[aw] Smoke Copilot failed

[github-actions]

Workflow Failure

Workflow: Smoke Copilot
Branch: mnkiefer/token-efficienty-review
Run: https://github.com/github/gh-aw-firewall/actions/runs/24871936539
Pull Request: #2165

⚠️ Engine Failure: The copilot engine terminated unexpectedly.

Last agent output:

● Unknown tool name in the tool excludedlist: "browser_wait_for"
Authentication failed with provider at http://172.30.0.30:10002 (HTTP 401).
  Check your COPILOT_PROVIDER_API_KEY or COPILOT_PROVIDER_BEARER_TOKEN.
Changes   +0 -0
Duration  44s
[copilot-driver] 2026-04-24T04:20:33.885Z attempt 4: process exit event exitCode=1
[copilot-driver] 2026-04-24T04:20:33.885Z attempt 4: process closed exitCode=1 duration=2s stdout=1448B stderr=180B hasOutput=true
[copilot-driver] 2026-04-24T04:20:33.885Z attempt 4 failed: exitCode=1 isCAPIError400=false isMCPPolicyError=false isModelNotSupportedError=false isAuthError=false hasOutput=true retriesRemaining=0
[copilot-driver] 2026-04-24T04:20:33.885Z all 3 retries exhausted — giving up (exitCode=1)
[copilot-driver] 2026-04-24T04:20:33.885Z done: exitCode=1 totalDuration=45s

Action Required

Assign this issue to Copilot using the agentic-workflows sub-agent to automatically debug and fix the workflow failure.

Debug with any coding agent

Use this prompt with any coding agent (GitHub Copilot, Claude, Gemini, etc.):

Debug the agentic workflow failure using https://raw.githubusercontent.com/github/gh-aw/main/debug.md

The failed workflow run is at https://github.com/github/gh-aw-firewall/actions/runs/24871936539

Manually invoke the agent

Debug this workflow failure using your favorite Agent CLI and the agentic-workflows prompt.

• Start your agent
• Load the agentic-workflows prompt from .github/agents/agentic-workflows.agent.md or https://github.com/github/gh-aw/blob/main/.github/agents/agentic-workflows.agent.md
• Type debug the agentic workflow smoke-copilot failure in https://github.com/github/gh-aw-firewall/actions/runs/24871936539

Tip

Stop reporting this workflow as a failure

To stop a workflow from creating failure issues, set report-failure-as-issue: false in its frontmatter:

safe-outputs:
  report-failure-as-issue: false

Generated from Smoke Copilot · ◷

• expires on May 1, 2026, 4:21 AM UTC

[github-actions]

Agent job 24867872192 failed.

⚠️ Engine Failure: The copilot engine terminated unexpectedly.

Last agent output:

● Unknown tool name in the tool excludedlist: "browser_wait_for"
Authentication failed with provider at (172.30.0.30/redacted) (HTTP 401).
  Check your COPILOT_PROVIDER_API_KEY or COPILOT_PROVIDER_BEARER_TOKEN.
Changes   +0 -0
Duration  43s
[copilot-driver] 2026-04-24T04:35:00.899Z attempt 4: process exit event exitCode=1
[copilot-driver] 2026-04-24T04:35:00.899Z attempt 4: process closed exitCode=1 duration=2s stdout=1448B stderr=180B hasOutput=true
[copilot-driver] 2026-04-24T04:35:00.899Z attempt 4 failed: exitCode=1 isCAPIError400=false isMCPPolicyError=false isModelNotSupportedError=false isAuthError=false hasOutput=true retriesRemaining=0
[copilot-driver] 2026-04-24T04:35:00.899Z all 3 retries exhausted — giving up (exitCode=1)
[copilot-driver] 2026-04-24T04:35:00.899Z done: exitCode=1 totalDuration=44s

Generated from Smoke Copilot · ◷

[github-actions]

Agent job 24872448467 failed.

⚠️ Engine Failure: The copilot engine terminated unexpectedly.

