@decocms/start 2.22.0 → 2.24.0

package/scripts/migrate/post-cleanup/runner.test.ts

@@ -227,9 +227,11 @@ describe("rule: dead-runtime-shim", () => {
     const r = report.rules.find((r) => r.rule === "dead-runtime-shim")!;
     expect(r.findings).toHaveLength(1);
     expect(r.findings[0].file).toBe("src/runtime.ts");
+    expect(r.findings[0].meta?.safeToAutoFix).toBe(true);
+    expect(r.findings[0].meta?.hasInlineProxy).toBe(true);
   });
 
-  it("does not flag a runtime.ts that exports site-specific helpers", () => {
+  it("does not flag a runtime.ts that exports site-specific helpers (no inline proxy)", () => {
     const fs = makeFs({
       "/site/src/runtime.ts": "export const invoke = {};\nexport const customHelper = () => 1;\n",
     });
@@ -237,6 +239,80 @@ describe("rule: dead-runtime-shim", () => {
     const r = report.rules.find((r) => r.rule === "dead-runtime-shim")!;
     expect(r.findings).toEqual([]);
   });
+
+  it("does NOT flag the Wave 15-A canonical re-export shape", () => {
+    // The migration template now scaffolds a thin re-export from
+    // @decocms/start/sdk plus a Runtime alias. No inline proxy body.
+    const fs = makeFs({
+      "/site/src/runtime.ts":
+        'import { invoke } from "@decocms/start/sdk";\nexport { invoke };\nexport const Runtime = { invoke };\n',
+    });
+    const report = runAudit(SITE, fs);
+    const r = report.rules.find((r) => r.rule === "dead-runtime-shim")!;
+    expect(r.findings).toEqual([]);
+  });
+
+  it("flags the legacy 47-line inline createNestedInvokeProxy body (with Runtime export)", () => {
+    // The pre-Wave-15-A migration template emitted a full Proxy body
+    // alongside `Runtime = { invoke }`. The earlier rule heuristic
+    // missed this shape because `Runtime` was not in its allowlist.
+    const fs = makeFs({
+      "/site/src/runtime.ts": `
+function createNestedInvokeProxy(path: string[] = []): any {
+  return new Proxy(
+    Object.assign(async (props: any) => {
+      const key = path.join("/");
+      const response = await fetch(\`/deco/invoke/\${key}\`, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify(props ?? {}),
+      });
+      return response.json();
+    }, {}),
+    {
+      get(_target: any, prop: string) {
+        if (prop === "then") return undefined;
+        return createNestedInvokeProxy([...path, prop]);
+      },
+    },
+  );
+}
+
+export const invoke = createNestedInvokeProxy() as any;
+export const Runtime = { invoke };
+`,
+    });
+    const report = runAudit(SITE, fs);
+    const r = report.rules.find((r) => r.rule === "dead-runtime-shim")!;
+    expect(r.findings).toHaveLength(1);
+    expect(r.findings[0].meta?.hasInlineProxy).toBe(true);
+    expect(r.findings[0].meta?.safeToAutoFix).toBe(true);
+    expect(r.findings[0].message).toContain("inline createNestedInvokeProxy body");
+  });
+
+  it("flags but does NOT auto-fix when inline proxy coexists with site-specific helpers", () => {
+    // Defensive: if a site has hand-tuned the runtime file with extra
+    // exports beyond invoke/Runtime, deletion would lose data. Surface
+    // the issue but skip the destructive fix.
+    const fs = makeFs({
+      "/site/src/runtime.ts": `
+function createNestedInvokeProxy(path: string[] = []): any {
+  return new Proxy(Object.assign(async (props: any) => {}, {}), {});
+}
+export const invoke = createNestedInvokeProxy();
+export const trackPageView = () => console.log("custom tracker");
+`,
+    });
+    const report = runAudit(SITE, fs);
+    const r = report.rules.find((r) => r.rule === "dead-runtime-shim")!;
+    expect(r.findings).toHaveLength(1);
+    expect(r.findings[0].meta?.hasInlineProxy).toBe(true);
+    expect(r.findings[0].meta?.safeToAutoFix).toBe(false);
+    expect(r.findings[0].message).toContain("manual review");
+    // applyFix should be a no-op when safeToAutoFix is false — verified
+    // implicitly by the runner test for --fix below; here we only
+    // assert the metadata gate.
+  });
 });
 
