dev-prune-darwin-x64 1.16.0 → 1.18.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (3) hide show
  1. package/README.md +56 -27
  2. package/bin/dev-prune +0 -0
  3. package/package.json +1 -1
package/README.md CHANGED
@@ -52,7 +52,7 @@ gigabytes hostage for a build you are not running.
52
52
 
53
53
  `dev-prune` finds those directories across every Git repository you register, and deletes
54
54
  them — but only after proving the exact command that puts them back would succeed. It
55
- knows twenty-three package managers, not just the obvious four: Composer, Bundler, Mix,
55
+ knows twenty-five package managers, not just the obvious four: Composer, Bundler, Mix,
56
56
  CocoaPods and Terraform are as first-class as npm and pip. It is a single Rust binary,
57
57
  installs its own background schedule, and answers to two names: `dev-prune` and `devp`.
58
58
 
@@ -115,6 +115,11 @@ All three download the prebuilt binary for your platform, verify its published S
115
115
  put it on `PATH`, and run `dev-prune setup`. Pass `--no-auto-setup` / `-NoAutoSetup` to
116
116
  skip that last step.
117
117
 
118
+ A binary you download and run by hand asks first instead: the first attended run opens
119
+ the settings walkthrough before anything is installed, finishing it is the yes, and
120
+ quitting it means nothing is installed — durably, until you say otherwise with
121
+ `devp setup`.
122
+
118
123
  Re-run any of them whenever you like. An install that is already current, complete and on
119
124
  `PATH` is left exactly as it is and exits `0` without downloading; an older one is updated
120
125
  in place; a newer one is not downgraded. `--force` / `-Force` writes it again regardless.
@@ -351,9 +356,12 @@ devp restore --last-run # put back exactly what that pass deleted
351
356
  A few more worth knowing on day one:
352
357
 
353
358
  ```bash
354
- devp stats # how much has been reclaimed so far, and by which repositories
359
+ devp stats # how much has been reclaimed so far, by repository and by package manager
360
+ devp history # which pass reclaimed it, and what started that pass
361
+ devp history --pass 1 # the exact command line, and every directory it took
355
362
  devp caches # every package manager cache, sized. The report deletes nothing
356
- devp caches docker # what Docker holds, and the prune commands. Read-only, permanently
363
+ devp caches docker # what Docker holds, and the prune commands
364
+ devp caches clear docker # run the narrow ones — never a volume, never on a schedule
357
365
  devp status --drift # anything installed that the lockfiles don't record?
358
366
  devp doctor . # why is this repository not being pruned?
359
367
  devp doctor --fix # repair a broken integration — never a first-time install
@@ -500,16 +508,27 @@ Container engines
500
508
  ```
501
509
 
502
510
  Clearing 6 GiB of npm cache while a Docker install nobody has looked at in a year sits on
503
- 40 GiB is the mistake this exists to prevent. `devp caches podman` and `devp caches
504
- nerdctl` are the same report for those engines, and `devp caches containers` runs every
505
- one it finds and lists any local Kubernetes clusters (kind, k3d, minikube) by name.
506
-
507
- **It is read-only, permanently.** There is no flag and no `clear` verb that makes
508
- dev-prune run one of those commands `devp caches clear docker` is a usage error that
509
- says so — and no scheduler or Git hook reaches this code at all. That is the same rule
510
- as everywhere else rather than extra caution: an image has no lockfile to prove it can be
511
- rebuilt, the Dockerfile that built it may not be on this disk, and a named volume is the
512
- one thing on the machine that cannot be rebuilt at all.
511
+ 40 GiB is the mistake this exists to prevent. `devp caches podman`, `devp caches
512
+ nerdctl`, `devp caches finch` and `devp caches containers container` Apple's engine, on
513
+ Apple silicon are the same report for those engines, and `devp caches containers` runs
514
+ every one it finds and lists any local Kubernetes clusters (kind, k3d, minikube) by name.
515
+
516
+ **The report deletes nothing, and nothing on a schedule ever will** no daemon, no Git
517
+ hook and no `devp run` path reaches container disk, with or without `--yes`. What used to
518
+ end there now has a second half: `devp caches clear docker` runs the narrow commands for
519
+ you `builder prune -a -f`, `image prune -a -f`, `container prune -f` after printing
520
+ them and asking, and counts what came back on its own line in `devp stats`. Printing four
521
+ commands and asking you to go and type one in another window meant the 20 GiB you
522
+ reclaimed on its advice was yours to have remembered, and dev-prune could not account for
523
+ it.
524
+
525
+ **It will not touch a volume, and no flag makes it.** There is no argument anywhere in
526
+ that table containing the word, and a unit test fails the build if one appears. That is a
527
+ different promise from the lockfile rule: an image can be pulled again and a build cache
528
+ rebuilt, so those are a question of consent and the prompt is the consent. What is inside
529
+ a named volume is the only copy. `docker volume prune` stays a command this prints and
530
+ you type — and the estimate says how much unused-volume space it is leaving alone rather
531
+ than folding it into a number these commands cannot deliver.
513
532
 
