Commit Defender

AI-powered pre-commit code review with priority-graded findings, inline in VS Code.

Commit Defender intercepts your staged changes before they land, asks an AI to review them, and surfaces findings directly in the editor — each tagged with a priority level so you know exactly what must be fixed now versus what can wait. P3 Critical findings block the commit automatically.

The extension talks to your AI provider directly and ships its own git pre-commit hook that works even when VS Code is closed.

Features

Priority-graded review comments

Every AI finding is assigned one of four acceptance levels:

Findings appear as inline comment threads in the editor (one thread per line, one comment per finding), in the Problems panel, and as CodeLens badges above each affected line.

Multi-provider AI support

Automatic analysis on git add

Stage a file and Commit Defender silently runs in the background. Findings appear as diagnostics in the Problems panel and inline editor comments — no manual trigger needed.

Standalone pre-commit hook

Enable commitDefender.preCommitHook: enable and the extension installs a tiny shell hook into .git/hooks/pre-commit. The hook calls a bundled Node script that runs the exact same review at git commit time, even when VS Code isn't running. Settings flow through automatically (see Pre-commit Hook below).

Summary panel

Open a rich summary webview from the activity bar or command palette. See a pass/blocked verdict, a quality grade, all findings grouped by file with priority color-coding, and the raw JSON report for debugging.

Analysis scope

Run analysis on:

• Staged files only (default, triggered by git add)
• The currently open file
• Any directory
• The entire repository

Commit message generator

Generate a structured commit message from the current staged diff. Click the wand icon in the Source Control title bar — the message lands in the SCM input box ready to send.

Per-repo skills

Drop a SKILL.md file under <repo>/.commit-defender/<topic>/SKILL.md and it is injected into the AI's system prompt for every review in that repo. Use it for project-specific conventions, security policies, naming rules, etc.

Requirements

• VS Code 1.90+
• Node.js 18+ (for the standalone pre-commit hook only — VS Code itself bundles Node so the in-editor experience needs nothing)
• A Git repository open in VS Code
• An API key for an API provider, or an authenticated local Codex / Claude Code / Gemini CLI / Antigravity CLI

Setup

1. Configure your provider

Open Settings → Extensions → Commit Defender (or paste directly into settings.json) and fill in the block for your provider.

Store commitDefender.apiKey in User Settings, not Workspace Settings — Workspace settings live in .vscode/settings.json and are typically committed to the repo.

Azure OpenAI (aoai)

"commitDefender.aiProvider": "aoai",
"commitDefender.endpoint":   "https://YOUR_RESOURCE.openai.azure.com",
"commitDefender.model":      "your-deployment-name",
"commitDefender.apiVersion": "2024-08-01-preview",
"commitDefender.apiKey":     "your-azure-openai-key"

Anthropic

"commitDefender.aiProvider": "anthropic",
"commitDefender.model":      "claude-sonnet-4-6",
"commitDefender.apiKey":     "sk-ant-..."

OpenAI

"commitDefender.aiProvider": "openai",
"commitDefender.model":      "gpt-4o",
"commitDefender.apiKey":     "sk-..."

Google Gemini

"commitDefender.aiProvider": "gemini",
"commitDefender.model":      "gemini-2.5-flash",
"commitDefender.apiKey":     "your-gemini-api-key"

Codex account (codex)

Install the Codex CLI, configure the provider, then run Commit Defender: Sign in with Codex from the Command Palette. The Codex CLI opens the browser and handles the localhost redirect:

"commitDefender.aiProvider": "codex",
"commitDefender.model":      "",
"commitDefender.codexPath":  "codex"

No API key is required. Leave model empty to use the Codex CLI default. For GUI git clients or pre-commit hooks with a restricted PATH, set codexPath to an absolute executable path.

After any account-provider sign-in starts, Commit Defender asks whether to switch the current workspace to that provider. Choose Use CLI Default or Choose Model…. This updates commitDefender.aiProvider and commitDefender.model together, preventing a successful CLI login from silently leaving the previous API provider active. Changing commitDefender.aiProvider directly in VS Code Settings triggers the same default-model question for account-backed providers.

Claude Code account (claudecode)

Install Claude Code, configure the provider, then run Commit Defender: Sign in with Claude Code from the Command Palette. Claude Code opens its account login in the browser:

"commitDefender.aiProvider":    "claudecode",
"commitDefender.model":         "",
"commitDefender.claudeCodePath": "claude"

No API key is required. Commit Defender disables Claude Code tools for review and removes ANTHROPIC_API_KEY / ANTHROPIC_AUTH_TOKEN from this child process so those variables cannot override the selected subscription login.

