Sync source AWF schema copy with documented schema

[Copilot]

The Test Coverage Reporter workflow was failing in its coverage step because the schema parity test detected drift between the checked-in runtime schema copy and the documented schema. This change removes that drift so the reporter can complete instead of failing on src/schema.test.ts.

• Root cause

  • src/awf-config-schema.json had fallen behind docs/awf-config.schema.json.
  • The workflow failure was a test failure, not a coverage-reporting logic failure.

• Change

  • Sync src/awf-config-schema.json to match the documented schema copy.
  • Bring over the updated excludeEnv/API proxy credential-isolation schema text so the source and docs describe the same contract.

• Effect

  • Restores the invariant enforced by src/schema.test.ts.
  • Unblocks the Test Coverage Reporter workflow without changing workflow behavior.

{
  "description": "When excluding LLM API credentials via excludeEnv, apiProxy.enabled must also be enabled so the agent receives proxy-backed placeholders instead of losing credentials entirely."
}

[Copilot]

Copilot wasn't able to review any files in this pull request.

[github-actions]

Smoke Test Results ✅

Test	Result
GitHub API (recent-prs.json)	✅ PASS — 2 PR entries confirmed
GitHub check (playwright_check)	✅ PASS — playwright_check=✅ PASS
File verify (smoke-test-claude)	✅ PASS — file exists
Overall	✅ PASS

All smoke tests passed. Claude engine validation successful.

💥 [THE END] — Illustrated by Smoke Claude

[github-actions]

Smoke Test Results

Test	Status
GitHub MCP (github-list_pull_requests)	✅
GitHub.com connectivity	✅
File write/read (smoke-test-copilot-26259941147.txt)	✅

Overall: PASS

PR: "Sync source AWF schema copy with documented schema" — author @Copilot, assignees @lpcox @Copilot

📰 BREAKING: Report filed by Smoke Copilot

[github-actions]

✅ GitHub MCP: docs(spec): add port information to /reflect endpoint sections; fix(dind-probe): address review feedback from #3554
❌ Safe Inputs GH CLI: safeinputs-gh unavailable
✅ Playwright: GitHub title verified
❌ Tavily: no registered search tool returned results
✅ File/Bash: smoke-test-codex-26259941150.txt verified
✅ Discussion: oracle comment posted to #3562 via fallback query
✅ Build AWF: npm ci && npm run build
Overall status: FAIL

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

• registry.npmjs.org

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "registry.npmjs.org"

See Network Configuration for more information.

🔮 The oracle has spoken through Smoke Codex

[github-actions]

🏗️ Build Test Suite Results

Ecosystem	Project	Build/Install	Tests	Status
Bun	elysia	✅	1/1 passed	✅ PASS
Bun	hono	✅	1/1 passed	✅ PASS
C++	fmt	✅	N/A	✅ PASS
C++	json	✅	N/A	✅ PASS
Deno	oak	N/A	1/1 passed	✅ PASS
Deno	std	N/A	1/1 passed	✅ PASS
.NET	hello-world	✅	N/A	✅ PASS
.NET	json-parse	✅	N/A	✅ PASS
Go	color	✅	1/1 passed	✅ PASS
Go	env	✅	1/1 passed	✅ PASS
Go	uuid	✅	1/1 passed	✅ PASS
Java	gson	✅	1/1 passed	✅ PASS
Java	caffeine	✅	1/1 passed	✅ PASS
Node.js	clsx	✅	passed	✅ PASS
Node.js	execa	✅	passed	✅ PASS
Node.js	p-limit	✅	passed	✅ PASS
Rust	fd	✅	1/1 passed	✅ PASS
Rust	zoxide	✅	1/1 passed	✅ PASS

Overall: 8/8 ecosystems passed — ✅ PASS

Generated by Build Test Suite for issue #3567 · ● 5.7M · ◷

[github-actions]

Gemini Engine Smoke Test Results

• GitHub MCP Testing: ❌ (mcpscripts command not found)
• GitHub.com Connectivity: ❌ (SSL connect error 35)
• File Writing Testing: ✅
• Bash Tool Testing: ✅

Overall Status: FAIL

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

• localhost

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "localhost"

See Network Configuration for more information.

💎 Faceted by Smoke Gemini

[github-actions]

Smoke Test Results

• Redis PING: ❌ (timeout — host.docker.internal:6379 unreachable)
• PostgreSQL pg_isready: ❌ (no response on host.docker.internal:5432)
• PostgreSQL SELECT 1: ❌ (skipped due to pg_isready failure)

Overall: FAIL — host.docker.internal is not reachable from this runner environment. Service containers may not be running or the hostname is not resolvable.

🔌 Service connectivity validated by Smoke Services

[github-actions]

Smoke Test: Copilot BYOK (Offline Mode)

Test	Result
GitHub MCP	✅ PR #3567 "Sync source AWF schema copy with documented schema" fetched
GitHub.com connectivity	⚠️ Template var unsubstituted (${{ steps.smoke-data.outputs.SMOKE_HTTP_CODE }})
File write/read	⚠️ Template var unsubstituted (${{ steps.smoke-data.outputs.SMOKE_FILE_PATH }})
BYOK inference (api-proxy → api.githubcopilot.com)	✅ Responding via BYOK offline mode

Running in BYOK offline mode (COPILOT_OFFLINE=true) via api-proxy → api.githubcopilot.com.

PR author: @Copilot · Assignees: @lpcox, @Copilot

Overall: PARTIAL — BYOK inference and MCP connectivity confirmed ✅; pre-step outputs not substituted ⚠️

🔑 BYOK report filed by Smoke Copilot BYOK