vsls-agent Concrete class that honor the CollaborationSession contracts. It will resolve the quiried services based on a runtime registered services and also from a service rpc map Not implemented for agent session. Send rpc-sync-slow-fault event. VS uses RpcTelemetry.SlowSyncRpcFault method to send a similar event. The agent started and is ready to receive connections. The agent finished setting up a connection session. A guest failed to authenticate the host. The host failed to authenticate a guest. Agent has alerted client that it has made progress in joining/sharing a workspace Agent has alerted client that it has made a relay client connection Agent has alerted client that it has made a relay server connection Agent has alerted the client that it has attempted a connection whilst joining Agent has alerted the client that it has attempted a reconnection of a joined workspace. Agent has alerted the client that it has attempted to create a session Agent has alerted the client that it has attempted to reconnect to a session. The rpc session was disconnected due to lost connectivity. Event to indicate whether the guest is on the same subnet as the host. RPC method synchronous part is too slow. Event to indicate when getting user profile is unauthorized Description of where we are in the attempt loop Description of where the target type is for the operation Description of where the target ip used for the operation Description of where the target ip name used for the operation Description of where the target ip dewcription used for the operation Description of how many attempts we have to work through Description of HTTP request mask Description of HTTP request method Description of HTTP response status code Description of HTTP response reason phrase Duration in ms of this request Duration in ms of this request from the servers perspective Whether user has Proxy set Whether user has used the environment variables to set proxy. Whether an exception was encountered Content of the exception if we have it Property name suffix for properties that contain event duration. The value is the elapsed time in milliseconds. Description of how long the total operation has take to this point A correlation id to correlate Http requests sent from the client with those received by the server The service stamp which returned a particular request. Namespace of the relay that is being targetted. Property to indicate if the guest is on the same subnet as the host. Name of the Rpc method. The name of the RPC service. Duration of synchronous part of RPC method on the RPC server. Duration of synchronous part of RPC method on the RPC server. Who hosts RPC server. One of enum values. Removes a recent collaborator from the current profile. Removes all recent collaborators from the current profile. Omits the charset from the Content-Type header value (because the Node.js auth service doesn't like it). Augments HTTP request messages with auth tokens managed by the authentication service. Adds a user-agent header containing agent and client version information to outgoing HTTP requests. Implements the agent file service for access to a workspace filesystem. An instance of the FileService is unique to an RPC session and a workspace. Tracks information about one root directory in a (potentially) multi-root file system, including the associated AnyCode workspace and glob-list filters. Enables or disables AnyCode workspace integration. Tests that use the file service with mocked paths may need to disable this. Enables or disables AnyCode Indexing Tests that use the file service with specific expectations of file structures may need to disable this to prevent polution of the file tree Adds a root without raising a event. Normalized remote path for the added root e.g. /~0, null if is null or the root already exists. Configure persistent root. After persistent root is configured, it'll stay in effect forever until the agent terminates. It'll allow use of /~~/ paths that would work based on the root configuration, regardless of active regular roots. Persistent root configuration. Not null. If there is already persistent root configuration set If , , or any of property is null. Get file or directory info for a file addressed by vsls: URI path Type of file info vsls: URI path File list options. Get a value indicating whether guest with can support persistent root and the persistent root is configured. Guest's session number. True if the persistent root is configured and the guest can use it; Otherwise, false. Get a value indicating whether calling guest can support persistent root and the persistent root is configured. True if the persistent root is configured and the calling guest can use it; Otherwise, false. Get a value indicating whether the client can support persistent root and the persistent root is configured. True if the persistent root is configured and the client can use it; Otherwise, false. Check if can be expressed as persistent vsls path. Check if the current RPC client may use persistent paths if is true. Null if is null, or there is no persistent root configuration, or the path cannot be expressed with it, or if is true and the caller cannot use persistent roots. Otherwise, normalized persistent vsls path with / slashes and without trailing /, e.g. /~~/c$/workspace/foo/bar.cs Try converting to/from persistent form. Workspace file id to convert. May be null. A value indicating whether persistent root form should be used if