Beginnings of multi repo PR support

[dsyme]

• Investigate CI failure in safe_outputs_handlers.test.cjs
• Fix failing test: update assertion from "not found" to "not in the allowed-repos list" since the allowed-repos validation now runs before workspace checkout validation
• Remove stale details field assertions that no longer apply to the allowed-repos error path
• Verify test passes locally
• Fix checkoutRepo() slug validation to reject slugs with more than one slash (e.g., owner/repo/extra) by enforcing parts.length === 2
• Add test case for extra-slash slug rejection in dynamic_checkout.test.cjs
• Use repoResult.repo (validated/qualified slug) instead of entry.repo.trim() for findRepoCheckout and patchOptions.repoSlug in safe_outputs_handlers.cjs
• Rename test from "non-existent checkout" to "not in the allowed-repos list" to accurately describe what is tested

---

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.

---

Changeset

• Type: patch
• Description: Strengthened multi-repo checkout validation by normalizing repo slugs in the safe-output handlers, ensuring the allowed-repos error path is covered, and rejecting slugs with extra slashes.

Generated by Changeset Generator for issue #18599

Warning

⚠️ Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

• github.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
allowed:
- defaults
- "github.com"

See Network Configuration for more information.

---

---

✨ PR Review Safe Output Test - Run 22551448932

💥 [THE END] — Illustrated by Smoke Claude

[kdehl16-web]

Please work it

[kdehl16-web]

Fix the failed workflows (maybe in next commit)

[kdehl16-web]

Why...

[kdehl16-web]

Pls fix conflicts

[github-actions]

🎬 THE END — Smoke ClaudeMISSION: ACCOMPLISHED! The hero saves the day! ✨

[github-actions]

🌑 The shadows whisper... Smoke Codex failed. The oracle requires further meditation...

[github-actions]

📰 BREAKING: Smoke Copilot is now investigating this pull request. Sources say the story is developing...

[github-actions]

Agent Container Tool Check

Tool	Status	Version
bash	✅	5.2.21
sh	✅	available
git	✅	2.53.0
jq	✅	1.7
yq	✅	4.52.4
curl	✅	8.5.0
gh	✅	2.87.3
node	✅	20.20.0
python3	✅	3.12.3
go	✅	1.24.13
java	✅	21.0.10
dotnet	✅	10.0.102

Result: 12/12 tools available ✅

Overall Status: PASS

🔧 Tool validation by Agent Container Smoke Test

[github-actions]

Commit pushed: 194e851

Generated by Changeset Generator

[github-actions]

🤖 Smoke test results for @dsyme's PR:

Test	Status
GitHub MCP	✅
Safe Inputs GH CLI	✅
Serena MCP	❌ (not available)
Playwright	✅
Web Fetch	✅
File Writing	✅
Bash	✅
Discussion Interaction	✅
Build gh-aw	✅
Discussion Creation	✅
Workflow Dispatch	✅
PR Review	✅

Overall: ⚠️ PARTIAL PASS (Serena MCP unavailable)

📰 BREAKING: Report filed by Smoke Copilot

[github-actions]

This PR adds a repo parameter to create_pull_request and other safe-output tools across lock files. The changes are consistent and well-described. Tests correctly reflect the updated behavior where create_pull_request always includes the repo field (from the base schema). LGTM.

📰 BREAKING: Report filed by Smoke Copilot

[github-actions]

The test cases correctly cover the updated behavior: create_pull_request always has a repo parameter (since it's in the base schema), and the description text is now more precise. The table-driven test structure is clean and easy to follow.

[github-actions]

📰 VERDICT: Smoke Copilot has concluded. All systems operational. This is a developing story. 🎤

[github-actions]

Smoke Test Results — Run §22551448932

Core tests #1–10: ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅
PR review tests #11–17: ✅ ✅ ✅ ✅ ✅ ✅ ⚠️

Overall: PARTIAL (16 passed, 1 skipped — no safe PR to close for #17)

💥 [THE END] — Illustrated by Smoke Claude

[github-actions]

💥 Automated smoke test review - all systems nominal!

💥 [THE END] — Illustrated by Smoke Claude

[kdehl16-web]

Stop deleting my comments