VS Code: Agent Host Grows Up
The Agent Host system got a wave of hardening this cycle — session inheritance, security fixes, and multi-provider support — while the Sessions UI consolidated around shared editor components. A critical SSH man-in-the-middle vulnerability was also closed.
Duration: PT2M47S
Episode overview
This episode is a short developer briefing from VS Code.
It explains recent repository work in plain language.
- Show: VS Code
- Published: 2026-08-07T13:06:27Z
- Audio duration: PT2M47S
Transcript excerpt
This excerpt keeps the crawler page concise. Listen to the episode or use the RSS feed for the full update.
Good morning. It's August 7th, and today's codebase activity centers on one theme: Agent Host is maturing fast, and the team is spending real effort making it consistent and safe.
Start with security. PR 329462 fixed a serious gap — remote agent host SSH connections accepted any host key with no verification, meaning a password prompt could run after an already-compromised key exchange. That's now fixed with proper host key trust checking. If you use remote agent hosts over SSH, this matters.
Next, session behavior is being unified across providers. PR 329562 makes Agent Host inherit the invoking model and permissions when a session spins up a child session, with Claude, Codex, and Copilot each handling their own permission inheritance. A related draft, PR 329564 from ulugbekna, extends that further with…
Second theme: the Sessions UI is consolidating onto shared editor infrastructure rather than maintaining parallel implementations. PR 329547 and the follow-up commit 98b093a moved chat tabs onto the shared modern editor-tab styling, removing a duplicate stylesheet. PR 329429 adds a formal "cannot close" capability…
Smaller but notable: PR 329507 fixed menus reacting to a stationary…
W…