pruneguard 0.3.0 → 0.4.0

package/review_report_schema.json

@@ -39,6 +39,33 @@
         "type": "string"
       }
     },
+    "compatibilityWarnings": {
+      "description": "Compatibility warnings from framework detection.",
+      "type": "array",
+      "items": {
+        "type": "string"
+      }
+    },
+    "executionMode": {
+      "description": "Execution mode used for this review.",
+      "anyOf": [
+        {
+          "$ref": "#/definitions/ExecutionMode"
+        },
+        {
+          "type": "null"
+        }
+      ]
+    },
+    "latencyMs": {
+      "description": "Wall-clock latency in milliseconds.",
+      "type": [
+        "integer",
+        "null"
+      ],
+      "format": "uint64",
+      "minimum": 0.0
+    },
     "newFindings": {
       "description": "All new findings introduced on this branch.",
       "type": "array",
@@ -46,6 +73,13 @@
         "$ref": "#/definitions/Finding"
       }
     },
+    "proposedActions": {
+      "description": "Proposed remediation actions for blocking findings.",
+      "type": "array",
+      "items": {
+        "$ref": "#/definitions/RemediationAction"
+      }
+    },
     "recommendations": {
       "description": "Concise recommendations for the branch author.",
       "type": "array",
@@ -53,6 +87,18 @@
         "type": "string"
       }
     },
+    "recommendedActions": {
+      "description": "Machine-readable recommended next actions for agents.",
+      "type": "array",
+      "items": {
+        "$ref": "#/definitions/RecommendedAction"
+      }
+    },
+    "strictTrustApplied": {
+      "description": "Whether strict trust mode was applied.",
+      "default": false,
+      "type": "boolean"
+    },
     "trust": {
       "description": "Trust summary for this review.",
       "allOf": [
@@ -122,6 +168,14 @@
         }
       }
     },
+    "ExecutionMode": {
+      "description": "Execution mode for daemon/oneshot distinction.",
+      "type": "string",
+      "enum": [
+        "oneshot",
+        "daemon"
+      ]
+    },
     "Finding": {
       "description": "A single finding from analysis.",
       "type": "object",
@@ -135,6 +189,13 @@
         "subject"
       ],
       "properties": {
+        "actionKinds": {
+          "description": "All applicable remediation action kinds.",
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/RemediationActionKind"
+          }
+        },
         "category": {
           "description": "Category of the finding.",
           "allOf": [
@@ -162,6 +223,16 @@
             "$ref": "#/definitions/Evidence"
           }
         },
+        "frameworkContext": {
+          "description": "Framework context relevant to this finding.",
+          "type": [
+            "array",
+            "null"
+          ],
+          "items": {
+            "type": "string"
+          }
+        },
         "id": {
           "description": "Stable deterministic ID for this finding.",
           "type": "string"
@@ -177,6 +248,17 @@
             "null"
           ]
         },
+        "primaryActionKind": {
+          "description": "Primary remediation action kind for this finding.",
+          "anyOf": [
+            {
+              "$ref": "#/definitions/RemediationActionKind"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
         "ruleName": {
           "description": "Name of the rule that produced this finding, if any.",
           "type": [
@@ -203,6 +285,16 @@
             "null"
           ]
         },
+        "trustNotes": {
+          "description": "Trust-related notes for this finding.",
+          "type": [
+            "array",
+            "null"
+          ],
+          "items": {
+            "type": "string"
+          }
+        },
         "workspace": {
           "description": "Workspace this finding belongs to, if applicable.",
           "type": [
@@ -241,6 +333,240 @@
         "info"
       ]
     },
+    "RecommendedAction": {
+      "description": "A machine-readable recommended next action for an AI agent or CI system.",
+      "type": "object",
+      "required": [
+        "description",
+        "kind",
+        "priority"
+      ],
+      "properties": {
+        "command": {
+          "description": "The pruneguard command to run, if applicable.",
+          "type": [
+            "string",
+            "null"
+          ]
+        },
+        "description": {
+          "description": "Human-readable description of what to do.",
+          "type": "string"
+        },
+        "kind": {
+          "description": "Machine-readable action kind.",
