Fix safe-outputs server startup by copying tools.json to expected location

actions/setup/setup.sh

@@ -242,6 +242,23 @@ else
   echo "::warning::Safe-outputs MCP entry point not found: safe-outputs-mcp-server.cjs"
 fi
 
+# Copy safe_outputs_tools.json to tools.json (required by safe-outputs server)
+if [ -f "${JS_SOURCE_DIR}/safe_outputs_tools.json" ]; then
+  cp "${JS_SOURCE_DIR}/safe_outputs_tools.json" "${SAFE_OUTPUTS_DEST}/tools.json"
+  echo "Copied safe-outputs tools definition: tools.json"
+  SAFE_OUTPUTS_COUNT=$((SAFE_OUTPUTS_COUNT + 1))
+else
+  echo "::error::Safe-outputs tools definition not found: safe_outputs_tools.json"
+  exit 1
+fi
+
+# Create empty config.json if it doesn't exist (required by safe-outputs server check)
+# The actual config is optional and will be loaded from environment if provided
+if [ ! -f "${SAFE_OUTPUTS_DEST}/config.json" ]; then
+  echo "{}" > "${SAFE_OUTPUTS_DEST}/config.json"
+  echo "Created empty config.json for safe-outputs server"
+fi
+
 echo "Successfully copied ${SAFE_OUTPUTS_COUNT} safe-outputs files to ${SAFE_OUTPUTS_DEST}"
 
 # Set output

actions/setup/sh/start_safe_outputs_server.sh

@@ -9,18 +9,23 @@ cd /opt/gh-aw/safeoutputs || exit 1
 # Verify required files exist
 echo "Verifying safe-outputs setup..."
 
-# Check core configuration files
+# Check core files (mcp-server.cjs and tools.json are required)
 if [ ! -f mcp-server.cjs ]; then
   echo "ERROR: mcp-server.cjs not found in /opt/gh-aw/safeoutputs"
   ls -la /opt/gh-aw/safeoutputs/
   exit 1
 fi
-if [ ! -f config.json ]; then
-  echo "ERROR: config.json not found in /opt/gh-aw/safeoutputs"
+if [ ! -f tools.json ]; then
+  echo "ERROR: tools.json not found in /opt/gh-aw/safeoutputs"
   ls -la /opt/gh-aw/safeoutputs/
   exit 1
 fi
 
+# config.json is optional - the server will create a default config if missing
+if [ ! -f config.json ]; then
+  echo "Note: config.json not found, server will use default configuration"
+fi
+
 # Check required dependency files for the MCP server
 # These files are required by safe_outputs_mcp_server_http.cjs and its dependencies
 REQUIRED_DEPS=(