getprismo 0.1.17 → 0.1.19

package/README.md

@@ -52,6 +52,7 @@ agent-native        npx getprismo mcp
 - repeated file reads (same file loaded 100+ times in one session)
 - repeated commands (agent running the same command in a loop)
 - high context risk sessions that should have been split at task boundaries
+- session-derived ignore candidates from actual Claude/Codex logs (`logs/debug.log`, `dist/app.js`, `package-lock.json`, source-stream dumps)
 
 ---
 
@@ -96,6 +97,10 @@ Next:
 
 doctor went from 79 to 91 in one run. the repo now has proper ignore files, compact context packs, and a clear starting point for the next coding session.
 
+`scan --usage` and `doctor` can also turn real session leaks into concrete ignore suggestions. if local Claude/Codex logs show `logs/debug.log`, `dist/app.js`, `package-lock.json`, source-stream dumps, or other noisy files repeatedly entering context, prismodev adds conservative `.claudeignore` / `.cursorignore` candidate rules instead of only reporting the problem.
+
+when you want PrismoDev to apply those ignore suggestions directly, use `npx getprismo doctor --apply-suggestions`. it appends only missing rules, writes `.claudeignore.prismo-backup` / `.cursorignore.prismo-backup` first, and still does not touch `CLAUDE.md`, `AGENTS.md`, `.gitignore`, or source code.
+
 ---
 
 ## real output: watch
@@ -559,6 +564,7 @@ npx getprismo doctor                     # full run
 npx getprismo firewall auth-bug          # generate scoped context firewall
 npx getprismo doctor --dry-run           # preview without writing files
 npx getprismo doctor --apply-ignores-only # only create ignore files
+npx getprismo doctor --apply-suggestions # append missing ignore suggestions with backups
 npx getprismo doctor --no-context-packs  # skip .prismo/ generation
 npx getprismo doctor frontend            # scope to frontend
 npx getprismo doctor --json              # machine-readable output

package/docs/live-demo.md

@@ -6,12 +6,15 @@ Use this flow to show the full product loop on a real repo.
 
 ```bash
 npx getprismo doctor
+npx getprismo doctor --apply-suggestions
 ```
 
 Shows:
 
 - before/after repo score
 - missing `.claudeignore` / `.cursorignore`
+- ignore suggestions derived from actual local Claude/Codex session leaks
+- optional safe append mode for missing ignore rules with backups
 - generated artifacts exposed to AI context
 - compact `.prismo/` context packs
 - recommended next starting context

package/lib/prismo-dev/doctor.js

@@ -4,6 +4,7 @@ module.exports = function createDoctor(deps) {
     path,
     NPX_COMMAND,
     color,
+    appendIgnoreSuggestions,
     applyFixes,
     calculateReductionPercent,
     chooseRecommendedScope,
@@ -169,8 +170,11 @@ function runDoctor(rootDir = process.cwd(), options = {}) {
 
   const fixDone = printStep(options.dryRun ? "Planning safe AI-context fixes" : "Applying safe AI-context fixes", options.json);
   const applyIgnoresOnly = Boolean(options.applyIgnoresOnly);
+  const applySuggestions = Boolean(options.applySuggestions);
   const noContextPacks = Boolean(options.noContextPacks || applyIgnoresOnly);
-  const fixActions = applyFixes(before, { dryRun: options.dryRun, ignoresOnly: applyIgnoresOnly });
+  const fixActions = applySuggestions
+    ? appendIgnoreSuggestions(before, { dryRun: options.dryRun })
+    : applyFixes(before, { dryRun: options.dryRun, ignoresOnly: applyIgnoresOnly });
   fixDone();
 
