react-doctor 0.6.3-dev.8325343 → 0.6.3-dev.8c004f0

package/dist/cli.js

@@ -1,5 +1,5 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="2921b8ff-14cf-5604-8ae5-b65b4f1347fc")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="e34cb22b-7751-5b1a-8422-6c5eb384dbef")}catch(e){}}();
 import { createRequire } from "node:module";
 import * as NodeChildProcess from "node:child_process";
 import { execFile, execFileSync, spawn, spawnSync } from "node:child_process";
@@ -36128,6 +36128,7 @@ const SOCKET_PACKAGE_PAGE_BASE = "https://socket.dev/npm/package";
 const SOCKET_FREE_USER_AGENT = "react-doctor-supply-chain";
 const FILE_LINT_CACHE_FILENAME = "file-lint-cache.json";
 const FILE_LINT_CACHE_MAX_FILE_COUNT = 5e4;
+const DEAD_CODE_CACHE_FILENAME = "dead-code-cache.json";
 const SUPPLY_CHAIN_PLUGIN = "socket";
 const SUPPLY_CHAIN_RULE = "low-supply-chain-score";
 const SUPPLY_CHAIN_CATEGORY = "Security";
@@ -38812,6 +38813,25 @@ var PerFileLintCacheEnabled = class extends Reference("react-doctor/PerFileLintC
 	if (CACHE_DISABLED_VALUES$1.has(noFileCache)) return false;
 	return true;
 } }) {};
+/**
+* Whether the whole-project dead-code result cache
+* (`dead-code/dead-code-result-cache.ts`) is active. Defaults ON — a rescan
+* whose inputs (source tree, manifests, configs, analyzer version) are
+* unchanged replays the stored diagnostics instead of re-running the
+* analysis worker. Opt-OUT, two knobs (matching the per-file lint cache):
+*
+*   - `REACT_DOCTOR_NO_CACHE` — the global off-switch.
+*   - `REACT_DOCTOR_NO_DEAD_CODE_CACHE` — granular: bust only this cache.
+*
+* Tests override via `Layer.succeed(DeadCodeResultCacheEnabled, false)`.
+*/
+var DeadCodeResultCacheEnabled = class extends Reference("react-doctor/DeadCodeResultCacheEnabled", { defaultValue: () => {
+	const noCache = process.env["REACT_DOCTOR_NO_CACHE"]?.toLowerCase() ?? "";
+	const noDeadCodeCache = process.env["REACT_DOCTOR_NO_DEAD_CODE_CACHE"]?.toLowerCase() ?? "";
+	if (CACHE_DISABLED_VALUES$1.has(noCache)) return false;
+	if (CACHE_DISABLED_VALUES$1.has(noDeadCodeCache)) return false;
+	return true;
+} }) {};
 const DIAGNOSTIC_SURFACES = [
 	"cli",
 	"prComment",
@@ -40544,6 +40564,108 @@ const collectDeadCodeIgnorePatterns = (rootDirectory) => {
 	return [...seen].filter((pattern) => pattern.length > 0);
 };
 const collectDeadCodeEntryPatterns = (rootDirectory) => [...new Set(collectKnipPatterns(rootDirectory, "entry"))].filter((pattern) => pattern.length > 0);
+const atomicWriteJson = (filePath, value) => {
+	try {
+		NFS.mkdirSync(Path.dirname(filePath), { recursive: true });
+		const temporaryPath = `${filePath}.${process.pid}.tmp`;
+		NFS.writeFileSync(temporaryPath, JSON.stringify(value));
+		NFS.renameSync(temporaryPath, filePath);
+	} catch {
+		return;
+	}
+};
+const failOpenReadJson = (filePath, fallback) => {
+	try {
+		return JSON.parse(NFS.readFileSync(filePath, "utf8"));
+	} catch {
+		return fallback;
+	}
+};
+const ANALYZED_FILE_EXTENSIONS = new Set([
+	".ts",
+	".tsx",
+	".js",
+	".jsx",
+	".mts",
+	".mjs",
+	".cts",
+	".cjs",
+	".mdx",
+	".astro",
+	".graphql",
+	".gql",
+	".css",
+	".scss",
+	".vue",
+	".svelte"
+]);
+const ANALYZED_MANIFEST_NAMES = new Set([
+	"package.json",
+	"knip.json",
+	"app.json",
+	"pnpm-workspace.yaml",
+	"lerna.json",
+	"pnpm-lock.yaml",
+	"package-lock.json",
+	"yarn.lock",
+	"bun.lock",
+	"bun.lockb",
+	"deno.lock",
+	".gitignore"
+]);
+const isTsConfigLikeFile = (fileName) => (fileName.startsWith("tsconfig") || fileName.startsWith("jsconfig")) && fileName.endsWith(".json");
+const isFingerprintedFile = (fileName) => ANALYZED_FILE_EXTENSIONS.has(Path.extname(fileName).toLowerCase()) || ANALYZED_MANIFEST_NAMES.has(fileName) || isTsConfigLikeFile(fileName);
+const collectAnalyzedFileFingerprints = (rootDirectory) => {
+	const fingerprints = [];
+	for (const { absolutePath, name } of walkSourceTreeFiles(rootDirectory)) {
+		if (!isFingerprintedFile(name)) continue;
+		try {
+			const fileStat = NFS.statSync(absolutePath);
+			const relativePath = Path.relative(rootDirectory, absolutePath).replace(/\\/g, "/");
+			fingerprints.push(`${relativePath}:${fileStat.mtimeMs}:${fileStat.size}`);
+		} catch {}
+	}
+	return fingerprints.sort();
+};
+const bundledRequire$2 = createRequire(import.meta.url);
+const resolveDeslopVersion = () => {
+	try {
+		const packageJson = JSON.parse(NFS.readFileSync(bundledRequire$2.resolve("deslop-js/package.json"), "utf8"));
+		return isRecord$1(packageJson) && typeof packageJson.version === "string" ? packageJson.version : "unknown";
+	} catch {
+		return "unknown";
+	}
+};
+const computeDeadCodeCacheKey = (input) => crypto.createHash("sha1").update(JSON.stringify({
+	schemaVersion: 1,
+	deslopVersion: resolveDeslopVersion(),
+	deslopJsModuleSpecifier: input.deslopJsModuleSpecifier,
+	entryPatterns: input.entryPatterns,
+	ignorePatterns: input.ignorePatterns,
+	tsConfigFile: input.tsConfigPath === void 0 ? null : Path.relative(input.rootDirectory, input.tsConfigPath).replace(/\\/g, "/"),
+	files: collectAnalyzedFileFingerprints(input.rootDirectory)
+})).digest("hex");
+const validateDiagnostic$1 = decodeUnknownSync(Diagnostic);
+const decodeCachedDiagnostics = (raw) => {
+	try {
+		for (const entry of raw) validateDiagnostic$1(entry);
+		return raw;
+	} catch {
+		return null;
+	}
+};
+const lookupDeadCodeResultCache = (cacheDirectory, cacheKey) => {
+	const persisted = failOpenReadJson(Path.join(cacheDirectory, DEAD_CODE_CACHE_FILENAME), null);
+	if (persisted === null || !isRecord$1(persisted) || persisted.version !== 1 || persisted.key !== cacheKey || !Array.isArray(persisted.diagnostics)) return null;
+	return decodeCachedDiagnostics(persisted.diagnostics);
+};
+const storeDeadCodeResultCache = (cacheDirectory, cacheKey, diagnostics) => {
+	atomicWriteJson(Path.join(cacheDirectory, DEAD_CODE_CACHE_FILENAME), {
+		version: 1,
+		key: cacheKey,
+		diagnostics
+	});
+};
 const readSystemFacts = () => ({
 	availableCores: os.availableParallelism(),
 	totalMemoryBytes: os.totalmem(),
@@ -40612,6 +40734,21 @@ const withDeadCodeWorkerSlot = async (task, abortSignal) => {
 		releaseSlot();
 	}
 };
+const projectCacheSubdir = (projectDirectory) => crypto.createHash("sha256").update(projectDirectory).digest("hex").slice(0, 16);
+const resolveReactDoctorCacheDir = (projectDirectory) => {
+	const cacheDirOverride = process.env["REACT_DOCTOR_CACHE_DIR"]?.trim();
+	if (cacheDirOverride) return Path.join(cacheDirOverride, projectCacheSubdir(projectDirectory));
+	const nodeModulesDirectory = Path.join(projectDirectory, "node_modules");
+	if (NFS.existsSync(nodeModulesDirectory)) return Path.join(nodeModulesDirectory, ".cache", "react-doctor");
+	return Path.join(os.tmpdir(), `react-doctor-cache-${resolveUserCacheScope()}`, projectCacheSubdir(projectDirectory));
+};
+const resolveUserCacheScope = () => {
+	try {
+		return String(process.getuid?.() ?? os.userInfo().username);
+	} catch {
