From 4a87f0bc842ff4033290beb40e466cbca11ad45c Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Fri, 7 Aug 2026 20:01:52 +0000 Subject: [PATCH 1/2] fix: propagate config fields to all layers Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --- docs/awf-config-spec.md | 30 ++++++++++++++++++++++++++++++ 1 file changed, 30 insertions(+) diff --git a/docs/awf-config-spec.md b/docs/awf-config-spec.md index c4c7e4b9f..fcae28901 100644 --- a/docs/awf-config-spec.md +++ b/docs/awf-config-spec.md @@ -237,6 +237,36 @@ AWF settings MAY be supplied via config files, including stdin (`--config -`). - `boundedAgents.maxInvocations` → *(config-only; no CLI equivalent, see §15)* - `boundedAgents.maxModelRequests` → *(config-only; no CLI equivalent, see §15)* - `boundedAgents.maxModelTokens` → *(config-only; no CLI equivalent, see §15)* +- `enclaves.enabled` → *(config-only; no CLI equivalent, see §16)* +- `enclaves.privateRepos[]` → *(config-only; no CLI equivalent, see §16)* +- `enclaves.executors.script.enabled` → *(config-only; no CLI equivalent, see §16)* +- `enclaves.executors.script.runtime` → *(config-only; no CLI equivalent, see §16)* +- `enclaves.executors.script.image` → *(config-only; no CLI equivalent, see §16)* +- `enclaves.executors.script.interpreter` → *(config-only; no CLI equivalent, see §16)* +- `enclaves.executors.script.timeout` → *(config-only; no CLI equivalent, see §16)* +- `enclaves.executors.script.memoryLimit` → *(config-only; no CLI equivalent, see §16)* +- `enclaves.executors.script.cpuLimit` → *(config-only; no CLI equivalent, see §16)* +- `enclaves.executors.script.pidsLimit` → *(config-only; no CLI equivalent, see §16)* +- `enclaves.executors.script.tmpfsLimit` → *(config-only; no CLI equivalent, see §16)* +- `enclaves.executors.script.maxOutputBytes` → *(config-only; no CLI equivalent, see §16)* +- `enclaves.executors.script.maxScriptBytes` → *(config-only; no CLI equivalent, see §16)* +- `enclaves.executors.script.maxInvocations` → *(config-only; no CLI equivalent, see §16)* +- `enclaves.executors.agent.enabled` → *(config-only; no CLI equivalent, see §16)* +- `enclaves.executors.agent.runtime` → *(config-only; no CLI equivalent, see §16)* +- `enclaves.executors.agent.image` → *(config-only; no CLI equivalent, see §16)* +- `enclaves.executors.agent.engine` → *(config-only; no CLI equivalent, see §16)* +- `enclaves.executors.agent.profile` → *(config-only; no CLI equivalent, see §16)* +- `enclaves.executors.agent.model` → *(config-only; no CLI equivalent, see §16)* +- `enclaves.executors.agent.timeout` → *(config-only; no CLI equivalent, see §16)* +- `enclaves.executors.agent.memoryLimit` → *(config-only; no CLI equivalent, see §16)* +- `enclaves.executors.agent.cpuLimit` → *(config-only; no CLI equivalent, see §16)* +- `enclaves.executors.agent.pidsLimit` → *(config-only; no CLI equivalent, see §16)* +- `enclaves.executors.agent.tmpfsLimit` → *(config-only; no CLI equivalent, see §16)* +- `enclaves.executors.agent.maxOutputBytes` → *(config-only; no CLI equivalent, see §16)* +- `enclaves.executors.agent.maxTaskBytes` → *(config-only; no CLI equivalent, see §16)* +- `enclaves.executors.agent.maxInvocations` → *(config-only; no CLI equivalent, see §16)* +- `enclaves.executors.agent.maxModelRequests` → *(config-only; no CLI equivalent, see §16)* +- `enclaves.executors.agent.maxModelTokens` → *(config-only; no CLI equivalent, see §16)* When `container.dockerHostPathPrefix` points at a daemon-visible shared `/tmp` path, the implementation stages the invoking CLI binary together with `/etc/passwd`, `/etc/group`, and the generated chroot `/etc/hosts` under that shared path so chroot mode can bootstrap on split-filesystem ARC/DinD hosts. From c7f6bf757a369bdbf9d37853cc20a8d86eec7210 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Fri, 7 Aug 2026 23:49:22 +0000 Subject: [PATCH 2/2] docs: add missing enclaves.executors.*.network rows to CLI mapping table Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com> --- docs/awf-config-spec.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/docs/awf-config-spec.md b/docs/awf-config-spec.md index a319dedd0..6bad4f972 100644 --- a/docs/awf-config-spec.md +++ b/docs/awf-config-spec.md @@ -219,6 +219,7 @@ AWF settings MAY be supplied via config files, including stdin (`--config -`). - `enclaves.executors.script.enabled` → *(config-only; no CLI equivalent, see §14)* - `enclaves.executors.script.runtime` → *(config-only; no CLI equivalent, see §14)* - `enclaves.executors.script.image` → *(config-only; no CLI equivalent, see §14)* +- `enclaves.executors.script.network` → *(config-only; no CLI equivalent, see §14)* - `enclaves.executors.script.interpreter` → *(config-only; no CLI equivalent, see §14)* - `enclaves.executors.script.timeout` → *(config-only; no CLI equivalent, see §14)* - `enclaves.executors.script.memoryLimit` → *(config-only; no CLI equivalent, see §14)* @@ -231,6 +232,7 @@ AWF settings MAY be supplied via config files, including stdin (`--config -`). - `enclaves.executors.agent.enabled` → *(config-only; no CLI equivalent, see §14)* - `enclaves.executors.agent.runtime` → *(config-only; no CLI equivalent, see §14)* - `enclaves.executors.agent.image` → *(config-only; no CLI equivalent, see §14)* +- `enclaves.executors.agent.network` → *(config-only; no CLI equivalent, see §14)* - `enclaves.executors.agent.engine` → *(config-only; no CLI equivalent, see §14)* - `enclaves.executors.agent.profile` → *(config-only; no CLI equivalent, see §14)* - `enclaves.executors.agent.model` → *(config-only; no CLI equivalent, see §14)*