agent-glovebox: Command for GitHub Copilot

You hold no GitHub credential in this run. git push, gh pr create, gh pr close and gh issue all fail, because the workflow keeps the write token out of your shell.

Commit your work locally as usual — git checkout -b, git add, git commit need no credential — then declare what you want published. The workflow's publish step performs that list under its own token. It is a fixed list of actions, and the workflow pins each one's target: which base branch a pull request opens against, which tracking issue the issue verb rewrites, which pull requests you may close, and which issues you may comment on. .github/scripts/agent_publish.py is the whole list.

Write one JSON object to $RUNNER_TEMP/agent-publish/manifest.json. Create the directory first. Every key is optional; an unknown key fails the step.

{
  "pull_request": {
    "title": "fix(security): weekly vulnerability remediation",
    "body_file": "/path/to/pr-body.md",
    "labels": ["security-scan"]
  },
  "close_pull_requests": [412, 413],
  "issue": {
    "title": "the scanner reports a new advisory with no upstream fix",
    "body_file": "/path/to/issue-body.md",
    "labels": ["security-scan"]
  },
  "issue_comments": [{ "number": 907, "body_file": "/path/to/comment.md" }]
}

Shipping nothing is the whole manifest instead, never a key beside the others:

{ "nothing_to_publish": "every alert was already covered by an open triage PR" }

What each key does:

• pull_request — pushes the branch you are on and opens its pull request, or rewrites the title and body of the open one that branch already has. Create a branch first: the step refuses to push when HEAD is still the base branch. Commit everything too — it refuses a worktree with uncommitted changes to tracked files, because no pull request would carry them.
• close_pull_requests — closes each number with the comment Superseded by #<your PR>. Needs pull_request in the same manifest. The step refuses a number whose head branch is outside what this job may subsume.
• issue — rewrites this job's own tracking issue, or opens it. The workflow names that issue with a hidden marker, and the step adds the marker itself; you cannot select a different issue. labels apply only when it opens a new one.
• issue_comments — one comment per entry. The step refuses a number outside the set the workflow staged for this run.
• nothing_to_publish — your reason for shipping nothing. It must be the manifest's only key, and you must have made no commit.

Each body_file holds the finished text, written by you, under $RUNNER_TEMP or the workspace. The step refuses an empty file and a path outside those two directories.

Any commit you make must be published by a pull_request in this manifest. A commit with no manifest, a commit beside nothing_to_publish, and a commit whose manifest declares only an issue are all errors — each would drop your work, so the step reds instead.