   const initialContext = createOptimizeContext(root);
@@ -220,6 +224,7 @@ function runDoctor(rootDir = process.cwd(), options = {}) {
     ])),
     dryRun: Boolean(options.dryRun),
     applyIgnoresOnly,
+    applySuggestions,
     noContextPacks,
     generatedAt: new Date().toISOString(),
   };
@@ -355,6 +360,7 @@ function toDoctorJsonPayload(result) {
     nextCommands: result.nextCommands,
     dryRun: result.dryRun,
     applyIgnoresOnly: result.applyIgnoresOnly,
+    applySuggestions: result.applySuggestions,
     noContextPacks: result.noContextPacks,
     generatedAt: result.generatedAt,
   };
@@ -379,7 +385,7 @@ function renderDoctorTerminal(result) {
     lines.push(`Payoff: ${scoreDelta > 0 ? `repo is ${scoreDelta} points cleaner for AI coding sessions` : "safe fixes applied; remaining risk needs manual cleanup"}`);
   }
   lines.push("");
-  lines.push(result.dryRun ? "Would Fix:" : "Fixed:");
+  lines.push(result.applySuggestions ? (result.dryRun ? "Would Apply Suggestions:" : "Applied Suggestions:") : (result.dryRun ? "Would Fix:" : "Fixed:"));
   if (result.fixActions.length) result.fixActions.forEach((action) => lines.push(`- ${action}`));
   else lines.push("- No safe fix files needed");
   if (result.noContextPacks) {
@@ -410,7 +416,9 @@ function renderDoctorTerminal(result) {
   lines.push(`${NPX_COMMAND} watch --auto`);
   lines.push("Tell your agent: Follow .prismo/live-guardrails.md during this session.");
   lines.push("");
-  lines.push("Doctor only creates safe recommendation/context files. It does not overwrite CLAUDE.md, AGENTS.md, .gitignore, or source code.");
+  lines.push(result.applySuggestions
+    ? "Doctor only appends missing ignore rules and writes backups. It does not overwrite CLAUDE.md, AGENTS.md, .gitignore, or source code."
+    : "Doctor only creates safe recommendation/context files. It does not overwrite CLAUDE.md, AGENTS.md, .gitignore, or source code.");
   return lines.join("\n");
 }
 

package/lib/prismo-dev/fixes.js

@@ -49,6 +49,70 @@ function renderAgentsRecommendations(result) {
   ].join("\n");
 }
 
+function readIgnoreLines(filePath) {
+  if (!fs.existsSync(filePath)) return [];
+  return fs.readFileSync(filePath, "utf8").split(/\r?\n/);
+}
+
+function normalizeRule(line) {
+  return String(line || "").trim();
+}
+
+function stableBackup(filePath) {
+  if (!fs.existsSync(filePath)) return null;
+  const backupPath = `${filePath}.prismo-backup`;
+  if (fs.existsSync(backupPath)) backupIfExists(backupPath);
+  fs.copyFileSync(filePath, backupPath);
+  return backupPath;
+}
+
+function appendIgnoreSuggestions(result, options = {}) {
+  const actions = [];
+  const files = [
+    {
+      name: ".claudeignore",
+      path: path.join(result.root, ".claudeignore"),
+      suggestions: result.hasClaudeIgnore ? result.missingClaudeIgnoreSuggestions || [] : result.recommendedClaudeIgnore || [],
+    },
+    {
+      name: ".cursorignore",
+      path: path.join(result.root, ".cursorignore"),
+      suggestions: result.hasCursorIgnore ? result.missingCursorIgnoreSuggestions || [] : result.recommendedCursorIgnore || [],
+    },
+  ];
+
+  for (const file of files) {
+    const existingLines = readIgnoreLines(file.path);
+    const existingRules = new Set(existingLines.map(normalizeRule).filter((line) => line && !line.startsWith("#")));
+    const missing = Array.from(new Set((file.suggestions || []).map(normalizeRule).filter(Boolean)))
+      .filter((rule) => !existingRules.has(rule));
+
+    if (!missing.length) {
+      actions.push(`Skipped ${file.name}; existing rules already cover Prismo suggestions`);
+      continue;
+    }
+
+    if (options.dryRun) {
+      actions.push(`Would update ${file.name}: +${missing.join(", +")}`);
+      continue;
+    }
+
+    const existed = fs.existsSync(file.path);
+    const backupPath = stableBackup(file.path);
+    const nextLines = existingLines.slice();
+    while (nextLines.length && !nextLines[nextLines.length - 1].trim()) nextLines.pop();
+    if (nextLines.length) nextLines.push("");
+    nextLines.push("# Added by PrismoDev");
+    missing.forEach((rule) => nextLines.push(rule));
+    fs.writeFileSync(file.path, `${nextLines.join("\n")}\n`, "utf8");
+
+    actions.push(`${existed ? "Updated" : "Created"} ${file.name}: +${missing.join(", +")}`);
+    if (backupPath) actions.push(`Backup written: ${path.basename(backupPath)}`);
+  }
+
+  return actions;
+}
+
 function applyFixes(result, options = {}) {
   const actions = [];
   const dryRunPrefix = options.dryRun ? "Would create" : "Created";
@@ -110,6 +174,7 @@ function applyFixes(result, options = {}) {
 }
 
   return {
+    appendIgnoreSuggestions,
     applyFixes,
     renderAgentsRecommendations,
     renderClaudeTemplate,

