10 - FEAT: Media Drag and Drop by richlundeen · Pull Request #3648 · microsoft/PyRIT

Richard Lundeen (richlundeen) · 2026-10-29T14:52:52Z

Adds media drag-and-drop through the same file/path handling used by existing attachment controls. Shows selected-file names and sizes, with image-only thumbnails, Replace, and Remove instead of encoded URLs.

Changes:

Drop media into chat, editable conversation prompts, and existing converter file fields, including New converter from chat.
Reuse attachment and Upload handling, file ordering, existing target checks, and read errors. Native file-type hints guide the chooser; they do not add an application allowlist.
Show the selected file's actual name and size, with a thumbnail only for images. Replace and Remove preserve ingestion; removal restores path entry.
Keep click/path controls and read-only states. Show drop feedback only while dragging files, and keep disabled reasons and read failures visible.

Layer 10/10 | Previous: #3649 | Final: #3648 | Blocked by: #3649

Diff is cumulative until preceding layers merge.

Before (original GUI)

Uploading a PNG to a converter image field shows its encoded data URL rather than an image thumbnail.

After

A dropped PNG appears in the existing chat attachment list. The prompt draft and attachment button remain available.

Dropped media appears as editable pieces in user and simulated-assistant messages.

The converter file field shows a small image preview, actual filename and size, Replace, and Remove.

Non-image selections show their filename and size without an image preview.

Video

Converter file drop, selected-file metadata, Replace, and Remove:

media-file-presentation.webm

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Move history into feature routes, add stored ID lookup, and retain the current chat draft. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Preserve discard blocking before resetting the composer and use shared encoded continuation and scenario routes. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Keep an explicit not-found page and Home recovery link at unknown URLs. Preserve the last valid chat and dataset views without changing legacy aliases or Registry index behavior. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Prefer the existing retained draft when entering Chat from another view. Keep an already open chat in place so live work is not replaced by an older snapshot. Cover the workflow with the real History table, Chat tabs, composer and reset controls. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Move score matching into Scorer.find_matching_scores so reuse compares the expectation score_async prepares, share chat evaluation and bounded publication between Send and Apply, project the latest-response result, outcome, and canonical response ID from the backend, and keep Apply status in ChatWindow. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Show compact scan results, saved seed and component identities, live read-only scan conversations, and faithful saved launch configuration. Reuse SDK progress, scoring, and runtime ownership. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Expose nested active attempts and chronological current conversations. Restore scoped success rates and compact operational notices, isolate timing updates, validate saved rerun references, restore drill-down focus, and remove obsolete paired frontend surfaces while retaining public analytics contracts. Cancellation persistence and outcome classification are excluded pending user decision. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

HELD PROPOSAL, not approved for publication. Reuses ERROR/CancelledError records to retain interrupted conversations and joins publication before releasing execution. This changes historical attempt/error counts and all-outcome denominators; user review must choose this policy or attribution-only persistence before release. Keep this commit separate from confirmed repairs. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Preserve atomic stored-message metadata, shared owned-write cancellation, and chat scoring policy. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Preserve manual chat scoring and content-sensitive regex identities while integrating typed scorer hooks and dependency URL-decoding policy. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Keep equality checks for pattern-only scorers while recognizing default-only preprocessing in merged shell scoring. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Keep baseline identity guidance local until a catalog producer exists, and cover the serialized contract and independent disclosure behavior. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Preserve activity ordering and verified scenario-history provenance lookup. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Integrate d346813 with scoped scorer participation and persistence conflict resolutions. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Preserve PR 3646 Objective target onboarding semantics while retaining exact dependency and squash-main ancestry. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Remove the integration-only comment from e7c4a2d9f013 so its bytes match the immutable selected-main revision. No schema or runtime behavior changes. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Keep staged, branch, and published-main immutability checks intact while accepting corrections that restore protected migration bytes. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Integrate 65a59e9 while retaining automatic refresh state and predecessor removal/filter repairs. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Integrate 229ca63 after the exact published dependency head, preserving the validated integration tree. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Richard Lundeen (richlundeen) · 2026-11-03T21:54:38Z

Both numbered findings in this review are fixed in a15e20842aa2354058e3f28a86777cd3580ea1c1: successful file reads clear only their own read error, and focus transfers to Replace only when the path input still owns focus. The affected frontend suites passed (501 tests).

In reply to #3648 (review)

Richard Lundeen (richlundeen) · 2026-11-03T21:56:02Z

At a15e20842aa2354058e3f28a86777cd3580ea1c1, the selected-main integration restores legacy attack/conversation URL redirects while retaining IDs, query parameters, and fragments. The aggregate review is not fully resolved: ordered-evidence matching remains a real unchanged main defect originating in already-merged #3644, and the active-to-terminal transcript final-read issue also remains unchanged on main. Broader synchronous/mutable freshness guarantees are not claimed fixed. The media-dialog repairs address submission-error preservation and conditional focus transfer only.

