Skip to content

Add MCP Gateway payload path prefix and size threshold configuration#18617

Open
Claude wants to merge 10 commits intomainfrom
claude/update-payload-paths-and-size-control
Open

Add MCP Gateway payload path prefix and size threshold configuration#18617
Claude wants to merge 10 commits intomainfrom
claude/update-payload-paths-and-size-control

Conversation

@Claude
Copy link
Contributor

@Claude Claude AI commented Feb 27, 2026

  • Revert commit edf34c1 (repos and min-integrity flat fields for github tool config)
  • Fix redundant needsComma logic in mcp_renderer.go — simplify optional field comma handling

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.

Claude AI and others added 5 commits February 27, 2026 02:41
Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>
Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>
Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>
Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>
@Claude Claude AI assigned Claude and lpcox Feb 27, 2026
@lpcox
Copy link
Collaborator

lpcox commented Feb 27, 2026

@claude[agent] fix the PR title and summary

Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>
@Claude
Copy link
Contributor Author

Claude AI commented Feb 27, 2026

@claude[agent] fix the PR title and summary

Updated PR title to "Add MCP Gateway payload path prefix and size threshold configuration" with a detailed description of the changes. See commit 2729392.

@Claude Claude AI changed the title Completing task Add MCP Gateway payload path prefix and size threshold configuration Feb 27, 2026
@pelikhan
Copy link
Contributor

@copilot flatten the frontmatter fields:

github:
repos: ...
integrity: ...

@pelikhan
Copy link
Contributor

@copilot integrity -> min-integrity in frontmatter

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Copy link
Contributor

Copilot AI commented Feb 27, 2026

@copilot flatten the frontmatter fields:

github:...

Added repos and min-integrity as flat fields directly under github: in the tool config (commit edf34c1):

tools:
  github:
    repos:
      - owner/repo1
      - owner/repo2
    min-integrity: sha256:abc123...
  • repos → passed as GITHUB_REPOSITORIES env var to the GitHub MCP server container (restricts repo access)
  • min-integrity → appended as a digest to the container image name (e.g., ghcr.io/github/github-mcp-server:v1.5.0@sha256:abc123...) for image pinning

@copilot integrity -> min-integrity in frontmatter

Used min-integrity as the field name in the frontmatter (commit edf34c1).

