Complete source previews
Valid bounded spread expressions remain visible.
The extension runs a local MCP server inside your editor;
cc agent
in the integrated terminal connects automatically — editor capabilities
become agent tools, and agent edits go through the editor's native diff
under your judgment.
VS Code 0.37.177 is public on Open VSX with 60K+ downloads; its manifest recommends CLI 0.166.141 . JetBrains Marketplace 0.4.194 is approved and publicly listed, and recommends CLI 0.166.141. npm latest CLI is 0.166.141. No Microsoft VS Code Marketplace build is published.
Open VSX 0.37.177 is public and recommends CLI 0.166.141. It defers periodic reads during actions and discards stale projections per panel. Marketplace-approved JetBrains 0.4.194 recommends CLI 0.166.141. see candidate and release details .
The paired CLI revokes stale shell permits before official settings/scoped writes in the same process/module instance; restoring rules cannot revive them. Cross-process immediate notification remains incomplete. Public JetBrains 0.4.194 retains approval-card layout and host diagnostics. Marketplace approved 0.4.194; public ZIP payload verification remains pending; restart the IDE and run Doctor after upgrading. Public VS Code 0.37.177 recommends CLI 0.166.141 and includes initialization timeout recovery and the mode chooser. JetBrains verifies owner-only Windows bridge permissions before writing its token and preserves temporary lockfiles with live writers. Public versions page through committed session history, recover across restarts, and handle bounded drafts; Stop resynchronizes with CLI-owned state. TypeSafe, Laya, and compatible System One Skill decisions are limited to durable, single-prompt, headless CLI runs; IDEs store no decision-model credential and receive no routing or Skill-execution authority.
Open VSX 0.37.177 and JetBrains 0.4.194, with their respective recommended CLI versions, save goals, file evidence, failures, and next steps as authoritative checkpoints plus a bounded WORKLOG.md; handoff copies neither the old transcript nor temporary permissions.
Open VSX 0.37.177 with CLI 0.166.141 admits a bounded read of a known target during recovery. Synthetic pauses no longer feed repeated-read or identical-output counters, while genuine repetition and unrelated remote discovery still fail closed.
Each prompt automatically carries your current selection + open tabs (an <ide-context> block) — the model knows what you are looking at, never persisted to the session.
After the agent edits a file, language-server errors/warnings flow back into the tool result — it sees and fixes its own breakage within the same loop.
File-edit confirmation upgrades to the editor’s side-by-side diff: edit the right side, Accept replaces execution, hunk-level "Pick hunks…" partial accept, "Request changes…" inline notes that the agent revises against; a cross-file change can go through openMultiDiff for one batched multi-file review. Reject never writes.
executeCode runs code in the active notebook’s kernel and returns output, variables persist across calls (VS Code).
Talk to the agent without a terminal: streaming replies + tool traces + Plan-mode cards + Approve/Deny cards + multiple conversation tabs (each its own agent process, switching restores the transcript) + session resume + /sessions switcher.
Open VSX 0.37.177 keeps one-shot approval as the fast path and adds explicit current-turn, current-session, deny, and cancel choices. Turn/session grants reuse only the exact capability, scope, and binding from the CLI request; the Webview cannot widen authority.
Start App Preview finds your dev script → runs the dev server → detects the served URL → opens it embedded in the editor (VS Code’s built-in Simple Browser / JetBrains’ JCEF browser, falling back to the external browser when JCEF is unavailable); the dev server’s HMR handles live reload on edits; if the dev server dies unexpectedly it reports a crash with a one-click Restart instead of silently stopping.
getTerminalOutput lets the agent see the commands you just ran in the integrated terminal — their output and exit code (VS Code 1.93+ shell integration) — so it knows what you ran and how it failed. Auto-injected into <ide-context> each turn, plus an explicit @terminal mention.
cc-ide-quality/v1 sends bounded quality snapshots with freshness metadata. Stale results stay visibly stale, and VS Code notebook execution carries the real notebook and cell context.
Enable or disable by scope. Upgrades stage and revalidate manifests/signatures/SBOMs before atomic activation, restoring the previous version on failure. IDEs reload only after activation and require explicit consent for capability widening.
The IDE observes raw local team-state v6 and separate distributed-queue v1 snapshots read-only. Takeover, managed-checkpoint recovery, and side-effect adjudication return to the CLI with authority-digest, lease, and evidence fences. Stale UI actions fail closed; the IDE never mutates authoritative JSON directly.
Open VSX 0.37.177 and JetBrains 0.4.194 use Schema-generated payload unions while preserving unknown future events; VS Code retains bounded canonical message/follow-up and custody-handoff counters.
VS Code can explicitly enable the default-off App Server pilot. It exposes fixed Thread/Turn methods rather than arbitrary JSON-RPC; approvals decline until the review UI lands, and failure never bypasses CLI permissions or sandboxing.
Usage views show measured tool duration, observed same-turn retries, and secret-free streaming LLM retry reasons with actual provider/model identity, without retaining tool arguments, output, or credentials.
Open VSX 0.37.177 and JetBrains 0.4.194 show CLI-owned flow/Routine projections, scope, preflight, and history. Mutations use exact revisions and CLI argv; the IDE never writes authoritative storage directly.
Open VSX 0.37.177 and JetBrains 0.4.194 verify, persist, and pause deployment profiles through the CLI, then show budget/signer, SQLite-seal, transition-recovery, and snapshot-store configuration read-only. IDEs receive no runner, grader, database bytes, Ledger, or governance private keys; PM readiness remains non-executable and automatic active promotion remains on HOLD.
