[Repo Assist] Monthly Activity 2026-05

[github-actions]

🤖 Repo Assist here — I'm an automated AI assistant for this repository.

Activity for May 2026

Suggested Actions for Maintainer

Comprehensive list of all pending actions requiring maintainer attention.

• Review PR (repo-assist/fix-issue-5733): refactor(config): add envutil.HasEnvVar and hasMapKeyVariants helpers — closes [duplicate-code] Duplicate Code Pattern: Mixed env var access and dual-form key checks in guard_policy_parse.go #5733 — Review
• Check comment [guard-coverage] Guard coverage gap: 1 write operation from github-mcp-server not classified #5799: Repo Assist verified discussion_comment_write missing from WRITE_OPERATIONS and tool_rules.rs — fix recommended — View
• Check comment [go-fan] Go Module Review: wazero #5666: Repo Assist verified wasm compilation cache race condition — fix recommended — View
• Check comment [rust-guard] Rust Guard: Eliminate two avoidable heap allocations in hot paths #5667: Repo Assist verified both heap-allocation improvements in rust-guard — View
• Check comment [duplicate-code] Duplicate Code Pattern: Guard Policy Env Var Reading — Mixed os.Getenv vs envutil #5519: Repo Assist verified env var consistency fix is safe; LookupEnv presence checks must stay — View
• Check comment [refactor] Semantic Function Clustering Analysis #5376: Repo Assist assessed semantic function clustering findings (ensureTracingConfig, rate-limit parsers, SessionSuffix, clientAddr) — View
• Check comment [rust-guard] Rust Guard: Remove unreachable dead code branch in parse_scoped_entry + eliminate scope_token duplication #5302: Repo Assist verified dead code and scope_token duplication analysis — View
• Check comment [gateway] Per-tool jq response filters to reduce token bloat (e.g., list_code_scanning_alerts rule.help) #5269: Repo Assist reviewed per-tool jq filter implementation approach — View
• Check comment [refactor] Semantic Function Clustering Analysis — Outliers & Refactoring Opportunities #5144: Repo Assist reviewed semantic function clustering analysis — View
• Check comment [duplicate-code] Duplicate Code Pattern: Session Timeout Env-Var Literal #5071: Repo Assist confirmed session timeout duplication and recommended fix — View
• Check comment [rust-guard] Rust Guard: Eliminate redundant Value clone in extract_mcp_response + PolicyScopeEntry clone in first_matching_scope #5074: Repo Assist verified Cow/reference optimizations in Rust guard — View
• Check comment [duplicate-code] Duplicate Code Pattern: Nonce Cache Eviction Loop in hmac.go #4988: Repo Assist confirmed nonce eviction duplication finding — View
• Check comment [refactor] Semantic Function Clustering Analysis — Refactoring Opportunities #4990: Repo Assist verified all 4 semantic function clustering findings — View
• Check comment [refactor] Semantic Function Clustering Analysis — Refactoring Opportunities #4919: Repo Assist verified all 4 semantic function clustering findings — View

Future Work for Repo Assist

• Fix discussion_comment_write gap: add to WRITE_OPERATIONS + tool_rules.rs ([guard-coverage] Guard coverage gap: 1 write operation from github-mcp-server not classified #5799)
• Fix ConfigureGlobalCompilationCache race condition ([go-fan] Go Module Review: wazero #5666) — hold lock across read-and-set
• Implement Cow<'_, str> for policy_scope_token/normalize_scope + label_matches_normalized predicate in integrity_rank_normalized ([rust-guard] Rust Guard: Eliminate String allocations in policy_scope_token and integrity_rank_normalized hot paths #5739 / [rust-guard] Rust Guard: Eliminate redundant Value clone in extract_mcp_response + PolicyScopeEntry clone in first_matching_scope #5074)
• Move ensureTracingConfig from cmd/root.go → cmd/tracing.go ([refactor] Semantic Function Clustering Analysis #5376 Finding 1)
• Move parseRateLimitResetFromText to httputil/github_http.go ([refactor] Semantic Function Clustering Analysis #5376 Finding 2 / [refactor] Semantic Function Clustering Analysis: Refactoring Opportunities #5032 Finding 3)
• Implement [gateway] Per-tool jq response filters to reduce token bloat #5270: per-tool jq response filters feature
• Move getSessionTimeout() to internal/config/config_env.go ([duplicate-code] Duplicate Code Pattern: Session Timeout Env-Var Literal #5071)
• Implement [refactor] Semantic Function Clustering Analysis — Refactoring Opportunities #4990 Finding 3: remove writeErrorResponse thin wrapper
• Implement [duplicate-code] Duplicate Code Pattern: Guard Policy Env Var Reading — Mixed os.Getenv vs envutil #5519: replace os.Getenv with envutil.GetEnvString and extract env-var name constants

Guard Filtering Summary

No objects were filtered by the guard policy.

