VS Code: Major Chat Architecture Overhaul and Security Enhancements
VS Code received 9 merged pull requests today, headlined by a major simplification of the agent host editing system and several security improvements including workspace boundary enforcement and OAuth secret storage.
Duration: PT1M55S
Transcript
Good morning, this is your VS Code developer briefing for Thursday, May 23rd, 2026.
Connor Peet merged a substantial refactor of the agent host editing session, replacing the heavyweight AgentHostEditingSession with a direct file-edit progress system. The change removes 844 lines of code while streamlining how chat displays file edits, eliminating unnecessary round-trips in the diff display pipeline.
Felipe Cruz fixed the runTests tool's file lookup issues in remote environments by canonicalizing URIs before comparison. Kyle Cutler added Chrome DevTools Protocol support for browser emulation, while Joaquín Ruales implemented the "Add screenshot to chat" feature for the browser editor.
Security improvements were prominent today. Maggie Guo enhanced the search subagent tool to prevent disclosure of files outside the current workspace, rejecting any paths that don't meet workspace boundaries. A separate commit addressed path traversal vulnerabilities in the Create Workspace file tree functionality.
Tyler Leonhardt implemented secure OAuth client secret storage for MCP servers, moving secrets from plain-text configuration files into the OS secret storage service. The feature includes a new codelens interface for managing secrets directly in the mcp.json file.
Additional updates include enhanced logging for language model resets, improved CLI session tracking for Copilot, and fixes for MXC executable validation in the build process. Bhavya Upadhyay updated the Messages API to skip historical thinking blocks, preventing 400 errors from Anthropic's API.
What's next: These changes focus heavily on security hardening and user experience improvements in chat functionality. The simplified editing architecture should provide a foundation for more efficient file manipulation features.
That's your VS Code update for today.