Dmitriy Vasyura

sessions: add remote session delegation tools (#336690) * sessions: add remote session delegation tools Add host discovery, resource-aware remote creation, exact-chat messaging, and read-only session inspection in the Agents window. Refs #336682 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * sessions: harden remote delegation after review Handle background reference lifetimes and connection replacement, isolate message queues by destination, revalidate origins before creation, and bound response assembly. Preserve remote origin metadata in the upstream session catalog. Validate unsupported callers from their invocation context without depending on visible-widget context keys. Refs #336682 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * sessions: register remote-session translations Add the remote sessions contribution to the localization resource registry so the CI translation reminder check passes. Refs #336682 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * sessions: validate remote targets and queued message trust Reuse authoritative workspace trust and model-availability checks, guard target replacement, retain uncertain deliveries until idle, and distinguish acknowledgement timeouts from cancellation. Refs #336682 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * sessions: default remote tools off with an experiment setting Gate remote delegation, messaging, discovery and inspection with chat.remoteSessions.tools.enabled. Respect experiment defaults and explicit user settings without abandoning running sessions. Also rename the host resource adapter to totalMemory. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * sessions: isolate remote tools configuration tests Configuration registry suites clear module-load registrations. Restore the actual contributed configuration for each test when needed and clean up that registration afterward. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * sessions: localize remote session tool errors Localize validation and host-selection diagnostics surfaced in chat while preserving protocol identifiers and model instructions. Refs #336682 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * sessions: fix remote session tool test compatibility Supply the required preparation context field and use a browser-compatible matcher while preserving complete validation-message checks. Refs #336682 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * sessions: reduce remote delegation tool context Shorten reply guidance, tool descriptions and schemas, and emit compact JSON without changing result fields. Cover deferred client-tool loading and its eager fallback. Refs #336682 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * sessions: check added quick chat folders for trust Chat-specific workspaces can add folders while the session retains its workspace-less marker. Exclude only the immutable scratch primary from workspace trust checks, rather than skipping all roots. Cover trusted and untrusted additions using host-qualified resources and keep scratch-only sessions unchanged. Refs #336682. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * sessions: raise remote session limits Raise creation requests per window to 500 and maximum depth to 10. Cover both boundaries and retries at the creation limit. Ref #336690. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --------- Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

MCP: Preserve Launch Working Directories Across Hosts (#330223) * mcp: preserve launch working directories across hosts Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * mcp: address review and electron test failures Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * mcp: simplify provider working directory handling Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Clear retained Codex runtime state Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * agentHost: address MCP discovery review feedback Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * agentHost: adapt Codex routing test to thread inventory Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * agentHost: serialize Copilot chat discovery Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * agentHost: deny disabled Claude MCP servers at startup Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * agentHost: preserve Copilot MCP cwd after re-enable Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * MCP: address final cross-host review findings Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --------- Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

network: align URL trust and IDN domain policies (#336960) * network: normalize Unicode wildcard domain patterns Normalize wildcard suffixes with the URL-aware authority helper before validating the pattern. Add matching, policy, and fetch-tool regression coverage while preserving existing domain handling. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * network: normalize sandbox domains and IDN URL approvals Canonicalize sandbox domain policies and preflight URL hosts, rejecting patterns that cannot be normalized. Match equivalent Unicode and Punycode literal host labels in URL trust and approval rules while preserving existing glob semantics. Partial Unicode wildcard labels remain outside this change. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * url: align trust checks with effective HTTP destinations Normalize authority separators and resolved paths consistently across trusted domains, URL approval rules, and web-page fetching. Preserve hostname case semantics, escaped path data, and actual request destinations, with regression coverage for approvals, exclusions, and declined tool calls. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * sandbox: warn and deny network for invalid domain patterns Keep shell-tool registration and offline sandboxed commands available when domain patterns cannot be normalized. Log a warning and use a deny-all policy instead of throwing, with regression coverage for both lists and recovery after settings are corrected. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * url: bound glob matching and preserve effective URL semantics Replace the eager recursive matcher with iterative deduplicated states to avoid Unicode path allocation spikes and stack growth. Normalize configured patterns consistently, preserve effective authority and path semantics, and retain HTTP path case without changing non-HTTP drive normalization. Add regression coverage for the PR feedback and verify real Code OSS trust, approval, fetch, and sandbox workflows. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --------- Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Fix Agent Host per-turn change attribution (#329715) * Fix Agent Host per-turn change attribution Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Address turn checkpoint review feedback Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Harden turn checkpoint cleanup Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Harden turn attribution fallbacks Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Clean up checkpoints when disposing peer chats Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Validate turn IDs against restored peers Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --------- Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

