ci: use local awf build in smoke workflows (#388)

* Initial plan

* ci: use local awf build for smoke workflows

Co-authored-by: Mossaka <5447827+Mossaka@users.noreply.github.com>

* ci: make smoke workflow postprocess resilient

Co-authored-by: Mossaka <5447827+Mossaka@users.noreply.github.com>

* ci: tighten smoke workflow postprocess replace

Co-authored-by: Mossaka <5447827+Mossaka@users.noreply.github.com>

* ci: make smoke postprocess indentation-aware

Co-authored-by: Mossaka <5447827+Mossaka@users.noreply.github.com>

* ci: validate local awf wrapper setup

Co-authored-by: Mossaka <5447827+Mossaka@users.noreply.github.com>

* ci: allow all roles for smoke workflows

* ci: post-process smoke workflows to use local awf build

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: Mossaka <5447827+Mossaka@users.noreply.github.com>
Co-authored-by: Jiaxiao (mossaka) Zhou <duibao55328@gmail.com>

Author: Copilot

.github/workflows/smoke-claude.lock.yml

@@ -1,11 +1,12 @@
 ---
 description: Smoke test workflow that validates Claude engine functionality by reviewing recent PRs twice daily
-on: 
+on:
   schedule: every 12h
   workflow_dispatch:
   pull_request:
     types: [opened, synchronize, reopened]
   reaction: "heart"
+roles: all
 permissions:
   contents: read
   issues: read

.github/workflows/smoke-claude.md

@@ -1,11 +1,12 @@
 ---
 description: Smoke Copilot
-on: 
+on:
   schedule: every 12h
   workflow_dispatch:
   pull_request:
     types: [opened, synchronize, reopened]
   reaction: "eyes"
+roles: all
 permissions:
   contents: read
   pull-requests: read

.github/workflows/smoke-copilot.lock.yml

@@ -0,0 +1,76 @@
+#!/usr/bin/env node
+
+import * as fs from 'fs';
+import * as path from 'path';
+
+const repoRoot = path.resolve(__dirname, '../..');
+const workflowPaths = [
+  path.join(repoRoot, '.github/workflows/smoke-copilot.lock.yml'),
+  path.join(repoRoot, '.github/workflows/smoke-claude.lock.yml'),
+];
+
+// Matches the install step with captured indentation:
+// - "Install awf binary" step at any indent level
+// - run command invoking install_awf_binary.sh with a version
+const installStepRegex =
+  /^(\s*)- name: Install awf binary\n\1\s*run: bash \/opt\/gh-aw\/actions\/install_awf_binary\.sh v[0-9.]+\n/m;
+const installStepRegexGlobal = new RegExp(installStepRegex.source, 'gm');
+
+function buildLocalInstallSteps(indent: string): string {
+  const stepIndent = indent;
+  const runIndent = `${indent}  `;
+  const scriptIndent = `${runIndent}  `;
+
+  return [
+    `${stepIndent}- name: Install awf dependencies`,
+    `${runIndent}run: npm ci`,
+    `${stepIndent}- name: Build awf`,
+    `${runIndent}run: npm run build`,
+    `${stepIndent}- name: Install awf binary (local)`,
+    `${runIndent}run: |`,
+    `${scriptIndent}WORKSPACE_PATH="${'${GITHUB_WORKSPACE:-$(pwd)}'}"`,
+    `${scriptIndent}NODE_BIN="$(command -v node)"`,
+    `${scriptIndent}if [ ! -d "$WORKSPACE_PATH" ]; then`,
+    `${scriptIndent}  echo "Workspace path not found: $WORKSPACE_PATH"`,
+    `${scriptIndent}  exit 1`,
+    `${scriptIndent}fi`,
+    `${scriptIndent}if [ ! -x "$NODE_BIN" ]; then`,
+    `${scriptIndent}  echo "Node binary not found: $NODE_BIN"`,
+    `${scriptIndent}  exit 1`,
+    `${scriptIndent}fi`,
+    `${scriptIndent}if [ ! -d "/usr/local/bin" ]; then`,
+    `${scriptIndent}  echo "/usr/local/bin is missing"`,
+    `${scriptIndent}  exit 1`,
+    `${scriptIndent}fi`,
+    `${scriptIndent}sudo tee /usr/local/bin/awf > /dev/null <<EOF`,
+    `${scriptIndent}#!/bin/bash`,
+    `${scriptIndent}exec "${'${NODE_BIN}'}" "${'${WORKSPACE_PATH}'}/dist/cli.js" "\\$@"`,
+    `${scriptIndent}EOF`,
+    `${scriptIndent}sudo chmod +x /usr/local/bin/awf`,
+  ].join('\n') + '\n';
+}
+
+for (const workflowPath of workflowPaths) {
+  const content = fs.readFileSync(workflowPath, 'utf-8');
+  const matches = content.match(installStepRegexGlobal);
+
+  if (!matches || matches.length === 0) {
+    console.log(`Skipping ${workflowPath}: no awf install step found.`);
+    continue;
+  }
+
+  if (matches.length !== 1) {
+    throw new Error(
+      `Expected exactly one awf install step in ${workflowPath}, found ${matches.length}. ` +
+        'Ensure the workflow has a single "Install awf binary" step in the agent job.'
+    );
+  }
+
+  const updated = content.replace(
+    installStepRegexGlobal,
+    (_match, indent: string) => buildLocalInstallSteps(indent)
+  );
+
+  fs.writeFileSync(workflowPath, updated);
+  console.log(`Updated ${workflowPath}`);
+}