it's possible and allowed. Whether to check caller permissions if is true. The argument if it's already in the right format and that format is allowed. New converted workspace file id if is not null and can be converted. If is true, and cannot be expressed in persistent root form, it's returned as non-persistent form. Otherwise, null. Given a virtual (workspace) path, returns the local path to a file or directory, or null if the path is invalid or is not under any known root. Given a virtual (workspace) path, returns the corresponding Root instance along with the local path to a file or directory, and updates the supplied path to a more canonical virtual path. Get full remote paths to the shared workspace roots. Persistent root paths /~~/... are preferred to regular root paths /~0/.. if persistent root configuration is set, shared workspace path can be expressed with it, and the client can use it. If persistent root path is not used, full root path (/~x/) is used instead. Update the list of visible children for a directory. Generate file change events corresponding to any files whose visibility has changed as a result of excluded/hidden filter changes. Gets the logged-in user associated with the current RPC channel, or null if no user is logged in. Gets or sets the keychain used to cache authentication credentials. Interface that a service can implement to delay RPC session disposal and agent shutdown when the client disconnects. Use it to finish long-running operations that the client may have started before it disconnected. Wait for pending operation before the server can dispose RPC services and shutdown. If there is no pending operation, the implementation must return completed task. Cancellation token. Abstracts local network operations for unit testing classes that use network. Gets the API version to be used in calls to the web service. Gets version information about the current agent process. Gets version information about the agent that is connected on the current RPC channel, or null if this connection is made directly from a client. Gets version information about the client tool that is connected on the current RPC channel, or connected indirectly via another agent, or null if an agent is calling not on behalf of any client. Exchanges versions with the remote session, and throws an exception if versions are incompatible. Gets the user settings for the current RPC session. Abstracting for creating incoming and outgoing workspace RPC sessions. Starts listening for incoming RPC sessions on a TCP port and/or relay endpoint. Workspace that incoming sessions will connect to; includes relay endpoint info Private key used to authenticate the host. Creates a list of RPC clients to be used for connecting to a remote workspace. Connection mode that determines the type of client(s) to create URIs (including ports) for direct TCP connections Relay endpoint URI Relay shared access signature Token for authenticating with the host Public keys used to authenticate the host. The optional relay hub identifier List of RPC clients, in priority order Given a list of RPC clients, tries connecting each in order until a successful connection is made and a session is esablished. This event is fired when the server accepting connections goes offline. Tries to connect a given set of rpc clients to an existing session. Connection mode used in the session. Entry in the active-objects list to track which workspaces are currently joined by this agent. Workspace ID. Proxy to the host WorkspaceService that was joined. Implements ICasadeClient but looking first for services available on the Rpc session List of substrings possibly found in a network interface name or description, which indicate the the interface is virtual and should be skipped. This list does not need to be completely exhaustive; it's mostly an optimization. If a virtual IP address is returned and a client tries to connect to that address (and Cascade port), the attempted connection will quickly fail and the client will move on to the next IP address or to the relay. Note VPN interfaces MUST NOT be skipped, but those don't seem to have the word "virtual" in their name. Tracks active objects and notifies when they are all removed. This class is thread-safe. Currently a single `activeObjects` list tracks 4 types of objects: - `RpcSession`: Client RPC sessions connected to this agent - `SharedWorkspace`: Workspaces shared by this agent - `JoinedWorkspace`: Local or remote workspaces joined by this agent - `WorkspaceService`: Services that are in (headless) shared or joined state with their client session disconnected. Use the `OfType<T>()` method to get objects of a specific type. The agent automatically shuts down when this list of active objects becomes empty. Displays information about network interfaces and IP addresses that may be useful for diagnosing direct peer-to-peer connectivity issues with Cascade sessions. Client for opening a JSON-RPC session via an Azure Relay connection. Server for accepting JSON-RPC sessions via an Azure Relay connection. Wraps a HybridConnectionStream to assist with performing a clean shutdown. Disposes the stream. A relay stream must not be disposed concurrently with a read operation -- the HybridConnectionStream Shutdown() method throws an exception in that case. The finalRequest parameter to IRpcStream.SendRequestAsync can be used to ensure the RPC session stream is disposed at a point when there are no pending read