@minniexcode/codex-switch 0.1.4 → 0.2.0

package/README.AI.md

@@ -6,7 +6,7 @@ This file summarizes the current operational contract for AI agents, automation
 
 - Package: `@minniexcode/codex-switch`
 - CLI name: `codexs`
-- Current repository version: `0.1.4`
+- Current repository version: `0.1.5`
 - Version status: development line
 - Runtime contract target: Codex `0.134.0+`
 
@@ -22,7 +22,7 @@ Direct provider workflow:
 
 ```bash
 codexs init
-codexs add <provider> --model <model> --api-key <key> [--base-url <url>]
+codexs add <provider> --profile <model-provider-id> --model <model> --api-key <key> [--base-url <url>]
 codexs switch <provider>
 codexs status
 codexs doctor
@@ -33,7 +33,7 @@ GitHub Copilot workflow:
 ```bash
 codexs init
 codexs login copilot
-codexs add <provider> --copilot --model <model>
+codexs add <provider> --copilot --profile <model-provider-id> --model <model>
 codexs switch <provider>
 codexs status
 codexs doctor
@@ -130,10 +130,11 @@ Important behavioral constraints:
 - `login copilot` requires a real TTY and does not support `--json`.
 - `login copilot` currently installs the local Copilot SDK when needed, tries the bundled runtime CLI first, falls back to `PATH` when necessary, and rechecks auth readiness before reporting success.
 - `add --copilot` assumes SDK install and upstream Copilot auth are already ready.
+- Non-interactive automation should pass `--profile` explicitly. In TTY mode, `add` and `edit` can prompt for missing required fields.
 - `migrate` remains interactive when provider adoption requires human input.
 - `status` is the main dual-path summary command.
 - `doctor` is the deeper repair-oriented diagnostic command.
-- The current `0.1.4` line focuses on bridge stability, surfaced runtime log metadata, and stricter release-hygiene verification rather than command-surface expansion.
+- The current `0.1.5` line focuses on Copilot Bridge process visibility, Responses commentary/reasoning stream events, defensive SDK-event normalization, and unknown-event redaction hardening rather than command-surface expansion.
 
 ## Safety Notes
 

package/README.CN.md

@@ -6,9 +6,9 @@
 
 ## 版本定位
 
-当前包版本：`0.1.4`
+当前包版本：`0.1.5`
 
-这是当前仓库开发线。`0.1.4` 聚焦于 bridge 稳定性与可观测性，包括 bridge 复用探测加固、运行态日志元数据外显，以及更严格的 release hygiene 门禁，同时不扩展 provider 命令面。
+这是当前仓库开发线。`0.1.5` 是 Copilot Bridge 过程可见性补丁，聚焦于 commentary/reasoning 流式信号、SDK 事件防御性归一化，以及未知运行态事件的更安全脱敏，同时不扩展 provider 命令面。
 
