TylerLeonhardt

Ask the agent SDK about setup instead of guessing from the filesystem (#331739) * Ask the agent SDK about setup instead of guessing from the filesystem A developer who pays for Claude directly hit a GitHub Copilot sign-in wall, because session-type availability was inferred by sniffing for config files on disk. That guess was wrong in both directions: it gated users who had a working account, and it advertised agents to users who had none. Replace the inference with what the agent's own SDK reports, and make the SDK download an explicit choice rather than something that happens on startup. - Agents publish an SDK setup status (`notDownloaded` / `downloading` / `ready`) over the root config channel, plus the capabilities they offer for getting an account. The workbench derives "no account" from `ready` + zero models, so there is a single wire source per fact. - Agents declare capabilities only; every user-facing string is localized in the workbench via `vs/nls`. - The download is offered by a banner and performed on request. Consent is recorded per agent, so a later version bump re-downloads silently for that agent while a different agent still asks. - Background fetches stay invisible: only the explicit gesture registers download progress interest. - `AgentSdkSetupChannel` holds the nonce handling, in-flight latch and publish ordering once, so Claude and Codex differ only in their capability literals. Removes the filesystem-sniffing paths this replaces: `codexLocalAuth` and the "we discovered your existing configuration" notification, which asked users to sign in again after they had already declined the sign-in modal. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> * Fix two setup-status races found in review Publish the SDK download status *after* the model catalog on both agents. Publishing `ready` at the top of `_refreshModels` meant the first refresh after a download announced "the SDK is here" while `_models` was still empty -- and `ready` plus zero models is exactly how the window renders "no account found". The invariant was already documented in the setup channel's own `_download()`; the refresh path contradicted it. Re-bind `AgentSdkSetupService` to root state on `onAgentHostStart`. `rootState` is a getter over a protocol client the host replaces on every restart and reconnect, so the single constructor-time subscription went quietly stale -- and because the service is `Delayed`, constructing before the connection bound the no-op state forever. Pending download requests are cleared on re-bind too: a request the previous host never answered never will be, so the Download button comes back rather than staying suppressed. Both fixes carry regression tests that were verified to fail without them. Also corrects the `explicitlyRequested` telemetry doc, which claimed to carry a click-vs-standing-consent split it does not have, and states the banner's ambient-host scope in `agentSdkSetupSessionType`. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> --------- Co-authored-by: Claude Opus 5 <noreply@anthropic.com>

authentication: Add GitHub session issuer provenance (#337846) * authentication: Add GitHub session issuer provenance Expose optional session authorizationServer metadata through authIssuers and authentication RPCs, populate it for GitHub sessions, and route in-repository consumers from the selected session. Keep existing single-host configuration and account-selection behavior. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * authentication: Preserve public static-token MCP sessions Keep issuer validation on the enterprise MCP path and preserve the fixed public endpoint for static-token authentication. Cover definition creation and resolution using StaticGitHubAuthenticationService. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * i18n: Register workbench GitHub service translations Register the service's new localized authentication error with the workbench translation project so the CI translation-reminder rule passes. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --------- Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Conditional agent-window auth for signed-out users (#328990) * Conditional agent-window auth for signed-out users Behind the experimentation setting `chat.agentHost.allowSignedOutWhenUsable` (default off), the Agents window no longer unconditionally forces GitHub sign-in. When the user is signed out and some registered session type can run on its own credentials — Claude in native mode with an existing local setup — the window opens and a calm chat-input notification explains what happened, offering sign-in for anyone who meant to use a Copilot subscription. Whether a type requires GitHub is derived from the agent's advertised protected resources rather than a static flag, and surfaces on the provider-agnostic `ISessionType.authRequirement` as `none | github | unusable`. The third state is load-bearing: a Claude pinned to native by an explicit `claudeUseCopilotProxy: false` with no credentials advertises the Copilot resource as `required: false`, so a boolean would report it usable. Its model catalog is what distinguishes it, which is why Claude now publishes an empty catalog in that case instead of the SDK's static `supportedModels()` list. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Address PR feedback: startup race, provider identity, storage target - The window gate's inputs resolve asynchronously (the agent host advertises Claude at `AfterRestored`), but the only subscription was installed after setup completed. A signed-out startup could therefore show the non-dismissible sign-in modal and never reconsider. The subscription is now lifetime-scoped and retires an open modal when the answer flips to usable. - `getAllSessionTypes()` deduplicates by id (first provider wins), so a usable type from a second provider was invisible to the gate. Added `getAllProviderSessionTypes()` and used it for the gate and the notification lookup; the signed-out session-type fallback now matches on provider too. - "Don't Show Again" used `StorageTarget.USER`, which settings sync carries across machines, contradicting the intended machine-local scope. Now `StorageTarget.MACHINE`. Also fixes two claudeAgent tests that asserted native enumeration without a credential present, and adds coverage for the empty-catalog case. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --------- Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Add "Continue with Microsoft" sign in for GitHub (#332948) * Add "Continue with Microsoft" sign in for GitHub Brokers a GitHub session from an Entra token the built-in `microsoft` provider already holds, so someone signed in to Microsoft can reach Copilot without a second browser round trip. The flow is deliberately two exchanges. The first buys a `read:user` discovery token, just enough to `GET /user` and show which GitHub account the Entra identity maps to. Nothing is published until the user confirms that identity. The second exchange then mints the scopes the caller actually asked for. The discovery token is never persisted and never published as a session. Entra-brokered sessions live in memory for the life of the window and are never written to the Keychain. What survives a reload is the user's consent, recorded in global state as a GitHub label, a Microsoft label, and the GitHub user id. A fresh window mints the session again from that row, silently, re-verifying through discovery that the row still points at the same account. Rows are keyed by GitHub account label, because that is what VS Code itself keys an account by: `getAccounts` collapses sessions by label and the account preference is stored by label. The id is kept for one job only, checking that the token GitHub just returned belongs to the account the row names. Signing out of the Microsoft account drops the sessions, since nothing can renew them, but leaves the rows alone. The Microsoft account list is a per-window cache that reads empty for a moment while it repopulates, and the rows are global state shared by every window, so acting on a blink of that list would sign the user out everywhere with no way back. Dropping only the sessions self-heals: the next read mints them again from the row that is still there. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> * Fix CI: hygiene warnings and a missing test stub The hygiene job fails on eslint warnings, and both warnings were in entraTokenExchange.test.ts: an `in` operator check and a double-quoted string outside of localization. The harness override is now a positive `noExchangeEndpoint` boolean, and the assertion uses single quotes. The browser test broke because main added @INativeManagedSettingsService to the DefaultAccountProvider constructor. The signIn helper now stubs both managed-settings services with their existing Null implementations. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> * Address review comments on Microsoft-brokered sessions Verify the granted token against the account the user confirmed, not just the discovery token, and give that mismatch its own failure kind so a restore only forgets a link when GitHub positively names somebody else. Make a failed unlink write stick for the window that did it, so a sign out cannot leave a row behind that silently signs the user back in. Discard a token whose Microsoft account was signed out while the exchange was in flight, settle every expired session rather than only those with nothing to hand back, and warn when GitHub grants fewer scopes than asked. Adds a provider-level test suite driven through the real getSessions. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> --------- Co-authored-by: Claude Opus 5 <noreply@anthropic.com>

