agentHost: bump Copilot SDK to 1.0.18-preview.3 (Written by Copilot)
Bundle runtime 1.0.94-3 consistently on desktop and remote, and align retained native telemetry issue evidence with the shipped revision. Preserve existing host code, prompt baselines, assertions, and gates.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* agentHost: bump Copilot SDK to 1.0.17-preview.8 (Written by Copilot)
Align desktop and remote SDK/runtime pins with runtime 1.0.93-2. Preserve the new account MCP source through metadata, presentation, and source-kind telemetry, with focused contract coverage.
Correct timing measurement classifications and refresh candidate-version evidence for the retained native OTel expected failures. Prompt fixtures and assertions remain unchanged.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* agentHost: use fresh peer identity after disposal (Written by Copilot)
Align the host-only E2E scenario with normalized chat-catalog tombstones. Seed actual history in the disposed peer, then assert its removal and an empty new peer without reusing the deleted identity. Keep the catalog's rejection coverage unchanged.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* chat: count account MCP customizations (Written by Copilot)
Map account-contributed MCP servers into the existing user count and document that classification without collecting account identity. Cover explicit user, account and unknown provenance with the shared source type.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* agentHost: use last pre-stable SDK preview (Written by Copilot)
Pin SDK 1.0.17-preview.10 and bundled runtime 1.0.93-4 in desktop and remote. This is the last preview published before stable 1.0.17; verified Azure-feed SDK and native Darwin package hashes match public npm.
Retain the reviewed native skill baselines and Auto-tier compatibility because the preview and stable runtime tags resolve to the same source revision. Update current-version evidence for retained native OTel defects.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* agentHost: keep Copilot SDK on preview 9 (Written by Copilot)
Keep the release upgrade separate from the preview 10 Kerberos proxy investigation. Regenerate preview 9 prompt baselines and restore the closed Auto-tier test contract while preserving reviewed account provenance and telemetry changes.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
---------
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* agentHost: support HPKE Mission Control auth (Written by Copilot)
Advertise independent sealed-box and HPKE recipients for both authentication purposes so the iOS client can connect. Preserve owner and context checks across asynchronous decryption, and return retryable conflicts for stale recipient keys.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* agentHost: avoid copying decrypted tokens (Written by Copilot)
Decode through a Buffer view of the decrypted bytes so the existing cleanup also scrubs the decoding buffer. Cover byte offsets and cleanup after successful and failed parsing.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
---------
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* Bump @github/copilot-sdk to 1.0.17-preview.8
- @github/copilot-sdk: 1.0.17-preview.5 -> 1.0.17-preview.8
- copilotRuntimeVersion: 1.0.92-5 -> 1.0.93-2
Picks up the HydraFusion v2 changes.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* Note OTel known issue still reproduces with Copilot SDK 1.0.17-preview.8
Prompt snapshots (copilotPromptsE2E) are unchanged with preview.8.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* Handle the 'account' MCP server source added in Copilot SDK 1.0.17-preview.8
The SDK's McpServerSource now includes 'account' for servers contributed by
the signed-in account, which broke assignment into the Agent Host's narrower
union. Accept it and treat it like 'managed' wherever the workbench presents
or counts agent-supplied MCP servers.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
---------
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* sandbox: upgrade Windows MXC integration to SDK v1
Use the MXC SDK v1 request contract and package a Node runner that forwards terminal stdio and lifecycle signals. Remove the obsolete schema version setting and update sandbox coverage.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* sandbox: fix MXC runner output and signal lifecycle
Use the Electron-compatible URL import, forward SIGBREAK, and wait for stdout and stderr to finish before disposing the MXC process. Add regression coverage for delayed output, terminal signals, and stream-error cleanup.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* sandbox: approve node-pty install scripts for MXC v1
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
---------
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* agentHost: checkpoint experimental Mission Control relay
Preserve the native-host registration and real WPS vertical slice before production hardening, including sealed authentication, request-form dispatch compatibility, heartbeat load shedding, tests, and the readiness checklist.
