dev-prune 1.17.0 → 1.18.0

package/README.md

@@ -28,7 +28,7 @@ gigabytes hostage for a build you are not running.
 
 `dev-prune` finds those directories across every Git repository you register, and deletes
 them — but only after proving the exact command that puts them back would succeed. It
-knows twenty-four package managers, not just the obvious four: Composer, Bundler, Mix,
+knows twenty-five package managers, not just the obvious four: Composer, Bundler, Mix,
 CocoaPods and Terraform are as first-class as npm and pip. It is a single Rust binary,
 installs its own background schedule, and answers to two names: `dev-prune` and `devp`.
 
@@ -91,6 +91,11 @@ All three download the prebuilt binary for your platform, verify its published S
 put it on `PATH`, and run `dev-prune setup`. Pass `--no-auto-setup` / `-NoAutoSetup` to
 skip that last step.
 
+A binary you download and run by hand asks first instead: the first attended run opens
+the settings walkthrough before anything is installed, finishing it is the yes, and
+quitting it means nothing is installed — durably, until you say otherwise with
+`devp setup`.
+
 Re-run any of them whenever you like. An install that is already current, complete and on
 `PATH` is left exactly as it is and exits `0` without downloading; an older one is updated
 in place; a newer one is not downgraded. `--force` / `-Force` writes it again regardless.
@@ -593,7 +598,7 @@ process that leaves a dirty working tree is a surprise.
 | 🐳 **Container report**                        | `devp caches docker` (also `podman`, `nerdctl`, `finch`, Apple's `container`, or `containers` for all of them plus local Kubernetes clusters) breaks a container engine's disk into images, containers, local volumes and build cache, each with what the engine itself calls reclaimable, and prints the prune commands narrowest first with what each takes with it. `devp caches clear docker` then runs the narrow ones for you, after asking, and counts them in `devp stats` — **never a volume**, and never from a scheduler or a hook. `devp caches` carries a one-line summary per engine, outside its own total |
 | 📊 **Cache report**                            | `devp caches` sizes every package manager cache and store on the machine — npm to cargo to conda, Maven, Gradle, NuGet, vcpkg, Conan, Composer, CocoaPods, Hex, Bundler, pub, SwiftPM, Terraform, Poetry, PDM and Deno — and prints the command that clears each. It also finds the stores that belong to no package manager at all and are routinely the largest things in the list: the Playwright and Puppeteer browser bundles, the Cypress binary cache, the Electron and electron-builder download caches, and the HuggingFace hub — a whole browser or model per version, and nothing ever removes the old one. The report is read-only; `devp caches clear <manager>` runs that command for you, after asking. `devp config set cache_max_gb default=10` says how big is too big — for every manager at once, or per manager with `default=10,npm=4` — and marks the ones past it — `devp caches clear --over-cap all` then empties exactly those, still only when you type it. Each manager also says how many of your registered repositories use it and what that works out to per repository, and `devp caches clear --unused all` empties the ones nothing uses at all. pnpm is reported once per filesystem, because a store it hardlinks into `node_modules` cannot cross one and projects kept off the system disk get a store of their own. Nothing on a schedule ever touches a cache, and Maven's `~/.m2/repository` is never cleared at all — it holds artifacts `mvn install:install-file` put there that no remote can hand back |
 | 🩺 **`devp doctor`**                           | One read-only pass that ends by naming the *single* reason a repository would or would not be pruned. Runs no package manager, repairs nothing, safe to run twice. `devp doctor --fix` then mends what it found — installed-but-broken only                                                                                                                 |
-| 🤖 **Self-installing automation**              | OS-native scheduler (Task Scheduler, LaunchAgent, systemd user timer) and non-blocking Git hooks, installed at install time and restored after an upgrade. `auto_setup`, `auto_hooks`, `auto_daemon` or `DEV_PRUNE_NO_AUTO_SETUP=1` turn it off                                                                                                             |
+| 🤖 **Self-installing automation**              | OS-native scheduler (Task Scheduler, LaunchAgent, systemd user timer) and non-blocking Git hooks, installed once the first run’s walkthrough is accepted (quitting it installs nothing) and restored after an upgrade. `auto_setup`, `auto_hooks`, `auto_daemon` or `DEV_PRUNE_NO_AUTO_SETUP=1` turn it off                                                                                                             |
 | ⚡ **0ms opt-out**                             | An `ignore.devprune.json` in a repository root is honoured by file presence alone — no read, no parse. It applies at registration as well: a bulk scan (`devp init`, and the scheduled pass's own discovery) will not register a repository that holds it, so a repository can decline before it ever reaches `devp status`. `devp link <path>` still registers one, because naming a single repository is not a bulk scan                                                                                                                                                                                                                                                       |
 | 🔌 **`--json` on every reporting command**     | `run`, `status`, `stats`, `trust` and `caches` each emit one versioned document on stdout, diagnostics on stderr. Built for scripts and agents                                                                                                                                                                                                              |
 | 🧠 **AI agent skill**                          | A token-lean `SKILL.md` embedded in the binary; `devp skill` exports it and prints onboarding prompts for Claude Code, Gemini Antigravity, Cursor, Windsurf, Copilot and OpenClaw, and the repository doubles as a Claude Code plugin marketplace                                                                                                                                                                           |
@@ -678,11 +683,11 @@ Adapters detect the project, verify the lockfile, and own the bloat directories:
 A required binary that is missing is a reason to skip, never a reason to delete: if `npm`
 is not on `PATH`, the `node_modules` it owns is left exactly where it is.
 
