# Using VS Code CLI:
code --install-extension WarishLabs.devmind-vscode
Or in VS Code:
Open the Quick Open box (Ctrl+P / Cmd+P).
Run:
ext install WarishLabs.devmind-vscode
Press Enter.
Overview
The DevMind Companion extension connects your local VS Code workspace with the DevMind Project Brain. It performs local, privacy-first structural analysis of endpoints, route guards, and authorization policies without uploading raw source code or connecting to production databases.
Features
Findings View (devmind.views.findings):
Live inspection of authorization invariant violations and security hygiene issues.
Grouped by severity (critical, high, medium, low, info).
Evidence levels clearly labeled (E1 · Possible vs verified facts).
Click any finding to navigate directly to the source file line.
Project Structure View (devmind.views.structure):
Architectural breakdown of modules, routes, and API endpoints.
Role-guard indicators ($(shield) protected vs $(alert) missing role guard).
Scan Status View (devmind.views.scan):
Real-time scanner state, rule engine version (v1.0.0), and analyzed file metrics.
Transparent audit of skipped/protected paths (.env, lockfiles, build artifacts).
Sync & Privacy View (devmind.views.sync):
Displays synchronization mode (metadata_only by default).
Explicit audit ledger showing what leaves the machine and what stays local.
Database from Files View (devmind.views.database):
Statically extracted schema models from Prisma, SQLAlchemy, and migration files.
Zero live database connections strictly enforced (ADR-034).
Interactive Consent Preview (devmind.reviewSync):
Strict CSP-isolated webview panel providing verification before any metadata transmission.
Default focus on Cancel for maximum safety.
Architectural Constraints & Privacy Guarantees
Zero Silent Uploads (ADR-022): Operates in metadata_only mode by default. Raw code chunks never leave your workstation without explicit consent.
Zero Live Database Connections (ADR-034): Never reads database connection strings or connects to live databases.
Automated Secret Redaction (ADR-047): Credentials in code are masked as [REDACTED:secret:hash8] prior to hashing.
Offline & Fixture First: In fixtureMode (default for evaluation), all analysis and sync receipts are simulated locally with zero network calls.