 describe("rule: site-local-with-globals", () => {
@@ -590,6 +666,7 @@ describe("runAudit — totals", () => {
       [
         "dead-lib-shims",
         "dead-runtime-shim",
+        "local-framework-duplicate",
         "local-widgets-types",
         "obsolete-vite-plugins",
         "vtex-shim-regression",
@@ -1094,3 +1171,193 @@ describe("rule: htmx-residue", () => {
     expect(r.supportsAutoFix).toBe(false);
   });
 });
+
+/* ------------------------------------------------------------------ */
+/* W15-B-1 — local-framework-duplicate rule                            */
+/* ------------------------------------------------------------------ */
+
+describe("rule: local-framework-duplicate", () => {
+  it("flags src/sdk/clx.ts when content matches the framework export (auto-fixable)", () => {
+    const fs = makeFs({
+      "/site/src/sdk/clx.ts":
+        "export const clx = (...args: (string | null | undefined | false)[]) =>\n" +
+        '  args.filter(Boolean).join(" ").replace(/\\s\\s+/g, " ");\n' +
+        "export default clx;\n",
+    });
+    const report = runAudit(SITE, fs);
+    const r = report.rules.find((r) => r.rule === "local-framework-duplicate")!;
+    expect(r.findings).toHaveLength(1);
+    expect(r.findings[0].file).toBe("src/sdk/clx.ts");
+    expect(r.findings[0].message).toContain("pure dup");
+    expect(r.findings[0].meta?.id).toBe("clx");
+    expect(r.findings[0].meta?.safeToAutoFix).toBe(true);
+    expect(r.findings[0].meta?.canonicalImport).toBe("@decocms/start/sdk/clx");
+  });
+
+  it("flags src/sdk/clx.ts when site adds a clsx alias (signature still matches)", () => {
+    const fs = makeFs({
+      "/site/src/sdk/clx.ts":
+        "export const clx = (...args: (string | null | undefined | false)[]) =>\n" +
+        '  args.filter(Boolean).join(" ").replace(/\\s\\s+/g, " ");\n' +
+        "export const clsx = clx;\n" +
+        "export default clx;\n",
+    });
+    const report = runAudit(SITE, fs);
+    const r = report.rules.find((r) => r.rule === "local-framework-duplicate")!;
+    expect(r.findings).toHaveLength(1);
+    expect(r.findings[0].meta?.id).toBe("clx");
+    expect(r.findings[0].meta?.safeToAutoFix).toBe(true);
+  });
+
+  it("does NOT flag a clx.ts that has been forked (signature mismatch)", () => {
+    const fs = makeFs({
+      // Realistic fork: uses lodash-style cn from a different package.
+      "/site/src/sdk/clx.ts":
+        'import { cn } from "lodash";\nexport const clx = cn;\nexport default clx;\n',
+    });
+    const report = runAudit(SITE, fs);
+    const r = report.rules.find((r) => r.rule === "local-framework-duplicate")!;
+    expect(r.findings).toEqual([]);
+  });
+
+  it("flags src/sdk/useSendEvent.ts as warn-only (typing regression risk)", () => {
+    const fs = makeFs({
+      "/site/src/sdk/useSendEvent.ts":
+        'import { AnalyticsEvent } from "@decocms/apps/commerce/types";\n' +
+        "export const useSendEvent = <E extends AnalyticsEvent>(\n" +
+        "  { event, on }: { event: E; on: 'click' | 'view' | 'change' },\n" +
+        ") => ({\n" +
+        '  "data-event": encodeURIComponent(JSON.stringify(event)),\n' +
+        '  "data-event-trigger": on,\n' +
+        "});\n",
+    });
+    const report = runAudit(SITE, fs);
+    const r = report.rules.find((r) => r.rule === "local-framework-duplicate")!;
+    expect(r.findings).toHaveLength(1);
+    expect(r.findings[0].file).toBe("src/sdk/useSendEvent.ts");
+    expect(r.findings[0].message).toContain("partial overlap");
+    expect(r.findings[0].meta?.safeToAutoFix).toBe(false);
+    expect(r.findings[0].fix).toContain("typed AnalyticsEvent generic");
+  });
+
+  it("flags src/matchers/location.ts as warn-only (behaviour-superset opportunity)", () => {
+    const fs = makeFs({
+      "/site/src/matchers/location.ts":
+        'import { registerMatcher } from "@decocms/start/cms";\n' +
+        "export function registerLocationMatcher(): void {\n" +
+        '  registerMatcher("website/matchers/location.ts", (rule, ctx) => {\n' +
+        "    const cookies = ctx.cookies ?? {};\n" +
+        "    const country = cookies.__cf_geo_country ?? '';\n" +
+        "    return Boolean(country);\n" +
+        "  });\n" +
+        "}\n",
+    });
+    const report = runAudit(SITE, fs);
+    const r = report.rules.find((r) => r.rule === "local-framework-duplicate")!;
+    expect(r.findings).toHaveLength(1);
+    expect(r.findings[0].file).toBe("src/matchers/location.ts");
+    expect(r.findings[0].meta?.safeToAutoFix).toBe(false);
+    expect(r.findings[0].fix).toContain("registerBuiltinMatchers");
+  });
+
+  it("emits zero findings on a clean tree (no duplicates present)", () => {
+    const fs = makeFs({
+      "/site/src/sections/Hello.tsx":
+        'import { clx } from "@decocms/start/sdk/clx";\nexport default () => <div className={clx("a")}>x</div>;\n',