-The eight build-tool adapters ship **disabled**, because a build tree is regenerated
+The nine build-tool adapters ship **disabled**, because a build tree is regenerated
 by recompiling, not downloading — it costs more to get back. `devp config set
 enable_cargo true` / `enable_gradle true` / `enable_maven true` / `enable_swift true` /
 `enable_dart true` / `enable_mix_build true` / `enable_vcpkg true` /
-`enable_cmake_build true` switches them on, and their candidates wait for
+`enable_cmake_build true` / `enable_dotnet_build true` switches them on, and their candidates wait for
 `build_idle_days` (45 by default), applied as the *maximum* of it and `idle_days` — the
 build-tool gate only ever makes pruning later, never earlier.
 
@@ -792,7 +797,7 @@ once on a first install — so the defaults are something you agreed to rather t
 inherited — and again after an upgrade adds a setting you have never been shown.
 
 If you already know what you want, `devp config recommended` is the one-command version:
-it turns on the eight adapters and build trees that are off by default because they are
+it turns on the nine adapters and build trees that are off by default because they are
 not universally wanted, and leaves `allow_manifest_rewrite` — the one recommendation
 that edits files Git tracks — named, explained and off unless you add
 `--with-cautious`. `devp config show` lists whatever you have not taken yet.
@@ -830,7 +835,7 @@ rather than downloading. That is the whole reason each one is a switch.
 
 | Key | Default | Meaning |
 | :--- | :---: | :--- |
-| `enable_cargo` … `enable_cmake_build` | `false` | Turn on an opt-in build-tool adapter; `build_idle_days` (`45`) gates all eight |
+| `enable_cargo` … `enable_dotnet_build` | `false` | Turn on an opt-in build-tool adapter; `build_idle_days` (`45`) gates all nine |
 
 **Shared download caches** — one key, because the cap only ever marks.
 
@@ -978,6 +983,11 @@ non-blocking `post-commit`, `post-checkout` and `post-merge` Git hooks that regi
 repositories as you visit them. Both are reinstated after an upgrade if anything went
 missing.
 
+None of it arrives unasked. A machine that has never agreed opens the settings
+walkthrough on its first attended run, before anything is installed: finishing the
+walkthrough is the yes, quitting it is a durable no, and `devp setup` changes the
+answer whenever you like.
+
 ```bash
 devp setup --status              # what is installed, what is not, and why
 devp config set auto_setup false # stop the unattended pass entirely

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dev-prune",
-  "version": "1.17.0",
+  "version": "1.18.0",
   "description": "Universal, lockfile-safe workspace pruner. Reclaims disk space from idle Git repositories by deleting only dependency and build directories a lockfile can rebuild.",
   "bin": {
     "dev-prune": "./bin/dev-prune.js",
@@ -12,13 +12,13 @@
     "LICENSE.md"
   ],
   "optionalDependencies": {
-    "dev-prune-darwin-arm64": "1.17.0",
-    "dev-prune-darwin-x64": "1.17.0",
-    "dev-prune-linux-arm64": "1.17.0",
-    "dev-prune-linux-x64": "1.17.0",
-    "dev-prune-windows-arm64": "1.17.0",
-    "dev-prune-windows-x64": "1.17.0",
-    "dev-prune-windows-x86": "1.17.0"
+    "dev-prune-darwin-arm64": "1.18.0",
+    "dev-prune-darwin-x64": "1.18.0",
+    "dev-prune-linux-arm64": "1.18.0",
+    "dev-prune-linux-x64": "1.18.0",
+    "dev-prune-windows-arm64": "1.18.0",
+    "dev-prune-windows-x64": "1.18.0",
+    "dev-prune-windows-x86": "1.18.0"
   },
   "engines": {
     "node": ">=20"