@circuitwall/jarela 2.2.0 → 2.2.1

package/.next/standalone/.next/server/chunks/9590.js

@@ -3507,14 +3507,14 @@ const INTEGRATIONS = {
     "github-copilot": {
         label: "GitHub Copilot",
         category: "llm",
-        description: "Routes chat-completion requests through your Copilot subscription. Paste a GitHub PAT " + "with `copilot` scope from github.com/settings/tokens, or run the device-flow sign-in in " + "the Models panel.",
+        description: "Routes chat-completion requests through your Copilot subscription. Use the device-flow " + "sign-in in the Models panel; legacy GitHub PAT authentication is no longer supported.",
         fields: [
             {
                 key: "api_key",
-                label: "GitHub PAT",
-                placeholder: "ghp_… or github_pat_…",
+                label: "Legacy GitHub PAT (unsupported)",
+                placeholder: "Use Models panel sign-in",
                 secret: true,
-                required: true
+                required: false
             }
         ]
     },
@@ -3784,6 +3784,7 @@ function saveIntegration(name, incoming) {
             if (f.required && !v.trim()) return {
                 error: `"${f.key}" cannot be empty`
             };
+            if (!v.trim()) continue;
             merged[f.key] = v;
             if (existing[f.key] !== v) touched.push(f.key);
         }
@@ -4361,6 +4362,7 @@ function runMigrations(db) {
     ensureCredentialsTable(db);
     ensureCredentialsLabelAndDefaultColumns(db);
     ensureModelConfigCredentialIdColumn(db);
+    ensureModelConfigEnabledColumn(db);
     ensureAgentConfigsToolCredentialsColumn(db);
     seedAgentConfigs(db);
     backfillDeveloperInteractiveTerminalTools(db);
@@ -5347,6 +5349,14 @@ function ensureModelConfigCredentialIdColumn(db) {
         db.exec("ALTER TABLE model_configs ADD COLUMN credential_id TEXT");
     }
 }
+// ADR-0102: disabled model configs stay saved but are hidden from model
+// selection, routing, and default fallback. Existing rows default to enabled.
+function ensureModelConfigEnabledColumn(db) {
+    const cols = db.prepare("PRAGMA table_info(model_configs)").all();
+    if (!cols.some((c)=>c.name === "enabled")) {
+        db.exec("ALTER TABLE model_configs ADD COLUMN enabled INTEGER NOT NULL DEFAULT 1");
+    }
+}
 // Idempotent backfill: for each model_config still carrying an inline
 // `api_key` (and no `credential_id` yet), create a credential row and
 // link by id. Strips the api_key / base_url / extra_headers fields from
@@ -6724,11 +6734,14 @@ __webpack_require__.d(__webpack_exports__, {
   lB: () => (/* binding */ getDefaultModelConfig),
   Ac: () => (/* binding */ getModelConfig),
   mN: () => (/* binding */ getModelParams),
+  FO: () => (/* binding */ isModelConfigEnabled),
+  "if": () => (/* binding */ listEnabledModelConfigs),
   D1: () => (/* binding */ listModelConfigs),
+  np: () => (/* binding */ resolveRunnableModelConfig),
   TN: () => (/* binding */ upsertModelConfig)
 });
 
-// UNUSED EXPORTS: deleteModelConfig, withModelConfigMutation
+// UNUSED EXPORTS: ModelConfigStateError, deleteModelConfig, setDefaultModelConfig, setModelConfigEnabled, withModelConfigMutation
 
 // EXTERNAL MODULE: ./lib/db/index.ts + 7 modules
 var lib_db = __webpack_require__(39504);
@@ -6767,6 +6780,14 @@ const now = ()=>new Date().toISOString();
 function withModelConfigMutation(name, operation) {
     return withKeyedMutation(`model-config:${name}`, operation);
 }
+class ModelConfigStateError extends Error {
+    constructor(message, status){
+        super(message), this.status = status;
+    }
+}
+function isModelConfigEnabled(cfg) {
+    return !!cfg && cfg.enabled !== 0;
+}
 // `params` holds the provider API key alongside hyperparameters and is
 // stored encrypted at rest (ADR-0005). Decrypt before returning rows.
