codex-copilot-dx 0.4.14 → 0.4.15

package/README.md

@@ -48,6 +48,13 @@ codex-copilot-dx doctor
 
 The doctor checks the GitHub token, Codex config, Claude Code settings, Claude App gateway profile, and whether the local adapter port is listening.
 
+If Copilot token refresh fails with `401` or `403`, the saved GitHub token may be expired, revoked, or missing Copilot access. Delete the saved token and start the tool again to trigger GitHub device login:
+
+```bash
+rm ~/.local/share/copilot-api/github_token
+codex-copilot-dx
+```
+
 ### Claude App opt-in
 
 Claude App support is opt-in so the default Codex Desktop and Claude Code setup stays unchanged:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codex-copilot-dx",
-  "version": "0.4.14",
+  "version": "0.4.15",
   "description": "Use Codex Desktop, Claude Code, and Claude App with GitHub Copilot",
   "type": "module",
   "bin": {

package/src/auth.mjs

@@ -11,6 +11,14 @@ export function githubTokenPath(home = os.homedir()) {
   return path.join(home, ".local", "share", "copilot-api", "github_token");
 }
 
+export function githubReauthMessage(reason, home = os.homedir()) {
+  const tokenPath = githubTokenPath(home);
+  return `${reason}
+Delete the saved GitHub token, then run codex-copilot-dx again to log in:
+  rm '${tokenPath}'
+  codex-copilot-dx`;
+}
+
 // Map GitHub polling responses to a small local state machine.
 export function interpretPoll(data) {
   if (typeof data.access_token === "string" && data.access_token) return { state: "done", token: data.access_token };

package/src/copilot.mjs

@@ -1,10 +1,8 @@
 import fs from "node:fs";
-import path from "node:path";
-import os from "node:os";
 import { randomUUID } from "node:crypto";
 import { status } from "./status.mjs";
+import { githubReauthMessage, githubTokenPath } from "./auth.mjs";
 
-const GITHUB_TOKEN_PATH = path.join(os.homedir(), ".local", "share", "copilot-api", "github_token");
 export const DEFAULT_API_BASE = "https://api.githubcopilot.com";
 let apiBase = DEFAULT_API_BASE;
 const IMG_MAX_DIM = parseInt(process.env.CCDX_IMG_MAX_DIM || "2048", 10);
@@ -249,10 +247,13 @@ let copilotToken = null;
 let copilotTokenExpiry = 0;
 
 function getGithubToken() {
+  const GITHUB_TOKEN_PATH = githubTokenPath();
   if (!fs.existsSync(GITHUB_TOKEN_PATH)) {
-    throw new Error("GitHub token not found. Run the tool once to log in.");
+    throw new Error("GitHub token not found. Run codex-copilot-dx again to log in.");
   }
-  return fs.readFileSync(GITHUB_TOKEN_PATH, "utf-8").trim();
+  const token = fs.readFileSync(GITHUB_TOKEN_PATH, "utf-8").trim();
+  if (!token) throw new Error(githubReauthMessage("GitHub token file is empty."));
+  return token;
 }
 
 export async function getCopilotToken({ signal } = {}) {
@@ -262,7 +263,12 @@ export async function getCopilotToken({ signal } = {}) {
     headers: { Authorization: `token ${ghToken}`, Accept: "application/json" },
     signal,
   });
-  if (!resp.ok) throw new Error(`Failed to get Copilot token: ${resp.status}`);
+  if (!resp.ok) {
+    if (resp.status === 401 || resp.status === 403) {
+      throw new Error(githubReauthMessage(`Failed to get Copilot token: ${resp.status}. The saved GitHub token may be expired, revoked, or missing Copilot access.`));
+    }
+    throw new Error(`Failed to get Copilot token: ${resp.status}`);
+  }
   const data = await resp.json();
   if (!data.token) throw new Error("Copilot token response missing token field");
   copilotToken = data.token;