agentHost: Claude per-session provider selection (#329331) * agentHost: add provider-qualified Claude model-selection id codec Pure precursor for per-session provider selection in the Claude harness. Mirrors Codex's `@provider=` convention: toClaudeModelSelectionId encodes a provider + model id into one opaque ModelSelection.id; parseClaudeModelSelection splits it back, with a bare/malformed/legacy id defaulting to the Copilot (proxy) provider so nothing needs a data migration. claudeTransportForProvider maps the token to a transport (anthropic -> native, everything else -> proxy). Dead code until the merged-catalog + per-session routing core wires it in; landed first because it's a leaf with zero behavioral risk. Fully unit-tested with no mocks, mirroring codexModelSelection.test.ts. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> * agentHost: add merged-catalog + per-session transport resolvers for Claude Two pure precursors for per-session provider selection, co-located with the model-selection id codec and covered by the same test suite: - mergeClaudeModelCatalogs(proxy, native): flattens the two provider catalogs into one picker list, proxy-first (preserving models[0]-is-default), each id provider-qualified so a row carries its transport and the same model under both providers yields two non-colliding rows. Either side may be empty so one source failing to fetch never blanks the other. - resolveClaudeSessionTransport({ perSessionProviderEnabled, model, defaultMode }): the per-session counterpart to the host-global resolver — off, or no model, inherits the host default (identical to today); on, the selected model's provider decides. Both are dead code until the flag-gated wiring lands; kept as a separately reviewable, fully-tested unit. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> * agentHost: wire Claude per-session provider flag into the backend read-path Slice 2a (flag plumbing) + 2b (backend read-path) of per-session provider selection for the Claude agent host, gated behind the off-by-default experimentation flag `chat.agentHost.claude.perSessionProvider`. Flag plumbing (2a): register the boolean setting (APPLICATION scope, experimental/advanced), its customization-config key, and the forwarder contribution. Backend read-path (2b): ClaudeAgent merges the proxy (Copilot-CAPI) and native (Anthropic) model catalogs into one provider-qualified picker list, and resolves each session's transport from its selected model's provider when the flag is on (inheriting the host default when off, or when no model is selected). Review fixes folded in: - A: gate the constructor / hydration model-refresh on the flag so the native catalog bootstraps signed-out without a manual refresh. - B: _resolveParentSession inherits a never-materialized parent's provisional model so a forked peer chat keeps its native transport. - C: a runtime flag toggle re-enumerates and repopulates the merged catalog. - D: a failing proxy start no longer fails native-default sign-in. - E: toClaudeSdkModelId strips the `@provider=` qualification before the SDK / CAPI boundary — the wrapper is unparseable downstream and would 400 both transports whenever the flag is on and a model is explicitly selected. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> * agentHost: guard Claude model refresh against a mid-flight per-session provider toggle The refresh stale-write guards captured only the transport token/mode, not the per-session provider flag. Because `_startModelRefresh` supersedes an in-flight refresh as the coalescing target but never cancels it, a false-flip of the flag mid-refresh left the superseded refresh running; when it settled it published a stale wrong-mode catalog (merged provider-qualified over the bare single-transport list the flag-off refresh had already published, or vice versa), clobbering the correct one. Capture `_perSessionProviderEnabled` at the start of both `_refreshModelsSingle` and `_refreshModelsMerged` and bail in the stale-write guard when it moved, so the superseded refresh drops its result. Tests: a flag-on→off toggle mid-merge (native half parked on a gate so the merged refresh is provably still in-flight) asserts the bare single catalog survives the straggler; and a flag-off regression that a forked peer chat still inherits its never-materialized parent's explicit model (the inheritance in `_resolveParentSession` is intentionally not flag-gated). Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> * agentHost: group Claude models by transport provider in the picker With per-session provider selection on, the merged catalog now stamps each model's `provider` with its transport token (`copilot` for the Copilot-CAPI proxy, `anthropic` for the user's own Anthropic account) alongside the provider-qualified id, so the chat model picker — which buckets by `provider` — splits Claude into a Copilot group and an Anthropic group. The same model offered by both transports yields two distinct, separately selectable rows. - common/claudeProviders.ts (new): the two transport-provider tokens live in one `common` module so the backend that stamps `model.provider` and the frontend vendor descriptor that names the group are a single, compile-checked source of truth rather than two literals that can drift. - claudeModelSelection.ts: `withQualifiedProvider` re-stamps each model's `provider` with its transport token; re-exports the tokens for node callers. - agentHostChatContribution.ts: register the `anthropic` group vendor (localized "Anthropic"), mirroring the Codex `chatgpt` second-vendor registration, so the native group resolves a clean label. Copilot-routed Claude models keep grouping under the global `copilot` vendor. Dormant while the flag is off — no Claude model carries the `anthropic` provider then. - claudeAgent.ts: correct the stale `toAgentModelInfo` doc — the picker *groups* (does not filter) by `provider`. Flag-off path is unchanged: the single-catalog refresh still stamps the harness provider and no second vendor is registered. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> * agentHost: live per-session provider switching, unconditional Complete the Claude per-session provider feature. Switching a live session's model to one on a different transport now re-routes the running subprocess, and the feature ships unconditionally (no experimental flag). Live provider switch: - Refactor IMaterializeContext.transport into a resolveTransport callback so the transport is re-resolved inside materialize and on every rebuild — a provider switch re-routes the rebuilt subprocess onto the new transport. - A cross-transport model change defers via a pending-switch flag; the next send() rebuilds onto the newly-selected transport and commits it once the new subprocess is live. Same-transport changes still hot-swap in place. Remove the experimental flag: - Delete chat.agentHost.claude.perSessionProvider, revert the generic flag plumbing, and delete the setting-to-root-config forwarder contribution. - Collapse the per-session-provider gates in claudeAgent.ts to always-on and remove the now-dead members. - Drop the perSessionProviderEnabled parameter from resolveClaudeSessionTransport; bare/legacy ids still resume on the host default transport with no migration. - Add modelProviders to the e2e CLAUDE_CONFIG and de-flag the unit tests. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> * agentHost: simplify Claude per-session transport resolution Follow-up cleanup on the per-session-provider read-path, now that the feature is unconditional and the single-catalog path is gone. - Collapse the cached `_transportMode` and its reactive `_resolveTransportMode`/`_applyTransportModeChange` machinery into a read-on-demand `_defaultTransportMode()`. The host default is only the fallback for model-less / bare-id sessions, so it needs no caching or config/sign-in re-resolve — the next session reads live availability. - `authenticate()`: a Copilot proxy-start failure is now uniformly soft. GitHub sign-in still succeeds and both `_githubToken` and `_proxyHandle` stay uncommitted, so a retry re-attempts `start()`; a Copilot-routed model re-drives sign-in on its first send. Drops the native/proxy default special-casing and the mid-flight transport-mode flip. - Replace `IMaterializeContext.resolveTransport` (a callback the session re-invoked on every rebuild) with a `transport` value the agent pins at materialize. A per-session provider switch is pushed in through `send`'s new `switchTransport` (staged in `_pendingSwitchTransport`); ordinary and SDK-recover rebuilds reuse the materialized transport. A throwing guard replaces the defensive re-resolve. - Move cross-transport switch detection into `ClaudeAgentSession.setModel` (the session owns it); drop the agent-computed `deferForTransportSwitch` option and expose `hasPendingTransportSwitch` in place of `transportKind`. - Inline the one-off `_settledCatalog` helper into `_refreshModels` and drop the `_refreshModels` -> `_refreshModelsMerged` forwarder. - Drop the now-unused provider-token re-export from `claudeModelSelection`; tests import the tokens from `common/claudeProviders` directly. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> * agentHost: address Claude per-session provider review feedback Fixes five review comments on the per-session provider slice: - Keep IAgentModelInfo.provider as the `claude` routing owner and carry the transport/group token in `_meta.modelGroupId`, so a model-selected create_session no longer misroutes to a `copilot`/`anthropic` agent that the node provider registry can't resolve. - Drop the agent-host `anthropic` picker vendor that clobbered the Copilot extension's shared `anthropic` vendor on dispose; reuse the shared one. - On a replacement-token proxy start() failure, tear down the stale account (handle, token, and merged catalog) instead of leaving it live behind a "successful" sign-in that would silently serve the superseded account. - Guard setModel's cross-transport detection on an explicit provider so a bare/legacy id (parser-fallback `copilot`) can't spuriously reroute a native session. - Condense the over-long rematerializer transport-pinning comment. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> --------- Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>

agentHost: refresh expiring GitHub credentials (#334418) Propagate authentication session lifetimes through AHP and use the Copilot SDK token provider for renewable Entra-backed GitHub sessions. Centralize static and provider-backed credential behavior behind one owner and reuse shared expiry helpers throughout authentication replay. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

authentication: Preserve session request context end to end (#337186) Preserve authentication request context through coalescing, provider calls, account selection, deferred sign-in, and MCP revalidation. Keep non-interactive lookups silent and re-read current MCP client secrets from their storage references. Add regression coverage for request isolation, lifecycle ownership, consent, and normal/XAA secret rotation. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

