react-doctor 0.2.14-dev.9fc6f62 → 0.2.14-dev.b3c3aa9

package/dist/index.js

@@ -14,6 +14,7 @@ import * as Redacted from "effect/Redacted";
 import * as FetchHttpClient from "effect/unstable/http/FetchHttpClient";
 import * as Otlp from "effect/unstable/observability/Otlp";
 import * as Context from "effect/Context";
+import os from "node:os";
 import * as Console from "effect/Console";
 import * as Fiber from "effect/Fiber";
 import * as Filter from "effect/Filter";
@@ -26,7 +27,6 @@ import * as NodeFileSystem from "@effect/platform-node-shared/NodeFileSystem";
 import * as NodePath from "@effect/platform-node-shared/NodePath";
 import * as ChildProcess from "effect/unstable/process/ChildProcess";
 import { ChildProcessSpawner } from "effect/unstable/process/ChildProcessSpawner";
-import os from "node:os";
 import * as ts from "typescript";
 import { gzipSync } from "node:zlib";
 //#region \0rolldown/runtime.js
@@ -2874,29 +2874,34 @@ const findDependencyInfoFromMonorepoRoot = (directory) => {
 		framework: rootInfo.framework !== "unknown" ? rootInfo.framework : workspaceInfo.framework
 	};
 };
-const someWorkspacePackageJson = (rootDirectory, rootPackageJson, predicate) => {
-	if (predicate(rootPackageJson)) return true;
+const findInWorkspacePackageJsons = (rootDirectory, rootPackageJson, select) => {
+	const rootValue = select(rootPackageJson);
+	if (rootValue !== null) return rootValue;
 	const patterns = getWorkspacePatterns(rootDirectory, rootPackageJson);
-	if (patterns.length === 0) return false;
+	if (patterns.length === 0) return null;
 	const visitedDirectories = /* @__PURE__ */ new Set();
 	for (const pattern of patterns) {
-		const directories = resolveWorkspaceDirectories(rootDirectory, pattern);
+		const directories = [...resolveWorkspaceDirectories(rootDirectory, pattern)].sort();
 		for (const workspaceDirectory of directories) {
 			if (visitedDirectories.has(workspaceDirectory)) continue;
 			visitedDirectories.add(workspaceDirectory);
-			if (predicate(readPackageJson(path.join(workspaceDirectory, "package.json")))) return true;
+			const value = select(readPackageJson(path.join(workspaceDirectory, "package.json")));
+			if (value !== null) return value;
 		}
 	}
-	return false;
+	return null;
 };
+const someWorkspacePackageJson = (rootDirectory, rootPackageJson, predicate) => findInWorkspacePackageJsons(rootDirectory, rootPackageJson, (packageJson) => predicate(packageJson) ? true : null) !== null;
 const NAMES = new Set([
 	"react-native",
 	"react-native-tvos",
-	"expo",
-	"expo-router",
-	"@expo/cli",
-	"@expo/metro-config",
-	"@expo/metro-runtime",
+	...new Set([
+		"expo",
+		"expo-router",
+		"@expo/cli",
+		"@expo/metro-config",
+		"@expo/metro-runtime"
+	]),
 	"react-native-windows",
 	"react-native-macos"
 ]);
@@ -2920,6 +2925,11 @@ const isPackageJsonReactNativeAware = (packageJson) => {
 	return false;
 };
 const hasReactNativeWorkspaceAnywhere = (rootDirectory, rootPackageJson) => someWorkspacePackageJson(rootDirectory, rootPackageJson, isPackageJsonReactNativeAware);
+const getExpoDependencySpec = (packageJson) => {
+	const spec = packageJson.dependencies?.expo ?? packageJson.devDependencies?.expo ?? packageJson.peerDependencies?.expo ?? packageJson.optionalDependencies?.expo;
+	return typeof spec === "string" ? spec : null;
+};
+const findExpoVersion = (rootDirectory, rootPackageJson) => findInWorkspacePackageJsons(rootDirectory, rootPackageJson, getExpoDependencySpec);
 const getPreactVersion = (packageJson) => {
 	return {
 		...packageJson.peerDependencies,
@@ -3159,6 +3169,19 @@ const discoverProject = (directory) => {
 	const hasTypeScript = fs.existsSync(path.join(directory, "tsconfig.json"));
 	const sourceFileCount = countSourceFiles(directory);
 	const hasReactNativeWorkspace = framework === "expo" || framework === "react-native" || hasReactNativeWorkspaceAnywhere(directory, packageJson);
+	let expoVersion = hasReactNativeWorkspace ? findExpoVersion(directory, packageJson) : null;
+	if (expoVersion !== null && isCatalogReference(expoVersion)) {
+		const catalogName = extractCatalogName(expoVersion);
+		let resolvedExpoVersion = resolveCatalogVersion(packageJson, "expo", directory, catalogName);
+		if (!resolvedExpoVersion) {
+			const monorepoRoot = findMonorepoRoot(directory);
+			if (monorepoRoot) {
+				const monorepoPackageJsonPath = path.join(monorepoRoot, "package.json");
+				if (isFile(monorepoPackageJsonPath)) resolvedExpoVersion = resolveCatalogVersion(readPackageJson(monorepoPackageJsonPath), "expo", monorepoRoot, catalogName);
+			}
+		}
+		expoVersion = resolvedExpoVersion ?? expoVersion;
+	}
 	const hasReanimated = hasReactNativeWorkspace && someWorkspacePackageJson(directory, packageJson, isPackageJsonReanimatedAware);
 	const preactVersion = getPreactVersion(packageJson);
 	const projectInfo = {
@@ -3176,6 +3199,7 @@ const discoverProject = (directory) => {
 		preactVersion,
 		preactMajorVersion: parseReactMajor(preactVersion),
 		hasReactNativeWorkspace,
+		expoVersion,
 		hasReanimated,
 		sourceFileCount
 	};
@@ -3280,6 +3304,9 @@ const DIAGNOSTIC_CATEGORY_BUCKETS = [
 	"Accessibility",
 	"Maintainability"
 ];
+const APP_ONLY_RULE_KEYS = new Set(["react-hooks-js/static-components", "react-doctor/no-render-prop-children"]);
+const COMPILER_CLEANUP_BUCKET = "compiler-cleanup";
+const COMPILER_CLEANUP_RULE_KEYS = new Set(["react-doctor/react-compiler-no-manual-memoization"]);
 const MAX_GLOB_PATTERN_LENGTH_CHARS = 1024;
 const CONFIG_CACHE_TTL_MS = 300 * 1e3;
 var InvalidGlobPatternError = class extends Error {
@@ -3399,10 +3426,11 @@ const restampSeverity = (diagnostic, override) => {
 */
 const buildRuleSeverityControls = (config) => {
 	if (!config) return void 0;
-	if (config.rules === void 0 && config.categories === void 0) return void 0;
+	if (config.rules === void 0 && config.categories === void 0 && config.buckets === void 0) return;
 	return {
 		...config.rules !== void 0 ? { rules: config.rules } : {},
-		...config.categories !== void 0 ? { categories: config.categories } : {}
+		...config.categories !== void 0 ? { categories: config.categories } : {},
+		...config.buckets !== void 0 ? { buckets: config.buckets } : {}
 	};
 };
 const JSX_OPENER_TAG_PATTERN = /<[A-Za-z][\w.]*/g;
@@ -3766,6 +3794,69 @@ const resolveRuleSeverityOverride = (input, controls) => {
 	}
 	return input.category !== void 0 ? controls.categories?.[input.category] : void 0;
 };
+const cachedRoleByPackageDirectory = /* @__PURE__ */ new Map();
+const cachedPackageDirectoryByFilename = /* @__PURE__ */ new Map();
