Features

Sessions

Click the LlamaNexus icon in the Activity Bar for a Sessions sidebar: new session, live-filtering search, rename, delete. Sessions are per-workspace and persist (full history, response stats, reasoning/thinking text) across window reloads. Each session opens in its own editor tab.

Chat

Plan Mode

A Plan / Edit mode toggle next to the model picker. In Plan Mode the model can only read/explore (read_file, list_files, update_plan) - write_file, patch_file, and run_bash are rejected outright, enforced at execution time so a hallucinated literal-text tool call can't bypass it either. Persists per session; a system note announces every switch.

A Plan panel above the composer shows the model's update_plan calls as a live, collapsible checklist. The first proposal needs approval (Allow / Deny / Request changes...); approving auto-switches Plan Mode → Edit Mode. Flags mid-task plan revisions and turns that end with unfinished steps.

Model tuning sidebar ("Parameters")

A collapsible sidebar mirroring Open WebUI's per-chat Advanced Params: Temperature, Top K, Top P, Min P, Frequency/Presence Penalty, Repeat Penalty, Repeat Last N, Mirostat (+ Tau/Eta), Seed, Max Tokens, Stop Sequences. Per-field enable checkboxes - only checked fields are sent, unchecked ones fall back to server/global defaults. Values persist per session, independent of global settings.

Server discovery

A row under the context bar lists every LlamaNexus serve instance found on your LAN (requires LlamaNexus 0.1.5+). Each session picks its own server independently - the composer stays disabled until one is chosen. The selected server's row expands to show RPC worker mode/roster when running in --rpc/--discovery mode, with a toggle between single-node and RPC mode and per-worker remove (manual mode only).

Each row also has a 🤖 icon, independent of the main selection: click it to mark that server as the session's agent server for run_agent, typically a separate instance with a small/fast model.

Model tools (function calling)

All file paths are confined to your first workspace folder. A literal-text tool-call fallback (for models that emit <function=...>-style text instead of a structured call) is caught and gated identically to real calls - checked in reasoning/thinking text too if not found in the reply.

Loop protection: a tool-calling chain stops if the model repeats the exact same call llamanexus.maxToolCallRepeats times in a row (default 3), or after llamanexus.maxToolChainDepth chained round-trips (default 20).

Confirmations

In-chat dialogs (not native VS Code popups) for file writes/patches, bash commands, ejecting a model, removing an RPC worker, plan approval, and agent dispatch. Escape denies; clicking elsewhere does not dismiss the dialog. Write/patch/bash/agent prompts offer "Confirm for this session" to skip future confirmations for that tool for the rest of the session.

LlamaNexus: Search Hugging Face for Models (or the entry at the bottom of the /model picker) opens a panel that searches Hugging Face directly. Repos are collapsed by default; expand to load quant files (cached). Shard-split quants show as one combined-size entry. A "&check; Downloaded" badge marks quants you already have. The download button doubles as a cancel button once a download starts.

Search/listing requests go straight to huggingface.co (downloading itself still goes through LlamaNexus), so a gated repo needs its own token via LlamaNexus: Set Hugging Face Token - stored in VS Code's SecretStorage, never written to settings.json.

Slash commands

Editor commands