Theron by Vext Labs (VS Code)

The AI entity for VS Code. A council of specialist minds reads, edits, and runs code in your workspace with a confirmation gate that never feels in the way.

3-step quickstart

Install from the VS Code Marketplace: search for Theron by Vext Labs, or run code --install-extension vextlabs.theron.
Connect. Click the Theron item in the status bar (or run Theron: Sign In) and paste your API key from tryvext.com/settings/api-keys. The key lives in VS Code SecretStorage.
Try it. Highlight a function, press Cmd/Ctrl+Alt+T (or run Theron: Ask Theron), type a question. The response opens in a Markdown preview to the side.

Features

Status-bar item - always-on entry point. Click to ask, see auth status at a glance.
Theron: Ask Theron command - quick prompt with selection-aware context. Renders to a Markdown preview to the side.
@theron chat participant - type @theron audit src/foo.ts in VS Code's native chat panel.
Workspace panel - run Theron: Open Workspace Panel for a richer side-by-side experience with collapsible tool calls, inline diff previews, and per-panel history.
Workspace-aware tools - Read / Glob / Grep / LS auto-approve; Write / Edit / Bash require explicit per-call confirmation (configurable per workspace via theron.alwaysApprove.<Tool>).
Editor context menu - right-click on a selection -> Theron: Ask Theron.

Tool	Default	What it does
`Read`	auto-approve	Returns file contents. Prefers the live editor buffer if open with unsaved changes.
`Glob`	auto-approve	`vscode.workspace.findFiles`. Skips `node_modules`, `.git`, `dist`, `build`, `.next`, `.vercel`.
`Grep`	auto-approve	Prefers ripgrep; falls back to in-process scan.
`LS`	auto-approve	`vscode.workspace.fs.readDirectory`, single level.
`Write`	confirm	Creates or overwrites. Opens the file afterward so you see the diff.
`Edit`	confirm	Exact-substring replacement applied via `WorkspaceEdit` - participates in normal undo.
`Bash`	confirm	Runs in an integrated `Theron` terminal with `cwd` = workspace root. Output captured for the model.

To clear approvals, run Theron: Reset Tool Approvals.

Privacy and auth

API key lives in VS Code SecretStorage: Keychain (macOS), libsecret (Linux), DPAPI (Windows). Never written to ~/.theron/credentials or settings.json.
Webview uses a strict Content-Security-Policy: default-src 'none', nonce-based script-src, no inline scripts, no remote sources.
Write / Edit / Bash always require explicit per-call confirmation unless you opt in via theron.alwaysApprove.*.
See the Vext Labs trust center. Reporting vulnerabilities: security@tryvext.com.

Configuration

Setting	Default	What it does
`theron.apiUrl`	`https://theron.tryvext.com`	Base URL for `/api/cli/chat`. Override for self-hosted.
`theron.alwaysApprove.<Tool>`	varies	Per-tool auto-approval. Read/Glob/Grep/LS default on; Write/Edit/Bash default off.

Build from source

cd packages/theron-vscode
npm install
npm run build
npm run package   # produces theron-<version>.vsix

Theron Coding Agent (Vext Labs)

vextlabs