Uh oh!
There was an error while loading. Please reload this page.
Update AWF to v0.16.5 and enable API proxy for Claude engine#15520
Conversation
Co-authored-by: Mossaka <5447827+Mossaka@users.noreply.github.com>
✨ The prophecy is fulfilled... Smoke Codex has completed its mystical journey. The stars align. 🌟 |
🧪 Smoke Project is now testing project operations... |
📰 BREAKING: Smoke Copilot is now investigating this pull request. Sources say the story is developing... |
🧪 Smoke Temporary ID is now testing temporary ID functionality... |
💫 TO BE CONTINUED...Smoke Claude failed! Our hero faces unexpected challenges... |
✅ Changeset Generator completed successfully! |
There was a problem hiding this comment.
Pull request overview
This PR updates the repository’s default gh-aw-firewall (AWF) version to v0.16.5 and adjusts the Claude engine’s firewall-mode invocation to pass --enable-api-proxy, with accompanying tests and regenerated workflow lockfiles.
Changes:
- Bump
DefaultFirewallVersionfromv0.16.4→v0.16.5. - Add
--enable-api-proxyto the Claude engine’s AWF command-line arguments when firewall mode is enabled. - Add/extend tests to assert the flag is present for Claude and absent for Copilot; recompile workflow lockfiles to reflect the new AWF version.
Reviewed changes
Copilot reviewed 151 out of 151 changed files in this pull request and generated 1 comment.
| File | Description |
|---|---|
pkg/workflow/claude_engine.go | Adds --enable-api-proxy to Claude’s AWF args when firewall mode is enabled. |
pkg/workflow/firewall_args_test.go | Adds a test ensuring Claude includes --enable-api-proxy and Copilot does not. |
pkg/constants/constants.go | Updates the default AWF version constant to v0.16.5. |
.github/workflows/*.lock.yml | Regenerates lockfiles to pin/install v0.16.5 and use image-tag 0.16.5. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| // Enable API proxy for Claude engine (v0.16.5+) | ||
| // This allows AWF to proxy API requests from the Claude CLI through the firewall | ||
| awfArgs = append(awfArgs, "--enable-api-proxy") | ||
| claudeLog.Print("Added --enable-api-proxy for Claude API proxying") |
There was a problem hiding this comment.
--enable-api-proxy is appended unconditionally whenever the firewall is enabled. Since FirewallConfig.Version can be set to an older AWF release, this will cause the generated workflow to fail at runtime with an “unknown flag” error on AWF < v0.16.5. Please gate adding this flag based on the configured AWF version (fallback to DefaultFirewallVersion when unset), e.g. using the existing compareVersions helper, and consider logging when it’s skipped due to an older version.
✅ Smoke Temporary ID completed successfully. Temporary ID validation passed. |
Agent Container Tool Check
Result: 12/12 tools available ✅ All required development tools are accessible in the agent container environment.
|
✅ Smoke Project completed successfully. All project operations validated. |
Smoke test (Codex) results
|
Smoke Test ResultsPRs tested:
Test Status: Overall: PASS cc
|
📰 VERDICT: Smoke Copilot has concluded. All systems operational. This is a developing story. 🎤 |
💫 TO BE CONTINUED...Smoke Claude failed! Our hero faces unexpected challenges... |
pelikhan
commented
Feb 14, 2026
|
DefaultFirewallVersionfromv0.16.4tov0.16.5inpkg/constants/constants.gosupportsLLMGateway: truein Claude engine (claude_engine.go)--enable-api-proxyconditional on engine'sSupportsLLMGateway()support (claude, codex engines)ghcr.io/github/gh-aw-firewall/api-proxy:<version>container image download when engine supports LLM gateway + firewall--enable-api-proxyflag💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.
Changeset