feat: portable GH_AW_HOME for self-hosted runner support by Mossaka · Pull Request #19744 · github/gh-aw

Mossaka · 2026-03-05T18:21:39Z

Summary

Replace all hardcoded /opt/gh-aw/ paths with a GH_AW_HOME environment variable (defaults to /opt/gh-aw, falls back to $RUNNER_TEMP/gh-aw on self-hosted runners)
setup.sh auto-detects a writable path and exports GH_AW_HOME to $GITHUB_ENV for all subsequent steps
Shell contexts use ${GH_AW_HOME:-/opt/gh-aw}/..., JS require() uses (process.env.GH_AW_HOME || '/opt/gh-aw') + '/...'
All 165 lock files recompiled with new path patterns

Why: GitHub-hosted runners allow writing to /opt/, but self-hosted runners typically don't — requiring admins to sudo mkdir -p /opt/gh-aw && sudo chmod 777 /opt/gh-aw. This change makes gh-aw work out of the box on both.

Security: $RUNNER_TEMP/gh-aw is NOT mounted into the AWF agent container (only $GITHUB_WORKSPACE and /tmp are writable to the agent), so the security model is preserved.

Test plan

make build succeeds
make test-unit — all tests pass (updated 36 test files + 3 golden fixtures)
make test-js — all 209 JS test files pass (4928 tests)
make golint-incremental BASE_REF=HEAD — 0 issues
make recompile — all 165 lock files regenerated
Verified compiled .lock.yml files use $GH_AW_HOME patterns correctly
Smoke test on GitHub-hosted runner (backward compat: default /opt/gh-aw still works)

🤖 Generated with Claude Code

Add OpenCode as a new agentic engine supporting provider-agnostic AI coding with BYOK (Bring Your Own Key) and full MCP Gateway + API proxy support. New engine features: - Provider-agnostic: supports Anthropic, OpenAI, Google, Groq, etc. - Dynamic domain allowlists based on model provider prefix - API proxy on port 10004 (default: Anthropic routing) - MCP Gateway integration with opencode.jsonc converter - Headless CI mode via `opencode run -q` - Auto-configured permissions to prevent CI hanging - 22 unit tests covering all engine methods - Smoke test workflow (5 tests) Files: opencode_engine.go, opencode_mcp.go, opencode_engine_test.go, convert_gateway_config_opencode.sh, smoke-opencode.md/.lock.yml Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Add comprehensive external-facing documentation for the OpenCode engine: - New guide: docs/src/content/docs/guides/opencode.md (460 lines) - Quick start, auth/providers, network security, MCP support - Example workflows, engine comparison, known limitations - Update engines.md: add OpenCode to available agents list - Update auth.mdx: add OpenCode authentication reference - Update network.md: add OpenCode domain config + dynamic provider docs - Update astro.config.mjs: add sidebar link Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

- Fix BaseEngine struct changes (llmGatewayPort field, remove supportsFirewall, remove UsesAPIProxy from AWFCommandConfig) - Bump DefaultFirewallVersion to v0.23.1 which includes port 10004 for OpenCode API proxy (gh-aw-firewall#1055) - Recompile smoke-opencode.lock.yml with v0.23.1 - Fix test: use constants.OpenCodeLLMGatewayPort assertion Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

OpenCode v1.2.14 does not support -q/--quiet flag. The `run` subcommand accepts the message as a positional argument directly. Discovered from smoke test failure where the CLI printed usage and exited with code 1. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

github-actions · 2026-03-05T19:11:46Z

🎬 THE END — Smoke Claude MISSION: ACCOMPLISHED! The hero saves the day! ✨

github-actions · 2026-03-05T19:11:54Z

🌑 The shadows whisper... Smoke Codex failed. The oracle requires further meditation...

github-actions · 2026-03-05T19:11:56Z

❌ Tool validation failed! Agent Container Smoke Test detected missing tools: failed

github-actions · 2026-03-05T19:11:57Z

📰 BREAKING: Smoke Copilot is now investigating this pull request. Sources say the story is developing...

github-actions · 2026-03-05T19:21:17Z

📰 VERDICT: Smoke Copilot has concluded. All systems operational. This is a developing story. 🎤

Copilot

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

OpenCode phones home to opencode.ai during initialization (telemetry/ config). Without this domain in the allowlist, Squid blocks the request and OpenCode fails silently with exit code 0. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