+		return "shared";
+	}
+};
 /**
 * Resolves a path to its canonical, symlink-free form, falling back to
 * the input when it cannot be realpath'd (broken symlink, permission
@@ -40907,13 +41044,27 @@ const checkDeadCode = async (options) => {
 	if (!NFS.existsSync(Path.join(rootDirectory, "package.json"))) return [];
 	const entryPatterns = collectDeadCodeEntryPatterns(rootDirectory);
 	const ignorePatterns = collectDeadCodeIgnorePatterns(rootDirectory);
+	const tsConfigPath = resolveTsConfigPath(rootDirectory);
+	const deslopJsModuleSpecifier = options.deslopJsModuleSpecifier ?? import.meta.resolve("deslop-js");
+	const cacheKey = options.cacheEnabled ? computeDeadCodeCacheKey({
+		rootDirectory,
+		entryPatterns,
+		ignorePatterns,
+		tsConfigPath,
+		deslopJsModuleSpecifier
+	}) : null;
+	if (cacheKey !== null) {
+		const cachedDiagnostics = lookupDeadCodeResultCache(resolveReactDoctorCacheDir(rootDirectory), cacheKey);
+		options.onCacheOutcome?.(cachedDiagnostics !== null);
+		if (cachedDiagnostics !== null) return [...cachedDiagnostics];
+	}
 	const spawnAndRun = () => {
 		return runDeadCodeWorkerWithTimeout((options.createWorker ?? createDeadCodeWorker)({
 			rootDirectory,
 			entryPatterns,
-			tsConfigPath: resolveTsConfigPath(rootDirectory),
+			tsConfigPath,
 			ignorePatterns,
-			deslopJsModuleSpecifier: options.deslopJsModuleSpecifier ?? import.meta.resolve("deslop-js"),
+			deslopJsModuleSpecifier,
 			parseConcurrency: options.parseConcurrency
 		}), options.workerTimeoutMs ?? 12e4, options.abortSignal);
 	};
@@ -40974,6 +41125,7 @@ const checkDeadCode = async (options) => {
 			category: DEAD_CODE_CATEGORY
 		});
 	}
+	if (cacheKey !== null) storeDeadCodeResultCache(resolveReactDoctorCacheDir(rootDirectory), cacheKey, diagnostics);
 	return diagnostics;
 };
 const DEAD_CODE_RULE_KEY_PREFIX = `${DEAD_CODE_PLUGIN}/`;
@@ -41076,12 +41228,15 @@ var Config = class Config extends Service()("react-doctor/Config") {
 */
 var DeadCode = class DeadCode extends Service()("react-doctor/DeadCode") {
 	static layerNode = succeed$3(DeadCode, DeadCode.of({ run: (input) => unwrap(fn("DeadCode.run")(function* () {
+		const cacheEnabled = yield* DeadCodeResultCacheEnabled;
 		return yield* tryPromise({
 			try: (signal) => checkDeadCode({
 				rootDirectory: input.rootDirectory,
 				parseConcurrency: input.parseConcurrency,
 				workerTimeoutMs: input.workerTimeoutMs,
-				abortSignal: signal
+				abortSignal: signal,
+				cacheEnabled,
+				onCacheOutcome: input.onCacheOutcome
 			}),
 			catch: (cause) => new ReactDoctorError({ reason: new DeadCodeAnalysisFailed({ cause }) })
 		}).pipe(map$3((diagnostics) => fromIterable$1(diagnostics)));
@@ -42007,23 +42162,6 @@ const createOxlintConfig = ({ pluginPath, project, customRulesOnly = false, exte
 		}
 	};
 };
-const atomicWriteJson = (filePath, value) => {
-	try {
-		NFS.mkdirSync(Path.dirname(filePath), { recursive: true });
-		const temporaryPath = `${filePath}.${process.pid}.tmp`;
-		NFS.writeFileSync(temporaryPath, JSON.stringify(value));
-		NFS.renameSync(temporaryPath, filePath);
-	} catch {
-		return;
-	}
-};
-const failOpenReadJson = (filePath, fallback) => {
-	try {
-		return JSON.parse(NFS.readFileSync(filePath, "utf8"));
-	} catch {
-		return fallback;
-	}
-};
 const validateDiagnostic = decodeUnknownSync(Diagnostic);
 const decodeFileDiagnostics = (raw) => {
 	if (!Array.isArray(raw)) return null;
@@ -42081,7 +42219,7 @@ const createFileLintCache = (cacheDirectory, rulesetHash) => {
 		}
 	};
 };
-const bundledRequire$2 = createRequire(import.meta.url);
+const bundledRequire$3 = createRequire(import.meta.url);
 const childNodeVersionByBinaryPath = /* @__PURE__ */ new Map();
 const resolveChildNodeVersion = (nodeBinaryPath) => {
 	if (nodeBinaryPath === process.execPath) return process.version;
@@ -42107,7 +42245,7 @@ const TOOLCHAIN_PACKAGE_SPECIFIERS$1 = [
 const resolveOxlintToolchainVersions = (nodeBinaryPath = process.execPath) => {
 	const versions = [`node=${resolveChildNodeVersion(nodeBinaryPath)}`];
 	for (const specifier of TOOLCHAIN_PACKAGE_SPECIFIERS$1) try {
-		const packageJson = bundledRequire$2(specifier);
+		const packageJson = bundledRequire$3(specifier);
 		const version = typeof packageJson.version === "string" ? packageJson.version : "unknown";
 		versions.push(`${specifier}=${version}`);
 	} catch {
@@ -43151,21 +43289,6 @@ const planLintBatches = ({ baseArgs, files, sizeByFile }) => {
 	}
 	return batches.filter((batch) => batch.fileIndexes.length > 0).map((batch) => batch.fileIndexes.sort((leftIndex, rightIndex) => leftIndex - rightIndex).map((fileIndex) => files[fileIndex]));
 };
-const projectCacheSubdir = (projectDirectory) => crypto.createHash("sha256").update(projectDirectory).digest("hex").slice(0, 16);
-const resolveReactDoctorCacheDir = (projectDirectory) => {
-	const cacheDirOverride = process.env["REACT_DOCTOR_CACHE_DIR"]?.trim();
-	if (cacheDirOverride) return Path.join(cacheDirOverride, projectCacheSubdir(projectDirectory));
-	const nodeModulesDirectory = Path.join(projectDirectory, "node_modules");
-	if (NFS.existsSync(nodeModulesDirectory)) return Path.join(nodeModulesDirectory, ".cache", "react-doctor");
-	return Path.join(os.tmpdir(), `react-doctor-cache-${resolveUserCacheScope()}`, projectCacheSubdir(projectDirectory));
-};
-const resolveUserCacheScope = () => {
-	try {
-		return String(process.getuid?.() ?? os.userInfo().username);
-	} catch {
-		return "shared";
-	}
-};
 /**
 * Atomically (re)writes the generated oxlintrc.json. Used twice in
 * the runner: once for the primary scan, once for the
@@ -44292,7 +44415,10 @@ const runInspect = (input, hooks = {}) => gen(function* () {
 	const buildCollectDeadCode = (deadCodeTimeout) => runCollect(applyPerElementPipeline(deadCodeService.run({
 		rootDirectory: scanDirectory,
 		parseConcurrency: deadCodeParseConcurrency,
-		workerTimeoutMs: deadCodeTimeout.workerTimeoutMs
+		workerTimeoutMs: deadCodeTimeout.workerTimeoutMs,
+		onCacheOutcome: (didHitCache) => {
+			deadCodeCacheHit = didHitCache;
+		}
 	}).pipe(catchTag("ReactDoctorError", (error) => unwrap(gen(function* () {
 		yield* set(deadCodeFailure, {
 			didFail: true,
@@ -44320,6 +44446,7 @@ const runInspect = (input, hooks = {}) => gen(function* () {
 	let lastReportedTotalFileCount = 0;
 	let lintCacheHitFileCount = null;
 	let lintCacheTotalFileCount = null;
+	let deadCodeCacheHit = null;
 	const baseLintStream = linterService.run({
 		rootDirectory: scanDirectory,
 		project,
@@ -44449,6 +44576,7 @@ const runInspect = (input, hooks = {}) => gen(function* () {
 		securityScanFailed,
 		lintCacheHitFileCount,
 		lintCacheTotalFileCount,
+		deadCodeCacheHit: lintFailureState.didFail ? null : deadCodeCacheHit,
 		suppressedRuleCounts: transform.summarizeSuppressions()
 	};
 }).pipe(withSpan("runInspect", { attributes: {
@@ -45230,6 +45358,7 @@ const isNonInteractiveEnvironment = () => NON_INTERACTIVE_ENVIRONMENT_VARIABLES.
