Add preconfigured Copilot PAT onboarding in gh aw add-wizard

[Copilot]

add-wizard now supports a lower-friction Copilot auth setup when org billing is unavailable: it guides users to a prefilled fine-grained PAT page, accepts token input securely, and preserves strict token-format validation before storing COPILOT_GITHUB_TOKEN. It also keeps the org-billing path unchanged when copilot-requests auth is available.

• Copilot PAT flow hardening

  • Added a dedicated preconfigured PAT creation URL generator for Copilot with:
    • token name prefilled to COPILOT_GITHUB_TOKEN
    • only Copilot Requests read permission requested
  • Keeps masked token entry (EchoModePassword) and existing github_pat_ validation semantics.

• Advance-consent UX

  • Added an explicit “open browser now?” consent gate before attempting to launch the preconfigured PAT page.
  • If accepted, setup continues directly to token paste input without another confirmation gate.
  • If browser launch is unavailable, the wizard falls back to a manual URL path with clear guidance.

• Docs and contract coverage

  • Updated CLI setup docs to reflect the new preconfigured PAT onboarding path.
  • Added focused unit coverage for the Copilot PAT URL contract (expected path/params, no unrelated permission params).

func buildCopilotPATCreationURL() string {
	const baseURL = "https://github.com/settings/personal-access-tokens/new"
	values := url.Values{}
	values.Set("name", constants.CopilotGitHubToken)
	values.Set("user_copilot_requests", "read")
	return baseURL + "?" + values.Encode()
}

---

Generated by 👨‍🍳 PR Sous Chef · 26.2 AIC · ⌖ 8.22 AIC · ⊞ 7.5K · ◷
_{Comment /souschef to run again}

[github-actions]

🤖 PR Triage

Field	Value
Category	feature
Risk	🟢 Low
Score	18 (impact 10 + urgency 3 + quality 5)
Action	defer

Rationale: DRAFT WIP — only 1 file changed (+7/-2) with a checklist; implementation not yet started. Defer until author completes the work and removes draft status.

Generated by 🔧 PR Triage Agent · 32.8 AIC · ⌖ 4.9 AIC · ⊞ 5.6K · ◷

[mnkiefer]

@copilot Revert changes to .github/workflows/cli-consistency-checker.lock.yml as they are unrelated to this PR.

[Copilot]

@copilot Revert changes to .github/workflows/cli-consistency-checker.lock.yml as they are unrelated to this PR.

Addressed in b1f3036.

[github-actions]

Hey @copilot-swe-agent 👋 — great work on the lower-friction Copilot auth setup in add-wizard! The preconfigured PAT URL generator with the consent gate is a clean UX improvement, and the changes are well-scoped across engine_secrets.go, its test file, and the docs update.

This PR looks ready for review — it's focused, includes tests, has a clear description, and adds no new dependencies. Nothing blocking here. ✅

Generated by ✅ Contribution Check · 100.5 AIC · ⌖ 8.71 AIC · ⊞ 6.2K · ◷

[Copilot]

Pull request overview

Adds preconfigured Copilot PAT onboarding to add-wizard, alongside several unrelated Git/PR and tooling changes.

Changes:

• Adds PAT URL generation, browser launch, validation, and secret replacement.
• Updates Copilot billing behavior, tests, and documentation.
• Changes PR branch handling and refreshes Serena configuration.

Show a summary per file

File	Description
pkg/cli/pr_helpers.go	Simplifies push error propagation.
pkg/cli/git.go	Reuses existing local branches.
pkg/cli/git_test.go	Tests branch reuse.
pkg/cli/engine_secrets.go	Implements Copilot PAT onboarding and replacement.
pkg/cli/engine_secrets_test.go	Tests PAT URL construction.
pkg/cli/copilot_billing_check.go	Treats unknown billing states as inconclusive.
pkg/cli/copilot_billing_check_test.go	Updates billing-state expectations.
pkg/cli/bootstrap_profile_runner.go	Removes browser-disable override.
pkg/cli/bootstrap_profile_runner_test.go	Expects browser opening to remain enabled.
pkg/cli/add_workflow_pr.go	Filters existing workflows before PR creation.
pkg/cli/add_workflow_pr_test.go	Tests workflow filtering and tracking.
pkg/cli/add_interactive_git.go	Handles no-PR results.
pkg/cli/add_interactive_engine.go	Explicitly selects PAT by default.
docs/src/content/docs/setup/cli.md	Documents PAT onboarding.
docs/src/content/docs/reference/glossary.md	Updates token glossary entry.
.serena/project.yml	Refreshes Serena configuration.

Review details

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

• Files reviewed: 16/16 changed files
• Comments generated: 6
• Review effort level: Medium

[mnkiefer]

@copilot Address all open review comments and run the pr-finisher skill.

[gh-aw-bot]

@copilot please run the pr-finisher skill, address the unresolved review feedback below, fix the failing checks, and rerun CI once the branch is up to date.

Unresolved review threads:

• Copilot reviewer: add an explicit consent gate before opening the preconfigured PAT browser page: Add preconfigured Copilot PAT onboarding in gh aw add-wizard #45987 (comment)
• Copilot reviewer: do not silently reuse an existing branch in createAndSwitchBranch; preserve fail-on-existing or generate a fresh branch: Add preconfigured Copilot PAT onboarding in gh aw add-wizard #45987 (comment)
• Copilot reviewer: restore the GH_AW_BOOTSTRAP_NO_OPEN_BROWSER override for headless flows: Add preconfigured Copilot PAT onboarding in gh aw add-wizard #45987 (comment)
• Copilot reviewer: align the prefilled PAT name parameter with the documented COPILOT_GITHUB_TOKEN contract or update the docs/description: Add preconfigured Copilot PAT onboarding in gh aw add-wizard #45987 (comment)
• Copilot reviewer: add focused tests for revalidating and overwriting an existing Copilot secret: Add preconfigured Copilot PAT onboarding in gh aw add-wizard #45987 (comment)
• Copilot reviewer: split or justify the unrelated --create-pull-request behavior change: Add preconfigured Copilot PAT onboarding in gh aw add-wizard #45987 (comment)

Failed checks:

• agent: https://github.com/github/gh-aw/actions/runs/29507770872/job/87653605798
• lint-go: https://github.com/github/gh-aw/actions/runs/29507770789/job/87652920556

Generated by 👨🍳 PR Sous Chef
_{Comment /souschef to run again}

Generated by 👨‍🍳 PR Sous Chef · 26.2 AIC · ⌖ 8.22 AIC · ⊞ 7.5K · ◷
_{Comment /souschef to run again}

[github-actions]

🎉 This pull request is included in a new release.

Release: v0.82.11