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

  • https://api.github.com/graphql
    • Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw user.name ache/uv/0.10.6/x--show-toplevel 64/pkg/tool/linux_amd64/vet ode_�� claude/update-payload-paths-and-size-control cfg es/.bin/sh --noprofile (http block)
    • Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw user.name bin/bash 64/pkg/tool/linux_amd64/vet ode_�� claude/update-payload-paths-and-size-control cfg 64/pkg/tool/linux_amd64/vet --noprofile (http block)
    • Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw user.name (http block)
  • https://api.github.com/repos/actions/ai-inference/git/ref/tags/v1
    • Triggering command: /usr/bin/gh gh api /repos/actions/ai-inference/git/ref/tags/v1 --jq .object.sha tructions-test-2702592164/.github/workflows ache/go/1.25.0/xconfig 363747/b370/vet.cfg l 103503/b241/vet.rev-parse ash git -C /home/REDACTED/work/gh-aw/gh-aw/.github/workflows l /opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linux_amd64/compile remote.origin.urgit bash r: $owner, name:--show-toplevel /opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linux_amd64/compile (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/ai-inference/git/ref/tags/v1 --jq .object.sha --show-toplevel /opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linux_amd64/compile /usr/bin/git /tmp/go-build901git -trimpath /usr/bin/git git rev-�� --show-toplevel git /opt/hostedtoolcache/uv/0.10.6/x86_64/bash tup/sh/sanitize_/usr/bin/git -goversion /opt/hostedtoolc--get-regexp bash (http block)
  • https://api.github.com/repos/actions/checkout/git/ref/tags/11bd71901bbe5b1630ceea73d27597364c9af683
    • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/11bd71901bbe5b1630ceea73d27597364c9af683 --jq .object.sha 8b2wqhQ9a 103503/b124/vet.cfg ache/go/1.25.0/x64/pkg/tool/linux_amd64/vet diff HEAD~6 ash ache/go/1.25.0/xrev-parse tion�� se tmain.go 1/x64/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin/sh --noprofile (http block)
  • https://api.github.com/repos/actions/checkout/git/ref/tags/v3
    • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v3 --jq .object.sha xterm-color 64/pkg/tool/linu--jq er: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabl--show-toplevel --noprofile cfg ed } } /usr/bin/gh api k/gh-aw/gh-aw/.github/workflows -f cfg -f owner=github -f infocmp (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v3 --jq .object.sha --show-toplevel bash /usr/bin/git ithub/workflows 64/pkg/tool/linurev-parse 64/pkg/tool/linu--show-toplevel git rev-�� --show-toplevel 64/pkg/tool/linux_amd64/compile /usr/bin/git 2181820561 64/pkg/tool/linurev-parse /usr/bin/gh git (http block)
  • https://api.github.com/repos/actions/checkout/git/ref/tags/v4
    • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v4 --jq .object.sha (.*\)$/\2/p (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v4 --jq .object.sha --noprofile (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v4 --jq .object.sha ngutil.test rev-parse Name,createdAt,startedAt,updated-test.short=true se 103503/b036/vet.rev-parse DiscussionsEnabl--show-toplevel x2bykBD4rngcj-OdT7/mR_J8L3mpahD7X9qYVEv/eZay7NwYwCOxz1AFAzDu -C /home/REDACTED/work/gh-aw/gh-aw/.github/workflows rev-parse _.a */*.ts&#39; &#39;**/*.jsgit 103503/b211/vet.rev-parse ules/.bin/node infocmp (http block)
  • https://api.github.com/repos/actions/checkout/git/ref/tags/v5
    • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq .object.sha --noprofile (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq .object.sha ithub/workflows x_amd64/vet /usr/bin/git h ../../../.pretgit (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq .object.sha -bool -buildtags /usr/bin/git -errorsas -ifaceassert -nilfunc git rev-�� --show-toplevel -tests 363747/b416/vet.cfg -unreachable=falgit /tmp/go-build461rev-parse k/gh-aw/gh-aw/ac--show-toplevel git (http block)