 function decryptRow(row) {
@@ -6779,18 +6800,74 @@ function listModelConfigs() {
     const rows = (0,lib_db/* getDb */.L)().prepare("SELECT * FROM model_configs ORDER BY is_default DESC, name ASC").all();
     return rows.map(decryptRow);
 }
+/** Model configs that may be offered for selection or routing. */ function listEnabledModelConfigs() {
+    return listModelConfigs().filter(isModelConfigEnabled);
+}
 function getModelConfig(name) {
     const row = (0,lib_db/* getDb */.L)().prepare("SELECT * FROM model_configs WHERE name=?").get(name) ?? null;
     return row ? decryptRow(row) : null;
 }
 function getDefaultModelConfig() {
     const db = (0,lib_db/* getDb */.L)();
-    const row = db.prepare("SELECT * FROM model_configs WHERE is_default=1 LIMIT 1").get() ?? null;
+    const row = db.prepare("SELECT * FROM model_configs WHERE is_default=1 AND enabled=1 LIMIT 1").get() ?? null;
     if (row) return decryptRow(row);
-    const fallback = db.prepare("SELECT * FROM model_configs ORDER BY name ASC LIMIT 1").get() ?? null;
+    const fallback = db.prepare("SELECT * FROM model_configs WHERE enabled=1 ORDER BY name ASC LIMIT 1").get() ?? null;
     return fallback ? decryptRow(fallback) : null;
 }
-function upsertModelConfig(name, provider, model_id, params, is_default, credential_id = null) {
+/**
+ * Resolve the config a run should use: the named config when it exists and is
+ * enabled, otherwise the workspace default. A disabled assignment therefore
+ * falls back without being cleared, so re-enabling restores it.
+ */ function resolveRunnableModelConfig(name) {
+    const named = name ? getModelConfig(name) : null;
+    if (named && isModelConfigEnabled(named)) return named;
+    return getDefaultModelConfig();
+}
+/** Atomically make `name` the only default model config. */ function setDefaultModelConfig(name) {
+    return withDbTransaction(()=>{
+        const db = getDb();
+        const target = getModelConfig(name);
+        if (!target) throw new ModelConfigStateError(`Model config "${name}" not found`, 404);
+        if (!isModelConfigEnabled(target)) {
+            throw new ModelConfigStateError(`Model config "${name}" is disabled; enable it before making it the default`, 409);
+        }
+        const t = now();
+        db.prepare("UPDATE model_configs SET is_default=0, updated_at=? WHERE is_default=1 AND name<>?").run(t, name);
+        db.prepare("UPDATE model_configs SET is_default=1, updated_at=? WHERE name=?").run(t, name);
+        return getModelConfig(name);
+    });
+}
+/**
+ * Enable or disable a model config. Disabling the default promotes the
+ * alphabetically-first other enabled config in the same transaction, and the
+ * last enabled config cannot be disabled so runs always have a model.
+ */ function setModelConfigEnabled(name, enabled) {
+    return withDbTransaction(()=>{
+        const db = getDb();
+        const target = getModelConfig(name);
+        if (!target) throw new ModelConfigStateError(`Model config "${name}" not found`, 404);
+        if (isModelConfigEnabled(target) === enabled) return target;
+        const t = now();
+        if (enabled) {
+            db.prepare("UPDATE model_configs SET enabled=1, updated_at=? WHERE name=?").run(t, name);
+            return getModelConfig(name);
+        }
+        const next = db.prepare("SELECT name FROM model_configs WHERE enabled=1 AND name<>? ORDER BY name ASC LIMIT 1").get(name);
+        if (!next?.name) {
+            throw new ModelConfigStateError("At least one model config must stay enabled", 409);
+        }
+        db.prepare("UPDATE model_configs SET enabled=0, is_default=0, updated_at=? WHERE name=?").run(t, name);
+        if (target.is_default === 1) {
+            db.prepare("UPDATE model_configs SET is_default=1, updated_at=? WHERE name=?").run(t, next.name);
+        }
+        return getModelConfig(name);
+    });
+}
+/**
+ * Insert or update a model config. `is_default` undefined keeps the current
+ * flag (false for new rows); true atomically clears every other default and
+ * re-enables the row, because the default must always be selectable.
+ */ function upsertModelConfig(name, provider, model_id, params, is_default, credential_id = null) {
     return (0,transaction/* withDbTransaction */.J)(()=>{
         const t = now();
         const existing = getModelConfig(name);
@@ -6806,9 +6883,11 @@ function upsertModelConfig(name, provider, model_id, params, is_default, credent
             ...decodeInlineParams(existing),
             ...params
         };
+        const finalDefault = is_default ?? existing?.is_default === 1;
+        const finalEnabled = finalDefault || !existing || isModelConfigEnabled(existing);
         const db = (0,lib_db/* getDb */.L)();
-        if (is_default) db.prepare("UPDATE model_configs SET is_default=0").run();
-        db.prepare("INSERT OR REPLACE INTO model_configs (name,provider,model_id,params,is_default,credential_id,created_at,updated_at) VALUES (?,?,?,?,?,?,?,?)").run(name, provider, model_id, (0,envelope/* encrypt */.w)(JSON.stringify(mergedParams)), is_default ? 1 : 0, finalCredId, created_at, t);
+        if (finalDefault) db.prepare("UPDATE model_configs SET is_default=0 WHERE name<>?").run(name);
+        db.prepare("INSERT OR REPLACE INTO model_configs (name,provider,model_id,params,is_default,enabled,credential_id,created_at,updated_at) VALUES (?,?,?,?,?,?,?,?,?)").run(name, provider, model_id, (0,envelope/* encrypt */.w)(JSON.stringify(mergedParams)), finalDefault ? 1 : 0, finalEnabled ? 1 : 0, finalCredId, created_at, t);
         return getModelConfig(name);
     });
 }
@@ -6821,10 +6900,10 @@ function deleteModelConfig(name) {
         // Automatically reset any agent pointing to this deleted model config to NULL (automatic / default model)
         db.prepare("UPDATE agent_configs SET model_config_name = NULL WHERE model_config_name = ?").run(name);
         // Avoid the "no default" state: if the deleted row was the default and any
-        // other rows remain, promote the alphabetically-first remaining row so
+        // other enabled rows remain, promote the alphabetically-first one so
         // agents that fall back to the default keep working.
