feat(providers): add GitHub Copilot community provider (#1505)

* feat(providers): add GitHub Copilot provider configuration types
Define CopilotProviderDefaults with model, reasoning effort, and auth options
Include system message injection and CLI path configuration support

* feat(providers): add GitHub Copilot community provider integration
Implement full provider with session management, streaming, and binary resolution
Include comprehensive test coverage and lazy-load SDK pattern

* feat(providers): add Copilot provider registration and exports
Export CopilotProvider, config parser, and binary resolver utilities
Register Copilot provider in community providers initialization

* test(e2e): add GitHub Copilot provider smoke and abort tests
Include streaming verification, token validation, and interrupt handling
Verify connectivity, output plumbing, and session management

* feat(copilot): add reasoning effort alias and session timeout improvements
Map Archon `max` effort to SDK `xhigh` and extend sendAndWait timeout to 60min
Handle fork-session requests with fresh session creation fallback

* feat(copilot): add environment variable override support and auto model default
Add COPILOT_MODEL env var with envOverrides tracking across config system
Update provider to default model to 'auto' and enhance settings UI

* docs(copilot): clarify session option handling comment

* feat(copilot): add MCP, skills, agents, and structured output support

Implement full Copilot SDK feature translation including tool restrictions,
session config assembly, and best-effort JSON parsing for structured output

* feat(copilot): respect useLoggedInUser to override env token
test(copilot): cover env token precedence and override behavior

* refactor(copilot): remove isCopilotModelCompatible and model-ref
delete model-ref.ts and model-ref.test.ts
update copilot index and registration to drop isCopilotModelCompatible export

* fix(struct-out): enforce object requirement for structured output parsing
return undefined if parsed JSON is not an object
add tests covering non-object JSON in structured output parsing

* feat(copilot): add isExecutableFile check for Copilot binary
implement isExecutableFile using stat/access and use it in path resolution
update errors to reference executable file and chmod guidance

* feat(copilot): add PATH lookup for copilot binary resolution
export resolveFromPath and prefer PATH result when executable

* ci(workflows): migrate and add Copilot CI workflows
- rename e2e-copilot-abort.yaml to test-workflows/e2e-copilot-abort.yaml
- add e2e-copilot-all-features.yaml and relocate smoke workflow to test-workflows

* refactor(shared): centralize structured-output parsing and skills
update providers to re-export shared implementations
expose shared utilities: tryParseStructuredOutput, augmentPromptForJsonSchema

* feat(registry): register Copilot community provider
update registry tests to cover copilot provider registration
verify no collision with built-ins and copilot appears in lists

* feat(copilot): defer session error warning and harden abort flow
update event-bridge to emit no system chunk on session.error
add provider-hardening tests for abort, trim model config and cleanup

* ci(workflow): simplify output capture in e2e-copilot-smoke workflow

* ci(workflows): restructure Copilot e2e workflows for clarity
refactor multiple files into sections for fixtures, demos, and checks

* ci(workflow): remove e2e-copilot-all-features workflow

* feat(workflows): add e2e-copilot-all-nodes-smoke workflow
delete old e2e-copilot-smoke workflow
extend Copilot smoke tests to cover all node types and structured outputs

* refactor(config): remove envOverrides support and COPILOT_MODEL usage
use DEFAULT_AI_ASSISTANT env var to select default ai assistant
update tests and docs to reflect new default and env var usage

* docs: update Copilot docs and env sample

* feat(copilot): implement token precedence for Copilot auth
introduce COPILOT_GITHUB_TOKEN and generic GH tokens; track tokenSource
reorder provider registration to register Pi before Copilot

* fe​at(copilot): improve binary resolution and skill dir validation
use isExecutableFile for vendor and autodetect checks
validate skill names to reject absolute or traversal paths