package/lib/prismo-dev/report.js

@@ -277,6 +277,16 @@ function renderMarkdownReport(result) {
     });
     lines.push("");
   }
+  if (result.sessionIgnoreSuggestions && result.sessionIgnoreSuggestions.length) {
+    lines.push("## Session-Derived Ignore Suggestions");
+    lines.push("");
+    lines.push("These rules came from local Claude/Codex session logs where noisy paths already entered context.");
+    lines.push("");
+    result.sessionIgnoreSuggestions.slice(0, 20).forEach((item) => {
+      lines.push(`- \`${item.pattern}\` - ${item.reason} (${item.count} mention${item.count === 1 ? "" : "s"}${item.examples.length ? `; e.g. ${item.examples[0]}` : ""})`);
+    });
+    lines.push("");
+  }
   lines.push("## Issues");
   lines.push("");
   if (!result.issues.length) {

package/lib/prismo-dev/scan.js

@@ -97,6 +97,128 @@ function missingIgnoreSuggestions(recommended, existingPatterns) {
   return recommended.filter((pattern) => !ignoreSuggestionCovered(pattern, existingPatterns));
 }
 
+const SESSION_NOISE_DIRS = new Set([
+  ".next",
+  ".nuxt",
+  ".prismo",
+  ".pytest_cache",
+  ".turbo",
+  "__pycache__",
+  "build",
+  "calendar-dumps",
+  "coverage",
+  "dist",
+  "event-dumps",
+  "events",
+  "exports",
+  "htmlcov",
+  "inbox-dumps",
+  "logs",
+  "models",
+  "node_modules",
+  "out",
+  "playwright-report",
+  "session-dumps",
+  "source-streams",
+  "state-backups",
+  "test-results",
+  "tmp",
+  "temp",
+]);
+
+const SESSION_NOISE_FILE_NAMES = new Set([
+  "package-lock.json",
+  "pnpm-lock.yaml",
+  "yarn.lock",
+  "bun.lockb",
+  "coverage-final.json",
+  "lcov.info",
+]);
+
+const SESSION_NOISE_EXTENSIONS = new Set([
+  ".db",
+  ".jsonl",
+  ".lock",
+  ".log",
+  ".sqlite",
+  ".sqlite3",
+]);
+
+function cleanSessionPath(value) {
+  const text = String(value || "").trim().replace(/\\/g, "/");
+  if (!text || /^https?:\/\//.test(text)) return null;
+  const withoutQuotes = text.replace(/^["'`]+|["'`.,:;)\]]+$/g, "");
+  if (!withoutQuotes || withoutQuotes.includes("\n")) return null;
+  const markerIndex = withoutQuotes.indexOf("/Users/");
+  if (markerIndex > 0) return withoutQuotes.slice(markerIndex);
+  return withoutQuotes;
+}
+
+function sessionIgnorePatternForPath(value, root) {
+  const cleaned = cleanSessionPath(value);
+  if (!cleaned) return null;
+  const rootNormalized = normalizeRel(root);
+  let rel = cleaned;
+  if (path.isAbsolute(cleaned)) {
+    const normalized = normalizeRel(cleaned);
+    if (!normalized.startsWith(`${rootNormalized}/`)) return null;
+    rel = normalizeRel(path.relative(root, cleaned));
+  }
+  rel = normalizeRel(rel).replace(/^\.\//, "");
+  if (!rel || rel === "." || rel.startsWith("../") || rel.includes("..")) return null;
+
+  const segments = rel.split("/").filter(Boolean);
+  if (!segments.length) return null;
+  for (let index = 0; index < segments.length; index += 1) {
+    const segment = segments[index];
+    if (SESSION_NOISE_DIRS.has(segment)) {
+      return `${segments.slice(0, index + 1).join("/")}/`;
+    }
+  }
+
+  const fileName = segments[segments.length - 1];
+  const lowerName = fileName.toLowerCase();
+  const ext = path.extname(lowerName);
+  if (SESSION_NOISE_FILE_NAMES.has(lowerName)) return fileName;
+  if (SESSION_NOISE_EXTENSIONS.has(ext)) return rel;
+  if (/_state\.json$/i.test(fileName)) return "*_state.json";
+  if (/_tokens\.json$/i.test(fileName)) return "*_tokens.json";
+  if (/_export\.json$/i.test(fileName)) return "*_export.json";
+  if (/secret|credential|token/i.test(fileName) && /\.json$/i.test(fileName)) return rel;
+  return null;
+}
+
+function buildSessionIgnoreSuggestions(realUsage, root) {
+  if (!realUsage || !Array.isArray(realUsage.sessions)) return [];
+  const byPattern = new Map();
+  const add = (pattern, item, source, reason) => {
+    if (!pattern) return;
+    const existing = byPattern.get(pattern) || {
+      pattern,
+      source,
+      reason,
+      count: 0,
+      examples: [],
+    };
+    existing.count += Number(item?.count || 1);
+    const example = item?.value || item?.path || pattern;
+    if (example && !existing.examples.includes(example) && existing.examples.length < 3) existing.examples.push(example);
+    byPattern.set(pattern, existing);
+  };
+
+  for (const session of realUsage.sessions) {
+    for (const item of session.generatedArtifacts || []) {
+      add(sessionIgnorePatternForPath(item.value, root), item, session.tool || "session", "Generated artifact entered local session context.");
+    }
+    for (const item of session.repeatedPathMentions || []) {
+      add(sessionIgnorePatternForPath(item.value, root), item, session.tool || "session", "Noisy path appeared repeatedly in local session context.");
+    }
+  }
+  return Array.from(byPattern.values())
+    .sort((a, b) => b.count - a.count || a.pattern.localeCompare(b.pattern))
+    .slice(0, 25);
+}
+
 function getFileKind(filePath) {
   const ext = path.extname(filePath).toLowerCase();
   const name = path.basename(filePath).toLowerCase();
@@ -775,6 +897,7 @@ function toJsonPayload(result) {
     optimizationStack: result.optimizationStack,
     toolOutputRisk: result.toolOutputRisk,
     operationalNoise: result.operationalNoise,
+    sessionIgnoreSuggestions: result.sessionIgnoreSuggestions || [],
     proxyTrackingReadiness: result.proxyTrackingReadiness,
     suggestedClaudeIgnore: result.recommendedClaudeIgnore,
     suggestedCursorIgnore: result.recommendedCursorIgnore,
@@ -1061,7 +1184,19 @@ function scanRepo(rootDir = process.cwd(), options = {}) {
   }
 
