pruneguard 0.3.0 → 0.3.1

package/README.md

@@ -60,9 +60,6 @@ Commands:
   debug entrypoints           List detected entrypoints
   debug runtime               Print runtime diagnostics
   daemon start|stop|status    Manage the background daemon
-  migrate knip                Convert knip config to pruneguard
-  migrate depcruise           Convert dependency-cruiser config to pruneguard
-
 Options:
   -c, --config <FILE>          Config file path [default: pruneguard.json]
       --format <FORMAT>        Output format: text, json, sarif, dot
@@ -127,8 +124,6 @@ import {
   loadConfig,
   schemaPath,
   scanDot,
-  migrateKnip,
-  migrateDepcruise,
 } from "pruneguard";
 ```
 
@@ -204,8 +199,6 @@ const config = await loadConfig();
 const schema = schemaPath();
 const dot = await scanDot();
 const rules = await suggestRules();
-const knip = await migrateKnip();
-const dc = await migrateDepcruise();
 ```
 
 ### Error handling
@@ -374,17 +367,6 @@ jobs:
 
 ---
 
-## Migrating from other tools
-
-```sh
-pruneguard migrate knip           # reads knip.json or package.json#knip
-pruneguard migrate depcruise      # reads .dependency-cruiser.* files
-```
-
-Both commands emit an equivalent `pruneguard.json` with migration notes.
-
----
-
 ## Framework detection
 
 | Framework | Auto-detected via | Entrypoints added |

package/configuration_schema.json

@@ -259,6 +259,46 @@
     "FrameworksConfig": {
       "type": "object",
       "properties": {
+        "angular": {
+          "anyOf": [
+            {
+              "$ref": "#/definitions/FrameworkToggle"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "astro": {
+          "anyOf": [
+            {
+              "$ref": "#/definitions/FrameworkToggle"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "cypress": {
+          "anyOf": [
+            {
+              "$ref": "#/definitions/FrameworkToggle"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "docusaurus": {
+          "anyOf": [
+            {
+              "$ref": "#/definitions/FrameworkToggle"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
         "jest": {
           "anyOf": [
             {
@@ -279,6 +319,46 @@
             }
           ]
         },
+        "nuxt": {
+          "anyOf": [
+            {
+              "$ref": "#/definitions/FrameworkToggle"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "nx": {
+          "anyOf": [
+            {
+              "$ref": "#/definitions/FrameworkToggle"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "playwright": {
+          "anyOf": [
+            {
+              "$ref": "#/definitions/FrameworkToggle"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "remix": {
+          "anyOf": [
+            {
+              "$ref": "#/definitions/FrameworkToggle"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
         "storybook": {
           "anyOf": [
             {
@@ -289,6 +369,26 @@
             }
           ]
         },
+        "sveltekit": {
+          "anyOf": [
+            {
+              "$ref": "#/definitions/FrameworkToggle"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "turborepo": {
+          "anyOf": [
+            {
+              "$ref": "#/definitions/FrameworkToggle"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
         "vite": {
           "anyOf": [
             {
@@ -299,6 +399,16 @@
             }
           ]
         },
+        "vitepress": {
+          "anyOf": [
+            {
+              "$ref": "#/definitions/FrameworkToggle"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
         "vitest": {
           "anyOf": [
             {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pruneguard",
-  "version": "0.3.0",
+  "version": "0.3.1",
   "description": "Repo truth engine for JS/TS monorepos",
   "keywords": [
     "javascript",
@@ -43,14 +43,14 @@
     }
   },
   "optionalDependencies": {
-    "@pruneguard/cli-darwin-arm64": "0.3.0",
-    "@pruneguard/cli-darwin-x64": "0.3.0",
-    "@pruneguard/cli-linux-arm64-gnu": "0.3.0",
-    "@pruneguard/cli-linux-arm64-musl": "0.3.0",
-    "@pruneguard/cli-linux-x64-gnu": "0.3.0",
-    "@pruneguard/cli-linux-x64-musl": "0.3.0",
-    "@pruneguard/cli-win32-arm64-msvc": "0.3.0",
-    "@pruneguard/cli-win32-x64-msvc": "0.3.0"
+    "@pruneguard/cli-darwin-arm64": "0.3.1",
+    "@pruneguard/cli-darwin-x64": "0.3.1",
+    "@pruneguard/cli-linux-arm64-gnu": "0.3.1",
+    "@pruneguard/cli-linux-arm64-musl": "0.3.1",
+    "@pruneguard/cli-linux-x64-gnu": "0.3.1",
+    "@pruneguard/cli-linux-x64-musl": "0.3.1",
+    "@pruneguard/cli-win32-arm64-msvc": "0.3.1",
+    "@pruneguard/cli-win32-x64-msvc": "0.3.1"
   },
   "engines": {
     "node": ">=18.0.0"