  • https://api.github.com/repos/actions/checkout/git/ref/tags/v6
    • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq .object.sha se 103503/b051/vet.cfg cfg --noprofile (http block)
  • https://api.github.com/repos/actions/github-script/git/ref/tags/v7
    • Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v7 --jq .object.sha --noprofile gration_test.go sh go (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v7 --jq .object.sha --noprofile cfg 64/pkg/tool/linux_amd64/vet set-url origin /home/REDACTED/.lo--show-toplevel 64/pkg/tool/linux_amd64/vet push�� th .prettierignore origin ache/go/1.25.0/x64/pkg/tool/linu../../../.prettierignore --noprofile (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v7 --jq .object.sha .js&#39; --ignore-pa-f bash ache/go/1.25.0/x-f --noprofile (http block)
  • https://api.github.com/repos/actions/github-script/git/ref/tags/v8
    • Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq .object.sha --noprofile (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq .object.sha schema=json.load(sys.stdin) print(&#39;additionalProperties:&#39;, schema.get(&#39;additionalProperties&#39;)) node (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq .object.sha rite &#39;**/*.cjs&#39; &#39;**/*.ts&#39; &#39;**/*.json&#39; --ignore-path ../../../.pr**/*.json /tmp/go-build461103503/b081/vet.cfg m/_npx/b388654678d519d9/node_modules/.bin/prettier --noprofile (http block)
  • https://api.github.com/repos/actions/setup-go/git/ref/tags/4dc6199c7b1a012772edbd06daecab0f50c9053c
    • Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/4dc6199c7b1a012772edbd06daecab0f50c9053c --jq .object.sha se 103503/b262/vet.cfg bash --noprofile (http block)
  • https://api.github.com/repos/actions/setup-go/git/ref/tags/v4
    • Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v4 --jq .object.sha --noprofile (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v4 --jq .object.sha vaScript288926903/001/test-complex-frontmatter-w@{u} --jq 1/x64/bin/node se 103503/b051/vet.rev-parse cfg /usr/bin/gh t-ha�� SameOutput3171194627/001/stability-test.md -f 363747/b357/vet.cfg -f owner=github -f /usr/bin/gh (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v4 --jq .object.sha /tmp/gh-aw/aw-feature-branch.patch gcc /usr/bin/git -x c ache/go/1.25.0/xadd git rev-�� --show-toplevel ache/go/1.25.0/x64/pkg/tool/linux_amd64/vet /usr/bin/gh /tmp/gh-aw-test-git rev-parse /usr/bin/git /usr/bin/gh (http block)
  • https://api.github.com/repos/actions/setup-go/git/ref/tags/v5
    • Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v5 --jq .object.sha ../pkg/workflow/js/**/*.json&#39; --ignore-path ../../../.prettierignore bash 64/bin/bash kerConfig|TestGigit (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v5 --jq .object.sha ../pkg/workflow/js/**/*.json&#39; ---test.run=TestWasmGolden|TestCompile head cfg (http block)
  • https://api.github.com/repos/actions/setup-node/git/ref/tags/v4
    • Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq .object.sha -c=4 -nolocalimports -importcfg /tmp/go-build3489131547/b142/importcfg -embedcfg /tmp/go-build3489131547/b142/embedcfg -pack /pre�� celain --ignore-submodules | hea-errorsas (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq .object.sha /home/REDACTED/work/gh-aw/gh-aw/.github/workflows rev-parse 64/pkg/tool/linux_amd64/link se 103503/b062/vet.rev-parse cfg 64/pkg/tool/linux_amd64/link api util.test -f rtcfg.link -f owner=github -f FpiJ9ENbZatjTay5oJ/BhqTCoRMGewfss9ZXZGY/X4XoDkfiremote.origin.url (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq .object.sha $name) { has--show-toplevel infocmp /usr/bin/git r-test1656734217git /opt/hostedtoolcrev-parse /usr/bin/infocmp--show-toplevel git rev-�� heckout/git/ref/tags/v4 infocmp /usr/bin/git s/test.md /opt/hostedtoolcrev-parse /usr/bin/git git (http block)
  • https://api.github.com/repos/actions/setup-node/git/ref/tags/v6
    • Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v6 --jq .object.sha -t cfg 64/pkg/tool/linux_amd64/vet OUTPUT -d 168.63.129.16 64/pkg/tool/linux_amd64/vet chec�� on&#39; --ignore-path ../../../.prettierignore cfg odules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin/node 0 -j ACCEPT 64/pkg/tool/linux_amd64/vet (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v6 --jq .object.sha --noprofile cfg _modules/.bin/sh claude/update-pagit (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v6 --jq .object.sha */*.json&#39; &#39;!../.-f bash /opt/hostedtoolc-f --noprofile (http block)
  • https://api.github.com/repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b
    • Triggering command: /usr/bin/gh gh api /repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b --jq .object.sha th .prettierignore origin node --noprofile (http block)
  • https://api.github.com/repos/docker/build-push-action/git/ref/tags/v6
    • Triggering command: /usr/bin/gh gh api /repos/docker/build-push-action/git/ref/tags/v6 --jq .object.sha --noprofile bash 86_64/sh --noprofile (http block)
    • Triggering command: /usr/bin/gh gh api /repos/docker/build-push-action/git/ref/tags/v6 --jq .object.sha .js&#39; --ignore-path .prettierignore bash ache/go/1.25.0/x64/pkg/tool/linux_amd64/cgo --noprofile (http block)
  • https://api.github.com/repos/docker/login-action/git/ref/tags/v3
    • Triggering command: /usr/bin/gh gh api /repos/docker/login-action/git/ref/tags/v3 --jq .object.sha --noprofile bash rgo/bin/bash --noprofile (http block)
    • Triggering command: /usr/bin/gh gh api /repos/docker/login-action/git/ref/tags/v3 --jq .object.sha .js&#39; --ignore-pa-f git ache/go/1.25.0/x-f diff HEAD~6 n-dir/bash ache/go/1.25.0/x64/pkg/tool/linux_amd64/vet -###�� *.json&#39; &#39;!../../../pkg/workflow/js/**/*.json&#39; --ignore-path ../../../.prettierignore c ache/uv/0.10.6/x86_64/node - (http block)
  • https://api.github.com/repos/docker/metadata-action/git/ref/tags/v5
    • Triggering command: /usr/bin/gh gh api /repos/docker/metadata-action/git/ref/tags/v5 --jq .object.sha --noprofile bash 1/x64/bin/sh --noprofile (http block)
    • Triggering command: /usr/bin/gh gh api /repos/docker/metadata-action/git/ref/tags/v5 --jq .object.sha .js&#39; --ignore-path .prettierignore n.go ndor/bin/sh --noprofile (http block)
  • https://api.github.com/repos/docker/setup-buildx-action/git/ref/tags/v3
    • Triggering command: /usr/bin/gh gh api /repos/docker/setup-buildx-action/git/ref/tags/v3 --jq .object.sha se 103503/b226/vet.cfg 1/x64/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin/sh --noprofile (http block)
    • Triggering command: /usr/bin/gh gh api /repos/docker/setup-buildx-action/git/ref/tags/v3 --jq .object.sha --noprofile bash 103503/b133/vet.-f --noprofile (http block)
  • https://api.github.com/repos/github/gh-aw/actions/runs/1/artifacts
    • Triggering command: /usr/bin/gh gh run download 1 --dir test-logs/run-1 x_amd64/vet /usr/bin/git schema=json.loagit (http block)
    • Triggering command: /usr/bin/gh gh run download 1 --dir test-logs/run-1 git /usr/bin/git k/gh-aw/gh-aw/.ggit bash /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git /tmp/gh-aw-test-git status /usr/bin/git git (http block)
  • https://api.github.com/repos/github/gh-aw/actions/runs/12345/artifacts
    • Triggering command: /usr/bin/gh gh run download 12345 --dir test-logs/run-12345 x_amd64/compile ker/cli-plugins/docker-buildx -t security x_amd64/vet ker/cli-plugins/docker-buildx n-me�� --show-toplevel x_amd64/vet (http block)
    • Triggering command: /usr/bin/gh gh run download 12345 --dir test-logs/run-12345 /opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linux_amd64/vet /usr/bin/git -bool -buildtags ache/go/1.25.0/x--git-dir git rev-�� --show-toplevel ache/go/1.25.0/x64/pkg/tool/linu--package-lock-only /usr/bin/git 363747/b431/workgit -tests 363747/b431/impo--git-dir git (http block)