In reply to #3648 (review)

FEAT: Add expandable sidebar navigation

dcf012f

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Richard Lundeen (richlundeen) and others added 5 commits October 29, 2026 09:36

FIX: Preserve sidebar tooltips and share responsive queries

4a72b94

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

FEAT: Consolidate attack and scanner history

ca81736

Move history into feature routes, add stored ID lookup, and retain the current chat draft. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

FIX: Keep editor drafts until new-attack navigation commits

22faf6b

Preserve discard blocking before resetting the composer and use shared encoded continuation and scenario routes. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

hannahwestra25 assigned Behnam (behnam-o) Oct 29, 2026

Richard Lundeen (richlundeen) and others added 14 commits October 29, 2026 11:40

FEAT: Normalize registry identities

2b4b45d

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

FIX: Align registry browser checks and identity docs

9fc4c51

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

FEAT: Reuse last-used chat and scan selections

65fe249

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

FIX: Preserve scorer preferences and repair target setup coverage

c548838

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

FIX: Preserve explicit unavailable scorer overrides

0ea5a7a

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

DOC: Clarify the current adversarial fallback order

4428222

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

MAINT: Remove obsolete effect lint suppression

287e94a

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

FEAT: Latest-response Scoring

10c7fe8

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

FIX: Scope Apply status to its scorer and objective

dbf8cf4

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

FIX: Apply layer-4 scorer preference guards to Apply

3ecc1bf

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Richard Lundeen (richlundeen) and others added 24 commits November 2, 2026 22:33

Cover retained invocation evidence in route contracts

b0b5b10

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Merge dependency PR microsoft#3647 into PR microsoft#3644

e05cc58

Preserve atomic stored-message metadata, shared owned-write cancellation, and chat scoring policy. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Merge selected main into PR microsoft#3644

684710c

Preserve manual chat scoring and content-sensitive regex identities while integrating typed scorer hooks and dependency URL-decoding policy. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Include SQL quote filtering in scorer identity

498230a

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Preserve first-send evidence across created-attack route commits

5a3e201

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

TST: Respect default-only regex scoring policies in identity assertions

de33e67

Keep equality checks for pattern-only scorers while recognizing default-only preprocessing in merged shell scoring. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Merge PR 3644 dependency

652216d

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Merge selected main into PR 3643

1cac6fe

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

FIX: Remove unproduced baseline catalog identity

1a75c91

Keep baseline identity guidance local until a catalog producer exists, and cover the serialized contract and independent disclosure behavior. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Fix scenario history expansion and navigation synchronization

78009af

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Merge PR microsoft#3643 dependency into PR microsoft#3645

95994b6

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Merge selected main into PR microsoft#3645

2728d45

Preserve activity ordering and verified scenario-history provenance lookup. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

test: cover activity cursor page boundaries

d346813

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Merge exact PR 3645 dependency into PR 3646

c8cae0d

Integrate d346813 with scoped scorer participation and persistence conflict resolutions. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Merge selected main b98cd8b into PR 3646

0b6f515

Preserve PR 3646 Objective target onboarding semantics while retaining exact dependency and squash-main ancestry. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Restore published migration script exactly

a87e178

Remove the integration-only comment from e7c4a2d9f013 so its bytes match the immutable selected-main revision. No schema or runtime behavior changes. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Allow exact ancestral-base migration restorations

65a59e9

Keep staged, branch, and published-main immutability checks intact while accepting corrections that restore protected migration bytes. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Merge exact PR microsoft#3646 dependency into Automatic Refresh

df517f1

Integrate 65a59e9 while retaining automatic refresh state and predecessor removal/filter repairs. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Merge selected main into Automatic Refresh

e945528

Integrate 229ca63 after the exact published dependency head, preserving the validated integration tree. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Fix quiet refresh pagination and visible dataset reads

4fd06ec

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Await accessible converter filters after removal dialogs

b59318f

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Merge predecessor microsoft#3649

877908c

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Merge selected main for PR microsoft#3648

2223350

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Fix converter dialog file-read races

a15e208

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Richard Lundeen (richlundeen) added this pull request to the merge queue Nov 3, 2026

Merged via the queue into microsoft:main with commit 666817b Nov 3, 2026
65 checks passed

Richard Lundeen (richlundeen) deleted the richlundeen-media-drag-and-drop branch November 3, 2026 22:35

Navigation Menu

Repository navigation

10 - FEAT: Media Drag and Drop - #3648

10 - FEAT: Media Drag and Drop#3648
Richard Lundeen (richlundeen) merged 137 commits into
microsoft:mainfrom
richlundeen:richlundeen-media-drag-and-drop

Richard Lundeen (richlundeen) commented Oct 29, 2026 •

edited

Loading

Uh oh!

Richard Lundeen (richlundeen) commented Nov 3, 2026

Uh oh!

Richard Lundeen (richlundeen) commented Nov 3, 2026

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Conversation

Richard Lundeen (richlundeen) commented Oct 29, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Before (original GUI)

After

Video

Uh oh!

Richard Lundeen (richlundeen) commented Nov 3, 2026

Uh oh!

Richard Lundeen (richlundeen) commented Nov 3, 2026

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Richard Lundeen (richlundeen) commented Oct 29, 2026 •

edited

Loading