 const REACT_DOCTOR_CONFIG_PROJECT_NAME = "react-doctor";
 const STAGED_FILES_TEMP_DIR_PREFIX = "react-doctor-staged-";
 const BASELINE_FILES_TEMP_DIR_PREFIX = "react-doctor-baseline-";
+const RUN_GIT_MAX_BUFFER_BYTES = 64 * 1024 * 1024;
 const GH_DEFAULT_BRANCH_PROBE_TIMEOUT_MS = 5e3;
 const CI_TRUST_COMPANIES = "PayPal, Rippling, and Alibaba";
 const WELCOME_EXPLANATION_HOLD_MS = 1e3;
@@ -45320,7 +45449,7 @@ const makeNoopConsole = () => ({
 });
 //#endregion
 //#region src/cli/utils/version.ts
-const VERSION = "0.6.3-dev.8325343";
+const VERSION = "0.6.3-dev.8c004f0";
 //#endregion
 //#region src/cli/utils/json-mode.ts
 let context = null;
@@ -45689,13 +45818,13 @@ const isDevVersion = (version) => version === "0.0.0" || version.includes("-");
 * uploads source-map artifacts under, so stack frames symbolicate. Honors the
 * standard `SENTRY_RELEASE` override.
 */
-const resolveSentryRelease = () => process.env.SENTRY_RELEASE || `react-doctor@0.6.3-dev.8325343`;
+const resolveSentryRelease = () => process.env.SENTRY_RELEASE || `react-doctor@0.6.3-dev.8c004f0`;
 /**
 * Deployment environment shown in Sentry's environment filter. Defaults to
 * `production` for tagged releases and `development` for dev/unbuilt versions,
 * overridable via the standard `SENTRY_ENVIRONMENT` env var.
 */
-const resolveSentryEnvironment = () => process.env.SENTRY_ENVIRONMENT || (isDevVersion("0.6.3-dev.8325343") ? "development" : "production");
+const resolveSentryEnvironment = () => process.env.SENTRY_ENVIRONMENT || (isDevVersion("0.6.3-dev.8c004f0") ? "development" : "production");
 /**
 * Performance-tracing sample rate in `[0, 1]`. Reads `SENTRY_TRACES_SAMPLE_RATE`
 * (set to `0` to disable tracing) and falls back to
@@ -45896,7 +46025,8 @@ const runGit = (projectRoot, args) => {
 				"ignore",
 				"pipe",
 				"ignore"
-			]
+			],
+			maxBuffer: RUN_GIT_MAX_BUFFER_BYTES
 		}).trim();
 	} catch {
 		return null;
@@ -57922,7 +58052,8 @@ const buildOutcomeAttributes = (input) => {
 		}),
 		...withNamespace("deadCode", {
 			failed: input.didDeadCodeFail ?? null,
-			overlapped: input.deadCodeOverlapped ?? null
+			overlapped: input.deadCodeOverlapped ?? null,
+			cacheHit: result.deadCodeCacheHit ?? null
 		}),
 		...withNamespace("supplyChain", { overlapTimedOut: input.supplyChainOverlapTimedOut ?? null }),
 		...withNamespace("securityScan", { failed: input.securityScanFailed ?? null }),
@@ -59245,13 +59376,89 @@ const stringifyStableJson = (value) => {
 };
 const hashString = (value) => crypto.createHash("sha1").update(value).digest("hex");
 const readHeadSha = (projectDirectory) => runGit(projectDirectory, ["rev-parse", "HEAD"]);
-const isWorktreeClean = (projectDirectory) => {
-	const status = runGit(projectDirectory, [
+const parseWorktreeStatusRecords = (statusOutput) => {
+	const entries = [];
+	const tokens = statusOutput.split("\0");
+	for (let tokenIndex = 0; tokenIndex < tokens.length; tokenIndex += 1) {
+		let record = tokens[tokenIndex];
+		if (record.length === 0) continue;
+		if (record.length < 3 || record[2] !== " ") {
+			if (tokenIndex !== 0) return null;
+			record = ` ${record}`;
+		}
+		if (record.length < 4 || record[2] !== " ") return null;
+		const statusCode = record.slice(0, 2);
+		const recordPath = record.slice(3);
+		if (statusCode.includes("R") || statusCode.includes("C")) {
+			tokenIndex += 1;
+			const originPath = tokens[tokenIndex];
+			if (originPath === void 0 || originPath.length === 0) return null;
+			entries.push({
+				statusCode,
+				path: recordPath,
+				originPath
+			});
+			continue;
+		}
+		entries.push({
+			statusCode,
+			path: recordPath
+		});
+	}
+	return entries;
+};
+const buildDirtyPathContentFingerprint = (absolutePath, statusCode) => {
+	let stats;
+	try {
+		stats = fs.lstatSync(absolutePath);
+	} catch {
+		return statusCode.includes("D") ? "deleted" : null;
+	}
+	if (stats.isSymbolicLink()) try {
+		return `link:${fs.readlinkSync(absolutePath)}`;
+	} catch {
+		return null;
+	}
+	if (!stats.isFile()) return null;
+	if (stats.size > 10485760) return `stat:${stats.mtimeMs}:${stats.size}`;
+	return hashFileContents(absolutePath);
+};
+const buildWorktreeFingerprint = (projectDirectory) => {
+	const statusOutput = runGit(projectDirectory, [
 		"status",
 		"--porcelain=v1",
-		"--untracked-files=normal"
+		"-z",
+		"--untracked-files=all"
 	]);
-	return status !== null && status.length === 0;
+	if (statusOutput === null) return null;
+	if (statusOutput.length === 0) return [];
+	const statusEntries = parseWorktreeStatusRecords(statusOutput);
+	if (statusEntries === null) return null;
+	if (statusEntries.length > 300) return null;
+	const repositoryRoot = runGit(projectDirectory, ["rev-parse", "--show-toplevel"]);
+	if (repositoryRoot === null) return null;
+	const dirtyEntries = [];
+	for (const statusEntry of statusEntries) {
+		const contentFingerprint = buildDirtyPathContentFingerprint(path.join(repositoryRoot, statusEntry.path), statusEntry.statusCode);
+		if (contentFingerprint === null) return null;
+		dirtyEntries.push({
+			...statusEntry,
+			contentFingerprint
+		});
+	}
+	return dirtyEntries.sort((firstEntry, secondEntry) => {
+		const firstSortKey = `${firstEntry.path}
${firstEntry.statusCode}`;
+		const secondSortKey = `${secondEntry.path}
${secondEntry.statusCode}`;
+		return firstSortKey < secondSortKey ? -1 : firstSortKey > secondSortKey ? 1 : 0;
+	});
+};
+const DOTENV_FILE_NAME_PATTERN = /^\.env(\.|$)/;
+const resolveDotenvFingerprint = (projectDirectory) => {
+	try {
+		return fs.readdirSync(projectDirectory).filter((entryName) => DOTENV_FILE_NAME_PATTERN.test(entryName)).sort().map((entryName) => `${entryName}=${fileFingerprint(path.join(projectDirectory, entryName)) ?? "unreadable"}`);
+	} catch {
+		return [];
+	}
 };
 const hasHiddenTrackedFileState = (projectDirectory) => {