package/report_schema.json

@@ -108,6 +108,20 @@
         "source"
       ],
       "properties": {
+        "framework": {
+          "description": "Framework that contributed this entrypoint, if any.",
+          "type": [
+            "string",
+            "null"
+          ]
+        },
+        "heuristic": {
+          "description": "Whether this entrypoint was detected via heuristics.",
+          "type": [
+            "boolean",
+            "null"
+          ]
+        },
         "kind": {
           "type": "string"
         },
@@ -117,6 +131,13 @@
         "profile": {
           "type": "string"
         },
+        "reason": {
+          "description": "Reason this entrypoint was detected.",
+          "type": [
+            "string",
+            "null"
+          ]
+        },
         "source": {
           "type": "string"
         },
@@ -275,6 +296,16 @@
             "$ref": "#/definitions/Evidence"
           }
         },
+        "frameworkContext": {
+          "description": "Framework context relevant to this finding.",
+          "type": [
+            "array",
+            "null"
+          ],
+          "items": {
+            "type": "string"
+          }
+        },
         "id": {
           "description": "Stable deterministic ID for this finding.",
           "type": "string"
@@ -327,6 +358,16 @@
             "null"
           ]
         },
+        "trustNotes": {
+          "description": "Trust-related notes for this finding.",
+          "type": [
+            "array",
+            "null"
+          ],
+          "items": {
+            "type": "string"
+          }
+        },
         "workspace": {
           "description": "Workspace this finding belongs to, if applicable.",
           "type": [
@@ -365,6 +406,32 @@
         "info"
       ]
     },
+    "FrameworkConfidenceCounts": {
+      "description": "Breakdown of framework detection confidence levels.",
+      "type": "object",
+      "required": [
+        "exact",
+        "heuristic",
+        "unsupported"
+      ],
+      "properties": {
+        "exact": {
+          "type": "integer",
+          "format": "uint",
+          "minimum": 0.0
+        },
+        "heuristic": {
+          "type": "integer",
+          "format": "uint",
+          "minimum": 0.0
+        },
+        "unsupported": {
+          "type": "integer",
+          "format": "uint",
+          "minimum": 0.0
+        }
+      }
+    },
     "Inventories": {
       "description": "Inventories of discovered entities.",
       "type": "object",
@@ -521,6 +588,13 @@
           "format": "uint",
           "minimum": 0.0
         },
+        "compatibilityWarnings": {
+          "description": "Compatibility warnings from framework detection.",
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        },
         "confidenceCounts": {
           "$ref": "#/definitions/ConfidenceCounts"
         },
@@ -578,6 +652,26 @@
           "format": "uint",
           "minimum": 0.0
         },
+        "frameworkConfidenceCounts": {
+          "description": "Framework confidence breakdown.",
+          "default": {
+            "exact": 0,
+            "heuristic": 0,
+            "unsupported": 0
+          },
+          "allOf": [
+            {
+              "$ref": "#/definitions/FrameworkConfidenceCounts"
+            }
+          ]
+        },
+        "frameworksDetected": {
+          "description": "Frameworks detected during analysis.",
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        },
         "fullScopeRequired": {
           "type": "boolean"
         },
@@ -591,6 +685,20 @@
           "format": "uint",
           "minimum": 0.0
         },
+        "heuristicEntrypoints": {
+          "description": "Number of entrypoints added by heuristic detection.",
+          "default": 0,
+          "type": "integer",
+          "format": "uint",
+          "minimum": 0.0
+        },
+        "heuristicFrameworks": {
+          "description": "Frameworks detected via heuristics (lower confidence).",
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        },
         "indexAgeMs": {
           "description": "Age of the reused graph index in milliseconds.",
           "type": [
@@ -650,6 +758,11 @@
           "format": "uint",
           "minimum": 0.0
         },
+        "strictTrustApplied": {
+          "description": "Whether strict trust mode was applied.",
+          "default": false,
+          "type": "boolean"
+        },
         "suppressedFindings": {
           "type": "integer",
           "format": "uint",
@@ -764,6 +877,13 @@
           "type": "integer",
           "format": "uint",
           "minimum": 0.0
+        },
+        "workspaceExportsMiss": {
+          "description": "Subpath not declared in a workspace package's `exports` map.",
+          "default": 0,
+          "type": "integer",
+          "format": "uint",
+          "minimum": 0.0
         }
       }
     },