+const findNearestPackageDirectory = (filename) => {
+	if (!filename) return null;
+	const fromCache = cachedPackageDirectoryByFilename.get(filename);
+	if (fromCache !== void 0) return fromCache;
+	let currentDirectory = path.dirname(filename);
+	while (true) {
+		const candidatePackageJsonPath = path.join(currentDirectory, "package.json");
+		let hasPackageJson = false;
+		try {
+			hasPackageJson = fs.statSync(candidatePackageJsonPath).isFile();
+		} catch {
+			hasPackageJson = false;
+		}
+		if (hasPackageJson) {
+			cachedPackageDirectoryByFilename.set(filename, currentDirectory);
+			return currentDirectory;
+		}
+		const parentDirectory = path.dirname(currentDirectory);
+		if (parentDirectory === currentDirectory) {
+			cachedPackageDirectoryByFilename.set(filename, null);
+			return null;
+		}
+		currentDirectory = parentDirectory;
+	}
+};
+const readManifest = (packageJsonPath) => {
+	try {
+		const parsed = JSON.parse(fs.readFileSync(packageJsonPath, "utf-8"));
+		if (typeof parsed === "object" && parsed !== null) return parsed;
+		return null;
+	} catch {
+		return null;
+	}
+};
+const hasPublishContract = (manifest) => typeof manifest.name === "string" && manifest.name.length > 0 && manifest.exports !== void 0 && manifest.exports !== null && manifest.private !== true;
+const classifyByDirectoryCohort = (packageDirectory) => {
+	let current = packageDirectory;
+	while (true) {
+		if (path.basename(current) === "apps") return "app";
+		const parent = path.dirname(current);
+		if (parent === current) return null;
+		current = parent;
+	}
+};
+const clearPackageRoleCache = () => {
+	cachedRoleByPackageDirectory.clear();
+	cachedPackageDirectoryByFilename.clear();
+};
+const classifyPackageRole = (filename) => {
+	if (!filename) return "unknown";
+	const packageDirectory = findNearestPackageDirectory(filename);
+	if (!packageDirectory) return "unknown";
+	const cached = cachedRoleByPackageDirectory.get(packageDirectory);
+	if (cached !== void 0) return cached;
+	const manifest = readManifest(path.join(packageDirectory, "package.json"));
+	let result;
+	if (manifest && hasPublishContract(manifest)) result = "library";
+	else result = classifyByDirectoryCohort(path.dirname(packageDirectory)) ?? "unknown";
+	cachedRoleByPackageDirectory.set(packageDirectory, result);
+	return result;
+};
 /**
 * Resolves the absolute path to read for a diagnostic's `filePath`,
 * accounting for the various shapes oxlint emits:
@@ -3928,6 +4019,15 @@ const buildDiagnosticPipeline = (input) => {
 	const hasRawTextWrappers = rawTextWrapperComponentNames.size > 0;
 	const fileLinesCache = /* @__PURE__ */ new Map();
 	const testFileCache = /* @__PURE__ */ new Map();
+	const libraryFileCache = /* @__PURE__ */ new Map();
+	const isLibraryFile = (filePath) => {
+		let cached = libraryFileCache.get(filePath);
+		if (cached === void 0) {
+			cached = classifyPackageRole(resolveCandidateReadPath(rootDirectory, filePath)) === "library";
+			libraryFileCache.set(filePath, cached);
+		}
+		return cached;
+	};
 	const getFileLines = (filePath) => {
 		const cached = fileLinesCache.get(filePath);
 		if (cached !== void 0) return cached;
@@ -3954,6 +4054,10 @@ const buildDiagnosticPipeline = (input) => {
 		for (const ignored of ignoredRules) if (isSameRuleKey(ignored, ruleIdentifier)) return true;
 		return false;
 	};
+	const isAppOnlyRule = (ruleIdentifier) => {
+		for (const appOnlyRuleKey of APP_ONLY_RULE_KEYS) if (isSameRuleKey(appOnlyRuleKey, ruleIdentifier)) return true;
+		return false;
+	};
 	const isRnRawTextSuppressedByConfig = (diagnostic) => {
 		if (diagnostic.rule !== "rn-no-raw-text") return false;
 		if (diagnostic.line <= 0) return false;
@@ -3968,8 +4072,10 @@ const buildDiagnosticPipeline = (input) => {
 		if (shouldAutoSuppress(diagnostic)) return null;
 		let current = diagnostic;
 		let explicitSeverityOverride;
+		let explicitRuleOverride;
 		if (severityControls) {
 			const { ruleKey, category } = getDiagnosticRuleIdentity(current);
+			explicitRuleOverride = resolveRuleSeverityOverride({ ruleKey }, severityControls);
 			explicitSeverityOverride = resolveRuleSeverityOverride({
 				ruleKey,
 				category
@@ -3977,6 +4083,9 @@ const buildDiagnosticPipeline = (input) => {
 			if (explicitSeverityOverride === "off") return null;
 			if (explicitSeverityOverride !== void 0) current = restampSeverity(current, explicitSeverityOverride);
 		}
+		if (explicitRuleOverride === void 0) {
+			if (isAppOnlyRule(`${current.plugin}/${current.rule}`) && isLibraryFile(current.filePath)) return null;
+		}
 		if (!showWarnings && current.severity === "warning" && explicitSeverityOverride !== "warn") return null;
 		if (userConfig) {
 			if (isRuleIgnored(`${current.plugin}/${current.rule}`)) return null;
@@ -4162,6 +4271,17 @@ const layerOtlp = Layer.unwrap(Effect.gen(function* () {
 	}).pipe(Layer.provide(FetchHttpClient.layer));
 }).pipe(Effect.orDie));
 /**
+* Resolves a requested lint worker count to a clamped integer within
+* `[MIN_SCAN_CONCURRENCY, MAX_SCAN_CONCURRENCY]`. `"auto"` uses the
+* machine's CPU cores; out-of-range or non-finite requests degrade to
+* `MIN_SCAN_CONCURRENCY` rather than oversubscribing or running zero workers.
+*/
+const resolveScanConcurrency = (requested) => {
+	const desired = requested === "auto" ? os.availableParallelism() : requested;
+	if (!Number.isFinite(desired) || desired < 1) return 1;
+	return Math.max(1, Math.min(Math.floor(desired), 16));
+};
+/**
 * Per-batch oxlint wall-clock budget. Reads from the env var on
 * startup so the eval harness can raise the budget under sandbox
 * microVMs without recompiling react-doctor. Tests override via
@@ -4181,6 +4301,30 @@ var OxlintSpawnTimeoutMs = class extends Context.Reference("react-doctor/OxlintS
 * tests that exercise the cap behavior.
 */
 var OxlintOutputMaxBytes = class extends Context.Reference("react-doctor/OxlintOutputMaxBytes", { defaultValue: () => OXLINT_OUTPUT_MAX_BYTES }) {};
+/**
+* Number of oxlint subprocesses the lint pass runs in parallel. Defaults
+* to `1` (serial — the historical behavior) so resource usage is opt-in.
+* The CLI's `--experimental-parallel` flag overrides this via `Layer.succeed`; the
+* `REACT_DOCTOR_PARALLEL` env var seeds the default for programmatic /
+* CI callers that never touch the flag:
+*
+*   - unset / `0` / `false` / `off` → `1` (serial)
+*   - `auto` / `true` / `on`        → available CPU cores (clamped)
+*   - a positive integer            → that many workers (clamped)
+*
+* The resolved value is always within
+* `[MIN_SCAN_CONCURRENCY, MAX_SCAN_CONCURRENCY]`.
