fix: inline campaign discovery logic in campaign workflow step

.github/workflows/security-alert-burndown.campaign.g.md

@@ -57,11 +57,58 @@ steps:
   with:
     github-token: ${{ secrets.GH_AW_GITHUB_MCP_SERVER_TOKEN || secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}
     script: |
-
-      const { setupGlobals } = require('/opt/gh-aw/actions/setup_globals.cjs');
-      setupGlobals(core, github, context, exec, io);
-      const { main } = require('/opt/gh-aw/actions/campaign_discovery.cjs');
-      await main();
+      const fs = require("fs");
+      const path = require("path");
+
+      const campaignId = process.env.GH_AW_CAMPAIGN_ID;
+      const trackerLabel = process.env.GH_AW_TRACKER_LABEL;
+      const discoveryRepos = process.env.GH_AW_DISCOVERY_REPOS;
+      const cursorPath = process.env.GH_AW_CURSOR_PATH;
+      const maxItems = parseInt(process.env.GH_AW_MAX_DISCOVERY_ITEMS ?? "50", 10);
+      const maxPages = parseInt(process.env.GH_AW_MAX_DISCOVERY_PAGES ?? "3", 10);
+      const projectUrl = process.env.GH_AW_PROJECT_URL;
+      const workflows = (process.env.GH_AW_WORKFLOWS ?? "").split(",").map(w => w.trim()).filter(Boolean);
+
+      if (!campaignId || !trackerLabel || !discoveryRepos) {
+        core.setFailed("Missing required environment variables: GH_AW_CAMPAIGN_ID, GH_AW_TRACKER_LABEL, GH_AW_DISCOVERY_REPOS");
+        return;
+      }
+
+      const repos = discoveryRepos.split(",").map(r => r.trim()).filter(Boolean);
+      const allItems = [];
+
+      for (const repoPath of repos) {
+        const parts = repoPath.split("/");
+        if (parts.length !== 2) { core.warning(`Invalid repo format: "${repoPath}" — skipping`); continue; }
+        const [owner, repo] = parts;
+        let page = 1;
+        while (page <= maxPages && allItems.length < maxItems) {
+          const perPage = Math.min(30, maxItems - allItems.length);
+          try {
+            const response = await github.rest.issues.listForRepo({ owner, repo, labels: trackerLabel, state: "all", sort: "updated", direction: "desc", per_page: perPage, page });
+            if (response.data.length === 0) break;
+            for (const item of response.data) {
+              if (allItems.length >= maxItems) break;
+              allItems.push({ id: item.id, number: item.number, title: item.title, state: item.state, html_url: item.html_url, created_at: item.created_at, updated_at: item.updated_at, labels: item.labels.map(l => typeof l === "string" ? l : (l.name ?? "")), repo: `${owner}/${repo}`, is_pr: !!item.pull_request });
+            }
+            if (response.data.length < perPage) break;
+            page++;
+          } catch (err) { core.error(`Failed to search ${owner}/${repo} page ${page}: ${err.message}`); break; }
+        }
+      }
+
+      const GH_AW_TMP_DIR = "/tmp/gh-aw";
+      const discoveryOutputPath = path.join(GH_AW_TMP_DIR, "campaign-discovery.json");
+      const discoveryData = { campaign_id: campaignId, timestamp: new Date().toISOString(), tracker_label: trackerLabel, project_url: projectUrl, workflows, items_count: allItems.length, items: allItems };
+      try {
+        fs.mkdirSync(GH_AW_TMP_DIR, { recursive: true });
+        fs.writeFileSync(discoveryOutputPath, JSON.stringify(discoveryData, null, 2));
+      } catch (err) { core.warning(`Failed to write discovery data: ${err.message}`); }
+
+      core.setOutput("items_count", String(allItems.length));
+      core.setOutput("campaign_id", campaignId);
+      core.setOutput("discovery_file", discoveryOutputPath);
+      core.info(`✓ Campaign discovery complete: ${allItems.length} item(s) found for campaign "${campaignId}"`);
 ---
 
 <!-- This file was automatically generated by gh-aw. DO NOT EDIT. -->

actions/setup/README.md

@@ -7,7 +7,7 @@ This action copies workflow script files to the agent environment.
 This action runs in all workflow jobs to provide scripts that can be used instead of being inlined in the workflow. This includes scripts for activation jobs, agent jobs, and safe-output jobs.
 
 The action copies:
-- 117 `.cjs` JavaScript files from the `js/` directory
+- 226 `.cjs` JavaScript files from the `js/` directory
 - 7 `.sh` shell scripts from the `sh/` directory
 
 All files are copied to the destination directory (default: `/tmp/gh-aw/actions`). These files are generated by running `make actions-build` and are committed to the repository.
@@ -35,7 +35,7 @@ Default: `/tmp/gh-aw/actions`
 
 ### `files-copied`
 
-The number of files copied to the destination directory (should be 124: 117 JavaScript files + 7 shell scripts).
+The number of files copied to the destination directory (should be 233: 226 JavaScript files + 7 shell scripts).
 
 ## Example
 
@@ -56,7 +56,7 @@ steps:
 
 This action copies files from `actions/setup/`, including:
 
-### JavaScript Files (117 files from `js/`)
+### JavaScript Files (226 files from `js/`)
 - Activation job scripts (check_stop_time, check_skip_if_match, check_command_position, etc.)
 - Agent job scripts (compute_text, create_issue, create_pull_request, etc.)
 - Safe output scripts (safe_outputs_*, safe_inputs_*, messages, etc.)