   const realUsage = options.includeUsage ? getUsageSummary({ tool: options.usageTool || "all", cwd: root, limit: options.usageLimit || 5 }) : null;
+  const sessionIgnoreSuggestions = buildSessionIgnoreSuggestions(realUsage, root);
   addRealUsageIssues(issues, realUsage);
+  if (sessionIgnoreSuggestions.length) {
+    addIssue(
+      issues,
+      "medium",
+      "ignore_file",
+      `${sessionIgnoreSuggestions.length} session-derived ignore suggestion${sessionIgnoreSuggestions.length === 1 ? "" : "s"}`,
+      sessionIgnoreSuggestions.slice(0, 5).map((item) => `${item.pattern} (${item.count}x)`).join(", "),
+      "Review the generated .claudeignore/.cursorignore suggestions from actual local session context.",
+      "Likely avoidable token exposure: these paths already appeared in local coding-agent context."
+    );
+  }
   const optimizationStack = detectOptimizationStack(root, claudeConfig, codexConfig);
   const agentReadiness = detectAgentReadiness(root, claudeConfig, codexConfig, realUsage);
   const toolOutputRisk = detectToolOutputRisk({ exposedLargeFiles, exposedHighRiskDirs, highRiskDirs });
@@ -1145,11 +1280,13 @@ function scanRepo(rootDir = process.cwd(), options = {}) {
     .filter((file) => file.size >= 1024 * 1024 || ["log", "json", "minified", "lock/generated"].includes(file.kind))
     .map((file) => file.path);
   const operationalNoiseSuggestions = operationalNoise.files.map((file) => file.path);
+  const sessionIgnorePatterns = sessionIgnoreSuggestions.map((item) => item.pattern);
   const recommendedClaudeIgnore = Array.from(new Set([
     ...DEFAULT_CLAUDEIGNORE,
     ...gitignorePatterns.filter((line) => !line.startsWith("!")),
     ...largeFileSuggestions,
     ...operationalNoiseSuggestions,
+    ...sessionIgnorePatterns,
   ]));
   const recommendedCursorIgnore = Array.from(new Set([
     ...recommendedClaudeIgnore,
@@ -1203,6 +1340,7 @@ function scanRepo(rootDir = process.cwd(), options = {}) {
     recommendedCursorIgnore,
     missingClaudeIgnoreSuggestions,
     missingCursorIgnoreSuggestions,
+    sessionIgnoreSuggestions,
     topTokenLeaks: getTopTokenLeaks(issues),
     generatedAt: new Date().toISOString(),
   };

