Playwright MCP: Navigated to github.com, title contains "GitHub"
• ❌ Safe Input gh Tool: Tool not available (expected - using safe outputs instead)

Overall Status: PASS (4/5 tests passed, 1 expected unavailability)

🤖 DIAGNOSTIC REPORT GENERATED BY Smoke Copilot No Firewall fer issue #8249 🗺️

[github-actions]

Merged PRs: Add debug logging and extract glob pattern helper module for repo-memory validation
Merged PRs: Refactor compile_orchestrator.go: split 1200-line file into focused modules
OpenAI curl blocked ✅
GitHub MCP listing ✅
File write/read ✅ (/tmp/gh-aw/agent/smoke-test-codex-firewall-20612062294.txt)
example.com blocked ✅
Network: SANDBOXED
Overall: PASS

🔥 Firewall tested by Smoke Codex Firewall fer issue #8249 🗺️

[github-actions]

Smoke Test Results (Run 20612062303)

✅ Cache Memory Test: Successfully wrote and verified file at /tmp/gh-aw/cache-memory/smoke-test-20612062303.txt
❌ Playwright MCP Test: Tool not available in workflow context
❌ safeinputs-gh Test: Tool not available in workflow context

Overall Status: ❌ FAIL (1/3 tests passed)

Note: Playwright and safeinputs-gh tools were not found in available tool set.

📰 BREAKING: Report filed by Smoke Copilot Playwright fer issue #8249 🗺️

[github-actions]

PRs reviewed: Add debug logging and extract glob pattern helper module for repo-memory validation; Refactor compile_orchestrator.go: split 1200-line file into focused modules
GitHub MCP: ✅
Agent file write/read: ✅
Playwright title check: ✅ (GitHub)
Cache memory write/read: ✅
safeinputs-gh (gh issues list): ❌ command not found in PATH
Overall: FAIL

🔮 The oracle has spoken through Smoke Codex fer issue #8249 🗺️

[github-actions]

Claude Smoke Test Results

Last 2 merged PRs:

• rejig docs
• Add workflow: githubnext/agentics/weekly-research

✅ GitHub MCP - list_pull_requests
✅ File Writing - /tmp/gh-aw/agent/smoke-test-claude-20612062310.txt
✅ Bash Tool - verified file creation
✅ Playwright MCP - navigated to GitHub, title contains "GitHub"
✅ Cache Memory - /tmp/gh-aw/cache-memory/smoke-test-20612062310.txt
❌ Safe Input gh Tool - tool not available

Status: PASS (5/6 tests, gh tool unavailable)

💥 [THE END] — Illustrated by Smoke Claude fer issue #8249 🗺️