operations. Reads the relay shared access signature from the workspace record. Throws an exception if the communication with the service fails, or if the information cannot be found. When communicating with the service fails. Utils on a IRpcSession Method to return the 'Service' object of the RpcDispatcher instance Attempt to discover a service on the existing RpcDispatcher Services being registered on the session The rpc session to find the services Type of the servcie being looked Name of the service This class will implement IServiceProvider based on an Rpc session that could have the dispatcher service implemented True to stop the server after all RPC sessions have disconnected and no local workspaces remain shared. Base class to hold an rpc session entity Class to keep track of the connected rpc sessions The original initialize request made to initialize this rpc session Class to track an Rpc session to be reconnected Implement IAgentSessionService Reason on why to trigger a keep alive on the agent When the agent is started When an rpc is disconnect and we want to keep it alive until it could re-connect again When an rpc agent session service decide to keep the agent alive more time Helper methods to acquire services via . Data provided to the service to create an invitation link Invitation link object received from the service Implementation of the broker authorization service. The service is added into every local RPC session so that any broker process connected to the agent will be able to authorize itself given a valid broker token. The service injects an RPC relay for each permitted service name bridging the current client RPC session with target workspace remote sessions. Once authorized for the first time it's not possible to re-authorize the broker with a different token. A container of the registered broker entries shared across client and broker sessions. Implementation of the broker manager service. The service instance is created by the on every remote join operation so that it gets access to both host and guest RPC sessions. The service is disposed when the joined workspace is disposed. Facilitates task broker CLI command executions, such as run-task, monitor-tasks, or monitor-output. Runs a workspace task and monitors a task output when available. The nique task ID The broker token The cancellation token. Used to terminate the task execution. True if operation succeeded, or false otherwise. Monitors a workspace task execution and streams its output messages. Unique ID of a task to monitor. Unique ID of a task execution to monitor. The broker token. The cancellation token. True if operation succeeded, or false otherwise. Streams content of a task output stream to the console output. The unique ID of the stream. The stream condition. The broker token. The cancellation token. True if operation succeeded, or false otherwise. Implementation of a task output buffer allowing exclusive single writer or simultaneous readers access. Keeps shared context to synchronize readers and writers access. Provides a synchronization layer on top of the memory stream. Used both for writing and reading operations. Represents a worker synchronizing i/o streams of an external terminal application. Upon start it launches a terminal process and connects to its standard i/o. Represents a worker synchronizing i/o streams of a terminal integrated into a client. Upon start it attempts to connect to a named pipe to send/receive raw terminal data. Base class for terminal workers synchronizing i/o streams of a terminal application. Writes UTF-8 string to the terminal stream. Keeps track of data about a shared workspace used internally by the agent. Currently this data is not persisted anywhere. Eventually it should be persisted either locally or in the cloud, so that if the agent process is restarted then the shared-workspace state will not be lost. Gets or sets the client session that initiated this workspace Gets whether the workspace has the id either directly or as an invitation id. Finds a free tcp port and starts tcp listener if connection mode allows that. Channel factory that establishes an SSH session and channel over the stream before passing the channel stream to another factory. Disconnected SSH server sessions are available for reconnection for a short time. (If a client has not reconnected within this time, they'll have to do a full rejoin.) Creates a new session factory that constructs an SSH server session. Creates a new session factory that constructs an SSH client session. This property is only for testing back-compat. Normally this should be always false. Only tests set it to true. Provides means for transporting stream over ssh session Statefull encoding converter. Reading from it will read from the underlying reader and convert fromEncoding -> toEncoding. One call to ReadAsync can only result in atmost one call to ReadAsync on the underlying reader. Writing to it will convert toEncoding -> fromEncoding and write to the underlying writer. One call to WriteAsync may result to multiple calls on the underlying writer. Reading or writing is exclusive, meaning that only one consumer can read or write at a time. Reading can happen in parallel with writing. Cancelling reading or writing may cause undetermined behavior of subsequent reading or writing. Disposing will dispose the underlying readerwriter. We cannot use StreamReader/StreamWriter for encoding conversion because we need to guarantee that