package/review_report_schema.json

@@ -39,6 +39,33 @@
         "type": "string"
       }
     },
+    "compatibilityWarnings": {
+      "description": "Compatibility warnings from framework detection.",
+      "type": "array",
+      "items": {
+        "type": "string"
+      }
+    },
+    "executionMode": {
+      "description": "Execution mode used for this review.",
+      "anyOf": [
+        {
+          "$ref": "#/definitions/ExecutionMode"
+        },
+        {
+          "type": "null"
+        }
+      ]
+    },
+    "latencyMs": {
+      "description": "Wall-clock latency in milliseconds.",
+      "type": [
+        "integer",
+        "null"
+      ],
+      "format": "uint64",
+      "minimum": 0.0
+    },
     "newFindings": {
       "description": "All new findings introduced on this branch.",
       "type": "array",
@@ -46,6 +73,13 @@
         "$ref": "#/definitions/Finding"
       }
     },
+    "proposedActions": {
+      "description": "Proposed remediation actions for blocking findings.",
+      "type": "array",
+      "items": {
+        "$ref": "#/definitions/RemediationAction"
+      }
+    },
     "recommendations": {
       "description": "Concise recommendations for the branch author.",
       "type": "array",
@@ -53,6 +87,18 @@
         "type": "string"
       }
     },
+    "recommendedActions": {
+      "description": "Machine-readable recommended next actions for agents.",
+      "type": "array",
+      "items": {
+        "$ref": "#/definitions/RecommendedAction"
+      }
+    },
+    "strictTrustApplied": {
+      "description": "Whether strict trust mode was applied.",
+      "default": false,
+      "type": "boolean"
+    },
     "trust": {
       "description": "Trust summary for this review.",
       "allOf": [
@@ -122,6 +168,14 @@
         }
       }
     },
+    "ExecutionMode": {
+      "description": "Execution mode for daemon/oneshot distinction.",
+      "type": "string",
+      "enum": [
+        "oneshot",
+        "daemon"
+      ]
+    },
     "Finding": {
       "description": "A single finding from analysis.",
       "type": "object",
@@ -135,6 +189,13 @@
         "subject"
       ],
       "properties": {
+        "actionKinds": {
+          "description": "All applicable remediation action kinds.",
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/RemediationActionKind"
+          }
+        },
         "category": {
           "description": "Category of the finding.",
           "allOf": [
@@ -162,6 +223,16 @@
             "$ref": "#/definitions/Evidence"
           }
         },
+        "frameworkContext": {
+          "description": "Framework context relevant to this finding.",
+          "type": [
+            "array",
+            "null"
+          ],
+          "items": {
+            "type": "string"
+          }
+        },
         "id": {
           "description": "Stable deterministic ID for this finding.",
           "type": "string"
@@ -177,6 +248,17 @@
             "null"
           ]
         },
+        "primaryActionKind": {
+          "description": "Primary remediation action kind for this finding.",
+          "anyOf": [
+            {
+              "$ref": "#/definitions/RemediationActionKind"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
         "ruleName": {
           "description": "Name of the rule that produced this finding, if any.",
           "type": [
@@ -203,6 +285,16 @@
             "null"
           ]
         },
+        "trustNotes": {
+          "description": "Trust-related notes for this finding.",
+          "type": [
+            "array",
+            "null"
+          ],
+          "items": {
+            "type": "string"
+          }
+        },
         "workspace": {
           "description": "Workspace this finding belongs to, if applicable.",
           "type": [
@@ -241,6 +333,240 @@
         "info"
       ]
     },
+    "RecommendedAction": {
+      "description": "A machine-readable recommended next action for an AI agent or CI system.",
+      "type": "object",
+      "required": [
+        "description",
+        "kind",
+        "priority"
+      ],
+      "properties": {
+        "command": {
+          "description": "The pruneguard command to run, if applicable.",
+          "type": [
+            "string",
+            "null"
+          ]
+        },
+        "description": {
+          "description": "Human-readable description of what to do.",
+          "type": "string"
+        },
+        "kind": {
+          "description": "Machine-readable action kind.",
+          "allOf": [
+            {
+              "$ref": "#/definitions/RecommendedActionKind"
+            }
+          ]
+        },
+        "priority": {
+          "description": "Priority rank (1 = most important).",
+          "type": "integer",
+          "format": "uint",
+          "minimum": 0.0
+        },
+        "targets": {
+          "description": "Targets this action applies to.",
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        }
+      }
+    },
+    "RecommendedActionKind": {
+      "description": "Kind of recommended next action.",
+      "oneOf": [
+        {
+          "description": "Run safe-delete on identified targets.",
+          "type": "string",
+          "enum": [
+            "run-safe-delete"
+          ]
+        },
+        {