514
533
  The figures come from the engine's own `system df`, not a walk of the disk. On Docker
515
534
  Desktop and Podman the store lives inside a VM disk image the host filesystem cannot see,
@@ -600,10 +619,10 @@ process that leaves a dirty working tree is a surprise.
600
619
  | 🧩 **Any number of ecosystems per repository** | uv, npm and cargo in one root, or spread across `frontend/`, `services/api/` and `tools/cli/` — each discovered, verified and pruned on its own terms |
601
620
  | ↩️ **One-command restore** | `devp restore .` reinstalls a tree; `devp restore --last-run` puts back exactly what the most recent pass deleted, across every repository it touched |
602
621
  | 🕒 **Activity-aware** | Combines `git log` timestamps with source-file `mtime`, so uncommitted work protects a repository just as a commit does |
603
- | 🐳 **Container report** | `devp caches docker` (also `podman`, `nerdctl`, or `containers` for all of them plus local Kubernetes clusters) breaks a container engine's disk into images, containers, local volumes and build cache, each with what the engine itself calls reclaimable, and prints the prune commands narrowest first with what each takes with it. **Read-only, permanently** — `devp caches clear docker` is a usage error, and no scheduler or hook reaches this code: an image has no lockfile to prove it can be rebuilt, and a named volume cannot be rebuilt at all. `devp caches` carries a one-line summary per engine, outside its own total |
604
- | 📊 **Cache report** | `devp caches` sizes every package manager cache and store on the machine — npm to cargo to conda, Maven, Gradle, NuGet, vcpkg, Conan, Composer, CocoaPods and Hex — and prints the command that clears each. The report is read-only; `devp caches clear <manager>` runs that command for you, after asking. `devp config set cache_max_gb uv=10,npm=10` says how big is too big, per manager, and marks the ones past it — `devp caches clear --over-cap all` then empties exactly those, still only when you type it. Each manager also says how many of your registered repositories use it and what that works out to per repository, and `devp caches clear --unused all` empties the ones nothing uses at all. pnpm is reported once per filesystem, because a store it hardlinks into `node_modules` cannot cross one and projects kept off the system disk get a store of their own. Nothing on a schedule ever touches a cache, and Maven's `~/.m2/repository` is never cleared at all — it holds artifacts `mvn install:install-file` put there that no remote can hand back |
622
+ | 🐳 **Container report** | `devp caches docker` (also `podman`, `nerdctl`, `finch`, Apple's `container`, or `containers` for all of them plus local Kubernetes clusters) breaks a container engine's disk into images, containers, local volumes and build cache, each with what the engine itself calls reclaimable, and prints the prune commands narrowest first with what each takes with it. `devp caches clear docker` then runs the narrow ones for you, after asking, and counts them in `devp stats` **never a volume**, and never from a scheduler or a hook. `devp caches` carries a one-line summary per engine, outside its own total |
623
+ | 📊 **Cache report** | `devp caches` sizes every package manager cache and store on the machine — npm to cargo to conda, Maven, Gradle, NuGet, vcpkg, Conan, Composer, CocoaPods, Hex, Bundler, pub, SwiftPM, Terraform, Poetry, PDM and Deno — and prints the command that clears each. It also finds the stores that belong to no package manager at all and are routinely the largest things in the list: the Playwright and Puppeteer browser bundles, the Cypress binary cache, the Electron and electron-builder download caches, and the HuggingFace hub — a whole browser or model per version, and nothing ever removes the old one. The report is read-only; `devp caches clear <manager>` runs that