+          "allOf": [
+            {
+              "$ref": "#/definitions/RecommendedActionKind"
+            }
+          ]
+        },
+        "priority": {
+          "description": "Priority rank (1 = most important).",
+          "type": "integer",
+          "format": "uint",
+          "minimum": 0.0
+        },
+        "targets": {
+          "description": "Targets this action applies to.",
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        }
+      }
+    },
+    "RecommendedActionKind": {
+      "description": "Kind of recommended next action.",
+      "oneOf": [
+        {
+          "description": "Run safe-delete on identified targets.",
+          "type": "string",
+          "enum": [
+            "run-safe-delete"
+          ]
+        },
+        {
+          "description": "Run fix-plan for specific findings.",
+          "type": "string",
+          "enum": [
+            "run-fix-plan"
+          ]
+        },
+        {
+          "description": "Resolve blocking findings before merge.",
+          "type": "string",
+          "enum": [
+            "resolve-blocking"
+          ]
+        },
+        {
+          "description": "Investigate unresolved specifier pressure.",
+          "type": "string",
+          "enum": [
+            "fix-resolver-config"
+          ]
+        },
+        {
+          "description": "Review advisory findings.",
+          "type": "string",
+          "enum": [
+            "review-advisory"
+          ]
+        },
+        {
+          "description": "Run a full-scope scan for higher confidence.",
+          "type": "string",
+          "enum": [
+            "run-full-scope"
+          ]
+        },
+        {
+          "description": "Branch is clean; no action required.",
+          "type": "string",
+          "enum": [
+            "none"
+          ]
+        }
+      ]
+    },
+    "RemediationAction": {
+      "description": "A remediation action describing how to fix one or more findings.",
+      "type": "object",
+      "required": [
+        "confidence",
+        "id",
+        "kind",
+        "risk",
+        "targets",
+        "why"
+      ],
+      "properties": {
+        "confidence": {
+          "description": "Confidence in this action's correctness.",
+          "allOf": [
+            {
+              "$ref": "#/definitions/FindingConfidence"
+            }
+          ]
+        },
+        "findingIds": {
+          "description": "IDs of findings this action addresses.",
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        },
+        "id": {
+          "description": "Unique identifier for this action.",
+          "type": "string"
+        },
+        "kind": {
+          "description": "The kind of remediation to perform.",
+          "allOf": [
+            {
+              "$ref": "#/definitions/RemediationActionKind"
+            }
+          ]
+        },
+        "phase": {
+          "description": "Phase this action belongs to (dead-code, architecture, governance).",
+          "type": [
+            "string",
+            "null"
+          ]
+        },
+        "preconditions": {
+          "description": "Conditions that must be true before this action can be applied.",
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        },
+        "rank": {
+          "description": "Ranking position within the plan (1-based, lower = do first).",
+          "type": [
+            "integer",
+            "null"
+          ],
+          "format": "uint",
+          "minimum": 0.0
+        },
+        "risk": {
+          "description": "Risk level of this action.",
+          "allOf": [
+            {
+              "$ref": "#/definitions/RiskLevel"
+            }
+          ]
+        },
+        "steps": {
+          "description": "Ordered steps to execute.",
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/RemediationStep"
+          }
+        },
+        "targets": {
+          "description": "Files or exports this action targets.",
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        },
+        "verification": {
+          "description": "Verification commands to run after applying the action.",
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        },
+        "why": {
+          "description": "Human-readable rationale explaining why this action is needed.",
+          "type": "string"
+        }
+      }
+    },
+    "RemediationActionKind": {
+      "description": "The kind of remediation action to take.",
+      "type": "string",
+      "enum": [
+        "delete-file",
