Block AI Code Assistants
to Protect Proprietary Source Code

// ─── VS Code Managed Settings (settings.json via MDM/GPO) ───
// Deploy to: %APPDATA%\Code\User\settings.json (Windows)
//            ~/.config/Code/User/settings.json (Linux)
//            ~/Library/Application Support/Code/User/settings.json (macOS)
{
  // Disable GitHub Copilot entirely
  "github.copilot.enable": {
    "*": false,
    "plaintext": false,
    "markdown": false,
    "scminput": false
  },
  "github.copilot.advanced": {
    "debug.useNodeFetcher": true,
    "debug.useElectronFetcher": true
  },

  // Block all AI-related extensions by publisher ID
  "extensions.autoUpdate": false,
  "extensions.ignoreRecommendations": true,

  // Disable telemetry and data collection
  "telemetry.telemetryLevel": "off",
  "telemetry.enableTelemetry": false,
  "telemetry.enableCrashReporter": false,

  // Disable inline completions (blocks all AI suggestion providers)
  "editor.inlineSuggest.enabled": false,

  // Restrict extension installs to approved publishers only
  "extensions.allowed": {
    "microsoft": true,
    "redhat": true,
    "esbenp": true,
    "dbaeumer": true,
    "GitHub": "exclude:copilot*"
  }
}

// ─── JetBrains IDE managed properties (idea.properties) ───
// Deploy to: <IDE_HOME>/bin/idea.properties
// Disables AI Assistant and third-party AI plugin loading
idea.plugins.blocked=com.github.copilot,\
  com.tabnine.TabNine,\
  com.sourcegraph.cody,\
  com.codeium.codeium,\
  com.supermaven.supermaven,\
  com.jetbrains.ai.assistant

idea.suppress.statistics=true
idea.allow.third.party.plugins=false

#!/usr/bin/env bash
# ─── Pre-commit hook: AI code assistant detection ───
# Install: cp this file to .git/hooks/pre-commit && chmod +x
# Scans staged files for indicators of AI code assistant usage

set -euo pipefail

WARNINGS=0
STAGED_FILES=$(git diff --cached --name-only --diff-filter=ACM)

for file in $STAGED_FILES; do
    # Skip binary files
    if file "$file" | grep -q "binary"; then
        continue
    fi

    # Check for Copilot metadata comments
    if grep -qiE "(generated by copilot|copilot suggestion|AI-generated|github copilot)" "$file"; then
        echo "[WARNING] Possible AI-generated code marker in: $file"
        WARNINGS=$(( WARNINGS + 1 ))
    fi

    # Check for Cursor-style comment patterns
    if grep -qiE "(cursor|codeium|tabnine|supermaven).*generat" "$file"; then
        echo "[WARNING] AI tool reference found in: $file"
        WARNINGS=$(( WARNINGS + 1 ))
    fi

    # Detect VS Code extension config files for AI tools
    if [[ "$file" == *".vscode/extensions.json" ]]; then
        if grep -qiE "(copilot|tabnine|codeium|supermaven|cody)" "$file"; then
            echo "[BLOCKED] AI code assistant in recommended extensions: $file"
            echo "  Remove AI assistant extensions from .vscode/extensions.json"
            exit 1
        fi
    fi

    # Check for .cursor directory (Cursor project config)
    if [[ "$file" == *".cursor/"* ]] || [[ "$file" == *".cursorignore" ]]; then
        echo "[BLOCKED] Cursor AI configuration file detected: $file"
        echo "  Remove Cursor config files before committing"
        exit 1
    fi
done

if [ "$WARNINGS" -gt 0 ]; then
    echo ""
    echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
    echo "  $WARNINGS potential AI-generated code warning(s)"
    echo "  Review flagged files before pushing to remote"
    echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
    # Exit 0 to allow commit with warnings (change to exit 1 to block)
    exit 0
fi

echo "[OK] No AI code assistant indicators detected"