Secure multi-window registry credentials - #154
Merged
Merged
Conversation
Adds Claude Code to the agent selection popup and manual config docs. DebugMCP is a standard MCP server over Streamable HTTP, so Claude Code already works via `claude mcp add` / editing ~/.claude.json by hand - this just wires it into the same auto-detect flow the other JSON-based agents (Cline, Cursor, Windsurf, Roo Code, Antigravity) already use. - ~/.claude.json's top-level `mcpServers` field is the user-scope, cross-project location per https://code.claude.com/docs/en/mcp. - Claude Code's config schema only recognizes `http`/`streamable-http` as transport types, not the `streamableHttp` shape the other JSON agents use, so getDebugMCPConfig() special-cases it the same way it already does for copilot-cli. - Claude Desktop is intentionally left out of auto-registration: its official docs only show local stdio `command` servers in claude_desktop_config.json, with remote/local HTTP servers added through Settings -> Connectors -> Add custom connector instead of a static config file. The README's manual section documents that path. Verified: `npm run check-types` and `npm run lint` pass. `npm test` (vscode-test) could not complete in this sandbox - the bundled test host hits an unrelated environment issue unpacking VS Code under a path containing a space - so it wasn't able to run end-to-end here. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01WhAeRUTsesSRnTi4E6CAcR
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: c6d87f13-5a43-486b-9ddd-88e8944424e9
Move the ControlServer registry into per-user VS Code storage, enforce owner-only POSIX permissions, and use atomic credential writes. Add permission regression coverage and document the hardened design. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
✅ Extension Build Successful!📦 VSIX artifact is ready for download Scroll down to the "Artifacts" section and download To install: In VS Code, run |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Validation
npm test(212 passing; 2 POSIX-only permission tests skipped on Windows)npm run package