Agentic duplicate-surfacing workflow to flag likely duplicate issues for maintainer review #6399

Relevant area(s)

WinGet CLI

(This is repo issue-management automation rather than a product surface; "WinGet CLI" is the closest template option. Maintainers may re-area during triage.)

Description of the new feature / enhancement

The current automatic deduplication workflow (automatic-issue-deduplication.yml, using pelikhan/action-genai-issue-dedup@v0) runs with label_as_duplicate: false, so it produces no visible signal — no label and no comment — on newly opened issues. In practice, duplicates are still found manually.

Lexical/keyword-style matching also misses semantically duplicate issues that share little vocabulary. For example, #1458 ("show manifest verbatim") and #159 ("Verbose show command") are the same underlying request but read very differently.

Request: replace the current dedup action with a GitHub Agentic Workflow (gh aw) that, on each newly opened issue, reads the issue and searches existing issues (open and closed) by meaning, then — only when confident — applies a new Possible-Duplicate label and posts a single comment listing up to five candidate duplicates with links and one-line rationale.

Crucially, the workflow surfaces but never resolves: it does not close the issue, does not remove Needs-Triage, and does not emit the Duplicate of #NNN moderator trigger. Choosing the canonical issue (earliest / curated preferred) and closing stays a maintainer decision.

Goals

• Give contributors and maintainers a visible, meaning-based duplicate signal.
• Keep all consolidation decisions human-in-the-loop.
• Bound noise and risk (constrained outputs, opened-only trigger).

Non-goals

• Auto-closing or auto-consolidating duplicates.
• Replacing human triage judgment.

Proposed technical implementation details

• Add .github/workflows/duplicate-surfacing.md (agentic spec) + its compiled .github/workflows/duplicate-surfacing.lock.yml (gh aw compile; not hand-edited).
• Remove .github/workflows/automatic-issue-deduplication.yml.
• on: issues: [opened]; engine: copilot; GitHub MCP toolsets [context, repos, issues] scoped to this repo; workflow token issues: read.
• safe-outputs allowlist limits the agent to add-labels: [Possible-Duplicate] (max 1) and add-comment (max 1) — no close, no assign, no code execution.
• Issue content treated as untrusted (prompt-injection defenses in the spec).
• New Possible-Duplicate label (advisory), distinct from the authoritative Resolution-Duplicate (applied on human confirmation via the trigger).
• Optional follow-up policy rule: auto-remove Possible-Duplicate when Resolution-Duplicate is added or the issue closes.
• Requires org/repo to have agentic workflows + Copilot engine enabled; test in a fork before targeting upstream.

Feedback

Feedback is collected in the Agent Workflows discussion: #6420

Filed with GitHub Copilot assistance.