Default-off TypeSafe, Laya, or compatible System One decisions support durable, single-prompt, headless CLI runs only. IDEs do not read or store decision credentials, enable decision mode, or receive Skill routing, execution, or publication authority.
Filter bundled, marketplace, managed, and workspace Skills by source and state, with canonical digests, index witnesses, and verified-outcome ranking. Browsing never installs or promotes a Skill.
Preview, open, copy-path, reveal, and download first pass CLI artifacts access, which revalidates managed bytes and writes a content-free audit event. Deletion uses a stable id so response-loss recovery does not issue a second destructive operation.
Public 0.37.177 / 0.4.194 consume immutable CLI session/message projections; CLI 0.166.141 provides a paged read-only index with an authoritative full-scan fallback for large background histories. Stale actions still fail closed.
The public build covers GitHub, Gitee, configured remotes, and manual handoff. Each step verifies result/effect digests; rewind binds session, workspace, repository head, checkpoint revision, and manifest digest.
Public 0.37.177 / 0.4.194 surface execution location, workspace authority, session, workflow, and recovery identity. With CLI 0.166.141 they use the actual primary-request window and input/output/cache usage, exclude attributed child calls, and label fallback estimates.
Both IDEs summarize permission activity plus scoped grant and revoke entry points. Every change still executes through CLI commands and exact context; the IDE never bypasses authoritative storage.
Open VSX 0.37.177 provides isolated inline sessions, streaming replies, code-block actions, and interaction recovery while retaining the stable/minimum × Linux/Windows/macOS ARM64 multi-window isolation gate. Explain / Refactor / Fix / Docs / Tests are public.
Paired CLI 0.166.141 gives Issue queries, artifact downloads, and log inspection one investigation budget. Failure assertions, source locations, and verdicts survive compaction, restart, and task handoff. Restart the chat host after upgrading; a successful log download does not establish a passing test.
npm latest is chainlesschain@0.166.141 at commit df9295e33a. Exact-commit CLI CI/Strict, including Linux ARM64 Strict, and npm OIDC publication with public readback succeeded. Open VSX 0.37.177 and JetBrains 0.4.194 are both public; Microsoft Marketplace is not published.
Manual Alt+\ completion is unchanged. The default-off automatic path adds cancellable 650 ms debounce, exact-context dedupe/cache, separate hourly request and context budgets, bounded output, and quality fallback. Results slower than five seconds or below quality fail quiet.
Run
cc agent
in the editor's integrated terminal and it auto-connects to the extension's
MCP server — that's how the capabilities above come alive. The same agent
ships a full suite of companion commands: a permission gateway, checkpoint
rollback, cost reporting, loop automation and structured output — identical
inside the IDE and in a bare terminal.
cc agent Auto-connects to the editor inside the integrated terminal — selection injection, diagnostics feedback, native-diff approval all live
cc agent -p "…" Headless single turn for CI / task scripts (text / json / stream-json output)
cc ide doctor Diagnose why the bridge did / did not connect (no lock / stale / workspace mismatch)
cc permissions .claude/settings.json allow / ask / deny rules + credential-read guard
cc checkpoint Auto-snapshot inside a git repo; one-click restore when an edit goes wrong
cc cost / cc loop / cc goal Spend reporting, scheduled loops, persistent cross-session goals
npm i -g chainlesschain@0.166.141 --registry https://registry.npmjs.org
(current npm latest 0.166.141, bridge minimum 0.162.47; cc ide doctor diagnoses connectivity)
0.37.177); IDEA /
PyCharm / WebStorm — Settings → Plugins → Marketplace, same name
(public 0.4.194,
2024.2+). Stock VS Code does not query Open VSX, so do not use Open
VSX's generic Install link. Download the
versioned 0.37.177 VSIX
, then run Extensions: Install from VSIX....
Safe defaults: server binds localhost only + per-instance random
Bearer token + 0600 lockfile; on the CLI side --no-ide / CC_IDE_CONTEXT=0 / CC_IDE_DIFF_APPROVAL=0 switch each
behavior off.
Discovery protocol (lockfile + env), Streamable HTTP, editor-agnostic design — all in the docs.
Read the IDE bridge docs ↗2026-11-04 · Verified public release · CLI 0.166.141
CLI 0.166.141 and Agent SDK 0.2.17 are public with verified bytes and provenance. Open VSX 0.37.177 recommends this CLI. The verified public JetBrains 0.4.194 still recommends CLI 0.166.141; its JAR payloads match the official build. Native product v5.0.3.144 is independently public.
Valid bounded spread expressions remain visible.
Reread hints follow the remaining source recovery allowance.
CLI and IDE share launcher-authorized exact file scope in isolated evaluations.
Public .138 retest: 2/4 accepted. verify-08 and verify-36 passed candidate tests but exhausted 20/20 author turns before review. All 80/80 physical requests have complete usage records. Sol original frozen-project history 41/45, previous .137 0/5 and the image follow-up 0/1 retain separate scopes. Accepted samples are skipped in later retests; engineering checks and publication add no model acceptance.
No new .141 model retest. Volcengine corrected .140 round: generation39/45, strict24/45; historical36/45,9 remaining, including verify-06 candidate-only qualification. Sol original frozen41/45, cross-version45/45 and separate repaired four2/4 remain distinct. NOT_PAID_READY / NOT_ADMITTED / HOLD remain. Microsoft Marketplace is deferred.