         if (wasDefault) {
-            const next = db.prepare("SELECT name FROM model_configs ORDER BY name ASC LIMIT 1").get();
+            const next = db.prepare("SELECT name FROM model_configs WHERE enabled=1 ORDER BY name ASC LIMIT 1").get();
             if (next?.name) db.prepare("UPDATE model_configs SET is_default=1 WHERE name=?").run(next.name);
         }
         return true;
@@ -7991,17 +8070,17 @@ function pickGitHubCompatOptions(params) {
     return out;
 }
 const tokenCache = new Map();
-function isLikelyGitHubPat(token) {
-    return token.startsWith("ghp_") || token.startsWith("github_pat_") || token.startsWith("gho_");
+function isGitHubPat(token) {
+    return token.startsWith("ghp_") || token.startsWith("github_pat_");
 }
-async function getCopilotToken(pat) {
-    if (!pat) throw new Error("GitHub Copilot: no API key configured for token exchange.");
-    const cached = tokenCache.get(pat);
+async function exchangeCopilotSessionToken(githubToken) {
+    if (!githubToken) throw new Error("GitHub Copilot: no API key configured for token exchange.");
+    const cached = tokenCache.get(githubToken);
     if (cached && cached.expiresAt - Date.now() > 60000) return cached.token;
-    tokenCache.delete(pat);
+    tokenCache.delete(githubToken);
     const res = await fetch("https://api.github.com/copilot_internal/v2/token", {
         headers: {
-            Authorization: `token ${pat}`,
+            Authorization: `token ${githubToken}`,
             "User-Agent": "Jarela/1.0"
         },
         signal: AbortSignal.timeout(30000)
@@ -8009,17 +8088,17 @@ async function getCopilotToken(pat) {
     if (!res.ok) {
         const body = await (0,error/* readErrorBody */.N)(res);
         if (res.status === 401) {
-            throw new Error(`GitHub Copilot: token exchange failed (401). ` + `Ensure your PAT has the "copilot" scope and that you have an active Copilot subscription. ` + `Details: ${body}`);
+            throw new Error(`GitHub Copilot: token exchange failed (401). ` + `Check that this GitHub account has an active Copilot subscription and the credential is valid. ` + `Details: ${body}`);
         }
         if (res.status === 404) {
-            throw new Error("GitHub Copilot token exchange endpoint was not found for this credential. " + "Personal Access Tokens are not accepted directly by Copilot chat. " + "Use a Copilot session token in params.copilot_session_token, or a credential that supports token exchange.");
+            throw new Error("GitHub Copilot could not exchange this credential for a session token. " + "Use the in-app device-flow sign-in or set params.copilot_session_token.");
         }
         throw new Error(`GitHub Copilot: token exchange failed (${res.status}): ${body}`);
     }
     const json = await res.json();
     if (!json.token) throw new Error("GitHub Copilot: token exchange returned no token");
     const expiresAt = json.expires_at ? new Date(json.expires_at).getTime() : Date.now() + 28 * 60000;
-    tokenCache.set(pat, {
+    tokenCache.set(githubToken, {
         token: json.token,
         expiresAt
     });
@@ -8050,7 +8129,6 @@ async function resolveCopilotAuth(params) {
     const explicitSessionToken = params.copilot_session_token?.trim();
     if (explicitSessionToken && explicitSessionToken.length > 0) {
         return {
-            kind: "copilot-api",
             baseURL: params.base_url ?? "https://api.githubcopilot.com",
             apiKey: explicitSessionToken,
             headers: {
@@ -8060,9 +8138,8 @@ async function resolveCopilotAuth(params) {
     }
     const oauthToken = (0,github_copilot_auth/* getStoredOAuthToken */.OS)();
     if (oauthToken) {
-        const token = await getCopilotToken(oauthToken);
+        const token = await exchangeCopilotSessionToken(oauthToken);
         return {
-            kind: "copilot-api",
             baseURL: params.base_url ?? "https://api.githubcopilot.com",
             apiKey: token,
             headers: {
@@ -8070,23 +8147,14 @@ async function resolveCopilotAuth(params) {