Development-only prototype; the documented security and lifecycle gaps remain release blockers.
(Written by Copilot)
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* agentHost: harden Mission Control relay ingress
Fence relay authentication by owner and connection lifetime, protect host configuration, and authorize resources and native edit previews without changing local IPC behavior. Preserve existing clients while keeping deferred credential and release boundaries explicit.
(Written by Copilot)
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* agentHost: checkpoint Mission Control lifecycle and discovery
Add generation-aware relay recovery, bounded keep-alive and token rotation, native user-local environment discovery, purpose-bound MCP sealing, and a bounded authoritative AHP mirror with signed retained backfill. Keep development gating and explicitly deferred URI and credential architecture boundaries.
(Written by Copilot)
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* agentHost: complete Mission Control lifecycle and recovery parity
Bind registration withdrawal to its local account, refresh workspace grants safely, separate copied profile identities, and renew broker tickets before transport recovery. Preserve unchanged sealed credentials, retire permanently refused entries, and fence late refreshes. Surface passive connections as read-only and validate the native picker, MC catalog/history, and host restart flow without a test adapter.
(Written by Copilot)
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* Make native Agent Host session identities interoperable with AHP
Negotiate standard addressing for new allocations while preserving existing backend and frontend identities, explicit provider routing, and version-skew compatibility. Add regression coverage and contributor identity guardrails.
(Written by Copilot)
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* Fix remaining AHP identity consumers and CI regressions
Require connection-based committed session resolution, preserve exact owner deletion resources, route Copilot MCP replay explicitly, and keep cloud discovery/provisioning backend identity consistent. Add a public turn-tracker interface and repair CI fixture and class-field initialization wiring.
Validated 555 Chromium tests, 171 MCP/history/telemetry tests, and 29 native identity tests; both client and define-class-fields type checks, transpilation, lint and diff checks passed. (Written by Copilot)
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* Wire committed identity resolution in generic config chip tests
Update the provisional-generation fixture for the required connections contract. All 24 generic-config/submit-handler Chromium tests pass. (Written by Copilot)
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* Register eager Agent Host session identity before first send
Record each acknowledged allocation on its owning connection before subscriptions and first-send routing, and verify the host preserves the requested URI. Keep native allocation collision checks scoped away from non-native providers. Preserve historical recovery fixture addressing and use explicit Copilot provider IDs in MCP expectations.
Validated all 2096 affected unit tests (27 pending), all 3 local AgentHost and SDK-sandbox smoke scenarios, client and class-field type checks, transpilation and lint. (Written by Copilot)
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* agentHost: mirror native session metadata to Mission Control
Publish selected genuine SDK events, synchronize native titles, and reconcile journal metadata with bounded independent SDK credit and acknowledgement-owned cursors.
(Written by Copilot)
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* Validate Agent Host identities before allocating disposable adapters
Reject conflicting backend registration before constructing adapters, preventing orphaned instances on refresh retry. Interpret older cloud-sandbox cached UI addresses only in the sandbox cache path, preserving generic/native advertised resources.
Reproduced five leaked adapters before the fix; 571 provider tests pass afterward. Live Code OSS with isolated cached state completed five session refreshes and ten forced GCs with zero leaked-disposable warnings or identity conflicts. Typecheck and lint pass. (Written by Copilot)
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* agentHost: preserve backend session identities across clients
Keep advertised and persisted URI schemes intact in link, remote routing, session adapter and editor catalog paths. Apply the experimental native scheme only when constructing new local sessions, and retain provider attribution and automation identity. Package the relay crypto dependency for the remote server and use the uniform crypto randomInt API for connection generations.
(Written by Copilot)
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* agentHost: retain host session schemes during remote chat routing
Preserve the scheme from existing remote metadata during subscription setup and use the explicitly configured remote backend scheme when opening a chat. This prevents Dev Container sessions from being readdressed through the experimental native alias. Cover legacy, AHP and custom backend schemes through the handler boundary.
