applyLocalNoAuthHeaderOverride: hoisted.applyLocalNoAuthHeaderOverrideMock,

}));

vi.mock("./github-copilot-token.js", () => ({

vi.mock("../plugin-sdk/provider-auth.js", () => ({

resolveCopilotApiToken: hoisted.resolveCopilotApiTokenMock,

}));

profileId?: string;

}): Promise<CompletionRuntimeCredential> {

if (params.model.provider === "github-copilot") {

const { resolveCopilotApiToken } = await import("./github-copilot-token.js");

const { resolveCopilotApiToken } = await import("../plugin-sdk/provider-auth.js");

const copilotToken = await resolveCopilotApiToken({

githubToken: params.apiKey,

});

token: "token;proxy-ep=proxy.individual.githubcopilot.com",

}),

]);

const [, init] = fetchImpl.mock.calls[0] as unknown as [string, RequestInit];

expect(init.headers).toEqual(

expect.objectContaining({

Accept: "application/json",

Authorization: "Bearer github-token",

"Copilot-Integration-Id": "vscode-chat",

}),

);

});

it("rejects malformed Copilot proxy hints", async () => {

vi.resetModules();

const { deriveCopilotApiBaseUrlFromToken } = await import("./provider-auth.js");

expect(

deriveCopilotApiBaseUrlFromToken("copilot-token;proxy-ep=javascript:alert(1);"),

).toBeNull();

expect(deriveCopilotApiBaseUrlFromToken("copilot-token;proxy-ep=://bad;")).toBeNull();

});

it("rejects Copilot token expiry values outside the supported date range", async () => {