+    });
+    const report = runAudit(SITE, fs);
+    const r = report.rules.find((r) => r.rule === "local-framework-duplicate")!;
+    expect(r.findings).toEqual([]);
+  });
+
+  it("emits warning severity for both auto-fixable AND warn-only entries (--strict gates everything)", () => {
+    const fs = makeFs({
+      "/site/src/sdk/clx.ts":
+        'export const clx = (...args: any[]) => args.filter(Boolean).join(" ").replace(/\\s\\s+/g, " ");\n',
+      "/site/src/sdk/useSendEvent.ts":
+        'export const useSendEvent = (e: any) => ({ "data-event": encodeURIComponent(JSON.stringify(e)) });\n',
+    });
+    const report = runAudit(SITE, fs);
+    const r = report.rules.find((r) => r.rule === "local-framework-duplicate")!;
+    for (const f of r.findings) expect(f.severity).toBe("warning");
+  });
+
+  it("auto-fix rewrites importers using ~/sdk/clx and deletes the file", () => {
+    const { fs, writer, store } = makeMutableFs({
+      "/site/src/sdk/clx.ts":
+        'export const clx = (...args: any[]) => args.filter(Boolean).join(" ").replace(/\\s\\s+/g, " ");\n',
+      "/site/src/components/A.tsx":
+        'import { clx } from "~/sdk/clx";\nexport default () => clx("x");\n',
+      "/site/src/components/B.tsx":
+        'import { clx } from "~/sdk/clx";\nimport React from "react";\nexport default () => clx("y");\n',
+      "/site/src/components/Unrelated.tsx":
+        'import { clx } from "@decocms/start/sdk/clx";\nexport default () => clx("z");\n',
+    });
+    const report = runAudit(SITE, fs, { writer });
+    const r = report.rules.find((r) => r.rule === "local-framework-duplicate")!;
+    expect(r.fixes).toBeDefined();
+    expect(r.fixes!.length).toBe(1);
+    expect(r.fixes![0].kind).toBe("rewrite-imports+delete");
+    expect(r.fixes![0].detail).toContain("rewrote 2 import(s)");
+    // File deleted from the in-memory store
+    expect(store["/site/src/sdk/clx.ts"]).toBeUndefined();
+    // Importers rewritten
+    expect(store["/site/src/components/A.tsx"]).toContain(
+      'from "@decocms/start/sdk/clx"',
+    );
+    expect(store["/site/src/components/B.tsx"]).toContain(
+      'from "@decocms/start/sdk/clx"',
+    );
+    // Already-canonical import untouched
+    expect(store["/site/src/components/Unrelated.tsx"]).toContain(
+      'from "@decocms/start/sdk/clx"',
+    );
+    expect(store["/site/src/components/Unrelated.tsx"]).not.toMatch(/~\/sdk\/clx/);
+  });
+
+  it("auto-fix is a no-op for warn-only entries (does NOT delete partial-overlap files)", () => {
+    const { fs, writer, store } = makeMutableFs({
+      "/site/src/sdk/useSendEvent.ts":
+        'import { AnalyticsEvent } from "@decocms/apps/commerce/types";\n' +
+        "export const useSendEvent = <E extends AnalyticsEvent>() => ({\n" +
+        '  "data-event": encodeURIComponent("x"),\n' +
+        "});\n",
+      "/site/src/matchers/location.ts":
+        'import { registerMatcher } from "@decocms/start/cms";\n' +
+        'registerMatcher("website/matchers/location.ts", () => Boolean(__cf_geo_country));\n',
+    });
+    const report = runAudit(SITE, fs, { writer });
+    const r = report.rules.find((r) => r.rule === "local-framework-duplicate")!;
+    expect(r.findings.length).toBe(2);
+    // Both fixes are no-ops because safeToAutoFix === false.
+    expect(r.fixes ?? []).toEqual([]);
+    // Files preserved.
+    expect(store["/site/src/sdk/useSendEvent.ts"]).toBeDefined();
+    expect(store["/site/src/matchers/location.ts"]).toBeDefined();
+  });
+
+  it("auto-fix runs only on auto-fixable entries when both kinds coexist", () => {
+    const { fs, writer, store } = makeMutableFs({
+      "/site/src/sdk/clx.ts":
+        'export const clx = (...args: any[]) => args.filter(Boolean).join(" ").replace(/\\s\\s+/g, " ");\n',
+      "/site/src/sdk/useSendEvent.ts":
+        'export const useSendEvent = (e: any) => ({ "data-event": encodeURIComponent(JSON.stringify(e)) });\n',
+      "/site/src/components/A.tsx":
+        'import { clx } from "~/sdk/clx";\nexport default () => clx("x");\n',
+    });
+    const report = runAudit(SITE, fs, { writer });
+    const r = report.rules.find((r) => r.rule === "local-framework-duplicate")!;
+    expect(r.findings.length).toBe(2);
+    expect(r.fixes!.length).toBe(1); // only clx auto-fixed
+    expect(r.fixes![0].file).toBe("src/sdk/clx.ts");
+    expect(store["/site/src/sdk/clx.ts"]).toBeUndefined();
+    expect(store["/site/src/sdk/useSendEvent.ts"]).toBeDefined();
+  });
+
+  it("supportsAutoFix is true (the rule has applyFix even though some entries are warn-only)", () => {
+    const fs = makeFs({});
+    const report = runAudit(SITE, fs);
+    const r = report.rules.find((r) => r.rule === "local-framework-duplicate")!;
+    expect(r.supportsAutoFix).toBe(true);
+  });
+});