…xpansion Re-applies all GH_AW_HOME portable path changes that were silently reverted during the merge with main. Also fixes a critical bug where job-level env vars using shell expansion syntax were not expanded by GitHub Actions ${{ env.X }} expressions (used by upload-artifact). Key fixes: - Move GH_AW_SAFE_OUTPUTS/CONFIG_PATH/TOOLS_PATH from job-level env to $GITHUB_ENV (set in "Create gh-aw temp directory" step after setup.sh sets GH_AW_HOME) - Re-apply JsRequireGhAw() for all require() patterns - Re-apply GhAwHome shell expansion for all bash run: blocks - Re-apply DefaultGhAwMount with shell expansion - Update golden files and test expectations Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

pelikhan · 2026-03-06T03:00:13Z

@copilot recompile, review code and simplify if possible (by compile resolved value and avoid repeating magic string)

Copilot · 2026-03-06T03:00:21Z

@pelikhan I've opened a new pull request, #19793, to work on those changes. Once the pull request is ready, I'll request review from you.

…constants (#19793) * Initial plan * Initial plan: use GhAwHome/GhAwHomeJS/JsRequireGhAw constants everywhere Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com> * refactor: replace magic GH_AW_HOME path strings with constants/helpers Replace all raw occurrences of `(process.env.GH_AW_HOME || '/opt/gh-aw')` and `${GH_AW_HOME:-/opt/gh-aw}` in non-test Go source files with the constants and helper defined in setup_action_paths.go: - `GhAwHomeJS` for JavaScript expressions - `GhAwHome` for shell expressions - `JsRequireGhAw(relativePath)` for JS require() calls 22 source files updated. Generated output is byte-for-byte identical. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --------- Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com> Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

pelikhan · 2026-03-06T03:39:49Z

@copilot fix build wasm

Copilot · 2026-03-06T03:39:55Z

@pelikhan I've opened a new pull request, #19798, to work on those changes. Once the pull request is ready, I'll request review from you.

…19798)

pelikhan · 2026-03-06T08:02:22Z

@copilot merge main and recompile

Copilot · 2026-03-06T08:02:28Z

@pelikhan I've opened a new pull request, #19817, to work on those changes. Once the pull request is ready, I'll request review from you.

pelikhan

@copilot define an environment variable on the job level to avoid repeating the macro everywhere

Copilot · 2026-03-06T08:24:22Z

@pelikhan I've opened a new pull request, #19823, to work on those changes. Once the pull request is ready, I'll request review from you.

…#19823)

pelikhan · 2026-03-07T16:24:59Z

@copilot merge main and recompile

github-actions · 2026-03-08T09:08:40Z

Hey @Mossaka 👋 — thanks for this substantial PR! The GH_AW_HOME portability work is well-motivated and the OpenCode engine integration is impressive, but there's a focus concern that would help get both features merged faster.

What looks great:

Clear PR description with rationale, security notes, and test plan
Extensive test coverage (opencode_engine_test.go, concurrency_test.go, expression_extraction_test.go, schedule_preprocessing_test.go, and more)
No new dependencies

Concern: PR mixes multiple distinct features

This PR bundles at least two independent features:

GH_AW_HOME portability for self-hosted runner support
OpenCode engine integration (~743 lines in opencode_engine.go, opencode_mcp.go, etc.)
Plus concurrency improvements, expression extraction changes, and compiler orchestrator updates

Per the contribution guidelines, PRs should be focused on a single concern — this makes review faster and reduces risk. Splitting these would help each land independently.

Also noted: There are two CI failures (Smoke Codex, Agent Container Smoke Test missing tools) that would need to be resolved before merging.

Suggestion: Consider splitting into separate PRs — one for GH_AW_HOME portability, and one for the OpenCode engine. Happy to discuss the best split if that would help!