 	const output = runGit(projectDirectory, ["ls-files", "-v"]);
@@ -59334,8 +59541,9 @@ const resolveToolchainFingerprint = (nodeBinaryPath) => {
 };
 const buildScanResultCacheKey = (input) => {
 	if (isScanResultCacheDisabled()) return null;
-	if (!isWorktreeClean(input.projectDirectory)) return null;
 	if (hasHiddenTrackedFileState(input.projectDirectory)) return null;
+	const worktreeFingerprint = buildWorktreeFingerprint(input.projectDirectory);
+	if (worktreeFingerprint === null) return null;
 	const headSha = readHeadSha(input.projectDirectory);
 	if (headSha === null) return null;
 	if (stringifyStableJson(input.userConfig) === null) return null;
@@ -59343,6 +59551,8 @@ const buildScanResultCacheKey = (input) => {
 		schemaVersion: 3,
 		projectIdentity: resolveProjectIdentity(input.projectDirectory),
 		headSha,
+		worktreeFingerprint,
+		dotenvFingerprint: resolveDotenvFingerprint(input.projectDirectory),
 		reactDoctorVersion: input.version,
 		nodeVersion: process.version,
 		toolchainFingerprint: resolveToolchainFingerprint(input.nodeBinaryPath),
@@ -59735,7 +59945,8 @@ const runInspectWithRuntime = async (directory, options, userConfig, hasConfigOv
 		scanMode: baselineDelta ? "baseline" : isDiffMode ? "diff" : "full",
 		baselineDegraded,
 		lintCacheHitFileCount: output.lintCacheHitFileCount,
-		lintCacheTotalFileCount: output.lintCacheTotalFileCount
+		lintCacheTotalFileCount: output.lintCacheTotalFileCount,
+		deadCodeCacheHit: output.deadCodeCacheHit
 	});
 	recordOnboardingCompletion(options);
 	return result;
@@ -59770,6 +59981,7 @@ const renderAndRecordScan = async (input) => {
 		scanElapsedMilliseconds: input.payload.scanElapsedMilliseconds,
 		lintCacheHitFileCount: input.lintCacheHitFileCount ?? null,
 		lintCacheTotalFileCount: input.lintCacheTotalFileCount ?? null,
+		deadCodeCacheHit: input.deadCodeCacheHit ?? null,
 		baselineDelta: input.payload.baselineDelta
 	}), input.options.silent));
 	const { workerCount: resolvedWorkerCount, parallel } = resolveWorkerTelemetry(input.payload.scanConcurrency, input.options.concurrency);
@@ -59808,7 +60020,7 @@ const renderAndRecordScan = async (input) => {
 	return result;
 };
 const finalizeAndRender = (input) => gen(function* () {
-	const { options, elapsedMilliseconds, diagnostics, score, project, userConfig, didLintFail, lintFailureReason, lintPartialFailures, didDeadCodeFail, deadCodeFailureReason, directory, scannedFileCount, scannedFilePaths, scanElapsedMilliseconds, lintCacheHitFileCount, lintCacheTotalFileCount, baselineDelta } = input;
+	const { options, elapsedMilliseconds, diagnostics, score, project, userConfig, didLintFail, lintFailureReason, lintPartialFailures, didDeadCodeFail, deadCodeFailureReason, directory, scannedFileCount, scannedFilePaths, scanElapsedMilliseconds, lintCacheHitFileCount, lintCacheTotalFileCount, deadCodeCacheHit, baselineDelta } = input;
 	const { skippedChecks, skippedCheckReasons } = buildSkippedChecks({
 		didLintFail,
 		lintFailureReason,
@@ -59832,6 +60044,7 @@ const finalizeAndRender = (input) => gen(function* () {
 			lintCacheHitFileCount,
 			lintCacheTotalFileCount
 		} : {},
+		...deadCodeCacheHit !== null ? { deadCodeCacheHit } : {},
 		...baselineDelta ? { baselineDelta } : {}
 	});
 	if (options.suppressRendering) return buildResult();
@@ -63678,4 +63891,4 @@ Promise.resolve().then(() => assertNoRemovedFlags(process.argv)).then(() => prog
 export {};
 
 //# sourceMappingURL=cli.js.map
-//# debugId=2921b8ff-14cf-5604-8ae5-b65b4f1347fc
+//# debugId=e34cb22b-7751-5b1a-8422-6c5eb384dbef

package/dist/index.d.ts

@@ -9743,6 +9743,14 @@ interface InspectResult {
    */
   lintCacheHitFileCount?: number | null;
   lintCacheTotalFileCount?: number | null;
+  /**
+   * Dead-code result cache outcome: `true` when the pass replayed a cached
+   * result (the analysis never ran), `false` on a fresh analysis. Absent when
+   * the pass never consulted the cache — dead-code skipped, the cache
+   * disabled, or a whole-repo cache replay where no analysis ran. The CLI
+   * projects it onto the Sentry wide event as `deadCode.cacheHit`.
+   */
+  deadCodeCacheHit?: boolean | null;
   /**
    * Present only for a baseline run (`InspectOptions.baseline` set). The
    * `diagnostics` above are then the *introduced* findings only; this

package/dist/index.js

@@ -1,5 +1,5 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="8565c6ea-39f3-51e6-895a-ae9f7c026d0e")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="367db57b-e5c7-577e-9efa-ed68817a8271")}catch(e){}}();
 import { r as __toESM$1, t as __commonJSMin$1 } from "./chunk-N93fKeF6.js";
 import { createRequire } from "node:module";
 import * as NFS from "node:fs";
@@ -32927,6 +32927,7 @@ const SOCKET_PACKAGE_PAGE_BASE = "https://socket.dev/npm/package";
 const SOCKET_FREE_USER_AGENT = "react-doctor-supply-chain";
 const FILE_LINT_CACHE_FILENAME = "file-lint-cache.json";
 const FILE_LINT_CACHE_MAX_FILE_COUNT = 5e4;
+const DEAD_CODE_CACHE_FILENAME = "dead-code-cache.json";
 const SUPPLY_CHAIN_PLUGIN = "socket";
 const SUPPLY_CHAIN_RULE = "low-supply-chain-score";
 const SUPPLY_CHAIN_CATEGORY = "Security";
@@ -35613,6 +35614,25 @@ var PerFileLintCacheEnabled = class extends Reference("react-doctor/PerFileLintC
 	if (CACHE_DISABLED_VALUES.has(noFileCache)) return false;
 	return true;
 } }) {};
+/**
+* Whether the whole-project dead-code result cache
+* (`dead-code/dead-code-result-cache.ts`) is active. Defaults ON — a rescan
+* whose inputs (source tree, manifests, configs, analyzer version) are
+* unchanged replays the stored diagnostics instead of re-running the
+* analysis worker. Opt-OUT, two knobs (matching the per-file lint cache):
+*
+*   - `REACT_DOCTOR_NO_CACHE` — the global off-switch.
+*   - `REACT_DOCTOR_NO_DEAD_CODE_CACHE` — granular: bust only this cache.
+*
+* Tests override via `Layer.succeed(DeadCodeResultCacheEnabled, false)`.