+*/
+var OxlintConcurrency = class extends Context.Reference("react-doctor/OxlintConcurrency", { defaultValue: () => {
+	const raw = process.env["REACT_DOCTOR_PARALLEL"];
+	if (raw === void 0) return 1;
+	const normalized = raw.trim().toLowerCase();
+	if (normalized === "" || normalized === "0" || normalized === "false" || normalized === "off") return 1;
+	if (normalized === "auto" || normalized === "true" || normalized === "on") return resolveScanConcurrency("auto");
+	const parsed = Number.parseInt(normalized, 10);
+	if (!Number.isInteger(parsed) || parsed <= 0) return 1;
+	return resolveScanConcurrency(parsed);
+} }) {};
 const DIAGNOSTIC_SURFACES = [
 	"cli",
 	"prComment",
@@ -4341,16 +4485,23 @@ const CONFIG_FILENAME = "react-doctor.config.json";
 const PACKAGE_JSON_CONFIG_KEY = "reactDoctor";
 const loadConfigFromDirectory = (directory) => {
 	const configFilePath = path.join(directory, CONFIG_FILENAME);
-	if (isFile(configFilePath)) try {
-		const fileContent = fs.readFileSync(configFilePath, "utf-8");
-		const parsed = JSON.parse(fileContent);
-		if (isPlainObject(parsed)) return {
-			config: validateConfigTypes(parsed),
-			sourceDirectory: directory
-		};
-		warn(`${CONFIG_FILENAME} must be a JSON object, ignoring.`);
-	} catch (error) {
-		warn(`Failed to parse ${CONFIG_FILENAME}: ${error instanceof Error ? error.message : String(error)}`);
+	let sawBrokenConfigFile = false;
+	if (isFile(configFilePath)) {
+		try {
+			const fileContent = fs.readFileSync(configFilePath, "utf-8");
+			const parsed = JSON.parse(fileContent);
+			if (isPlainObject(parsed)) return {
+				status: "found",
+				loaded: {
+					config: validateConfigTypes(parsed),
+					sourceDirectory: directory
+				}
+			};
+			warn(`${CONFIG_FILENAME} must be a JSON object, ignoring.`);
+		} catch (error) {
+			warn(`Failed to parse ${CONFIG_FILENAME}: ${error instanceof Error ? error.message : String(error)}`);
+		}
+		sawBrokenConfigFile = true;
 	}
 	const packageJsonPath = path.join(directory, "package.json");
 	if (isFile(packageJsonPath)) try {
@@ -4359,14 +4510,18 @@ const loadConfigFromDirectory = (directory) => {
 		if (isPlainObject(packageJson)) {
 			const embeddedConfig = packageJson[PACKAGE_JSON_CONFIG_KEY];
 			if (isPlainObject(embeddedConfig)) return {
-				config: validateConfigTypes(embeddedConfig),
-				sourceDirectory: directory
+				status: "found",
+				loaded: {
+					config: validateConfigTypes(embeddedConfig),
+					sourceDirectory: directory
+				}
 			};
 		}
-	} catch {
-		return null;
-	}
-	return null;
+	} catch {}
+	return {
+		status: sawBrokenConfigFile ? "invalid" : "absent",
+		loaded: null
+	};
 };
 const cachedConfigs = /* @__PURE__ */ new Map();
 const clearConfigCache = () => {
@@ -4375,21 +4530,21 @@ const clearConfigCache = () => {
 const loadConfigWithSource = (rootDirectory) => {
 	const cached = cachedConfigs.get(rootDirectory);
 	if (cached !== void 0) return cached;
-	const localConfig = loadConfigFromDirectory(rootDirectory);
-	if (localConfig) {
-		cachedConfigs.set(rootDirectory, localConfig);
-		return localConfig;
+	const localResult = loadConfigFromDirectory(rootDirectory);
+	if (localResult.status === "found") {
+		cachedConfigs.set(rootDirectory, localResult.loaded);
+		return localResult.loaded;
 	}
-	if (isProjectBoundary(rootDirectory)) {
+	if (localResult.status === "invalid" || isProjectBoundary(rootDirectory)) {
 		cachedConfigs.set(rootDirectory, null);
 		return null;
 	}
 	let ancestorDirectory = path.dirname(rootDirectory);
 	while (ancestorDirectory !== path.dirname(ancestorDirectory)) {
-		const ancestorConfig = loadConfigFromDirectory(ancestorDirectory);
-		if (ancestorConfig) {
-			cachedConfigs.set(rootDirectory, ancestorConfig);
-			return ancestorConfig;
+		const ancestorResult = loadConfigFromDirectory(ancestorDirectory);
+		if (ancestorResult.status === "found") {
+			cachedConfigs.set(rootDirectory, ancestorResult.loaded);
+			return ancestorResult.loaded;
 		}
 		if (isProjectBoundary(ancestorDirectory)) {
 			cachedConfigs.set(rootDirectory, null);
@@ -4414,11 +4569,12 @@ const resolveConfigRootDir = (config, configSourceDirectory) => {
 	}
 	return resolvedRootDir;
 };
-const resolveDiagnoseTarget = (directory) => {
+const resolveDiagnoseTarget = (directory, options = {}) => {
 	if (isFile(path.join(directory, "package.json"))) return directory;
 	const reactSubprojects = discoverReactSubprojects(directory);
 	if (reactSubprojects.length === 0) return null;
 	if (reactSubprojects.length === 1) return reactSubprojects[0].directory;
+	if (options.allowAmbiguous === true) return null;
 	throw new AmbiguousProjectError(directory, reactSubprojects.map((subproject) => path.relative(directory, subproject.directory)).toSorted());
 };
 /**
@@ -4432,7 +4588,8 @@ const resolveDiagnoseTarget = (directory) => {
 *      project root, if configured.
 *   4. Walk into a nested React subproject when the requested
 *      directory has no `package.json` of its own (raises
-*      `AmbiguousProjectError` when multiple candidates exist).
+*      `AmbiguousProjectError` when multiple candidates exist unless
+*      the caller opts into keeping the wrapper directory).
 *
 * Throws `ProjectNotFoundError` when neither the requested directory
 * nor any discoverable nested project has a `package.json`.
@@ -4444,14 +4601,14 @@ const resolveDiagnoseTarget = (directory) => {
 * via its own cache). Routing through `resolveScanTarget` keeps every
 * shell in agreement on what "the scan directory" means.