  • https://api.github.com/repos/github/gh-aw/actions/runs/12346/artifacts
    • Triggering command: /usr/bin/gh gh run download 12346 --dir test-logs/run-12346 x_amd64/compile me: String!) { -nilfunc -t security /sh git rev-�� --show-toplevel x_amd64/vet /usr/bin/git ath ../../../.prgit . x_amd64/vet git (http block)
    • Triggering command: /usr/bin/gh gh run download 12346 --dir test-logs/run-12346 /usr/bin/gh /usr/bin/git k/gh-aw/gh-aw/.ggit echo /usr/lib/git-coruser.email git rev-�� --show-toplevel /usr/lib/git-core/git /usr/bin/git image:v1.0.0 --auto /opt/hostedtoolc--show-toplevel git (http block)
  • https://api.github.com/repos/github/gh-aw/actions/runs/2/artifacts
    • Triggering command: /usr/bin/gh gh run download 2 --dir test-logs/run-2 x_amd64/vet /usr/bin/git --noprofile (http block)
    • Triggering command: /usr/bin/gh gh run download 2 --dir test-logs/run-2 git /usr/bin/gh /tmp/file-trackegit bash /usr/bin/git gh api /repos/actions/checkout/git/ref/tags/v4 --jq /usr/bin/git .github/workflowgit node /usr/bin/git git (http block)
  • https://api.github.com/repos/github/gh-aw/actions/runs/3/artifacts
    • Triggering command: /usr/bin/gh gh run download 3 --dir test-logs/run-3 x_amd64/vet repository(owner: $owner, name:-lang=go1.23 --noprofile (http block)
    • Triggering command: /usr/bin/gh gh run download 3 --dir test-logs/run-3 git /usr/bin/infocmp ode-gyp-bin/nodegit bash /usr/bin/git infocmp -1 xterm-color git /usr/bin/git .github/workflowgit node /usr/bin/git git (http block)
  • https://api.github.com/repos/github/gh-aw/actions/runs/4/artifacts
    • Triggering command: /usr/bin/gh gh run download 4 --dir test-logs/run-4 x_amd64/vet x_amd64/link --noprofile (http block)
    • Triggering command: /usr/bin/gh gh run download 4 --dir test-logs/run-4 git /usr/bin/gh --show-toplevel -pack /usr/bin/git gh api /repos/actions/github-script/git/ref/tags/v8 --jq /usr/bin/git --git-dir node /usr/bin/git git (http block)
  • https://api.github.com/repos/github/gh-aw/actions/runs/5/artifacts
    • Triggering command: /usr/bin/gh gh run download 5 --dir test-logs/run-5 x_amd64/vet me: String!) { repository(owne-lang=go1.23 --noprofile (http block)
    • Triggering command: /usr/bin/gh gh run download 5 --dir test-logs/run-5 git /usr/bin/infocmp -pack /tmp/go-build901rev-parse /usr/bin/git infocmp -1 xterm-color git /usr/bin/git --show-toplevel node /opt/hostedtoolc--git-dir git (http block)
  • https://api.github.com/repos/github/gh-aw/actions/workflows
    • Triggering command: /usr/bin/gh gh workflow list --json name,state,path -unreachable=false /tmp/go-build461103503/b120/vet.cfg /opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linux_amd64/vet go1.25.0 -c=4 -nolocalimports erignore -ato�� /js &amp;&amp; npm run fremote.origin.url -buildtags r: $owner, name: $name) { hasDiscussionsEnabled } } -errorsas -ifaceassert -nilfunc bash (http block)
    • Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --workflow nonexistent-workflow-12345 --limit 100 -ifaceassert -nilfunc 9131547/b001/workflow.test e=/t�� t0 m0s /home/REDACTED/work/gh-aw/gh-aw/node_modules/.bin/sh smGolden|TestComgit (http block)
    • Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --workflow nonexistent-workflow-12345 --limit 6 (http block)
  • https://api.github.com/repos/github/gh-aw/git/ref/tags/a70c5eada06553e3510ac27f2c3bda9d3705bccb
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/a70c5eada06553e3510ac27f2c3bda9d3705bccb --jq .object.sha th .prettierignore bash node --noprofile (http block)
  • https://api.github.com/repos/github/gh-aw/git/ref/tags/v1.0.0
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.0.0 --jq .object.sha k/gh-aw/gh-aw/.github/workflows --jq /usr/bin/git -c=4 -nolocalimports ed } } git rev-�� ithub/workflows -pack /usr/bin/git l (http block)