Gemini CLI account (geminicli)

Install the official Gemini CLI, configure the provider, then run Commit Defender: Sign in with Gemini from the Command Palette. Commit Defender selects Gemini account authentication and Gemini CLI opens the browser, then caches the resulting credentials:

"commitDefender.aiProvider":  "geminicli",
"commitDefender.model":       "",
"commitDefender.geminiCliPath": "gemini"

No API key is required. This is distinct from the gemini provider, which calls the public Gemini API with commitDefender.apiKey. Account mode removes Gemini API-key and Vertex override variables from the child process.

Antigravity account (antigravity)

Install the Antigravity CLI, then run Commit Defender: Sign in with Antigravity. Commit Defender starts agy without arguments in an integrated terminal; on first use the CLI opens its browser sign-in flow:

"commitDefender.aiProvider":     "antigravity",
"commitDefender.model":          "",
"commitDefender.antigravityPath": "agy"

No API key is required. Analysis runs agy non-interactively in plan and sandbox modes. Leave model empty for the account's current default, or enter an exact model ID accepted by the installed CLI. Antigravity is a separate provider from geminicli: current installations may expose both agy and gemini, so existing Gemini CLI setups remain supported.

You can change this selection later with Commit Defender: Select Account Provider and Model. Codex offers its CLI default or an exact model ID; Claude Code additionally offers sonnet and opus; Gemini CLI offers auto, pro, flash, and flash-lite. Antigravity accepts its CLI default or an exact model ID. Exact IDs are always accepted because availability depends on the authenticated account and installed CLI version.

endpoint can be omitted for anthropic, openai, and gemini — the defaults are used. It is required for aoai.

2. (Optional) Install the pre-commit hook

"commitDefender.preCommitHook": "enable"

The extension installs .git/hooks/pre-commit and writes a <repo>/.commit-defender/hook.json config file (auto-.gitignored) so the hook can run without VS Code. See Pre-commit Hook below for details.

3. Commit

Stage some files. Findings appear in the Problems panel and inline. Run git commit from any terminal — if the hook is installed, it runs automatically.

Priority Levels

Commit Defender uses a four-level priority system to classify every review comment by urgency.

P3 findings unconditionally block the commit. P0 is only emitted when the file has nothing negative.

Extension Settings

Commands

All commands are available in the Command Palette (Ctrl+Shift+P / Cmd+Shift+P):

Shortcut buttons appear in the Source Control panel title bar (analyze + commit-message wand) and the editor title bar (analyze current file).

Severity & Richness Levels

Severity controls how strictly the AI assigns priority levels. Higher strictness pushes more findings toward P2/P3:

• severe — zero tolerance; nearly everything becomes P2 (Warning) or P3 (Critical)
• rigorous — strict; style issues escalate to P2, most things flagged
• moderate — balanced; P1/P2/P3 assigned by genuine impact (default)
• generous — lenient; minor things become P1 (Info), only real risks reach P2/P3
• lean — minimal; only P3-worthy issues flagged

Richness controls how much explanation accompanies each finding:

• colorful — elaborate: examples, alternatives, trade-off discussion
• chatty — detailed with helpful context
• moderate — clear and concise (default)
• simple — brief, one or two sentences
• silent — one-line summaries only

Pre-commit Hook

When commitDefender.preCommitHook is enable, the extension installs a small shell script at .git/hooks/pre-commit:

#!/usr/bin/env sh
# commit-defender hook v2
exec node "<extension-path>/out/hook-cli.js" "$REPO_ROOT"

That bundled CLI does the exact same review as the in-editor command and exits non-zero on P3 findings — blocking the commit. It works from any context that runs git: terminal, Tower, GitKraken, lazygit, GitHub Desktop, CI runners.

How settings reach the hook

The hook can't query VS Code at commit time, so the extension materialises your settings into <repo>/.commit-defender/hook.json whenever they change. The file is automatically added to .gitignore so the API key doesn't leak.

