feat(vscode): harden the VS Code client with trust-aware UX, safer launcher/runtime handling, and tested review workflows

Author: orenlab

extensions/vscode-codeclone/package.json

@@ -209,6 +209,11 @@
         "category": "CodeClone",
         "icon": "$(filter)"
       },
+      {
+        "command": "codeclone.reviewFinding",
+        "title": "Review Finding",
+        "category": "CodeClone"
+      },
       {
         "command": "codeclone.openFinding",
         "title": "Open Finding",
@@ -287,6 +292,11 @@
         "category": "CodeClone",
         "icon": "$(symbol-module)"
       },
+      {
+        "command": "codeclone.reviewGodModule",
+        "title": "Review Candidate",
+        "category": "CodeClone"
+      },
       {
         "command": "codeclone.copyGodModuleBrief",
         "title": "Copy Report-only Brief",

extensions/vscode-codeclone/src/extension.js

@@ -15,6 +15,7 @@ const {
   resolveWorkspacePath,
   signedInteger,
   staleMessage,
+  workspaceLocalLauncherCandidates,
 } = require("./support");
 
 const execFileAsync = promisify(execFile);
@@ -1134,6 +1135,16 @@ class CodeCloneController {
         cwd: folder.uri.fsPath,
       });
     }
+    const localLauncher = workspaceLocalLauncherCandidates(folder.uri.fsPath).find(
+      (candidate) => fs.existsSync(candidate)
+    );
+    if (localLauncher) {
+      return normalizedLaunchSpec({
+        command: localLauncher,
+        args: Array.isArray(configuredArgs) ? configuredArgs : [],
+        cwd: folder.uri.fsPath,
+      });
+    }
     const primary = normalizedLaunchSpec({
       command: "codeclone-mcp",
       args: Array.isArray(configuredArgs) ? configuredArgs : [],

extensions/vscode-codeclone/src/support.js

@@ -70,6 +70,29 @@ function resolveWorkspacePath(rootPath, relativePath) {
   return null;
 }
 
+function workspaceLocalLauncherCandidates(
+  rootPath,
+  platform = process.platform
+) {
+  const root = String(rootPath || "").trim();
+  if (!root) {
+    return [];
+  }
+  const platformPath = platform === "win32" ? path.win32 : path.posix;
+  if (platform === "win32") {
+    return [
+      platformPath.join(root, ".venv", "Scripts", "codeclone-mcp.exe"),
+      platformPath.join(root, ".venv", "Scripts", "codeclone-mcp.cmd"),
+      platformPath.join(root, "venv", "Scripts", "codeclone-mcp.exe"),
+      platformPath.join(root, "venv", "Scripts", "codeclone-mcp.cmd"),
+    ];
+  }
+  return [
+    platformPath.join(root, ".venv", "bin", "codeclone-mcp"),
+    platformPath.join(root, "venv", "bin", "codeclone-mcp"),
+  ];
+}
+
 module.exports = {
   STALE_REASON_EDITOR,
   STALE_REASON_WORKSPACE,
@@ -79,4 +102,5 @@ module.exports = {
   signedInteger,
   staleMessage,
   trimTail,
+  workspaceLocalLauncherCandidates,
 };

extensions/vscode-codeclone/test/manifest.test.js

@@ -0,0 +1,29 @@
+"use strict";
+
+const test = require("node:test");
+const assert = require("node:assert/strict");
+const fs = require("node:fs");
+const path = require("node:path");
+
+function loadPackageJson() {
+  const filePath = path.resolve(__dirname, "..", "package.json");
+  return JSON.parse(fs.readFileSync(filePath, "utf8"));
+}
+
+test("every menu command is declared in contributes.commands", () => {
+  const pkg = loadPackageJson();
+  const declaredCommands = new Set(
+    pkg.contributes.commands.map((entry) => entry.command)
+  );
+  const missing = [];
+
+  for (const items of Object.values(pkg.contributes.menus)) {
+    for (const entry of items) {
+      if (!declaredCommands.has(entry.command)) {
+        missing.push(entry.command);
+      }
+    }
+  }
+
+  assert.deepEqual(missing, []);
+});

extensions/vscode-codeclone/test/support.test.js

@@ -12,6 +12,7 @@ const {
   signedInteger,
   staleMessage,
   trimTail,
+  workspaceLocalLauncherCandidates,
 } = require("../src/support");
 
 test("signedInteger formats positive, zero, and negative values", () => {
@@ -83,3 +84,16 @@ test("trimTail keeps the newest part of long strings", () => {
   assert.equal(trimTail("abc", 10), "abc");
   assert.equal(trimTail("abc", 0), "");
 });
+
+test("workspaceLocalLauncherCandidates prefer workspace virtual environments", () => {
+  assert.deepEqual(workspaceLocalLauncherCandidates("/workspace/repo", "linux"), [
+    "/workspace/repo/.venv/bin/codeclone-mcp",
+    "/workspace/repo/venv/bin/codeclone-mcp",
+  ]);
+  assert.deepEqual(workspaceLocalLauncherCandidates("C:\\repo", "win32"), [
+    "C:\\repo\\.venv\\Scripts\\codeclone-mcp.exe",
+    "C:\\repo\\.venv\\Scripts\\codeclone-mcp.cmd",
+    "C:\\repo\\venv\\Scripts\\codeclone-mcp.exe",
+    "C:\\repo\\venv\\Scripts\\codeclone-mcp.cmd",
+  ]);
+});