(Written by Copilot)
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* Protect explicit session ownership and cold backing teardown
Serialize explicit creation by raw storage identity, preserve same-provider retries and legacy provenance, and prevent competing legacy/standard claims. Resolve persisted provider ownership before deletion and prepare all cold backings before destructive disposal, preserving metadata on unavailable-provider or preparation failures.
Added controlled contention and fresh-service cold-deletion regressions for all native providers, individual peer/default preparation failures and unresolved legacy identities. Full affected suites: 2290 passed, 27 pending; actual local AgentHost/SDK-sandbox smoke: 3 passed. Both typecheck modes, transpile and lint passed. (Written by Copilot)
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* agentHost: reject non-directory relay path ancestors
Validate the resolved ancestor before granting a nonexistent path, since Windows can report ENOENT for a child of a regular file where POSIX reports ENOTDIR. Deny both cases consistently and cover filesystem writes as well as working-directory changes.
(Written by Copilot)
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* agentHost: stabilize Mission Control naming and relay integration
Refresh the host-owned name on heartbeats, fence WPS root-setting forwarding, consume advertised execution-platform metadata, and omit unavailable relay extension capabilities. Validated with isolated live MC owner/viewer hosts and 547 focused tests.
(Written by Copilot)
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* agentHost: enable opt-in Mission Control in built desktop products
Use product display names and ordinary management/lifecycle names, move the implementation under node/missionControl, and isolate native DI wiring in an entry-owned adapter. Preserve current settings and security boundaries. Document requirement coverage and only remaining gaps.
(Written by Copilot)
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* agentHost: surface Mission Control relay disconnect diagnostics
Normalize the OSS environment name and retain only outstanding deployment qualification gaps. Socket close codes and network errors are reported once without logging untrusted close reasons. (Written by Copilot)
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* agentHost: align merged fixtures with transport and identity contracts (Written by Copilot)
Expect no reply after transport teardown and advertise exact backend/provider identities instead of deriving restored sessions from allocation defaults.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* agentHost: harden Mission Control relay recovery and publication (Written by Copilot)
Isolate native diagnostic logs, backpressure the ordered mirror publisher, bound unanswered AHP handshakes, and recover transient identity-validation faults. Preserve legacy read-state upgrade regressions and move the current Mission Control documentation beside its implementation.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* docs: clarify and renumber Mission Control security requirements (Written by Copilot)
Name wire requirements as protocol specifications, number all35 requirements in reading order and update cross-references. Pin source/test links to the implemented revision and refresh local-validation and remaining-qualification evidence.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* docs: organize Mission Control requirements by security topic (Written by Copilot)
Replace misleading invariant-based parent headings with neutral topic groups, clarify requirement sources and upstream-versus-VSCode behavior, preserve35requirements and their links, and remove redundant status and qualification-history sections.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
---------
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Align root and remote SDK/runtime pins with 1.0.92-5. Handle the SDK's credential-free account authentication variant in connector account selection, with coverage for both provider and token-callback accounts.
(Written by Copilot)
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* agentHost: update Copilot SDK to 1.0.17-preview.3
Align the bundled runtime pin with 1.0.92-3 and refresh prompt snapshots for updated write_agent steering guidance and deterministic task model ordering.
(Written by Copilot)
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* agentHost: align remote Copilot SDK and runtime versions
Keep the remote server dependency in sync with the root SDK upgrade as required by the repository hygiene check.
(Written by Copilot)
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* test: isolate Copilot OTel batch export scheduling
Use a test-owned 100ms native span batch interval so default or inherited scheduling cannot exhaust the bounded export-readiness wait. Preserve the existing span assertions and wait deadline in both telemetry suites.
Verified that the previous and upgraded SDK both defer the first default Linux export by about 10 seconds. Reproduced the missing-span failure with a long inherited schedule; the unchanged assertions pass after isolating the child schedule.