Last agent output:

● Unknown tool name in the tool excludedlist: "browser_wait_for"
Authentication failed with provider at (172.30.0.30/redacted) (HTTP 401).
  Check your COPILOT_PROVIDER_API_KEY or COPILOT_PROVIDER_BEARER_TOKEN.
Changes   +0 -0
Duration  44s
[copilot-driver] 2026-04-24T04:46:38.143Z attempt 4: process exit event exitCode=1
[copilot-driver] 2026-04-24T04:46:38.143Z attempt 4: process closed exitCode=1 duration=2s stdout=1448B stderr=180B hasOutput=true
[copilot-driver] 2026-04-24T04:46:38.143Z attempt 4 failed: exitCode=1 isCAPIError400=false isMCPPolicyError=false isModelNotSupportedError=false isAuthError=false hasOutput=true retriesRemaining=0
[copilot-driver] 2026-04-24T04:46:38.143Z all 3 retries exhausted — giving up (exitCode=1)
[copilot-driver] 2026-04-24T04:46:38.143Z done: exitCode=1 totalDuration=45s

Generated from Smoke Copilot · ◷

[github-actions]

Agent job 24872748823 failed.

⚠️ Engine Failure: The copilot engine terminated unexpectedly.

Last agent output:

● Unknown tool name in the tool excludedlist: "browser_wait_for"
Authentication failed with provider at (172.30.0.30/redacted) (HTTP 401).
  Check your COPILOT_PROVIDER_API_KEY or COPILOT_PROVIDER_BEARER_TOKEN.
Changes   +0 -0
Duration  43s
[copilot-driver] 2026-04-24T04:52:11.707Z attempt 4: process exit event exitCode=1
[copilot-driver] 2026-04-24T04:52:11.707Z attempt 4: process closed exitCode=1 duration=2s stdout=1448B stderr=180B hasOutput=true
[copilot-driver] 2026-04-24T04:52:11.707Z attempt 4 failed: exitCode=1 isCAPIError400=false isMCPPolicyError=false isModelNotSupportedError=false isAuthError=false hasOutput=true retriesRemaining=0
[copilot-driver] 2026-04-24T04:52:11.707Z all 3 retries exhausted — giving up (exitCode=1)
[copilot-driver] 2026-04-24T04:52:11.707Z done: exitCode=1 totalDuration=44s

Generated from Smoke Copilot · ◷

[github-actions]

Agent job 24876534705 failed.

⚠️ Engine Failure: The copilot engine terminated unexpectedly.

Last agent output:

● Unknown tool name in the tool excludedlist: "browser_wait_for"
Authentication failed with provider at (172.30.0.30/redacted) (HTTP 401).
  Check your COPILOT_PROVIDER_API_KEY or COPILOT_PROVIDER_BEARER_TOKEN.
Changes   +0 -0
Duration  43s
[copilot-driver] 2026-04-24T06:56:31.533Z attempt 4: process exit event exitCode=1
[copilot-driver] 2026-04-24T06:56:31.533Z attempt 4: process closed exitCode=1 duration=2s stdout=1448B stderr=180B hasOutput=true
[copilot-driver] 2026-04-24T06:56:31.533Z attempt 4 failed: exitCode=1 isCAPIError400=false isMCPPolicyError=false isModelNotSupportedError=false isAuthError=false hasOutput=true retriesRemaining=0
[copilot-driver] 2026-04-24T06:56:31.534Z all 3 retries exhausted — giving up (exitCode=1)
[copilot-driver] 2026-04-24T06:56:31.534Z done: exitCode=1 totalDuration=44s

Generated from Smoke Copilot · ◷

[github-actions]

Agent job 24877367297 failed.

⚠️ Engine Failure: The copilot engine terminated unexpectedly.