one read from the caller will translate to one read from the underlying reader, which is not a guarantee in StreamReader. Having multiple reads instead of one is bad - the read from terminal is waiting on user input, and if we start waiting more than necessary, the already available input wouldn't be property processed. Extensions that provide a stream returned by the Name of the stream. The objects representing the streams created by this provider. Initialize the Stream provider. This is typically where the stream could be created. Get a satisfying some condition that is given. An object that can be used to filter down to one of the streams created by this provider. Provides means for transporting stream over named pipe Represents a bi-directional stream that wraps an arbitrary IDisposableAsyncReaderWriter Id of the stream. Represents a bi-directional stream that wraps an arbitrary stream Unique stream id to allow multiple streams going to the same forwarded port or pipe. Reference count to support multiple sharing sessions for the same port. I.e. session 1 starts automatically when debugger starts, session 2 is requested explicitly by the user. A service that allows reading and writing to streams of data. Result item from listing public certificates. This class is designed to be compatible with the JSON Web Key (JWK) specification: https://tools.ietf.org/html/draft-ietf-jose-json-web-key-41 . Gets or sets the issuer for which this certificate is used to sign tokens. This value is omitted when certificates are requested for a single specific issuer. Gets or sets the key type. This is always "RSA" for certificates. Gets or sets the key ID. This is often, but not necessarily, the same as the thumbprint. Gets or sets the certificate thumbprint. Gets or sets the base64-encoded public certificate bytes. This is an array to accommodate a certificate chain. The first item in the array is the certificate for token validation; the others can be used to verify the first. Gets or sets the RSA key modulus, in Base64urlUInt encoding. Gets or sets the RSA key exponent, in Base64urlUInt encoding. Gets or sets a value indicating whether this is the primary certificate for the issuer. The primary certificate corresponds to the private certificate currently used to sign tokens for this issuer. Non-primary certificates may have been primary in the past or may become primary in the future, so validators should also consider them when validating tokens from the issuer. Result from listing public certificates. This class is designed to be compatible with the JSON Web Key Set (JWKS) specification: https://tools.ietf.org/html/draft-ietf-jose-json-web-key-41 . Gets or sets the set of certificates. Similar to the `JwtReader` class from the VSSaaS-SDK, but highly simplified. Compared to that one, this class does not include support for tenant-specific issuers, encrypted tokens, audience validation, or decoding without validating. Also it uses `TraceSource` instead of `IDiagnosticsLogger`. Interface for basic CRUD operations over a REST+JSON collection API. Collection item DTO type Implements basic CRUD operations over a REST+JSON collection API. Collection item DTO type Time spent trying to connect directly before trying the next connection option. This should be long enough to establish a connection on the same local network, but short enough not to cause an unreasonable delay when the connection fails. Time spent waiting for the initial packet exchange after connecting, before trying the next connection option. (VPN gateways may sometimes "accept" TCPesse connections without actually enabling communication.) Generates a predictable/repeatable ID for a workspace. The ID is a hash of the following parameters: - System ID (MAC address of the first non-loopback network interface) - User ID (from USERNAME environment variable) - Workspace root directory path(s) (case-insensitive) The hash is formatted as uppercase hex chars, truncated to a length of 20. Implements the agent workspace service for listing, sharing, and joining workspaces. The workspace service is never proxied to a remote agent. When joining a remote workspace, the join requst goes to the local agent first, and then the local agent creates an RPC session to the remote agent and sets up proxes for the OTHER services. The RPC session for talking to the host when joined as a guest. null if we're the host. TODO: remove this once we fully support the local join workspace Set shared workspace as ready for connection. Id for the workspace Cancellation token Registers or unregisters service proxies that enable the client to provide RPC services to other clients in the workspace. The RPC routing mechanism is built around a SharedWorkspace instance (one per workspace) that exists in the owner’s agent process for as long as the workspace is shared. That instance has an RpcServiceMap that tracks all services currently available in the workspace, indexed by service name. The values in the map are either actual service instances (for services like the file service that are provided by the owner agent) or service proxies that relay to the client that provides the service. (For non-owner clients, there is an additional proxy hop through the other agent.) The ServiceMap raises a ServicesChanged event when its contents change, and the change notification gets propagated to other agents and clients, informing them to update their proxies for the changed services. Called when