π€ *Repo Assist here β I'm an automated AI assistant for this repository.* ## Activity for April 2026 ## Suggested Actions for Maintainer **Comprehensive list** of all pending actions requiring maintainer attention. * [ ] **Review PR** (this run): `refactor(auth): move IsMalformedHeader from server to auth package` β partial closes #4138 β [View open PRs](https://github.com/github/gh-aw-mcpg/pulls?q=is:pr+is:open+%5BRepo+Assist%5D) * [ ] **Check comment** #4138: Repo Assist triaged automated refactoring analysis β verify priority ranking is helpful β [View](https://github.com/github/gh-aw-mcpg/issues/4138) ## Future Work for Repo Assist - Extract shared `sessionSuffix` helper to `internal/strutil` (Issue 1 from #4138) - Extract `policyToMap` helper in `internal/guard` to reduce JSON roundtrip duplication (#4136) - Upgrade `go-sdk` from v1.5.0 β latest once `proxy.golang.org` is unblocked ## Guard Filtering Summary No objects were filtered by the guard policy. ## Run History ### 2026-04-19 12:29 UTC β [Run](https://github.com/github/gh-aw-mcpg/actions/runs/24629079879) - π§ Created PR (this run): `refactor(auth): move IsMalformedHeader from server to auth package` β partial closes #4138 - π¬ Commented on #4138: triaged refactoring analysis, prioritised 4 findings, noted PR for Issue 3 ### 2026-04-18 12:29 UTC β [Run](https://github.com/github/gh-aw-mcpg/actions/runs/24604679198) - π§ Created PR (**merged** #4085): `fix(rust-guard): eliminate scopes.clone() in label_agent + add DIFC_MODE constant` β closes #4008 - π§ Created PR (**merged** #4086): `build: add test-rust Makefile target and include Rust tests in agent-finished` - π¬ Commented on #4008: linking PR with fix details - π¬ Commented on #4039: already fixed by #4049 (Copilot PR), safe to close ### 2026-04-17 12:38 UTC β [Run](https://github.com/github/gh-aw-mcpg/actions/runs/24558457108) - π¬ Commented on #3932, #4008, #3987 ### 2026-04-16 12:41 UTC β [Run](https://github.com/github/gh-aw-mcpg/actions/runs/24510723428) - π§ Created PR (**merged** #3946): `fix(mcp): replace hardcoded 30s with defaultConnectTimeout constant` β closes #3933 - π§ Created PR (**merged** #3947): `test(mcp): add connect-timeout default behaviour tests` ### 2026-04-15 12:39 UTC β [Run](https://github.com/github/gh-aw-mcpg/actions/runs/24454920884) - π§ Created PR (**closed** #3847): `refactor(mcp): extract logInboundRPCResponse helper` β closes #3828 - π¬ Commented on #3828, #3834, #3829 - π·οΈ Labelled #3830 with `bug`; labelled #3802 with `needs triage` ### 2026-04-14 12:40 UTC β [Run](https://github.com/github/gh-aw-mcpg/actions/runs/24399350012) - π§ Created PR #3750 (**merged**): Replace manual inline truncation with `strutil.Truncate` / `sanitize.TruncateSecret` β closes #3737 - π Created issue #3751 (**closed by maintainer**) ### 2026-04-13 12:42 UTC β [Run](https://github.com/github/gh-aw-mcpg/actions/runs/24343836907) - π§ Created PR #3701 (**merged**): Remove redundant `"none"` match arm and unused `MEDIUM_BUFFER_SIZE` β closes #3691 - π¬ Commented on #3691, #3562, #3687 ### 2026-04-12 12:29 UTC β [Run](https://github.com/github/gh-aw-mcpg/actions/runs/24306753924) - π¬ Commented on #3618 - π§ Created PR #3640 (**merged**): Remove 5 redundant `log.Printf` calls from `connection.go` β closes #3633 ### 2026-04-11 12:27 UTC β [Run](https://github.com/github/gh-aw-mcpg/actions/runs/24282446110) - π·οΈ Labelled #3550 with `automation`; labelled #3563 with `enhancement` - π¬ Commented on #3563 - π§ Created PR (**merged**): Add `strutil.TruncateRunes`, delegate `truncateForLog`, inline `lookupEnrichmentToken` alias ### Earlier runs - 2026-04-09: PRs (closed) β `httputil.WriteJSONResponse`, `InitGatewayLoggers`/`InitProxyLoggers` helpers - 2026-04-08: PR (closed) β `rust-guard-test` CI job - 2026-04-07: PR #3325 (closed) β Rust guard: `eq_ignore_ascii_case`, remove stale `#[allow(dead_code)]` - 2026-04-06: PR #3281 (closed) β three compliance fixes (#3272) - 2026-04-05: PR (closed) β move `ExpandEnvArgs` to `envutil` - 2026-04-04: PRs (closed) β `GenerateRandomAPIKey`, `test-race` target - 2026-04-03: PR (closed) β move `logRuntimeError`; commented on #3113 - 2026-04-02: PRs (closed) β `writeDIFCForbidden` helper, `GetEnvDuration` + session timeout - 2026-04-01: PR (closed) β remove `writeJSONResponse` passthrough; commented on #2988, #2909 > [!WARNING] > <details> > <summary><strong>β οΈ Firewall blocked 1 domain</strong></summary> > > The following domain was blocked by the firewall during workflow execution: > > - `proxy.golang.org` > > To allow these domains, add them to the `network.allowed` list in your workflow frontmatter: > > ```yaml > network: > allowed: > - defaults > - "proxy.golang.org" > ``` > > See [Network Configuration](https://github.github.com/gh-aw/reference/network/) for more information. > > </details> > Generated by [Repo Assist](https://github.com/github/gh-aw-mcpg/actions/runs/24629079879/agentic_workflow) Β· β 4.6M Β· [β·](https://github.com/search?q=repo%3Agithub%2Fgh-aw-mcpg+is%3Aissue+%22gh-aw-workflow-call-id%3A+github%2Fgh-aw-mcpg%2Frepo-assist%22&type=issues) > > To install this [agentic workflow](https://github.com/githubnext/agentics/blob/851905c06e905bf362a9f6cc54f912e3df747d55/workflows/repo-assist.md), run > ``` > gh aw add githubnext/agentics/workflows/repo-assist.md@851905c06e905bf362a9f6cc54f912e3df747d55 > ``` <!-- gh-aw-agentic-workflow: Repo Assist, engine: copilot, model: auto, id: 24629079879, workflow_id: repo-assist, run: https://github.com/github/gh-aw-mcpg/actions/runs/24629079879 -->
π€ Repo Assist here β I'm an automated AI assistant for this repository.
