DotDotDash Tools

A bridge between VS Code and your organization's private developer tools. DotDotDash Tools helps authorized team members install and update approved extensions while keeping access governed by the organization's GitHub permissions.

Security By Design

• Authenticated access: sign in through VS Code's built-in GitHub provider. Installing the bridge does not grant access to private resources.
• Explicit approval: every installation and update requires your confirmation. Background checks never install automatically or prompt for sign-in.
• Package verification: download size, SHA-256 integrity, extension identity, version, and VS Code compatibility are checked before installation. Downgrades are blocked.
• Credential protection: the bridge does not persist or log tokens, and never forwards them to redirected download hosts. Downloads are restricted to approved HTTPS endpoints.

GitHub authorization requests the repo scope, which is broader than the bridge's fixed download source. Organization approval or SSO may be required. Integrity checks do not certify code safety; only install tools from an organization you trust. Removing access prevents future downloads, but does not uninstall existing tools.

Get Started

1. Install DotDotDash Tools.
2. Open DotDotDash Tools from the VS Code Activity Bar and select Sign In and Check for Updates.
3. Sign in with your authorized GitHub account, then review and approve the installation.

The Available Tools sidebar shows Infra GitHub Actions and its installed version. Expand the tool to select Install, Check for Updates, or Open Log. The sidebar toolbar also provides update checks and logs. These actions remain available from the Command Palette. Automatic checks can be disabled in the extension's settings.

Expand Skills, Agents, Workflows, or Samples under Infra GitHub Actions to browse the installed extension's bundled content. Select an entry to open its skill instructions, agent definition, reusable pipeline source, or caller sample. These lists reflect the installed version, not the latest remote repository; install or update the internal extension to obtain its content.

Requires VS Code 1.140 or newer, running locally on Windows or macOS. Remote windows, WSL, Dev Containers, Linux, and browser-based VS Code are not currently supported.

Uninstall

Use the normal Uninstall button on DotDotDash Tools in VS Code's Extensions view. VS Code also removes installed internal extensions declared in the bridge's extensionPack. Unrelated extensions are not included. Removing only an internal extension leaves the bridge installed. Reload or restart if VS Code requests it.

Cleanup uses VS Code's native extension-pack management, not a shutdown or uninstall script. Normal profile-scoped uninstall leaves installations in other profiles intact; application-scoped extensions follow VS Code's all-profiles uninstall behavior. Internal pack members must remain privately distributed: publishing them to the configured Marketplace would allow VS Code to install them as ordinary pack members, outside the bridge's authenticated download and verification flow.

Run npm run test:uninstall with the VS Code code CLI available (or set VSCODE_CLI to its path) to verify native removal in temporary user-data and extension directories. The test preserves unrelated extensions and a second profile, and never uses your normal VS Code profile.

This public bridge is intended for authorized organization members. Contact your organization's administrator for access.