The installation of code-simplifier is failing.

[CatsMiaow]

https://github.com/githubnext/agentics/blob/main/docs/code-simplifier.md

[CatsMiaow]

https://github.com/githubnext/agentics/blob/main/docs/ci-coach.md

The command gh aw add-wizard githubnext/agentics/ci-coach is also failing.

The following workflow files will be added:
  • .github/workflows/ci-coach.md
  • .github/workflows/ci-coach.lock.yml


✗ .github/workflows/ci-coach.md:1:1: error: [2026-02-20T11:33:02+09:00] Validation failed for field 'expressions'

Value: 2 unauthorized expressions found
Reason: expressions are not in the allowed list:
  - runner.os
  - hashFiles('requirements.txt')

Suggestion: Use only allowed expressions:
  - github.event.after
  - github.event.before
  - github.event.check_run.id
  - github.event.check_suite.id
  - github.event.comment.id
  - github.event.deployment.id
  - github.event.deployment_status.id
  - github.event.head_commit.id
  - github.event.installation.id
  - github.event.issue.number
  - github.event.discussion.number
  - github.event.pull_request.number
  - github.event.milestone.number
  - github.event.check_run.number
  - github.event.check_suite.number
  - github.event.workflow_job.run_id
  - github.event.workflow_run.number
  - github.event.label.id
  - github.event.milestone.id
  - github.event.organization.id
  - github.event.page.id
  - github.event.project.id
  - github.event.project_card.id
  - github.event.project_column.id
  - github.event.release.assets[0].id
  - github.event.release.id
  - github.event.release.tag_name
  - github.event.repository.id
  - github.event.repository.default_branch
  - github.event.review.id
  - github.event.review_comment.id
  - github.event.sender.id
  - github.event.workflow_run.id
  - github.event.workflow_run.conclusion
  - github.event.workflow_run.html_url
  - github.event.workflow_run.head_sha
  - github.event.workflow_run.run_number
  - github.event.workflow_run.event
  - github.event.workflow_run.status
  - github.event.issue.state
  - github.event.issue.title
  - github.event.pull_request.state
  - github.event.pull_request.title
  - github.event.discussion.title
  - github.event.discussion.category.name
  - github.event.release.name
  - github.event.workflow_job.id
  - github.event.deployment.environment
  - github.event.pull_request.head.sha
  - github.event.pull_request.base.sha
  - github.actor
  - github.job
  - github.owner
  - github.repository
  - github.repository_owner
  - github.run_id
  - github.run_number
  - github.server_url
  - github.workflow
  - github.workspace
  - needs.*
  - steps.*
  - github.event.inputs.*
  - github.aw.inputs.* (shared workflow inputs)
  - inputs.* (workflow_call)
  - env.*

For more details, see the expression security documentation.
: [2026-02-20T11:33:02+09:00] Validation failed for field 'expressions'

Value: 2 unauthorized expressions found
Reason: expressions are not in the allowed list:
  - runner.os
  - hashFiles('requirements.txt')

Suggestion: Use only allowed expressions:
  - github.event.after
  - github.event.before
  - github.event.check_run.id
  - github.event.check_suite.id
  - github.event.comment.id
  - github.event.deployment.id
  - github.event.deployment_status.id
  - github.event.head_commit.id
  - github.event.installation.id
  - github.event.issue.number
  - github.event.discussion.number
  - github.event.pull_request.number
  - github.event.milestone.number
  - github.event.check_run.number
  - github.event.check_suite.number
  - github.event.workflow_job.run_id
  - github.event.workflow_run.number
  - github.event.label.id
  - github.event.milestone.id
  - github.event.organization.id
  - github.event.page.id
  - github.event.project.id
  - github.event.project_card.id
  - github.event.project_column.id
  - github.event.release.assets[0].id
  - github.event.release.id
  - github.event.release.tag_name
  - github.event.repository.id
  - github.event.repository.default_branch
  - github.event.review.id
  - github.event.review_comment.id
  - github.event.sender.id
  - github.event.workflow_run.id
  - github.event.workflow_run.conclusion
  - github.event.workflow_run.html_url
  - github.event.workflow_run.head_sha
  - github.event.workflow_run.run_number
  - github.event.workflow_run.event
  - github.event.workflow_run.status
  - github.event.issue.state
  - github.event.issue.title
  - github.event.pull_request.state
  - github.event.pull_request.title
  - github.event.discussion.title
  - github.event.discussion.category.name
  - github.event.release.name
  - github.event.workflow_job.id
  - github.event.deployment.environment
  - github.event.pull_request.head.sha
  - github.event.pull_request.base.sha
  - github.actor
  - github.job
  - github.owner
  - github.repository
  - github.repository_owner
  - github.run_id
  - github.run_number
  - github.server_url
  - github.workflow
  - github.workspace
  - needs.*
  - steps.*
  - github.event.inputs.*
  - github.aw.inputs.* (shared workflow inputs)
  - inputs.* (workflow_call)
  - env.*

For more details, see the expression security documentation.
✗ failed to add workflow: failed to add workflows: failed to stage workflow files: failed to stage files: exit status 128

[dsolteszopyn]

gettting same issue and i'm running on v0.47.2

[eaftan]

Hmm. I thought this was happenning because shared/reporting.md was importing shared/formatting.md, but should have been importing formatting.md because imports are relative. But CI is failing on a PR with that change.

I gotta sign off but will come back to this, or find someone else to take a look.

[eaftan]

Thinking about why CI is failing, I suspect that import resolution behavior for local workflows may be broken and not resolving imported paths relatively. Will investigate.

[dsyme]

@eaftan Yes there's a bug in GH-AW resolution here one way or another. Need more testing for these kind of import scenarios

[dsolteszopyn]

I pulled down Several of the other ones and they all work so it seems to be something with this one so not sure what’s different

…

________________________________ From: Don Syme ***@***.***> Sent: Friday, February 20, 2026 10:46:34 PM To: githubnext/agentics ***@***.***> Cc: Dan Soltesz ***@***.***>; Comment ***@***.***> Subject: Re: [githubnext/agentics] The installation of code-simplifier is failing. (Issue #179) [https://github.com/u/7204669?s=20&v=4]dsyme left a comment (githubnext/agentics#179)<#179 (comment)> @eaftan<https://github.com/eaftan> Yes there's a bug in GH-AW resolution here one way or another. Need to think carefully about the fix — Reply to this email directly, view it on GitHub<#179 (comment)>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/A3RGB4ZUBVYUDRYISE6J2UL4M7IJVAVCNFSM6AAAAACVYZACAKVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZTSMZYGA4TKOBSGE>. You are receiving this because you commented.Message ID: ***@***.***> CONFIDENTIAL: This message contains information which may be confidential and privileged. Unless you are the intended recipient (or authorized to receive this message for the intended recipient), you may not use, copy, disseminate or disclose to anyone the message or any information contained in the message. If you have received this message in error, please advise the sender by reply e-mail, and delete the message. Thank you very much.

[dsyme]

I updated Code Simplifier to not use an import-of-an-import which was causing problems.

There's definitely a bug lurking here though

[dsyme]

Bug filed here github/gh-aw#17620

Closing this as tracked over there