Struct RulesConfig 

pub struct RulesConfig {

    pub unused_files: Severity,
    pub unused_exports: Severity,
    pub unused_types: Severity,
    pub private_type_leaks: Severity,
    pub unused_dependencies: Severity,
    pub unused_dev_dependencies: Severity,
    pub unused_optional_dependencies: Severity,
    pub unused_enum_members: Severity,
    pub unused_class_members: Severity,
    pub unused_store_members: Severity,
    pub unprovided_injects: Severity,
    pub unrendered_components: Severity,
    pub unused_component_props: Severity,
    pub unused_component_emits: Severity,
    pub unused_server_actions: Severity,
    pub unused_load_data_keys: Severity,
    pub prop_drilling: Severity,
    pub thin_wrapper: Severity,
    pub duplicate_prop_shape: Severity,
    pub unresolved_imports: Severity,
    pub unlisted_dependencies: Severity,
    pub duplicate_exports: Severity,
    pub type_only_dependencies: Severity,
    pub test_only_dependencies: Severity,
    pub circular_dependencies: Severity,
    pub re_export_cycle: Severity,
    pub boundary_violation: Severity,
    pub coverage_gaps: Severity,
    pub feature_flags: Severity,
    pub stale_suppressions: Severity,
    pub unused_catalog_entries: Severity,
    pub empty_catalog_groups: Severity,
    pub unresolved_catalog_references: Severity,
    pub unused_dependency_overrides: Severity,
    pub misconfigured_dependency_overrides: Severity,
    pub security_client_server_leak: Severity,
    pub security_sink: Severity,
    pub policy_violation: Severity,
    pub invalid_client_export: Severity,
    pub mixed_client_server_barrel: Severity,
    pub misplaced_directive: Severity,
    pub route_collision: Severity,
    pub dynamic_segment_name_conflict: Severity,
}

Per-issue-type severity configuration.

Controls which issue types cause CI failure, are reported as warnings, or are suppressed entirely. Most fields default to Severity::Error.

Rule names use kebab-case in config files (e.g., "unused-files": "error").

Fields

unused_files: Severity

unused_exports: Severity

unused_types: Severity

private_type_leaks: Severity

unused_dependencies: Severity

unused_dev_dependencies: Severity

unused_optional_dependencies: Severity

unused_enum_members: Severity

unused_class_members: Severity

unused_store_members: Severity

Store members (Pinia state / getters / actions key, or a setup-store returned key) declared but never accessed by any consumer project-wide. Defaults to warn, not error like the closed-set class/enum member rules: a store has an OPEN declaration surface (plugins, $onAction, dynamic dispatch) so analyzer confidence is genuinely lower; warn encodes that without failing CI. Promotable to error once validated on a codebase.

unprovided_injects: Severity

Vue inject(KEY) / Svelte getContext(KEY) whose symbol KEY is provide/setContext’d nowhere in the project (the injected-never-provided dead-half). Defaults to warn, not error: a DI key has an open provide surface (plugins, app-level provide) so analyzer confidence is lower; warn encodes that without failing CI.

unrendered_components: Severity

Vue/Svelte single-file component reachable in the module graph but rendered nowhere in the project (the imported-but-never-rendered dead-half). Defaults to warn, not error: a component can be rendered reflectively (dynamic <component :is>), so analyzer confidence is lower; warn encodes that without failing CI.

unused_component_props: Severity

Vue <script setup> defineProps declared prop referenced nowhere inside its own single-file component (neither <script> nor <template>). The single-file dead-input direction. Defaults to warn, not error: a prop can be part of a deliberately-stable public component API, so analyzer confidence is lower; warn encodes that without failing CI.

unused_component_emits: Severity

Vue <script setup> defineEmits declared event emitted nowhere inside its own single-file component (no emit('<name>') call). The single-file dead-input direction. Defaults to warn, not error: an emit can be part of a deliberately-stable public component API, so analyzer confidence is lower; warn encodes that without failing CI.

unused_server_actions: Severity

Next.js Server Action (an export of a "use server" file) referenced by no code in the project: no import-and-call, no action={fn} binding, no <form action={fn}>. Cross-graph dead-export direction, reclassified out of unused-export for "use server" files. Defaults to warn, not error: the rule is new and false-negative-preferring, and reflective action-dispatch shapes can hide a real consumer; warn encodes that without failing CI until corpus-validated.

unused_load_data_keys: Severity

SvelteKit +page.{ts,server.ts,js,server.js} load() return-object key read by no consumer: not off the sibling +page.svelte’s data.<key>, nor project-wide via page.data.<key> / $page.data.<key>. Cross-file dead-input direction. Defaults to warn, not error: the rule is new and false-negative-preferring (a whole-object data pass abstains), and a load fetch can have side effects so deletion is a human call; warn encodes that without failing CI until corpus-validated.

