Skip to content

docs: sync schemas and specs with source changes#5250

Merged
lpcox merged 2 commits into
mainfrom
docs/schema-sync-2026-06-18-1df30081665d7f6d
Jun 19, 2026
Merged

docs: sync schemas and specs with source changes#5250
lpcox merged 2 commits into
mainfrom
docs/schema-sync-2026-06-18-1df30081665d7f6d

Conversation

@github-actions

Copy link
Copy Markdown
Contributor

Summary

Adds the missing apiProxy.maxCacheMisses CLI mapping entry to Section 5 of docs/awf-config-spec.md.

What changed

  • docs/awf-config-spec.md — Added the missing mapping line:

    - `apiProxy.maxCacheMisses` → `--max-cache-misses <number>`
    

    The field was already present in:

    • docs/awf-config.schema.json (property maxCacheMisses, minimum: 1)
    • src/config-file.ts (AwfFileConfig.apiProxy.maxCacheMisses, mapped in mapAwfFileConfigToCliOptions)
    • src/cli-options.ts (--max-cache-misses <number>, line 357)
    • src/services/api-proxy-service-config.ts (sets AWF_MAX_CACHE_MISSES)

    ...but was absent from the spec's normative CLI mapping table in §5.

Triggering commit

57a7d49Add comprehensive gVisor firewall comparison workflow (#5236) — touched src/config-file.ts among other source files.

No other schema changes needed

  • schemas/audit.schema.json — matches src/squid/config-generator.ts audit_jsonl log format exactly (all 10 fields present).
  • schemas/token-usage.schema.json — matches containers/api-proxy/token-persistence.js buildTokenUsageRecord and optional x_initiator/billing decorators from token-tracker-http.js exactly.
  • docs/awf-config.schema.json — no new config fields detected.
  • schemas/README.md — no structural/versioning changes detected.

Generated by Schema & Spec Sync ·

Add missing Section 5 entry for apiProxy.maxCacheMisses, which maps
to the --max-cache-misses <number> CLI flag and AWF_MAX_CACHE_MISSES
env var. The field was present in docs/awf-config.schema.json, the
config-file.ts interface, and src/cli-options.ts, but omitted from
the spec's CLI mapping table.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@lpcox lpcox marked this pull request as ready for review June 19, 2026 15:37
Copilot AI review requested due to automatic review settings June 19, 2026 15:37
@github-actions

github-actions Bot commented Jun 19, 2026

Copy link
Copy Markdown
Contributor Author

Documentation Preview

Documentation build failed for this PR. View logs.

Built from commit f453261

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates the normative CLI mapping table in docs/awf-config-spec.md to include the previously missing config-to-CLI mapping for apiProxy.maxCacheMisses, keeping the documentation aligned with the implemented CLI flag and schema.

Changes:

  • Added the missing mapping entry for apiProxy.maxCacheMisses--max-cache-misses <number> in the §5 CLI mapping table.
Show a summary per file
File Description
docs/awf-config-spec.md Adds the missing apiProxy.maxCacheMisses--max-cache-misses <number> line to the normative CLI mapping table.

Copilot's findings

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

  • Files reviewed: 1/1 changed files
  • Comments generated: 0

@github-actions

github-actions Bot commented Jun 19, 2026

Copy link
Copy Markdown
Contributor Author

Contribution Check completed successfully!

@github-actions

github-actions Bot commented Jun 19, 2026

Copy link
Copy Markdown
Contributor Author

📡 Smoke OTel Tracing completed. All tracing scenarios validated. ✅

@github-actions

github-actions Bot commented Jun 19, 2026

Copy link
Copy Markdown
Contributor Author

Smoke Copilot BYOK AOAI (api-key) completed. Copilot AOAI BYOK (api-key) mode operational. 🔓

@github-actions

github-actions Bot commented Jun 19, 2026

Copy link
Copy Markdown
Contributor Author

🔌 Smoke Services — All services reachable! ✅

@github-actions

github-actions Bot commented Jun 19, 2026

Copy link
Copy Markdown
Contributor Author

Smoke Copilot BYOK completed. Copilot BYOK mode operational. 🔓

@github-actions

github-actions Bot commented Jun 19, 2026

Copy link
Copy Markdown
Contributor Author

✨ The prophecy is fulfilled... Smoke Codex has completed its mystical journey. The stars align. 🌟

@github-actions

github-actions Bot commented Jun 19, 2026

Copy link
Copy Markdown
Contributor Author

Chroot tests passed! Smoke Chroot - All security and functionality tests succeeded.

@github-actions

github-actions Bot commented Jun 19, 2026

Copy link
Copy Markdown
Contributor Author

Smoke Gemini completed. All facets verified. 💎

Smoke test complete. Results: MCP ✅, File ✅, Bash ✅, Connectivity ❌. Summary posted to PR #5250.

@github-actions

github-actions Bot commented Jun 19, 2026

Copy link
Copy Markdown
Contributor Author

Build Test Suite completed successfully!

