Copilot App: Adding internal Github hosted marketplace opens GitHub device page without displaying authentication code

[paulgravesnewday]

Describe the bug

Adding an internal GitHub plugin marketplace through the Copilot App's Customize > Manage marketplaces UI starts GitHub device authentication and opens https://github.com/login/device, but the Copilot App never displays the device code. The GitHub page therefore asks for a code that the user has no way to obtain, and the marketplace cannot be added.

The user already has access to the internal repository. Authenticated GitHub CLI access to the repository succeeds, while anonymous access returns 404 as expected for an internal repository.

Affected version

GitHub Copilot App / bundled Copilot CLI 1.0.84-5

Steps to reproduce the behavior

1. On macOS, open the GitHub Copilot App.
2. Open Customize.
3. Open Manage marketplaces.
4. Enter the URL of an internal GitHub repository containing a valid .claude-plugin/marketplace.json, for example https://github.com/<organization>/<repository>.
5. Click Add.
6. When prompted, start GitHub authentication.
7. Observe that the browser opens GitHub's device activation page and asks for a code, but no device code is displayed anywhere in the Copilot App UI.

Expected behavior

The Copilot App should prominently display the one-time GitHub device code before or while opening the device activation page, and keep it visible until authentication completes or is cancelled.

Alternatively, marketplace access should reuse an existing authenticated Git credential or GitHub CLI session when available.

Actual behavior

GitHub's device activation page opens and waits for a code, but the Copilot App does not show the code. The flow cannot be completed.

Additional context

• Operating system: macOS
• Repository visibility: internal
• The repository is accessible to the current user and contains a valid marketplace manifest.
• gh repo view <organization>/<repository> succeeds for the same user.
• APM can resolve the same marketplace through the authenticated command-line path.
• This appears related to, but is distinct from, Plugin marketplace clone disables Git credential helpers, breaking private HTTPS repositories #4103: the App now initiates an authentication flow, but its Customize UI does not surface the required device code.
• Screenshots show the marketplace URL entered in Manage marketplaces followed by GitHub's Enter code page with no corresponding code visible in the Copilot App.