             }
         };
     }
-    if (apiKey && isLikelyGitHubPat(apiKey)) {
-        return {
-            kind: "models-rest",
-            baseURL: params.base_url ?? "https://models.github.ai/inference",
-            apiKey,
-            headers: {
-                Accept: "application/vnd.github+json",
-                "X-GitHub-Api-Version": "2026-03-10"
-            }
-        };
+    if (apiKey && isGitHubPat(apiKey)) {
+        throw new Error("GitHub Copilot: this provider's GitHub PAT route used GitHub Models, which has been retired. " + "Use the in-app device-flow sign-in or set copilot_session_token.");
     }
     if (!apiKey) {
         throw new Error("GitHub Copilot: not signed in. Use the in-app device-flow login, or set api_key / copilot_session_token.");
     }
-    const token = await getCopilotToken(apiKey);
+    const token = await exchangeCopilotSessionToken(apiKey);
     return {
-        kind: "copilot-api",
         baseURL: params.base_url ?? "https://api.githubcopilot.com",
         apiKey: token,
         headers: {
@@ -8097,14 +8165,9 @@ async function resolveCopilotAuth(params) {
 // Anthropic SDK client pointed at Copilot's native `/v1/messages` endpoint.
 // Copilot accepts the Anthropic request shape (including `cache_control`
 // ephemeral breakpoints) for Claude-family models when called with a
-// session token. The PAT-only `models.github.ai` fallback does NOT expose
-// this endpoint, so we surface a clear error there instead of silently
-// downgrading to a path that strips the cache markers.
+// Copilot session token.
 async function resolvedAnthropicClient(params) {
     const auth = await resolveCopilotAuth(params);
-    if (auth.kind !== "copilot-api") {
-        throw new Error("GitHub Copilot: Claude models require a Copilot session token (OAuth or copilot_session_token). " + "Personal Access Tokens route to GitHub Models REST, which does not expose the native Messages API.");
-    }
     return new client/* Anthropic */.NB({
         // The SDK requires an apiKey field; we authenticate via authToken
         // (Authorization: Bearer ...) per Copilot's contract. The empty
@@ -10599,9 +10662,8 @@ function isRetryableProviderStreamError(msg) {
 /* harmony export */ });
 /* unused harmony exports startDeviceFlow, pollDeviceFlow, storeOAuthToken, clearStoredOAuthToken, getAuthStatus */
 /* harmony import */ var _lib_stores_memory__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(423);
-// GitHub Copilot device-flow login. Lets users sign in with their Copilot
-// subscription instead of pasting a PAT (which can't be exchanged for a
-// Copilot session token and gets rate-limited on the Models REST API).
+// GitHub Copilot device-flow login. The legacy PAT path depended on GitHub
+// Models, which has been retired; use this flow for Copilot Chat access.
 //
 // Flow (RFC 8628):
 //   1. POST github.com/login/device/code with the VS Code Copilot client_id.

package/.next/standalone/.next/server/chunks/9640.js

@@ -1819,8 +1819,7 @@ async function findTopicBoundary(threadId, boundarySeq) {
     if (!thread) return null;
     const agent = (0,_lib_stores_agent_configs__WEBPACK_IMPORTED_MODULE_2__/* .getAgentConfig */ .mJ)(thread.agent_id);
     if (!agent) return null;
-    const modelName = agent.model_config_name ?? (0,_lib_stores_model_config__WEBPACK_IMPORTED_MODULE_3__/* .getDefaultModelConfig */ .lB)()?.name ?? null;
-    const modelCfg = modelName ? (0,_lib_stores_model_config__WEBPACK_IMPORTED_MODULE_3__/* .getModelConfig */ .Ac)(modelName) : null;
+    const modelCfg = (0,_lib_stores_model_config__WEBPACK_IMPORTED_MODULE_3__/* .resolveRunnableModelConfig */ .np)(agent.model_config_name);
     if (!modelCfg?.provider || !modelCfg.model_id) return null;
     const rows = (0,_lib_stores_threads__WEBPACK_IMPORTED_MODULE_5__/* .getRecentMessagesWindow */ .S0)(threadId, 0, undefined, "foreground").filter((row)=>row.role === "user" || row.role === "assistant");
     const boundaryIndex = rows.findIndex((row)=>row.seq >= boundarySeq);
