Highlights

• Hardened every agent command entry point so caller-supplied objects resolve back to trusted, user-global configuration.
• Restricted stop and restart actions to sessions owned by the current extension host.
• Corrected the CodeBuddy Code CLI update command.
• Updated brace-expansion, fast-uri, js-yaml, and undici; the audited dependency tree now reports zero known vulnerabilities.
• Refreshed the README, GitHub metadata, brand guidance, security review, and social-preview artwork.
• Added a tag-driven GitHub release workflow that rebuilds and identity-checks the VSIX and publishes a SHA-256 file.

Install the reviewed VSIX

Download vscode-super-cli-1.11.1.vsix below, then run Extensions: Install from VSIX... in VS Code or a compatible editor.

Marketplace and Open VSX publication are separate, owner-controlled operations; this GitHub release is the reviewed source artifact.

Verification

• Extension identity: mikesoft.vscode-super-cli@1.11.1
• VSIX size: 1,207,751 bytes
• SHA-256: 3641fb4fedb2c4194385b4e909e7de15394e287c93dff2531c474f5ca5d9cfe4
• CI: Windows, macOS, and Linux passed
• CodeQL: passed
• Dependency audit: 0 known vulnerabilities
• Local smoke test: installed successfully with the VS Code CLI in an isolated extensions directory

Full changelog: v1.9.4...v1.11.1

Super CLI v1.9.4 hardens terminal command lifecycle without changing the extension's supported commands or UI.

Highlights

• Cancel the shell-integration fallback when its terminal closes, preventing sends to disposed terminals.
• Release per-command listeners and timers as soon as work settles instead of retaining them until deactivation.
• Capture bounded terminal output only for launch-time missing-command detection.
• Keep Dependabot's Node type updates on the supported Node 22 line.
• Verify the publisher, extension name, and version in both embedded VSIX manifests during packaging.

Validation

• CI passed on Windows, macOS, and Ubuntu.
• CodeQL passed.
• TypeScript, 114 unit/metadata tests, Extension Host integration, package inspection, dependency audit, and isolated VSIX installation passed.
• npm audit found 0 vulnerabilities.

SHA-256: 117A6F58F6ECA8F038D06D321EE8F9678897243A894B2DDB941E936A1939C608

Maintenance release with security hardening for custom agent metadata and Agent Doctor, more reliable cross-platform integration tests, dependency and CI maintenance, and expanded setup, development, security, build, and deployment documentation.

Highlights

• Fixed favorite preservation when a hidden built-in is replaced by a custom agent with the same id.
• Hardened Agent Doctor Markdown generation against backslash-delimiter injection.
• Restored macOS integration CI with the current VS Code application executable layout.
• Professionalized repository automation, contribution guidance, security reporting, and pull-request templates.

Verification

• npm audit: 0 vulnerabilities
• npm run check: 108 unit tests, Extension Development Host integration test, and VSIX packaging dry run
• GitHub Actions: Windows, macOS, Linux, JavaScript/TypeScript CodeQL, and Actions CodeQL all passed
• Isolated VS Code smoke-install: mikesoft.vscode-super-cli@1.9.2
• VSIX SHA-256: 9C3605B8A8E5BBD9A3654D710E558B4BBBCD6D5DE32C78B4D67B65F559AA9258

Highlights

• Added explicit light- and dark-theme SVG variants for all 30 built-in agents.
• Monochrome marks now use black on light themes and white on dark themes, including goose and Factory Droid.
• Restored Mistral Vibe's official yellow-to-red color palette across both themes.
• Updated attribution, README documentation, and regression coverage.

Verification

• npm audit: 0 vulnerabilities
• npm run check: 104 tests, Extension Development Host smoke test, and VSIX packaging dry run
• Packaged VSIX contains 60 theme-specific agent SVGs
• VSIX smoke-installed as mikesoft.vscode-super-cli@1.9.1

Highlights

• Added built-in presets for Amp, OpenClaude, Oh My Pi, goose, Auggie CLI, Cline CLI, Codebuff, Continue CLI, Mistral Vibe, and Rovo Dev CLI.
• Added source-attributed vendor icons and documented the Codebuff vector fallback derived from the supplied official company logo.
• Expanded cross-platform command, metadata, PATH detection, version/update, and SVG safety coverage.