sharing or joining a workspace. Register the workspace's available services with the client session, and notifies the client of their availability. Called when a joiner is notified that some workspace services have changed. Updates proxies to maintain routing of messages to/from changed services, and forwards the notification to the client. Adds a service relay for the added remote service. Notifies each client session in the sharer's agent process about any changes to available workspace services. Factory for AnyCode workspace settings, used by Live Share for file-change events and glob-list path matching. Priority 0 enables overriding AnyCode's built-in default settings. AnyCode workspace settings provider for one root directory. Files that should be completely excluded from file service and thus inaccessible to guests. Files that should be hidden from guests' directory listings by default (unless the `IncludeHidden` option is specified). Hidden files may still be accessed using a direct path. Files that cannot be modified by any guests. Files that are matched by .gitignore. This list may be included in one of the other lists based on a config setting. AnyCode workspace settings source for one (sub-)directory. Glob lists in settings are hierarchical, meaning they include/override lists from parent directories. Possible outcomes when guest requests to join collaboration session Success = guest is accepted by host Rejected = guest is rejected by host Canceled = guest cancels request before host responds Represents a guest. Represents a collection of guests who have participated in the current session at all. Includes all guests who have made requests to join a session, even if approval-required mode is on. Returns a bool indicating whether the user has remote LS support. Note: to be removed when multi-participant remote LS support is implemented. Takes the currently logged-in user and asks the Cascade services to associate self with the specified workspace (as provided to the constructor). A cancellation token, optional A SharedWorkspace confirming the user has joined, and containing workspace details including user token to be shared with session peers. Takes a guest user token and either validates it directly and extracts the profile from claims, or sends it to the Cascade services to obtain the profile of the person who's represented by the user token. This method can throw a RemoteException or an Exception if the operation fails. The user token as received from the remote user A cancellation token, optional A WorkspaceUserProfile with the information of the remote user Attempts to validate a guest session token and build a profile from token claims. Guest user profile, or null if not enough information was available to validate or build a profile directly. In that case, the profile might be obtained by calling the service. The token is definitely invalid for some reason described in the exception message. Event to be triggered everytime a user joins or unjoins a workspace session Ensures that the identity provided by the host matches the authenticated host identity reported by the service when joining. Host profile self-provided by the host (required, modified) Workspace owner ID as reported by the service (required) Owner profile as reported by the service (optional) Current user profile (optional) Creates a token reader that can validate guest session tokens, using validation keys that were provided by the service. Interface for heartbeat operation. Defines the workspace web service interface. Workspace web service implementation. Application actions that control how the console and console window behave Get string comparer that is used to compare environment variable names Gets environment variables that caller must for terminal Starts a new terminal and returns a connection to it. The connection then can be used to listen for terminal stdio and detect when it exits Terminal options that defines how terminal is started. Instead of options' Enviroment, is used though. Environment for the terminal to start. Trace source Cancellation token Terminal connection. Enable terminal in the console app. After calling this method, stdio is pass-through, and terminal window respects escape codes. Activate and focus the app. Gets stdio Connection to a running terminal process. IDisposableAsyncReaderWriter can be used to access stdio and to close the process on dispose. Event fired when the terminal process exits Terminal process ID Terminal process exit code Wait for terminal process to exit up to a given timeout. Timeout to wait for process exit. True if the process exits within the timeout, otherwise, false. Mercelessly kill terminal process. Change size of the terminal New columns New rows Reads and writes credentials from/to a simple JSON file. This implementation does not apply any special access controls to the file, but it does preserve any controls that may be already in place. So for a little more security, a user could create an empty file ahead of time and apply access controls that limit access to the single user. Still, this is inherently less secure than the default platform-specific keychain implementations, therefore it should only be used in environments where the default is not functional. Gets information about visible windows on Mac OS. Defines native types and methods for interop with Mac OS system APIs. Map BREAK to SIGINTR Map CR to NL (ala CRMOD) Enable output flow control Any char