Generated by Contribution Check · ◷

Copilot AI review requested due to automatic review settings March 5, 2026 18:21

This was referenced Mar 5, 2026

Smoke Test: Copilot - 22730512075 #19746

Closed

Smoke Test: Claude - 22730805579 #19751

Closed

Mossaka and others added 6 commits March 5, 2026 18:57

Add changeset [skip-ci]

cc1ee85

ci: trigger checks

7cbb0f5

Mossaka added the smoke label Mar 5, 2026

Copilot AI reviewed Mar 5, 2026

View reviewed changes

Mossaka and others added 3 commits March 5, 2026 19:28

fix: regenerate wasm golden files for action pin updates

0feaad3

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Mossaka force-pushed the portable-gh-aw-home branch from 192debf to 42c1f84 Compare March 5, 2026 19:49

Mossaka and others added 2 commits March 5, 2026 19:54

fix: format code

6e8fd7b

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

fix: update integration test to accept ${GH_AW_HOME} paths

6b63382

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

This comment has been minimized.

Sign in to view

github-actions bot added the needs-work label Mar 5, 2026

This comment has been minimized.

Sign in to view

github-actions bot mentioned this pull request Mar 5, 2026

[Contribution Check Report] Contribution Check — 2026-03-05 #19768

Closed

Merge branch 'main' into portable-gh-aw-home

32470af

Copilot AI mentioned this pull request Mar 6, 2026

refactor: eliminate repeated GH_AW_HOME magic strings using existing constants #19793

Merged

Copilot AI and others added 2 commits March 5, 2026 19:34

Merge branch 'main' into portable-gh-aw-home

3173b7e

Copilot AI mentioned this pull request Mar 6, 2026

fix: update WASM golden file for smoke-copilot after action pin bump #19798

Merged

fix: update WASM golden file for smoke-copilot after action pin bump (#…

0add5fb

…19798)

This comment has been minimized.

Sign in to view

github-actions bot mentioned this pull request Mar 6, 2026

[Contribution Check Report] Contribution Check — 2026-03-06 #19808

Closed

Copilot AI mentioned this pull request Mar 6, 2026

chore: merge main into portable-gh-aw-home and recompile #19817

Merged

chore: merge main into portable-gh-aw-home and recompile (#19817)

59d5776

pelikhan reviewed Mar 6, 2026

View reviewed changes

Copilot AI mentioned this pull request Mar 6, 2026

Define GH_AW_HOME at job level to eliminate fallback macro repetition #19823

Merged

github-actions bot mentioned this pull request Mar 6, 2026

[Daily Report] Daily Status Report — 2026-03-06 #19828

Open

Define GH_AW_HOME at job level to eliminate fallback macro repetition (…

442a051

…#19823)

github-actions bot mentioned this pull request Mar 7, 2026

[Daily Report] Daily Status Report - 2026-03-07 #19937

Open

github-actions bot mentioned this pull request Mar 7, 2026

[Contribution Check Report] Contribution Check — 2026-03-07 #19986

Closed

This comment has been minimized.

Sign in to view

github-actions bot mentioned this pull request Mar 8, 2026

[Contribution Check Report] Contribution Check — 2026-03-08 #20015

Closed

This comment has been minimized.

Sign in to view

This was referenced Mar 8, 2026

[Contribution Check Report] Contribution Check Report — 2026-03-08 #20040

Open

[Daily Report] Daily Status Report — 2026-03-08 #20041

Open

Conversation

Mossaka commented Mar 5, 2026

Summary

Test plan

Uh oh!

github-actions bot commented Mar 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Mar 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Mar 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Mar 5, 2026

Uh oh!

github-actions bot commented Mar 5, 2026

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Uh oh!

This comment has been minimized.

This comment has been minimized.

pelikhan commented Mar 6, 2026

Uh oh!

Copilot AI commented Mar 6, 2026

Uh oh!

pelikhan commented Mar 6, 2026

Uh oh!

Copilot AI commented Mar 6, 2026

Uh oh!

This comment has been minimized.

pelikhan commented Mar 6, 2026

Uh oh!

Copilot AI commented Mar 6, 2026

Uh oh!

pelikhan left a comment

Choose a reason for hiding this comment

Uh oh!

Copilot AI commented Mar 6, 2026

Uh oh!

pelikhan commented Mar 7, 2026

Uh oh!

This comment has been minimized.

This comment has been minimized.

This comment has been minimized.

This comment has been minimized.

github-actions bot commented Mar 8, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

github-actions bot commented Mar 5, 2026 •

edited

Loading

github-actions bot commented Mar 5, 2026 •

edited

Loading

github-actions bot commented Mar 5, 2026 •

edited

Loading