Run History

2026-05-16 12:59 UTC — Run

• 🏷️ Labelled Smoke Test: Copilot - 25962252064 #5810, Smoke AllowOnly - Issue Group #5803, Smoke Copilot - Issue Group #5777 with needs triage
• 💬 Commented on [guard-coverage] Guard coverage gap: 1 write operation from github-mcp-server not classified #5799: verified discussion_comment_write missing from WRITE_OPERATIONS and tool_rules.rs; both gaps confirmed; fix details provided

2026-05-15 13:15 UTC — Run

• 🏷️ Labelled Smoke Test: Copilot - 25919213415 #5741, Smoke AllowOnly - Issue Group #5735, Smoke Copilot - Issue Group #5718 with automation, needs triage
• 🔧 Created PR: refactor(config): add envutil.HasEnvVar and hasMapKeyVariants helpers — closes [duplicate-code] Duplicate Code Pattern: Mixed env var access and dual-form key checks in guard_policy_parse.go #5733 (adds HasEnvVar to envutil; replaces 4× os.LookupEnv with envutil.HasEnvVar; collapses 12-line dual-form key check into 2 lines via hasMapKeyVariants)

2026-05-14 13:15 UTC — Run

• 🏷️ Labelled Smoke Copilot - Issue Group #5648, Smoke AllowOnly - Issue Group #5651, Smoke Test: Copilot - 25861466220 #5668 with automation, needs triage
• 💬 Commented on [go-fan] Go Module Review: wazero #5666: verified ConfigureGlobalCompilationCache race condition; suggested atomic read-and-set fix
• 💬 Commented on [rust-guard] Rust Guard: Eliminate two avoidable heap allocations in hot paths #5667: verified both heap-allocation improvements (Vec elimination in check_file_secrecy, Cow for infer_scope_for_baseline)

2026-05-12 13:18 UTC — Run

• 🔧 Created PR: refactor(rust-guard): extract find_org_in_items helper and simplify repo_id field loop — closes [rust-guard] Rust Guard: Deduplicate identical loop bodies in backend.rs #5527 (eliminates 12-line duplicated loop body; collapses 2 if-let blocks into a 5-line loop; adds 7 unit tests)
• 💬 Commented on [duplicate-code] Duplicate Code Pattern: Guard Policy Env Var Reading — Mixed os.Getenv vs envutil #5519: verified env var consistency fix is safe; os.LookupEnv presence checks on lines 235–238 should stay; GetEnvString equivalent for lines 243–245

2026-05-11 13:35 UTC — Run

• 🔧 Created PR: perf(rust-guard): add ORDER_LOW_TO_HIGH_PIPED const and direct tests for parse_integrity/scope_string — closes [rust-guard] Rust Guard: Add ORDER_LOW_TO_HIGH_PIPED const + direct tests for parse_integrity / scope_string #5459 (eliminates runtime Vec/String allocation in error path; adds 3 new direct unit tests)

2026-05-10 12:59 UTC — Run

• 🔧 Created PR: refactor(middleware): extract runJqCode helper — closes [duplicate-code] Duplicate Code Pattern: jq Filter Execution Logic in jqschema.go #5409 (eliminates ~25 lines of duplicate jq execution code between applyJqSchema and applyToolResponseFilter)
• 💬 Commented on [refactor] Semantic Function Clustering Analysis #5376: assessed all 4 semantic function clustering findings

2026-05-09 12:59 UTC — Run

• 🔧 Created PR: refactor(config): extract normalizeStringSlice helper — closes [duplicate-code] Duplicate Code Pattern: Repeated String Slice Validation & Normalization in guard_policy_validation.go #5357 (48 lines → single 20-line helper)
• 💬 Commented on [refactor] Semantic Function Clustering Analysis #5340: assessed all 4 semantic function clustering findings