 ## 安装
 
@@ -34,7 +34,7 @@ Direct provider 主路径：
 
 ```bash
 codexs init
-codexs add my-provider --model gpt-5.5 --base-url https://gateway.example.com/v1 --api-key sk-xxx
+codexs add my-provider --profile my-provider --model gpt-5.5 --base-url https://gateway.example.com/v1 --api-key sk-xxx
 codexs switch my-provider
 codexs status
 codexs doctor
@@ -45,7 +45,7 @@ GitHub Copilot 主路径：
 ```bash
 codexs init
 codexs login copilot
-codexs add copilot-main --copilot --model gpt-4.1
+codexs add copilot-main --copilot --profile copilot-main --model gpt-4.1
 codexs switch copilot-main
 codexs status
 codexs doctor
@@ -56,6 +56,7 @@ codexs doctor
 - `init` 负责初始化 `codex-switch` 的 tool home 与受管状态文件。
 - `login copilot` 负责上游 Copilot onboarding 和登录可用性检查。
 - `add --copilot` 不负责替你登录，它假设上游 Copilot 已经 ready。
+- 非交互调用请显式传入 `--profile`；在 TTY 模式下，`add` 和 `edit` 可以补问缺失的必填项。
 - `switch` 会把选中的 provider 投影到目标 Codex runtime 的顶层 `model` 与 `model_provider`。
 - `status` 是切换后的主读取命令。
 - `doctor` 是主诊断命令，用于解释问题和下一步修复动作。
@@ -116,8 +117,8 @@ codexs current
 codexs status
 codexs config show [profile]
 codexs config list-profiles
-codexs add <provider> --model <model> --api-key <key> [--base-url <url>]
-codexs add <provider> --copilot --model <model>
+codexs add <provider> --profile <model-provider-id> --model <model> --api-key <key> [--base-url <url>]
+codexs add <provider> --copilot --profile <model-provider-id> --model <model>
 codexs edit <provider>
 codexs switch <provider>
 codexs remove <provider> [--force] [--switch-to <provider>]
@@ -209,8 +210,8 @@ npm pack --dry-run
 - [Design 0.1.1](./docs/Design/codex-switch-v0.1.1-design.md)
 - [PRD 0.1.2](./docs/PRD/codex-switch-prd-v0.1.2.md)
 - [Design 0.1.2](./docs/Design/codex-switch-v0.1.2-design.md)
-- [PRD 0.1.4](./docs/PRD/codex-switch-prd-v0.1.4.md)
-- [Design 0.1.4](./docs/Design/codex-switch-v0.1.4-design.md)
+- [PRD 0.1.5](./docs/PRD/codex-switch-prd-v0.1.5.md)
+- [Design 0.1.5](./docs/Design/codex-switch-v0.1.5-design.md)
 
 ## License
 

package/README.md

@@ -8,9 +8,9 @@ Chinese version: [README.CN.md](./README.CN.md)
 
 ## Version
 
-Current package version: `0.1.4`
+Current package version: `0.1.5`
 
-This is the current repository development line. `0.1.4` is the bridge stability and observability line, focused on bridge reuse hardening, surfaced runtime log metadata, and a stricter release-hygiene gate while keeping the provider surface unchanged.
+This is the current repository development line. `0.1.5` is a Copilot Bridge process-visibility patch, focused on streaming commentary/reasoning signals, defensive SDK-event normalization, and safer redaction for unknown runtime events while keeping the provider surface unchanged.
 
 ## Install
 
@@ -36,7 +36,7 @@ Direct provider workflow:
 
 ```bash
 codexs init
-codexs add my-provider --model gpt-5.5 --base-url https://gateway.example.com/v1 --api-key sk-xxx
+codexs add my-provider --profile my-provider --model gpt-5.5 --base-url https://gateway.example.com/v1 --api-key sk-xxx
 codexs switch my-provider
 codexs status
 codexs doctor
@@ -47,7 +47,7 @@ GitHub Copilot workflow:
 ```bash
 codexs init
 codexs login copilot
-codexs add copilot-main --copilot --model gpt-4.1
+codexs add copilot-main --copilot --profile copilot-main --model gpt-4.1
 codexs switch copilot-main
 codexs status
 codexs doctor
@@ -58,6 +58,7 @@ Notes:
 - `init` prepares the `codex-switch` tool home and managed state.
 - `login copilot` handles upstream Copilot onboarding and auth readiness.
 - `add --copilot` does not perform login for you; it assumes Copilot login is already ready.
+- For non-interactive use, pass `--profile` explicitly. In TTY mode, `add` and `edit` can prompt for missing required fields.
 - Copilot support is an experimental local bridge. The managed installer defaults to `@github/copilot-sdk@1.0.2`, Copilot runtime paths require Node.js `>=20`, and runtime checks separately reject older or prerelease SDK installs while validating API shape when the client or session is used.
 - `switch` projects the selected provider into the target Codex runtime as top-level `model` plus `model_provider`.
 - `status` is the main read command after switching.
@@ -125,8 +126,8 @@ codexs current
 codexs status
 codexs config show [profile]
 codexs config list-profiles
-codexs add <provider> --model <model> --api-key <key> [--base-url <url>]
-codexs add <provider> --copilot --model <model>
+codexs add <provider> --profile <model-provider-id> --model <model> --api-key <key> [--base-url <url>]
+codexs add <provider> --copilot --profile <model-provider-id> --model <model>
 codexs edit <provider>
 codexs switch <provider>
 codexs remove <provider> [--force] [--switch-to <provider>]
@@ -218,10 +219,10 @@ npm pack --dry-run
 - [PRD 0.1.1](./docs/PRD/codex-switch-prd-v0.1.1.md)
 - [PRD 0.1.2](./docs/PRD/codex-switch-prd-v0.1.2.md)
 - [PRD 0.1.3](./docs/PRD/codex-switch-prd-v0.1.3.md)
-- [PRD 0.1.4](./docs/PRD/codex-switch-prd-v0.1.4.md)
+- [PRD 0.1.5](./docs/PRD/codex-switch-prd-v0.1.5.md)
 - [Design 0.1.2](./docs/Design/codex-switch-v0.1.2-design.md)
 - [Design 0.1.3](./docs/Design/codex-switch-v0.1.3-design.md)
-- [Design 0.1.4](./docs/Design/codex-switch-v0.1.4-design.md)
+- [Design 0.1.5](./docs/Design/codex-switch-v0.1.5-design.md)
 