+          "description": "Run fix-plan for specific findings.",
+          "type": "string",
+          "enum": [
+            "run-fix-plan"
+          ]
+        },
+        {
+          "description": "Resolve blocking findings before merge.",
+          "type": "string",
+          "enum": [
+            "resolve-blocking"
+          ]
+        },
+        {
+          "description": "Investigate unresolved specifier pressure.",
+          "type": "string",
+          "enum": [
+            "fix-resolver-config"
+          ]
+        },
+        {
+          "description": "Review advisory findings.",
+          "type": "string",
+          "enum": [
+            "review-advisory"
+          ]
+        },
+        {
+          "description": "Run a full-scope scan for higher confidence.",
+          "type": "string",
+          "enum": [
+            "run-full-scope"
+          ]
+        },
+        {
+          "description": "Branch is clean; no action required.",
+          "type": "string",
+          "enum": [
+            "none"
+          ]
+        }
+      ]
+    },
+    "RemediationAction": {
+      "description": "A remediation action describing how to fix one or more findings.",
+      "type": "object",
+      "required": [
+        "confidence",
+        "id",
+        "kind",
+        "risk",
+        "targets",
+        "why"
+      ],
+      "properties": {
+        "confidence": {
+          "description": "Confidence in this action's correctness.",
+          "allOf": [
+            {
+              "$ref": "#/definitions/FindingConfidence"
+            }
+          ]
+        },
+        "findingIds": {
+          "description": "IDs of findings this action addresses.",
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        },
+        "id": {
+          "description": "Unique identifier for this action.",
+          "type": "string"
+        },
+        "kind": {
+          "description": "The kind of remediation to perform.",
+          "allOf": [
+            {
+              "$ref": "#/definitions/RemediationActionKind"
+            }
+          ]
+        },
+        "phase": {
+          "description": "Phase this action belongs to (dead-code, architecture, governance).",
+          "type": [
+            "string",
+            "null"
+          ]
+        },
+        "preconditions": {
+          "description": "Conditions that must be true before this action can be applied.",
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        },
+        "rank": {
+          "description": "Ranking position within the plan (1-based, lower = do first).",
+          "type": [
+            "integer",
+            "null"
+          ],
+          "format": "uint",
+          "minimum": 0.0
+        },
+        "risk": {
+          "description": "Risk level of this action.",
+          "allOf": [
+            {
+              "$ref": "#/definitions/RiskLevel"
+            }
+          ]
+        },
+        "steps": {
+          "description": "Ordered steps to execute.",
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/RemediationStep"
+          }
+        },
+        "targets": {
+          "description": "Files or exports this action targets.",
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        },
+        "verification": {
+          "description": "Verification commands to run after applying the action.",
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        },
+        "why": {
+          "description": "Human-readable rationale explaining why this action is needed.",
+          "type": "string"
+        }
+      }
+    },
+    "RemediationActionKind": {
+      "description": "The kind of remediation action to take.",
+      "type": "string",
+      "enum": [
+        "delete-file",
+        "delete-export",
+        "remove-dependency",
+        "break-cycle",
+        "move-import",
+        "tighten-entrypoint",
+        "update-boundary-rule",
+        "assign-owner",
+        "split-package",
+        "acknowledge-baseline"
+      ]
+    },
+    "RemediationStep": {
+      "description": "A single step in a remediation action.",
+      "type": "object",
+      "required": [
+        "description"
+      ],
+      "properties": {
+        "action": {
+          "type": [
+            "string",
+            "null"
+          ]
+        },
+        "description": {
+          "type": "string"
+        },
+        "file": {
+          "type": [
+            "string",
+            "null"
+          ]
+        }
+      }
+    },
     "ReviewTrust": {
       "description": "Trust summary within a review report.",
       "type": "object",
@@ -263,6 +589,17 @@
             }
           ]
         },
+        "executionMode": {
+          "description": "Execution mode used for this analysis.",
+          "anyOf": [
+            {
+              "$ref": "#/definitions/ExecutionMode"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
         "fullScope": {
           "description": "Whether full-scope analysis was performed.",
           "type": "boolean"
@@ -273,6 +610,15 @@
           "format": "double"
         }
       }
+    },
+    "RiskLevel": {
+      "description": "Risk level for a remediation action or fix plan.",
+      "type": "string",
+      "enum": [
+        "low",
+        "medium",
+        "high"
+      ]
     }
   }
 }