@@ -1936,8 +1935,7 @@ async function compactThreadWarmContext(threadId, requestedBoundarySeq, options
     if (!thread) return null;
     const agent = (0,_lib_stores_agent_configs__WEBPACK_IMPORTED_MODULE_2__/* .getAgentConfig */ .mJ)(thread.agent_id);
     if (!agent) return null;
-    const modelName = agent.model_config_name ?? (0,_lib_stores_model_config__WEBPACK_IMPORTED_MODULE_3__/* .getDefaultModelConfig */ .lB)()?.name ?? null;
-    const modelCfg = modelName ? (0,_lib_stores_model_config__WEBPACK_IMPORTED_MODULE_3__/* .getModelConfig */ .Ac)(modelName) : null;
+    const modelCfg = (0,_lib_stores_model_config__WEBPACK_IMPORTED_MODULE_3__/* .resolveRunnableModelConfig */ .np)(agent.model_config_name);
     if (!modelCfg?.provider || !modelCfg.model_id) return null;
     const baseParams = providerOverride?.params ?? (0,_lib_stores_model_config__WEBPACK_IMPORTED_MODULE_3__/* .getModelParams */ .mN)(modelCfg);
     const tier = (0,_lib_stores_agent_configs__WEBPACK_IMPORTED_MODULE_2__/* .getAgentTierProportions */ .fg)(agent);
@@ -2056,8 +2054,7 @@ async function buildAutomationChannelSummaryBefore(threadId, channel, boundarySe
     if (!thread) return null;
     const agent = (0,_lib_stores_agent_configs__WEBPACK_IMPORTED_MODULE_2__/* .getAgentConfig */ .mJ)(thread.agent_id);
     if (!agent) return null;
-    const modelName = agent.model_config_name ?? (0,_lib_stores_model_config__WEBPACK_IMPORTED_MODULE_3__/* .getDefaultModelConfig */ .lB)()?.name ?? null;
-    const modelCfg = modelName ? (0,_lib_stores_model_config__WEBPACK_IMPORTED_MODULE_3__/* .getModelConfig */ .Ac)(modelName) : null;
+    const modelCfg = (0,_lib_stores_model_config__WEBPACK_IMPORTED_MODULE_3__/* .resolveRunnableModelConfig */ .np)(agent.model_config_name);
     if (!modelCfg?.provider || !modelCfg.model_id) return null;
     const baseParams = providerOverride?.params ?? (0,_lib_stores_model_config__WEBPACK_IMPORTED_MODULE_3__/* .getModelParams */ .mN)(modelCfg);
     const tier = (0,_lib_stores_agent_configs__WEBPACK_IMPORTED_MODULE_2__/* .getAgentTierProportions */ .fg)(agent);

package/.next/standalone/.next/server/middleware-build-manifest.js

@@ -4,8 +4,8 @@ globalThis.__BUILD_MANIFEST = {
   ],
   "devFiles": [],
   "lowPriorityFiles": [
-    "static/e2NV1wk6mWg3SIeELXevg/_buildManifest.js",
-    "static/e2NV1wk6mWg3SIeELXevg/_ssgManifest.js"
+    "static/NUrC9xax1sp1Q70nlFqS6/_buildManifest.js",
+    "static/NUrC9xax1sp1Q70nlFqS6/_ssgManifest.js"
   ],
   "rootMainFiles": [
     "static/chunks/webpack-22f2423f357dd0a1.js",

package/.next/standalone/.next/server/middleware.js

@@ -49442,6 +49442,7 @@ function runMigrations(db) {
     ensureCredentialsTable(db);
     ensureCredentialsLabelAndDefaultColumns(db);
     ensureModelConfigCredentialIdColumn(db);
+    ensureModelConfigEnabledColumn(db);
     ensureAgentConfigsToolCredentialsColumn(db);
     seedAgentConfigs(db);
     backfillDeveloperInteractiveTerminalTools(db);
@@ -50428,6 +50429,14 @@ function ensureModelConfigCredentialIdColumn(db) {
         db.exec("ALTER TABLE model_configs ADD COLUMN credential_id TEXT");
     }
 }
+// ADR-0102: disabled model configs stay saved but are hidden from model
+// selection, routing, and default fallback. Existing rows default to enabled.
+function ensureModelConfigEnabledColumn(db) {
+    const cols = db.prepare("PRAGMA table_info(model_configs)").all();
+    if (!cols.some((c)=>c.name === "enabled")) {
+        db.exec("ALTER TABLE model_configs ADD COLUMN enabled INTEGER NOT NULL DEFAULT 1");
+    }
+}
 // Idempotent backfill: for each model_config still carrying an inline
 // `api_key` (and no `credential_id` yet), create a credential row and
 // link by id. Strips the api_key / base_url / extra_headers fields from
@@ -97262,9 +97271,8 @@ const geminiProvider = {
 };
 
 ;// ./lib/providers/github-copilot-auth.ts
-// GitHub Copilot device-flow login. Lets users sign in with their Copilot
-// subscription instead of pasting a PAT (which can't be exchanged for a
-// Copilot session token and gets rate-limited on the Models REST API).