+*/
+var DeadCodeResultCacheEnabled = class extends Reference("react-doctor/DeadCodeResultCacheEnabled", { defaultValue: () => {
+	const noCache = process.env["REACT_DOCTOR_NO_CACHE"]?.toLowerCase() ?? "";
+	const noDeadCodeCache = process.env["REACT_DOCTOR_NO_DEAD_CODE_CACHE"]?.toLowerCase() ?? "";
+	if (CACHE_DISABLED_VALUES.has(noCache)) return false;
+	if (CACHE_DISABLED_VALUES.has(noDeadCodeCache)) return false;
+	return true;
+} }) {};
 const DIAGNOSTIC_SURFACES = [
 	"cli",
 	"prComment",
@@ -37301,6 +37321,108 @@ const collectDeadCodeIgnorePatterns = (rootDirectory) => {
 	return [...seen].filter((pattern) => pattern.length > 0);
 };
 const collectDeadCodeEntryPatterns = (rootDirectory) => [...new Set(collectKnipPatterns(rootDirectory, "entry"))].filter((pattern) => pattern.length > 0);
+const atomicWriteJson = (filePath, value) => {
+	try {
+		NFS.mkdirSync(Path.dirname(filePath), { recursive: true });
+		const temporaryPath = `${filePath}.${process.pid}.tmp`;
+		NFS.writeFileSync(temporaryPath, JSON.stringify(value));
+		NFS.renameSync(temporaryPath, filePath);
+	} catch {
+		return;
+	}
+};
+const failOpenReadJson = (filePath, fallback) => {
+	try {
+		return JSON.parse(NFS.readFileSync(filePath, "utf8"));
+	} catch {
+		return fallback;
+	}
+};
+const ANALYZED_FILE_EXTENSIONS = new Set([
+	".ts",
+	".tsx",
+	".js",
+	".jsx",
+	".mts",
+	".mjs",
+	".cts",
+	".cjs",
+	".mdx",
+	".astro",
+	".graphql",
+	".gql",
+	".css",
+	".scss",
+	".vue",
+	".svelte"
+]);
+const ANALYZED_MANIFEST_NAMES = new Set([
+	"package.json",
+	"knip.json",
+	"app.json",
+	"pnpm-workspace.yaml",
+	"lerna.json",
+	"pnpm-lock.yaml",
+	"package-lock.json",
+	"yarn.lock",
+	"bun.lock",
+	"bun.lockb",
+	"deno.lock",
+	".gitignore"
+]);
+const isTsConfigLikeFile = (fileName) => (fileName.startsWith("tsconfig") || fileName.startsWith("jsconfig")) && fileName.endsWith(".json");
+const isFingerprintedFile = (fileName) => ANALYZED_FILE_EXTENSIONS.has(Path.extname(fileName).toLowerCase()) || ANALYZED_MANIFEST_NAMES.has(fileName) || isTsConfigLikeFile(fileName);
+const collectAnalyzedFileFingerprints = (rootDirectory) => {
+	const fingerprints = [];
+	for (const { absolutePath, name } of walkSourceTreeFiles(rootDirectory)) {
+		if (!isFingerprintedFile(name)) continue;
+		try {
+			const fileStat = NFS.statSync(absolutePath);
+			const relativePath = Path.relative(rootDirectory, absolutePath).replace(/\\/g, "/");
+			fingerprints.push(`${relativePath}:${fileStat.mtimeMs}:${fileStat.size}`);
+		} catch {}
+	}
+	return fingerprints.sort();
+};
+const bundledRequire$2 = createRequire(import.meta.url);
+const resolveDeslopVersion = () => {
+	try {
+		const packageJson = JSON.parse(NFS.readFileSync(bundledRequire$2.resolve("deslop-js/package.json"), "utf8"));
+		return isRecord(packageJson) && typeof packageJson.version === "string" ? packageJson.version : "unknown";
+	} catch {
+		return "unknown";
+	}
+};
+const computeDeadCodeCacheKey = (input) => crypto.createHash("sha1").update(JSON.stringify({
+	schemaVersion: 1,
+	deslopVersion: resolveDeslopVersion(),
+	deslopJsModuleSpecifier: input.deslopJsModuleSpecifier,
+	entryPatterns: input.entryPatterns,
+	ignorePatterns: input.ignorePatterns,
+	tsConfigFile: input.tsConfigPath === void 0 ? null : Path.relative(input.rootDirectory, input.tsConfigPath).replace(/\\/g, "/"),
+	files: collectAnalyzedFileFingerprints(input.rootDirectory)
+})).digest("hex");
+const validateDiagnostic$1 = decodeUnknownSync(Diagnostic);
+const decodeCachedDiagnostics = (raw) => {
+	try {
+		for (const entry of raw) validateDiagnostic$1(entry);
+		return raw;
+	} catch {
+		return null;
+	}
+};
+const lookupDeadCodeResultCache = (cacheDirectory, cacheKey) => {
+	const persisted = failOpenReadJson(Path.join(cacheDirectory, DEAD_CODE_CACHE_FILENAME), null);
+	if (persisted === null || !isRecord(persisted) || persisted.version !== 1 || persisted.key !== cacheKey || !Array.isArray(persisted.diagnostics)) return null;
+	return decodeCachedDiagnostics(persisted.diagnostics);
+};
+const storeDeadCodeResultCache = (cacheDirectory, cacheKey, diagnostics) => {
+	atomicWriteJson(Path.join(cacheDirectory, DEAD_CODE_CACHE_FILENAME), {
+		version: 1,
+		key: cacheKey,
+		diagnostics
+	});
+};
 const readSystemFacts = () => ({
 	availableCores: os.availableParallelism(),
 	totalMemoryBytes: os.totalmem(),
@@ -37369,6 +37491,21 @@ const withDeadCodeWorkerSlot = async (task, abortSignal) => {
 		releaseSlot();
 	}
 };
+const projectCacheSubdir = (projectDirectory) => crypto.createHash("sha256").update(projectDirectory).digest("hex").slice(0, 16);
+const resolveReactDoctorCacheDir = (projectDirectory) => {
+	const cacheDirOverride = process.env["REACT_DOCTOR_CACHE_DIR"]?.trim();
+	if (cacheDirOverride) return Path.join(cacheDirOverride, projectCacheSubdir(projectDirectory));
+	const nodeModulesDirectory = Path.join(projectDirectory, "node_modules");
+	if (NFS.existsSync(nodeModulesDirectory)) return Path.join(nodeModulesDirectory, ".cache", "react-doctor");
+	return Path.join(os.tmpdir(), `react-doctor-cache-${resolveUserCacheScope()}`, projectCacheSubdir(projectDirectory));
+};
+const resolveUserCacheScope = () => {
+	try {
+		return String(process.getuid?.() ?? os.userInfo().username);
+	} catch {
+		return "shared";
+	}
+};
 /**
 * Resolves a path to its canonical, symlink-free form, falling back to
 * the input when it cannot be realpath'd (broken symlink, permission
@@ -37664,13 +37801,27 @@ const checkDeadCode = async (options) => {
 	if (!NFS.existsSync(Path.join(rootDirectory, "package.json"))) return [];
 	const entryPatterns = collectDeadCodeEntryPatterns(rootDirectory);
 	const ignorePatterns = collectDeadCodeIgnorePatterns(rootDirectory);
+	const tsConfigPath = resolveTsConfigPath(rootDirectory);
+	const deslopJsModuleSpecifier = options.deslopJsModuleSpecifier ?? import.meta.resolve("deslop-js");
+	const cacheKey = options.cacheEnabled ? computeDeadCodeCacheKey({
+		rootDirectory,
+		entryPatterns,
+		ignorePatterns,
+		tsConfigPath,
+		deslopJsModuleSpecifier
+	}) : null;
+	if (cacheKey !== null) {
+		const cachedDiagnostics = lookupDeadCodeResultCache(resolveReactDoctorCacheDir(rootDirectory), cacheKey);
+		options.onCacheOutcome?.(cachedDiagnostics !== null);
+		if (cachedDiagnostics !== null) return [...cachedDiagnostics];
+	}
 	const spawnAndRun = () => {
 		return runDeadCodeWorkerWithTimeout((options.createWorker ?? createDeadCodeWorker)({
 			rootDirectory,
 			entryPatterns,
-			tsConfigPath: resolveTsConfigPath(rootDirectory),
+			tsConfigPath,
 			ignorePatterns,
-			deslopJsModuleSpecifier: options.deslopJsModuleSpecifier ?? import.meta.resolve("deslop-js"),
+			deslopJsModuleSpecifier,
 			parseConcurrency: options.parseConcurrency
 		}), options.workerTimeoutMs ?? 12e4, options.abortSignal);
 	};
@@ -37731,6 +37882,7 @@ const checkDeadCode = async (options) => {
 			category: DEAD_CODE_CATEGORY
 		});
 	}
+	if (cacheKey !== null) storeDeadCodeResultCache(resolveReactDoctorCacheDir(rootDirectory), cacheKey, diagnostics);
 	return diagnostics;
 };
 const DEAD_CODE_RULE_KEY_PREFIX = `${DEAD_CODE_PLUGIN}/`;
@@ -37833,12 +37985,15 @@ var Config = class Config extends Service()("react-doctor/Config") {
 */
 var DeadCode = class DeadCode extends Service()("react-doctor/DeadCode") {
 	static layerNode = succeed$3(DeadCode, DeadCode.of({ run: (input) => unwrap(fn("DeadCode.run")(function* () {
+		const cacheEnabled = yield* DeadCodeResultCacheEnabled;
 		return yield* tryPromise({
 			try: (signal) => checkDeadCode({
 				rootDirectory: input.rootDirectory,
 				parseConcurrency: input.parseConcurrency,
 				workerTimeoutMs: input.workerTimeoutMs,
-				abortSignal: signal
+				abortSignal: signal,
+				cacheEnabled,
+				onCacheOutcome: input.onCacheOutcome
 			}),
 			catch: (cause) => new ReactDoctorError({ reason: new DeadCodeAnalysisFailed({ cause }) })
 		}).pipe(map$3((diagnostics) => fromIterable$1(diagnostics)));
@@ -38764,23 +38919,6 @@ const createOxlintConfig = ({ pluginPath, project, customRulesOnly = false, exte
 		}
 	};
 };
-const atomicWriteJson = (filePath, value) => {
-	try {
-		NFS.mkdirSync(Path.dirname(filePath), { recursive: true });
-		const temporaryPath = `${filePath}.${process.pid}.tmp`;
-		NFS.writeFileSync(temporaryPath, JSON.stringify(value));
-		NFS.renameSync(temporaryPath, filePath);
-	} catch {
-		return;
-	}
-};
-const failOpenReadJson = (filePath, fallback) => {
-	try {
-		return JSON.parse(NFS.readFileSync(filePath, "utf8"));
-	} catch {
-		return fallback;
-	}
-};
 const validateDiagnostic = decodeUnknownSync(Diagnostic);
 const decodeFileDiagnostics = (raw) => {
 	if (!Array.isArray(raw)) return null;
@@ -39908,21 +40046,6 @@ const planLintBatches = ({ baseArgs, files, sizeByFile }) => {
 	}
 	return batches.filter((batch) => batch.fileIndexes.length > 0).map((batch) => batch.fileIndexes.sort((leftIndex, rightIndex) => leftIndex - rightIndex).map((fileIndex) => files[fileIndex]));
 };
-const projectCacheSubdir = (projectDirectory) => crypto.createHash("sha256").update(projectDirectory).digest("hex").slice(0, 16);
-const resolveReactDoctorCacheDir = (projectDirectory) => {
-	const cacheDirOverride = process.env["REACT_DOCTOR_CACHE_DIR"]?.trim();
-	if (cacheDirOverride) return Path.join(cacheDirOverride, projectCacheSubdir(projectDirectory));
-	const nodeModulesDirectory = Path.join(projectDirectory, "node_modules");
-	if (NFS.existsSync(nodeModulesDirectory)) return Path.join(nodeModulesDirectory, ".cache", "react-doctor");
-	return Path.join(os.tmpdir(), `react-doctor-cache-${resolveUserCacheScope()}`, projectCacheSubdir(projectDirectory));
-};
-const resolveUserCacheScope = () => {
-	try {
-		return String(process.getuid?.() ?? os.userInfo().username);
-	} catch {
-		return "shared";
-	}
-};
 /**
 * Atomically (re)writes the generated oxlintrc.json. Used twice in
 * the runner: once for the primary scan, once for the
@@ -41049,7 +41172,10 @@ const runInspect = (input, hooks = {}) => gen(function* () {
 	const buildCollectDeadCode = (deadCodeTimeout) => runCollect(applyPerElementPipeline(deadCodeService.run({
 		rootDirectory: scanDirectory,
 		parseConcurrency: deadCodeParseConcurrency,
-		workerTimeoutMs: deadCodeTimeout.workerTimeoutMs
+		workerTimeoutMs: deadCodeTimeout.workerTimeoutMs,
+		onCacheOutcome: (didHitCache) => {
+			deadCodeCacheHit = didHitCache;
+		}
 	}).pipe(catchTag("ReactDoctorError", (error) => unwrap(gen(function* () {
 		yield* set(deadCodeFailure, {
 			didFail: true,
@@ -41077,6 +41203,7 @@ const runInspect = (input, hooks = {}) => gen(function* () {
 	let lastReportedTotalFileCount = 0;
 	let lintCacheHitFileCount = null;
 	let lintCacheTotalFileCount = null;
+	let deadCodeCacheHit = null;
 	const baseLintStream = linterService.run({
 		rootDirectory: scanDirectory,
 		project,
@@ -41206,6 +41333,7 @@ const runInspect = (input, hooks = {}) => gen(function* () {
 		securityScanFailed,
 		lintCacheHitFileCount,
 		lintCacheTotalFileCount,
+		deadCodeCacheHit: lintFailureState.didFail ? null : deadCodeCacheHit,
 		suppressedRuleCounts: transform.summarizeSuppressions()
 	};
 }).pipe(withSpan("runInspect", { attributes: {
@@ -41846,4 +41974,4 @@ const toJsonReport = (result, options) => buildJsonReport({
 export { AmbiguousProjectError, NoReactDependencyError, NotADirectoryError, PackageJsonNotFoundError, ProjectNotFoundError, ReactDoctorError, buildJsonReport, buildJsonReportError, clearCaches, defineConfig, diagnose, filterSourceFiles, getDiffInfo, isProjectDiscoveryError, isReactDoctorError, summarizeDiagnostics, toJsonReport };
 
 //# sourceMappingURL=index.js.map
-//# debugId=8565c6ea-39f3-51e6-895a-ae9f7c026d0e
+//# debugId=367db57b-e5c7-577e-9efa-ed68817a8271

package/dist/lsp.js

@@ -32986,6 +32986,7 @@ const SOCKET_PACKAGE_PAGE_BASE = "https://socket.dev/npm/package";
 const SOCKET_FREE_USER_AGENT = "react-doctor-supply-chain";
 const FILE_LINT_CACHE_FILENAME = "file-lint-cache.json";
 const FILE_LINT_CACHE_MAX_FILE_COUNT = 5e4;
+const DEAD_CODE_CACHE_FILENAME = "dead-code-cache.json";
 const SUPPLY_CHAIN_PLUGIN = "socket";
 const SUPPLY_CHAIN_RULE = "low-supply-chain-score";
 const SUPPLY_CHAIN_CATEGORY = "Security";
@@ -35646,6 +35647,25 @@ var PerFileLintCacheEnabled = class extends Reference("react-doctor/PerFileLintC
 	if (CACHE_DISABLED_VALUES.has(noFileCache)) return false;
 	return true;
 } }) {};
+/**
+* Whether the whole-project dead-code result cache
+* (`dead-code/dead-code-result-cache.ts`) is active. Defaults ON — a rescan
+* whose inputs (source tree, manifests, configs, analyzer version) are
+* unchanged replays the stored diagnostics instead of re-running the
+* analysis worker. Opt-OUT, two knobs (matching the per-file lint cache):
+*
+*   - `REACT_DOCTOR_NO_CACHE` — the global off-switch.
