fix: postprocess claude-token-optimizer lock file to use local awf build

[Copilot]

The Daily Claude Token Optimization Advisor workflow was failing at the Install AWF binary step because the compiled lock file referenced v0.25.29, which was never released (releases jump from v0.25.20 → v0.25.40).

Root cause

claude-token-optimizer.lock.yml contained:

- name: Install AWF binary
  run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.25.29

This is the only lock file in the repo that still had this pattern — every other workflow was already using local build steps. The post-processing script was not run when this lock file was originally compiled.

Fix

Ran npx ts-node scripts/ci/postprocess-smoke-workflows.ts, which applied the standard replacements to claude-token-optimizer.lock.yml:

• Replaced the broken release-download step with Install awf dependencies / Build awf / Install awf binary (local) (mirrors all other lock files)
• Removed stale sparse-checkout block from the activation job checkout step
• Added --session-state-dir flag to the AWF invocation
• Inlined the Copy Copilot session state step (replaces the helper script call)

[Copilot]

Pull request overview

Fixes the Daily Claude Token Optimization Advisor workflow which was failing because its lock file referenced a non-existent AWF release v0.25.29. The fix re-runs the standard postprocess script to align this lock file with the rest of the repo's workflows.

Changes:

• Replace broken install_awf_binary.sh v0.25.29 step with npm ci / npm run build / local awf shim
• Remove stale sparse-checkout block from activation job checkout
• Add --session-state-dir flag and inline the Copilot session-state copy step

Show a summary per file

File	Description
.github/workflows/claude-token-optimizer.lock.yml	Postprocessed to use local awf build, drop sparse-checkout, add session-state dir, inline session-state copy

Copilot's findings

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

• Files reviewed: 1/1 changed files
• Comments generated: 0

[lpcox]

@copilot update the .md file to use local build and recompile the lock.yml

[Copilot]

@copilot update the .md file to use local build and recompile the lock.yml

Done. Added the Install awf dependencies / Build awf / Install awf binary (local) steps directly to claude-token-optimizer.md (matching the pattern in smoke-chroot.md), then recompiled the lock file with gh aw compile and ran postprocess-smoke-workflows.ts. The lock file is now derived from the source rather than manually patched. Commit: 08551ef

[github-actions]

Smoke Test Results

• ❌ GitHub API: HTTP 401 (authentication issue with local endpoint)
• ✅ Playwright: Navigated to github.com, title verified
• ✅ File verify: smoke-test-claude-25997966985.txt exists and readable

Result: 2/3 PASS

💥 [THE END] — Illustrated by Smoke Claude

[github-actions]

🔬 Smoke Test Results

Test	Status
GitHub MCP connectivity	✅
GitHub.com HTTP connectivity	✅
File write/read (/tmp/gh-aw/agent/smoke-test-copilot-25997967027.txt)	✅

Overall: PASS 🟢

Author: @Copilot

📰 BREAKING: Report filed by Smoke Copilot

[github-actions]

Smoke Test: Copilot BYOK (Offline) Mode

Test	Result
GitHub MCP connectivity	❌ 401 Bad credentials (MCP not authenticated in this environment)
GitHub.com HTTP connectivity	⚠️ Template vars not expanded (${{ steps.smoke-data.outputs.SMOKE_HTTP_CODE }})
File write/read	⚠️ Template vars not expanded — path unavailable
BYOK inference (agent → api-proxy → api.githubcopilot.com)	✅ Confirmed — responding via BYOK offline mode

Running in BYOK offline mode (COPILOT_OFFLINE=true) via api-proxy → api.githubcopilot.com.

Overall: PARTIAL — BYOK inference ✅, but pre-computed test data was not injected (template variables unexpanded) and GitHub MCP returned 401.

🔑 BYOK report filed by Smoke Copilot BYOK

[github-actions]

Smoke Codex: FAIL
Merged PRs: refactor: split api-proxy-service.test.ts into focused test modules; Optimize test-coverage-improver prompt caching and run cadence
GitHub PR reads: ✅ public API fallback; ❌ safeinputs-gh unavailable
Playwright title check: ✅
Tavily search: ❌ no Tavily tools exposed
File/Bash: ✅
Discussion comment: ✅ #191
Build: ✅
Overall status: FAIL

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

• registry.npmjs.org

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "registry.npmjs.org"

See Network Configuration for more information.

🔮 The oracle has spoken through Smoke Codex

[github-actions]

Smoke test: FAIL

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

• localhost

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "localhost"

See Network Configuration for more information.

💎 Faceted by Smoke Gemini

[github-actions]

🏗️ Build Test Suite Results

Ecosystem	Project	Build/Install	Tests	Status
Bun	elysia	✅	1/1 passed	✅ PASS
Bun	hono	✅	1/1 passed	✅ PASS
C++	fmt	✅	N/A	✅ PASS
C++	json	✅	N/A	✅ PASS
Deno	oak	N/A	1/1 passed	✅ PASS
Deno	std	N/A	1/1 passed	✅ PASS
.NET	hello-world	✅	N/A	✅ PASS
.NET	json-parse	✅	N/A	✅ PASS
Go	color	✅	1/1 passed	✅ PASS
Go	env	✅	1/1 passed	✅ PASS
Go	uuid	✅	1/1 passed	✅ PASS
Java	gson	✅	1/1 passed	✅ PASS
Java	caffeine	✅	1/1 passed	✅ PASS
Node.js	clsx	✅	All passed	✅ PASS
Node.js	execa	✅	All passed	✅ PASS
Node.js	p-limit	✅	All passed	✅ PASS
Rust	fd	✅	1/1 passed	✅ PASS
Rust	zoxide	✅	1/1 passed	✅ PASS

Overall: 8/8 ecosystems passed — ✅ PASS

Generated by Build Test Suite for issue #3300 · ● 4.4M · ◷

[github-actions]

Smoke Test: GitHub Actions Services Connectivity

Check	Result
Redis PING (host.docker.internal:6379)	❌ Port closed
PostgreSQL pg_isready (host.docker.internal:5432)	❌ No response
PostgreSQL SELECT 1	❌ Not attempted (pg_isready failed)

host.docker.internal resolves to 172.17.0.1 but both ports 6379 and 5432 are unreachable. Service containers may not be running.

Overall: FAIL

🔌 Service connectivity validated by Smoke Services