Last agent output:

● Unknown tool name in the tool excludedlist: "browser_wait_for"
Authentication failed with provider at (172.30.0.30/redacted) (HTTP 401).
  Check your COPILOT_PROVIDER_API_KEY or COPILOT_PROVIDER_BEARER_TOKEN.
Changes   +0 -0
Duration  43s
[copilot-driver] 2026-04-24T07:20:08.045Z attempt 4: process exit event exitCode=1
[copilot-driver] 2026-04-24T07:20:08.045Z attempt 4: process closed exitCode=1 duration=2s stdout=1448B stderr=180B hasOutput=true
[copilot-driver] 2026-04-24T07:20:08.045Z attempt 4 failed: exitCode=1 isCAPIError400=false isMCPPolicyError=false isModelNotSupportedError=false isAuthError=false hasOutput=true retriesRemaining=0
[copilot-driver] 2026-04-24T07:20:08.045Z all 3 retries exhausted — giving up (exitCode=1)
[copilot-driver] 2026-04-24T07:20:08.045Z done: exitCode=1 totalDuration=44s

Generated from Smoke Copilot · ◷

[github-actions]

Agent job 24877528078 failed.

⚠️ Engine Failure: The copilot engine terminated unexpectedly.

Last agent output:

● Unknown tool name in the tool excludedlist: "browser_wait_for"
Authentication failed with provider at (172.30.0.30/redacted) (HTTP 401).
  Check your COPILOT_PROVIDER_API_KEY or COPILOT_PROVIDER_BEARER_TOKEN.
Changes   +0 -0
Duration  44s
[copilot-driver] 2026-04-24T07:25:00.946Z attempt 4: process exit event exitCode=1
[copilot-driver] 2026-04-24T07:25:00.946Z attempt 4: process closed exitCode=1 duration=2s stdout=1448B stderr=180B hasOutput=true
[copilot-driver] 2026-04-24T07:25:00.946Z attempt 4 failed: exitCode=1 isCAPIError400=false isMCPPolicyError=false isModelNotSupportedError=false isAuthError=false hasOutput=true retriesRemaining=0
[copilot-driver] 2026-04-24T07:25:00.946Z all 3 retries exhausted — giving up (exitCode=1)
[copilot-driver] 2026-04-24T07:25:00.946Z done: exitCode=1 totalDuration=45s

Generated from Smoke Copilot · ◷

[github-actions]

Agent job 24877755670 failed.

⚠️ Engine Failure: The copilot engine terminated unexpectedly.

Last agent output:

● Unknown tool name in the tool excludedlist: "browser_wait_for"
Authentication failed with provider at (172.30.0.30/redacted) (HTTP 401).
  Check your COPILOT_PROVIDER_API_KEY or COPILOT_PROVIDER_BEARER_TOKEN.
Changes   +0 -0
Duration  44s
[copilot-driver] 2026-04-24T07:33:18.711Z attempt 4: process exit event exitCode=1
[copilot-driver] 2026-04-24T07:33:18.711Z attempt 4: process closed exitCode=1 duration=2s stdout=1448B stderr=180B hasOutput=true
[copilot-driver] 2026-04-24T07:33:18.711Z attempt 4 failed: exitCode=1 isCAPIError400=false isMCPPolicyError=false isModelNotSupportedError=false isAuthError=false hasOutput=true retriesRemaining=0
[copilot-driver] 2026-04-24T07:33:18.711Z all 3 retries exhausted — giving up (exitCode=1)
[copilot-driver] 2026-04-24T07:33:18.711Z done: exitCode=1 totalDuration=45s

Generated from Smoke Copilot · ◷

[github-actions]

Agent job 24878590560 failed.

⚠️ Engine Failure: The copilot engine terminated unexpectedly.

Last agent output:

● Unknown tool name in the tool excludedlist: "browser_wait_for"
Authentication failed with provider at (172.30.0.30/redacted) (HTTP 401).
  Check your COPILOT_PROVIDER_API_KEY or COPILOT_PROVIDER_BEARER_TOKEN.
Changes   +0 -0
Duration  43s
[copilot-driver] 2026-04-24T07:54:38.240Z attempt 4: process exit event exitCode=1
[copilot-driver] 2026-04-24T07:54:38.240Z attempt 4: process closed exitCode=1 duration=2s stdout=1448B stderr=180B hasOutput=true
[copilot-driver] 2026-04-24T07:54:38.240Z attempt 4 failed: exitCode=1 isCAPIError400=false isMCPPolicyError=false isModelNotSupportedError=false isAuthError=false hasOutput=true retriesRemaining=0
[copilot-driver] 2026-04-24T07:54:38.240Z all 3 retries exhausted — giving up (exitCode=1)
[copilot-driver] 2026-04-24T07:54:38.240Z done: exitCode=1 totalDuration=44s

Generated from Smoke Copilot · ◷

[github-actions]

Agent job 24889781150 failed.

