Function promptForCopilotPATUnified

pkg/cli/engine_secrets.go:294–339

promptForCopilotPATUnified prompts the user for a Copilot PAT with detailed instructions

(req SecretRequirement, config EngineSecretConfig)

// promptForCopilotPATUnified prompts the user for a Copilot PAT with detailed instructions
func promptForCopilotPATUnified(req SecretRequirement, config EngineSecretConfig) error {
	fmt.Fprintln(os.Stderr, "")
	fmt.Fprintln(os.Stderr, "GitHub Copilot requires a fine-grained Personal Access Token (PAT) with 'Copilot requests' permissions.")
	fmt.Fprintln(os.Stderr, "")
	fmt.Fprintln(os.Stderr, "Please create a token at:")
	fmt.Fprintln(os.Stderr, console.FormatCommandMessage("  "+req.KeyURL))
	fmt.Fprintln(os.Stderr, "")
	fmt.Fprintln(os.Stderr, "Configure the token with:")
	fmt.Fprintln(os.Stderr, "  • Token name: Agentic Workflows Copilot")
	fmt.Fprintln(os.Stderr, "  • Expiration: 90 days (recommended for testing)")
	fmt.Fprintln(os.Stderr, "  • Resource owner: Your personal account")
	fmt.Fprintln(os.Stderr, "  • Repository access: \"Public repositories\" (you must use this setting for Copilot Requests permission to appear)")
	fmt.Fprintln(os.Stderr, "  • Add permissions → Copilot Requests: Read-only")
	fmt.Fprintln(os.Stderr, "")
	fmt.Fprintln(os.Stderr, "If you run into trouble see https://github.github.com/gh-aw/reference/auth/#copilot_github_token.")

	var token string
	form := huh.NewForm(
		huh.NewGroup(
			huh.NewInput().
				Title("After creating, please paste your fine-grained Copilot PAT:").
				Description("Must start with 'github_pat_'. Classic PATs (ghp_...) are not supported.").
				EchoMode(huh.EchoModePassword).
				Value(&token).
				Validate(func(s string) error {
					if len(s) < 10 {
						return errors.New("token appears to be too short")
					}
					return stringutil.ValidateCopilotPAT(s)
				}),
		),
	).WithTheme(styles.HuhTheme).WithAccessible(console.IsAccessibleMode())

	if err := form.RunWithContext(config.ctx()); err != nil {
		return fmt.Errorf("failed to get Copilot token: %w", err)
	}

	fmt.Fprintln(os.Stderr, console.FormatSuccessMessage("Valid fine-grained Copilot token received"))

	// Upload to repository if we have a repo slug
	if config.RepoSlug != "" {
		return uploadSecretToRepo(req.Name, token, config.RepoSlug, config.Verbose)
	}

	return nil
}

// promptForSystemTokenUnified prompts the user for a system-level GitHub token (PAT)
// This uses PAT-specific wording instead of "API key" since system secrets are GitHub tokens