feat: Add GitHub Copilot as an AI provider with device flow authentication

docs/docs/waveai-modes.mdx

@@ -37,6 +37,7 @@ Wave AI now supports provider-based configuration which automatically applies se
 - **`google`** - Google AI (Gemini) [[see example](#google-ai-gemini)]
 - **`azure`** - Azure OpenAI Service (modern API) [[see example](#azure-openai-modern-api)]
 - **`azure-legacy`** - Azure OpenAI Service (legacy deployment API) [[see example](#azure-openai-legacy-deployment-api)]
+- **`github-copilot`** - GitHub Copilot (authenticates via device flow, auto-creates modes) [[see example](#github-copilot)]
 - **`custom`** - Custom API endpoint (fully manual configuration) [[see examples](#local-model-examples)]
 
 ### Supported API Types
@@ -46,6 +47,7 @@ Wave AI supports the following API types:
 - **`openai-chat`**: Uses the `/v1/chat/completions` endpoint (most common)
 - **`openai-responses`**: Uses the `/v1/responses` endpoint (modern API for GPT-5+ models)
 - **`google-gemini`**: Google's Gemini API format (automatically set when using `ai:provider: "google"`, not typically used directly)
+- **`github-copilot`**: GitHub Copilot API (automatically set when using `ai:provider: "github-copilot"`, not typically used directly)
 
 ## Global Wave AI Settings
 
@@ -336,6 +338,55 @@ The provider automatically constructs the full endpoint URL and sets the API ver
 For Azure Legacy provider, you must manually specify `ai:capabilities` based on your model's features.
 :::
 
+### GitHub Copilot
+
+[GitHub Copilot](https://github.com/features/copilot) is available to users with a GitHub Copilot subscription. Unlike other providers, Copilot uses **GitHub's device authorization flow** instead of an API key — no manual key configuration is needed.
+
+#### Quick Setup
+
+1. Open the AI mode dropdown in Wave
+2. Click **"Login to GitHub Copilot"**
+3. A device code is copied to your clipboard and GitHub opens in your browser
+4. Paste the code on GitHub and authorize Wave Terminal
+5. Copilot modes are automatically created for all models your subscription supports
+
+After login, copilot modes (e.g., `copilot/gpt-4o`, `copilot/gpt-4.1`, `copilot/claude-3.7-sonnet`) appear in the dropdown and in your `waveai.json`.
+
+#### How It Works
+
+Authentication is handled automatically:
+- Your GitHub token is stored securely in Wave's [secret store](./secrets.mdx) as `GITHUB_COPILOT_TOKEN`
+- Wave exchanges this for a short-lived Copilot API token on each request
+- Available models are discovered automatically from the Copilot API based on your subscription
+
+#### Auto-Generated Configuration
+
+After login, Wave creates mode entries like this in `waveai.json`:
+
+```json
+{
+  "copilot/gpt-4o": {
+    "display:name": "Copilot gpt-4o",
+    "display:order": 10,
+    "display:icon": "github",
+    "display:description": "GitHub Copilot (gpt-4o)",
+    "ai:provider": "github-copilot",
+    "ai:model": "gpt-4o",
+    "ai:capabilities": ["tools", "images"]
+  }
+}
+```
+
+You can customize these entries (change display names, order, etc.) just like any other mode.
+
+#### Logging Out
+
+To disconnect your GitHub Copilot account, click the **"Logout"** button next to "Copilot Connected" in the AI mode dropdown. This deletes the stored token. You can log in again at any time.
+
+:::note
+The available models depend on your Copilot subscription tier. Common models include `gpt-4o`, `gpt-4.1`, `gpt-4.1-mini`, `gpt-4.1-nano`, `o3-mini`, `claude-3.5-sonnet`, `claude-3.7-sonnet`, and `gemini-2.0-flash-001`.
+:::
+
 ## Using Secrets for API Keys
 
