github-copilot (Enterprise): first prompt after Location boot sends the Enterprise token to api.githubcopilot.com #62959

Activity

1. opencodejr commented on Nov 9, 2026

   

   opencodejrBot

   on Nov 9, 2026

   More actions

   Thanks for the follow-up and the proxy log, they pinned this down.

   I reproduced it on 2.2.6. The script below:

   • imports a github-copilot OAuth credential with enterpriseUrl and apiEndpoint metadata;
   • points the account endpoint at a local mock that answers /models after a few seconds;
   • routes everything else through a logging proxy that refuses it;
   • sends a prompt with opencode run --standalone on a fresh Location.

   While /models is still loading, the prompt's requests go to api.githubcopilot.com:443, which the proxy refuses. Once the model list has loaded, requests go to the account's own endpoint. It still happens on the latest dev (1830078).

   The cause looks like the one described on #55490. The plugin's initial load runs in the background, and until it finishes, Copilot models fall back to the default api.githubcopilot.com base URL. The credential's own endpoint is already known at that point but isn't used.

   Related:

   • github-copilot: first prompt after idle Location eviction fails with "Provider request failed with HTTP 404" #55490: the original first-prompt-after-idle report. Its closing comment named this Enterprise-endpoint gap.
   • fix(core): await initial Copilot model sync #38204: a closed, unmerged PR that would have made the first request wait for the initial model sync.

   Reproduction script (repro.sh)

   #!/usr/bin/env bash
   # Reproduces anomalyco/opencode#62959: with a GitHub Copilot Enterprise credential, the first prompt after a
   # cold start (fresh Location) goes to the public api.githubcopilot.com with the Enterprise token.
   #
   # Setup:
   #  - an HTTPS proxy (HTTPS_PROXY) logs every CONNECT host and refuses it (stands in for the egress proxy),
   #  - a mock Copilot API on 127.0.0.1 is the account's endpoint (credential metadata.apiEndpoint), and it answers
   #    /models after 8 s, standing in for a slow initial model sync,
   #  - a github-copilot OAuth credential with metadata { enterpriseUrl: "acme.ghe.com", apiEndpoint: <mock> }.
   # Then `opencode run --standalone` boots a fresh Location and sends a prompt immediately.
   #
   # Usage: bash repro.sh            (uses `opencode` from PATH)
   #        OC_CWD=<repo>/packages/cli OC="bun --conditions=browser <repo>/packages/cli/src/index.ts" bash repro.sh   (from source)
   set -u
   OC=${OC:-opencode}
   W=$(mktemp -d /tmp/opencode/repro.XXXX)
   mkdir -p "$W/home" "$W/project"
   export HOME="$W/home" XDG_CONFIG_HOME="$W/home/.config" XDG_DATA_HOME="$W/home/.local/share" \
     XDG_STATE_HOME="$W/home/.local/state" XDG_CACHE_HOME="$W/home/.cache"
   
   cat > "$W/servers.ts" <<'EOF'
   import net from "node:net"
   const log = (s: string) => console.log(new Date().toISOString(), s)
   // HTTPS proxy: log the CONNECT target and the Authorization of plain requests, refuse everything.
   net.createServer((sock) => {
     sock.once("data", (buf) => {
       const line = buf.toString().split("\r\n")[0]
       const host = line.split(" ")[1] ?? ""
       // Let the models.dev catalog through so the github-copilot models exist; refuse every other host.
       if (host.startsWith("models.opencode.ai:") || host.startsWith("models.dev:")) {
         const [h, p] = host.split(":")
         const up = net.connect(Number(p), h, () => {
           sock.write("HTTP/1.1 200 Connection Established\r\n\r\n")
           up.pipe(sock)
           sock.pipe(up)
         })
         up.on("error", () => sock.destroy())
         return
       }
       log(`PROXY BLOCKED ${line}`)
       sock.end("HTTP/1.1 403 Forbidden\r\nContent-Length: 0\r\n\r\n")
     })
   }).listen(18080)
   // Mock enterprise Copilot API (the account's endpoint).
   Bun.serve({
     port: 18081,
     async fetch(req) {
       const url = new URL(req.url)
       log(`MOCK ${req.method} ${url.pathname} auth=${req.headers.get("authorization")}`)
       if (url.pathname.endsWith("/models")) {
         await Bun.sleep(8000)
         return Response.json({ data: [] })
       }
       return new Response("mock enterprise endpoint", { status: 500 })
     },
   })
   log("servers up")
   EOF
   bun "$W/servers.ts" > "$W/servers.log" 2>&1 &
   SRV=$!
   sleep 1
   
   cat > "$W/cred.json" <<'EOF'
   [{"id":"cred_enterprise_repro","integrationID":"github-copilot","label":"acme","active":true,
     "value":{"type":"oauth","methodID":"device","refresh":"gho_ENTERPRISE_TOKEN","access":"gho_ENTERPRISE_TOKEN","expires":0,
     "metadata":{"enterpriseUrl":"acme.ghe.com","apiEndpoint":"http://127.0.0.1:18081"}}}]
   EOF
   
   export HTTPS_PROXY=http://127.0.0.1:18080 https_proxy=http://127.0.0.1:18080 NO_PROXY=127.0.0.1,localhost no_proxy=127.0.0.1,localhost
   cd "${OC_CWD:-$W/project}"   # from source, set OC_CWD=/workspace/repo/packages/cli so its bunfig.toml applies
   $OC auth import --standalone "$W/cred.json"
   echo "--- servers log before the prompt"; cat "$W/servers.log"; : > "$W/servers.log"
   echo "--- opencode run (fresh Location, prompt sent immediately)"
   timeout 60 $OC run --standalone -m github-copilot/claude-opus-5.5 "hello" 2>&1 | tail -15
   sleep 1
   echo "--- servers log during the run"
   cat "$W/servers.log"
   kill $SRV

   Run it: bash repro.sh
2. opencodejr

   added

   reproduced

   severity:high

   on Nov 9, 2026