Changelog

v0.3.0 (2026-04-23)

Boilerplate eliminado (~275 linhas) — 7 abstrações em src/utils/, 17 consumers migrados em scanners/tools/commands. API externa preservada.

Hook detecta mais write tools — PreToolUse/PostToolUse agora pegam create_file, delete_file, edit_file, create_directory, move_file, rename_file e variantes MCP via pattern match.

uuid@14 override — corrige GHSA-w5hq-g745-h8pq (moderate), vuln transitiva via @vscode/vsce. npm audit: 0 vulnerabilidades.

LLM Analysis removido — scanners rodam localmente, Copilot analisa via Language Model Tools
Tools com prompt guiado — audit_workspace e audit_repo instruem o Copilot a usar get_findings → dismiss_finding → get_report
Report auto-open — get_report abre o painel automaticamente
Chat simplificado — /audit delega análise ao Copilot

Primeiro release público.

7 scanners de segurança: Secret, Dependency, Code Pattern, Config, LGPD, MCP Server, VS Code Extension
Security Score: 0-100 com pesos por severidade
Copilot Chat integration: participant @security-check com 4 comandos
8 Language Model Tools: audit_repo, audit_workspace, get_findings, get_score, get_finding_details, list_scanners, dismiss_finding, get_report
Tool references: #audit-repo, #audit-workspace, etc.
Dismiss system: dismiss/restore com hash estável, batch operations, persistência no workspace state
Sidebar completa: 4 views (Findings, Score, Global Resources, Hook Activity)
5 Security hooks: PreToolUse, PostToolUse, SessionStart, Stop, UserPromptSubmit
2 Agents: security-auditor, lgpd-advisor (instalados globalmente)
2 Skills: security-check, safe-coding (instaladas globalmente)
Activity log: JSONL com file watcher
LGPD compliance: scanner dedicado para Lei 13.709/2018
152 testes com Vitest