@github-actions

github-actions Bot commented Jun 19, 2026

Copy link
Copy Markdown
Contributor Author

Smoke Claude failed

@github-actions

github-actions Bot commented Jun 19, 2026

Copy link
Copy Markdown
Contributor Author

Smoke Copilot BYOK AOAI (Entra) completed. Copilot AOAI BYOK (Entra) mode operational. 🔓

@github-actions

github-actions Bot commented Jun 19, 2026

Copy link
Copy Markdown
Contributor Author

🔑 Smoke Copilot PAT PAT auth validated. All systems operational. ✅

@github-actions

github-actions Bot commented Jun 19, 2026

Copy link
Copy Markdown
Contributor Author

📰 VERDICT: Smoke Copilot has concluded. All systems operational. This is a developing story. 🎤

@github-actions

This comment has been minimized.

@github-actions

This comment has been minimized.

@github-actions

This comment has been minimized.

@github-actions

Copy link
Copy Markdown
Contributor Author

🚀 Security Guard has started processing this pull request

@github-actions

github-actions Bot commented Jun 19, 2026

Copy link
Copy Markdown
Contributor Author

Smoke Gemini completed. All facets verified. 💎

Smoke test completed. Overall status: FAIL due to connectivity issues.

@github-actions

github-actions Bot commented Jun 19, 2026

Copy link
Copy Markdown
Contributor Author

Smoke Claude failed

@github-actions

github-actions Bot commented Jun 19, 2026

Copy link
Copy Markdown
Contributor Author

Build Test Suite completed successfully!

@github-actions

github-actions Bot commented Jun 19, 2026

Copy link
Copy Markdown
Contributor Author

📰 VERDICT: Smoke Copilot has concluded. All systems operational. This is a developing story. 🎤

@github-actions

github-actions Bot commented Jun 19, 2026

Copy link
Copy Markdown
Contributor Author

Smoke Copilot BYOK AOAI (Entra) reports failed. AOAI BYOK (Entra) mode investigation needed...

@github-actions

github-actions Bot commented Jun 19, 2026

Copy link
Copy Markdown
Contributor Author

📡 Smoke OTel Tracing completed. All tracing scenarios validated. ✅

@github-actions

github-actions Bot commented Jun 19, 2026

Copy link
Copy Markdown
Contributor Author

Smoke Copilot BYOK AOAI (api-key) completed. Copilot AOAI BYOK (api-key) mode operational. 🔓

@github-actions

github-actions Bot commented Jun 19, 2026

Copy link
Copy Markdown
Contributor Author

✨ The prophecy is fulfilled... Smoke Codex has completed its mystical journey. The stars align. 🌟

@github-actions

github-actions Bot commented Jun 19, 2026

Copy link
Copy Markdown
Contributor Author

Smoke Copilot BYOK completed. Copilot BYOK mode operational. 🔓

@github-actions

github-actions Bot commented Jun 19, 2026

Copy link
Copy Markdown
Contributor Author

🔑 Smoke Copilot PAT PAT auth validated. All systems operational. ✅

@github-actions

Copy link
Copy Markdown
Contributor Author

BYOK Smoke Test Results ✅

Test Summary:

  1. GitHub MCP: ✅ (list_pull_requests verified)
  2. HTTP connectivity: ✅ (github.com accessible)
  3. File write/read: ✅ (smoke-test-copilot-byok.txt present)
  4. BYOK inference: ✅ (response confirms api-proxy → api.githubcopilot.com routing)

Mode: Direct BYOK (COPILOT_PROVIDER_API_KEY via api-proxy sidecar)
Status: PASS

/cc @lpcox

🔑 BYOK report filed by Smoke Copilot BYOK

@github-actions

Copy link
Copy Markdown
Contributor Author

🤖 Smoke Test Results — PASS

Test Result
GitHub MCP connectivity
github.com HTTP ✅ 200
File write/read

Overall: PASS · PR: docs: sync schemas and specs with source changes · @lpcox

📰 BREAKING: Report filed by Smoke Copilot

@github-actions

Copy link
Copy Markdown
Contributor Author

🔬 Smoke Test: Copilot PAT Auth — PASS

Test Result
GitHub MCP connectivity
GitHub.com HTTP (200)
File write/read

Overall: PASS · Auth mode: PAT (COPILOT_GITHUB_TOKEN)

PR: docs: sync schemas and specs with source changes · Author: @github-actions · Reviewer: @lpcox

🔑 PAT report filed by Smoke Copilot PAT

@github-actions

Copy link
Copy Markdown
Contributor Author

📡 Smoke Test: API Proxy OpenTelemetry Tracing

Scenario Result Notes
1. Module Loading otel.js loaded, isEnabled: true; exports: startRequestSpan, setTokenAttributes, setBudgetAttributes, endSpan, endSpanError, shutdown, + internals
2. Test Suite 59/59 tests passed across 2 suites (otel.test.js, otel-fanout.test.js)
3. Env Var Forwarding ⚠️ src/services/api-proxy-service.ts does not yet forward OTEL_EXPORTER_OTLP_ENDPOINT / GITHUB_AW_OTEL_TRACE_ID — expected during development
4. Token Tracker Integration token-tracker-http.js has onUsage callback (OTEL hook point present)
5. OTEL Diagnostics ⚠️ No spans exported (otel.jsonl absent) — expected, pending env var forwarding (Scenario 3)

Overall: ✅ No unexpected failures. Scenarios 3 & 5 are pending implementation of env var forwarding to the api-proxy container.