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.0.0 --jq .object.sha --get-regexp ^remote\..*\.gh-resolved$ 86_64/node ithub/workflows x_amd64/vet repository(owne--show-toplevel git 1/x6�� --show-toplevel bash /usr/bin/git k/gh-aw/gh-aw/.ggit x_amd64/vet /usr/bin/git git (http block)
  • https://api.github.com/repos/githubnext/agentics/git/ref/tags/
    • Triggering command: /usr/bin/gh gh api /repos/githubnext/agentics/git/ref/tags/# --jq .object.sha ../pkg/workflow/js/**/*.json&#39; --ignore-path ../../../.prettierignore bash ache/go/1.25.0/x64/pkg/tool/linux_amd64/vet --noprofile (http block)
  • https://api.github.com/repos/nonexistent/action/git/ref/tags/v999.999.999
    • Triggering command: /usr/bin/gh gh api /repos/nonexistent/action/git/ref/tags/v999.999.999 --jq .object.sha ithub/workflows --jq (http block)
    • Triggering command: /usr/bin/gh gh api /repos/nonexistent/action/git/ref/tags/v999.999.999 --jq .object.sha --get-regexp ^remote\..*\.gh-resolved$ /usr/bin/git --show-toplevel x_amd64/vet x_amd64/link git 1/x6�� image:v1.0.0 x_amd64/link /usr/bin/git k/gh-aw/gh-aw/.ggit x_amd64/vet /usr/bin/git git (http block)
  • https://api.github.com/repos/nonexistent/repo/actions/runs/12345
    • Triggering command: /usr/bin/gh gh run view 12345 --repo nonexistent/repo --json status,conclusion --noprofile (http block)
    • Triggering command: /usr/bin/gh gh run view 12345 --repo nonexistent/repo --json status,conclusion /tmp/go-build901/opt/hostedtoolcache/node/24.13.1/x64/bin/node -trimpath /usr/bin/git git rev-�� --show-toplevel git ser.test user.email test@example.com/opt/hostedtoolcache/node/24.13.1/x64/bin/npm /usr/bin/git ser.test (http block)
  • https://api.github.com/repos/owner/repo/actions/workflows
    • Triggering command: /usr/bin/gh gh workflow list --json name,state,path --repo owner/repo k/gh-aw/gh-aw/actions/setup/node_modules/.bin/sh --noprofile owner 86_64/bash erignore -ato�� rite &#39;../../../**/*.json&#39; &#39;!../.-f -buildtags ash -errorsas -ifaceassert -nilfunc head (http block)
    • Triggering command: /usr/bin/gh gh workflow list --json name,state,path --repo owner/repo r: $owner, name: $name) { hasDiscussionsEnabled } } --noprofile (http block)
    • Triggering command: /usr/bin/gh gh workflow list --json name,state,path --repo owner/repo /usr/bin/git /ref/tags/v8 rver /usr/bin/git git rev-�� --show-toplevel (http block)
  • https://api.github.com/repos/owner/repo/contents/file.md
    • Triggering command: /tmp/go-build901363747/b381/cli.test /tmp/go-build901363747/b381/cli.test -test.testlogfile=/tmp/go-build901363747/b381/testlog.txt -test.paniconexit0 -test.v=true -test.parallel=4 -test.timeout=10m0s -test.run=^Test -test.short=true --noprofile (http block)
    • Triggering command: /tmp/go-build3715575622/b357/cli.test /tmp/go-build3715575622/b357/cli.test -test.testlogfile=/tmp/go-build3715575622/b357/testlog.txt -test.paniconexit0 -test.timeout=10m0s rev-�� i-inference/git/ref/tags/v1 git /usr/bin/git 702592164/.githugit config cfg git rev-�� --show-toplevel git /usr/bin/git k/gh-aw/gh-aw/.ggit rev-parse ache/go/1.25.0/x--show-toplevel git (http block)
  • https://api.github.com/repos/test-owner/test-repo/actions/secrets
    • Triggering command: /usr/bin/gh gh api /repos/test-owner/test-repo/actions/secrets --jq .secrets[].name rite &#39;**/*.cjs&#39; &#39;**/*.ts&#39; &#39;**/*.remote.origin.url -buildtags cal/bin/node -errorsas -ifaceassert -nilfunc /opt/hostedtoolcconfig m/_n�� -bool -buildtags repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -errorsas -ifaceassert -nilfunc bash (http block)
    • Triggering command: /usr/bin/gh gh api /repos/test-owner/test-repo/actions/secrets --jq .secrets[].name --show-toplevel /usr/bin/gh /usr/bin/git 1346-16633/test-git -f er: String!, $na--show-toplevel git rev-�� ster.patch git /home/REDACTED/work/_temp/uv-python-dir/node k/gh-aw/gh-aw/.ggit config (http block)