package/scripts/migrate/templates/commerce-loaders.ts

@@ -204,7 +204,8 @@ export function generateCommerceLoaders(ctx: MigrationContext): string {
       lines.push(`      breadcrumb: createBreadcrumbFromPath(url.pathname, url, collection.name) ?? {},`);
       lines.push(`      seo: {`);
       lines.push(`        title: collection.name,`);
-      lines.push(`        description: "O melhor site de compras online para sua casa: compre itens de cozinha, móveis para sala e escritório, acessórios de tecnologia e mais. Clique já!",`);
+      lines.push(`        // MIGRATION TODO: replace with site-specific category description`);
+      lines.push(`        description: collection.name,`);
       lines.push(`        noIndexing: false,`);
       lines.push(`        canonical: url.toString(),`);
       lines.push(`      },`);

package/scripts/migrate/templates/routes.ts

@@ -67,8 +67,10 @@ import { DecoRootLayout } from "@decocms/start/hooks";
 // @ts-ignore Vite ?url import
 import appCss from "../styles/app.css?url";
 
-const DEFAULT_DESCRIPTION =
-  "${siteTitle} - Tudo para sua casa com os melhores preços.";
+// MIGRATION TODO: customize description, OG image, and locale for ${siteTitle}.
+// The migration scaffold leaves a generic default so it never falls through;
+// CMS \`Site.seo\` overrides this once block resolution kicks in.
+const DEFAULT_DESCRIPTION = "${siteTitle}";
 
 export const Route = createRootRoute({
   head: () => ({
@@ -108,11 +110,14 @@ function generateIndex(ctx: MigrationContext, siteTitle: string): string {
 import { cmsHomeRouteConfig, deferredSectionLoader } from "@decocms/start/routes";
 import { DecoPageRenderer } from "@decocms/start/hooks";
 