(Written by Copilot)
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* agentHost: update Copilot SDK to 1.0.17-preview.4
Align root and remote runtime pins with 1.0.92-4, adapt typed sandbox RPC mocks, normalize standalone runtime change notices, and restore warm managed-telemetry regression coverage.
Keep the upgrade in draft: live exit-only plan approval continued into edits twice with preview.4, while a preview.3 live control passed. Deterministic replay does not establish that the live behavior is correct.
(Written by Copilot)
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
---------
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* chore: bump @github/copilot-sdk to 1.0.17-preview.0
* agentHost: recognize Responses system-role input in replay
The updated Copilot runtime sends its system prompt as an input message rather than top-level instructions. Preserve system-prompt presence checks for both wire representations without changing recorded fixtures.
(Written by Copilot)
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* agentHost: update prompt coverage for the bundled runtime
Accept system-role Responses input in prompt assertions and refresh deterministic request snapshots for the new native workflow tools and cacheable GPT system blocks. Keep complete request bodies and all prompt-text checks intact.
(Written by Copilot)
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* agentHost: withhold unvalidated native workflow tools
Exclude run_dynamic_workflow and dynamic_workflows_manage through the SDK native-tool filters on create, resume, and ephemeral sessions. Exclusions take precedence over model allowlists and do not affect custom tools with the same names. Verify absence in every model prompt snapshot and remove the newly advertised workflow schemas from the baselines.
(Written by Copilot)
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
---------
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Rob Lourens <roblourens@gmail.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* chore: bump @github/copilot-sdk to 1.0.15-preview.4
Updates the root and remote SDK locks to bundled runtime 1.0.89-7.\n\n(Written by Copilot)
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* agentHost: adapt to Copilot SDK 1.0.15-preview.4
Avoid duplicate execution now that the bundled runtime discovers hooks from file-backed plugin directories. Update the factory-to-workflow API mappings and the expected Claude rules customization surface.\n\n(Written by Copilot)
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
---------
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* chore: bump @github/copilot-sdk to 1.0.15-preview.3
* agentHost: align copilotRuntimeVersion with SDK 1.0.15-preview.3 bundled runtime
@github/copilot-sdk 1.0.15-preview.3 bundles Copilot runtime 1.0.89-3, but
package.json and remote/package.json still declared 1.0.89-1, which fails the
build/gulpfile.vscode.ts consistency check in hygiene, compile, and test jobs.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* agentHost: note managed-settings diagnostics gap persists in SDK 1.0.15-preview.3
Re-ran the gated known-issue scenario against the preview.3 bundled runtime;
getManagedSettingsDiagnostics still reports an error, so the gate stays.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* agentHost: refresh Copilot prompt snapshots for runtime 1.0.89-3
The runtime bundled with @github/copilot-sdk 1.0.15-preview.3 rewrote the
todo_deps guidance in its built-in SQL/todo system-prompt section (record only
real prerequisites, and a richer example). The change is identical across all
19 model snapshots; no VS Code-side prompt content changed.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
---------
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: bhavyaus <bhavyau@microsoft.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Pin the published unstable SDK backed by the prompt-policy revert, refresh affected prompts and subagent fixtures, and keep mixed-dialect subagent replay deterministic. (Written by Copilot)
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
agentHost: Pin Copilot SDK prompt-policy revert
Pin @github/copilot-sdk to 1.0.15-unstable.35393089353.gfc44743 and couple product metadata to its bundled Copilot CLI 1.0.85-unstable.r35379093703.g3514c9a.
Refresh the provider prompt baselines to capture the restored pre-github/copilot-agent-runtime#15054 shell prompt and Bash detach tool-description policy.