 Instead of storing API keys directly in the configuration, you should use Wave's secret store to keep your credentials secure. Secrets are stored encrypted using your system's native keychain.
@@ -473,7 +524,7 @@ If you get "model not found" errors:
 | `display:order` | No | Sort order in the selector (lower numbers first) |
 | `display:icon` | No | Icon identifier for the mode (can use any [FontAwesome icon](https://fontawesome.com/search), use the name without the "fa-" prefix).  Default is "sparkles" |
 | `display:description` | No | Full description of the mode |
-| `ai:provider` | No | Provider preset: `openai`, `openrouter`, `google`, `azure`, `azure-legacy`, `custom` |
+| `ai:provider` | No | Provider preset: `openai`, `openrouter`, `google`, `azure`, `azure-legacy`, `github-copilot`, `custom` |
 | `ai:apitype` | No | API type: `openai-chat`, `openai-responses`, or `google-gemini` (defaults to `openai-chat` if not specified) |
 | `ai:model` | No | Model identifier (required for most providers) |
 | `ai:thinkinglevel` | No | Thinking level: `low`, `medium`, or `high` |

frontend/app/aipanel/aimode.tsx

@@ -2,12 +2,12 @@
 // SPDX-License-Identifier: Apache-2.0
 
 import { Tooltip } from "@/app/element/tooltip";
-import { atoms, getSettingsKeyAtom } from "@/app/store/global";
+import { atoms, getApi, getSettingsKeyAtom } from "@/app/store/global";
 import { RpcApi } from "@/app/store/wshclientapi";
 import { TabRpcClient } from "@/app/store/wshrpcutil";
 import { cn, fireAndForget, makeIconClass } from "@/util/util";
 import { useAtomValue } from "jotai";
-import { memo, useRef, useState } from "react";
+import { memo, useCallback, useEffect, useRef, useState } from "react";
 import { getFilteredAIModeConfigs, getModeDisplayName } from "./ai-utils";
 import { WaveAIModel } from "./waveai-model";
 
@@ -147,6 +147,91 @@ export const AIModeDropdown = memo(({ compatibilityMode = false }: AIModeDropdow
     const telemetryEnabled = useAtomValue(getSettingsKeyAtom("telemetry:enabled")) ?? false;
     const [isOpen, setIsOpen] = useState(false);
     const dropdownRef = useRef<HTMLDivElement>(null);
+    const copilotLoginAbortRef = useRef<AbortController | null>(null);
+    const [copilotLoggedIn, setCopilotLoggedIn] = useState(false);
+    const [copilotLoginState, setCopilotLoginState] = useState<
+        | { status: "idle" }
+        | { status: "waiting"; userCode: string; verificationUri: string }
+        | { status: "polling" }
+        | { status: "complete" }
+        | { status: "error"; message: string }
+    >({ status: "idle" });
+
+    // Check Copilot login status on mount and when dropdown opens
+    useEffect(() => {
+        fireAndForget(async () => {
+            try {
+                const status = await RpcApi.CopilotDeviceLoginStatusCommand(TabRpcClient);
+                setCopilotLoggedIn(status.loggedin);
+            } catch {
+                // ignore errors
+            }
+        });
+    }, [isOpen]);
+
+    const handleCopilotLogin = useCallback(() => {
+        const abortController = new AbortController();
+        copilotLoginAbortRef.current = abortController;
+        fireAndForget(async () => {
+            setCopilotLoginState({ status: "polling" });
+            try {
+                const startData = await RpcApi.CopilotDeviceLoginStartCommand(TabRpcClient);
+                if (abortController.signal.aborted) return;
+                setCopilotLoginState({
+                    status: "waiting",
+                    userCode: startData.usercode,
+                    verificationUri: startData.verificationuri,
+                });
+                // Copy code to clipboard and open browser
+                await navigator.clipboard.writeText(startData.usercode);
+                getApi().openExternal(startData.verificationuri);
+                // Now poll for completion
+                const pollResult = await RpcApi.CopilotDeviceLoginPollCommand(TabRpcClient, {}, { timeout: 15 * 60 * 1000 });
+                if (abortController.signal.aborted) return;
+                if (pollResult.status === "complete") {
+                    setCopilotLoginState({ status: "complete" });
+                    setCopilotLoggedIn(true);
+                    // Auto-switch to the copilot mode if one was created
+                    if (pollResult.modename) {
+                        // Wait briefly for config watcher to pick up the new mode
+                        setTimeout(() => {
+                            model.setAIMode(pollResult.modename);
+                        }, 500);
+                    }
+                    setTimeout(() => setCopilotLoginState({ status: "idle" }), 3000);
+                } else {
+                    setCopilotLoginState({
+                        status: "error",
+                        message: pollResult.error || "Login failed",
+                    });
+                    setTimeout(() => setCopilotLoginState({ status: "idle" }), 5000);
+                }
+            } catch (e: any) {
+                if (abortController.signal.aborted) return;
+                setCopilotLoginState({ status: "error", message: e.message || "Login failed" });
+                setTimeout(() => setCopilotLoginState({ status: "idle" }), 5000);
+            }
+        });
+    }, []);
+
+    const handleCopilotLoginCancel = useCallback(() => {
+        if (copilotLoginAbortRef.current) {
+            copilotLoginAbortRef.current.abort();
+            copilotLoginAbortRef.current = null;
+        }
+        setCopilotLoginState({ status: "idle" });
+    }, []);
+
+    const handleCopilotLogout = useCallback(() => {
+        fireAndForget(async () => {
+            try {
+                await RpcApi.CopilotDeviceLogoutCommand(TabRpcClient);
+                setCopilotLoggedIn(false);
+            } catch (e: any) {
+                console.error("Failed to logout from Copilot:", e);
+            }
+        });
+    }, []);
 
