Merge remote-tracking branch 'origin/main' into tclem/rust-sdk-release-prep

# Conflicts:
#	.gitignore

Author: tclem

.gitignore

@@ -6,3 +6,6 @@ docs/.validation/
 # Rust scenario build artifacts
 test/scenarios/**/rust/target/
 test/scenarios/**/rust/Cargo.lock
+
+# Visual Studio
+.vs/

docs/getting-started.md

@@ -1599,6 +1599,15 @@ copilot --headless --port 4321
 
 If you don't specify a port, the CLI will choose a random available port.
 
+By default the headless server only accepts connections from loopback (`127.0.0.1`), so the SDK must run on the same machine. To accept connections from other hosts (for example when running the CLI in a container or on a separate server), bind to a non-loopback address with `--host`:
+
+```bash
+# Listen on all interfaces
+copilot --headless --host 0.0.0.0 --port 4321
+```
+
+> **Warning:** Exposing the headless server on a non-loopback address makes it reachable by anyone who can route to that address. Pair it with network controls (firewall, private network, reverse proxy) and authentication appropriate for your environment.
+
 ### Connecting the SDK to the External Server
 
 Once the CLI is running in server mode, configure your SDK client to connect to it using the "cli url" option:

docs/setup/backend-services.md

@@ -67,15 +67,21 @@ copilot --headless
 # Output: Listening on http://localhost:52431
 ```
 
+By default the headless server only accepts connections from loopback (`127.0.0.1`). To accept connections from other hosts — for example from another machine on your network — bind to a non-loopback address with `--host`:
+
+```bash
+copilot --headless --host 0.0.0.0 --port 4321
+```
+
 For production, run it as a system service or in a container:
 
 ```bash
-# Docker
+# Docker — must bind to 0.0.0.0 so the container's published port is reachable
 docker run -d --name copilot-cli \
     -p 4321:4321 \
     -e COPILOT_GITHUB_TOKEN="$TOKEN" \
     ghcr.io/github/copilot-cli:latest \
-    --headless --port 4321
+    --headless --host 0.0.0.0 --port 4321
 
 # systemd
 [Service]
@@ -415,7 +421,7 @@ version: "3.8"
 services:
   copilot-cli:
     image: ghcr.io/github/copilot-cli:latest
-    command: ["--headless", "--port", "4321"]
+    command: ["--headless", "--host", "0.0.0.0", "--port", "4321"]
     environment:
       - COPILOT_GITHUB_TOKEN=${COPILOT_GITHUB_TOKEN}
     ports:

docs/setup/scaling.md

@@ -520,7 +520,7 @@ spec:
       containers:
         - name: copilot-cli
           image: ghcr.io/github/copilot-cli:latest
-          args: ["--headless", "--port", "4321"]
+          args: ["--headless", "--host", "0.0.0.0", "--port", "4321"]
           env:
             - name: COPILOT_GITHUB_TOKEN
               valueFrom:
@@ -577,7 +577,7 @@ flowchart TB
 containers:
   - name: copilot-cli
     image: ghcr.io/github/copilot-cli:latest
-    command: ["copilot", "--headless", "--port", "4321"]
+    command: ["copilot", "--headless", "--host", "0.0.0.0", "--port", "4321"]
     volumeMounts:
       - name: session-storage
         mountPath: /root/.copilot/session-state

dotnet/.gitignore

@@ -16,7 +16,6 @@ src/build/GitHub.Copilot.SDK.props
 *.sln.docstates
 
 # IDE
-.vs/
 .vscode/
 *.swp
 *~

dotnet/Directory.Packages.props

@@ -10,7 +10,6 @@
     <PackageVersion Include="Microsoft.Extensions.Logging.Abstractions" Version="10.0.2" />
     <PackageVersion Include="Microsoft.NET.Test.Sdk" Version="18.3.0" />
     <PackageVersion Include="Microsoft.SourceLink.GitHub" Version="10.0.102" />
-    <PackageVersion Include="StreamJsonRpc" Version="2.24.84" />
     <PackageVersion Include="System.Text.Json" Version="10.0.2" />
     <PackageVersion Include="xunit" Version="2.9.3" />
     <PackageVersion Include="xunit.runner.visualstudio" Version="3.1.5" />