(Written by Copilot)
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* agentHost: use SDK-owned Copilot runtime
Package and launch the SDK wrapper with its adjacent native module so product signing covers both files with the Microsoft identity. Keep the runtime version coupled to the SDK release and reject independent overrides. (Written by Copilot)
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot-Session: c82a8f43-3513-4ca1-a777-c64128109055
* build: update ARM64 Copilot runtime dependency
Keep the generated RPM dependency reference aligned with the SDK-owned ARM64 runtime. (Written by Copilot)
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot-Session: c82a8f43-3513-4ca1-a777-c64128109055
* agentHost: split SDK and runtime updates
Keep the Microsoft-signable expanded Copilot runtime while updating the JavaScript SDK, and stabilize retained-subagent tool assertions independently of event ordering. (Written by Copilot)
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot-Session: c82a8f43-3513-4ca1-a777-c64128109055
---------
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot-Session: c82a8f43-3513-4ca1-a777-c64128109055
* Update @vscode/codicons to version 0.0.46-40 and add new icons to codiconsLibrary
* fix: update codicons package resolution URL to npm registry
---------
Co-authored-by: mrleemurray <mrleemurray@users.noreply.github.com>
* chore: bump @github/copilot-sdk to 1.0.14-preview.1 and @github/copilot to 1.0.84-9
* test: match invoke_agent span by prefix and wait past batch export
The bumped @github/copilot runtime now names the OTel root span
`invoke_agent {gen_ai.agent.name}` per GenAI semconv (verified in
copilot-agent-runtime session_tracker.rs), so the exact `"name":"invoke_agent"`
substring match no longer holds; match by prefix. The SDK span is also exported
via the runtime's AsyncBatchSpanProcessor (~5s scheduled delay), so widen the
poll budget past that cadence to avoid racing the batched export.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* build: preserve built-in Copilot SDK entrypoint
Restore the staged SDK after product packaging before target-native files are materialized, and fail if the SDK entrypoint is absent. (Written by Copilot)
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* agentHost: stabilize Copilot SDK validation
Tighten OTel span matching, remove cross-chat ordering from the retained-subagent snapshot, and approve the SDK's updated koffi dependency. (Written by Copilot)
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* agentHost: support stable Copilot runtime packages
Use the final Copilot SDK and CLI versions, resolve their paired platform artifacts, retain them in desktop and remote products, and validate the stable OTel contract. (Written by Copilot)
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot-Session: c1d23f93-6f44-4570-af50-2fd458472fbb
* build: pin Copilot SDK koffi dependency
Resolve the SDK's transitive koffi dependency to 3.2.1 in both package roots so mirrored registries only need a release older than seven days. (Written by Copilot)
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot-Session: c1d23f93-6f44-4570-af50-2fd458472fbb
* build: scope Copilot packaging to Agent Host
Keep the root Copilot runtime packaging changes without altering the independently versioned built-in Copilot extension. (Written by Copilot)
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot-Session: c1d23f93-6f44-4570-af50-2fd458472fbb
* build: update Linux dependency baseline
Remove the obsolete glibc 2.27 requirement after the Copilot runtime package update changes the generated x64 dependency set. (Written by Copilot)
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot-Session: c1d23f93-6f44-4570-af50-2fd458472fbb
* build: update Linux RPM dependency baseline
Remove the obsolete glibc 2.27 libm requirement after the Copilot runtime package update changes the generated x64 RPM dependency set. (Written by Copilot)
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot-Session: c1d23f93-6f44-4570-af50-2fd458472fbb
---------
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: vs-code-engineering[bot] <122617954+vs-code-engineering[bot]@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot-Session: c1d23f93-6f44-4570-af50-2fd458472fbb
Preserve setup-time Docker probes alongside upstream Exploration-build gating for local and remote Dev Container smoke suites.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* chore: bump electron@43.4.1
* linux: align desktop name and StartupWMClass
Give DEB and RPM installs a package owned reverse DNS desktop name
so runtime wayland portal identity resolves to an installed desktop file.
Keep snap and archive runtime identities aligned with their distribution
specific desktop file behavior.