     const { waveProviderConfigs, otherProviderConfigs } = getFilteredAIModeConfigs(
         aiModeConfigs,
@@ -312,6 +397,72 @@ export const AIModeDropdown = memo(({ compatibilityMode = false }: AIModeDropdow
                             <i className={makeIconClass("plus", false)}></i>
                             <span className="text-sm">New Chat</span>
                         </button>
+                        <div className="border-t border-gray-600 my-1" />
+                        {copilotLoginState.status === "idle" && !copilotLoggedIn && (
+                            <button
+                                onClick={handleCopilotLogin}
+                                className="w-full flex items-center gap-2 px-3 pt-1 pb-1 text-gray-300 hover:bg-zinc-700 cursor-pointer transition-colors text-left"
+                            >
+                                <i className="fa-brands fa-github text-[12px]"></i>
+                                <span className="text-sm">Login to GitHub Copilot</span>
+                            </button>
+                        )}
+                        {copilotLoginState.status === "idle" && copilotLoggedIn && (
+                            <div className="w-full flex items-center justify-between px-3 pt-1 pb-1 text-left">
+                                <div className="flex items-center gap-2 text-green-400">
+                                    <i className="fa-brands fa-github text-[12px]"></i>
+                                    <span className="text-sm">Copilot Connected</span>
+                                </div>
+                                <button
+                                    onClick={handleCopilotLogout}
+                                    className="text-[11px] text-gray-500 hover:text-red-400 cursor-pointer transition-colors"
+                                >
+                                    Logout
+                                </button>
+                            </div>
+                        )}
+                        {copilotLoginState.status === "polling" && (
+                            <div className="w-full flex items-center gap-2 px-3 pt-1 pb-1 text-gray-400 text-left">
+                                <i className="fa fa-spinner fa-spin text-[12px]"></i>
+                                <span className="text-sm">Starting login...</span>
+                            </div>
+                        )}
+                        {copilotLoginState.status === "waiting" && (
+                            <div className="w-full flex flex-col gap-1 px-3 pt-1 pb-1 text-left">
+                                <div className="flex items-center gap-2 text-green-300">
+                                    <i className="fa fa-key text-[12px]"></i>
+                                    <span className="text-sm font-bold">{copilotLoginState.userCode}</span>
+                                </div>
+                                <div className="text-[11px] text-gray-400">
+                                    Code copied! Paste it on GitHub.
+                                </div>
+                                <div className="flex items-center justify-between text-gray-400">
+                                    <div className="flex items-center gap-2">
+                                        <i className="fa fa-spinner fa-spin text-[10px]"></i>
+                                        <span className="text-[11px]">Waiting for authorization...</span>
+                                    </div>
+                                    <button
+                                        onClick={handleCopilotLoginCancel}
+                                        className="text-[11px] text-red-400 hover:text-red-300 cursor-pointer transition-colors"
+                                    >
+                                        Cancel
+                                    </button>
+                                </div>
+                            </div>
+                        )}
+                        {copilotLoginState.status === "complete" && (
+                            <div className="w-full flex items-center gap-2 px-3 pt-1 pb-1 text-green-400 text-left">
+                                <i className="fa fa-check text-[12px]"></i>
+                                <span className="text-sm">Logged in to GitHub Copilot!</span>
+                            </div>
+                        )}
+                        {copilotLoginState.status === "error" && (
+                            <div className="w-full flex items-center gap-2 px-3 pt-1 pb-1 text-red-400 text-left">
+                                <i className="fa fa-triangle-exclamation text-[12px]"></i>
+                                <span className="text-sm">{copilotLoginState.message}</span>
+                            </div>
+                        )}
+                        <div className="border-t border-gray-600 my-1" />
                         <button
                             onClick={handleConfigureClick}
                             className="w-full flex items-center gap-2 px-3 pt-1 pb-2 text-gray-300 hover:bg-zinc-700 cursor-pointer transition-colors text-left"