* fix: address review feedback on Copilot community provider

- Add packages/providers/src/shared/structured-output.test.ts covering
  augmentPromptForJsonSchema, the happy-path clean parse, fence stripping
  (both ```json and bare ```), the forward-brace scan recovery for
  reasoning-model prose preamble, fence + preamble combo, whitespace
  trimming, invalid JSON, empty input, and the bare-primitive rejection
  contract (null/number/string/boolean).
- Add packages/providers/src/shared/skills.test.ts covering empty/null
  inputs, non-string and empty-string skipping, missing skills, cwd vs
  home resolution order, cwd-shadows-home semantics, deduplication, and
  the name-only contract (rejection of absolute paths, nested paths,
  and parent traversal). Uses a staged temp HOME so reads are isolated.
- Wire both new test files into packages/providers/package.json so they
  run in CI as separate bun test invocations.
- Add `copilot` to the registered-providers list in the validation
  error example at guides/authoring-workflows.md, add a Copilot bullet
  to the Model strings section, and add an AI Providers -- Copilot
  env-var subsection plus DEFAULT_AI_ASSISTANT enumeration to
  reference/configuration.md.

The two duplicate-import HIGH findings from the May 14 review were
hallucinations — the imports don't exist in the current branch — so
they need no fix.

* chore(rebase): resolve semantic conflicts from dev

- Update loadMcpConfig import to ../../mcp/config — #1459 (Codex MCP
  nodes) extracted it out of claude/provider.ts into its own module.
- Regenerate bun.lock from current dev (configVersion: 1). Old commits
  on this branch carried configVersion: 0; rebased forward unchanged
  but produced different transitive resolution on install (telegram
  markdown tests fail locally despite identical telegramify-markdown
  pin). bun install re-adds @github/copilot-sdk on top of the fresh
  lockfile.

* test(copilot): address CodeRabbit feedback on shared/skills tests

- Stage the home copy of `delta` in `.agents` (not `.claude`) so the
  "prefers cwd over home" precedence test actually verifies precedence
  within `.agents`. Previously the home copy was in `.claude`, which
  could not have beaten the cwd `.agents` copy regardless of the
  resolver's behavior.
- Add explicit return types on `makeFakeWorld` and the inner
  `stageSkill` to satisfy the project's strict TS annotation rule.

* fix(providers): address remaining Wirasm review items

- pi/event-bridge.ts: consolidate the `export-from` + `import-from`
  pair on shared/structured-output into the idiomatic
  `import { X }; export { X };` form. The preceding comment already
  promised "import once for local use and re-export" but the prior
  order said the opposite.
- authoring-workflows.md: add `copilot` to the prose listing of
  registered providers (the example validation error string below it
  already includes copilot).

* chore(copilot): drop stale "Claude's loadMcpConfig" attribution

#1459 (Codex MCP nodes) extracted loadMcpConfig out of
claude/provider.ts into a shared mcp/config.ts module. Update the
applyMcpServers docblock to reflect that the helper is shared, not
Claude-specific.

---------

Co-authored-by: Daniel Scholl <daniel.scholl@microsoft.com>
Co-authored-by: Rasmus Widing <rasmus.widing@gmail.com>

Author: 3 people

.archon/workflows/test-workflows/e2e-copilot-abort.yaml

@@ -0,0 +1,14 @@
+# E2E manual abort test — GitHub Copilot community provider
+# Verifies: Ctrl-C propagates through the bridge to session.abort() and
+#   sendAndWait unwinds cleanly without dangling listeners.
+# Manual: start, wait for streaming to begin, press Ctrl-C. Not for CI.
+name: e2e-copilot-abort
+description: 'Manual test: start, then Ctrl-C. Verifies abort wiring.'
+provider: copilot
+model: gpt-5-mini
+
+nodes:
+  - id: long
+    prompt: 'Count slowly from 1 to 200, one number per line, with a brief phrase after each number explaining its mathematical significance. Do not skip any numbers.'
+    effort: low
+    idle_timeout: 120000