Activity for April 2026
Suggested Actions for Maintainer
Comprehensive list of all pending actions requiring maintainer attention.
refactor(auth): move IsMalformedHeader from server to auth packageβ partial closes [refactor] Semantic Function Clustering Analysis β Outliers and Duplicate PatternsΒ #4138 β View open PRsFuture Work for Repo Assist
sessionSuffixhelper tointernal/strutil(Issue 1 from [refactor] Semantic Function Clustering Analysis β Outliers and Duplicate PatternsΒ #4138)policyToMaphelper ininternal/guardto reduce JSON roundtrip duplication ([duplicate-code] Duplicate Code Pattern: JSON Policy-to-Map Roundtrip in Guard PackageΒ #4136)go-sdkfrom v1.5.0 β latest onceproxy.golang.orgis unblockedGuard Filtering Summary
No objects were filtered by the guard policy.
Run History
2026-04-19 12:29 UTC β Run
refactor(auth): move IsMalformedHeader from server to auth packageβ partial closes [refactor] Semantic Function Clustering Analysis β Outliers and Duplicate PatternsΒ #41382026-04-18 12:29 UTC β Run
fix(rust-guard): eliminate scopes.clone() in label_agent + add DIFC_MODE constantβ closes [rust-guard] Rust Guard: eliminate scopes.clone() in label_agent + named DIFC_MODE constantΒ #4008build: add test-rust Makefile target and include Rust tests in agent-finishedset_issue_fieldsto github-guard write classification and DIFC rulesΒ #4049 (Copilot PR), safe to close2026-04-17 12:38 UTC β Run
2026-04-16 12:41 UTC β Run
fix(mcp): replace hardcoded 30s with defaultConnectTimeout constantβ closes [duplicate-code] Duplicate Code Pattern: Hardcoded 30s connect timeout default duplicated in connection.goΒ #3933test(mcp): add connect-timeout default behaviour tests2026-04-15 12:39 UTC β Run
refactor(mcp): extract logInboundRPCResponse helperβ closes [duplicate-code] Duplicate Code Pattern: Repeated shouldAttachAgentTags Conditional Logging in connection.goΒ #3828bug; labelled Smoke Copilot - Issue GroupΒ #3802 withneeds triage2026-04-14 12:40 UTC β Run
strutil.Truncate/sanitize.TruncateSecretβ closes [duplicate-code] Duplicate Code Pattern: Manual truncation bypassing strutil/sanitize utilitiesΒ #37372026-04-13 12:42 UTC β Run
"none"match arm and unusedMEDIUM_BUFFER_SIZEβ closes [rust-guard] Rust Guard: Remove redundant match arm and unused re-exportΒ #36912026-04-12 12:29 UTC β Run
log.Printfcalls fromconnection.goβ closes [duplicate-code] Duplicate Code Pattern: Mixed log.Printf / logger.LogInfo Parallel Logging in connection.goΒ #36332026-04-11 12:27 UTC β Run
automation; labelled Copilot offline mode + BYOKΒ #3563 withenhancementstrutil.TruncateRunes, delegatetruncateForLog, inlinelookupEnrichmentTokenaliasEarlier runs
httputil.WriteJSONResponse,InitGatewayLoggers/InitProxyLoggershelpersrust-guard-testCI jobeq_ignore_ascii_case, remove stale#[allow(dead_code)]ExpandEnvArgstoenvutilGenerateRandomAPIKey,test-racetargetlogRuntimeError; commented on [refactor] Semantic Function Clustering: Refactoring Opportunities in Go Source FilesΒ #3113writeDIFCForbiddenhelper,GetEnvDuration+ session timeoutwriteJSONResponsepassthrough; commented on [compliance] Compliance Gap: Health Monitoring Missing Periodic Checks and Auto-Restart (Section 8)Β #2988, [duplicate-code] Duplicate Code Pattern: Boilerplate initGlobal*/closeGlobal* Logger WrappersΒ #2909Warning
The following domain was blocked by the firewall during workflow execution:
proxy.golang.orgTo allow these domains, add them to the
network.allowedlist in your workflow frontmatter:See Network Configuration for more information.