Fix safe-inputs configuration for Copilot CLI

pkg/workflow/js/safe_inputs_mcp_server.cjs

@@ -44,6 +44,7 @@ const { bootstrapSafeInputsServer, cleanupConfigFile } = require("./safe_inputs_
  * @param {string} configPath - Path to the configuration JSON file
  * @param {Object} [options] - Additional options
  * @param {string} [options.logDir] - Override log directory from config
+ * @param {boolean} [options.skipCleanup] - Skip deletion of config file (useful for stdio mode with agent restarts)
  */
 function startSafeInputsServer(configPath, options = {}) {
   // Create server first to have logger available
@@ -67,8 +68,10 @@ function startSafeInputsServer(configPath, options = {}) {
     registerTool(server, tool);
   }
 
-  // Cleanup: delete the configuration file after loading
-  cleanupConfigFile(configPath, server);
+  // Cleanup: delete the configuration file after loading (unless skipCleanup is true)
+  if (!options.skipCleanup) {
+    cleanupConfigFile(configPath, server);
+  }
 
   // Start the server
   start(server);

pkg/workflow/safe_inputs.go

@@ -407,12 +407,16 @@ const { startSafeInputsServer } = require("./safe_inputs_mcp_server.cjs");
 const configPath = path.join(__dirname, "tools.json");
 
 // Start the stdio server
-startSafeInputsServer(configPath, {
-  logDir: "/tmp/gh-aw/safe-inputs/logs"
-}).catch(error => {
+// Note: skipCleanup is true for stdio mode to allow agent restarts
+try {
+  startSafeInputsServer(configPath, {
+    logDir: "/tmp/gh-aw/safe-inputs/logs",
+    skipCleanup: true
+  });
+} catch (error) {
   console.error("Failed to start safe-inputs stdio server:", error);
   process.exit(1);
-});
+}
 `)
 	} else {
 		// HTTP transport - server started in separate step
@@ -641,7 +645,12 @@ func renderSafeInputsMCPConfigWithOptions(yaml *strings.Builder, safeInputs *Saf
 	// Choose transport based on mode
 	if IsSafeInputsStdioMode(safeInputs) {
 		// Stdio transport configuration - server started by agent
-		yaml.WriteString("                \"type\": \"stdio\",\n")
+		// Use "local" for Copilot CLI, "stdio" for other engines
+		typeValue := "stdio"
+		if includeCopilotFields {
+			typeValue = "local"
+		}
+		yaml.WriteString("                \"type\": \"" + typeValue + "\",\n")
 		yaml.WriteString("                \"command\": \"node\",\n")
 		yaml.WriteString("                \"args\": [\"/tmp/gh-aw/safe-inputs/mcp-server.cjs\"],\n")