[Repo Assist] Monthly Activity 2026-04

[github-actions]

🤖 Repo Assist here — I'm an automated AI assistant for this repository.

Activity for April 2026

Suggested Actions for Maintainer

Comprehensive list of all pending actions requiring maintainer attention.

• Check comment [rust-guard] Rust Guard: Fix misleading items_path.to_string() clone + test extract_items_array #4463: Repo Assist verified items_path.to_string() clone fix and extract_items_array test gap — View

(No open Repo Assist PRs at this time.)

Future Work for Repo Assist

• Extract shared sessionSuffix helper to internal/strutil (Issue 1 from [refactor] Semantic Function Clustering Analysis – Outliers and Duplicate Patterns #4138)
• Remove redundant ParseError type assertion in config_core.go (LoadFromFile) — identified in [go-fan] Go Module Review: BurntSushi/toml #4328
• Upgrade go-sdk from v1.5.0 → latest once proxy.golang.org is unblocked
• Implement fix for [rust-guard] Rust Guard: Fix misleading items_path.to_string() clone + test extract_items_array #4463: replace 3× items_path.to_string() with move + add extract_items_array tests

Guard Filtering Summary

No objects were filtered by the guard policy.

Run History

2026-04-24 12:39 UTC — Run

• 🏷️ Labelled Smoke Copilot - Issue Group #4408, Smoke AllowOnly: 24889825169 #4467, Smoke AllowOnly - Issue Group #4468 with automation (smoke test issues)
• 💬 Commented on [rust-guard] Rust Guard: Fix misleading items_path.to_string() clone + test extract_items_array #4463: verified items_path.to_string() clone issue (3 sites confirmed) and extract_items_array zero-test coverage — both improvements accurate, recommended single PR

2026-04-23 12:40 UTC — Run

• 🔧 Created PR (this run): perf(rust-guard): eliminate ctx.clone() and use &'static str in NormalizedPolicy — closes [rust-guard] Rust Guard: Eliminate ctx.clone() in label_agent + NormalizedPolicy &'static str fields #4380 (reorders integrity computation before set_runtime_policy_context to move ctx instead of clone; adds ScopeKind::as_str(); NormalizedPolicy fields → &'static str; 322/322 Rust tests pass)
• 🔧 Created PR (this run): refactor(cmd): cobra UX improvements — NoArgs, MarkFlagFilename, preRun test fix — relates to [go-fan] Go Module Review: spf13/cobra #4379 (adds Args: cobra.NoArgs; replaces 4 verbose RegisterFlagCompletionFunc lambdas with MarkFlagFilename/MarkFlagDirname; fixes 9 fragile preRun(nil,nil) in tests)

2026-04-22 12:40 UTC — Run

• 🔧 Created PR [Repo Assist] fix(rust-guard): remove write-only owner-type cache and simplify get_issue_author_association #4339 (merged): fix(rust-guard): remove write-only owner-type cache and simplify get_issue_author_association — closes [rust-guard] Rust Guard: Two dead-code / duplication fixes in backend.rs #4329 (dead repo_owner_type_cache removed; get_issue_author_association_with_callback reduced from 35 lines to 3-line delegate; 322/322 Rust tests pass)
• 💬 Commented on [duplicate-code] Duplicate Code Pattern: Raw MCP Text-Content Envelope Construction #4326: verified 4-site pattern, recommended BuildMCPTextResponse in internal/mcp/tool_result.go and consolidating [duplicate-code] Duplicate Code Pattern: Raw MCP Text-Content Envelope Construction #4326+[duplicate-code] Duplicate Code Pattern: Collaborator Permission Parse/Log/Wrap Block #4327 together (Copilot PR Deduplicate raw MCP text envelope construction with shared helper #4352 merged this — resolved)