will restart after stop Ring bell on input queue full Maintain state for UTF-8 VERASE No output processing Enable following output processing Map NL to CR-NL (ala CRMOD) Map CR to NL Don't output CR 8 bits Enable receiver Hang up on last close Visual erase for line kill Visually erase chars Echo NL after line kill Enable echoing Echo control chars as ^(Char) Enable signals INTR, QUIT, [D]SUSP Canonicalize input lines Enable DISCARD and LNEXT Represents an Obj-C object backed by a native handle. It is often but not always an instance of (a subclass of) NSObject. Represents an Obj-C selector (name of a method) backed by a native handle. Abstracts access to components that require different implementations on different platforms. A stream used to interact with forked terminal. The only difference is that it cannot seek. Gets information about visible windows on Mac OS. Marshals a LPWStr (wchar_t *) to a string without destroying the LPWStr. Adds or removes an application-defined HandlerRoutine function from the list of handler functions for the calling process. A pointer to the application-defined HandlerRoutine function to be added or removed. This parameter can be NULL. If this parameter is TRUE, the handler is added; if it is FALSE, the handler is removed. If the function succeeds, the return value is nonzero. If the function fails, the return value is zero.To get extended error information, call GetLastError. An application-defined function used with the SetConsoleCtrlHandler function. A console process uses this function to handle control signals received by the process. When the signal is received, the system creates a new thread in the process to execute the function. The type of control signal received by the handler. If the function handles the control signal, it should return TRUE. If it returns FALSE, the next handler function in the list of handlers for this process is used. https://docs.microsoft.com/en-us/windows/console/handlerroutine The type of control signal received by the handler. A CTRL+C signal was received, either from keyboard input or from a signal generated by the GenerateConsoleCtrlEvent function. A CTRL+BREAK signal was received, either from keyboard input or from a signal generated by GenerateConsoleCtrlEvent. A signal that the system sends to all processes attached to a console when the user closes the console (either by clicking Close on the console window's window menu, or by clicking the End Task button command from Task Manager). A signal that the system sends to all console processes when a user is logging off. This signal does not indicate which user is logging off, so no assumptions can be made. A signal that the system sends when the system is shutting down. Interactive applications are not present by the time the system sends this signal, therefore it can be received only be services in this situation. Services also have their own notification mechanism for shutdown events. For more information, see Handler. Initializes the specified startup info struct with the required properties and updates its thread attribute list with the specified ConPTY handle. Pseudo console handle. HRESULT WINAPI CreatePseudoConsole( _In_ COORD size, _In_ HANDLE hInput, _In_ HANDLE hOutput, _In_ DWORD dwFlags, _Out_ HPCON* phPC ); See https://docs.microsoft.com/en-us/windows/console/createpseudoconsole HRESULT WINAPI ResizePseudoConsole( _In_ HPCON hPC, _In_ COORD size ); See https://docs.microsoft.com/en-us/windows/console/resizepseudoconsole void WINAPI ClosePseudoConsole( _In_ HPCON hPC ); See https://docs.microsoft.com/en-us/windows/console/closepseudoconsole Use this method with the default constructor to allow the memory allocation for the handle to happen before the CER call to get it. Create a new screen buffer(connected to the "conerr" terminal pipe) and pass it to child processes as the STDERR handle.This flag also prevents the agent from reopening CONOUT$ when it polls -- regardless of whether the active screen buffer changes, winpty continues to monitor the original primary screen buffer. Don't output escape sequences. Do output color escape sequences. These escapes are output by default, but are suppressed with WINPTY_FLAG_PLAIN_OUTPUT. Use this flag to reenable them. On XP and Vista, winpty needs to put the hidden console on a desktop in a service window station so that its polling does not interfere with other (visible) console windows. To create this desktop, it must change the process' window station (i.e. SetProcessWindowStation) for the duration of the winpty_open call. In theory, this change could interfere with the winpty client (e.g. other threads, spawning children), so winpty by default spawns a special agent process to create the hidden desktop. Spawning processes on Windows is slow, though, so if WINPTY_FLAG_ALLOW_CURPROC_DESKTOP_CREATION is set, winpty changes this process' window station instead. See https://github.com/rprichard/winpty/issues/58. QuickEdit mode is initially disabled, and the agent does not send mouse mode sequences to the terminal. If it receives mouse input, though, it still writes MOUSE_EVENT_RECORD values into CONIN. QuickEdit mode is initially enabled. As CONIN enters or leaves mouse input mode (i.e. where ENABLE_MOUSE_INPUT is on and ENABLE_QUICK_EDIT_MODE is off), the agent enables or disables mouse input on the terminal. This is the default mode. QuickEdit mode is initially disabled, and the agent enables the terminal's mouse input