 ## License
 

package/dist/app/add-provider.js

@@ -40,8 +40,7 @@ const errors_1 = require("../domain/errors");
 const config_repo_1 = require("../storage/config-repo");
 const fs_utils_1 = require("../storage/fs-utils");
 const providers_repo_1 = require("../storage/providers-repo");
-const copilot_adapter_1 = require("../runtime/copilot-adapter");
-const copilot_installer_1 = require("../runtime/copilot-installer");
+const copilot_token_1 = require("../runtime/copilot-token");
 const run_mutation_1 = require("./run-mutation");
 /**
  * Adds a new provider record to the managed providers registry.
@@ -56,34 +55,29 @@ async function addProvider(args) {
     const bridgePort = args.bridgePort ?? 41415;
     const runtime = args.copilot
         ? {
-            kind: "copilot-sdk-bridge",
+            kind: "copilot-http-proxy",
             upstream: "github-copilot",
             bridgeHost,
             bridgePort,
             bridgePath: "/v1",
             premiumRequests: true,
-            authSource: "official-sdk",
-            sdkInstallMode: "lazy",
+            authSource: "github-pat",
         }
         : undefined;
     if (args.copilot) {
-        (0, copilot_installer_1.assertCopilotNodeRuntimeSupported)();
-        const installStatus = (0, copilot_installer_1.probeCopilotSdkInstall)(args.runtimesDir);
-        if (!installStatus.installed) {
-            throw (0, errors_1.cliError)("COPILOT_SDK_MISSING", "The optional Copilot SDK runtime is not installed. Run `codexs login copilot` first.", {
-                installDir: installStatus.installDir,
-                packageName: installStatus.packageName,
-                suggestion: "Run `codexs login copilot` to install the Copilot SDK and complete login.",
+        const githubToken = (0, copilot_token_1.readGithubToken)(args.toolHomeDir);
+        if (!githubToken) {
+            throw (0, errors_1.cliError)("COPILOT_AUTH_REQUIRED", "GitHub Copilot authentication is required. Run `codexs login copilot` first.", {
+                suggestion: "Run `codexs login copilot` to complete GitHub Copilot login.",
             });
         }
         try {
-            await (0, copilot_adapter_1.readCopilotAuthState)(args.runtimesDir);
+            await (0, copilot_token_1.exchangeForCopilotToken)(githubToken);
         }
         catch (error) {
             const normalized = (0, errors_1.normalizeError)(error);
-            if (normalized.code === "COPILOT_AUTH_REQUIRED") {
-                throw (0, errors_1.cliError)("COPILOT_AUTH_REQUIRED", "Copilot authentication is required before a Copilot provider can be added.", {
-                    ...(normalized.details ?? {}),
+            if (normalized.code === "COPILOT_AUTH_REQUIRED" || normalized.code === "COPILOT_TOKEN_EXCHANGE_FAILED") {
+                throw (0, errors_1.cliError)("COPILOT_AUTH_REQUIRED", "GitHub token is invalid or expired. Run `codexs login copilot` to re-authenticate.", {
                     suggestion: "Run `codexs login copilot` to complete GitHub Copilot login.",
                 });
             }