Verification

• npm audit: 0 vulnerabilities
• npm run check: 103 tests, Extension Development Host smoke test, and VSIX packaging dry run
• Packaged VSIX smoke-installed as mikesoft.vscode-super-cli@1.9.0

Added

• Devin CLI (Cognition) is now a built-in preset, launched with devin, with its official installation documentation and the official Devin logomark.

  It intentionally ships without an update button or a version check. Devin's docs only document an update path for Homebrew (brew upgrade --cask devin-cli), while the CLI also installs via a curl script or winget — the right command follows how it was installed, not which platform you're on, so an update button would fail (or do something unexpected) for anyone who installed it another way. No --version is documented either, so Agent Doctor reports the version as unavailable instead of guessing.

Changed

• Replaced the redundant antigravity Marketplace keyword with devin. The more specific google antigravity and antigravity cli keywords already cover that search, and the list was at its 30-entry cap.

Verified green on Windows, macOS and Linux.

Full changelog: https://github.com/TheStreamCode/super-cli/blob/main/CHANGELOG.md#180---2026-07-26

Added

• Running sessions now survive a window reload. VS Code keeps your agents' terminal processes alive across a reload, but the extension restarted with no memory of them, so agents that were still running disappeared from the Running group while their terminals sat right there. Surviving terminals are now matched back to their agent and picked up again.

  Recovered sessions are marked reconnected rather than showing a runtime: their original start time is gone with the previous session, and any duration would be invented. A recovered session ends when its terminal closes — unlike a freshly launched one, its command belongs to an extension host that no longer exists and can't be observed.

Changed

• Lowered the required VS Code version from 1.103 to 1.93, the real floor of the terminal APIs in use. The higher value had been raised only to satisfy packaging validation, and it silently made the extension uninstallable on VS Code forks that track upstream at a delay — Cursor, Windsurf, Trae and others — while the README promised it worked there. @types/vscode is pinned to the same version so the compiler enforces the floor instead of trusting it.
• Documented which editors can run it. Any editor supporting VS Code extensions: VS Code plus forks installing from Open VSX or a .vsix (Cursor, Windsurf, Google Antigravity, Kiro, Trae, VSCodium, Gitpod). Zed and JetBrains IDEs cannot run it at all — Rust/WASM extensions and JVM plugins respectively, neither loads a .vsix.

Verified green on Windows, macOS and Linux.

Full changelog: https://github.com/TheStreamCode/super-cli/blob/main/CHANGELOG.md#170---2026-07-26

Bug-fix release for Update All Agents, introduced in 1.6.0.

Fixed

• Update All Agents could hang indefinitely. An update command that never exits on its own — one waiting on an interactive prompt, or a stalled download — left the run stuck behind a progress notification that couldn't be cancelled, silently skipping every remaining agent. Each update now also settles when its terminal is closed, the progress notification is cancellable, and the run stops rather than firing the remaining commands into a terminal that is gone.

  Cancelling stops Super CLI from starting further updates; a command already running in the terminal is left alone for you to deal with, which is why the terminal stays open.

Changed

• Update All Agents now uses one shared Super CLI: updates terminal instead of opening a separate terminal per agent, which previously left up to 14 terminals behind on a default install. An agent configured with its own env still gets a dedicated terminal, so its update keeps running exactly as configured.
• The completion summary now reports failures and early stops, not just the success count.

Full changelog: https://github.com/TheStreamCode/super-cli/blob/main/CHANGELOG.md#161---2026-07-26

Added

• Workspace-folder picker for new launches when the working directory can't be inferred (no active editor, more than one folder in the workspace); canceling falls back to the previous first-folder default.
• Restart button on each running session: stops it and relaunches the same agent in exactly the folder it originally started in — no re-prompt, even in a multi-root workspace.
• Stop All on the Running group header, ending every active session in one action.
• Super CLI: Update All Agents in the sidebar toolbar, running every updatable agent's update command in sequence and skipping agents currently believed to be missing from PATH.
• Favorites now get their own Favorites group at the top of the sidebar tree, alongside Running, Ready, and Setup required.

Full changelog: https://github.com/TheStreamCode/super-cli/blob/main/CHANGELOG.md#160---2026-07-25