agentHost: route GitHub protected resources through a GitHub Enterprise endpoint service (#324159)

agentHost: Avoid repeated sign-in for stale sessions (#336344) * agentHost: avoid repeated sign-in for stale sessions When an exact-scope authentication session is rejected repeatedly, try a broader same-account session before opening sign-in. Quarantine the rejected session so later root-state updates do not restore it. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: f1411db4-2378-41ce-88e1-fcbab6d76ce4 * agentHost: apply auth quarantine consistently Preserve interactive sign-in when a quarantined session has no broader replacement, and route session creation through the same rejected-session resolver used by background authentication. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: f1411db4-2378-41ce-88e1-fcbab6d76ce4 * agentHost: close authentication quarantine lifecycle gaps Release the account constraint when the quarantined session is removed or replaced. Cancel delayed session lookups before they can forward a credential quarantined during resolution. Cover account switching after recovery and delayed background lookups with regression tests. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: f1411db4-2378-41ce-88e1-fcbab6d76ce4 * agentHost: simplify authentication recovery decisions Resolve an alternative session once and use a single forwarding path instead of mutable prompt/fallback flags. Preserve retry limits, cache invalidation, quarantine, cancellation, and interactive recovery behavior. Add characterization coverage for retry exhaustion and temporary replacement unavailability. The recovery method's cyclomatic complexity drops from 27 to 24 and cognitive complexity from 28 to 18 without adding helpers or state. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: f1411db4-2378-41ce-88e1-fcbab6d76ce4 * agentHost: consolidate rejected authentication session types Use one rejected-session record for cached quarantine and explicit resolver exclusions. Replace empty-object overrides with null for unfiltered lookups and keep omitted arguments using the cached rejection. Populate the required session identity and account fields in the existing authentication test fakes. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: f1411db4-2378-41ce-88e1-fcbab6d76ce4 * agentHost: instrument authentication recovery decisions Add typed product telemetry for recovery decisions and interactive sign-in results. Record scope-match categories, quarantine presence, renderer age, sign-in duration, and whether the selected credential changed without collecting tokens or account details. Preserve authentication control flow, suppress routine background and deduplicated forwarding events, and distinguish user cancellation from superseded work. Cover payloads, errors, scope classification, and duplicate notifications with tests. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: f1411db4-2378-41ce-88e1-fcbab6d76ce4 --------- Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: f1411db4-2378-41ce-88e1-fcbab6d76ce4

[2/4] authentication: separate enterprise provider lifecycles (#338150) * authentication: separate enterprise provider and engine lifecycles Keep the single configured enterprise instance and native account identities, while owning engine replacement, registration-safe session events and cleanup separately. Isolate OAuth callbacks by host and preserve the current Microsoft-brokered flows. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * authentication: discard superseded enterprise startup failures Version enterprise configuration updates so a failed initial update cannot enqueue an error state after a newer configuration succeeds. Cover both A-to-B and A-to-B-to-A races through extension activation while preserving current-error fallback and later recovery. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * authentication: serialize enterprise failures and session publication Remove activation generation bookkeeping by handling failure state inside each queued update. Reconcile preparation-time session removals, additions and changes before publishing a replacement, with regression coverage for consecutive initialization failures and pending-host events. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * authentication: own event buffering at the registration boundary Buffer initial provider events in the extension host until its registration RPC completes. Remove the extension-side wrapper, microtask readiness inference and construction factory; directly construct a host-bound session engine with a side-effect-free cached session inventory. Preserve broker flows and exercise registration ordering through core RPC tests. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * authentication: clarify disposal and registration ownership Keep the bundled README focused on user setup. Name disposal cancellation explicitly, verify cleanup while an engine is still being prepared, and clarify why core captures session events before awaiting registration. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --------- Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>