Added

DeepSweep is on the VS Code Marketplace. VS Code users can install DeepSweep straight from the Marketplace and receive updates automatically through the editor. Installing from Open VSX — the registry serving Cursor, Windsurf, Antigravity and Trae — is unchanged.

Changed

The compatibility list names only tools you can still get. Roo Code, Continue and Supermaven were shut down by their vendors, so they no longer appear in the "works alongside" list or the extension description. Reviews are unchanged: configuration those tools left behind in a workspace is still detected and reviewed.

Fixed

Prompt-injection and data-exfiltration detection now works. Six of the AI-specific detection rules — the ones that flag "ignore all previous instructions" style prompt injection and "upload the secrets to …" style exfiltration in agent config and rules files — carried a regex flag their engine could not load, so they had quietly matched nothing. They are fixed and covered by a guard that checks every rule compiles, and MCP config secrets are now caught even when the variable name has a prefix (for example GITHUB_PERSONAL_ACCESS_TOKEN).
Signing in now shows what you unlocked. After you sign in, the confirmation leads with your top finding and a one-click Copy fix prompt; the message says what the free tier actually gives you — fix hints and copy-ready fix prompts. Blurred locations now say "Exact location is part of Pro" instead of asking you to sign in again, and every sign-in button promises the same thing it delivers. The confirmation appears once per sign-in, not on every window reload.

Changed

The whole toolchain, named and detected. The matrix now carries Kiro alongside Antigravity and Trae, and the extension's workspace fingerprint recognises the configuration every tool leaves behind — Kiro steering and MCP settings, Cline and Roo Code rules, Continue, Amazon Q project rules, Codex and Aider config — so a review of those workspaces sees the agent setup instead of reporting a clean generic result. The marketplace description names all of them.
One host-editor vocabulary. Antigravity, Trae and Kiro are reported by name everywhere the extension identifies its host; two older code paths called them "vscode".
The welcome view's "Works alongside" row now shows every tool of the toolchain. Sixteen editors, extensions, autopilots and terminal agents — VS Code, Cursor, Windsurf, Antigravity, Trae, Cline, Roo Code, Continue, GitHub Copilot, Gemini Code Assist, Tabnine, Supermaven, Amazon Q Developer, Claude Code, OpenAI Codex and Aider — followed by GitHub Actions, MCP, AWS, GitHub, Stripe and Cloudflare. Every mark is bundled with the extension; the first-run view still makes no network request.
The three README demos are paced more gently. Same recordings, same output — each line now lands with a short beat, the finished state stays on screen for close to three seconds, and the loop dissolves back to the start instead of cutting.

Added

Sign in with code. A new "DeepSweep: Sign In with Code" command for editors where the browser cannot hand the sign-in back to the IDE. Browser-hosted editors take this path by default; on the desktop the "Complete sign-in in your browser" message offers "Use a code instead" as a fallback.

Changelog