 */
-const resolveScanTarget = (requestedDirectory) => {
+const resolveScanTarget = (requestedDirectory, options = {}) => {
 	const absoluteRequested = path.resolve(requestedDirectory);
 	const loadedConfig = loadConfigWithSource(absoluteRequested);
 	const userConfig = loadedConfig?.config ?? null;
 	const configSourceDirectory = loadedConfig?.sourceDirectory ?? null;
 	const redirectedDirectory = resolveConfigRootDir(userConfig, configSourceDirectory);
 	const directoryAfterRedirect = redirectedDirectory ?? absoluteRequested;
-	const resolvedDirectory = resolveDiagnoseTarget(directoryAfterRedirect) ?? directoryAfterRedirect;
+	const resolvedDirectory = resolveDiagnoseTarget(directoryAfterRedirect, options) ?? directoryAfterRedirect;
 	if (!isDirectory(resolvedDirectory)) throw existsSync(resolvedDirectory) ? new NotADirectoryError(resolvedDirectory) : new ProjectNotFoundError(resolvedDirectory);
 	return {
 		resolvedDirectory,
@@ -4461,6 +4618,359 @@ const resolveScanTarget = (requestedDirectory) => {
 		didRedirectViaRootDir: redirectedDirectory !== null
 	};
 };
+const getDirectDependencyNames = (packageJson) => new Set([...Object.keys(packageJson.dependencies ?? {}), ...Object.keys(packageJson.devDependencies ?? {})]);
+const buildExpoCheckContext = (rootDirectory, expoVersion) => {
+	const packageJson = readPackageJson(path.join(rootDirectory, "package.json"));
+	return {
+		rootDirectory,
+		packageJson,
+		directDependencyNames: getDirectDependencyNames(packageJson),
+		expoSdkMajor: getLowestDependencyMajor(expoVersion)
+	};
+};
+const buildExpoDiagnostic = (input) => ({
+	filePath: input.filePath ?? "package.json",
+	plugin: "react-doctor",
+	rule: input.rule,
+	severity: input.severity ?? "warning",
+	message: input.message,
+	help: input.help,
+	line: input.line ?? 0,
+	column: input.column ?? 0,
+	category: input.category ?? "Correctness"
+});
+const CRITICAL_OVERRIDE_NAMES = new Set([
+	"@expo/cli",
+	"@expo/config",
+	"@expo/metro-config",
+	"@expo/metro-runtime",
+	"@expo/metro",
+	"metro"
+]);
+const isCriticalOverrideName = (packageName) => CRITICAL_OVERRIDE_NAMES.has(packageName) || packageName.startsWith("metro-");
+const collectOverrideNames = (packageJson) => new Set([
+	...Object.keys(packageJson.overrides ?? {}),
+	...Object.keys(packageJson.resolutions ?? {}),
+	...Object.keys(packageJson.pnpm?.overrides ?? {})
+]);
+const checkExpoDependencyOverrides = (context) => {
+	const overriddenCriticalNames = [...collectOverrideNames(context.packageJson)].filter(isCriticalOverrideName).sort();
+	if (overriddenCriticalNames.length === 0) return [];
+	const quotedNames = overriddenCriticalNames.map((name) => `"${name}"`).join(", ");
+	return [buildExpoDiagnostic({
+		rule: "expo-no-conflicting-dependency-override",
+		message: `package.json pins SDK-critical ${overriddenCriticalNames.length === 1 ? "package" : "packages"} via overrides/resolutions (${quotedNames}) — these versions are tied to the Expo SDK release and overriding them is unsupported and may break Metro or native builds`,
+		help: `Remove the override/resolution for ${quotedNames} and reinstall so the Expo-pinned versions are used`
+	})];
+};
+const isPathGitIgnored = (rootDirectory, absolutePath) => {
+	const result = spawnSync("git", [
+		"check-ignore",
+		"-q",
+		absolutePath
+	], {
+		cwd: rootDirectory,
+		stdio: [
+			"ignore",
+			"ignore",
+			"ignore"
+		]
+	});
+	if (result.error) return null;
+	if (result.status === 0) return true;
+	if (result.status === 1) return false;
+	return null;
+};
+const LOCAL_ENV_FILE_NAMES = [
+	".env.local",
+	".env.development.local",
+	".env.production.local",
+	".env.test.local"
+];
+const checkExpoEnvLocalFiles = (context) => {
+	const { rootDirectory } = context;
+	const committedEnvFiles = LOCAL_ENV_FILE_NAMES.filter((fileName) => {
+		const filePath = path.join(rootDirectory, fileName);
+		if (!isFile(filePath)) return false;
+		return isPathGitIgnored(rootDirectory, filePath) === false;
+	});
+	if (committedEnvFiles.length === 0) return [];
+	return [buildExpoDiagnostic({
+		rule: "expo-env-local-not-gitignored",
+		category: "Security",
+		message: `Local environment ${committedEnvFiles.length === 1 ? "file" : "files"} (${committedEnvFiles.join(", ")}) ${committedEnvFiles.length === 1 ? "is" : "are"} not ignored by Git — committing \`.env*.local\` risks leaking secrets and overriding committed defaults for everyone who clones the project`,
+		help: `Add \`.env*.local\` to your .gitignore. If already committed, untrack with \`git rm --cached ${committedEnvFiles.join(" ")}\``
+	})];
+};
+const isExpoSdkAtLeast = (expoSdkMajor, minMajor) => expoSdkMajor !== null && expoSdkMajor >= minMajor;
+const UNIMODULES_HELP = "Remove every `@unimodules/*` and `react-native-unimodules` package — their functionality now lives in `expo-modules-core`. See https://expo.fyi/r/sdk-44-remove-unimodules";
+const FIREBASE_HELP = "Use the Firebase JS SDK or React Native Firebase directly. See https://expo.fyi/firebase-migration-guide";
+const unimodulesEntry = (packageName) => ({
+	packageName,
+	rule: "expo-no-unimodules-packages",
+	message: `"${packageName}" is a legacy unimodules package that is incompatible with Expo SDK 44+ and will break native builds`,
+	help: UNIMODULES_HELP
+});
+const FLAGGED_DEPENDENCIES = [
+	unimodulesEntry("@unimodules/core"),
+	unimodulesEntry("@unimodules/react-native-adapter"),
+	unimodulesEntry("react-native-unimodules"),
+	{
+		packageName: "expo-cli",
+		rule: "expo-no-cli-dependencies",
+		message: "`expo-cli` (the legacy global CLI) is a project dependency — the CLI now ships inside the `expo` package, and keeping `expo-cli` causes failures such as `unknown option --fix` when running `npx expo install --fix`",
+		help: "Remove `expo-cli` from your dependencies and use the bundled CLI via `npx expo`"
+	},
+	{
+		packageName: "eas-cli",
+		rule: "expo-no-cli-dependencies",
+		message: "`eas-cli` is a project dependency — pinning it in package.json drifts from the latest EAS CLI and bloats installs",
+		help: "Remove `eas-cli` from your dependencies and run it on demand with `npx eas-cli` (or install it globally)"
+	},
+	{
+		packageName: "expo-modules-autolinking",
+		rule: "expo-no-redundant-dependency",
+		message: "\"expo-modules-autolinking\" should not be a direct dependency — Expo installs it transitively as needed",
+		help: "Remove `expo-modules-autolinking` from your package.json"
+	},
+	{
+		packageName: "expo-dev-launcher",
+		rule: "expo-no-redundant-dependency",
+		message: "\"expo-dev-launcher\" should not be a direct dependency — it is pulled in by `expo-dev-client`",
+		help: "Remove `expo-dev-launcher` and depend on `expo-dev-client` instead"
+	},
+	{
+		packageName: "expo-dev-menu",
+		rule: "expo-no-redundant-dependency",
+		message: "\"expo-dev-menu\" should not be a direct dependency — it is pulled in by `expo-dev-client`",
+		help: "Remove `expo-dev-menu` and depend on `expo-dev-client` instead"
+	},
+	{
+		packageName: "expo-modules-core",
+		rule: "expo-no-redundant-dependency",
+		message: "\"expo-modules-core\" should not be a direct dependency — use the API re-exported from the `expo` package",
+		help: "Remove `expo-modules-core` from your package.json and import from `expo` instead"
+	},
+	{
+		packageName: "@expo/metro-config",
+		rule: "expo-no-redundant-dependency",
+		message: "\"@expo/metro-config\" should not be a direct dependency — use the `expo/metro-config` sub-export of the `expo` package",
+		help: "Remove `@expo/metro-config` and import `expo/metro-config` in your metro.config.js"
+	},
+	{
+		packageName: "@types/react-native",
+		rule: "expo-no-redundant-dependency",
