[WIP] Investigate issue with safe-output tools registration

[Copilot]

Investigation Complete - Fix Plan

Problem Analysis

The safe-output tools (like create-issue) are not registered or invoked by the agent in workflow run https://github.com/githubnext/gh-aw/actions/runs/21233711074/job/61097121763 because the required environment variables are missing.

Root Cause

In pkg/workflow/mcp_setup_generator.go (lines 541-544), only safe-inputs environment variables are passed to the MCP gateway Docker container. The safe-outputs environment variables (GH_AW_SAFE_OUTPUTS_PORT and GH_AW_SAFE_OUTPUTS_API_KEY) are missing.

Impact

• The MCP configuration file references $GH_AW_SAFE_OUTPUTS_PORT and $GH_AW_SAFE_OUTPUTS_API_KEY
• When the MCP gateway starts, it cannot resolve these variables
• The safe-outputs MCP server URL and authentication fail
• Safe-output tools are not registered and unavailable to the agent

Fix Plan

• Investigate the failing workflow run
• Identify missing environment variables
• Locate the code that builds the MCP gateway Docker command
• Add safe-outputs environment variables to the Docker command (similar to safe-inputs)
• Test the fix with the smoke-claude workflow
• Run validation and tests
• Verify fix resolves the issue

Original prompt

Reference: https://github.com/githubnext/gh-aw/actions/runs/21233711074/job/61097121763

investigate why the safe-output tools, such as create-issue, were not registered or invoked by the agent in the referenced workflow-run.

---

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.