command for you, after asking. `devp config set cache_max_gb default=10` says how big is too big — for every manager at once, or per manager with `default=10,npm=4` and marks the ones past it — `devp caches clear --over-cap all` then empties exactly those, still only when you type it. Each manager also says how many of your registered repositories use it and what that works out to per repository, and `devp caches clear --unused all` empties the ones nothing uses at all. pnpm is reported once per filesystem, because a store it hardlinks into `node_modules` cannot cross one and projects kept off the system disk get a store of their own. Nothing on a schedule ever touches a cache, and Maven's `~/.m2/repository` is never cleared at all — it holds artifacts `mvn install:install-file` put there that no remote can hand back |
605
624
  | 🩺 **`devp doctor`** | One read-only pass that ends by naming the *single* reason a repository would or would not be pruned. Runs no package manager, repairs nothing, safe to run twice. `devp doctor --fix` then mends what it found — installed-but-broken only |
606
- | 🤖 **Self-installing automation** | OS-native scheduler (Task Scheduler, LaunchAgent, systemd user timer) and non-blocking Git hooks, installed at install time and restored after an upgrade. `auto_setup`, `auto_hooks`, `auto_daemon` or `DEV_PRUNE_NO_AUTO_SETUP=1` turn it off |
625
+ | 🤖 **Self-installing automation** | OS-native scheduler (Task Scheduler, LaunchAgent, systemd user timer) and non-blocking Git hooks, installed once the first run’s walkthrough is accepted (quitting it installs nothing) and restored after an upgrade. `auto_setup`, `auto_hooks`, `auto_daemon` or `DEV_PRUNE_NO_AUTO_SETUP=1` turn it off |
607
626
  | ⚡ **0ms opt-out** | An `ignore.devprune.json` in a repository root is honoured by file presence alone — no read, no parse. It applies at registration as well: a bulk scan (`devp init`, and the scheduled pass's own discovery) will not register a repository that holds it, so a repository can decline before it ever reaches `devp status`. `devp link <path>` still registers one, because naming a single repository is not a bulk scan |
608
627
  | 🔌 **`--json` on every reporting command** | `run`, `status`, `stats`, `trust` and `caches` each emit one versioned document on stdout, diagnostics on stderr. Built for scripts and agents |
609
628
  | 🧠 **AI agent skill** | A token-lean `SKILL.md` embedded in the binary; `devp skill` exports it and prints onboarding prompts for Claude Code, Gemini Antigravity, Cursor, Windsurf, Copilot and OpenClaw, and the repository doubles as a Claude Code plugin marketplace |
@@ -624,11 +643,12 @@ process that leaves a dirty working tree is a surprise.
624
643
  | `devp undo` | :------------------------------------------------------------------ | Reverts the most recent `init` or `link` |
625
644
  | `devp run [PATH]` | `--dry-run`, `--only`, `--skip`, `--except`, `--min-size`, `--json` | Prunes every registered repository, or one target |
626
645
  | `devp status` | `--top N`, `--drift`, `--json` | Interactive dashboard; a plain table when there is no TTY. `--top N` shows only the N biggest repositories; `--drift` lists every environment holding packages its lockfile never recorded |
627
- | `devp stats` | `--json` | What has already been reclaimed: lifetime total from pruning, a separate lifetime total from `devp caches clear`, prune passes, the last pass, and the biggest contributors |
646
+ | `devp stats` | `--json` | What has already been reclaimed: lifetime total from pruning, a separate lifetime total from `devp caches clear`, prune passes, the last pass, the biggest contributors, which package managers the space came from, and how many passes you typed rather than scheduled |
647