+// GitHub Copilot device-flow login. The legacy PAT path depended on GitHub
+// Models, which has been retired; use this flow for Copilot Chat access.
 //
 // Flow (RFC 8628):
 //   1. POST github.com/login/device/code with the VS Code Copilot client_id.
@@ -97437,17 +97445,17 @@ function pickGitHubCompatOptions(params) {
     return out;
 }
 const tokenCache = new Map();
-function isLikelyGitHubPat(token) {
-    return token.startsWith("ghp_") || token.startsWith("github_pat_") || token.startsWith("gho_");
+function isGitHubPat(token) {
+    return token.startsWith("ghp_") || token.startsWith("github_pat_");
 }
-async function getCopilotToken(pat) {
-    if (!pat) throw new Error("GitHub Copilot: no API key configured for token exchange.");
-    const cached = tokenCache.get(pat);
+async function exchangeCopilotSessionToken(githubToken) {
+    if (!githubToken) throw new Error("GitHub Copilot: no API key configured for token exchange.");
+    const cached = tokenCache.get(githubToken);
     if (cached && cached.expiresAt - Date.now() > 60000) return cached.token;
-    tokenCache.delete(pat);
+    tokenCache.delete(githubToken);
     const res = await fetch("https://api.github.com/copilot_internal/v2/token", {
         headers: {
-            Authorization: `token ${pat}`,
+            Authorization: `token ${githubToken}`,
             "User-Agent": "Jarela/1.0"
         },
         signal: AbortSignal.timeout(30000)
@@ -97455,17 +97463,17 @@ async function getCopilotToken(pat) {
     if (!res.ok) {
         const body = await error_readErrorBody(res);
         if (res.status === 401) {
-            throw new Error(`GitHub Copilot: token exchange failed (401). ` + `Ensure your PAT has the "copilot" scope and that you have an active Copilot subscription. ` + `Details: ${body}`);
+            throw new Error(`GitHub Copilot: token exchange failed (401). ` + `Check that this GitHub account has an active Copilot subscription and the credential is valid. ` + `Details: ${body}`);
         }
         if (res.status === 404) {
-            throw new Error("GitHub Copilot token exchange endpoint was not found for this credential. " + "Personal Access Tokens are not accepted directly by Copilot chat. " + "Use a Copilot session token in params.copilot_session_token, or a credential that supports token exchange.");
+            throw new Error("GitHub Copilot could not exchange this credential for a session token. " + "Use the in-app device-flow sign-in or set params.copilot_session_token.");
         }
         throw new Error(`GitHub Copilot: token exchange failed (${res.status}): ${body}`);
     }
     const json = await res.json();
     if (!json.token) throw new Error("GitHub Copilot: token exchange returned no token");
     const expiresAt = json.expires_at ? new Date(json.expires_at).getTime() : Date.now() + 28 * 60000;
-    tokenCache.set(pat, {
+    tokenCache.set(githubToken, {
         token: json.token,
         expiresAt
     });
@@ -97496,7 +97504,6 @@ async function resolveCopilotAuth(params) {
     const explicitSessionToken = params.copilot_session_token?.trim();
     if (explicitSessionToken && explicitSessionToken.length > 0) {
         return {
-            kind: "copilot-api",
             baseURL: params.base_url ?? "https://api.githubcopilot.com",
             apiKey: explicitSessionToken,
             headers: {
@@ -97506,9 +97513,8 @@ async function resolveCopilotAuth(params) {
     }
     const oauthToken = getStoredOAuthToken();
     if (oauthToken) {
-        const token = await getCopilotToken(oauthToken);
+        const token = await exchangeCopilotSessionToken(oauthToken);
         return {
-            kind: "copilot-api",
             baseURL: params.base_url ?? "https://api.githubcopilot.com",
             apiKey: token,
             headers: {
@@ -97516,23 +97522,14 @@ async function resolveCopilotAuth(params) {
             }
         };
     }
-    if (apiKey && isLikelyGitHubPat(apiKey)) {
-        return {
-            kind: "models-rest",
-            baseURL: params.base_url ?? "https://models.github.ai/inference",
-            apiKey,
-            headers: {
-                Accept: "application/vnd.github+json",
-                "X-GitHub-Api-Version": "2026-03-10"
-            }
-        };
+    if (apiKey && isGitHubPat(apiKey)) {
+        throw new Error("GitHub Copilot: this provider's GitHub PAT route used GitHub Models, which has been retired. " + "Use the in-app device-flow sign-in or set copilot_session_token.");
     }
     if (!apiKey) {
         throw new Error("GitHub Copilot: not signed in. Use the in-app device-flow login, or set api_key / copilot_session_token.");
     }
-    const token = await getCopilotToken(apiKey);
+    const token = await exchangeCopilotSessionToken(apiKey);
     return {
-        kind: "copilot-api",
         baseURL: params.base_url ?? "https://api.githubcopilot.com",
         apiKey: token,
         headers: {
@@ -97543,14 +97540,9 @@ async function resolveCopilotAuth(params) {
 // Anthropic SDK client pointed at Copilot's native `/v1/messages` endpoint.
 // Copilot accepts the Anthropic request shape (including `cache_control`
 // ephemeral breakpoints) for Claude-family models when called with a
-// session token. The PAT-only `models.github.ai` fallback does NOT expose
-// this endpoint, so we surface a clear error there instead of silently
-// downgrading to a path that strips the cache markers.
+// Copilot session token.
 async function resolvedAnthropicClient(params) {
     const auth = await resolveCopilotAuth(params);
-    if (auth.kind !== "copilot-api") {
-        throw new Error("GitHub Copilot: Claude models require a Copilot session token (OAuth or copilot_session_token). " + "Personal Access Tokens route to GitHub Models REST, which does not expose the native Messages API.");
-    }
     return new Anthropic({
         // The SDK requires an apiKey field; we authenticate via authToken
         // (Authorization: Bearer ...) per Copilot's contract. The empty
@@ -102982,6 +102974,14 @@ const model_config_now = ()=>new Date().toISOString();
 function withModelConfigMutation(name, operation) {
     return withKeyedMutation(`model-config:${name}`, operation);
 }
+class ModelConfigStateError extends Error {
+    constructor(message, status){
+        super(message), this.status = status;
+    }
+}
+function isModelConfigEnabled(cfg) {
+    return !!cfg && cfg.enabled !== 0;
+}
 // `params` holds the provider API key alongside hyperparameters and is
 // stored encrypted at rest (ADR-0005). Decrypt before returning rows.
 function model_config_decryptRow(row) {
@@ -102994,18 +102994,74 @@ function listModelConfigs() {
     const rows = db_getDb().prepare("SELECT * FROM model_configs ORDER BY is_default DESC, name ASC").all();
     return rows.map(model_config_decryptRow);
 }
+/** Model configs that may be offered for selection or routing. */ function listEnabledModelConfigs() {
+    return listModelConfigs().filter(isModelConfigEnabled);
+}
 function getModelConfig(name) {
     const row = db_getDb().prepare("SELECT * FROM model_configs WHERE name=?").get(name) ?? null;
     return row ? model_config_decryptRow(row) : null;
 }
 function getDefaultModelConfig() {
     const db = db_getDb();
-    const row = db.prepare("SELECT * FROM model_configs WHERE is_default=1 LIMIT 1").get() ?? null;
+    const row = db.prepare("SELECT * FROM model_configs WHERE is_default=1 AND enabled=1 LIMIT 1").get() ?? null;
     if (row) return model_config_decryptRow(row);
-    const fallback = db.prepare("SELECT * FROM model_configs ORDER BY name ASC LIMIT 1").get() ?? null;
+    const fallback = db.prepare("SELECT * FROM model_configs WHERE enabled=1 ORDER BY name ASC LIMIT 1").get() ?? null;
     return fallback ? model_config_decryptRow(fallback) : null;
 }
-function upsertModelConfig(name, provider, model_id, params, is_default, credential_id = null) {
+/**
+ * Resolve the config a run should use: the named config when it exists and is
+ * enabled, otherwise the workspace default. A disabled assignment therefore
+ * falls back without being cleared, so re-enabling restores it.
+ */ function resolveRunnableModelConfig(name) {
+    const named = name ? getModelConfig(name) : null;
+    if (named && isModelConfigEnabled(named)) return named;
+    return getDefaultModelConfig();
+}
+/** Atomically make `name` the only default model config. */ function setDefaultModelConfig(name) {
+    return withDbTransaction(()=>{
+        const db = getDb();
+        const target = getModelConfig(name);
+        if (!target) throw new ModelConfigStateError(`Model config "${name}" not found`, 404);
+        if (!isModelConfigEnabled(target)) {
+            throw new ModelConfigStateError(`Model config "${name}" is disabled; enable it before making it the default`, 409);
+        }
+        const t = model_config_now();
+        db.prepare("UPDATE model_configs SET is_default=0, updated_at=? WHERE is_default=1 AND name<>?").run(t, name);
+        db.prepare("UPDATE model_configs SET is_default=1, updated_at=? WHERE name=?").run(t, name);
+        return getModelConfig(name);
+    });
+}
+/**
+ * Enable or disable a model config. Disabling the default promotes the
+ * alphabetically-first other enabled config in the same transaction, and the
+ * last enabled config cannot be disabled so runs always have a model.
