Code Cop

Code Cop is a local-first AI code reviewer and Conventional Commit writer for VS Code. It reviews Git changes together with current VS Code diagnostics, shows findings in the editor and Problems panel, and lets you preview fixes before applying them.

The Marketplace identity remains spreadle.spreadle-ai-commit-gen, so existing installations upgrade in place. Existing aiCommitGen.* settings and API keys are preserved.

Code review

Code Cop: Review Changes reviews staged, unstaged, and untracked files by default.
Code Cop: Review Staged Changes reviews only the index.
Code Cop: Review Branch compares the current branch with its detected remote default branch.

Findings appear in the Code Cop Activity Bar view, inline in editors, and in Problems. Select one to navigate to it. A validated fix opens in VS Code's native diff editor and is only applied after confirmation. The edited document remains unsaved.

Reviews are manual, so Code Cop never creates surprise provider usage. Binary content is skipped and oversized inputs retain per-file coverage information.

Commit messages

The existing commit workflow remains available under the Code Cop brand. Open Source Control and select the commit-writer button, or run Code Cop: Generate Message.

Generating a commit message

Provider setup

Code Cop supports OpenAI, Anthropic Claude, Google Gemini, Groq, and z.ai. Run Code Cop: Set API Key, then use Code Cop: Switch Provider or Code Cop: Change Model.

Setting an API key

Changing the provider or model

Keys are saved in VS Code Secret Storage and are not written to repository files.

Commands

Code Cop: Review Changes, Review Staged Changes, and Review Branch
Code Cop: Open Finding, Preview Fix, Apply Fix, and Clear Findings
Code Cop: Generate Message, Switch Provider, Set API Key, and Change Model

Settings

Setting	Default	Description
`codeCop.review.defaultScope`	`allLocal`	Scope used by Review Changes.
`codeCop.review.maxDiffChars`	`120000`	Maximum diff characters included.
`codeCop.review.maxFileChars`	`30000`	Maximum text from each untracked file.
`codeCop.review.includeDiagnostics`	`true`	Include current VS Code diagnostics.
`aiCommitGen.provider`	`openai`	Provider used for reviews and commits.
`aiCommitGen.autoStage`	`true`	Auto-stage for commit generation.
`aiCommitGen.previewCommit`	`true`	Preview generated commit messages.
`aiCommitGen.maxDiffSize`	`10000`	Commit-generation diff limit.

Provider model settings remain under aiCommitGen.* for backward compatibility.

Privacy and safety

There is no Code Cop backend, account, billing system, or telemetry. Review content goes directly from VS Code to the active provider using your key. Code Cop redacts common keys, tokens, passwords, credentials, and private-key markers before transmission and creates a local high-severity finding. Treat redaction as defense in depth.

Repository content is treated as untrusted prompt data. AI output is schema-validated and malformed JSON gets one repair attempt. Proposed fixes must target a repository-contained file, contain exact and unique original text, and still match the reviewed document. Fixes are never silently applied or saved.

Development

Run npm install, npm run compile, npm test, and npm run lint. Press F5 to launch an Extension Development Host. npm run package creates a VSIX whose filename retains spreadle-ai-commit-gen because the Marketplace identifier is unchanged.

Spreadle