package/safe_delete_report_schema.json

@@ -18,10 +18,10 @@
       }
     },
     "deletionOrder": {
-      "description": "Recommended deletion order (safe targets only).",
+      "description": "Recommended deletion order (safe targets only, dependency-aware).",
       "type": "array",
       "items": {
-        "type": "string"
+        "$ref": "#/definitions/DeletionOrderEntry"
       }
     },
     "evidence": {
@@ -54,6 +54,33 @@
     }
   },
   "definitions": {
+    "DeletionOrderEntry": {
+      "description": "An entry in the dependency-aware deletion order.",
+      "type": "object",
+      "required": [
+        "step",
+        "target"
+      ],
+      "properties": {
+        "reason": {
+          "description": "Why this target is at this position in the order.",
+          "type": [
+            "string",
+            "null"
+          ]
+        },
+        "step": {
+          "description": "Position in the deletion sequence (1-based).",
+          "type": "integer",
+          "format": "uint",
+          "minimum": 0.0
+        },
+        "target": {
+          "description": "The target to delete.",
+          "type": "string"
+        }
+      }
+    },
     "Evidence": {
       "description": "Evidence supporting a finding.",
       "type": "object",
@@ -100,9 +127,18 @@
       "description": "A candidate in a safe-delete evaluation.",
       "type": "object",
       "required": [
+        "classification",
         "target"
       ],
       "properties": {
+        "classification": {
+          "description": "Explicit classification for this candidate.",
+          "allOf": [
+            {
+              "$ref": "#/definitions/SafeDeleteClassification"
+            }
+          ]
+        },
         "confidence": {
           "description": "Confidence in the safety assessment.",
           "anyOf": [
@@ -114,6 +150,13 @@
             }
           ]
         },
+        "evidence": {
+          "description": "Per-candidate evidence supporting the classification.",
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/Evidence"
+          }
+        },
         "reasons": {
           "description": "Reasons for the classification.",
           "type": "array",
@@ -126,6 +169,32 @@
           "type": "string"
         }
       }
+    },
+    "SafeDeleteClassification": {
+      "description": "Explicit classification for a safe-delete candidate.",
+      "oneOf": [
+        {
+          "description": "Target is safe to delete without further review.",
+          "type": "string",
+          "enum": [
+            "safe"
+          ]
+        },
+        {
+          "description": "Target needs manual review before deletion.",
+          "type": "string",
+          "enum": [
+            "needs-review"
+          ]
+        },
+        {
+          "description": "Target must not be deleted.",
+          "type": "string",
+          "enum": [
+            "blocked"
+          ]
+        }
+      ]
     }
   }
 }