+ */ function setModelConfigEnabled(name, enabled) {
+    return withDbTransaction(()=>{
+        const db = getDb();
+        const target = getModelConfig(name);
+        if (!target) throw new ModelConfigStateError(`Model config "${name}" not found`, 404);
+        if (isModelConfigEnabled(target) === enabled) return target;
+        const t = model_config_now();
+        if (enabled) {
+            db.prepare("UPDATE model_configs SET enabled=1, updated_at=? WHERE name=?").run(t, name);
+            return getModelConfig(name);
+        }
+        const next = db.prepare("SELECT name FROM model_configs WHERE enabled=1 AND name<>? ORDER BY name ASC LIMIT 1").get(name);
+        if (!next?.name) {
+            throw new ModelConfigStateError("At least one model config must stay enabled", 409);
+        }
+        db.prepare("UPDATE model_configs SET enabled=0, is_default=0, updated_at=? WHERE name=?").run(t, name);
+        if (target.is_default === 1) {
+            db.prepare("UPDATE model_configs SET is_default=1, updated_at=? WHERE name=?").run(t, next.name);
+        }
+        return getModelConfig(name);
+    });
+}
+/**
+ * Insert or update a model config. `is_default` undefined keeps the current
+ * flag (false for new rows); true atomically clears every other default and
+ * re-enables the row, because the default must always be selectable.
+ */ function upsertModelConfig(name, provider, model_id, params, is_default, credential_id = null) {
     return withDbTransaction(()=>{
         const t = model_config_now();
         const existing = getModelConfig(name);
@@ -103021,9 +103077,11 @@ function upsertModelConfig(name, provider, model_id, params, is_default, credent
             ...decodeInlineParams(existing),
             ...params
         };
+        const finalDefault = is_default ?? existing?.is_default === 1;
+        const finalEnabled = finalDefault || !existing || isModelConfigEnabled(existing);
         const db = getDb();
-        if (is_default) db.prepare("UPDATE model_configs SET is_default=0").run();
-        db.prepare("INSERT OR REPLACE INTO model_configs (name,provider,model_id,params,is_default,credential_id,created_at,updated_at) VALUES (?,?,?,?,?,?,?,?)").run(name, provider, model_id, encrypt(JSON.stringify(mergedParams)), is_default ? 1 : 0, finalCredId, created_at, t);
+        if (finalDefault) db.prepare("UPDATE model_configs SET is_default=0 WHERE name<>?").run(name);
+        db.prepare("INSERT OR REPLACE INTO model_configs (name,provider,model_id,params,is_default,enabled,credential_id,created_at,updated_at) VALUES (?,?,?,?,?,?,?,?,?)").run(name, provider, model_id, encrypt(JSON.stringify(mergedParams)), finalDefault ? 1 : 0, finalEnabled ? 1 : 0, finalCredId, created_at, t);
         return getModelConfig(name);
     });
 }
@@ -103036,10 +103094,10 @@ function deleteModelConfig(name) {
         // Automatically reset any agent pointing to this deleted model config to NULL (automatic / default model)
         db.prepare("UPDATE agent_configs SET model_config_name = NULL WHERE model_config_name = ?").run(name);
         // Avoid the "no default" state: if the deleted row was the default and any
-        // other rows remain, promote the alphabetically-first remaining row so
+        // other enabled rows remain, promote the alphabetically-first one so
         // agents that fall back to the default keep working.
         if (wasDefault) {
-            const next = db.prepare("SELECT name FROM model_configs ORDER BY name ASC LIMIT 1").get();
+            const next = db.prepare("SELECT name FROM model_configs WHERE enabled=1 ORDER BY name ASC LIMIT 1").get();
             if (next?.name) db.prepare("UPDATE model_configs SET is_default=1 WHERE name=?").run(next.name);
         }
         return true;
@@ -105446,14 +105504,14 @@ const integrations_INTEGRATIONS = {
     "github-copilot": {
         label: "GitHub Copilot",
         category: "llm",
-        description: "Routes chat-completion requests through your Copilot subscription. Paste a GitHub PAT " + "with `copilot` scope from github.com/settings/tokens, or run the device-flow sign-in in " + "the Models panel.",
+        description: "Routes chat-completion requests through your Copilot subscription. Use the device-flow " + "sign-in in the Models panel; legacy GitHub PAT authentication is no longer supported.",
         fields: [
             {
                 key: "api_key",
-                label: "GitHub PAT",
-                placeholder: "ghp_… or github_pat_…",
+                label: "Legacy GitHub PAT (unsupported)",
+                placeholder: "Use Models panel sign-in",
                 secret: true,
-                required: true
+                required: false
             }
         ]
     },
@@ -105723,6 +105781,7 @@ function saveIntegration(name, incoming) {
             if (f.required && !v.trim()) return {
                 error: `"${f.key}" cannot be empty`
             };
+            if (!v.trim()) continue;
             merged[f.key] = v;
             if (existing[f.key] !== v) touched.push(f.key);
         }