+		message: "\"@types/react-native\" should not be installed — React Native ships its own types since SDK 48",
+		help: "Remove `@types/react-native` from your package.json",
+		minSdkMajor: 48
+	},
+	{
+		packageName: "@expo/config-plugins",
+		rule: "expo-no-redundant-dependency",
+		message: "\"@expo/config-plugins\" should not be a direct dependency — use the `expo/config-plugins` sub-export of the `expo` package",
+		help: "Remove `@expo/config-plugins`; config-plugin authors should import from `expo/config-plugins`. See https://github.com/expo/expo/pull/18855",
+		minSdkMajor: 48
+	},
+	{
+		packageName: "@expo/prebuild-config",
+		rule: "expo-no-redundant-dependency",
+		message: "\"@expo/prebuild-config\" should not be a direct dependency — Expo installs it transitively",
+		help: "Remove `@expo/prebuild-config` from your package.json",
+		minSdkMajor: 53
+	},
+	{
+		packageName: "expo-permissions",
+		rule: "expo-no-redundant-dependency",
+		message: "\"expo-permissions\" was deprecated in SDK 41 and may no longer compile — permissions moved onto each module (e.g. `MediaLibrary.requestPermissionsAsync()`)",
+		help: "Remove `expo-permissions` and request permissions from the relevant module instead",
+		minSdkMajor: 50
+	},
+	{
+		packageName: "expo-app-loading",
+		rule: "expo-no-redundant-dependency",
+		message: "\"expo-app-loading\" was removed in SDK 49",
+		help: "Remove `expo-app-loading` and use `expo-splash-screen` instead. See https://docs.expo.dev/versions/latest/sdk/splash-screen/",
+		minSdkMajor: 49
+	},
+	{
+		packageName: "expo-firebase-analytics",
+		rule: "expo-no-redundant-dependency",
+		message: "\"expo-firebase-analytics\" was removed in SDK 48",
+		help: FIREBASE_HELP,
+		minSdkMajor: 48
+	},
+	{
+		packageName: "expo-firebase-recaptcha",
+		rule: "expo-no-redundant-dependency",
+		message: "\"expo-firebase-recaptcha\" was removed in SDK 48",
+		help: FIREBASE_HELP,
+		minSdkMajor: 48
+	},
+	{
+		packageName: "expo-firebase-core",
+		rule: "expo-no-redundant-dependency",
+		message: "\"expo-firebase-core\" was removed in SDK 48",
+		help: FIREBASE_HELP,
+		minSdkMajor: 48
+	}
+];
+const checkExpoFlaggedDependencies = (context) => FLAGGED_DEPENDENCIES.filter((flaggedDependency) => {
+	if (!context.directDependencyNames.has(flaggedDependency.packageName)) return false;
+	if (flaggedDependency.minSdkMajor === void 0) return true;
+	return isExpoSdkAtLeast(context.expoSdkMajor, flaggedDependency.minSdkMajor);
+}).map((flaggedDependency) => buildExpoDiagnostic({
+	rule: flaggedDependency.rule,
+	message: flaggedDependency.message,
+	help: flaggedDependency.help
+}));
+const findLocalModuleNativeFiles = (rootDirectory) => {
+	const modulesDirectory = path.join(rootDirectory, "modules");
+	if (!isDirectory(modulesDirectory)) return [];
+	const nativeFilePaths = [];
+	for (const moduleEntry of readDirectoryEntries(modulesDirectory)) {
+		if (!moduleEntry.isDirectory()) continue;
+		const moduleDirectory = path.join(modulesDirectory, moduleEntry.name);
+		const gradlePath = path.join(moduleDirectory, "android", "build.gradle");
+		if (isFile(gradlePath)) nativeFilePaths.push(gradlePath);
+		const iosDirectory = path.join(moduleDirectory, "ios");
+		if (isDirectory(iosDirectory)) {
+			for (const iosEntry of readDirectoryEntries(iosDirectory)) if (iosEntry.isFile() && iosEntry.name.endsWith(".podspec")) nativeFilePaths.push(path.join(iosDirectory, iosEntry.name));
+		}
+	}
+	return nativeFilePaths;
+};
+const checkExpoGitignore = (context) => {
+	const { rootDirectory } = context;
+	const diagnostics = [];
+	const expoStateDirectory = path.join(rootDirectory, ".expo");
+	if (isDirectory(expoStateDirectory) && isPathGitIgnored(rootDirectory, expoStateDirectory) === false) diagnostics.push(buildExpoDiagnostic({
+		rule: "expo-gitignore",
+		message: "The `.expo` directory is not ignored by Git — it holds machine-specific device history and dev-server settings that should not be committed",
+		help: "Add `.expo/` to your .gitignore"
+	}));
+	if (findLocalModuleNativeFiles(rootDirectory).find((nativeFilePath) => isPathGitIgnored(rootDirectory, nativeFilePath) === true) !== void 0) diagnostics.push(buildExpoDiagnostic({
+		rule: "expo-gitignore",
+		message: "The native `ios`/`android` directories of a local Expo module under `modules/` are gitignored — usually caused by an overly broad `ios`/`android` ignore rule",
+		help: "Use anchored patterns like `/ios` and `/android` in .gitignore so only the top-level native directories are excluded, not those inside `modules/`"
+	}));
+	return diagnostics;
+};
+const LOCKFILE_NAMES = [
+	"pnpm-lock.yaml",
+	"yarn.lock",
+	"package-lock.json",
+	"bun.lockb",
+	"bun.lock"
+];
+const checkExpoLockfile = (context) => {
+	const workspaceRoot = isMonorepoRoot(context.rootDirectory) ? context.rootDirectory : findMonorepoRoot(context.rootDirectory) ?? context.rootDirectory;
+	const presentLockfiles = LOCKFILE_NAMES.filter((lockfileName) => isFile(path.join(workspaceRoot, lockfileName)));
+	if (presentLockfiles.length === 0) return [buildExpoDiagnostic({
+		rule: "expo-lockfile",
+		message: "No lock file detected at the project root — installs are not reproducible, and EAS Build cannot infer your package manager",
+		help: "Install dependencies with your package manager to generate a lock file, then commit it"
+	})];
+	if (presentLockfiles.length > 1) return [buildExpoDiagnostic({
+		rule: "expo-lockfile",
+		message: `Multiple lock files detected (${presentLockfiles.join(", ")}) — CI environments such as EAS Build infer the package manager from the lock file, so this is ambiguous`,
+		help: "Delete the lock files for the package managers you are not using and keep only one"
+	})];
+	return [];
+};
+const METRO_CONFIG_FILE_NAMES = [
+	"metro.config.js",
+	"metro.config.cjs",
+	"metro.config.mjs",
+	"metro.config.ts"
+];
+const EXPO_METRO_CONFIG_EXTEND_SIGNALS = [
+	"expo/metro-config",
+	"@sentry/react-native/metro",
+	"getSentryExpoConfig"
+];
+const checkExpoMetroConfig = (context) => {
+	const metroConfigPath = METRO_CONFIG_FILE_NAMES.map((fileName) => path.join(context.rootDirectory, fileName)).find((candidatePath) => isFile(candidatePath));
+	if (metroConfigPath === void 0) return [];
+	let contents;
+	try {
+		contents = fs.readFileSync(metroConfigPath, "utf-8");
+	} catch {
+		return [];
+	}
+	if (EXPO_METRO_CONFIG_EXTEND_SIGNALS.some((signal) => contents.includes(signal))) return [];
+	return [buildExpoDiagnostic({
+		rule: "expo-metro-config",
+		filePath: path.basename(metroConfigPath),
+		message: "Your metro.config does not extend `expo/metro-config` — a custom Metro config that doesn't extend Expo's leads to unexpected, hard-to-debug bundling issues",
+		help: "Update your metro config to extend `expo/metro-config`. See https://docs.expo.dev/guides/customizing-metro/"
+	})];
+};
+const CONFLICTING_SCRIPT_NAMES = ["expo", "react-native"];
+const checkExpoPackageJsonConflicts = (context) => {
+	const { packageJson } = context;
+	const diagnostics = [];
+	const conflictingScriptNames = CONFLICTING_SCRIPT_NAMES.filter((scriptName) => Boolean(packageJson.scripts?.[scriptName]));
+	if (conflictingScriptNames.length > 0) {
+		const quotedNames = conflictingScriptNames.map((name) => `"${name}"`).join(", ");
+		const shadowsExpoCli = conflictingScriptNames.includes("expo");
+		diagnostics.push(buildExpoDiagnostic({
+			rule: "expo-package-json-conflict",
+			message: `package.json defines ${quotedNames} ${conflictingScriptNames.length === 1 ? "as a script that conflicts" : "as scripts that conflict"} with binaries in node_modules/.bin${shadowsExpoCli ? " — a `expo` script shadows the Expo CLI and will likely cause build failures" : ""}`,