package/dist/app/bridge.js

@@ -10,8 +10,7 @@ const providers_repo_1 = require("../storage/providers-repo");
 const interactive_1 = require("../interaction/interactive");
 const copilot_bridge_1 = require("../runtime/copilot-bridge");
 const runtime_state_repo_1 = require("../storage/runtime-state-repo");
-const copilot_installer_1 = require("../runtime/copilot-installer");
-const copilot_adapter_1 = require("../runtime/copilot-adapter");
+const copilot_token_1 = require("../runtime/copilot-token");
 const DEFAULT_BRIDGE_PORT = 41415;
 /**
  * Starts or reuses the managed Copilot bridge for one provider.
@@ -28,8 +27,8 @@ async function startBridge(args) {
         commandName: "start",
         preferRuntimeState: false,
     });
-    await requireBridgeRuntimeReadiness(args.runtimesDir);
-    const bridge = await (0, copilot_bridge_1.ensureCopilotBridge)(target.providerName, target.provider, args.runtimeDir, args.runtimesDir);
+    await requireBridgeRuntimeReadiness(args.runtimesDir, args.toolHomeDir);
+    const bridge = await (0, copilot_bridge_1.ensureCopilotBridge)(target.providerName, target.provider, args.runtimeDir, args.runtimesDir, args.toolHomeDir);
     const nextProvider = bridge.portChanged ? rewriteBridgeProviderPort(target.provider, bridge.port) : target.provider;
     if (bridge.portChanged) {
         try {
@@ -252,16 +251,12 @@ async function promptForCopilotBridgeSelection(runtime, targets, commandName) {
 /**
  * Verifies that the local Copilot bridge prerequisites are available before startup.
  */
-async function requireBridgeRuntimeReadiness(runtimesDir) {
-    (0, copilot_installer_1.assertCopilotNodeRuntimeSupported)();
-    const installStatus = (0, copilot_installer_1.probeCopilotSdkInstall)(runtimesDir);
-    if (!installStatus.installed) {
-        throw (0, errors_1.cliError)("COPILOT_SDK_MISSING", "The optional Copilot SDK runtime is not installed.", {
-            installDir: installStatus.installDir,
-            packageName: installStatus.packageName,
-        });
+async function requireBridgeRuntimeReadiness(_runtimesDir, toolHomeDir) {
+    const githubToken = (0, copilot_token_1.readGithubToken)(toolHomeDir);
+    if (!githubToken) {
+        throw (0, errors_1.cliError)("COPILOT_AUTH_REQUIRED", "GitHub Copilot authentication is required. Run `codexs login copilot` first.");
     }
-    await (0, copilot_adapter_1.readCopilotAuthState)(runtimesDir);
+    await (0, copilot_token_1.exchangeForCopilotToken)(githubToken);
 }
 /**
  * Rewrites one Copilot bridge provider record with a recovered runtime port.