+ | `devp history` | `--pass N`, `--limit N`, `--all`, `--json`, `--export [PATH]` | Which pass deleted what, and what asked it to — one line per pass, then `--pass N` for the command line that ran it and every directory it removed. `--export` writes the lot to your documents folder |
628
648
  | `devp completions` | `bash`, `zsh`, `fish`, `powershell`, `elvish` | Prints a shell completion script to stdout, generated from the same argument definitions the binary parses with |
629
649
  | `devp caches` | `clear <manager\|all>`, `--json` | Sizes every package manager cache on the machine and prints the command that clears each. The report deletes nothing and nothing on a schedule ever will; `clear` empties one when you type it, after asking |
630
- | `devp caches docker` | `podman`, `nerdctl`, `containers [ENGINE]`, `--json` | What a container engine holds — images, containers, volumes, build cache — each sized, with what the engine calls reclaimable, then the prune commands. Read-only permanently: it prints them, you run them |
631
- | `devp trust` | `--json` | What dev-prune may do on this machine: the guarantees the code enforces, then the scheduler, hooks and settings read live. Read-only |
650
+ | `devp caches docker` | `podman`, `nerdctl`, `finch`, `container`, `containers [ENGINE]`, `--json` | What a container engine holds — images, containers, volumes, build cache — each sized, with what the engine calls reclaimable, then the prune commands. The report deletes nothing; `devp caches clear <engine>` runs the narrow ones when you name it, never a volume |
651
+ | `devp trust` | `--json` | What dev-prune may do on this machine: the guarantees the code enforces, then the scheduler, hooks and settings read live, then every copy of dev-prune on the machine with the manager that installed it and its SHA-256. Read-only |
632
652
  | `devp restore [PATH]` | `--last-run` | Reinstalls dependencies for every project in a tree; `--last-run` undoes the last prune pass |
633
653
  | `devp doctor [PATH]` | `--fix` | Diagnoses the installation, or one repository — ending with the single reason a pass would or would not touch it. `--fix` repairs what the checks found; it never performs a first-time install |
634
654
  | `devp config [ACTION]` | `get`, `set`, `show`, `wizard`, `project`, `daemon`, `hook`, `icon` | Global settings, per-repository `.devprune.json`, scheduler, Git hooks, file manager icons |
@@ -663,6 +683,7 @@ Adapters detect the project, verify the lockfile, and own the bloat directories:
663
683
  | **pnpm** | `pnpm-lock.yaml` | `node_modules` | `pnpm install --lockfile-only --frozen-lockfile` | `pnpm install --frozen-lockfile` |
664
684
  | **Yarn** | `yarn.lock` | `node_modules` | `yarn install --immutable --mode update-lockfile` (Berry); on Classic an existing `yarn.lock` is itself the proof | `yarn install --immutable` |
665
685
  | **Bun** | `bun.lockb`, `bun.lock` | `node_modules` | `bun install --frozen-lockfile --dry-run --ignore-scripts` | `bun install --frozen-lockfile` |
686
+ | **Deno** | `deno.lock` | `node_modules`, `vendor` *(when the config asked for one)* | `deno.lock` parses and carries its `version`, and is no older than the config it came from | `deno install` |
666
687
  | **uv** (Python) | `uv.lock`, `[tool.uv]` in `pyproject.toml` | `.venv` | `uv lock --locked` | `uv sync` |
667
688
  | **Poetry** (Python) | `poetry.lock`, `[tool.poetry]` in `pyproject.toml` | `.venv` | `poetry check --lock`, plus no installed package the lockfile never recorded | `poetry install` |
668
689
  | **PDM** (Python) | `pdm.lock`, `[tool.pdm]` or `pdm.backend` in `pyproject.toml` | `.venv`, `__pypackages__` | `pdm lock --check` | `pdm install` |
@@ -686,11 +707,11 @@ Adapters detect the project, verify the lockfile, and own the bloat directories:
686
707
  A required binary that is missing is a reason to skip, never a reason to delete: if `npm`
687
708
  is not on `PATH`, the `node_modules` it owns is left exactly where it is.
688
709
 