+			help: "Rename these scripts so they don't collide with the `expo` / `react-native` binaries"
+		}));
+	}
+	const packageName = packageJson.name;
+	if (typeof packageName === "string" && context.directDependencyNames.has(packageName)) diagnostics.push(buildExpoDiagnostic({
+		rule: "expo-package-json-conflict",
+		message: `package.json "name" is "${packageName}", which collides with a dependency of the same name`,
+		help: "Rename your package so it no longer matches one of its dependencies"
+	}));
+	return diagnostics;
+};
+const EXPO_ROUTER_REACT_NAVIGATION_MIN_SDK_MAJOR = 56;
+const EXPO_ROUTER_REACT_NAVIGATION_MAX_SDK_MAJOR_EXCLUSIVE = 57;
+const checkExpoRouterReactNavigation = (context) => {
+	const { expoSdkMajor } = context;
+	if (!isExpoSdkAtLeast(expoSdkMajor, EXPO_ROUTER_REACT_NAVIGATION_MIN_SDK_MAJOR)) return [];
+	if (expoSdkMajor !== null && expoSdkMajor >= EXPO_ROUTER_REACT_NAVIGATION_MAX_SDK_MAJOR_EXCLUSIVE) return [];
+	if (!context.directDependencyNames.has("expo-router")) return [];
+	const reactNavigationNames = [...context.directDependencyNames].filter((packageName) => packageName.startsWith("@react-navigation/")).sort();
+	if (reactNavigationNames.length === 0) return [];
+	return [buildExpoDiagnostic({
+		rule: "expo-router-no-react-navigation",
+		message: `As of SDK 56, expo-router is no longer compatible with react-navigation, but ${reactNavigationNames.map((name) => `"${name}"`).join(", ")} ${reactNavigationNames.length === 1 ? "is" : "are"} installed as direct ${reactNavigationNames.length === 1 ? "dependency" : "dependencies"}`,
+		help: "Remove these `@react-navigation/*` packages and replace direct imports with their expo-router equivalents. See https://docs.expo.dev/router/migrate/sdk-55-to-56/"
+	})];
+};
+const VECTOR_ICONS_MIN_SDK_MAJOR = 56;
+const SCOPED_VECTOR_ICONS_NAMESPACE = "@react-native-vector-icons/";
+const CONFLICTING_VECTOR_ICONS_PACKAGES = ["@expo/vector-icons", "react-native-vector-icons"];
+const checkExpoVectorIcons = (context) => {
+	if (!isExpoSdkAtLeast(context.expoSdkMajor, VECTOR_ICONS_MIN_SDK_MAJOR)) return [];
+	const hasScopedPackage = [...context.directDependencyNames].some((packageName) => packageName.startsWith(SCOPED_VECTOR_ICONS_NAMESPACE));
+	const hasConflictingPackage = CONFLICTING_VECTOR_ICONS_PACKAGES.some((packageName) => context.directDependencyNames.has(packageName));
+	if (!hasScopedPackage || !hasConflictingPackage) return [];
+	return [buildExpoDiagnostic({
+		rule: "expo-vector-icons-conflict",
+		message: "This project installs both the scoped `@react-native-vector-icons/*` packages and `@expo/vector-icons` (or the deprecated `react-native-vector-icons`) — mixing them causes icon-rendering conflicts",
+		help: "Migrate to the scoped packages by running `npx @react-native-vector-icons/codemod`, then remove the conflicting package"
+	})];
+};
+const checkExpoProject = (rootDirectory, project) => {
+	if (project.expoVersion === null) return [];
+	const context = buildExpoCheckContext(rootDirectory, project.expoVersion);
+	return [
+		...checkExpoFlaggedDependencies(context),
+		...checkExpoDependencyOverrides(context),
+		...checkExpoRouterReactNavigation(context),
+		...checkExpoVectorIcons(context),
+		...checkExpoPackageJsonConflicts(context),
+		...checkExpoLockfile(context),
+		...checkExpoGitignore(context),
+		...checkExpoEnvLocalFiles(context),
+		...checkExpoMetroConfig(context)
+	];
+};
 const PNPM_WORKSPACE_FILE = "pnpm-workspace.yaml";
 const PNPM_LOCKFILE = "pnpm-lock.yaml";
 const PACKAGE_JSON_FILE = "package.json";
@@ -4711,6 +5221,28 @@ const collectIgnorePatterns = (rootDirectory) => {
 	cachedPatternsByRoot.set(rootDirectory, patterns);
 	return patterns;
 };
+/**
+* Resolves a path to its canonical, symlink-free form, falling back to
+* the input when it cannot be realpath'd (broken symlink, permission
+* error) so a best-effort normalization never throws.
+*
+* deslop's dead-code module graph is collected with `fast-glob` (which
+* keeps the scan root's symlinks intact) while imports are resolved
+* through `oxc-resolver` (which returns realpath'd targets). When the
+* project root sits behind a symlink — e.g. macOS iCloud-synced
+* `~/Documents` / `~/Desktop`, or a symlinked checkout — those two path
+* spaces diverge: every resolved import misses the graph and the files
+* they point at (commonly every `@/…` alias target) are mis-reported as
+* unreachable. Canonicalizing the root before the scan keeps both path
+* spaces in agreement.
+*/
+const toCanonicalPath = (filePath) => {
+	try {
+		return fs.realpathSync(filePath);
+	} catch {
+		return filePath;
+	}
+};
 const DEAD_CODE_PLUGIN = "deslop";
 const DEAD_CODE_CATEGORY = "Maintainability";
 const TSCONFIG_FILENAMES$1 = ["tsconfig.json", "tsconfig.base.json"];
@@ -4967,7 +5499,8 @@ const runDeadCodeWorkerWithTimeout = (handle, timeoutMs) => new Promise((resolve
 	});
 });
 const checkDeadCode = async (options) => {
-	const { rootDirectory, userConfig } = options;
+	const { userConfig } = options;
+	const rootDirectory = toCanonicalPath(options.rootDirectory);
 	if (!fs.existsSync(path.join(rootDirectory, "package.json"))) return [];
 	const ignorePatterns = collectDeadCodeIgnorePatterns(rootDirectory, userConfig);
 	const result = parseDeadCodeWorkerResult(await runDeadCodeWorkerWithTimeout((options.createWorker ?? createDeadCodeWorker)({
@@ -5718,6 +6251,7 @@ const buildCapabilities = (project) => {
 	const capabilities = /* @__PURE__ */ new Set();
 	capabilities.add(project.framework);
 	if (project.framework === "expo" || project.framework === "react-native" || project.hasReactNativeWorkspace) capabilities.add("react-native");
+	if (project.expoVersion !== null) capabilities.add("expo");
 	const reactMajor = project.reactMajorVersion;
 	if (reactMajor !== null) {
 		const cappedReactMajor = Math.min(reactMajor, 30);
@@ -5889,10 +6423,14 @@ const resolveSettingsRootDirectory = (rootDirectory) => {
 	if (!fs.existsSync(rootDirectory)) return rootDirectory;
 	return fs.realpathSync(rootDirectory);
 };
+const resolveCompilerCleanupBucketSeverity = (ruleKey, severityControls) => {
+	if (!COMPILER_CLEANUP_RULE_KEYS.has(ruleKey)) return void 0;
+	return severityControls?.buckets?.[COMPILER_CLEANUP_BUCKET];
+};
 const applyRuleSeverityControls = (rules, severityControls) => {
 	const enabledRules = {};
 	for (const [ruleKey, defaultSeverity] of Object.entries(rules)) {
-		const severity = resolveRuleSeverityOverride({ ruleKey }, severityControls) ?? defaultSeverity;
+		const severity = resolveRuleSeverityOverride({ ruleKey }, severityControls) ?? resolveCompilerCleanupBucketSeverity(ruleKey, severityControls) ?? defaultSeverity;
 		if (severity === "off") continue;
 		enabledRules[ruleKey] = severity;
 	}
@@ -5934,7 +6472,7 @@ const createOxlintConfig = ({ pluginPath, project, customRulesOnly = false, exte
 			category: rule.category
 		}, severityControls);
 		if (rule.defaultEnabled === false && explicitSeverity === void 0) continue;
-		const severity = explicitSeverity ?? rule.severity;
+		const severity = explicitSeverity ?? resolveCompilerCleanupBucketSeverity(registryEntry.key, severityControls) ?? rule.severity;
 		if (severity === "off") continue;
 		enabledReactDoctorRules[registryEntry.key] = severity;
 	}
@@ -5991,6 +6529,44 @@ const dedupeDiagnostics = (diagnostics) => {
 	}
 	return uniqueDiagnostics;
 };
+/**
+* Runs `task` over `items` with at most `concurrency` tasks in flight at
+* once, returning results in input order. A pool of workers each pulls the
+* next not-yet-started index until the list drains — so a worker that
+* finishes a fast task immediately picks up the next one (greedy load
+* balancing), which matters when tasks have uneven durations (oxlint
+* batches do).