package/lib/prismo-dev/usage-watch.js

@@ -186,7 +186,7 @@ function looksLikeUsefulPath(relPath) {
 function extractMentionedPaths(text, cwd = "") {
   const found = new Set();
   const source = String(text || "");
-  const pathPattern = /(?:^|[\s"'`])((?:\.{0,2}\/)?(?:[\w .@-]+\/)+[\w .@+-]+\.[A-Za-z0-9]{1,12})/g;
+  const pathPattern = /(?:^|[\s"'`])((?:\.{0,2}\/)?(?:[\w.@-]+\/)+[\w.@+-]+\.[A-Za-z0-9]{1,12})/g;
   const filePattern = /(?:^|[\s"'`])((?:package-lock\.json|pnpm-lock\.yaml|yarn\.lock|coverage-final\.json|tsconfig\.json|pyproject\.toml|requirements\.txt|README\.md|CLAUDE\.md|AGENTS\.md))/g;
   for (const pattern of [pathPattern, filePattern]) {
     let match;

package/lib/prismo-dev-scan.js

@@ -209,7 +209,7 @@ const {
   getNextCommands,
 });
 
-const { applyFixes } = require("./prismo-dev/fixes")({
+const { appendIgnoreSuggestions, applyFixes } = require("./prismo-dev/fixes")({
   fs,
   path,
   backupIfExists,
@@ -239,6 +239,7 @@ const {
   NPX_COMMAND,
   color,
   applyFixes,
+  appendIgnoreSuggestions,
   calculateReductionPercent,
   chooseRecommendedScope,
   createOptimizeContext,
@@ -296,7 +297,7 @@ Usage:
   prismo --version
   prismo dev [path]
   prismo init [--json] [--dry-run] [path]
-  prismo doctor [--json] [--dry-run] [--apply-ignores-only] [--no-context-packs] [--limit N] [path]
+  prismo doctor [--json] [--dry-run] [--apply-ignores-only] [--apply-suggestions] [--no-context-packs] [--limit N] [path]
   prismo firewall [task] [--json] [--dry-run] [path]
   prismo shield [--json] [path] -- <command ...>
   prismo shield last [--json] [--limit N] [path]
@@ -339,6 +340,7 @@ Options:
   --interval N Refresh interval in seconds for watch mode.
   --dry-run  Preview doctor/fix actions without writing files.
   --apply-ignores-only Only create/suggest AI ignore files in doctor mode.
+  --apply-suggestions Append missing recommended ignore rules with backups.
   --no-context-packs Skip .prismo context-pack generation in doctor mode.
   --report   Write .prismo/watch-report.md in watch mode.
   --rescue   Print a paste-ready live-session rescue prompt in watch mode.
@@ -481,7 +483,7 @@ Output:
     doctor: `PrismoDev Doctor
 
 Usage:
-  prismo doctor [--json] [--dry-run] [--apply-ignores-only] [--no-context-packs] [--limit N] [path]
+  prismo doctor [--json] [--dry-run] [--apply-ignores-only] [--apply-suggestions] [--no-context-packs] [--limit N] [path]
 
 Flow:
   1. Scan repo and local usage.
@@ -490,7 +492,9 @@ Flow:
   4. Re-scan and show before/after score.
 
 Notes:
-  Doctor creates safe recommendation/context files only. It does not overwrite CLAUDE.md, AGENTS.md, .gitignore, or source code.`,
+  Doctor creates safe recommendation/context files by default.
+  --apply-suggestions appends missing .claudeignore/.cursorignore rules with backups.
+  Doctor does not overwrite CLAUDE.md, AGENTS.md, .gitignore, or source code.`,
     firewall: `Prismo Context Firewall
 
 Usage:
@@ -656,6 +660,7 @@ async function runCli(argv) {
       scope,
       dryRun: rest.includes("--dry-run"),
       applyIgnoresOnly: rest.includes("--apply-ignores-only"),
+      applySuggestions: rest.includes("--apply-suggestions"),
       noContextPacks: rest.includes("--no-context-packs"),
     });
     if (json) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "getprismo",
-  "version": "0.1.17",
+  "version": "0.1.19",
   "description": "Local AI coding workflow scanner for Codex, Claude Code, Cursor, and token-waste diagnostics.",
   "license": "MIT",
   "homepage": "https://github.com/shanirsh/prismodev#readme",