package/dist/app/get-status.js

@@ -41,9 +41,8 @@ const providers_1 = require("../domain/providers");
 const config_repo_1 = require("../storage/config-repo");
 const providers_repo_1 = require("../storage/providers-repo");
 const auth_repo_1 = require("../storage/auth-repo");
-const copilot_installer_1 = require("../runtime/copilot-installer");
+const copilot_token_1 = require("../runtime/copilot-token");
 const copilot_bridge_1 = require("../runtime/copilot-bridge");
-const copilot_adapter_1 = require("../runtime/copilot-adapter");
 const runtime_state_repo_1 = require("../storage/runtime-state-repo");
 /**
  * Reports the current on-disk runtime state and how it maps back to managed providers.
@@ -73,7 +72,7 @@ async function getStatus(codexDir, configPath, providersPath, authPath, options)
     const activeProvider = liveState.providerResolvable && providers && liveState.mappedProvider
         ? providers.providers[liveState.mappedProvider]
         : null;
-    const copilotInstall = (0, copilot_installer_1.probeCopilotSdkInstall)(options?.runtimesDir);
+    const copilotInstall = { installed: Boolean((0, copilot_token_1.readGithubToken)(options?.toolHomeDir)), source: "github-pat" };
     const runtimeStateInspection = (0, runtime_state_repo_1.inspectCopilotBridgeState)(options?.runtimeDir);
     const runtimeState = runtimeStateInspection.state;
     const runtimeStateProvider = runtimeState && providers ? providers.providers[runtimeState.provider] ?? null : null;
@@ -107,12 +106,18 @@ async function getStatus(codexDir, configPath, providersPath, authPath, options)
                 }
                 : null;
     const copilotAuth = activeProvider && (0, providers_1.isCopilotBridgeProvider)(activeProvider)
-        ? await (0, copilot_adapter_1.readCopilotAuthState)(options?.runtimesDir).catch((error) => ({
-            ready: false,
-            source: "official-sdk",
-            mode: "session",
-            error: error instanceof Error ? error.message : String(error),
-        }))
+        ? await (async () => {
+            const token = (0, copilot_token_1.readGithubToken)(options?.toolHomeDir);
+            if (!token)
+                return { ready: false, source: "github-pat", mode: "token", error: "No GitHub token found" };
+            try {
+                await (0, copilot_token_1.exchangeForCopilotToken)(token);
+                return { ready: true, source: "github-pat", mode: "token" };
+            }
+            catch (error) {
+                return { ready: false, source: "github-pat", mode: "token", error: error instanceof Error ? error.message : String(error) };
+            }
+        })()
         : null;
     if (liveState.canBackfillActiveProvider) {
         // Surface unmanaged live state without mutating anything during a read-only status call.
@@ -147,9 +152,7 @@ async function getStatus(codexDir, configPath, providersPath, authPath, options)
             runtimeProvider: activeProvider && (0, providers_1.isCopilotBridgeProvider)(activeProvider) ? activeProvider.runtime?.kind ?? null : null,
             copilotSdk: {
                 installed: copilotInstall.installed,
-                installDir: copilotInstall.installDir,
-                packageName: copilotInstall.packageName,
-                packageVersion: copilotInstall.packageVersion ?? null,
+                source: copilotInstall.source,
             },
             copilotAuth,
             copilotBridge,

package/dist/app/run-doctor.js

@@ -43,9 +43,8 @@ const errors_1 = require("../domain/errors");
 const codex_probe_1 = require("../runtime/codex-probe");
 const auth_repo_1 = require("../storage/auth-repo");
 const providers_1 = require("../domain/providers");
-const copilot_installer_1 = require("../runtime/copilot-installer");
+const copilot_token_1 = require("../runtime/copilot-token");
 const copilot_bridge_1 = require("../runtime/copilot-bridge");
-const copilot_adapter_1 = require("../runtime/copilot-adapter");
 const runtime_state_repo_1 = require("../storage/runtime-state-repo");
 const codex_version_1 = require("../runtime/codex-version");
 /**
@@ -125,25 +124,25 @@ async function runDoctor(args) {
         if (matches.length === 1) {
             const activeProvider = providers.providers[matches[0]];
             if ((0, providers_1.isCopilotBridgeProvider)(activeProvider)) {
-                const installStatus = (0, copilot_installer_1.probeCopilotSdkInstall)(args.runtimesDir);
-                if (!installStatus.installed) {
+                const githubToken = (0, copilot_token_1.readGithubToken)(args.toolHomeDir);
+                if (!githubToken) {
                     issues.push({
-                        code: "COPILOT_SDK_MISSING",
-                        message: "The optional Copilot SDK runtime is not installed.",
-                        installDir: installStatus.installDir,
-                        packageName: installStatus.packageName,
+                        code: "COPILOT_AUTH_REQUIRED",
+                        message: "GitHub Copilot authentication is required. Run `codexs login copilot`.",
                     });
                 }
-                try {
-                    await (0, copilot_adapter_1.readCopilotAuthState)(args.runtimesDir);
-                }
-                catch (error) {
-                    const normalized = (0, errors_1.normalizeError)(error);
-                    issues.push({
-                        code: normalized.code,
-                        message: normalized.message,
-                        ...(normalized.details ?? {}),
-                    });
+                else {
+                    try {
+                        await (0, copilot_token_1.exchangeForCopilotToken)(githubToken);
+                    }
+                    catch (error) {
+                        const normalized = (0, errors_1.normalizeError)(error);
+                        issues.push({
+                            code: normalized.code,
+                            message: normalized.message,
+                            ...(normalized.details ?? {}),
+                        });
+                    }
                 }
                 const bridge = await (0, copilot_bridge_1.probeCopilotBridgeRuntime)(activeProvider, runtimeState, args.runtimeDir);
                 if (!bridge.ok) {

