FrameworksOfficial

assistant-ui ships its first VS Code extension, placing generative UI behind a webview-to-host bridge

assistant-ui released @assistant-ui/vscode 0.0.1 on November 12. The extension runs assistant-ui inside a VS Code webview, routes fetch through the extension host, opens external links through the host, and stores thread state in Memento. A companion CLI scaffolds extensions.

Event 2026-11-12Source published 2026-11-13Indexed 2026-11-13Verified 2026-11-13

Why it matters

Generative UI is moving from standalone chat pages into everyday work surfaces such as editors. This implementation concentrates networking, navigation, storage, and theme adaptation in the bridge between a webview and a locally privileged extension host, creating a reviewable boundary around model output.

A closer look

The implementation uses a nonce-based content security policy, disallows unsafe-eval, blocks remote media, and checks webview message origin. External navigation accepts only http, https, and mailto while rejecting command, vscode, file, javascript, and other schemes. The project reports 138 tests and 8/8 VS Code probes passing, with coverage for theme tokens, thread storage, and host routing.

Who this is for

Extension, frontend, agent-platform, and security teams embedding generative UI in VS Code or other webview hosts.

Original sources

Revisions & corrections (1)

2026-11-13 — Evidence-complete catch-up from the official release and implementation review; distinct native-surface event.

Related events

Frameworks2026-11-13

AG-UI LangGraph 0.0.46 reads native interrupt schemas, unwraps serialized tool results, and declares protocol version at run start

AG-UI released @ag-ui/langgraph 0.0.46 on November 13. The adapter reads Interrupt.response_schema on LangGraph 1.2.12 and later while retaining value-level fallbacks. It also unwraps outputs from serialized LangChain ToolMessage kwargs, skips tool-end events without a call ID, and declares protocolVersion on RUN_STARTED.

AG-UI official immutable November 13 releaseOfficial

Frameworks2026-11-13

AI SDK 7.0.172 makes remote file downloads explicit, tightening the SSRF boundary around structured generation

Vercel released AI SDK 7.0.172 on November 13. experimental_extract and experimental_decide no longer silently download remote file URLs through global fetch. Remote URLs now require an explicit experimental_download hook, while inline bytes, base64, and data URLs continue to work directly.

Vercel AI SDK official release and security fix commitOfficial

Frameworks2026-11-13

AI SDK 7.0.173 freezes approved tool arguments and adds workflow approval policy plus layered timeouts

Vercel released AI SDK 7.0.173 on November 13. It prevents schema validation or input refinement from mutating approved tool arguments in place during approval replay. WorkflowAgent also gains toolApproval that can override a tool's needsApproval setting, plus total, step, first-chunk, and inter-chunk timeouts.

Vercel AI SDK official immutable releaseOfficial