feat(vscode): add a sidebar UI to vscode - #62995

feat(vscode): open the app in VS Code's secondary sidebar

Issue for this PR

Closes #11176

Type of change

• Bug fix
• New feature
• Refactor / code improvement
• Documentation

What does this PR do?

The VS Code extension gets an OpenCode view in the secondary sidebar that runs the real app (packages/app), not a copy. It works in the folder open in that window and talks to the same background server the TUI and desktop app share.

Extension (sdks/vscode)

• sidebar.ts finds or starts the background server with opencode service start and reads its password with opencode service get password.
• The webview never sees the password. Server requests go to the extension as messages, and the extension adds Basic auth before forwarding them.
• VS Code only serves extension files to the page itself, so workers can't load their scripts. The extension serves dist/webview read-only on a localhost port for them. Paths aren't decoded, and anything outside the folder gets a 404.
• The page has a strict CSP with a fresh nonce on every render.
• With no folder open, the view shows an Open Folder button. In a remote window (SSH, WSL, containers) it shows a notice instead, because the extension runs on the remote and the webview can't reach the files it serves.
• The app's Settings screen is replaced by VS Code settings (opencode.*), which the webview picks up as they change. Reduce motion follows workbench.reduceMotion, and the fonts follow VS Code's.
• The existing terminal commands are unchanged.
• engines.vscode is now ^1.106.0, for the secondary sidebar view container.

Webview (packages/vscode-webview)

A small Vite entry that builds the app into sdks/vscode/dist/webview. It contains the platform object, the message bridge, the worker shim and settings sync.

App

• The Platform union gets an ide variant for editor extensions.

• App code never checks for ide. What an editor does differently comes from optional capabilities on the platform:

  • project: the folder the app is locked to
  • openSettings
  • omitPlugins
  • fonts
  • windowID

  Another editor's extension would get the same behavior without changing the app.

• When project is set:

  • Home and new sessions use only that project.
  • The palette and session search list only its sessions.
  • Project switching, project search and project settings are hidden.

• Settings links go to the host's settings.

• The terminal and updater plugins are left out in the editor: VS Code has its own terminal, and the marketplace updates the extension.

• Window-scoped storage uses the workspace folder as its window ID, so each VS Code window keeps its own tabs.

• The error page says "Reload" outside desktop.

Other

• Plugin API: App.platform gains "ide". This is a public API change and needs a release note.
• gui-plugins: the workspace submenu may overlap its parent menu in narrow windows. Before, it had no room.
• fixed the corktree popup to add overlap. It was falling off the screen under the narrow vscode side panel

No feature flag. Everything new in the app only runs when the host sets platform.project, which only the IDE platform does, so web and desktop behave as before. The extension ships separately through its own vscode-v* tags.

Not covered yet

• Remote windows.
• Following the VS Code color theme.
• sdks/vscode isn't part of bun run check, so CI doesn't type-check or lint it.

How did you verify your code works?

• bun run check passes for the whole repo (35 tasks).
• App unit tests pass (2589).
• bun typecheck passes in packages/vscode-webview.
• bun run compile in sdks/vscode passes: type check, lint, webview build and esbuild.
• I ran the extension in a separate VS Code instance (its own user data and extensions folders) and checked:
  • The app renders in the secondary sidebar against the background server.
  • Sessions load and the titlebar fits the sidebar.
  • Tabs are stored per workspace.
  • Reload re-renders the view.
  • The asset server returns 404 for malformed and .. paths.
• Not tested:
  • The remote-window notice, since I had no remote environment.
  • The palette's project filtering, which is only type-checked.

Screenshots / recordings

Checklist

• I have tested my changes locally
• I have not included unrelated changes in this PR

Added by the opencode bot (AI-generated).

Public API: plugin API: App.platform gains "ide" ("web" | "desktop" → "web" | "desktop" | "ide"); compiles for existing plugins, but code that treats "not web" as desktop needs a check