+*
+* Failure semantics mirror a bounded `Promise.all`: on the first rejection
+* no further tasks are started, the already-in-flight tasks are awaited to
+* settle (so no subprocess is orphaned mid-write), and the returned promise
+* rejects with that first error. This keeps the caller's fail-fast retry
+* path (e.g. oxlint's retry-without-extends) from spawning a second wave on
+* top of a still-running first one.
+*/
+const mapWithConcurrency = async (items, concurrency, task) => {
+	const results = new Array(items.length);
+	if (items.length === 0) return results;
+	const workerCount = Math.min(Math.max(1, Math.floor(concurrency) || 1), items.length);
+	let nextIndex = 0;
+	const errors = [];
+	const runWorker = async () => {
+		while (errors.length === 0) {
+			const index = nextIndex;
+			nextIndex += 1;
+			if (index >= items.length) return;
+			try {
+				results[index] = await task(items[index], index);
+			} catch (error) {
+				errors.push(error);
+				return;
+			}
+		}
+	};
+	await Promise.all(Array.from({ length: workerCount }, runWorker));
+	if (errors.length > 0) throw errors[0];
+	return results;
+};
 const getPublicEnvPrefix = (framework) => {
 	switch (framework) {
 		case "nextjs": return "NEXT_PUBLIC_*";
@@ -6673,6 +7249,7 @@ const spawnOxlint = (args, rootDirectory, nodeBinaryPath, spawnTimeoutMs = OXLIN
 */
 const spawnLintBatches = async (input) => {
 	const { baseArgs, fileBatches, rootDirectory, nodeBinaryPath, project, onPartialFailure, onFileProgress, spawnTimeoutMs, outputMaxBytes } = input;
+	const concurrency = resolveScanConcurrency(input.concurrency ?? 1);
 	const totalFileCount = fileBatches.reduce((sum, batch) => sum + batch.length, 0);
 	const allDiagnostics = [];
 	const droppedFiles = [];
@@ -6692,23 +7269,31 @@ const spawnLintBatches = async (input) => {
 			return [...await spawnLintBatch(batch.slice(0, splitIndex)), ...await spawnLintBatch(batch.slice(splitIndex))];
 		}
 	};
+	let startedFileCount = 0;
 	let scannedFileCount = 0;
-	for (const batch of fileBatches) {
-		let batchFileIndex = 0;
-		const progressInterval = onFileProgress && batch.length > 1 ? setInterval(() => {
-			if (batchFileIndex < batch.length) {
-				batchFileIndex += 1;
-				onFileProgress(scannedFileCount + batchFileIndex, totalFileCount);
-			}
-		}, 50) : null;
-		try {
+	let displayedFileCount = 0;
+	const progressTimer = onFileProgress && totalFileCount > 1 ? setInterval(() => {
+		const ceiling = Math.min(startedFileCount, totalFileCount - 1);
+		if (displayedFileCount < ceiling) {
+			displayedFileCount += 1;
+			onFileProgress(displayedFileCount, totalFileCount);
+		}
+	}, 50) : null;
+	progressTimer?.unref?.();
+	try {
+		const batchResults = await mapWithConcurrency(fileBatches, concurrency, async (batch) => {
+			startedFileCount += batch.length;
 			const batchDiagnostics = await spawnLintBatch(batch);
-			allDiagnostics.push(...batchDiagnostics);
 			scannedFileCount += batch.length;
-			onFileProgress?.(scannedFileCount, totalFileCount);
-		} finally {
-			if (progressInterval !== null) clearInterval(progressInterval);
-		}
+			if (onFileProgress) {
+				displayedFileCount = Math.min(Math.max(displayedFileCount, scannedFileCount), totalFileCount);
+				onFileProgress(displayedFileCount, totalFileCount);
+			}
+			return batchDiagnostics;
+		});
+		for (const batchDiagnostics of batchResults) allDiagnostics.push(...batchDiagnostics);
+	} finally {
+		if (progressTimer !== null) clearInterval(progressTimer);
 	}
 	if (droppedFiles.length > 0 && onPartialFailure) {
 		const previewFiles = droppedFiles.slice(0, 3).join(", ");
@@ -6835,7 +7420,8 @@ const runOxlint = async (options) => {
 			onPartialFailure,
 			onFileProgress: options.onFileProgress,
 			spawnTimeoutMs,
-			outputMaxBytes
+			outputMaxBytes,
+			concurrency: options.concurrency
 		});
 		writeOxlintConfig(configPath, buildConfig(extendsPaths));
 		try {
@@ -6903,6 +7489,7 @@ var Linter = class Linter extends Context.Service()("react-doctor/Linter") {
 		const partialFailures = yield* LintPartialFailures;
 		const spawnTimeoutMs = yield* OxlintSpawnTimeoutMs;
 		const outputMaxBytes = yield* OxlintOutputMaxBytes;
+		const concurrency = yield* OxlintConcurrency;
 		const collectedFailures = [];
 		const diagnostics = yield* Effect.tryPromise({
 			try: () => runOxlint({
@@ -6921,7 +7508,8 @@ var Linter = class Linter extends Context.Service()("react-doctor/Linter") {
 				},
 				onFileProgress: input.onFileProgress,
 				spawnTimeoutMs,
-				outputMaxBytes
+				outputMaxBytes,
+				concurrency
 			}),
 			catch: ensureReactDoctorError
 		});
@@ -7254,7 +7842,11 @@ const runInspect = (input, hooks = {}) => Effect.gen(function* () {
 		showWarnings
 	});
 	const applyPerElementPipeline = (rawStream) => rawStream.pipe(Stream.filterMap(filterMapNullable(transform.apply)), Stream.tap((diagnostic) => reporterService.emit(diagnostic)));
-	const environmentDiagnostics = isDiffMode ? [] : [...checkReducedMotion(scanDirectory), ...checkPnpmHardening(scanDirectory)];
+	const environmentDiagnostics = isDiffMode ? [] : [
+		...checkReducedMotion(scanDirectory),
+		...checkPnpmHardening(scanDirectory),
+		...checkExpoProject(scanDirectory, project)
+	];
 	const envCollected = yield* Stream.runCollect(applyPerElementPipeline(Stream.fromIterable(environmentDiagnostics)));
 	const lintFailure = yield* Ref.make({
 		didFail: false,
@@ -7266,6 +7858,8 @@ const runInspect = (input, hooks = {}) => Effect.gen(function* () {
 		didFail: false,
 		reason: null
 	});
+	const scanConcurrency = yield* OxlintConcurrency;
+	const workerCountSuffix = scanConcurrency > 1 ? ` · ${scanConcurrency} workers` : "";
 	const scanProgress = yield* progressService.start("Scanning...");
 	const scanStartTime = Date.now();
 	let lastReportedTotalFileCount = 0;
@@ -7282,7 +7876,7 @@ const runInspect = (input, hooks = {}) => Effect.gen(function* () {