2026-05-08 13:02 UTC — Run

• 💬 Commented on [rust-guard] Rust Guard: Remove unreachable dead code branch in parse_scoped_entry + eliminate scope_token duplication #5302: verified dead code in parse_scoped_entry and scope_token duplication — both confirmed
• 💬 Commented on [gateway] Per-tool jq response filters to reduce token bloat (e.g., list_code_scanning_alerts rule.help) #5269: reviewed per-tool jq filter implementation, noted pre-compile strategy and TOML mapping

2026-05-06 12:56 UTC — Run

• 🏷️ Labelled MCP gateway tool timeout should be configurable by reusable workflow components #5190 with enhancement, needs investigation
• 🔧 Created PR: test(config): add tests for config_env.go gateway env var parsers — 26 tests covering GetGatewayPortFromEnv, GetGatewayDomainFromEnv, GetGatewayAPIKeyFromEnv, GetGatewayToolTimeoutFromEnv, toolTimeoutEnvOrDefault (all previously untested)

2026-05-05 12:44 UTC — Run

• 🔧 Created PR: test(rust-guard): add unit tests for check_file_secrecy — closes [rust-guard] Rust Guard: Add tests for check_file_secrecy + Arc-wrap PolicyContext #5143 (12 new tests, all passing)
• 💬 Commented on [refactor] Semantic Function Clustering Analysis — Outliers & Refactoring Opportunities #5144: reviewed semantic function clustering analysis findings

2026-05-04 12:53 UTC — Run

• 🏷️ Labelled Smoke Copilot - Issue Group #5009 with needs triage
• 🏷️ Labelled Smoke AllowOnly - Issue Group #5036 with needs triage
• 💬 Commented on [duplicate-code] Duplicate Code Pattern: Session Timeout Env-Var Literal #5071: confirmed session timeout duplication and recommended fix approach
• 💬 Commented on [rust-guard] Rust Guard: Eliminate redundant Value clone in extract_mcp_response + PolicyScopeEntry clone in first_matching_scope #5074: verified Cow/reference optimization analysis in Rust guard

2026-05-03 12:35 UTC — Run

• 🔧 Created PR: refactor(strutil): move formatResetAt to strutil.FormatResetAt — addresses [refactor] Semantic Function Clustering Analysis: Refactoring Opportunities #5032 Finding 4
• 🔧 Created PR: perf(mcp): eliminate marshal/unmarshal round-trip in ConvertToCallToolResult
• 💬 Commented on [refactor] Semantic Function Clustering Analysis: Refactoring Opportunities #5032: implemented Finding 4, noted status of other findings

2026-05-02 12:35 UTC — Run

• 🔧 Created PR: test(launcher): add tests for clearServerForRestart and getServerConfig
• 💬 Commented on [duplicate-code] Duplicate Code Pattern: Nonce Cache Eviction Loop in hmac.go #4988: confirmed nonce eviction loop duplication finding
• 💬 Commented on [refactor] Semantic Function Clustering Analysis — Refactoring Opportunities #4990: verified all 4 semantic function clustering findings

2026-05-01 12:38 UTC — Run

• 🔧 Created PR [Repo Assist] fix(config): add promotion-label and demotion-label fields to AllowOnlyPolicy #4928: fix(config): add promotion-label and demotion-label fields to AllowOnlyPolicy — closes [compliance] Compliance Gap: Go config layer missing promotion-label/demotion-label fields added to Rust WASM guard (commit 662a784) #4920 (merged ✅)
• 💬 Commented on [compliance] Compliance Gap: Go config layer missing promotion-label/demotion-label fields added to Rust WASM guard (commit 662a784) #4920: confirmed compliance regression and linked fix PR
• 💬 Commented on [refactor] Semantic Function Clustering Analysis — Refactoring Opportunities #4919: verified all 4 semantic function clustering findings
• 📝 Closed April 2026 activity issue; created this May 2026 issue

Generated by Repo Assist

Generated by Repo Assist · ● 1.3M · ◷

To install this agentic workflow, run

gh aw add githubnext/agentics/workflows/repo-assist.md@851905c06e905bf362a9f6cc54f912e3df747d55