Dileep Yavanmandha

[main] Cherry-pick MSRC fixes (#320659) * OTel visibility in Copilot Chat UI (#47) * [msrc/1.123] 114763 * Add maxAttributeSizeChars configuration to OpenTelemetry settings --------- Co-authored-by: Zhichao Li <zhichli@microsoft.com> (cherry picked from commit 042dc59dbb51f58ef03a6909d5dfb0292a6b2576) (cherry picked from commit be6ab8b589a75e6b64a95dc73763e5d23a20bb1a) * Prompt before connecting to non-loopback remote host:port authorities (#46) A direct `<host>:<port>` remote authority (no resolver `+` prefix) bypasses resolver extensions and connects straight to the given server. Since this form can originate from untrusted sources (e.g. the `remoteAuthority` of a `.code-workspace` file), a crafted workspace could silently point the window's extension host backend at an attacker-controlled server. Centralize a confirmation prompt at the connection point in the renderer: when resolving a direct authority whose host is not loopback (localhost, 127.0.0.1, ::1), ask the user to confirm before connecting and abort if declined. Add `isLoopbackHost` helper and tests. (cherry picked from commit 9505d0fca49eadb707c450d18dcb41a46b720a9e) (cherry picked from commit 96731325029c4694184ea8d05949f4730676d565) * GitHub - improve host parsing (#48) (cherry picked from commit 4b6e2467dbd828018d602f73cc25d1b11f699d2c) (cherry picked from commit 9fea92e141918029fb705cbaf6fbb9a1553cb86f) * path traversal fix (#50) * fix path traversal * fix compilation (cherry picked from commit 9b31ff896671125cbfc65f33731c4a99660d6201) (cherry picked from commit a703741497387f3873f691be680a8380d79d106b) * Path - improve isEqualOrParent calculation (#49) (cherry picked from commit 0f1ba1ea103757f3023cc1f9c3eb7327c3ec4b02) (cherry picked from commit 5927baa7af7c08deac2cf767c2608724f1a10be9) --------- Co-authored-by: Zhichao Li <Li.Zhichao@microsoft.com> Co-authored-by: Zhichao Li <zhichli@microsoft.com> Co-authored-by: Alexandru Dima <alexdima@microsoft.com> Co-authored-by: Ladislau Szomoru <lszomoru@microsoft.com> Co-authored-by: Sandeep Somavarapu <sasomava@microsoft.com>

Retry with AllowNetwork option before retrying outside the sandbox. (#319181) Enabling AllowNetwork option for retrying before running outside the sandbox,

Enable user to repair bubble wrap incase of error due to app armor (#320866) * cherrypicking commit * Simplify bubblewrap sandbox remediation * correcting the confirmation popUp

[Linux-Sandboxing]: Ubuntu 24.04 silently fails due to App Armor profile on bwrap (#319061) * Add bubblewrap sandbox capability remediation * changes * correcting wrong merge * fix failing unit tests

Integrating MXC for windows sandboxing (#317669) * draft version * draft version * adding mxc for windows sandboxing * Potential fix for pull request finding Merging readwritePaths Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> * cleaning up PR * cleaning up * Run Windows MXC commands directly * Pin MXC SDK lockfiles * fixing tests and cleaning up env variables * adding a flag for windows sandboxing as its experimental * adding a flag for windows sandboxing as its experimental * adding a flag for windows sandboxing as its experimental --------- Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

Preserve BYOK state after conversation summaries (#325905) * Preserve BYOK state after conversation summaries Track summary generations for BYOK markers and omit stale markers after local summarization. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Update stateful marker snapshots Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --------- Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Respect chat permission level in sandbox prechecks (#318079)

Fix sandbox dependency installation on Linux (#326283) * Fix sandbox dependency installation on Linux * Fix sandbox installer test on Windows

Check terminal sandbox file access directly (#322021) * Protect terminal sandbox settings file * Check terminal sandbox file access directly * Restore session customization discovery baseline * Remove whitespace-only PR changes * Remove obsolete terminal sandbox guidance * Revert package lockfile changes

[Windows_Sandboxing]Refactoring config creation for windows sandboxing and upgrading mxc (#318865) * refactoring config creation for windows sandboxing and upgrading mxc package * Avoid MXC SDK imports in shared sandbox contract * fixing tests

Add GPT-5.5 prompt experiment flags (#315603) * Add GPT-5.5 prompt experiment flags * Potential fix for pull request finding Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> --------- Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

Simplify agent sandbox settings (#323224) * Simplify agent sandbox settings * updates * Potential fix for pull request finding Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> * updates * Updating policyData.json using using export-policy-data --------- Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

Set Responses API prompt cache mode (#327960) * changes Signed-off-by: Dileep Yavanamandha <dileepy@microsoft.com> * fix: scope prompt cache policy to supported models Signed-off-by: Dileep Yavanamandha <dileepy@microsoft.com> * fix: restrict Responses cache breakpoint targets Signed-off-by: Dileep Yavanamandha <dileepy@microsoft.com> * fix: target supported Responses cache inputs Signed-off-by: Dileep Yavanamandha <dileepy@microsoft.com> * fix: restrict Responses cache markers to content blocks Signed-off-by: Dileep Yavanamandha <dileepy@microsoft.com> * fix: centralize cache breakpoint eligibility Signed-off-by: Dileep Yavanamandha <dileepy@microsoft.com> * fix: preserve response cache breakpoint position --------- Signed-off-by: Dileep Yavanamandha <dileepy@microsoft.com>

Disabling readFile tool for experimentation for gpt-5.5 (#316188) * Fix runInTerminal sandbox wording tests * x * Use terminal fallback for customization file reads

Add Responses API cache control markers (#321850) * Add Responses API cache control markers * Refactoring code * Potential fix for pull request finding Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> * Gate Responses API cache breakpoints by model support --------- Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

Add chat terminal sandbox smoke tests (#324848) * Add chat terminal sandbox smoke tests * Potential fix for pull request finding Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> * Expand chat terminal sandbox smoke coverage * Test terminal sandbox temp directory isolation --------- Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

Prompt updates for A/B testing. (#316283) prompt updates

Sandbox: force execution in sandbox before model elevation using ForceExecuteInSandbox setting (#322320) chat: run sandboxed before allowing network access Fixes #321647

Updates for windows sandboxing (#323062)

Refactoring and prompts update (#323827) * Add Responses API cache control markers * Refactoring code * Potential fix for pull request finding Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> * Gate Responses API cache breakpoints by model support * Disable Responses API reasoning summaries * reverting cache commits * Remove Responses API cache breakpoint handling * gpt updates * gpt updates * gpt updates * updating code for review comments --------- Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>