fix(github): address PR feedback for onboarding flow

- Set competing provider flags to undefined in updateSettingsForSource to ensure clean GitHub boot
- Fix resolveProviderRequest to default to github:copilot when OPENAI_MODEL is unset
- Hydrate secure tokens and managed settings in system-check.ts to prevent false negatives
- Add models:read scope to GitHub device flow

src/commands/onboard-github/onboard-github.tsx

@@ -29,6 +29,11 @@ function mergeUserSettingsEnv(model: string): { ok: boolean; detail?: string } {
     env: {
       CLAUDE_CODE_USE_GITHUB: '1',
       OPENAI_MODEL: model,
+      CLAUDE_CODE_USE_OPENAI: undefined as any,
+      CLAUDE_CODE_USE_GEMINI: undefined as any,
+      CLAUDE_CODE_USE_BEDROCK: undefined as any,
+      CLAUDE_CODE_USE_VERTEX: undefined as any,
+      CLAUDE_CODE_USE_FOUNDRY: undefined as any,
     },
   })
   if (error) {
@@ -49,6 +54,7 @@ function OnboardGithub(props: {
     verification_uri: string
   } | null>(null)
   const [patDraft, setPatDraft] = useState('')
+  const [cursorOffset, setCursorOffset] = useState(0)
 
   const finalize = useCallback(
     async (token: string, model: string = DEFAULT_MODEL) => {
@@ -117,7 +123,7 @@ function OnboardGithub(props: {
         <Text color="red">{errorMsg}</Text>
         <Select
           options={options}
-          onChange={v => {
+          onChange={(v: string) => {
             if (v === 'back') {
               setStep('menu')
               setErrorMsg(null)
@@ -161,7 +167,7 @@ function OnboardGithub(props: {
           value={patDraft}
           mask="*"
           onChange={setPatDraft}
-          onSubmit={async value => {
+          onSubmit={async (value: string) => {
             const t = value.trim()
             if (!t) {
               return
@@ -172,6 +178,9 @@ function OnboardGithub(props: {
             setStep('menu')
             setPatDraft('')
           }}
+          columns={80}
+          cursorOffset={cursorOffset}
+          onChangeCursorOffset={setCursorOffset}
         />
       </Box>
     )
@@ -202,7 +211,7 @@ function OnboardGithub(props: {
       </Text>
       <Select
         options={menuOptions}
-        onChange={v => {
+        onChange={(v: string) => {
           if (v === 'cancel') {
             onDone('GitHub onboard cancelled', { display: 'system' })
             return

src/services/api/providerConfig.ts

@@ -194,11 +194,12 @@ export function resolveProviderRequest(options?: {
   baseUrl?: string
   fallbackModel?: string
 }): ResolvedProviderRequest {
+  const isGithubMode = isEnvTruthy(process.env.CLAUDE_CODE_USE_GITHUB)
   const requestedModel =
     options?.model?.trim() ||
     process.env.OPENAI_MODEL?.trim() ||
     options?.fallbackModel?.trim() ||
-    'gpt-4o'
+    (isGithubMode ? 'github:copilot' : 'gpt-4o')
   const descriptor = parseModelDescriptor(requestedModel)
   const rawBaseUrl =
     options?.baseUrl ??

src/services/github/deviceFlow.ts

@@ -11,7 +11,7 @@ export const GITHUB_DEVICE_ACCESS_TOKEN_URL =
   'https://github.com/login/oauth/access_token'
 
 /** Match runtime devsper github_oauth DEFAULT_SCOPE */
-export const DEFAULT_GITHUB_DEVICE_SCOPE = 'read:user'
+export const DEFAULT_GITHUB_DEVICE_SCOPE = 'read:user,models:read'
 
 export class GitHubDeviceFlowError extends Error {
   constructor(message: string) {