v0.3.5policy-scout2026-06-11

pnpm/yarn/bun Sandbox Execution

PM-aware lockfile snapshots and diff capture for all four package managers, plus pnpm transitive dependency analysis. yarn and bun skip transitive (incompatible list output formats, documented).

v0.3.52026-06-11
  • ·take_file_snapshot now accepts package_manager and uses get_package_files() so pnpm-lock.yaml, yarn.lock, and bun.lockb are correctly captured
  • ·capture_manifest_diffs signature simplified (workspace param removed, was unused) — now takes before/after/package_manager
  • ·Added run_pnpm_list() normalising pnpm's array-wrapped JSON to the same shape as npm list
  • ·Added run_list_for_pm() dispatcher — npm/pnpm return tree, yarn/bun return None with documented format limitation
  • ·CLI wired: package_manager now flows through snapshot, diff, and transitive analysis calls
  • ·26 new tests covering all PM paths, pnpm JSON normalisation, error paths, and lockfile constant coverage