+// MIGRATION TODO: customize defaultTitle / defaultDescription / fallback
+// copy below for ${siteTitle}. CMS \`Site.seo\` overrides these once block
+// resolution kicks in, so leaving the migration scaffold defaults is safe
+// but visible in pre-block-resolution states.
 export const Route = createFileRoute("/")({
   ...cmsHomeRouteConfig({
-    defaultTitle: "${siteTitle} - Tudo para sua casa",
-    defaultDescription:
-      "${siteTitle} - Tudo para sua casa com os melhores preços.",
+    defaultTitle: "${siteTitle}",
+    defaultDescription: "${siteTitle}",
     siteName: "${siteTitle}",
   }),
   component: HomePage,
@@ -126,8 +131,7 @@ function HomePage() {
       <div className="min-h-screen flex items-center justify-center">
         <div className="text-center">
           <h1 className="text-4xl font-bold mb-4">${siteTitle}</h1>
-          <p className="text-lg text-base-content/60">Tudo para sua casa</p>
-          <p className="text-sm text-base-content/40 mt-2">Nenhuma página CMS encontrada para /</p>
+          <p className="text-sm text-base-content/40 mt-2">No CMS page registered for /</p>
         </div>
       </div>
     );
@@ -152,11 +156,12 @@ function generateCatchAll(ctx: MigrationContext, siteTitle: string): string {
 import { cmsRouteConfig, deferredSectionLoader } from "@decocms/start/routes";
 import { DecoPageRenderer } from "@decocms/start/hooks";
 
+// MIGRATION TODO: customize defaultTitle / defaultDescription for ${siteTitle}
+// (CMS \`Site.seo\` overrides these per-page once block resolution kicks in).
 const routeConfig = cmsRouteConfig({
   siteName: "${siteTitle}",
-  defaultTitle: "${siteTitle} - Tudo para sua casa",
-  defaultDescription:
-    "${siteTitle} - Tudo para sua casa com os melhores preços.",
+  defaultTitle: "${siteTitle}",
+  defaultDescription: "${siteTitle}",
   ignoreSearchParams: ["skuId"],
 });
 

package/scripts/migrate/templates/server-entry.ts

@@ -216,50 +216,20 @@ declare module "@tanstack/react-router" {
 
 function generateRuntime(): string {
   return `/**
- * Runtime invoke proxy.
+ * Runtime invoke proxy — re-exports the framework canonical from @decocms/start/sdk.
  *
- * Turns nested property access into a typed RPC call to /deco/invoke.
- * Converts dot-notation paths to slash-separated keys:
- *   invoke.vtex.loaders.productList(props)
- *   → POST /deco/invoke/vtex/loaders/productList
+ * The implementation (typed RPC over /deco/invoke, dotted-path proxy, .ts
+ * suffix fallback) lives in @decocms/start/sdk/invoke. This file exists so
+ * existing site code can keep \`import { invoke } from "~/runtime"\` and
+ * \`Runtime.invoke\` shapes without churn.
  *
- * The .ts suffix variant is also tried if the primary key isn't found
- * (registered loaders may have ".ts" extensions in their keys).
+ * Don't reimplement here — extend @decocms/start/sdk/invoke instead.
  */
-function createNestedInvokeProxy(path: string[] = []): any {
-  return new Proxy(
-    Object.assign(async (props: any) => {
-      const key = path.join("/");
-      for (const k of [key, \`\${key}.ts\`]) {
-        const response = await fetch(\`/deco/invoke/\${k}\`, {
-          method: "POST",
-          headers: { "Content-Type": "application/json" },
-          body: JSON.stringify(props ?? {}),
-        });
-        if (response.status === 404) continue;
-        if (!response.ok) {
-          throw new Error(\`invoke(\${k}) failed: \${response.status}\`);
-        }
-        return response.json();
-      }
-      throw new Error(\`invoke(\${key}) failed: handler not found\`);
-    }, {}),
-    {
-      get(_target: any, prop: string) {
-        if (prop === "then" || prop === "catch" || prop === "finally") {
-          return undefined;
-        }
-        return createNestedInvokeProxy([...path, prop]);
-      },
-    },
-  );
-}
+import { invoke } from "@decocms/start/sdk";
 
-export const invoke = createNestedInvokeProxy() as any;
+export { invoke };
 
-export const Runtime = {
-  invoke,
-};
+export const Runtime = { invoke };
 `;
 }
 