frontend/app/store/wshclientapi.ts

@@ -137,6 +137,26 @@ class RpcApiType {
         return client.wshRpcCall("controllerresync", data, opts);
     }
 
+    // command "copilotdeviceloginpoll" [call]
+    CopilotDeviceLoginPollCommand(client: WshClient, data: CopilotDeviceLoginPollData, opts?: RpcOpts): Promise<CopilotDeviceLoginPollRtnData> {
+        return client.wshRpcCall("copilotdeviceloginpoll", data, opts);
+    }
+
+    // command "copilotdeviceloginstart" [call]
+    CopilotDeviceLoginStartCommand(client: WshClient, opts?: RpcOpts): Promise<CopilotDeviceLoginStartRtnData> {
+        return client.wshRpcCall("copilotdeviceloginstart", null, opts);
+    }
+
+    // command "copilotdeviceloginstatus" [call]
+    CopilotDeviceLoginStatusCommand(client: WshClient, opts?: RpcOpts): Promise<CopilotDeviceLoginStatusRtnData> {
+        return client.wshRpcCall("copilotdeviceloginstatus", null, opts);
+    }
+
+    // command "copilotdevicelogout" [call]
+    CopilotDeviceLogoutCommand(client: WshClient, opts?: RpcOpts): Promise<void> {
+        return client.wshRpcCall("copilotdevicelogout", null, opts);
+    }
+
     // command "createblock" [call]
     CreateBlockCommand(client: WshClient, data: CommandCreateBlockData, opts?: RpcOpts): Promise<ORef> {
         return client.wshRpcCall("createblock", data, opts);

frontend/types/gotypes.d.ts

@@ -800,6 +800,30 @@ declare global {
         keepalivesenttime?: number;
     };
 
+    // wshrpc.CopilotDeviceLoginPollData
+    type CopilotDeviceLoginPollData = {
+    };
+
+    // wshrpc.CopilotDeviceLoginPollRtnData
+    type CopilotDeviceLoginPollRtnData = {
+        status: string;
+        error?: string;
+        modename?: string;
+    };
+
+    // wshrpc.CopilotDeviceLoginStartRtnData
+    type CopilotDeviceLoginStartRtnData = {
+        usercode: string;
+        verificationuri: string;
+        expiresin: number;
+    };
+
+    // wshrpc.CopilotDeviceLoginStatusRtnData
+    type CopilotDeviceLoginStatusRtnData = {
+        loggedin: boolean;
+        error?: string;
+    };
+
     // wshrpc.CpuDataRequest
     type CpuDataRequest = {
         id: string;