+        "delete-export",
+        "remove-dependency",
+        "break-cycle",
+        "move-import",
+        "tighten-entrypoint",
+        "update-boundary-rule",
+        "assign-owner",
+        "split-package",
+        "acknowledge-baseline"
+      ]
+    },
+    "RemediationStep": {
+      "description": "A single step in a remediation action.",
+      "type": "object",
+      "required": [
+        "description"
+      ],
+      "properties": {
+        "action": {
+          "type": [
+            "string",
+            "null"
+          ]
+        },
+        "description": {
+          "type": "string"
+        },
+        "file": {
+          "type": [
+            "string",
+            "null"
+          ]
+        }
+      }
+    },
     "ReviewTrust": {
       "description": "Trust summary within a review report.",
       "type": "object",
@@ -263,6 +589,17 @@
             }
           ]
         },
+        "executionMode": {
+          "description": "Execution mode used for this analysis.",
+          "anyOf": [
+            {
+              "$ref": "#/definitions/ExecutionMode"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
         "fullScope": {
           "description": "Whether full-scope analysis was performed.",
           "type": "boolean"
@@ -273,6 +610,15 @@
           "format": "double"
         }
       }
+    },
+    "RiskLevel": {
+      "description": "Risk level for a remediation action or fix plan.",
+      "type": "string",
+      "enum": [
+        "low",
+        "medium",
+        "high"
+      ]
     }
   }
 }

package/safe_delete_report_schema.json

@@ -18,10 +18,10 @@
       }
     },
     "deletionOrder": {
-      "description": "Recommended deletion order (safe targets only).",
+      "description": "Recommended deletion order (safe targets only, dependency-aware).",
       "type": "array",
       "items": {
-        "type": "string"
+        "$ref": "#/definitions/DeletionOrderEntry"
       }
     },
     "evidence": {
@@ -54,6 +54,33 @@
     }
   },
   "definitions": {
+    "DeletionOrderEntry": {
+      "description": "An entry in the dependency-aware deletion order.",
+      "type": "object",
+      "required": [
+        "step",
+        "target"
+      ],
+      "properties": {
+        "reason": {
+          "description": "Why this target is at this position in the order.",
+          "type": [
+            "string",
+            "null"
+          ]
+        },
+        "step": {
+          "description": "Position in the deletion sequence (1-based).",
+          "type": "integer",
+          "format": "uint",
+          "minimum": 0.0
+        },
+        "target": {
+          "description": "The target to delete.",
+          "type": "string"
+        }
+      }
+    },
     "Evidence": {
       "description": "Evidence supporting a finding.",
       "type": "object",
@@ -100,9 +127,18 @@
       "description": "A candidate in a safe-delete evaluation.",
       "type": "object",
       "required": [
+        "classification",
         "target"
       ],
       "properties": {
+        "classification": {
+          "description": "Explicit classification for this candidate.",
+          "allOf": [
+            {
+              "$ref": "#/definitions/SafeDeleteClassification"
+            }
+          ]
+        },
         "confidence": {
           "description": "Confidence in the safety assessment.",
           "anyOf": [
@@ -114,6 +150,13 @@
             }
           ]
         },
+        "evidence": {
+          "description": "Per-candidate evidence supporting the classification.",
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/Evidence"
+          }
+        },
         "reasons": {
           "description": "Reasons for the classification.",
           "type": "array",
@@ -126,6 +169,32 @@
           "type": "string"
         }
       }
+    },
+    "SafeDeleteClassification": {
+      "description": "Explicit classification for a safe-delete candidate.",
+      "oneOf": [
+        {
+          "description": "Target is safe to delete without further review.",
+          "type": "string",
+          "enum": [
+            "safe"
+          ]
+        },
+        {
+          "description": "Target needs manual review before deletion.",
+          "type": "string",
+          "enum": [
+            "needs-review"
+          ]
+        },
+        {
+          "description": "Target must not be deleted.",
+          "type": "string",
+          "enum": [
+            "blocked"
+          ]
+        }
+      ]
     }
   }
 }