Files
vscode/src
Connor Peet b929e4a80a chat: add marketplace trust prompt for agent plugin installation (#299354)
- Adds trust confirmation dialog requiring users to explicitly trust a
  marketplace before installing plugins from it. Protects against
  accidental plugin installation from untrusted sources.
- Introduces observableMemento for storing trusted marketplace canonical
  IDs in persistent storage (StorageScope.APPLICATION), tied to user
  profiles, never expiring.
- Trust is scoped per-marketplace (by canonicalId), so trusting one
  marketplace trusts all plugins sourced from it. Reduces friction for
  plugins from the same trusted source.
- Trust gate applies to all plugin source kinds (RelativePath, GitHub,
  GitUrl, npm, pip) — for npm/pip it's additive to the existing terminal
  command confirmation.
- Expands IPluginMarketplaceService with isMarketplaceTrusted() and
  trustMarketplace() methods, and injects IDialogService into
  PluginInstallService.

(Commit message generated by Copilot)
2026-03-04 20:49:49 -08:00
..