If you need me to access, download, or install something from one of these locations, you can either:

Copilot AI changed the title Add MCP Gateway payload path prefix and size threshold configuration Add MCP Gateway payload configuration and GitHub tool repos/min-integrity fields Feb 27, 2026
@pelikhan
Copy link
Contributor

@copilot revert edf34c1

…fig"

This reverts commit edf34c1.

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Copy link
Contributor

Copilot AI commented Feb 27, 2026

@copilot revert edf34c1

Reverted in commit 7b6a167.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

  • https://api.github.com/repos/actions/checkout/git/ref/tags/v5
    • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq .object.sha (http block)

If you need me to access, download, or install something from one of these locations, you can either:

Copilot AI changed the title Add MCP Gateway payload configuration and GitHub tool repos/min-integrity fields Add MCP Gateway payload path prefix and size threshold configuration Feb 27, 2026
@github-actions

This comment has been minimized.

@github-actions
Copy link
Contributor

🤖 Contribution Check — PR #18617

Hey @Claude and @lpcox 👋 — great work on this MCP Gateway payload configuration improvement! Adding payloadPathPrefix and payloadSizeThreshold is a well-reasoned solution to the agent container path-remapping problem, and the rationale for the 512KB default is clearly articulated.

Checklist Results

Check Result
On-topic ✅ Yes — directly improves MCP Gateway configuration for containerized agent environments
Follows process ✅ Yes — core team coding agent PR, assigned to core team member lpcox
Focused ✅ Yes — single coherent feature; lock file updates are mechanical propagation of new env vars
New dependencies ✅ No — no go.mod/go.sum changes
Has tests ✅ Yes — mcp_gateway_config_test.go (+101 lines), codex_engine_test.go updated, golden files refreshed
Has description ✅ Yes — detailed body with Changes Made, Rationale, and Testing sections
Diff size 1,254 lines (894 additions / 360 deletions across 172 files, of which 161 are mechanical .lock.yml updates)

Verdict: 🟢 Aligned

This PR looks solid and ready for maintainer review once the draft status is lifted. The implementation is clean, tests are thorough, and documentation is well-written.

Generated by Contribution Check

Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This pull request adds two new configuration fields to the MCP Gateway for improved payload handling in containerized agent environments: PayloadPathPrefix (for Docker-in-Docker path remapping) and PayloadSizeThreshold (with a 512KB default to prevent agent looping issues).

Changes:

  • Added DefaultMCPGatewayPayloadSizeThreshold constant (512KB) and two new fields (PayloadPathPrefix, PayloadSizeThreshold) to MCPGatewayRuntimeConfig
  • Updated gateway config builder, JSON renderer, and MCP setup generator to handle new fields with appropriate defaults
  • Updated all golden test workflow files and Codex engine test to reflect new configuration format

Reviewed changes

Copilot reviewed 172 out of 172 changed files in this pull request and generated 1 comment.

Show a summary per file
File Description
pkg/constants/constants.go Adds 512KB default threshold constant with documentation
pkg/workflow/tools_types.go Extends MCPGatewayRuntimeConfig struct with two new optional fields
pkg/workflow/mcp_gateway_config.go Populates new fields in gateway config with defaults
pkg/workflow/mcp_renderer.go Updates JSON rendering to include optional payload fields
pkg/workflow/mcp_setup_generator.go Exports environment variables for new configuration fields
pkg/workflow/codex_engine_test.go Updates test expectations to include payloadSizeThreshold
.github/workflows/*.lock.yml Updates all golden test files with new environment variables and JSON fields

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment on lines 957 to 974
needsComma := true
if options.GatewayConfig.PayloadDir != "" {
fmt.Fprintf(&configBuilder, ",\n \"payloadDir\": \"%s\"\n", options.GatewayConfig.PayloadDir)
} else {
configBuilder.WriteString("\n")
if needsComma {
configBuilder.WriteString(",")
}
fmt.Fprintf(&configBuilder, "\n \"payloadDir\": \"%s\"", options.GatewayConfig.PayloadDir)
}
if options.GatewayConfig.PayloadPathPrefix != "" {
if needsComma || options.GatewayConfig.PayloadDir != "" {
configBuilder.WriteString(",")
}
fmt.Fprintf(&configBuilder, "\n \"payloadPathPrefix\": \"%s\"", options.GatewayConfig.PayloadPathPrefix)
}
if options.GatewayConfig.PayloadSizeThreshold > 0 {
if needsComma || options.GatewayConfig.PayloadDir != "" || options.GatewayConfig.PayloadPathPrefix != "" {
configBuilder.WriteString(",")
}
fmt.Fprintf(&configBuilder, "\n \"payloadSizeThreshold\": %d", options.GatewayConfig.PayloadSizeThreshold)
Copy link

Copilot AI Feb 27, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The comma handling logic for optional fields is incorrect. The needsComma variable is set to true on line 957 but is never used after that, as subsequent conditions check both needsComma and whether previous fields were set. This creates redundant logic and could lead to incorrect comma placement. Since apiKey always exists and ends without a comma on line 954, all subsequent optional fields need a comma. The logic should simply check if any field has been added before adding a comma, or remove the needsComma variable entirely and use a simpler approach.

Copilot uses AI. Check for mistakes.
@lpcox
Copy link
Collaborator

lpcox commented Feb 27, 2026

@copilot apply changes based on the comments in this thread

Remove the always-true needsComma variable and simplify each optional
field to unconditionally prepend a comma, since apiKey always precedes
them without a trailing comma.

Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>
Copy link
Contributor

Copilot AI commented Feb 27, 2026

@copilot apply changes based on the comments in this thread

Fixed in commit a89e8d2. Removed the needsComma variable and simplified each optional field to unconditionally prepend a comma (since apiKey always precedes them without a trailing comma).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants