react-doctor 0.5.8-dev.80e3093 → 0.5.8-dev.8232e96

package/dist/index.js

@@ -1,5 +1,5 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="83529d8f-2ca3-50ba-a3b9-44622f913549")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="62cf4740-7938-5db0-8b80-dc81b60af36a")}catch(e){}}();
 import { r as __toESM$1, t as __commonJSMin$1 } from "./chunk-N93fKeF6.js";
 import { createRequire } from "node:module";
 import * as NFS from "node:fs";
@@ -19364,6 +19364,15 @@ var JsonReportV1 = class extends Class("JsonReportV1")({
 	ok: Boolean$1,
 	directory: String$1,
 	mode: JsonReportMode,
+	/**
+	* True when a `changed` (compare) run was intended but the base couldn't be
+	* resolved — a shallow CI checkout with no merge base, or a failed base/head
+	* lint. The report then lists every finding in the changed files (mode
+	* downgrades to `diff`, the `baseline` block is dropped, the CI gate is
+	* skipped) rather than only the ones the change introduced. Absent on a
+	* successful `baseline` run (`schemaVersion: 2`) and on non-compare scopes.
+	*/
+	baselineDegraded: optional(Boolean$1),
 	diff: NullOr(JsonReportDiffInfo),
 	projects: ArraySchema(JsonReportProjectEntry),
 	diagnostics: ArraySchema(Diagnostic),
@@ -32780,12 +32789,31 @@ const GENERATED_BUNDLE_FILE_PATTERN = /\.(iife|umd|global|min)\.m?js$/i;
 const MINIFIED_SNIFF_BYTES = 65536;
 const GIT_LS_FILES_MAX_BUFFER_BYTES = 50 * 1024 * 1024;
 const IGNORED_DIRECTORIES = new Set([
+	".angular",
+	".astro",
+	".cache",
+	".contentlayer",
+	".direnv",
+	".docusaurus",
+	".expo",
+	".firebase",
 	".git",
+	".gradle",
+	".hg",
 	".next",
 	".nuxt",
+	".nx",
 	".output",
+	".parcel-cache",
+	".serverless",
 	".svelte-kit",
+	".svn",
+	".terraform",
 	".turbo",
+	".venv",
+	".vercel",
+	".wrangler",
+	".yarn",
 	"build",
 	"coverage",
 	"dist",
@@ -32793,6 +32821,119 @@ const IGNORED_DIRECTORIES = new Set([
 	"out",
 	"storybook-static"
 ]);
+const JSX_FILE_PATTERN = /\.(tsx|jsx)$/;
+const MILLISECONDS_PER_SECOND = 1e3;
+const SCORE_API_URL = "https://www.react.doctor/api/score";
+const FETCH_TIMEOUT_MS = 1e4;
+const GITHUB_VIEWER_PERMISSION_TIMEOUT_MS = 2e3;
+const SPAWN_ARGS_MAX_LENGTH_CHARS = 24e3;
+const SPAWN_ARGS_MAX_LENGTH_CHARS_POSIX = 15e5;
+const SPAWN_ARGS_MAX_LENGTH_CHARS_DARWIN = 8e5;
+const NODE_VERSION_PROBE_TIMEOUT_MS = 5e3;
+const PER_WORKER_MEM_BUDGET_BYTES = 1024 * 1024 * 1024;
+const DEFAULT_BRANCH_CANDIDATES = ["main", "master"];
+const ADOPTABLE_LINT_CONFIG_FILENAMES = [".oxlintrc.json", ".eslintrc.json"];
+const GIT_SHOW_MAX_BUFFER_BYTES = 10 * 1024 * 1024;
+const ES_TARGET_YEAR_BY_NAME = {
+	es3: 1999,
+	es5: 2009,
+	es6: 2015,
+	es2015: 2015,
+	es2016: 2016,
+	es2017: 2017,
+	es2018: 2018,
+	es2019: 2019,
+	es2020: 2020,
+	es2021: 2021,
+	es2022: 2022,
+	es2023: 2023,
+	es2024: 2024,
+	es2025: 2025,
+	esnext: 9999
+};
+/**
+* tsconfig filenames probed when resolving a project's TypeScript
+* compiler options — the root config first, then a monorepo base config.
+*/
+const TSCONFIG_FILENAMES = ["tsconfig.json", "tsconfig.base.json"];
+/**
+* Project-config files that `StagedFiles.materialize` copies into
+* the temp directory alongside staged sources so oxlint resolves
+* `tsconfig` / `package.json` / lint configs the same way it would
+* in the working tree. Hoisted out of the staged-files helper so
+* the constant lives next to the rest of the IO budget knobs.
+*/
+const STAGED_FILES_PROJECT_CONFIG_FILENAMES = [
+	"tsconfig.json",
+	"tsconfig.base.json",
+	"package.json",
+	"doctor.config.ts",
+	"doctor.config.mts",
+	"doctor.config.cts",
+	"doctor.config.js",
+	"doctor.config.mjs",
+	"doctor.config.cjs",
+	"doctor.config.json",
+	"doctor.config.jsonc",
+	"oxlint.json",
+	".oxlintrc.json"
+];
+const OXLINT_OUTPUT_MAX_BYTES = 50 * 1024 * 1024;
+const OXLINT_SPAWN_TIMEOUT_MS = 6e4;
+const NODE_COMPILE_CACHE_DIR_NAME = "node-compile-cache";
+const DEAD_CODE_WORKER_TIMEOUT_MS = 12e4;
+const OXLINT_SPLIT_TOTAL_BUDGET_MS = 18e4;
+const DEAD_CODE_PHASE_TIMEOUT_MS = 15e4;
+const LINT_PHASE_TIMEOUT_MS = 3e5;
+const SCAN_TOTAL_DEADLINE_MS = 9e5;
+const DEAD_CODE_WORKER_MAX_OLD_SPACE_MB = 8192;
+const DEAD_CODE_WORKER_MEM_BUDGET_BYTES = 2 * 1024 * 1024 * 1024;
+const DEAD_CODE_TIMEOUT_CEILING_MS = 6e5;
+const DEAD_CODE_PHASE_TIMEOUT_OVER_WORKER_MS = 3e4;
+const DEAD_CODE_OVERLAP_PARSE_SHARE = .4;
+const RECOMMENDED_PNPM_MINIMUM_RELEASE_AGE_MINUTES = 10080;
+const REACT_SERVER_DOM_PACKAGES = [
+	"react-server-dom-webpack",
+	"react-server-dom-parcel",
+	"react-server-dom-turbopack"
+];
+const REACT_BLOG_RSC_ADVISORY_URL = "https://react.dev/blog/2025/12/03/critical-security-vulnerability-in-react-server-components";
+const VERCEL_NEXTJS_SECURITY_RELEASE_URL = "https://vercel.com/changelog/next-js-may-2026-security-release";
+const DIAGNOSTIC_CATEGORY_BUCKETS = [
+	"Security",
+	"Bugs",
+	"Performance",
+	"Accessibility",
+	"Maintainability"
+];
+const APP_ONLY_RULE_KEYS = new Set([
+	"react-hooks-js/static-components",
+	"react-doctor/no-render-prop-children",
+	"react-doctor/prefer-explicit-variants"
+]);
+const COMPILER_CLEANUP_BUCKET = "compiler-cleanup";
+const COMPILER_CLEANUP_RULE_KEYS = new Set(["react-doctor/react-compiler-no-manual-memoization"]);
+const ROOT_CAUSE_GROUPABLE_RULE_KEYS = new Set([
+	"react-doctor/no-derived-state",
+	"react-doctor/no-derived-state-effect",
+	"react-doctor/no-derived-useState",
+	"react-doctor/no-adjust-state-on-prop-change",
+	"react-doctor/no-reset-all-state-on-prop-change"
+]);
+const MAX_GLOB_PATTERN_LENGTH_CHARS = 1024;
+const CONFIG_CACHE_TTL_MS = 300 * 1e3;
+const SOCKET_FREE_PURL_API_BASE = "https://firewall-api.socket.dev/purl";
+const SOCKET_PACKAGE_PAGE_BASE = "https://socket.dev/npm/package";
+const SOCKET_FREE_USER_AGENT = "react-doctor-supply-chain";
+const FILE_LINT_CACHE_FILENAME = "file-lint-cache.json";
+const FILE_LINT_CACHE_MAX_FILE_COUNT = 5e4;
+const SUPPLY_CHAIN_PLUGIN = "socket";
+const SUPPLY_CHAIN_RULE = "low-supply-chain-score";
+const SUPPLY_CHAIN_CATEGORY = "Security";
+const SUPPLY_CHAIN_OVERLAP_TIMEOUT_MS = 9e4;
+const SUPPLY_CHAIN_CACHE_SUBDIR = "supply-chain";
+const SUPPLY_CHAIN_IGNORED_PACKAGES = new Set(["next"]);
+const hasIgnoredPathSegment = (relativePath) => relativePath.split(/[/\\]/).slice(0, -1).some((segment) => IGNORED_DIRECTORIES.has(segment));
 const isLintableSourceFile = (filePath) => SOURCE_FILE_PATTERN.test(filePath) && !GENERATED_BUNDLE_FILE_PATTERN.test(filePath);
 const isMinifiedSource = (absolutePath) => {
 	let fileDescriptor;
@@ -32849,23 +32990,38 @@ const readDirectoryEntries = (directoryPath) => {
 		throw error;
 	}
 };
-const countSourceFilesViaFilesystem = (rootDirectory) => {
-	let count = 0;
+function* walkSourceTreeFiles(rootDirectory) {
 	const stack = [rootDirectory];
 	while (stack.length > 0) {
 		const currentDirectory = stack.pop();
-		const entries = readDirectoryEntries(currentDirectory);
-		for (const entry of entries) {
+		if (currentDirectory === void 0) continue;
+		for (const entry of readDirectoryEntries(currentDirectory)) {
+			const absolutePath = Path.join(currentDirectory, entry.name);
 			if (entry.isDirectory()) {
-				if (!entry.name.startsWith(".") && !IGNORED_DIRECTORIES.has(entry.name)) stack.push(Path.join(currentDirectory, entry.name));
+				if (!IGNORED_DIRECTORIES.has(entry.name)) stack.push(absolutePath);
 				continue;
 			}
-			if (entry.isFile() && isLintableSourceFile(entry.name) && !isLargeMinifiedFile(Path.join(currentDirectory, entry.name))) count++;
+			if (entry.isFile()) yield {
+				absolutePath,
+				name: entry.name
+			};
 		}
 	}
-	return count;
+}
+const collectSizedSourceFiles = (rootDirectory, relativePaths) => {
+	const entries = [];
+	for (const relativePath of relativePaths) {
+		const absolutePath = Path.resolve(rootDirectory, relativePath);
+		const sizeBytes = statSourceFileSize(absolutePath);
+		if (isLargeMinifiedFile(absolutePath, sizeBytes)) continue;
+		entries.push({
+			path: relativePath,
+			sizeBytes: sizeBytes ?? 0
+		});
+	}
+	return entries;
 };
-const countSourceFilesViaGit = (rootDirectory) => {
+const listSourceFilesViaGit = (rootDirectory) => {
 	const result = spawnSync("git", [
 		"ls-files",
 		"-z",
@@ -32878,9 +33034,16 @@ const countSourceFilesViaGit = (rootDirectory) => {
 		maxBuffer: GIT_LS_FILES_MAX_BUFFER_BYTES
 	});
 	if (result.error || result.status !== 0) return null;
-	return result.stdout.split("\0").filter((filePath) => filePath.length > 0 && isLintableSourceFile(filePath) && !isLargeMinifiedFile(Path.resolve(rootDirectory, filePath))).length;
+	return result.stdout.split("\0").filter((filePath) => filePath.length > 0 && isLintableSourceFile(filePath) && !hasIgnoredPathSegment(filePath));
 };
-const countSourceFiles = (rootDirectory) => countSourceFilesViaGit(rootDirectory) ?? countSourceFilesViaFilesystem(rootDirectory);
+const listSourceFilesViaFilesystem = (rootDirectory) => {
+	const filePaths = [];
+	for (const { absolutePath, name } of walkSourceTreeFiles(rootDirectory)) if (isLintableSourceFile(name)) filePaths.push(Path.relative(rootDirectory, absolutePath).replace(/\\/g, "/"));
+	return filePaths;
+};
+const listSourceFilesWithSize = (rootDirectory) => collectSizedSourceFiles(rootDirectory, (listSourceFilesViaGit(rootDirectory) ?? listSourceFilesViaFilesystem(rootDirectory)).sort());
+const listSourceFiles = (rootDirectory) => listSourceFilesWithSize(rootDirectory).map((entry) => entry.path);
+const countSourceFiles = (rootDirectory) => listSourceFilesWithSize(rootDirectory).length;
 const cachedPackageJsons = /* @__PURE__ */ new Map();
 const clearPackageJsonCache = () => {
 	cachedPackageJsons.clear();
@@ -33689,118 +33852,6 @@ const resolveEffectiveReactMajor = (reactVersion, packageJson) => {
 	if (peerFloor === null) return hasUpperBoundOnlyPeerRange(peerReactRange) ? null : installedReactMajor;
 	return installedReactMajor !== null ? Math.min(installedReactMajor, peerFloor) : peerFloor;
 };
-const JSX_FILE_PATTERN = /\.(tsx|jsx)$/;
-const MILLISECONDS_PER_SECOND = 1e3;
-const SCORE_API_URL = "https://www.react.doctor/api/score";
-const FETCH_TIMEOUT_MS = 1e4;
-const GITHUB_VIEWER_PERMISSION_TIMEOUT_MS = 2e3;
-const SPAWN_ARGS_MAX_LENGTH_CHARS = 24e3;
-const SPAWN_ARGS_MAX_LENGTH_CHARS_POSIX = 15e5;
-const SPAWN_ARGS_MAX_LENGTH_CHARS_DARWIN = 8e5;
-const NODE_VERSION_PROBE_TIMEOUT_MS = 5e3;
-const PER_WORKER_MEM_BUDGET_BYTES = 1024 * 1024 * 1024;
-const DEFAULT_BRANCH_CANDIDATES = ["main", "master"];
-const ADOPTABLE_LINT_CONFIG_FILENAMES = [".oxlintrc.json", ".eslintrc.json"];
-const GIT_SHOW_MAX_BUFFER_BYTES = 10 * 1024 * 1024;
-const ES_TARGET_YEAR_BY_NAME = {
-	es3: 1999,
-	es5: 2009,
-	es6: 2015,
-	es2015: 2015,
-	es2016: 2016,
-	es2017: 2017,
-	es2018: 2018,
-	es2019: 2019,
-	es2020: 2020,
-	es2021: 2021,
-	es2022: 2022,
-	es2023: 2023,
-	es2024: 2024,
-	es2025: 2025,
-	esnext: 9999
-};
-/**
-* tsconfig filenames probed when resolving a project's TypeScript
-* compiler options — the root config first, then a monorepo base config.
-*/
-const TSCONFIG_FILENAMES = ["tsconfig.json", "tsconfig.base.json"];
-/**
-* Project-config files that `StagedFiles.materialize` copies into
-* the temp directory alongside staged sources so oxlint resolves
-* `tsconfig` / `package.json` / lint configs the same way it would
-* in the working tree. Hoisted out of the staged-files helper so
-* the constant lives next to the rest of the IO budget knobs.
-*/
-const STAGED_FILES_PROJECT_CONFIG_FILENAMES = [
-	"tsconfig.json",
-	"tsconfig.base.json",
-	"package.json",
-	"doctor.config.ts",
-	"doctor.config.mts",
-	"doctor.config.cts",
-	"doctor.config.js",
-	"doctor.config.mjs",
-	"doctor.config.cjs",
-	"doctor.config.json",
-	"doctor.config.jsonc",
-	"oxlint.json",
-	".oxlintrc.json"
-];
-const OXLINT_OUTPUT_MAX_BYTES = 50 * 1024 * 1024;
-const OXLINT_SPAWN_TIMEOUT_MS = 6e4;
-const NODE_COMPILE_CACHE_DIR_NAME = "node-compile-cache";
-const DEAD_CODE_WORKER_TIMEOUT_MS = 12e4;
-const OXLINT_SPLIT_TOTAL_BUDGET_MS = 18e4;
-const DEAD_CODE_PHASE_TIMEOUT_MS = 15e4;
-const LINT_PHASE_TIMEOUT_MS = 3e5;
-const SCAN_TOTAL_DEADLINE_MS = 9e5;
-const DEAD_CODE_WORKER_MAX_OLD_SPACE_MB = 8192;
-const DEAD_CODE_WORKER_MEM_BUDGET_BYTES = 2 * 1024 * 1024 * 1024;
-const DEAD_CODE_TIMEOUT_CEILING_MS = 6e5;
-const DEAD_CODE_PHASE_TIMEOUT_OVER_WORKER_MS = 3e4;
-const DEAD_CODE_OVERLAP_PARSE_SHARE = .4;
-const RECOMMENDED_PNPM_MINIMUM_RELEASE_AGE_MINUTES = 10080;
-const REACT_SERVER_DOM_PACKAGES = [
-	"react-server-dom-webpack",
-	"react-server-dom-parcel",
-	"react-server-dom-turbopack"
-];
-const REACT_BLOG_RSC_ADVISORY_URL = "https://react.dev/blog/2025/12/03/critical-security-vulnerability-in-react-server-components";
-const VERCEL_NEXTJS_SECURITY_RELEASE_URL = "https://vercel.com/changelog/next-js-may-2026-security-release";
-const DIAGNOSTIC_CATEGORY_BUCKETS = [
-	"Security",
-	"Bugs",
-	"Performance",
-	"Accessibility",
-	"Maintainability"
-];
-const APP_ONLY_RULE_KEYS = new Set([
-	"react-hooks-js/static-components",
-	"react-doctor/no-render-prop-children",
-	"react-doctor/prefer-explicit-variants"
-]);
-const COMPILER_CLEANUP_BUCKET = "compiler-cleanup";
-const COMPILER_CLEANUP_RULE_KEYS = new Set(["react-doctor/react-compiler-no-manual-memoization"]);
-const ROOT_CAUSE_GROUPABLE_RULE_KEYS = new Set([
-	"react-doctor/no-derived-state",
-	"react-doctor/no-derived-state-effect",
-	"react-doctor/no-derived-useState",
-	"react-doctor/no-adjust-state-on-prop-change",
-	"react-doctor/no-reset-all-state-on-prop-change"
-]);
-const MAX_GLOB_PATTERN_LENGTH_CHARS = 1024;
-const CONFIG_CACHE_TTL_MS = 300 * 1e3;
-const SOCKET_FREE_PURL_API_BASE = "https://firewall-api.socket.dev/purl";
-const SOCKET_PACKAGE_PAGE_BASE = "https://socket.dev/npm/package";
-const SOCKET_FREE_USER_AGENT = "react-doctor-supply-chain";
-const FILE_LINT_CACHE_FILENAME = "file-lint-cache.json";
-const FILE_LINT_CACHE_MAX_FILE_COUNT = 5e4;
-const SUPPLY_CHAIN_PLUGIN = "socket";
-const SUPPLY_CHAIN_RULE = "low-supply-chain-score";
-const SUPPLY_CHAIN_CATEGORY = "Security";
-const SUPPLY_CHAIN_OVERLAP_TIMEOUT_MS = 9e4;
-const SUPPLY_CHAIN_CACHE_SUBDIR = "supply-chain";
-const SUPPLY_CHAIN_IGNORED_PACKAGES = new Set(["next"]);
 const TSCONFIG_FILENAME = "tsconfig.json";
 const isRelativeExtendsValue = (extendsValue) => extendsValue.startsWith("./") || extendsValue.startsWith("../") || Path.isAbsolute(extendsValue);
 const ensureJsonExtension = (filePath) => Path.extname(filePath) === "" ? `${filePath}.json` : filePath;
@@ -36748,14 +36799,17 @@ const checkReactServerComponentsAdvisory = (scanDirectory, project) => {
 	return diagnostics;
 };
 const REDUCED_MOTION_GREP_PATTERN = "prefers-reduced-motion|useReducedMotion|MotionConfig|reducedMotion";
-const REDUCED_MOTION_FILE_GLOBS = [
-	"*.ts",
-	"*.tsx",
-	"*.js",
-	"*.jsx",
-	"*.css",
-	"*.scss"
-];
+const REDUCED_MOTION_PATTERN = new RegExp(REDUCED_MOTION_GREP_PATTERN);
+const REDUCED_MOTION_FILE_EXTENSIONS = new Set([
+	".ts",
+	".tsx",
+	".js",
+	".jsx",
+	".css",
+	".scss"
+]);
+const REDUCED_MOTION_FILE_GLOBS = [...REDUCED_MOTION_FILE_EXTENSIONS].map((extension) => `*${extension}`);
+const GIT_GREP_NO_MATCH_STATUS = 1;
 const MISSING_REDUCED_MOTION_DIAGNOSTIC = {
 	filePath: "package.json",
 	plugin: "react-doctor",
@@ -36767,6 +36821,19 @@ const MISSING_REDUCED_MOTION_DIAGNOSTIC = {
 	column: 0,
 	category: "Accessibility"
 };
+const hasReducedMotionHandlingViaFilesystem = (rootDirectory) => {
+	for (const { absolutePath, name } of walkSourceTreeFiles(rootDirectory)) {
+		if (!REDUCED_MOTION_FILE_EXTENSIONS.has(Path.extname(name))) continue;
+		let content;
+		try {
+			content = NFS.readFileSync(absolutePath, "utf-8");
+		} catch {
+			continue;
+		}
+		if (REDUCED_MOTION_PATTERN.test(content)) return true;
+	}
+	return false;
+};
 const checkReducedMotion = (rootDirectory) => {
 	const packageJsonPath = Path.join(rootDirectory, "package.json");
 	if (!isFile(packageJsonPath)) return [];
@@ -36785,22 +36852,21 @@ const checkReducedMotion = (rootDirectory) => {
 	const result = spawnSync("git", [
 		"grep",
 		"--untracked",
-		"-ql",
-		"-E",
+		"-lE",
 		REDUCED_MOTION_GREP_PATTERN,
 		"--",
 		...REDUCED_MOTION_FILE_GLOBS
 	], {
 		cwd: rootDirectory,
+		encoding: "utf-8",
 		stdio: [
 			"ignore",
 			"pipe",
 			"pipe"
 		]
 	});
-	if (result.error) return [MISSING_REDUCED_MOTION_DIAGNOSTIC];
-	if (result.status === 0) return [];
-	return [MISSING_REDUCED_MOTION_DIAGNOSTIC];
+	if (!(!result.error && (result.status === 0 || result.status === GIT_GREP_NO_MATCH_STATUS))) return hasReducedMotionHandlingViaFilesystem(rootDirectory) ? [] : [MISSING_REDUCED_MOTION_DIAGNOSTIC];
+	return result.status === 0 && result.stdout.split("\n").some((filePath) => filePath.length > 0 && !hasIgnoredPathSegment(filePath)) ? [] : [MISSING_REDUCED_MOTION_DIAGNOSTIC];
 };
 const buildSecurityScanDiagnostic = (finding, entry, relativePath) => ({
 	filePath: relativePath,
@@ -37696,6 +37762,7 @@ const isDiagnosticOnSurface = (diagnostic, surface, config) => {
 	return true;
 };
 const filterDiagnosticsForSurface = (diagnostics, surface, config) => diagnostics.filter((diagnostic) => isDiagnosticOnSurface(diagnostic, surface, config));
+const remainingDeadlineBudgetMs = (deadlineEpochMs) => Math.max(deadlineEpochMs - Date.now(), 0);
 /**
 * Budget for the dead-code phase, scaled to the work. deslop's graph build is
 * CPU-bound and roughly linear in file count, so a fixed 120s cap is too tight
@@ -37714,53 +37781,6 @@ const resolveDeadCodeTimeout = (input) => {
 		phaseTimeoutMs: workerTimeoutMs + DEAD_CODE_PHASE_TIMEOUT_OVER_WORKER_MS
 	};
 };
-const collectSizedSourceFiles = (rootDirectory, relativePaths) => {
-	const entries = [];
-	for (const relativePath of relativePaths) {
-		const absolutePath = Path.resolve(rootDirectory, relativePath);
-		const sizeBytes = statSourceFileSize(absolutePath);
-		if (isLargeMinifiedFile(absolutePath, sizeBytes)) continue;
-		entries.push({
-			path: relativePath,
-			sizeBytes: sizeBytes ?? 0
-		});
-	}
-	return entries;
-};
-const listSourceFilesViaGit = (rootDirectory) => {
-	const result = spawnSync("git", [
-		"ls-files",
-		"-z",
-		"--cached",
-		"--others",
-		"--exclude-standard"
-	], {
-		cwd: rootDirectory,
-		encoding: "utf-8",
-		maxBuffer: GIT_LS_FILES_MAX_BUFFER_BYTES
-	});
-	if (result.error || result.status !== 0) return null;
-	return result.stdout.split("\0").filter((filePath) => filePath.length > 0 && isLintableSourceFile(filePath));
-};
-const listSourceFilesViaFilesystem = (rootDirectory) => {
-	const filePaths = [];
-	const stack = [rootDirectory];
-	while (stack.length > 0) {
-		const currentDirectory = stack.pop();
-		const entries = readDirectoryEntries(currentDirectory);
-		for (const entry of entries) {
-			const absolutePath = Path.join(currentDirectory, entry.name);
-			if (entry.isDirectory()) {
-				if (!entry.name.startsWith(".") && !IGNORED_DIRECTORIES.has(entry.name)) stack.push(absolutePath);
-				continue;
-			}
-			if (entry.isFile() && isLintableSourceFile(entry.name)) filePaths.push(Path.relative(rootDirectory, absolutePath).replace(/\\/g, "/"));
-		}
-	}
-	return filePaths;
-};
-const listSourceFilesWithSize = (rootDirectory) => collectSizedSourceFiles(rootDirectory, listSourceFilesViaGit(rootDirectory) ?? listSourceFilesViaFilesystem(rootDirectory));
-const listSourceFiles = (rootDirectory) => listSourceFilesWithSize(rootDirectory).map((entry) => entry.path);
 const resolveLintIncludePaths = (rootDirectory, userConfig, project) => {
 	if (!Array.isArray(userConfig?.ignore?.files) || userConfig.ignore.files.length === 0) return;
 	const ignoredPatterns = compileIgnoredFilePatterns(userConfig);
@@ -38457,12 +38477,12 @@ const findFilesWithDisableDirectivesViaGit = async (rootDirectory, includePaths)
 		return null;
 	}
 	if (grepResult === null) return null;
-	return grepResult.stdout.split("\n").filter((filePath) => filePath.length > 0 && isLintableSourceFile(filePath));
+	return grepResult.stdout.split("\n").filter((filePath) => filePath.length > 0 && isLintableSourceFile(filePath) && !hasIgnoredPathSegment(filePath));
 };
 const findFilesWithDisableDirectivesViaFilesystem = (rootDirectory, includePaths) => {
 	const matches = [];
 	const checkFile = (relativePath) => {
-		if (!isLintableSourceFile(relativePath)) return;
+		if (!isLintableSourceFile(relativePath) || hasIgnoredPathSegment(relativePath)) return;
 		const absolutePath = Path.join(rootDirectory, relativePath);
 		let content;
 		try {
@@ -38476,22 +38496,7 @@ const findFilesWithDisableDirectivesViaFilesystem = (rootDirectory, includePaths
 		for (const candidate of includePaths) checkFile(candidate);
 		return matches;
 	}
-	const stack = [rootDirectory];
-	while (stack.length > 0) {
-		const current = stack.pop();
-		if (current === void 0) continue;
-		const entries = readDirectoryEntries(current);
-		for (const entry of entries) {
-			if (entry.isDirectory()) {
-				if (entry.name.startsWith(".") || IGNORED_DIRECTORIES.has(entry.name)) continue;
-				stack.push(Path.join(current, entry.name));
-				continue;
-			}
-			if (!entry.isFile()) continue;
-			const absolute = Path.join(current, entry.name);
-			checkFile(Path.relative(rootDirectory, absolute));
-		}
-	}
+	for (const { absolutePath } of walkSourceTreeFiles(rootDirectory)) checkFile(Path.relative(rootDirectory, absolutePath));
 	return matches;
 };
 const findFilesWithDisableDirectives = async (rootDirectory, includePaths) => await findFilesWithDisableDirectivesViaGit(rootDirectory, includePaths) ?? findFilesWithDisableDirectivesViaFilesystem(rootDirectory, includePaths);
@@ -38708,12 +38713,12 @@ const createOxlintConfig = ({ pluginPath, project, customRulesOnly = false, exte
 		if (customRulesOnly && registryEntry.originallyExternal) continue;
 		if (rule.framework !== "global" && !rule.requires) continue;
 		if (!shouldEnableRule(rule.requires, rule.tags, capabilities, ignoredTags, rule.disabledBy)) continue;
-		const explicitSeverity = resolveRuleSeverityOverride({
+		const explicitRuleOverride = resolveRuleSeverityOverride({ ruleKey: registryEntry.key }, severityControls);
+		if (rule.defaultEnabled === false && explicitRuleOverride === void 0) continue;
+		const severity = resolveRuleSeverityOverride({
 			ruleKey: registryEntry.key,
 			category: rule.category
-		}, severityControls);
-		if (rule.defaultEnabled === false && explicitSeverity === void 0) continue;
-		const severity = explicitSeverity ?? resolveCompilerCleanupBucketSeverity(registryEntry.key, severityControls) ?? rule.severity;
+		}, severityControls) ?? resolveCompilerCleanupBucketSeverity(registryEntry.key, severityControls) ?? rule.severity;
 		if (severity === "off") continue;
 		enabledReactDoctorRules[registryEntry.key] = severity;
 	}
@@ -39695,21 +39700,33 @@ const isParallelismRelatedSpawnError = (error) => {
 * loop with a slimmer config in that case.
 */
 const spawnLintBatches = async (input) => {
-	const { baseArgs, fileBatches, rootDirectory, nodeBinaryPath, project, onPartialFailure, onFileProgress, spawnTimeoutMs, outputMaxBytes, splitTotalBudgetMs = OXLINT_SPLIT_TOTAL_BUDGET_MS, splitMaxDepth = 8, signal } = input;
+	const { baseArgs, fileBatches, rootDirectory, nodeBinaryPath, project, onPartialFailure, onFileProgress, spawnTimeoutMs, outputMaxBytes, splitTotalBudgetMs = OXLINT_SPLIT_TOTAL_BUDGET_MS, splitMaxDepth = 8, signal, deadlineEpochMs } = input;
 	const requestedConcurrency = resolveScanConcurrency(input.concurrency ?? 1);
 	const totalFileCount = fileBatches.reduce((sum, batch) => sum + batch.length, 0);
 	const runBatchPass = async (concurrency) => {
 		const allDiagnostics = [];
 		const droppedFiles = [];
+		const deadlineSkippedFiles = [];
+		const isPastDeadline = () => deadlineEpochMs !== void 0 && remainingDeadlineBudgetMs(deadlineEpochMs) === 0;
 		let firstDropReason = null;
-		const spawnLintBatch = async (batch, depth, splitBudget) => {
+		const spawnLintBatch = async (batch, depth, batchState) => {
+			if (isPastDeadline()) {
+				deadlineSkippedFiles.push(...batch);
+				batchState.deadlineSkippedFileCount += batch.length;
+				return [];
+			}
 			const batchArgs = [...baseArgs, ...batch];
 			try {
 				return parseOxlintOutput(await spawnOxlint(batchArgs, rootDirectory, nodeBinaryPath, spawnTimeoutMs, outputMaxBytes, signal), project, rootDirectory);
 			} catch (error) {
 				if (!isSplittableReactDoctorError(error)) throw error;
-				splitBudget.deadlineMs ??= Date.now() + splitTotalBudgetMs;
-				const isBudgetElapsed = Date.now() >= splitBudget.deadlineMs;
+				if (isPastDeadline()) {
+					deadlineSkippedFiles.push(...batch);
+					batchState.deadlineSkippedFileCount += batch.length;
+					return [];
+				}
+				batchState.deadlineMs ??= Date.now() + splitTotalBudgetMs;
+				const isBudgetElapsed = Date.now() >= batchState.deadlineMs;
 				const isDepthCapReached = depth >= splitMaxDepth;
 				if (batch.length <= 1 || isBudgetElapsed || isDepthCapReached) {
 					droppedFiles.push(...batch);
@@ -39722,7 +39739,7 @@ const spawnLintBatches = async (input) => {
 					return [];
 				}
 				const splitIndex = Math.ceil(batch.length / 2);
-				return [...await spawnLintBatch(batch.slice(0, splitIndex), depth + 1, splitBudget), ...await spawnLintBatch(batch.slice(splitIndex), depth + 1, splitBudget)];
+				return [...await spawnLintBatch(batch.slice(0, splitIndex), depth + 1, batchState), ...await spawnLintBatch(batch.slice(splitIndex), depth + 1, batchState)];
 			}
 		};
 		let startedFileCount = 0;
@@ -39738,9 +39755,17 @@ const spawnLintBatches = async (input) => {
 		progressTimer?.unref?.();
 		try {
 			const batchResults = await mapWithConcurrency(fileBatches, concurrency, async (batch) => {
+				if (isPastDeadline()) {
+					deadlineSkippedFiles.push(...batch);
+					return [];
+				}
 				startedFileCount += batch.length;
-				const batchDiagnostics = await spawnLintBatch(batch, 0, { deadlineMs: null });
-				scannedFileCount += batch.length;
+				const batchState = {
+					deadlineMs: null,
+					deadlineSkippedFileCount: 0
+				};
+				const batchDiagnostics = await spawnLintBatch(batch, 0, batchState);
+				scannedFileCount += batch.length - batchState.deadlineSkippedFileCount;
 				if (onFileProgress) {
 					displayedFileCount = Math.min(Math.max(displayedFileCount, scannedFileCount), totalFileCount);
 					onFileProgress(displayedFileCount, totalFileCount);
@@ -39751,12 +39776,13 @@ const spawnLintBatches = async (input) => {
 		} finally {
 			if (progressTimer !== null) clearInterval(progressTimer);
 		}
-		if (droppedFiles.length > 0 && onPartialFailure) {
-			const previewFiles = droppedFiles.slice(0, 3).join(", ");
-			const remainderHint = droppedFiles.length > 3 ? `, +${droppedFiles.length - 3} more` : "";
-			const reasonHint = firstDropReason ? ` — first failure: ${firstDropReason}` : "";
-			onPartialFailure(`${droppedFiles.length} file(s) failed to lint and were skipped (${previewFiles}${remainderHint})${reasonHint}`);
-		}
+		const reportSkippedFiles = (skippedFiles, buildMessage) => {
+			if (skippedFiles.length === 0 || !onPartialFailure) return;
+			onPartialFailure(buildMessage(`${skippedFiles.slice(0, 3).join(", ")}${skippedFiles.length > 3 ? `, +${skippedFiles.length - 3} more` : ""}`));
+		};
+		const reasonHint = firstDropReason ? ` — first failure: ${firstDropReason}` : "";
+		reportSkippedFiles(droppedFiles, (fileListPreview) => `${droppedFiles.length} file(s) failed to lint and were skipped (${fileListPreview})${reasonHint}`);
+		reportSkippedFiles(deadlineSkippedFiles, (fileListPreview) => `${deadlineSkippedFiles.length} file(s) skipped — max scan duration reached before they were linted (${fileListPreview})`);
 		return allDiagnostics;
 	};
 	let diagnostics;
@@ -39960,7 +39986,8 @@ const runOxlint = async (options) => {
 				spawnTimeoutMs,
 				outputMaxBytes,
 				concurrency: options.concurrency,
-				signal: options.signal
+				signal: options.signal,
+				deadlineEpochMs: options.deadlineEpochMs
 			});
 			writeOxlintConfig(passConfigPath, buildConfigForPass({}));
 			try {
@@ -40059,7 +40086,8 @@ const runOxlint = async (options) => {
 			spawnTimeoutMs,
 			outputMaxBytes,
 			concurrency: options.concurrency,
-			signal: options.signal
+			signal: options.signal,
+			deadlineEpochMs: options.deadlineEpochMs
 		});
 		writeOxlintConfig(configPath, buildConfig({ extendsPaths }));
 		try {
@@ -40163,7 +40191,8 @@ var Linter = class Linter extends Service()("react-doctor/Linter") {
 				outputMaxBytes,
 				concurrency,
 				signal,
-				lintBatchOrdering
+				lintBatchOrdering,
+				deadlineEpochMs: input.deadlineEpochMs
 			}),
 			catch: ensureReactDoctorError
 		});
@@ -40923,6 +40952,7 @@ const runInspect = (input, hooks = {}) => gen(function* () {
 	const deadCodePhaseTimeoutMs = yield* DeadCodePhaseTimeoutMs;
 	const resolveDeadCodePhaseTimeoutMs = (scaledPhaseTimeoutMs) => deadCodePhaseTimeoutMs === 15e4 ? scaledPhaseTimeoutMs : deadCodePhaseTimeoutMs;
 	const workerCountSuffix = scanConcurrency > 1 ? ` ${highlighter.dim(`[~${scanConcurrency} workers]`)}` : "";
+	const capToDeadline = (phaseTimeoutMs) => input.deadlineEpochMs === void 0 ? phaseTimeoutMs : Math.min(phaseTimeoutMs, remainingDeadlineBudgetMs(input.deadlineEpochMs));
 	const shouldRunDeadCode = input.runDeadCode && !isDiffMode && (showWarnings || deadCodeMaySurfaceWhenWarningsHidden(resolvedConfig.config));
 	const deadCodeOverlapMode = yield* DeadCodeOverlap;
 	const shouldOverlapDeadCode = shouldRunDeadCode && deadCodeOverlapMode === "on";
@@ -40952,7 +40982,7 @@ const runInspect = (input, hooks = {}) => gen(function* () {
 	});
 	const deadCodeFiber = shouldOverlapDeadCode ? yield* forkChild(buildCollectDeadCode({
 		workerTimeoutMs: overlapDeadCodeTimeout.workerTimeoutMs,
-		phaseTimeoutMs: resolveDeadCodePhaseTimeoutMs(overlapDeadCodeTimeout.phaseTimeoutMs)
+		phaseTimeoutMs: capToDeadline(resolveDeadCodePhaseTimeoutMs(overlapDeadCodeTimeout.phaseTimeoutMs))
 	})) : null;
 	const scanProgress = yield* progressService.start("Scanning...");
 	const scanStartTime = Date.now();
@@ -40977,7 +41007,8 @@ const runInspect = (input, hooks = {}) => gen(function* () {
 		onCacheStats: (cacheHitFileCount, totalConsideredFileCount) => {
 			lintCacheHitFileCount = cacheHitFileCount;
 			lintCacheTotalFileCount = totalConsideredFileCount;
-		}
+		},
+		deadlineEpochMs: input.deadlineEpochMs
 	}).pipe(catchTag("ReactDoctorError", (error) => unwrap(gen(function* () {
 		yield* set(lintFailure, {
 			didFail: true,
@@ -41004,7 +41035,13 @@ const runInspect = (input, hooks = {}) => gen(function* () {
 	let deadCodeCollected = [];
 	if (lintFailureState.didFail) {
 		if (deadCodeFiber !== null) yield* interrupt(deadCodeFiber);
-	} else if (shouldRunDeadCode) {
+	} else if (shouldRunDeadCode) if (input.deadlineEpochMs !== void 0 && remainingDeadlineBudgetMs(input.deadlineEpochMs) === 0) {
+		if (deadCodeFiber !== null) yield* interrupt(deadCodeFiber);
+		yield* set(deadCodeFailure, {
+			didFail: true,
+			reason: "Dead-code analysis skipped — max scan duration reached."
+		});
+	} else {
 		yield* scanProgress.update(`Scanned ${scannedFilesLabel}, analyzing dead code...`);
 		const sequentialDeadCodeTimeout = resolveDeadCodeTimeout({
 			sourceFileCount: totalFileCount,
@@ -41013,7 +41050,7 @@ const runInspect = (input, hooks = {}) => gen(function* () {
 		});
 		deadCodeCollected = deadCodeFiber !== null ? yield* join(deadCodeFiber) : yield* buildCollectDeadCode({
 			workerTimeoutMs: sequentialDeadCodeTimeout.workerTimeoutMs,
-			phaseTimeoutMs: resolveDeadCodePhaseTimeoutMs(sequentialDeadCodeTimeout.phaseTimeoutMs)
+			phaseTimeoutMs: capToDeadline(resolveDeadCodePhaseTimeoutMs(sequentialDeadCodeTimeout.phaseTimeoutMs))
 		});
 	}
 	const deadCodeFailureState = lintFailureState.didFail ? {
@@ -41051,7 +41088,7 @@ const runInspect = (input, hooks = {}) => gen(function* () {
 	};
 	const scoreSurface = input.scoreSurface ?? "score";
 	const scoreDiagnostics = filterDiagnosticsForSurface([...finalDiagnostics], scoreSurface, resolvedConfig.config);
-	const score = lintFailureState.didFail ? null : yield* scoreService.compute({
+	const score = lintFailureState.didFail || deadCodeFailureState.didFail ? null : yield* scoreService.compute({
 		diagnostics: scoreDiagnostics,
 		isCi: input.isCi,
 		metadata: scoreMetadata
@@ -41420,6 +41457,7 @@ const buildJsonReport = (input) => {
 	return {
 		schemaVersion: 1,
 		mode: input.mode,
+		...input.baselineDegraded ? { baselineDegraded: true } : {},
 		...shared
 	};
 };
@@ -41720,4 +41758,4 @@ const toJsonReport = (result, options) => buildJsonReport({
 export { AmbiguousProjectError, NoReactDependencyError, NotADirectoryError, PackageJsonNotFoundError, ProjectNotFoundError, ReactDoctorError, buildJsonReport, buildJsonReportError, clearCaches, defineConfig, diagnose, filterSourceFiles, getDiffInfo, isProjectDiscoveryError, isReactDoctorError, summarizeDiagnostics, toJsonReport };
 
 //# sourceMappingURL=index.js.map
-//# debugId=83529d8f-2ca3-50ba-a3b9-44622f913549
+//# debugId=62cf4740-7938-5db0-8b80-dc81b60af36a