mode. It does not disable terminal mouse mode (until exit). If the spawn is marked "auto-shutdown", then the agent shuts down console output once the process exits. The agent stops polling for new console output, and once all pending data has been written to the output pipe, the agent closes the pipe. (At that point, the pipe may still have data in it, which the client may read. Once all the data has been read, further reads return EOF.) After the agent shuts down output, and after all output has been written into the pipe(s), exit the agent by closing the console. If there any surviving processes still attached to the console, they are killed. Note: With this flag, an RPC call (e.g. winpty_set_size) issued after the agent exits will fail with an I/O or dead-agent error. All the spawn flags. Names of GitHub token client apps supported for token exchange. Visual Studio. VS Code. List of supported clients Error details that can be returned as JSON from an HTTP request. Gets or sets the error message. Gets or sets the error stack trace. Request parameters for exchanging a token. Gets or sets the token to be exchanged, if that token was not specified in the `Authorization` request header. Gets or sets the name of the token provider, if a was specified in the body. Required if the property is specified. Must be one of the values from . Gets or sets the name of the client that the token was issued to. Recommended if the is . Must be one of the values from . The token will be considered invalid if it was not issued to the specified client. If unspecified, the token is validated against multiple clients, which may be slower. Gets or sets the optional requested audience for the resulting token. If unspecified, the configured default audience will be used. Gets or sets the optional requested lifetime for the resulting token. If the requested lifetime is greater than the configured maximum, the maximum is used. If unspecified, the configured default lifetime will be used. Gets or sets the optional requested scopes for the resulting token. Result from issuing or exchanging a token. Gets or sets the issued token. Structure of error details returned by the token service, including validation errors. This object may be returned with a response status code of 400 (or other 4xx code). Compatible with RFC 7807 Problem Details (https://tools.ietf.org/html/rfc7807) and https://docs.microsoft.com/en-us/dotnet/api/microsoft.aspnetcore.mvc.problemdetails but doesn't require adding a dependency on that package. Gets or sets the error title. Gets or sets the error detail. Gets or sets additional details about individual request properties. Names identity providers known to the token service, for which token-exchange is supported. Microsoft (AAD/MSA) identity provider. Alternate Microsoft (AAD/MSA) identity provider. GitHub identity provider. Client for token service. The default lifetime value for the Cascade-exchanged authentication token. Initializes a new instance of the class with an HTTP client and no client authentication callback. HttpClient with base address set to the token service (not including any API path). Only some of the token service APIs can be called with no authentication. Initializes a new instance of the class with an HTTP client and a client authentication callback. HttpClient with base address set to the token service (not including any API path). Async callback for retrieving a client auth token. Converts a token service HTTP response to a result object (or exception). Type of result expected. Response from a token service request. True if 404 Not Found is a valid response. Cancellation token. Result object of the requested type, or null if the response is Not Found and is true. The service returned a 400 Bad Request response. The service return a 401 Unauthorized or 403 Forbidden response. Exchanges a token for a newly issued JWT token via the token service. Input token and parameters for the exchange. Cancellation token. The issued JWT token. Some claims or parameters were missing or invalid. The exception message often contains details. The client authentication token was missing or invalid. Json extensions The max depth for serialization. The JSON object serialization settings. The JSON object serializer. Deserialize object directly from JToken. Type of object. The JToken to be deserialized. Extract the property directly from JObject. Type of property to return. The JObject to be deserialized. The property name. Represent a auth token with the values we are able to decode Class to help parsing auth tokens Helper class to provider WorspaceSettings representation for in-memory list of filters Gets default excluded key Initializes a new instance of the class. the list of exclude filters Initializes a new instance of the class. the list of exclude filters Exclude key Base implementation for exclude filters settings translato. Initializes a new instance of the class. the owning workspace Create a Workspace compatible exclude list from an external source the absolute path of the settings scope excluded list settings check if a file change event needs to generate a settings change. file change event args the affected scope true if settings changed .gitignore translator Initializes a new instance of the class. Exclude key settings value Initializes a new instance of the class. Initializes a new instance of the class. the owning workspace Exclude key settings value Helper class for a concurrent hashset