Scaffold Altius IDE: VS Code fork branding + altius-agent extension

[daemon-blockint-tech]

Summary

Adds ide/, a starting scaffold for Altius IDE — an agentic Solana development environment built as a rebranded VS Code OSS fork — plus the real, working part of it: a VS Code extension that surfaces Altius Code's existing agent fleet, security scanner, and guarded deploy pipeline directly in the editor.

This repo already ships a fleet-dispatch PWA at crates/altius-cli/assets/pwa; this is a separate, standalone GUI surface (a VS Code-based IDE), not a change to that PWA.

Building a full custom VS Code distribution (Electron packaging, installers, signing, an update feed) is a multi-week effort in its own right and out of scope for one change. What's here is the reusable core of that effort:

• ide/product.json — Altius IDE branding overlay (name, app ids, Open VSX extension gallery instead of the Microsoft Marketplace, telemetry off), merged onto an upstream product.json by a small deep-merge script — the same pattern VSCodium uses.
• ide/build/bootstrap.sh + merge-product-json.js — clones microsoft/vscode at a pinned tag, applies the branding overlay, and bundles the extension below as a built-in.
• ide/extensions/altius-agent/ — a real, compiling TypeScript extension (works in stock VS Code today, no fork required):
  • Fleet Dispatch sidebar webview — dispatch a prompt to an agent (altius/security/browser) against a running altius fleet serve, watch runs update, resume/deny/cancel approvals. Talks to the same BeeAI ACP /runs* API as the existing PWA client.
  • Security Findings — Altius: Scan Project for Security Findings runs altius scan --format json, surfaces findings as editor diagnostics (Problems panel + squiggles) and a tree grouped by severity.
  • Guarded Deploy — Altius: Guarded Deploy (Dry Run) runs altius deploy --dry-run (policy + simulation only, FailClosed guarantees nothing signs). Altius: Guarded Deploy (Sign & Submit) runs the real pipeline behind a modal warning and a typed confirmation (replacing the CLI's interactive terminal prompt, since a spawned child process has no TTY to answer it), streaming TxGuard's policy/simulate/diff/audit/sign steps to an output channel.

ide/vscode/ (the upstream checkout) and all node_modules//out/ build output are gitignored — nothing beyond source and config is checked in.

Test plan

• npm install && npm run compile in ide/extensions/altius-agent — compiles clean under strict TypeScript, no errors.
• node ide/build/merge-product-json.js verified against a stub base product.json — branding fields overlay correctly, arrays/objects merge as documented.
• Manual: open ide/extensions/altius-agent in VS Code, F5 to launch an Extension Development Host, exercise Fleet Dispatch against a local altius fleet serve --offline and Security Findings against a scanned fixture.
• ./ide/build/bootstrap.sh end-to-end fork build (requires network + full Node/Electron toolchain, not run in this environment).

---

Generated by Claude Code