fix: reduce Smoke Copilot context size to fix safe_outputs invocation

Full repo checkout causes Copilot CLI to ingest 1M tokens of context
(via --add-dir "${GITHUB_WORKSPACE}"), making it use bash commands
instead of MCP tools. The safeoutputs-add_comment tool is never called,
outputs.jsonl is never created, and the safe_outputs job always skips.

Fix: Remove explicit actions/checkout from smoke-copilot.md (compiler
generates sparse checkout by default). Update the postprocess script to:
1. Convert sparse checkout → full checkout (needed for npm ci/build)
2. Add a "Clean workspace for agent" step that removes src/, tests/,
   etc. after building, keeping only .github, .agents, dist, node_modules

This reduces Copilot's context from ~1M to ~200k tokens, allowing it
to properly use MCP safe-output tools.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: Mossaka

.github/workflows/smoke-copilot.lock.yml

@@ -46,11 +46,6 @@ safe-outputs:
       run-failure: "📰 DEVELOPING STORY: [{workflow_name}]({run_url}) reports {status}. Our correspondents are investigating the incident..."
 timeout-minutes: 5
 strict: true
-steps:
-  - name: Checkout repository
-    uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
-    with:
-      persist-credentials: false
 ---
 
 # Smoke Test: Copilot Engine Validation

.github/workflows/smoke-copilot.md

@@ -60,12 +60,59 @@ function buildLocalInstallSteps(indent: string): string {
   ].join('\n') + '\n';
 }
 
+// Matches the sparse checkout step so we can convert it to full checkout
+// (needed for npm ci/npm run build which require the full repo)
+const sparseCheckoutRegex =
+  /^(\s*)- name: Checkout \.github and \.agents folders\n\1\s*uses: actions\/checkout@[^\n]+\n(?:\1\s*[^\n]*\n)*?\1\s*persist-credentials: false\n/m;
+
+// Workflows where the workspace should be cleaned after build to reduce
+// Copilot CLI context size (full repo = 1M tokens, sparse = 200k tokens)
+const workflowsNeedingCleanup = new Set([
+  path.join(repoRoot, '.github/workflows/smoke-copilot.lock.yml'),
+]);
+
+function buildCleanupStep(indent: string): string {
+  const stepIndent = indent;
+  const runIndent = `${indent}  `;
+  const scriptIndent = `${runIndent}  `;
+
+  return [
+    `${stepIndent}- name: Clean workspace for agent`,
+    `${runIndent}run: |`,
+    `${scriptIndent}# Remove source code to reduce Copilot CLI context size`,
+    `${scriptIndent}# Keep only .github, .agents, dist, node_modules (needed for awf binary)`,
+    `${scriptIndent}cd "$GITHUB_WORKSPACE"`,
+    `${scriptIndent}find . -maxdepth 1 -not -name '.' -not -name '.github' -not -name '.agents' -not -name 'dist' -not -name 'node_modules' -not -name '.git' | xargs rm -rf`,
+  ].join('\n') + '\n';
+}
+
 for (const workflowPath of workflowPaths) {
-  const content = fs.readFileSync(workflowPath, 'utf-8');
+  let content = fs.readFileSync(workflowPath, 'utf-8');
+  let modified = false;
+
+  // Step 1: Convert sparse checkout to full checkout (needed for npm ci)
+  if (sparseCheckoutRegex.test(content)) {
+    content = content.replace(sparseCheckoutRegex, (match, indent: string) => {
+      return [
+        `${indent}- name: Checkout repository`,
+        `${indent}  uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6`,
+        `${indent}  with:`,
+        `${indent}    persist-credentials: false`,
+      ].join('\n') + '\n';
+    });
+    modified = true;
+  }
+
+  // Step 2: Replace "Install awf binary" with local build steps
   const matches = content.match(installStepRegexGlobal);
 
   if (!matches || matches.length === 0) {
-    console.log(`Skipping ${workflowPath}: no awf install step found.`);
+    if (modified) {
+      fs.writeFileSync(workflowPath, content);
+      console.log(`Updated ${workflowPath} (checkout only)`);
+    } else {
+      console.log(`Skipping ${workflowPath}: no awf install step found.`);
+    }
     continue;
   }
 
@@ -76,11 +123,18 @@ for (const workflowPath of workflowPaths) {
     );
   }
 
-  const updated = content.replace(
+  content = content.replace(
     installStepRegexGlobal,
-    (_match, indent: string) => buildLocalInstallSteps(indent)
+    (_match, indent: string) => {
+      let steps = buildLocalInstallSteps(indent);
+      // Add cleanup step for workflows that need reduced context
+      if (workflowsNeedingCleanup.has(workflowPath)) {
+        steps += buildCleanupStep(indent);
+      }
+      return steps;
+    }
   );
 
-  fs.writeFileSync(workflowPath, updated);
+  fs.writeFileSync(workflowPath, content);
   console.log(`Updated ${workflowPath}`);
 }