package/dist/app/switch-provider.js

@@ -6,8 +6,7 @@ const config_repo_1 = require("../storage/config-repo");
 const auth_repo_1 = require("../storage/auth-repo");
 const providers_repo_1 = require("../storage/providers-repo");
 const copilot_bridge_1 = require("../runtime/copilot-bridge");
-const copilot_installer_1 = require("../runtime/copilot-installer");
-const copilot_adapter_1 = require("../runtime/copilot-adapter");
+const copilot_token_1 = require("../runtime/copilot-token");
 const run_mutation_1 = require("./run-mutation");
 const providers_1 = require("../domain/providers");
 /**
@@ -33,16 +32,12 @@ async function switchProvider(args) {
         });
     }
     if ((0, providers_1.isCopilotBridgeProvider)(provider)) {
-        (0, copilot_installer_1.assertCopilotNodeRuntimeSupported)();
-        const installStatus = (0, copilot_installer_1.probeCopilotSdkInstall)(args.runtimesDir);
-        if (!installStatus.installed) {
-            throw (0, errors_1.cliError)("COPILOT_SDK_MISSING", "The optional Copilot SDK runtime is not installed.", {
-                installDir: installStatus.installDir,
-                packageName: installStatus.packageName,
-            });
+        const githubToken = (0, copilot_token_1.readGithubToken)(args.toolHomeDir);
+        if (!githubToken) {
+            throw (0, errors_1.cliError)("COPILOT_AUTH_REQUIRED", "GitHub Copilot authentication is required. Run `codexs login copilot` first.");
         }
-        await (0, copilot_adapter_1.readCopilotAuthState)(args.runtimesDir);
-        const bridge = await (0, copilot_bridge_1.ensureCopilotBridge)(args.providerName, provider, args.runtimeDir, args.runtimesDir);
+        await (0, copilot_token_1.exchangeForCopilotToken)(githubToken);
+        const bridge = await (0, copilot_bridge_1.ensureCopilotBridge)(args.providerName, provider, args.runtimeDir, args.runtimesDir, args.toolHomeDir);
         const nextProvider = bridge.portChanged
             ? (0, providers_1.cleanProviderRecord)({
                 ...provider,