Set StartupWMClass to the same identity used by the runtime.
* linux: respect native window controls layout
Reserve both left and right WCO safe areas so custom title bar content
does not overlap controls when the desktop environment places them on
either side.
* dialogs: preserve native locations
Electron 43 defaults native dialogs without a defaultPath to the
Downloads directory instead of allowing the platform to retain its
last location. Resolve existing file or folder history before
invoking native open and save dialogs, while preserving an explicit
caller-provided URI.
* protocol: migrate from deprecated handlers
Replace deprecated registerFileProtocol, registerBufferProtocol,
registerHttpProtocol, and interceptFileProtocol APIs with protocol.handle().
* test: migrate unit test protocol handler
* chore: remove obsolete WebSQL preferences
Electron 43 removes WebSQL and its enableWebSQL web preference.
* fix: wco position for windows
* protocol: avoid exposing managed resource errors
* test: preserve file URLs in protocol handler
* test: adopt worker parent identifiers in CDP golden
Electron 43 target lifecycle payloads include parentId and
parentFrameId for worker targets.
* build: support V8 headers with GCC 12
* test: use platform native dialog paths
* build: install custom electron headers
* build: bootstrap electron headers in compile job
* build: bootstrap Electron headers for Alpine and web
* chore: bump electron@43.5.1
* chore: revert system fontconfig init workaround
* temp: bump distro
* chore: bump electron@43.6.0
* test: skip Dev Container agent host smoke test for exploration
The exploration update channel serves an outdated agent host server that
does not include the bundled Copilot CLI, causing the smoke test to time out.
* chore: bump distro
Run Dev Container setup on the source Agent Host and relay container sessions over its existing connection. Share session handoff and worktree lifecycle behavior with local connections, preserving workspace identity, trust, and editor routing.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
The platform packages were not yet published when the automated bump generated the lockfiles, causing npm ci to fail across CI jobs.
(Written by Copilot)
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* agentHost: upgrade Copilot CLI to 1.0.83 (Written by Copilot)
Upgrade the Copilot SDK, align managed settings and mock Responses API behavior, refresh replay fixtures, and exclude unused SDK native runtimes from product packages. (Written by Copilot)
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* agentHost: use stable Copilot SDK 1.0.13 (Written by Copilot)
Pair the stable SDK release with Copilot CLI 1.0.83 in desktop and remote dependencies. (Written by Copilot)
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* agentHost: use latest Copilot SDK prerelease (Written by Copilot)
Pin @github/copilot-sdk to the current prerelease tag, 1.0.13-preview.6, in desktop and remote dependencies. (Written by Copilot)
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* agentHost: use latest Copilot SDK and runtime (Written by Copilot)
Pin @github/copilot-sdk 1.0.13 and @github/copilot 1.0.84-2 in desktop and remote dependencies. (Written by Copilot)
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* test: refresh Copilot 1.0.84 prompt snapshots (Written by Copilot)
Accept the model request prompt and cache-boundary changes emitted by the latest Copilot runtime. (Written by Copilot)
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* agentHost: expose managed-settings provenance (Written by Copilot)
Include the policy-helper and undetermined-policy sandbox fields forwarded by the Copilot SDK diagnostics result. (Written by Copilot)
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* build: restore committed Copilot runtime default (Written by Copilot)
Default product builds to the runtime pinned in package.json unless an SDK override requires a compatible CLI. (Written by Copilot)
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
---------
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* chore: bump @github/copilot to 1.0.83-2
* chore: re-trigger validation for @github/copilot 1.0.83-2 bump
The prior product build (470206) failed only on the macOS CLI (ARM64) Rust compile+notarize job, which is structurally independent of the @github/copilot npm bump (the CLI pipeline references no copilot packages) and is flagged in-pipeline as a known build flake (todo@connor4312, MSRUSTUP_LOG=debug). All other CLI-arch jobs passed; every other job cascade-cancelled. No VS Code integration change is warranted; re-run the authoritative product build.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
---------
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: vs-code-engineering[bot] <122617954+vs-code-engineering[bot]@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* Agent Host changes for lramos15/agents/auto-tiers-routing-profiles-optimization
* agentHost: fix hygiene and pin the Auto routing profile per session
Align remote/package.json with the root @github/copilot pin so the
check-package-json hygiene task passes, and restore the formatting of two
accidentally joined lines.