689
- The eight build-tool adapters ship **disabled**, because a build tree is regenerated
710
+ The nine build-tool adapters ship **disabled**, because a build tree is regenerated
690
711
  by recompiling, not downloading — it costs more to get back. `devp config set
691
712
  enable_cargo true` / `enable_gradle true` / `enable_maven true` / `enable_swift true` /
692
713
  `enable_dart true` / `enable_mix_build true` / `enable_vcpkg true` /
693
- `enable_cmake_build true` switches them on, and their candidates wait for
714
+ `enable_cmake_build true` / `enable_dotnet_build true` switches them on, and their candidates wait for
694
715
  `build_idle_days` (45 by default), applied as the *maximum* of it and `idle_days` — the
695
716
  build-tool gate only ever makes pruning later, never earlier.
696
717
 
@@ -701,10 +722,13 @@ it beside the adapter checklist, grouped by language, where one heading sets the
701
722
  window for every adapter under it.
702
723
 
703
724
  A download cache is a bet that re-downloading costs less than the disk it occupies,
704
- and somewhere the bet stops paying. `devp config set cache_max_gb uv=10,npm=10` is
725
+ and somewhere the bet stops paying. `devp config set cache_max_gb default=10` is
705
726
  where you say where: a ceiling in gibibytes — GiB, the unit the report prints —
706
- per manager, measured against that
707
- manager's whole footprint. A manager over its cap is **marked** in `devp caches` —
727
+ for every manager at once, measured against each
728
+ manager's whole footprint. `default=10,npm=4` gives one of them a figure of its own,
729
+ and a manager named outright is held to that rather than to both. The first run
730
+ suggests `default=10`, and any ceiling you have already set counts as the suggestion
731
+ taken — `devp config recommended` never overwrites a number you chose. A manager over its cap is **marked** in `devp caches` —
708
732
  setting one deletes nothing — and `devp caches clear --over-cap all` empties exactly
709
733
  what is marked, when you type it. It is keyed by the names `devp caches clear` takes
710
734
  (`npm`, `pnpm`, `uv`, `pip`, `cargo`, `go`, `nuget`, …) rather than by adapter name,
@@ -797,7 +821,7 @@ once on a first install — so the defaults are something you agreed to rather t
797
821
  inherited — and again after an upgrade adds a setting you have never been shown.
798
822
 
799
823
  If you already know what you want, `devp config recommended` is the one-command version:
800
- it turns on the eight adapters and build trees that are off by default because they are
824
+ it turns on the nine adapters and build trees that are off by default because they are
801
825
  not universally wanted, and leaves `allow_manifest_rewrite` — the one recommendation
802
826
  that edits files Git tracks — named, explained and off unless you add
803
827
  `--with-cautious`. `devp config show` lists whatever you have not taken yet.
@@ -835,13 +859,13 @@ rather than downloading. That is the whole reason each one is a switch.
835
859
 
836
860
  | Key | Default | Meaning |
837
861
  | :--- | :---: | :--- |
838
- | `enable_cargo` … `enable_cmake_build` | `false` | Turn on an opt-in build-tool adapter; `build_idle_days` (`45`) gates all eight |
862
+ | `enable_cargo` … `enable_dotnet_build` | `false` | Turn on an opt-in build-tool adapter; `build_idle_days` (`45`) gates all nine |
839
863
 
840
864
  **Shared download caches** — one key, because the cap only ever marks.
841
865
 
842
866
  | Key | Default | Meaning |
843
867
  | :--- | :---: | :--- |
844
- | `cache_max_gb` | *(none)* | Per-manager cache caps in GiB, as `uv=10,npm=10` — the cap itself deletes nothing |
868
+ | `cache_max_gb` | *(none)* | Per-manager cache caps in GiB, as `default=10,npm=4` — `default` covers every manager not named separately, and the cap itself deletes nothing |
845
869
 
846
870
  **Running without being asked** — what dev-prune may install here, and how often it may
847
871
  act on its own.
@@ -983,6 +1007,11 @@ non-blocking `post-commit`, `post-checkout` and `post-merge` Git hooks that regi
983
1007
  repositories as you visit them. Both are reinstated after an upgrade if anything went
984
1008
  missing.
985
1009
 
1010
+ None of it arrives unasked. A machine that has never agreed opens the settings
1011
+ walkthrough on its first attended run, before anything is installed: finishing the
1012
+ walkthrough is the yes, quitting it is a durable no, and `devp setup` changes the
1013
+ answer whenever you like.
1014
+
986
1015
  ```bash
987
1016
  devp setup --status # what is installed, what is not, and why
988
1017
  devp config set auto_setup false # stop the unattended pass entirely
package/bin/dev-prune CHANGED
Binary file
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "dev-prune-darwin-x64",
3
- "version": "1.16.0",
3
+ "version": "1.18.0",
4
4
  "description": "Prebuilt dev-prune binary for darwin x64. Installed automatically by the 'dev-prune' package; not meant to be depended on directly.",
5
5
  "os": ["darwin"],
6
6
  "cpu": ["x64"],