chat: preserve sessions across window moves (#337232) * chat: preserve sessions across window moves Keep the chat model alive until its destination acquires ownership, preventing deletion of an autosaved empty session's initial log entry. Distinguish model disposal from history deletion so closed sessions remain discoverable and reopenable. Fixes #336748 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * chat: serialize local session refreshes Adapt the refresh serialization and race coverage from #325536. Preserve immediate deletion by invalidating old snapshots and scoping delayed model updates to disposable listener lifetimes. Refs #336748. Adapted from Lucas Taylor's work in #325536. Co-authored-by: Lucas Taylor <lucastaylor000@gmail.com> Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * chat: honor move close results and session metadata updates Publish metadata-only local session deltas. Scope close-confirmation suppression to the retained-model move and stop if closing the source editor fails or is vetoed. Add regression coverage for cancellation, errors, confirmation restoration, and working-directory changes. Refs #336748. Addresses review feedback on #337232. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * chat: preserve shared refresh requests and survey budgets Keep coalesced session refreshes alive while any caller still needs them. Preserve per-session survey prompt limits on model unload while releasing response state that could block other chats. Add cancellation and unload regression coverage for #336748. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * chat: simplify local session refresh lifecycle Make local session-list refreshes controller-owned so callers can stop waiting without cancelling shared work. Replace token pooling and version tracking with scoped cancellation for unload, deletion, and shutdown. Update cancellation and lifecycle regression coverage for #336748. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * async: propagate queued Throttler rejections Ensure all coalesced callers settle when queued work rejects, and verify that subsequent work still runs after successful or failed active work. Refs #336748. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --------- Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Co-authored-by: Lucas Taylor <lucastaylor000@gmail.com>

mcp: enforce destination policy and contain redirected credentials (#337261) Check each MCP data destination against current policy and stop revoked transports. Confine credentials, preserve request state for retries, and validate server-selected destinations without breaking configured IPC. Fixes #337194 Fixes #336293 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

mcp: validate gallery server sources and package types (#334761) * mcp: validate gallery server sources and package types Validate gallery server URLs before issuing requests and disable redirect following for server-document fetches. Reject unknown registry values before command construction while preserving usable package and remote entries across supported manifest schemas, including the Copilot NuGet mapping path. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * mcp: reuse package filtering logic Extract the repeated registry normalization and package filtering loops in the core and Copilot manifest serializers. Restore command resolution to its original construction site while retaining fail-closed handling for unsupported registry types. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * request: avoid injecting fetch implementation Keep redirect handling in the shared request implementation without extending its public function signature. Remove the dedicated fetch injection test while retaining MCP service-level redirect coverage. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * mcp: parse compatibility gallery entries independently Avoid selecting one serializer for an entire compatibility page based on a single entry. Parse each server through the shape-aware dispatcher and normalize both cursor spellings so malformed records cannot hide or truncate valid results. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * mcp: restrict gallery server fetches to HTTP Reject opaque-origin and custom-scheme server document URLs before network access. Direct gallery server fetches now require HTTP or HTTPS in addition to matching the configured gallery origin and path. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * mcp: handle optional gallery count metadata Accept compatibility gallery pages that omit optional count metadata while retaining validation for invalid supplied values. Add direct Electron request coverage proving that followRedirects zero returns an opaque redirect without requesting the target. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --------- Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Pause plugin auto-updates on metered connections (#331694) * chat: pause plugin auto-updates on metered connections Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * chat: avoid plugin update lifecycle races Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * chat: simplify metered plugin updates Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Preserve plugin update startup idle gate Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * chat: coalesce plugin update checks Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Handle cancelled plugin update checks Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Coordinate plugin checks with queued updates Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --------- Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Fix DOM creation in auxiliary windows (#330777) * Fix DOM creation in auxiliary windows Create workbench DOM nodes in the main JavaScript realm and avoid xterm custom glyph rasterization in auxiliary windows. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * PR feedback --------- Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Show Update in Agents and protect active sessions (#332140) * chat: confirm before stopping active agent sessions Show Update in the Agents window during active sessions and guard quit, last-window close, and update restart while local Agent Host work is starting or running. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * sessions: track in-flight first requests Keep management-owned first-request state across foreground, background, headless, and quick-chat sends so shutdown protection does not depend on draft visibility or provider catalog publication. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * test: make update visibility platform neutral Test the shared additional-placement context expression directly so browser suites do not instantiate the Electron-only update contribution. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * sessions: retain concurrent in-flight requests Reference-count first requests by session resource so one concurrent send cannot clear shutdown protection while another is still starting. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --------- Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>