prop_drilling: Severity

React/Preact prop forwarded unchanged through >= N intermediate pass-through components until a component that substantively consumes it. A graph-derived health signal. Defaults to off (opt-in), like private-type-leak / security-*: the located per-chain records and the small capped health penalty are dormant until the user enables the rule.

thin_wrapper: Severity

A React/Preact component whose entire body is return <Child {...props}/> (pure structural indirection, a candidate for inlining). A graph-derived health signal. Defaults to off (opt-in), like prop-drilling: the located per-wrapper records are dormant until the user enables the rule.

duplicate_prop_shape: Severity

Three or more React/Preact components across two or more files whose statically-harvested prop NAME set is identical after stripping ubiquitous DOM / passthrough names (a missing shared Props type / base component). A graph-derived structural-refactor health signal. Defaults to off (opt-in), like thin-wrapper: the located per-component records are dormant until the user enables the rule.

unresolved_imports: Severity

unlisted_dependencies: Severity

duplicate_exports: Severity

type_only_dependencies: Severity

test_only_dependencies: Severity

circular_dependencies: Severity

re_export_cycle: Severity

boundary_violation: Severity

coverage_gaps: Severity

feature_flags: Severity

stale_suppressions: Severity

unused_catalog_entries: Severity

empty_catalog_groups: Severity

unresolved_catalog_references: Severity

unused_dependency_overrides: Severity

misconfigured_dependency_overrides: Severity

security_client_server_leak: Severity

Opt-in (default off): a "use client" file that transitively imports a module reading a non-public process.env secret. Surfaced only by fallow security; never under bare fallow or the audit gate.

security_sink: Severity

Opt-in (default off): a syntactic tainted-sink candidate matched against the data-driven catalogue (security_matchers.toml). ONE knob gates ALL catalogue categories. Surfaced only by fallow security; never under bare fallow or the audit gate.

policy_violation: Severity

Master severity for rule-pack findings (rulePacks config). Defaults to warn so enabling a brand-new policy pack never hard-fails CI on its first run; individual pack rules opt up via "severity": "error". off is a kill switch that disables the whole evaluator (per-rule severity cannot resurrect it).

invalid_client_export: Severity

A "use client" file that exports a Next.js server-only / route-segment config name (e.g. metadata, revalidate, GET). Next.js rejects this at build time; fallow catches it statically. Defaults to warn.

mixed_client_server_barrel: Severity

A barrel file that re-exports BOTH a "use client" origin module AND a server-only origin module. Importing one name from such a barrel drags the other’s directive context across the React Server Components boundary (the Next.js App Router footgun). Defaults to warn.

misplaced_directive: Severity

A "use client" / "use server" directive written as an expression statement after a non-directive statement (an import, a const), so the RSC bundler parses it as an ordinary string and silently ignores it. The intended client/server boundary never takes effect. Defaults to warn.

route_collision: Severity

Two or more Next.js App Router route files that resolve to the same URL within one app-root. Next.js fails the build (“You cannot have two parallel pages that resolve to the same path”); fallow catches it statically and names every colliding file. Defaults to error: the project already fails next build, so flagging it as an error aligns fallow’s exit code with the build it mirrors.

dynamic_segment_name_conflict: Severity

Sibling Next.js dynamic route segments at one tree position using different param spellings ([id] vs [slug]). Next.js throws “You cannot use different slug names for the same dynamic path” at dev and production runtime when the position is hit; next build does NOT catch it (the build succeeds), so CI passes while the route crashes on its first request. fallow catches it statically. Defaults to error: the route is a deterministic runtime crash on first request, so failing CI is the honest signal even though next build stays green (this is the “error-runtime” severity tier, shared with route-collision).

Implementations

impl RulesConfig

pub const fn apply_partial(&mut self, partial: &PartialRulesConfig)

Apply a partial rules config on top. Only Some fields override.

Trait Implementations

impl Clone for RulesConfig

fn clone(&self) -> RulesConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for RulesConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for RulesConfig

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for RulesConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for RulesConfig

impl JsonSchema for RulesConfig

fn schema_name() -> Cow<'static, str>

The name of the generated JSON Schema.

fn schema_id() -> Cow<'static, str>

Returns a string that uniquely identifies the schema produced by this type.

fn json_schema(generator: &mut SchemaGenerator) -> Schema

Generates a JSON Schema for this type.

fn inline_schema() -> bool

Whether JSON Schemas generated for this type should be included directly in parent schemas, rather than being re-used where possible using the $ref keyword.

impl PartialEq for RulesConfig

fn eq(&self, other: &RulesConfig) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for RulesConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for RulesConfig