@@ -299,11 +269,8 @@ export const invoke = {} as const;
  * auto-generated in invoke.gen.ts. Run \`npm run generate:invoke\` to update.
  */
 import { createServerFn } from "@tanstack/react-start";
-import {
-  getRequestHeader,
-  getResponseHeaders,
-  setResponseHeader,
-} from "@tanstack/react-start/server";
+import { getRequestHeader } from "@tanstack/react-start/server";
+import { forwardResponseCookies } from "@decocms/start/sdk/cookiePassthrough";
 import { vtexActions } from "./invoke.gen";
 ${hasVtexAuthLoader ? `import vtexAuthLoader from "../loaders/vtex-auth-loader";\n` : ""}import {
   extractVtexCookiesFromHeader,
@@ -314,15 +281,6 @@ ${hasVtexAuthLoader ? `import vtexAuthLoader from "../loaders/vtex-auth-loader";
 
 export type { OrderForm } from "./invoke.gen";
 
-function mergeSetCookies(newCookies: string[]): void {
-  if (newCookies.length === 0) return;
-  const existing: string[] =
-    typeof getResponseHeaders().getSetCookie === "function"
-      ? getResponseHeaders().getSetCookie()
-      : [];
-  setResponseHeader("set-cookie", [...existing, ...newCookies]);
-}
-
 function getVtexCookies(): string {
   return extractVtexCookiesFromHeader(getRequestHeader("cookie") ?? "");
 }
@@ -336,7 +294,7 @@ ${hasVtexAuthLoader ? `const _vtexAuth = createServerFn({ method: "POST" })
     } as any);
     if (result instanceof Response) {
       const setCookies = result.headers.getSetCookie?.() ?? [];
-      mergeSetCookies(stripCookieDomain(setCookies));
+      forwardResponseCookies(stripCookieDomain(setCookies));
       return result.json();
     }
     return result;
@@ -344,7 +302,7 @@ ${hasVtexAuthLoader ? `const _vtexAuth = createServerFn({ method: "POST" })
 ` : ""}const _logout = createServerFn({ method: "POST" }).handler(
   async (): Promise<{ success: boolean }> => {
     const { setCookies } = await performVtexLogout(getVtexCookies());
-    mergeSetCookies(setCookies);
+    forwardResponseCookies(setCookies);
     return { success: true };
   },
 );

package/scripts/migrate/templates/vite-config.ts

@@ -53,41 +53,6 @@ export default defineConfig({
     }),
     tailwindcss(),
     decoVitePlugin(),
-    {
-      name: "site-manual-chunks",
-      config(_cfg, { command }) {
-        if (command !== "build") return;
-        return {
-          build: {
-            rollupOptions: {
-              output: {
-                manualChunks(id: string) {
-                  if (id.includes("node_modules/react-dom") || id.includes("node_modules/react/"))
-                    return "vendor-react";
-                  if (id.includes("@tanstack/react-router") || id.includes("@tanstack/start"))
-                    return "vendor-router";
-                  if (id.includes("@tanstack/react-query")) return "vendor-query";
-                },
-              },
-            },
-          },
-        };
-      },
-    },
-    {
-      name: "deco-stub-meta-gen",
-      enforce: "pre" as const,
-      resolveId(id, importer, options) {
-        if (!options?.ssr && importer && id.includes("meta.gen")) {
-          return "\\0stub:meta-gen";
-        }
-      },
-      load(id) {
-        if (id === "\\0stub:meta-gen") {
-          return "export default {};";
-        }
-      },
-    },
   ],
   build: {
     sourcemap: "hidden",

package/scripts/migrate-post-cleanup.ts

@@ -77,8 +77,10 @@ function showHelp() {
     --source <dir>   Site directory to audit (default: .)
     --fix            Auto-apply mechanical fixes for the safe rules
                      (dead-lib-shims, dead-runtime-shim, local-widgets-types,
-                     vtex-shim-regression swap subset, obsolete-vite-plugins).
-                     Other rules — including htmx-residue — stay detect-only.
+                     vtex-shim-regression swap subset, obsolete-vite-plugins,
+                     local-framework-duplicate auto-fixable subset).
+                     Other rules — including htmx-residue and the warn-only
+                     entries of local-framework-duplicate — stay detect-only.
     --json           Emit machine-readable JSON instead of pretty text
     --strict         Exit code 2 if any warning-severity findings exist
     --help, -h       Show this help