 		configSourceDirectory: resolvedConfig.configSourceDirectory ?? void 0,
 		onFileProgress: (scannedFileCount, totalFileCount) => {
 			lastReportedTotalFileCount = totalFileCount;
-			Effect.runSync(scanProgress.update(`Scanning files (${scannedFileCount}/${totalFileCount})...`));
+			Effect.runSync(scanProgress.update(`Scanning files (${scannedFileCount}/${totalFileCount})${workerCountSuffix}...`));
 		}
 	}).pipe(Stream.catchTag("ReactDoctorError", (error) => Stream.unwrap(Effect.gen(function* () {
 		yield* Ref.set(lintFailure, {
@@ -7314,7 +7908,7 @@ const runInspect = (input, hooks = {}) => Effect.gen(function* () {
 	const totalFileCount = lastReportedTotalFileCount || (lintIncludePaths?.length ?? project.sourceFileCount);
 	if (!lintFailureState.didFail) if (deadCodeFailureState.didFail) yield* scanProgress.fail(DEAD_CODE_FAIL_TEXT);
 	else if (input.suppressScanSummary) yield* scanProgress.stop();
-	else yield* scanProgress.succeed(`Scanned ${totalFileCount} ${totalFileCount === 1 ? "file" : "files"} in ${scanElapsedSeconds}s`);
+	else yield* scanProgress.succeed(`Scanned ${totalFileCount} ${totalFileCount === 1 ? "file" : "files"} in ${scanElapsedSeconds}s${workerCountSuffix}`);
 	yield* reporterService.finalize;
 	const finalDiagnostics = [
 		...envCollected,
@@ -7366,7 +7960,6 @@ const runInspect = (input, hooks = {}) => Effect.gen(function* () {
 	"inspect.isCi": input.isCi,
 	"inspect.scoreSurface": input.scoreSurface ?? "score"
 } }));
-Layer.mergeAll(Project.layerNode, Config.layerNode, DeadCode.layerNode, Files.layerNode, Git.layerNode, Linter.layerOxlint, LintPartialFailures.layerLive, Progress.layerNoop, Reporter.layerNoop, Score.layerHttp);
 const parseNodeVersion = (versionString) => {
 	const [major = 0, minor = 0, patch = 0] = versionString.replace(/^v/, "").trim().split(".").map(Number);
 	return {
@@ -7665,6 +8258,26 @@ const buildJsonReport = (input) => {
 	};
 };
 /**
+* Single source of truth for the skipped-check accounting shared by the
+* CLI renderer (`react-doctor/src/inspect.ts → finalizeAndRender`) and the
+* programmatic shell (`@react-doctor/api → diagnose()`). Both surface a
+* failed lint / dead-code pass instead of a false "all clear", so the
+* branch logic lives here once.
+*/
+const buildSkippedChecks = (input) => {
+	const skippedChecks = [];
+	if (input.didLintFail) skippedChecks.push("lint");
+	if (input.didDeadCodeFail) skippedChecks.push("dead-code");
+	const skippedCheckReasons = {};
+	if (input.didLintFail && input.lintFailureReason !== null) skippedCheckReasons.lint = input.lintFailureReason;
+	else if (input.lintPartialFailures.length > 0) skippedCheckReasons["lint:partial"] = input.lintPartialFailures.join("; ");
+	if (input.didDeadCodeFail && input.deadCodeFailureReason !== null) skippedCheckReasons["dead-code"] = input.deadCodeFailureReason;
+	return {
+		skippedChecks,
+		skippedCheckReasons
+	};
+};
+/**
 * Programmatic façade over `Git.diffSelection`. Async because the
 * Git service runs through Effect's `ChildProcess` (true subprocess
 * spawn, not `spawnSync`).
@@ -7770,7 +8383,7 @@ import_picocolors.default.red, import_picocolors.default.yellow, import_picocolo
 const clearAutoSuppressionCaches = () => {};
 //#endregion
 //#region ../api/dist/index.js
-const DEFAULT_LAYER = Layer.mergeAll(Project.layerNode, Config.layerNode, DeadCode.layerNode, Files.layerNode, Git.layerNode, Linter.layerOxlint, LintPartialFailures.layerLive, Progress.layerNoop, Reporter.layerNoop, Score.layerHttp);
+const buildDiagnoseLayer = (configLayer = Config.layerNode) => Layer.mergeAll(Project.layerNode, configLayer, DeadCode.layerNode, Files.layerNode, Git.layerNode, Linter.layerOxlint, LintPartialFailures.layerLive, Progress.layerNoop, Reporter.layerNoop, Score.layerHttp);
 const buildInspectProgram = (scanTarget, options, configOverride) => {
 	const effectiveConfig = configOverride ?? scanTarget.userConfig;
 	const includePaths = options.includePaths ?? [];
@@ -7789,13 +8402,7 @@ const buildInspectProgram = (scanTarget, options, configOverride) => {
 };
 const outputToDiagnoseResult = (output, elapsedMilliseconds) => {
 	if (output.didLintFail && output.lintFailureReason !== null) console.error("Lint failed:", output.lintFailureReason);
-	const skippedChecks = [];
-	if (output.didLintFail) skippedChecks.push("lint");
-	if (output.didDeadCodeFail) skippedChecks.push("dead-code");
-	const skippedCheckReasons = {};
-	if (output.didLintFail && output.lintFailureReason !== null) skippedCheckReasons.lint = output.lintFailureReason;
-	else if (output.lintPartialFailures.length > 0) skippedCheckReasons["lint:partial"] = output.lintPartialFailures.join("; ");
-	if (output.didDeadCodeFail && output.deadCodeFailureReason !== null) skippedCheckReasons["dead-code"] = output.deadCodeFailureReason;
+	const { skippedChecks, skippedCheckReasons } = buildSkippedChecks(output);
 	return {
 		diagnostics: [...output.diagnostics],
 		score: output.score,
@@ -7808,7 +8415,7 @@ const outputToDiagnoseResult = (output, elapsedMilliseconds) => {
 const diagnose = async (directory, options = {}) => {
 	const startTime = globalThis.performance.now();
 	const program = buildInspectProgram(resolveScanTarget(directory), options);
-	return outputToDiagnoseResult(await Effect.runPromise(restoreLegacyThrow(program.pipe(Effect.provide(DEFAULT_LAYER), Effect.provide(layerOtlp)))), globalThis.performance.now() - startTime);
+	return outputToDiagnoseResult(await Effect.runPromise(restoreLegacyThrow(program.pipe(Effect.provide(buildDiagnoseLayer()), Effect.provide(layerOtlp)))), globalThis.performance.now() - startTime);
 };
 //#endregion
 //#region src/index.ts
@@ -7817,6 +8424,7 @@ const clearCaches = () => {
 	clearConfigCache();
 	clearPackageJsonCache();
 	clearIgnorePatternsCache();
+	clearPackageRoleCache();
 	clearAutoSuppressionCaches();
 };
 const toJsonReport = (result, options) => buildJsonReport({