fix: use GitHub Copilot CLI App client ID and add API version header to token exchange

Author: maros7

src/server/core/domain/entities/provider-registry.ts

@@ -155,7 +155,7 @@ export const PROVIDER_REGISTRY: Readonly<Record<string, ProviderDefinition>> = {
     name: 'GitHub Copilot',
     oauth: {
       callbackMode: 'device',
-      clientId: 'Ov23li8tweQw6odWQebz',
+      clientId: 'Iv1.b507a08c87ecfe98',
       modes: [{authUrl: 'https://github.com/login/device', id: 'default', label: 'Sign in with GitHub'}],
       redirectUri: '',
       scopes: 'read:user',

src/server/infra/provider-oauth/device-flow.ts

@@ -4,6 +4,7 @@ import axios, {isAxiosError} from 'axios'
 import {
   COPILOT_TOKEN_URL,
   DEVICE_FLOW_INTERVAL_BUFFER,
+  GITHUB_API_VERSION,
   GITHUB_DEVICE_CODE_URL,
   GITHUB_OAUTH_TOKEN_URL,
 } from '../../../shared/constants/copilot.js'
@@ -153,6 +154,7 @@ export async function exchangeForCopilotToken(githubToken: string): Promise<Copi
       headers: {
         Accept: 'application/json',
         Authorization: `token ${githubToken}`,
+        'X-GitHub-Api-Version': GITHUB_API_VERSION,
       },
     })
   } catch (error) {

src/shared/constants/copilot.ts

@@ -1,5 +1,5 @@
-/** GitHub OAuth App client ID (public — used for device flow, no client secret). */
-export const COPILOT_GITHUB_CLIENT_ID = 'Ov23li8tweQw6odWQebz'
+/** GitHub Copilot CLI App client ID (public — used for device flow, no client secret). */
+export const COPILOT_GITHUB_CLIENT_ID = 'Iv1.b507a08c87ecfe98'
 
 /** GitHub device code request endpoint. */
 export const GITHUB_DEVICE_CODE_URL = 'https://github.com/login/device/code'
@@ -28,6 +28,8 @@ export const DEVICE_FLOW_INTERVAL_BUFFER = 3
 /** Copilot models endpoint for listing available models. */
 export const COPILOT_MODELS_ENDPOINT = '/models'
 
+export const GITHUB_API_VERSION = '2025-04-01'
+
 /** Editor version header value sent with Copilot API requests. */
 export const COPILOT_EDITOR_VERSION = 'vscode/1.99.0'
 

test/unit/core/domain/entities/provider-registry.test.ts

@@ -148,7 +148,7 @@ describe('Provider Registry', () => {
 
     it('should have correct oauth clientId', () => {
       const copilot = getProviderById('github-copilot')
-      expect(copilot?.oauth?.clientId).to.equal('Ov23li8tweQw6odWQebz')
+      expect(copilot?.oauth?.clientId).to.equal('Iv1.b507a08c87ecfe98')
     })
 
     it('should have oauth modes with GitHub device auth URL', () => {

test/unit/infra/provider-oauth/device-flow.test.ts

@@ -270,6 +270,7 @@ describe('device-flow', () => {
         .get(COPILOT_TOKEN_PATH)
         .matchHeader('Authorization', 'token gho_my_token')
         .matchHeader('Accept', 'application/json')
+        .matchHeader('X-GitHub-Api-Version', '2025-04-01')
         .reply(200, {
           expires_at: expiresAt,
           token: 'tid=some_token',

test/unit/infra/transport/handlers/provider-handler.test.ts

@@ -952,7 +952,7 @@ describe('ProviderHandler', () => {
 
       expect(requestDeviceCodeStub.calledOnce).to.be.true
       const params = requestDeviceCodeStub.firstCall.args[0]
-      expect(params.clientId).to.equal('Ov23li8tweQw6odWQebz')
+      expect(params.clientId).to.equal('Iv1.b507a08c87ecfe98')
       expect(params.scope).to.equal('read:user')
     })
   })
@@ -1086,7 +1086,7 @@ describe('ProviderHandler', () => {
 
       const params = pollForAccessTokenStub.firstCall.args[0]
       expect(params.deviceCode).to.equal('test-device-code')
-      expect(params.clientId).to.equal('Ov23li8tweQw6odWQebz')
+      expect(params.clientId).to.equal('Iv1.b507a08c87ecfe98')
       expect(params.expiresIn).to.equal(900)
       expect(params.interval).to.equal(5)
     })