2026-04-21 12:41 UTC — Run

• 🔧 Created PR [Repo Assist] refactor(rust-guard): extract is_any_trusted_actor helper and collapse URL fallback loop #4260 (merged): refactor(rust-guard): extract is_any_trusted_actor helper and collapse URL fallback loop — closes [rust-guard] Rust Guard: Extract is_any_trusted_actor helper and collapse URL fallback loop #4252 (three copy-pasted trust checks → helper; three URL-field if-let blocks → loop; 317/317 Rust tests pass)
• 💬 Commented on [gateway] list_commits on non-default branch: owner's commits get none integrity on personal repos #4250: confirmed root cause of list_commits none integrity on personal repos; prioritised primary vs secondary vs tertiary fix approaches (issue closed by lpcox as completed)
• 🏷️ Labelled Smoke Copilot - Issue Group #4245 with automation

2026-04-20 12:43 UTC — Run

• 🔧 Created PR [Repo Assist] fix(server): migrate guard_init.go DIFC logs to structured logger #4191 (merged): fix(server): migrate guard_init.go DIFC logs to structured logger — closes [duplicate-code] Duplicate Code Pattern: Repeated [DIFC]-prefixed log.Printf in guard_init.go #4175
• 🔧 Created PR [Repo Assist] refactor(proxy): replace manual guard policy validation with ParseGuardPolicyJSON #4192 (merged): refactor(proxy): replace manual guard policy validation with ParseGuardPolicyJSON — closes [duplicate-code] Duplicate Code Pattern: Guard policy JSON parsing re-implemented in proxy.go initGuardPolicy #4176

2026-04-19 12:29 UTC — Run

• 🔧 Created PR [Repo Assist] refactor(auth): move IsMalformedHeader from server to auth package #4144 (merged): refactor(auth): move IsMalformedHeader from server to auth package — partial closes [refactor] Semantic Function Clustering Analysis – Outliers and Duplicate Patterns #4138
• 💬 Commented on [refactor] Semantic Function Clustering Analysis – Outliers and Duplicate Patterns #4138: triaged refactoring analysis, prioritised 4 findings, noted PR for Issue 3

2026-04-18 12:29 UTC — Run

• 🔧 Created PR (merged [Repo Assist] fix(rust-guard): eliminate scopes.clone() in label_agent + add DIFC_MODE constant #4085): fix(rust-guard): eliminate scopes.clone() in label_agent + add DIFC_MODE constant — closes [rust-guard] Rust Guard: eliminate scopes.clone() in label_agent + named DIFC_MODE constant #4008
• 🔧 Created PR (merged [Repo Assist] build: add test-rust Makefile target and include Rust tests in agent-finished #4086): build: add test-rust Makefile target and include Rust tests in agent-finished
• 💬 Commented on [rust-guard] Rust Guard: eliminate scopes.clone() in label_agent + named DIFC_MODE constant #4008: linking PR with fix details
• 💬 Commented on [guard-coverage] Guard coverage gap: 1 operation from github-mcp-server not fully covered #4039: already fixed by [guard-coverage] Add set_issue_fields to github-guard write classification and DIFC rules #4049 (Copilot PR), safe to close

2026-04-17 12:38 UTC — Run

• 💬 Commented on [duplicate-code] Duplicate Code Pattern: Repeated logInboundRPCResponse block in SendRequestWithServerID #3932, [rust-guard] Rust Guard: eliminate scopes.clone() in label_agent + named DIFC_MODE constant #4008, [guard-coverage] Guard coverage gap: 1 operation from github-mcp-server not fully covered #3987

2026-04-16 12:41 UTC — Run

• 🔧 Created PR (merged [Repo Assist] fix(mcp): replace hardcoded 30s with defaultConnectTimeout constant, fix <= 0 guard #3946): fix(mcp): replace hardcoded 30s with defaultConnectTimeout constant — closes [duplicate-code] Duplicate Code Pattern: Hardcoded 30s connect timeout default duplicated in connection.go #3933
• 🔧 Created PR (merged [Repo Assist] test(mcp): add connect-timeout default behaviour tests #3947): test(mcp): add connect-timeout default behaviour tests