+*   - `REACT_DOCTOR_NO_DEAD_CODE_CACHE` — granular: bust only this cache.
+*
+* Tests override via `Layer.succeed(DeadCodeResultCacheEnabled, false)`.
+*/
+var DeadCodeResultCacheEnabled = class extends Reference("react-doctor/DeadCodeResultCacheEnabled", { defaultValue: () => {
+	const noCache = process.env["REACT_DOCTOR_NO_CACHE"]?.toLowerCase() ?? "";
+	const noDeadCodeCache = process.env["REACT_DOCTOR_NO_DEAD_CODE_CACHE"]?.toLowerCase() ?? "";
+	if (CACHE_DISABLED_VALUES.has(noCache)) return false;
+	if (CACHE_DISABLED_VALUES.has(noDeadCodeCache)) return false;
+	return true;
+} }) {};
 const DIAGNOSTIC_SURFACES = [
 	"cli",
 	"prComment",
@@ -37286,6 +37306,108 @@ const collectDeadCodeIgnorePatterns = (rootDirectory) => {
 	return [...seen].filter((pattern) => pattern.length > 0);
 };
 const collectDeadCodeEntryPatterns = (rootDirectory) => [...new Set(collectKnipPatterns(rootDirectory, "entry"))].filter((pattern) => pattern.length > 0);
+const atomicWriteJson = (filePath, value) => {
+	try {
+		NFS.mkdirSync(Path.dirname(filePath), { recursive: true });
+		const temporaryPath = `${filePath}.${process.pid}.tmp`;
+		NFS.writeFileSync(temporaryPath, JSON.stringify(value));
+		NFS.renameSync(temporaryPath, filePath);
+	} catch {
+		return;
+	}
+};
+const failOpenReadJson = (filePath, fallback) => {
+	try {
+		return JSON.parse(NFS.readFileSync(filePath, "utf8"));
+	} catch {
+		return fallback;
+	}
+};
+const ANALYZED_FILE_EXTENSIONS = new Set([
+	".ts",
+	".tsx",
+	".js",
+	".jsx",
+	".mts",
+	".mjs",
+	".cts",
+	".cjs",
+	".mdx",
+	".astro",
+	".graphql",
+	".gql",
+	".css",
+	".scss",
+	".vue",
+	".svelte"
+]);
+const ANALYZED_MANIFEST_NAMES = new Set([
+	"package.json",
+	"knip.json",
+	"app.json",
+	"pnpm-workspace.yaml",
+	"lerna.json",
+	"pnpm-lock.yaml",
+	"package-lock.json",
+	"yarn.lock",
+	"bun.lock",
+	"bun.lockb",
+	"deno.lock",
+	".gitignore"
+]);
+const isTsConfigLikeFile = (fileName) => (fileName.startsWith("tsconfig") || fileName.startsWith("jsconfig")) && fileName.endsWith(".json");
+const isFingerprintedFile = (fileName) => ANALYZED_FILE_EXTENSIONS.has(Path.extname(fileName).toLowerCase()) || ANALYZED_MANIFEST_NAMES.has(fileName) || isTsConfigLikeFile(fileName);
+const collectAnalyzedFileFingerprints = (rootDirectory) => {
+	const fingerprints = [];
+	for (const { absolutePath, name } of walkSourceTreeFiles(rootDirectory)) {
+		if (!isFingerprintedFile(name)) continue;
+		try {
+			const fileStat = NFS.statSync(absolutePath);
+			const relativePath = Path.relative(rootDirectory, absolutePath).replace(/\\/g, "/");
+			fingerprints.push(`${relativePath}:${fileStat.mtimeMs}:${fileStat.size}`);
+		} catch {}
+	}
+	return fingerprints.sort();
+};
+const bundledRequire$2 = createRequire(import.meta.url);
+const resolveDeslopVersion = () => {
+	try {
+		const packageJson = JSON.parse(NFS.readFileSync(bundledRequire$2.resolve("deslop-js/package.json"), "utf8"));
+		return isRecord(packageJson) && typeof packageJson.version === "string" ? packageJson.version : "unknown";
+	} catch {
+		return "unknown";
+	}
+};
+const computeDeadCodeCacheKey = (input) => crypto.createHash("sha1").update(JSON.stringify({
+	schemaVersion: 1,
+	deslopVersion: resolveDeslopVersion(),
+	deslopJsModuleSpecifier: input.deslopJsModuleSpecifier,
+	entryPatterns: input.entryPatterns,
+	ignorePatterns: input.ignorePatterns,
+	tsConfigFile: input.tsConfigPath === void 0 ? null : Path.relative(input.rootDirectory, input.tsConfigPath).replace(/\\/g, "/"),
+	files: collectAnalyzedFileFingerprints(input.rootDirectory)
+})).digest("hex");
+const validateDiagnostic$1 = decodeUnknownSync(Diagnostic);
+const decodeCachedDiagnostics = (raw) => {
+	try {
+		for (const entry of raw) validateDiagnostic$1(entry);
+		return raw;
+	} catch {
+		return null;
+	}
+};
+const lookupDeadCodeResultCache = (cacheDirectory, cacheKey) => {
+	const persisted = failOpenReadJson(Path.join(cacheDirectory, DEAD_CODE_CACHE_FILENAME), null);
+	if (persisted === null || !isRecord(persisted) || persisted.version !== 1 || persisted.key !== cacheKey || !Array.isArray(persisted.diagnostics)) return null;
+	return decodeCachedDiagnostics(persisted.diagnostics);
+};
+const storeDeadCodeResultCache = (cacheDirectory, cacheKey, diagnostics) => {
+	atomicWriteJson(Path.join(cacheDirectory, DEAD_CODE_CACHE_FILENAME), {
+		version: 1,
+		key: cacheKey,
+		diagnostics
+	});
+};
 const readSystemFacts = () => ({
 	availableCores: os.availableParallelism(),
 	totalMemoryBytes: os.totalmem(),
@@ -37354,6 +37476,21 @@ const withDeadCodeWorkerSlot = async (task, abortSignal) => {
 		releaseSlot();
 	}
 };
+const projectCacheSubdir = (projectDirectory) => crypto.createHash("sha256").update(projectDirectory).digest("hex").slice(0, 16);
+const resolveReactDoctorCacheDir = (projectDirectory) => {
+	const cacheDirOverride = process.env["REACT_DOCTOR_CACHE_DIR"]?.trim();
+	if (cacheDirOverride) return Path.join(cacheDirOverride, projectCacheSubdir(projectDirectory));
+	const nodeModulesDirectory = Path.join(projectDirectory, "node_modules");
+	if (NFS.existsSync(nodeModulesDirectory)) return Path.join(nodeModulesDirectory, ".cache", "react-doctor");
+	return Path.join(os.tmpdir(), `react-doctor-cache-${resolveUserCacheScope()}`, projectCacheSubdir(projectDirectory));
+};
+const resolveUserCacheScope = () => {
+	try {
+		return String(process.getuid?.() ?? os.userInfo().username);
+	} catch {
+		return "shared";
+	}
+};
 /**
 * Resolves a path to its canonical, symlink-free form, falling back to
 * the input when it cannot be realpath'd (broken symlink, permission
@@ -37649,13 +37786,27 @@ const checkDeadCode = async (options) => {
 	if (!NFS.existsSync(Path.join(rootDirectory, "package.json"))) return [];
 	const entryPatterns = collectDeadCodeEntryPatterns(rootDirectory);
 	const ignorePatterns = collectDeadCodeIgnorePatterns(rootDirectory);
+	const tsConfigPath = resolveTsConfigPath(rootDirectory);
+	const deslopJsModuleSpecifier = options.deslopJsModuleSpecifier ?? import.meta.resolve("deslop-js");
+	const cacheKey = options.cacheEnabled ? computeDeadCodeCacheKey({
+		rootDirectory,
+		entryPatterns,