// <repo>/.commit-defender/hook.json (auto-generated, do NOT edit by hand)
{
  "aiProvider": "anthropic",
  "model": "claude-sonnet-4-6",
  "endpoint": "",
  "apiKey": "sk-ant-...",
  "codexPath": "codex",
  "claudeCodePath": "claude",
  "geminiCliPath": "gemini",
  "antigravityPath": "agy",
  "maxTokens": 4096,
  "severityLevel": "moderate",
  "richnessLevel": "moderate",
  "locale": "en",
  "excludePatterns": []
}

If a hook already exists

If .git/hooks/pre-commit already contains content from another tool (husky, pre-commit, lefthook, …), the install command prompts before replacing it and writes a backup at pre-commit.backup-<timestamp>. Restore manually if needed.

Bypassing the hook

Use git commit --no-verify (or -n) to skip the hook for one commit. The extension never blocks a commit silently.

Disabling

Set commitDefender.preCommitHook: disable or run Commit Defender: Uninstall Pre-commit Hook. The hook script is removed; the hook.json config file is left in place (uninstall is reversible).

Hook + Node availability

The bundled CLI requires node ≥ 18 in the PATH at commit time. If node isn't found, the hook prints a warning and exits 0 (does not block). Account providers additionally require their configured CLI executable to be visible to the hook. Use an absolute codexPath, claudeCodePath, geminiCliPath, or antigravityPath when necessary.

Inline Skip Directives

Add these comments directly in your code to fully suppress all findings on that line:

risky_call()                    # CD:skip
password = TEST_PASSWORD        # CD:skip:test fixture, never used in production
result = cast(int, value)       # type: ignore
def stub():                     # TODO: implement proper validation

Suppression is enforced at two layers: the AI is instructed to omit marked lines from its output, and a post-processing step removes any findings that slipped through.

Per-repo Skills

Drop SKILL.md files under .commit-defender/ to inject project-specific guidance into the AI's system prompt:

your-repo/
  .commit-defender/
    security/
      SKILL.md          ← "Block any new use of subprocess.shell=True…"
    naming/
      SKILL.md          ← "Class names must be PascalCase, …"

Each SKILL.md is concatenated into a single section labelled Active Review Skills and prepended to every review for that repo. The directory name (security, naming) becomes the section heading. Used by both the in-editor commands and the standalone pre-commit hook.

Privacy

Commit Defender sends your staged diff (or full file contents in on-demand mode) to the AI provider you configure. Repository metadata, file paths, and the system prompt go along with that. API keys are sent only to the configured API provider. Account-provider credentials remain in the Codex, Claude Code, Gemini CLI, or Antigravity CLI credential store and are not read by Commit Defender.

Review your provider's data-retention policy before enabling AI review on sensitive codebases. The extension does not phone home — there is no analytics or telemetry.

Troubleshooting

"Could not parse AI response as JSON" Increase commitDefender.maxTokens. The response was truncated mid-JSON, usually on large diffs.

"AI review unavailable: Missing … API key" Set commitDefender.apiKey in User Settings.

Codex, Claude Code, Gemini CLI, or Antigravity executable was not found Install the corresponding CLI and ensure it is in PATH, or set an absolute commitDefender.codexPath, commitDefender.claudeCodePath, or commitDefender.geminiCliPath, or commitDefender.antigravityPath. When codexPath remains at its default, Commit Defender also discovers the Codex binary bundled with the official OpenAI VS Code extension.

Account-provider login failed Choose the provider-specific Sign in with … action in the AI error notification, or run the corresponding Commit Defender command from the Command Palette. Commit Defender opens an integrated login terminal, and the official CLI opens the browser. If automatic opening is unavailable, click the URL shown in that terminal. Claude Code account mode intentionally ignores ANTHROPIC_API_KEY and ANTHROPIC_AUTH_TOKEN.

I signed in to Codex/Claude/Gemini/Antigravity but analysis still uses another provider Run Commit Defender: Select Account Provider and Model, or sign in again and accept the provider/model change popup. The API-backed gemini provider and account-backed geminicli provider are intentionally separate. Antigravity is also separate because agy and gemini can coexist.

Hook says node not found in PATH Install Node 18+ and ensure command -v node resolves in the shell that runs git commit.

Analysis never triggers automatically Check that commitDefender.runOnStage is true and that the workspace has a .git folder (the extension activates only in git repositories).

Hook isn't using my latest setting The hook config is updated only on onDidChangeConfiguration events from a running VS Code window with the extension active. Make a one-character edit to settings.json (or run Commit Defender: Install Pre-commit Hook again) to force a re-write.

License

MIT — see LICENSE.