.archon/workflows/test-workflows/e2e-copilot-all-nodes-smoke.yaml

@@ -0,0 +1,147 @@
+# E2E smoke test — Copilot provider, every CI-compatible node type
+# Covers: prompt, command, loop (AI node types) + bash, script bun/uv
+#   (deterministic node types) + depends_on / when / trigger_rule / $nodeId.output
+#   (DAG features) + Copilot-specific options: effort, allowed_tools,
+#   output_format (best-effort JSON via prompt augment + 2-tier parser).
+# Skipped: `approval:` — pauses for human input, incompatible with CI.
+# Auth: `gh auth login` OR `COPILOT_GITHUB_TOKEN`.
+#   To use `GH_TOKEN` / `GITHUB_TOKEN`, also set `assistantConfig.useLoggedInUser: false`.
+#   Requires an active GitHub Copilot subscription.
+name: e2e-copilot-all-nodes-smoke
+description: 'Copilot provider smoke across every CI-compatible node type plus Copilot-specific options.'
+provider: copilot
+model: gpt-5-mini
+
+nodes:
+  # ─── AI node types ──────────────────────────────────────────────────────
+
+  # 1. prompt: inline prompt + effort + allowed_tools (no tool calls).
+  #    Verifies reasoningEffort and availableTools=[] reach the SDK.
+  - id: prompt-node
+    prompt: "Reply with exactly the single word 'ok' and nothing else."
+    allowed_tools: []
+    effort: low
+    idle_timeout: 30000
+
+  # 2. command: named command file (.archon/commands/e2e-echo-command.md).
+  #    The command echoes back $ARGUMENTS (the workflow invocation message).
+  - id: command-node
+    command: e2e-echo-command
+    allowed_tools: []
+    idle_timeout: 30000
+
+  # 3. loop: iterative AI prompt until completion signal.
+  #    Bounded by max_iterations: 2 so a misbehaving model can't hang CI.
+  - id: loop-node
+    loop:
+      prompt: "Reply with exactly 'DONE' and nothing else."
+      until: 'DONE'
+      max_iterations: 2
+    allowed_tools: []
+    effort: low
+    idle_timeout: 60000
+
+  # 4. output_format: Copilot's best-effort structured output path
+  #    (prompt augmented with schema + 2-tier JSON parser on result text).
+  #    Unique to Copilot/Pi vs. Claude/Codex native JSON mode — only an
+  #    E2E test catches "real model drifted around the schema".
+  - id: structured-node
+    prompt: |
+      Return a JSON object with two fields, no fences and no prose:
+        - "status": always "ok" (string)
+        - "value":  always 42 (number)
+    allowed_tools: []
+    effort: low
+    idle_timeout: 30000
+    output_format:
+      type: object
+      properties:
+        status:
+          type: string
+        value:
+          type: number
+      required: [status, value]
+
+  # ─── Deterministic node types (no AI) ───────────────────────────────────
+
+  # 5. bash: shell script with JSON output (enables $nodeId.output.status
+  #    dot-access downstream).
+  - id: bash-json-node
+    bash: 'echo ''{"status":"ok"}'''
+
+  # 6. script: bun (TypeScript/JavaScript runtime)
+  - id: script-bun-node
+    script: echo-args
+    runtime: bun
+    timeout: 30000
+
+  # 7. script: uv (Python runtime)
+  - id: script-python-node
+    script: echo-py
+    runtime: uv
+    timeout: 30000
+
+  # ─── DAG features ───────────────────────────────────────────────────────
+
+  # 8. depends_on + $nodeId.output substitution
+  - id: downstream
+    bash: "echo 'downstream got: $prompt-node.output'"
+    depends_on: [prompt-node]
+
+  # 9. when: conditional (JSON dot-access on bash JSON output)
+  - id: gated
+    bash: "echo 'gated-ok'"
+    depends_on: [bash-json-node]
+    when: "$bash-json-node.output.status == 'ok'"
+
+  # 10. when: conditional on AI structured output (proves output_format
+  #     parsed and dot-access works on the resulting object).
+  - id: structured-check
+    bash: "echo \"structured.status=$structured-node.output.status\""
+    depends_on: [structured-node]
+    when: "$structured-node.output.status == 'ok'"
+
+  # 11. trigger_rule: merge multiple deps (all_success semantics)
+  - id: merge
+    bash: "echo 'merge-ok'"
+    depends_on:
+      [downstream, gated, structured-check, script-bun-node, script-python-node]
+    trigger_rule: all_success
+
+  # ─── Final assertion ────────────────────────────────────────────────────
+
+  # 12. Verify every upstream node produced non-empty output, including
+  #     dot-access on the structured-output node (proves output_format
+  #     parsed and downstream consumers can index into it).
+  #     Note: value-equality on string fields is avoided on purpose —
+  #     shellQuote() wraps strings in literal single quotes, so a literal
+  #     `[ "$x" != "ok" ]` would always fail. Non-emptiness is the right
+  #     bar for a smoke; the `when:` gate on structured-check already
+  #     proved the value matched 'ok' to reach this node.
+  - id: assert
+    bash: |
+      fail=0
+      check() {
+        local name="$1"
+        local value="$2"
+        if [ -z "$value" ]; then
+          echo "FAIL: $name produced empty output"
+          fail=1
+        fi
+      }
+      check prompt-node       "$prompt-node.output"
+      check command-node      "$command-node.output"
+      check loop-node         "$loop-node.output"
+      check bash-json-node    "$bash-json-node.output"
+      check script-bun-node   "$script-bun-node.output"
+      check script-python-node "$script-python-node.output"
+      check downstream        "$downstream.output"
+      check gated             "$gated.output"
+      check merge             "$merge.output"
+      check structured.status "$structured-node.output.status"
+      check structured.value  "$structured-node.output.value"
+
+      if [ "$fail" -eq 1 ]; then exit 1; fi
+      echo "PASS: all node types + structured output verified"
+    depends_on: [merge, loop-node, command-node]
+    trigger_rule: all_success

.env.example

@@ -39,6 +39,18 @@ CODEX_REFRESH_TOKEN=
 CODEX_ACCOUNT_ID=
 # CODEX_BIN_PATH=  # Optional: path to Codex native binary (binary builds only)
 
+# GitHub Copilot (community provider — @github/copilot-sdk)
+# Requires an active GitHub Copilot subscription. By default, Archon uses
+# the credentials you configured via the Copilot CLI (`copilot login`).
+# Generic GH_TOKEN / GITHUB_TOKEN (declared below) are intentionally NOT
+# picked up — classic PATs lack Copilot entitlement and would fail. To
+# opt back into env-token auth, set `useLoggedInUser: false` in
+# `.archon/config.yaml`. Setting COPILOT_GITHUB_TOKEN is treated as
+# explicit Copilot intent and always wins.
+#
+# COPILOT_GITHUB_TOKEN=        # Copilot-scoped PAT (always wins when set)
+# COPILOT_BIN_PATH=            # Optional: path to Copilot CLI binary (binary builds only)
+
 # Pi (community provider — @mariozechner/pi-coding-agent)
 # One adapter, ~20 LLM backends. Archon's Pi adapter picks up credentials
 # you've already configured via the Pi CLI (`pi /login` writes to
@@ -64,7 +76,7 @@ CODEX_ACCOUNT_ID=
 # before the container starts (Pi reads it on each file path lookup).
 # PI_CODING_AGENT_DIR=/.archon/pi
 
-# Default AI Assistant (must match a registered provider, e.g. claude, codex, pi)
+# Default AI Assistant (must match a registered provider, e.g. claude, codex, copilot, pi)
 # Used for new conversations when no codebase specified — errors on unknown values
 DEFAULT_AI_ASSISTANT=claude
 

bun.lock

@@ -99,6 +99,7 @@ const SAFE_ASSISTANT_FIELDS: Record<string, readonly string[]> = {
   // community providers — list each field we're confident is safe to
   // show in the web UI. Unknown providers fall through with no fields.
   pi: ['model'],
+  copilot: ['model'],
 };
 
 function toSafeAssistantDefaults(assistants: AssistantDefaults): SafeConfig['assistants'] {

packages/core/src/config/config-loader.ts

@@ -16,13 +16,15 @@
 import type {
   ClaudeProviderDefaults,
   CodexProviderDefaults,
+  CopilotProviderDefaults,
   PiProviderDefaults,
   ProviderDefaultsMap,
 } from '@archon/providers/types';
 
 export type {
   ClaudeProviderDefaults,
   CodexProviderDefaults,
+  CopilotProviderDefaults,
   PiProviderDefaults,
   ProviderDefaultsMap,
 };