+		ignorePatterns,
+		tsConfigPath,
+		deslopJsModuleSpecifier
+	}) : null;
+	if (cacheKey !== null) {
+		const cachedDiagnostics = lookupDeadCodeResultCache(resolveReactDoctorCacheDir(rootDirectory), cacheKey);
+		options.onCacheOutcome?.(cachedDiagnostics !== null);
+		if (cachedDiagnostics !== null) return [...cachedDiagnostics];
+	}
 	const spawnAndRun = () => {
 		return runDeadCodeWorkerWithTimeout((options.createWorker ?? createDeadCodeWorker)({
 			rootDirectory,
 			entryPatterns,
-			tsConfigPath: resolveTsConfigPath(rootDirectory),
+			tsConfigPath,
 			ignorePatterns,
-			deslopJsModuleSpecifier: options.deslopJsModuleSpecifier ?? import.meta.resolve("deslop-js"),
+			deslopJsModuleSpecifier,
 			parseConcurrency: options.parseConcurrency
 		}), options.workerTimeoutMs ?? 12e4, options.abortSignal);
 	};
@@ -37716,6 +37867,7 @@ const checkDeadCode = async (options) => {
 			category: DEAD_CODE_CATEGORY
 		});
 	}
+	if (cacheKey !== null) storeDeadCodeResultCache(resolveReactDoctorCacheDir(rootDirectory), cacheKey, diagnostics);
 	return diagnostics;
 };
 const DEAD_CODE_RULE_KEY_PREFIX = `${DEAD_CODE_PLUGIN}/`;
@@ -37818,12 +37970,15 @@ var Config = class Config extends Service()("react-doctor/Config") {
 */
 var DeadCode = class DeadCode extends Service()("react-doctor/DeadCode") {
 	static layerNode = succeed$3(DeadCode, DeadCode.of({ run: (input) => unwrap(fn("DeadCode.run")(function* () {
+		const cacheEnabled = yield* DeadCodeResultCacheEnabled;
 		return yield* tryPromise({
 			try: (signal) => checkDeadCode({
 				rootDirectory: input.rootDirectory,
 				parseConcurrency: input.parseConcurrency,
 				workerTimeoutMs: input.workerTimeoutMs,
-				abortSignal: signal
+				abortSignal: signal,
+				cacheEnabled,
+				onCacheOutcome: input.onCacheOutcome
 			}),
 			catch: (cause) => new ReactDoctorError({ reason: new DeadCodeAnalysisFailed({ cause }) })
 		}).pipe(map$3((diagnostics) => fromIterable$1(diagnostics)));
@@ -38749,23 +38904,6 @@ const createOxlintConfig = ({ pluginPath, project, customRulesOnly = false, exte
 		}
 	};
 };
-const atomicWriteJson = (filePath, value) => {
-	try {
-		NFS.mkdirSync(Path.dirname(filePath), { recursive: true });
-		const temporaryPath = `${filePath}.${process.pid}.tmp`;
-		NFS.writeFileSync(temporaryPath, JSON.stringify(value));
-		NFS.renameSync(temporaryPath, filePath);
-	} catch {
-		return;
-	}
-};
-const failOpenReadJson = (filePath, fallback) => {
-	try {
-		return JSON.parse(NFS.readFileSync(filePath, "utf8"));
-	} catch {
-		return fallback;
-	}
-};
 const validateDiagnostic = decodeUnknownSync(Diagnostic);
 const decodeFileDiagnostics = (raw) => {
 	if (!Array.isArray(raw)) return null;
@@ -39893,21 +40031,6 @@ const planLintBatches = ({ baseArgs, files, sizeByFile }) => {
 	}
 	return batches.filter((batch) => batch.fileIndexes.length > 0).map((batch) => batch.fileIndexes.sort((leftIndex, rightIndex) => leftIndex - rightIndex).map((fileIndex) => files[fileIndex]));
 };
-const projectCacheSubdir = (projectDirectory) => crypto.createHash("sha256").update(projectDirectory).digest("hex").slice(0, 16);
-const resolveReactDoctorCacheDir = (projectDirectory) => {
-	const cacheDirOverride = process.env["REACT_DOCTOR_CACHE_DIR"]?.trim();
-	if (cacheDirOverride) return Path.join(cacheDirOverride, projectCacheSubdir(projectDirectory));
-	const nodeModulesDirectory = Path.join(projectDirectory, "node_modules");
-	if (NFS.existsSync(nodeModulesDirectory)) return Path.join(nodeModulesDirectory, ".cache", "react-doctor");
-	return Path.join(os.tmpdir(), `react-doctor-cache-${resolveUserCacheScope()}`, projectCacheSubdir(projectDirectory));
-};
-const resolveUserCacheScope = () => {
-	try {
-		return String(process.getuid?.() ?? os.userInfo().username);
-	} catch {
-		return "shared";
-	}
-};
 /**
 * Atomically (re)writes the generated oxlintrc.json. Used twice in
 * the runner: once for the primary scan, once for the
@@ -41034,7 +41157,10 @@ const runInspect = (input, hooks = {}) => gen(function* () {
 	const buildCollectDeadCode = (deadCodeTimeout) => runCollect(applyPerElementPipeline(deadCodeService.run({
 		rootDirectory: scanDirectory,
 		parseConcurrency: deadCodeParseConcurrency,
-		workerTimeoutMs: deadCodeTimeout.workerTimeoutMs
+		workerTimeoutMs: deadCodeTimeout.workerTimeoutMs,
+		onCacheOutcome: (didHitCache) => {
+			deadCodeCacheHit = didHitCache;
+		}
 	}).pipe(catchTag("ReactDoctorError", (error) => unwrap(gen(function* () {
 		yield* set(deadCodeFailure, {
 			didFail: true,
@@ -41062,6 +41188,7 @@ const runInspect = (input, hooks = {}) => gen(function* () {
 	let lastReportedTotalFileCount = 0;
 	let lintCacheHitFileCount = null;
 	let lintCacheTotalFileCount = null;
+	let deadCodeCacheHit = null;
 	const baseLintStream = linterService.run({
 		rootDirectory: scanDirectory,
 		project,
@@ -41191,6 +41318,7 @@ const runInspect = (input, hooks = {}) => gen(function* () {
 		securityScanFailed,
 		lintCacheHitFileCount,
 		lintCacheTotalFileCount,
+		deadCodeCacheHit: lintFailureState.didFail ? null : deadCodeCacheHit,
 		suppressedRuleCounts: transform.summarizeSuppressions()
 	};
 }).pipe(withSpan("runInspect", { attributes: {
@@ -43570,5 +43698,5 @@ const startLanguageServer = () => {
 };
 //#endregion
 export { startLanguageServer };
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="94a57ec3-d5a9-52ea-a743-e91d996065b8")}catch(e){}}();
-//# debugId=94a57ec3-d5a9-52ea-a743-e91d996065b8
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="46e851cc-7b86-5c73-afb0-e09296beab28")}catch(e){}}();
+//# debugId=46e851cc-7b86-5c73-afb0-e09296beab28

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "react-doctor",
-  "version": "0.6.3-dev.8325343",
+  "version": "0.6.3-dev.8c004f0",
   "description": "Your agent writes bad React. This catches it",
   "keywords": [
     "accessibility",
@@ -66,7 +66,7 @@
     "vscode-uri": "^3.1.0",
     "yaml": "^2.9.0",
     "deslop-js": "0.6.3",
-    "oxlint-plugin-react-doctor": "0.6.3-dev.8325343"
+    "oxlint-plugin-react-doctor": "0.6.3-dev.8c004f0"
   },
   "devDependencies": {
     "@types/babel__code-frame": "^7.27.0",