feat: add comprehensive open source project structure

[thegdsks]

• Add CONTRIBUTING.md with detailed contribution guidelines
• Create GitHub issue templates (bug reports, features, questions)
• Add pull request template with comprehensive checklist
• Implement CODE_OF_CONDUCT.md for community standards
• Add SECURITY.md with vulnerability reporting procedures
• Create SUPPORT.md with troubleshooting and help resources
• Add VS Code extension with three core commands
• Implement webview settings panel with real-time status
• Set up CI/CD workflows for automated publishing
• Add branding infrastructure and setup scripts
• Include comprehensive testing and performance monitoring
• Bump version to 0.1.0-beta.5

[Copilot]

Pull Request Overview

This PR implements a comprehensive open source project structure for CommitWeave, adding extensive configuration management, performance optimizations, and a complete VS Code extension with webview settings panel. The changes transform CommitWeave into a production-ready developer tool with enterprise-grade features.

Key changes include:

• Enhanced Configuration System: Added import/export, validation, and health check commands with version compatibility
• Performance Optimizations: Implemented lazy loading, performance measurement utilities, and cold-start optimization reducing startup time by 13x
• Complete VS Code Extension: Three core commands, real-time webview settings panel, and automated CI/CD publishing pipeline

Reviewed Changes

Copilot reviewed 62 out of 67 changed files in this pull request and generated 5 comments.

Show a summary per file

File	Description
vscode-extension/	Complete VS Code extension with commands, webview UI, and testing infrastructure
src/utils/providers/	Lazy-loaded AI provider implementations with enhanced error handling
src/cli/commands/	Configuration management commands (export, import, list, reset, doctor)
src/utils/perf.ts	Performance measurement utilities for startup time optimization
src/utils/lazyImport.ts	Lazy loading infrastructure for performance improvements
tests/	Comprehensive test suite for performance, configuration, and AI providers
scripts/	Branding setup and performance benchmarking infrastructure

[Copilot]

The synchronous process.cwd() fallback could block the event loop. Consider using an async alternative or caching the working directory.

Suggested change

	await this._executeCommand('commitweave', ['--version'], workspaceFolder || process.cwd());
	status.cli.available = true;
	} catch {
	// Try with npx
	try {
	await this._executeCommand('npx', ['@typeweaver/commitweave', '--version'], workspaceFolder || process.cwd());
	await this._executeCommand('commitweave', ['--version'], workspaceFolder || CACHED_CWD);
	status.cli.available = true;
	} catch {
	// Try with npx
	try {
	await this._executeCommand('npx', ['@typeweaver/commitweave', '--version'], workspaceFolder || CACHED_CWD);

[Copilot]

Loading error classes lazily in error handling paths could add latency when errors occur. Consider pre-loading commonly used error classes or using a static import for better performance.

Suggested change

	const { ClaudeRateLimitError } = await lazy(() => import('../../types/ai.js'));
	throw new ClaudeRateLimitError('Rate limited');
	}
	if (response.status === 400) {
	const errorData = await response.json().catch(() => ({})) as any;
	const errorMessage = errorData.error?.message || errorData.error || 'Bad request';
	const { ClaudeValidationError } = await lazy(() => import('../../types/ai.js'));
	throw new ClaudeRateLimitError('Rate limited');
	}
	if (response.status === 400) {
	const errorData = await response.json().catch(() => ({})) as any;
	const errorMessage = errorData.error?.message || errorData.error || 'Bad request';

[Copilot]

The CSP allows 'unsafe-inline' for styles which reduces security. Consider using nonce-based inline styles or external stylesheets for better security.

Suggested change

	<meta http-equiv="Content-Security-Policy" content="default-src 'none'; style-src {{cspSource}} 'unsafe-inline'; script-src 'nonce-{{nonce}}';">
	<title>CommitWeave Settings</title>
	<style>
	<meta http-equiv="Content-Security-Policy" content="default-src 'none'; style-src {{cspSource}} 'nonce-{{nonce}}'; script-src 'nonce-{{nonce}}';">
	<title>CommitWeave Settings</title>
	<style nonce="{{nonce}}">

[Copilot]

The lazy loading pattern is repeated across multiple files with similar structure. Consider creating a reusable lazy loading utility function to reduce code duplication.

Suggested change

	const { default: simpleGit } = await lazy(() => import('simple-git'));
	const { default: simpleGit } = await getSimpleGitModule();

[Copilot]

Multiple conditional lazy loads of the same module (chalk) in different functions could be inefficient. Consider using a module-level cached lazy loader.

Suggested change

	if (!chalk) {
	chalk = (await lazy(() => import('chalk'))).default;
	}
	const chalk = await getChalk();