📡 OTel tracing validated by Smoke OTel Tracing

@github-actions

Copy link
Copy Markdown
Contributor Author

Smoke test results:

  • chore: upgrade gh-aw to v0.80.6 and recompile workflows
  • fix(api-proxy): 403 for terminal caps; fix Anthropic/Copilot input credits
  • GitHub merged-PR check ✅
  • GitHub CLI query check ✅
  • GitHub title check ✅
  • File write/read check ✅
  • Discussion comment check ✅
  • Build (npm ci && npm run build) ✅
    Overall: PASS

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

  • registry.npmjs.org

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "registry.npmjs.org"

See Network Configuration for more information.

🔮 The oracle has spoken through Smoke Codex

@github-actions

Copy link
Copy Markdown
Contributor Author

Chroot Runtime Version Comparison

Runtime Host Version Chroot Version Match?
Python 3.12.13 3.12.3
Node.js v24.16.0 v22.22.3
Go go1.22.12 go1.22.12

Result: ❌ Not all versions match — Python and Node.js differ between host and chroot environments.

Tested by Smoke Chroot

@github-actions

Copy link
Copy Markdown
Contributor Author

@lpcox

Smoke test results:

  • MCP API: ✅
  • GitHub.com connectivity: ✅
  • File write/read: ✅
  • BYOK inference: ✅

Running in direct BYOK mode (AWF_AUTH_TYPE=github-oidc + AWF_AUTH_AZURE_* + COPILOT_PROVIDER_BASE_URL) via api-proxy → Azure OpenAI (Foundry, o4-mini-aw) authenticated via Microsoft Entra

Overall: PASS

🪪 BYOK (AOAI Entra) report filed by Smoke Copilot BYOK AOAI (Entra)

@github-actions

Copy link
Copy Markdown
Contributor Author

Smoke Test: Gemini Engine Validation

Overall status: FAIL

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

  • localhost

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "localhost"

See Network Configuration for more information.

💎 Faceted by Smoke Gemini

@github-actions

Copy link
Copy Markdown
Contributor Author

🏗️ Build Test Suite Results

Ecosystem Project Build/Install Tests Status
Bun elysia 1/1 passed ✅ PASS
Bun hono 1/1 passed ✅ PASS
C++ fmt N/A ✅ PASS
C++ json N/A ✅ PASS
Deno oak N/A 1/1 passed ✅ PASS
Deno std N/A 1/1 passed ✅ PASS
.NET hello-world N/A ✅ PASS
.NET json-parse N/A ✅ PASS
Go color passed ✅ PASS
Go env passed ✅ PASS
Go uuid passed ✅ PASS
Java gson 1/1 passed ✅ PASS
Java caffeine 1/1 passed ✅ PASS
Node.js clsx passed ✅ PASS
Node.js execa passed ✅ PASS
Node.js p-limit passed ✅ PASS
Rust fd 1/1 passed ✅ PASS
Rust zoxide 1/1 passed ✅ PASS

Overall: 8/8 ecosystems passed — ✅ PASS

Generated by Build Test Suite for issue #5250 · 39.4 AIC · ⊞ 7.7K ·

@github-actions

Copy link
Copy Markdown
Contributor Author

@Copilot @lpcox

Smoke Test Results

  • GitHub MCP Testing: ✅
  • GitHub.com Connectivity: ✅
  • File Write/Read: ✅
  • BYOK Inference: ✅

Running in direct BYOK mode (COPILOT_PROVIDER_API_KEY + COPILOT_PROVIDER_BASE_URL) via api-proxy → Azure OpenAI (Foundry, o4-mini-aw)

Overall: PASS

🔑 BYOK (AOAI api-key) report filed by Smoke Copilot BYOK AOAI (api-key)

@github-actions

Copy link
Copy Markdown
Contributor Author

Smoke Test Results

Check Result
Redis PING (host.docker.internal:6379) ❌ Connection timed out
PostgreSQL pg_isready (:5432) ❌ No response
PostgreSQL SELECT 1 ❌ No response

Overall: FAIL

host.docker.internal resolves to 172.17.0.1, but both ports timed out. The AWF firewall blocks database ports (Redis 6379, PostgreSQL 5432) by design via iptables rules in setup-iptables.sh.

🔌 Service connectivity validated by Smoke Services

@lpcox lpcox merged commit 733dad1 into main Jun 19, 2026
79 of 81 checks passed
@lpcox lpcox deleted the docs/schema-sync-2026-06-18-1df30081665d7f6d branch June 19, 2026 20:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants