).rejects.toThrow("Copilot token response has invalid expires_at");

});

it("cancels Copilot token exchange error bodies", async () => {

vi.resetModules();

const response = new Response("bad credentials", { status: 401 });

const cancel = vi.spyOn(response.body!, "cancel").mockResolvedValue(undefined);

const fetchImpl = vi.fn(async () => response);

const { resolveCopilotApiToken } = await import("./provider-auth.js");

await expect(

resolveCopilotApiToken({

githubToken: "github-token",

fetchImpl,

cachePath: "/tmp/copilot-token.json",

loadJsonFileImpl: () => undefined,

saveJsonFileImpl: () => {

throw new Error("should not save failed token");

},

}),

).rejects.toThrow("Copilot token exchange failed: HTTP 401");

expect(cancel).toHaveBeenCalledOnce();

});

it("refreshes cached Copilot tokens with out-of-range expiry values", async () => {

vi.resetModules();

return { token, expiresAt: expiresAtMs };

}

async function cancelUnreadResponseBody(response: Response): Promise<void> {

if (!response.bodyUsed) {

await response.body?.cancel().catch(() => undefined);

}

}

function resolveCopilotProxyHost(proxyEp: string): string | null {

const trimmed = proxyEp.trim();

if (!trimmed) {

});

if (!res.ok) {

await cancelUnreadResponseBody(res);

throw new Error(`Copilot token exchange failed: HTTP ${res.status}`);

}