Add OpenHands issue duplicate automation workflow

.github/workflows/pr-review-by-openhands.yml

@@ -53,5 +53,5 @@ jobs:
                   # picks up the sub-agent code (extensions#164 not yet on main)
                   extensions-version: feat/pr-review-sub-agent-delegation
                   llm-api-key: ${{ secrets.LLM_API_KEY }}
-                  github-token: ${{ secrets.OPENHANDS_BOT_GITHUB_PAT_PUBLIC }}
+                  github-token: ${{ secrets.OPENHANDS_BOT_GITHUB_PAT_PUBLIC || github.token }}
                   lmnr-api-key: ${{ secrets.LMNR_SKILLS_API_KEY }}

.github/workflows/remove-duplicate-candidate-label.yml

@@ -0,0 +1,64 @@
+---
+name: Remove duplicate candidate label on activity
+
+on:
+    issue_comment:
+        types: [created]
+
+permissions:
+    issues: write
+
+concurrency:
+    group: remove-duplicate-${{ github.repository }}-${{ github.event.issue.number }}
+    cancel-in-progress: false
+
+jobs:
+    remove-duplicate-candidate:
+        if: |
+            github.event.issue.state == 'open' &&
+            github.event.issue.pull_request == null &&
+            contains(github.event.issue.labels.*.name, 'duplicate-candidate') &&
+            github.event.comment.user.type != 'Bot' &&
+            !startsWith(github.event.comment.body || '', '<!-- openhands-duplicate-check') &&
+            !startsWith(github.event.comment.body || '', '<!-- openhands-duplicate-veto')
+        runs-on: ubuntu-latest
+        steps:
+            - name: Remove duplicate-candidate label
+              uses: actions/github-script@v7
+              with:
+                  github-token: ${{ secrets.OPENHANDS_BOT_GITHUB_PAT_PUBLIC || github.token }}
+                  script: |
+                      const issueNumber = context.issue.number;
+                      const commenter = context.payload.comment.user.login || '';
+                      const normalizedCommenter = commenter.toLowerCase();
+
+                      if (
+                        normalizedCommenter.endsWith('[bot]') ||
+                        normalizedCommenter === 'all-hands-bot'
+                      ) {
+                        core.info(
+                          `Skipping duplicate-candidate label removal for bot comment from ${commenter || 'unknown'}`
+                        );
+                        return;
+                      }
+
+                      core.info(
+                        `Removing duplicate-candidate label from issue #${issueNumber} after comment from ${commenter}`
+                      );
+
+                      try {
+                        await github.rest.issues.removeLabel({
+                          owner: context.repo.owner,
+                          repo: context.repo.repo,
+                          issue_number: issueNumber,
+                          name: 'duplicate-candidate',
+                        });
+                      } catch (error) {
+                        if (error.status === 404) {
+                          core.info(
+                            `duplicate-candidate label was already removed from issue #${issueNumber}`
+                          );
+                          return;
+                        }
+                        throw error;
+                      }

AGENTS.md

@@ -114,6 +114,7 @@ When reviewing code, provide constructive feedback:
 - AgentSkills progressive disclosure goes through `AgentContext.get_system_message_suffix()` into `<available_skills>`, and `openhands.sdk.context.skills.to_prompt()` truncates each prompt description to 1024 characters because the AgentSkills specification caps `description` at 1-1024 characters.
 - Workspace-wide uv resolver guardrails belong in the repository root `[tool.uv]` table. When `exclude-newer` is configured there, `uv lock` persists it into the root `uv.lock` `[options]` section as both an absolute cutoff and `exclude-newer-span`, and `uv sync --frozen` continues to use that locked workspace state.
 - `pr-review-by-openhands` delegates to `OpenHands/extensions/plugins/pr-review@main`. Repo-specific reviewer instructions live in `.agents/skills/custom-codereview-guide.md`, and because task-trigger matching is substring-based, that `/codereview` skill is also auto-injected for the workflow's `/codereview-roasted` prompt.
+- The duplicate-issue automation scripts should validate `owner/repo` arguments before interpolating GitHub API paths, handle per-issue auto-close failures without aborting the whole batch, and keep `app_conversation_id` paths unquoted because OpenHands conversation IDs are already canonicalized for those endpoints.
 - Auto-title generation should not re-read `ConversationState.events` from a background task triggered by a freshly received `MessageEvent`; extract message text synchronously from the incoming event and then reuse shared title helpers (`extract_message_text`, `generate_title_from_message`) to avoid persistence-order races.