2026-04-15 12:39 UTC — Run

• 🔧 Created PR (closed [Repo Assist] refactor(mcp): extract logInboundRPCResponse helper in connection.go #3847): refactor(mcp): extract logInboundRPCResponse helper — closes [duplicate-code] Duplicate Code Pattern: Repeated shouldAttachAgentTags Conditional Logging in connection.go #3828
• 💬 Commented on [duplicate-code] Duplicate Code Pattern: Repeated shouldAttachAgentTags Conditional Logging in connection.go #3828, [rust-guard] Rust Guard: Merge duplicate search_issues / search_pull_requests match arms #3834, [duplicate-code] Duplicate Code Pattern: getDefault* Env-Wrapper Function Proliferation in cmd/flags #3829
• 🏷️ Labelled Body of issue created by bot gets integrity filtered #3830 with bug; labelled Smoke Copilot - Issue Group #3802 with needs triage

2026-04-14 12:40 UTC — Run

• 🔧 Created PR [Repo Assist] refactor: replace inline truncation with strutil/sanitize utilities #3750 (merged): Replace manual inline truncation with strutil.Truncate / sanitize.TruncateSecret — closes #3737
• 📝 Created issue [Repo Assist] ci: pin actions/github-script to SHA and upgrade from v7 to v9 #3751 (closed by maintainer)

2026-04-13 12:42 UTC — Run

• 🔧 Created PR [Repo Assist] fix(rust-guard): remove redundant match arm and unused MEDIUM_BUFFER_SIZE re-export #3701 (merged): Remove redundant "none" match arm and unused MEDIUM_BUFFER_SIZE — closes #3691
• 💬 Commented on [rust-guard] Rust Guard: Remove redundant match arm and unused re-export #3691, [duplicate-code] Duplicate Code Pattern: Config Finalization Pipeline (TOML vs JSON Stdin Paths) #3562, [duplicate-code] Duplicate Code Pattern: Log level dispatch quartet repeated across 3 logger façades #3687

2026-04-12 12:29 UTC — Run

• 💬 Commented on Feature: Maintainer reaction endorsement for integrity promotion #3618
• 🔧 Created PR [Repo Assist] fix: remove redundant log.Printf calls from connection.go #3640 (merged): Remove 5 redundant log.Printf calls from connection.go — closes #3633

2026-04-11 12:27 UTC — Run

• 🏷️ Labelled Smoke Copilot - Issue Group #3550 with automation; labelled Copilot offline mode + BYOK #3563 with enhancement
• 💬 Commented on Copilot offline mode + BYOK #3563
• 🔧 Created PR (merged): Add strutil.TruncateRunes, delegate truncateForLog, inline lookupEnrichmentToken alias

Earlier runs

• 2026-04-09: PRs (closed) — httputil.WriteJSONResponse, InitGatewayLoggers/InitProxyLoggers helpers
• 2026-04-08: PR (closed) — rust-guard-test CI job
• 2026-04-07: PR [Repo Assist] fix(rust-guard): replace to_lowercase() with eq_ignore_ascii_case, remove stale dead_code #3325 (closed) — Rust guard: eq_ignore_ascii_case, remove stale #[allow(dead_code)]
• 2026-04-06: PR [Repo Assist] fix(config): wire payloadSizeThreshold in JSON stdin + add keepaliveInterval to schema #3281 (closed) — three compliance fixes ([compliance] Compliance Gaps: keepaliveInterval and payloadSizeThreshold Configuration Handling #3272)
• 2026-04-05: PR (closed) — move ExpandEnvArgs to envutil
• 2026-04-04: PRs (closed) — GenerateRandomAPIKey, test-race target
• 2026-04-03: PR (closed) — move logRuntimeError; commented on [refactor] Semantic Function Clustering: Refactoring Opportunities in Go Source Files #3113
• 2026-04-02: PRs (closed) — writeDIFCForbidden helper, GetEnvDuration + session timeout
• 2026-04-01: PR (closed) — remove writeJSONResponse passthrough; commented on [compliance] Compliance Gap: Health Monitoring Missing Periodic Checks and Auto-Restart (Section 8) #2988, [duplicate-code] Duplicate Code Pattern: Boilerplate initGlobal*/closeGlobal* Logger Wrappers #2909

Generated by Repo Assist · ● 1.6M · ◷

To install this agentic workflow, run

gh aw add githubnext/agentics/workflows/repo-assist.md@851905c06e905bf362a9f6cc54f912e3df747d55