Keep a materialized session's Auto routing profile fixed: the runtime owns it
from creation, so a mid-session change is now reverted in the recorded
selection instead of being persisted and shown as if it applied. The launch
profile is read from the session's launch plan via a new launchAutoTier getter.
Also restore a reasoning-effort value in an extension test that a tier rename
had wrongly rewritten.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot-Session: 9d0e056c-277d-40c3-ba90-eb5fe6653948
* agentHost: tighten Auto routing profile comments
Trim every comment added for the Auto routing profile work to at most two
lines, and reduce the automodeService JSDoc edit to the renamed word so the
surrounding wording stays as its author wrote it.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot-Session: 9d0e056c-277d-40c3-ba90-eb5fe6653948
---------
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot-Session: 9d0e056c-277d-40c3-ba90-eb5fe6653948
* chore: bump @github/copilot-sdk to 1.0.13-preview.2 and @github/copilot to 1.0.82-0
* Migrate agentHost to new Copilot SDK permission-mode API
SDK 1.0.13-preview.2 renamed PermissionAllowAllMode->PermissionMode
('on/auto/off'->'allow-all/assisted/manual'), PermissionAutoApproval->
PermissionAssistedApproval, permissions.setAllowAll->setMode, and
promptRequest.autoApproval->assistedApproval, and added the
extension-env-access permission kind. Migrate the agentHost integration
and its unit tests to the new contract per the product build TS errors.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* build: drop stale libm GLIBC_2.27 rpm dep after SDK/CLI bump
Bumped @github/copilot native payload no longer requires libm.so.6(GLIBC_2.27) on x86_64/aarch64; the reference rpm dep lists diverged from generated deps, failing 'Prepare rpm package' per product build 467750.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* test: elide runtime-authored change-notice preamble in capi-replay projection
CLI 1.0.81-10 now prepends a `<tools_changed_notice>` block to the user
message when tools change between turns (e.g. `exit_plan_mode` is dropped
after plan approval). The Agent Host E2E capture for planning-mode auto-approve
predates this behavior, so capi-replay's request #5 no longer matched a live
run against the newer CLI even though the host composed an identical turn.
These change-notice blocks (`<tools_changed_notice>`, `<mode_changed_notice>`,
`<working_directory_changed>`, `<additional_directories_changed>`) are composed
by the `@github/copilot` runtime from session state, not host-authored prompt
structure, so they belong in the projection's symmetric elision set alongside
the model id and tool_result payload. Elision runs before path elision so the
intact `</…>` closing tag is matched rather than being rewritten into a path
placeholder first.
Fixtures are not edited; the model-changes fixture that records a
`<tools_changed_notice>` model-switch block strips symmetrically on both sides
and still matches.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* agentHost: handle Copilot MCP sampling requests
Register sampling event interest, reject pending requests through the SDK UI RPC, and release the registration with the session lifecycle. This restores the canonical MCP cancellation behavior with runtime 1.0.81-12.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* test: update Copilot runtime expectations
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
---------
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: vs-code-engineering[bot] <122617954+vs-code-engineering[bot]@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Aaron Munger <aamunger@microsoft.com>
roblourensandCopilot
Lee Murrayandmrleemurray
Bhavya UandCopilot
vs-code-engineering[bot]andgithub-actions[bot]
Dileep YavanmandhaandCopilot
Raymond Zhao
Copilotandrzhao271
dependabot[bot]
Robo
Christof MartiandCopilot
Anthony KimandCopilot
Vijay Upadya
Logan RamosandCopilot
