Fix dead-code false positives for framework/runtime reachability

.github/actions/codeclone/_action_impl.py

@@ -25,7 +25,7 @@
 from typing import Literal
 
 COMMENT_MARKER = "<!-- codeclone-report -->"
-DEFAULT_CODECLONE_PACKAGE_VERSION = "2.0.0"
+DEFAULT_CODECLONE_PACKAGE_VERSION = "2.0.1b1"
 
 
 @dataclass(frozen=True, slots=True)

.github/actions/codeclone/action.yml

@@ -18,7 +18,7 @@ inputs:
   package-version:
     description: "CodeClone version from PyPI for remote installs (ignored when the action runs from the checked-out CodeClone repo)"
     required: false
-    default: "2.0.0"
+    default: "2.0.1b1"
 
   path:
     description: "Project root"

AGENTS.md

@@ -144,8 +144,8 @@ from another doc.** Current values (verified at write time):
 |-----------------------------------|-----------------------------------|---------------|
 | `BASELINE_SCHEMA_VERSION`         | `codeclone/contracts/__init__.py` | `2.1`         |
 | `BASELINE_FINGERPRINT_VERSION`    | `codeclone/contracts/__init__.py` | `1`           |
-| `CACHE_VERSION`                   | `codeclone/contracts/__init__.py` | `2.6`         |
-| `REPORT_SCHEMA_VERSION`           | `codeclone/contracts/__init__.py` | `2.10`        |
+| `CACHE_VERSION`                   | `codeclone/contracts/__init__.py` | `2.7`         |
+| `REPORT_SCHEMA_VERSION`           | `codeclone/contracts/__init__.py` | `2.11`        |
 | `METRICS_BASELINE_SCHEMA_VERSION` | `codeclone/contracts/__init__.py` | `1.2`         |
 
 When updating any doc that mentions a version, re-read `codeclone/contracts/__init__.py` first. Do not derive

CHANGELOG.md

@@ -1,5 +1,21 @@
 # Changelog
 
+## [Unreleased]
+
+### Dead code
+
+- Add framework-aware runtime reachability for dead-code analysis: FastAPI/Starlette
+  routes and `Annotated[..., Depends/Security(...)]` dependencies, Django URL patterns,
+  Dependency Injector providers, Typer/Click commands, Celery tasks, top-level `__all__`
+  exports, package entry points, and Pydantic validator/serializer hooks. Supported
+  registrations suppress false dead-code findings without framework execution or
+  name-only heuristics.
+- Treat `typing.Protocol` and `typing_extensions.Protocol` declarations, including
+  generic `Protocol[T]`, as type-only contracts so structural interfaces do not produce
+  false-positive dead-code findings.
+- Bump cache schema to `2.7` and report schema to `2.11` to carry reachability facts
+  for cold/warm parity and report explainability.
+
 ## [2.0.0] - 2026-04-30
 
 `2.0.0` promotes the completed 2.0 release line to the stable public contract.