iAgents Hub

Chat with your AI agents without leaving the editor, using your code as context.

Features

• 💬 Streaming chat with any agent in your hub: rendered Markdown, syntax-highlighted code, a thinking indicator, and a stop button.
• 📎 Your code as context: attach the current selection or active file, including unsaved changes, with one click or from the editor context menu.
• 📥 Add an agent to your project in the format used by your tool: OpenAI, Anthropic Claude, GitHub Copilot, or an MCP server. Files are written directly to the project (.claude/, .github/, agent.json, MCP server files, and more).
• 📋 Copy, insert, or apply each code block after reviewing a diff.
• ✅ Safe multi-file changes: validates paths, limits sizes, blocks symbolic links, and lets you undo the entire operation.
• 🔄 Retry and regenerate responses, with a connection and model picker for each agent.
• 🧠 Active model displayed in the chat header, with one-click switching.
• 🔀 Visual orchestration: chain agents, reorder steps, and define specific instructions for each one without leaving VS Code.
• 🗂️ Conversation history for each agent, synchronized with your hub.
• 👥 Workspace groups: switch between your personal space and teams from the panel toolbar.
• 🎨 Matches your theme: light, dark, or high contrast, with no configuration required.

You can also create agents and orchestrations from the + button in their views. The agent builder lets you configure fields manually or describe your idea to the assistant. The orchestration designer arranges up to 30 agents into a reusable sequence and lets you define the objective of each step.

Getting started

1. Open the iAgents Hub panel in the Activity Bar and select Sign in.
2. Your browser opens so you can approve access.
3. Return to VS Code. Your account now appears in the Accounts menu.

If you use a self-hosted instance, first run iAgents Hub: Select server from the Command Palette, or set iagentshub.serverUrl manually.

Without a browser (CI, containers, SSH)

Run iAgents Hub: Connect with a personal token (advanced) from the Command Palette (Ctrl+Shift+P), then enter the URL and a token created under Profile → Tokens. The connection is validated against /api/auth/me before it is stored, so an invalid token is reported immediately.

Commands

In chat, Enter sends a message and Shift+Enter inserts a line break.

Security

• Browser-based sign-in returns a single-use code, never the token. The code expires after 60 seconds and cannot be used without the state value stored only in the extension's memory, so intercepting the vscode:// URI is not enough to steal the session.
• The token lives only in VS Code Secret Storage. It is never written to settings.json or the repository.
• Signing out revokes the token on the server instead of merely forgetting it on the current machine.
• The token never reaches the webview. All network traffic occurs in the extension host; the chat panel receives only rendered text.
• HTTPS is required, except for localhost and 127.0.0.1.
• Code proposals cannot escape the project: absolute paths, .., duplicates, binaries, symbolic links, and batches larger than 20 files or 2 MB are rejected.
• Applying changes always shows a diff and requires confirmation. Files are not saved automatically, and Undo all is available.
• Tokens can be revoked from your profile at any time and expire automatically. Changing your account password also invalidates previous tokens.

Settings

The token is not a setting; it is stored separately in encrypted storage. To change servers, use iAgents Hub: Select server instead of editing the setting manually. The picker supports iAgents Hub Cloud, previously added self-hosted instances, and new servers.

Development

npm install
npm run compile     # TypeScript → out/
npm test            # compile and run tests with node:test
npm run lint
npm run package     # generate the .vsix

Press F5 in VS Code to open an Extension Development Host with the extension loaded.

The only third-party runtime component is highlight.js for syntax highlighting, bundled in media/vendor/. The webview cannot download anything because its CSP has no connect-src. Everything else uses fetch, AbortController, and SecretStorage, which are provided by the Node.js runtime included with VS Code.

Server requirements

The extension requires an iAgents Hub instance with:

• Personal access tokens: GET/POST/DELETE /api/auth/tokens and Authorization: Bearer authentication.
• VS Code sign-in: /api/auth/vscode/{start,authorize,exchange}.

Both are included in the backend version released with this extension.