package/dist/commands/handlers.js

@@ -60,9 +60,7 @@ const providers_1 = require("../domain/providers");
 const add_interactive_1 = require("../interaction/add-interactive");
 const interactive_1 = require("../interaction/interactive");
 const prompt_1 = require("../interaction/prompt");
-const copilot_adapter_1 = require("../runtime/copilot-adapter");
-const copilot_cli_1 = require("../runtime/copilot-cli");
-const copilot_installer_1 = require("../runtime/copilot-installer");
+const copilot_token_1 = require("../runtime/copilot-token");
 const config_repo_1 = require("../storage/config-repo");
 const codex_paths_1 = require("../storage/codex-paths");
 const providers_repo_1 = require("../storage/providers-repo");
@@ -100,6 +98,7 @@ async function handleRegisteredCommand(ctx, parsed, runtime = (0, prompt_1.creat
             return (0, get_status_1.getStatus)(paths.codexDir, paths.configPath, paths.providersPath, paths.authPath, {
                 runtimeDir: paths.runtimeDir,
                 runtimesDir: paths.runtimesDir,
+                toolHomeDir: paths.toolHomeDir,
             });
         case "bridge-start": {
             const providerName = parsed.positionals[0] ?? null;
@@ -108,6 +107,7 @@ async function handleRegisteredCommand(ctx, parsed, runtime = (0, prompt_1.creat
                 configPath: paths.configPath,
                 runtimeDir: paths.runtimeDir,
                 runtimesDir: paths.runtimesDir,
+                toolHomeDir: paths.toolHomeDir,
                 providerName,
                 runtime,
                 json: ctx.options.json,
@@ -156,80 +156,41 @@ async function handleRegisteredCommand(ctx, parsed, runtime = (0, prompt_1.creat
                     supportedUpstreams: ["copilot", "github-copilot"],
                 });
             }
-            (0, copilot_installer_1.assertCopilotNodeRuntimeSupported)();
-            const installed = (0, copilot_installer_1.probeCopilotSdkInstall)(paths.runtimesDir);
-            let installedNow = false;
-            if (!installed.installed) {
-                const confirmInstall = await runtime.confirmAction("The Copilot SDK runtime is not installed. Install it now?", {
-                    defaultValue: true,
-                });
-                if (!confirmInstall) {
-                    throw (0, errors_1.cliError)("COPILOT_SDK_MISSING", "The optional Copilot SDK runtime is not installed.", {
-                        installDir: installed.installDir,
-                        packageName: installed.packageName,
-                    });
-                }
-                runtime.writeLine("Installing Copilot SDK runtime...");
-                (0, copilot_installer_1.installCopilotSdk)(paths.runtimesDir);
-                installedNow = true;
-            }
-            const availability = (0, copilot_cli_1.checkCopilotCliAvailable)(paths.runtimesDir);
-            try {
-                await (0, copilot_adapter_1.readCopilotAuthState)(paths.runtimesDir);
-                return {
-                    data: {
-                        upstream: "github-copilot",
-                        sdkInstalled: true,
-                        sdkInstalledNow: installedNow,
-                        authReady: true,
-                        loginLaunched: false,
-                        cliSource: availability.ok ? availability.source ?? null : null,
-                        cliCommand: availability.command ?? null,
-                    },
-                };
-            }
-            catch (error) {
-                const normalized = (0, errors_1.normalizeError)(error);
-                if (normalized.code !== "COPILOT_AUTH_REQUIRED") {
-                    throw error;
+            // Check if already authenticated
+            const existingToken = (0, copilot_token_1.readGithubToken)(paths.toolHomeDir);
+            if (existingToken) {
+                try {
+                    await (0, copilot_token_1.exchangeForCopilotToken)(existingToken);
+                    return {
+                        data: {
+                            upstream: "github-copilot",
+                            authReady: true,
+                            loginLaunched: false,
+                            authSource: "github-pat",
+                        },
+                    };
                 }
-            }
-            if (!availability.ok) {
-                throw (0, errors_1.cliError)("COPILOT_CLI_MISSING", "The official Copilot CLI could not be resolved from the installed runtime or PATH.", {
-                    cause: availability.cause,
-                    source: availability.source ?? null,
-                    command: availability.command ?? null,
-                });
-            }
-            try {
-                (0, copilot_cli_1.runCopilotLogin)({ runtimesDir: paths.runtimesDir });
-            }
-            catch (error) {
-                throw (0, errors_1.cliError)("COPILOT_LOGIN_LAUNCH_FAILED", "Failed to launch `copilot login`.", {
-                    cause: error instanceof Error ? error.message : String(error),
-                });
-            }
-            try {
-                await (0, copilot_adapter_1.readCopilotAuthState)(paths.runtimesDir);
-            }
-            catch (error) {
-                const normalized = (0, errors_1.normalizeError)(error);
-                if (normalized.code === "COPILOT_AUTH_REQUIRED") {
-                    throw (0, errors_1.cliError)("COPILOT_LOGIN_RECHECK_FAILED", "Copilot login completed but auth readiness recheck still failed.", {
-                        ...(normalized.details ?? {}),
-                    });
+                catch {
+                    // Token is invalid, proceed with new login
                 }
-                throw error;
             }
+            // Start GitHub OAuth Device Flow
+            runtime.writeLine("Starting GitHub authentication...");
+            const deviceFlow = await (0, copilot_token_1.startDeviceFlow)();
+            runtime.writeLine(`\nPlease visit: ${deviceFlow.verificationUri}`);
+            runtime.writeLine(`And enter code: ${deviceFlow.userCode}\n`);
+            runtime.writeLine("Waiting for authorization...");
+            const githubPat = await (0, copilot_token_1.pollDeviceFlowToken)(deviceFlow.deviceCode, deviceFlow.interval, deviceFlow.expiresIn);
+            // Validate the token by doing a test exchange
+            await (0, copilot_token_1.exchangeForCopilotToken)(githubPat);
+            (0, copilot_token_1.writeGithubToken)(githubPat, paths.toolHomeDir);
+            runtime.writeLine("GitHub Copilot authentication successful!");
             return {
                 data: {
                     upstream: "github-copilot",
-                    sdkInstalled: true,
-                    sdkInstalledNow: installedNow,
                     authReady: true,
                     loginLaunched: true,
-                    cliSource: availability.source ?? null,
-                    cliCommand: availability.command ?? null,
+                    authSource: "github-pat",
                 },
             };
         }
@@ -267,6 +228,7 @@ async function handleRegisteredCommand(ctx, parsed, runtime = (0, prompt_1.creat
                 authPath: paths.authPath,
                 runtimeDir: paths.runtimeDir,
                 runtimesDir: paths.runtimesDir,
+                toolHomeDir: paths.toolHomeDir,
                 providerName,
             });
         }
@@ -507,6 +469,7 @@ async function handleRegisteredCommand(ctx, parsed, runtime = (0, prompt_1.creat
                 authPath: paths.authPath,
                 runtimeDir: paths.runtimeDir,
                 runtimesDir: paths.runtimesDir,
+                toolHomeDir: paths.toolHomeDir,
             });
         case "migrate": {
             let codexDir = ctx.options.codexDir;

