mirror of https://github.com/microsoft/vscode.git synced 2026-05-18 22:29:56 +01:00

Files

T

Connor Peet c30ed7c4a5 feat(agent-host): gate inbound filesystem RPCs with a permission service (#314194 )

* feat(agent-host): gate inbound filesystem RPCs with a permission service

Reverse `resource{Read,List,Write,Delete,Move}` from remote agent hosts
were routed straight to `IFileService` with no authorization. Add a
permission service that gates each reverse RPC, returns typed
`PermissionDenied` with `data.request`, handles negotiation via the new
`resourceRequest` reverse RPC, and surfaces a Deny / Allow / Always Allow
prompt above the chat input.

URIs are canonicalized through `IFileService.realpath` before comparison
so `..` and symlinks can't escape grants. Implicit read grants are
auto-registered for customization URIs the client sends to the host, so
plugin sync remains friction-free. Always-Allow grants persist into a
new user setting, `chat.agentHost.localFilePermissions`.

* comments and tests

2026-05-04 22:36:24 +02:00

automation

Fix flaky statusbar smoke test (TOCTOU race in click) (#313141 )

2026-04-30 00:07:57 +00:00

componentFixtures

Update InlineChatZoneWidget screenshot baselines

2026-05-04 19:33:42 +02:00

integration

chore: run npm audit fix (#306509 )

2026-03-30 16:32:21 -07:00

mcp

Bump hono from 4.12.12 to 4.12.14 in /test/mcp (#310374 )