⚠️ Engine Failure: The copilot engine terminated unexpectedly.

Last agent output:

● Unknown tool name in the tool excludedlist: "browser_wait_for"
Authentication failed with provider at (172.30.0.30/redacted) (HTTP 401).
  Check your COPILOT_PROVIDER_API_KEY or COPILOT_PROVIDER_BEARER_TOKEN.
Changes   +0 -0
Duration  44s
[copilot-driver] 2026-04-24T12:38:35.018Z attempt 4: process exit event exitCode=1
[copilot-driver] 2026-04-24T12:38:35.018Z attempt 4: process closed exitCode=1 duration=2s stdout=1448B stderr=180B hasOutput=true
[copilot-driver] 2026-04-24T12:38:35.018Z attempt 4 failed: exitCode=1 isCAPIError400=false isMCPPolicyError=false isModelNotSupportedError=false isAuthError=false hasOutput=true retriesRemaining=0
[copilot-driver] 2026-04-24T12:38:35.018Z all 3 retries exhausted — giving up (exitCode=1)
[copilot-driver] 2026-04-24T12:38:35.018Z done: exitCode=1 totalDuration=45s

Generated from Smoke Copilot · ◷

[lpcox]

Root Cause Analysis

The smoke-copilot failures are caused by an expired COPILOT_GITHUB_TOKEN repo secret. The token was valid through April 23 (~17:53 UTC) and began failing on April 24 morning. All branches fail identically — this is a secret management issue, not a code bug.

Evidence:

• Squid logs show successful CONNECT to api.githubcopilot.com:443 — the firewall is working correctly
• The 401 comes from upstream: AuthenticateToken authentication failed
• The api-proxy correctly forwards the token; it's the Copilot API that rejects it
• Last successful run: Apr 23 ~17:53 on add-smoke-gemini branch
• Every run since then fails identically across all branches

Immediate fix: Rotate the COPILOT_GITHUB_TOKEN repo secret.

Preventive fix: PR #2200 adds startup API key validation to the api-proxy sidecar so expired tokens are detected immediately at startup with clear error messages, rather than appearing as cryptic 401s deep in agent logs.

[github-actions]

Agent job 24867999598 failed.

🔒 MCP Servers Blocked by Policy: The Copilot CLI blocked MCP server connections due to an organization or enterprise policy. The agent ran without access to MCP tools (GitHub API, safe outputs, etc.).

This is a policy configuration issue, not a transient error — retrying will not help.

How to fix this

An organization or enterprise administrator must enable the "MCP servers in Copilot" policy:

1. Go to your enterprise or organization settings
2. Navigate to Policies → Copilot
3. Enable "MCP servers in Copilot"

For detailed instructions, see the official documentation.

Note: On some GitHub Enterprise instances, the Policies tab may only be visible at the enterprise level, not the organization level.

⚠️ Engine Failure: The copilot engine terminated unexpectedly.

Last agent output:

| github.com HTTP connectivity | ✅ HTTP 200 |
| File write/read | ✅ `/tmp/gh-aw/agent/smoke-test-copilot-24867999598.txt` |
**Overall: PASS** — label `smoke-copilot` should be applied to PR #2183.
> ⚠️ Cannot post to GitHub: safeoutputs MCP server tools are not available in this agent's tool configuration. The `add_comment` and `add_labels` tools were not found despite being listed in the system instructions.
Changes   +0 -0
Requests  1 Premium (3m 9s)
Tokens    ↑ 536.3k • ↓ 7.2k • 460.3k (cached)
[copilot-driver] 2026-04-24T18:12:49.096Z attempt 1: process exit event exitCode=0
[copilot-driver] 2026-04-24T18:12:49.096Z attempt 1: process closed exitCode=0 duration=3m 10s stdout=5270B stderr=164B hasOutput=true
[copilot-driver] 2026-04-24T18:12:49.096Z success on attempt 1: totalDuration=3m 10s

Generated from Smoke Copilot · ◷