package/dist/domain/providers.js

@@ -88,7 +88,7 @@ function cleanProviderRecord(record) {
         next.tags = record.tags.map((tag) => tag.trim()).filter((tag) => tag.length > 0);
     }
     if (record.runtime) {
-        next.runtime = {
+        const cleanedRuntime = {
             kind: record.runtime.kind,
             upstream: record.runtime.upstream,
             bridgeHost: record.runtime.bridgeHost.trim(),
@@ -96,8 +96,11 @@ function cleanProviderRecord(record) {
             bridgePath: record.runtime.bridgePath,
             premiumRequests: record.runtime.premiumRequests,
             authSource: record.runtime.authSource,
-            sdkInstallMode: record.runtime.sdkInstallMode,
         };
+        if (record.runtime.sdkInstallMode) {
+            cleanedRuntime.sdkInstallMode = record.runtime.sdkInstallMode;
+        }
+        next.runtime = cleanedRuntime;
     }
     return next;
 }
@@ -148,10 +151,10 @@ function isRuntimeBackedProvider(provider) {
     return Boolean(provider.runtime);
 }
 /**
- * Returns whether one provider uses the GitHub Copilot SDK bridge runtime.
+ * Returns whether one provider uses the GitHub Copilot bridge runtime.
  */
 function isCopilotBridgeProvider(provider) {
-    return provider.runtime?.kind === "copilot-sdk-bridge";
+    return provider.runtime?.kind === "copilot-http-proxy" || provider.runtime?.kind === "copilot-sdk-bridge";
 }
 /**
  * Builds the canonical local bridge URL for one Copilot runtime provider.
@@ -194,7 +197,7 @@ function validateProviderRuntime(name, runtime) {
         throw new Error(`Provider "${name}" has an invalid runtime block.`);
     }
     const record = runtime;
-    if (record.kind !== "copilot-sdk-bridge") {
+    if (record.kind !== "copilot-http-proxy" && record.kind !== "copilot-sdk-bridge") {
         throw new Error(`Provider "${name}" has an unsupported runtime kind.`);
     }
     if (record.upstream !== "github-copilot") {
@@ -212,10 +215,7 @@ function validateProviderRuntime(name, runtime) {
     if (record.premiumRequests !== true) {
         throw new Error(`Provider "${name}" must enable runtime premiumRequests.`);
     }
-    if (record.authSource !== "official-sdk") {
+    if (record.authSource !== "github-pat" && record.authSource !== "official-sdk") {
         throw new Error(`Provider "${name}" has an invalid runtime authSource.`);
     }
-    if (record.sdkInstallMode !== "lazy") {
-        throw new Error(`Provider "${name}" has an invalid runtime sdkInstallMode.`);
-    }
 }