Wake VS Code Copilot chats through verified native hooks
Copilot chats in VS Code can join Relay, receive messages in the same native chat, and resume from a waiting stop hook on macOS. This adds the public core adapter, session contract and hook helper; private relay-desktop owns provider setup, managed MCP credentials and per-call identity signing. History ingestion stays in RelayHistory’s existing Copilot provider.
The adapter verifies the live Microsoft-signed runtime, its host and sealed VS Code app, native held session inode, exact host-selected helper and helper program signature. Ordinary terminal/MCP children of the shared runtime cannot select a chat. Offers are scoped to the active workspace and owning registration, including aliases. Durable submission claims survive restart and long sleeps; uncertain sends are failed without automatic resubmission.
The native hooks deliver post-tool context or a stop continuation without launching another executor. Missed starts recover through verified hooks; identity context retries until native acknowledgment. Completed final replies are bound to the delivery receipt and matching final turn. Managed hook repair preserves user content and handles helper moves. Closing/cancelling the chat, provider limits or machine sleep can end the waiting hook; this does not reopen closed chats or wake a computer. Linux/Windows report verified wake unavailable.
Validation: full core library suite before the final runtime-recovery follow-up (2,241 passed, 16 ignored), latest 33 Copilot regressions, 11 shared inbox regressions, and two outbound route tests covering identity/alias/workspace scoping and claimed-message preservation across rename/replacement; cargo fmt; the unchanged published-peer install tests (2 passed after the npm tarball became available); a live strict signature/held-session proof against the installed VS Code runtime. Clippy completes with existing warnings; rust-oleum has existing base violations and no new Copilot violations. Veto code/security/secrets review passes. Companion Desktop setup tests and Swift build pass with a local dependency patch.
Live component checks used a disposable native Copilot chat. A complete packaged Desktop → deployed Cloud MCP → Relay reply/history round trip remains release validation; this PR does not claim that end-to-end result. Desktop must pin the public core after merge, and Cloud #6080 supplies the attestation verifier.