react-doctor 0.6.3-dev.ea9a775 → 0.7.0-dev.574cba6

package/dist/index.js

@@ -1,5 +1,5 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="b55ef8b2-8e9d-512b-81de-a01f6ce3e60e")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="5c52dece-7b5e-5102-9381-7d05fa45734f")}catch(e){}}();
 import { r as __toESM$1, t as __commonJSMin$1 } from "./chunk-N93fKeF6.js";
 import { createRequire } from "node:module";
 import * as NFS from "node:fs";
@@ -32929,13 +32929,14 @@ const SOCKET_FREE_USER_AGENT = "react-doctor-supply-chain";
 const FILE_LINT_CACHE_FILENAME = "file-lint-cache.json";
 const FILE_LINT_CACHE_MAX_FILE_COUNT = 5e4;
 const SIDECAR_LINT_CACHE_FILENAME = "sidecar-lint-cache.json";
-const CORE_PACKAGE_VERSION = "0.6.3";
+const CORE_PACKAGE_VERSION = "0.7.0";
 const DEAD_CODE_CACHE_FILENAME = "dead-code-cache.json";
 const DEAD_CODE_SUMMARY_CACHE_FILENAME = "dead-code-summaries.json";
 const SUPPLY_CHAIN_PLUGIN = "socket";
 const SUPPLY_CHAIN_RULE = "low-supply-chain-score";
 const SUPPLY_CHAIN_CATEGORY = "Security";
 const SUPPLY_CHAIN_OVERLAP_TIMEOUT_MS = 9e4;
+const SUPPLY_CHAIN_CACHE_TTL_MS = 864e5;
 const SUPPLY_CHAIN_CACHE_SUBDIR = "supply-chain";
 const SUPPLY_CHAIN_IGNORED_PACKAGES = new Set(["next"]);
 const hasIgnoredPathSegment = (relativePath) => relativePath.split(/[/\\]/).slice(0, -1).some((segment) => IGNORED_DIRECTORIES.has(segment));
@@ -37365,22 +37366,37 @@ const failOpenReadJson = (filePath, fallback) => {
 		return fallback;
 	}
 };
+const hashFileContents = (filePath) => {
+	try {
+		return crypto.createHash("sha1").update(NFS.readFileSync(filePath)).digest("hex");
+	} catch {
+		return null;
+	}
+};
 const ANALYZED_FILE_EXTENSIONS = new Set(DEFAULT_EXTENSIONS);
 const CORE_SIDE_MANIFEST_NAMES = ["knip.json", "deno.lock"];
 const ANALYZED_MANIFEST_NAMES = new Set([...ANALYZED_MANIFEST_FILENAMES, ...CORE_SIDE_MANIFEST_NAMES]);
 const isTsConfigLikeFile = (fileName) => (fileName.startsWith("tsconfig") || fileName.startsWith("jsconfig")) && fileName.endsWith(".json");
 const isFingerprintedFile = (fileName) => ANALYZED_FILE_EXTENSIONS.has(Path.extname(fileName).toLowerCase()) || ANALYZED_MANIFEST_NAMES.has(fileName) || isTsConfigLikeFile(fileName);
-const collectAnalyzedFileFingerprints = (rootDirectory) => {
-	const fingerprints = [];
+/**
+* Stat snapshot of every file the analysis reads, keyed by root-relative
+* `/`-separated path. Taken BEFORE the (long) analysis so a stored result is
+* verified against the tree it started from.
+*/
+const collectAnalyzedFileStats = (rootDirectory) => {
+	const statByRelativePath = /* @__PURE__ */ new Map();
 	for (const { absolutePath, name } of walkSourceTreeFiles(rootDirectory)) {
 		if (!isFingerprintedFile(name)) continue;
 		try {
 			const fileStat = NFS.statSync(absolutePath);
 			const relativePath = Path.relative(rootDirectory, absolutePath).replace(/\\/g, "/");
-			fingerprints.push(`${relativePath}:${fileStat.mtimeMs}:${fileStat.size}`);
+			statByRelativePath.set(relativePath, {
+				mtimeMs: fileStat.mtimeMs,
+				size: fileStat.size
+			});
 		} catch {}
 	}
-	return fingerprints.sort();
+	return statByRelativePath;
 };
 const bundledRequire$2 = createRequire(import.meta.url);
 const resolveDeslopVersion = () => {
@@ -37392,14 +37408,13 @@ const resolveDeslopVersion = () => {
 	}
 };
 const computeDeadCodeCacheKey = (input) => crypto.createHash("sha1").update(JSON.stringify({
-	schemaVersion: 1,
+	schemaVersion: 2,
 	coreVersion: input.coreVersion,
 	deslopVersion: resolveDeslopVersion(),
 	deslopJsModuleSpecifier: input.deslopJsModuleSpecifier,
 	entryPatterns: input.entryPatterns,
 	ignorePatterns: input.ignorePatterns,
-	tsConfigFile: input.tsConfigPath === void 0 ? null : Path.relative(input.rootDirectory, input.tsConfigPath).replace(/\\/g, "/"),
-	files: collectAnalyzedFileFingerprints(input.rootDirectory)
+	tsConfigFile: input.tsConfigPath === void 0 ? null : Path.relative(input.rootDirectory, input.tsConfigPath).replace(/\\/g, "/")
 })).digest("hex");
 const validateDiagnostic$2 = decodeUnknownSync(Diagnostic);
 const decodeCachedDiagnostics = (raw) => {
@@ -37410,16 +37425,68 @@ const decodeCachedDiagnostics = (raw) => {
 		return null;
 	}
 };
-const lookupDeadCodeResultCache = (cacheDirectory, cacheKey) => {
-	const persisted = failOpenReadJson(Path.join(cacheDirectory, DEAD_CODE_CACHE_FILENAME), null);
-	if (persisted === null || !isRecord(persisted) || persisted.version !== 1 || persisted.key !== cacheKey || !Array.isArray(persisted.diagnostics)) return null;
-	return decodeCachedDiagnostics(persisted.diagnostics);
+const isPersistedFileIdentity = (value) => Array.isArray(value) && value.length === 3 && typeof value[0] === "number" && typeof value[1] === "number" && typeof value[2] === "string";
+const lookupDeadCodeResultCache = (input) => {
+	const cacheFilePath = Path.join(input.cacheDirectory, DEAD_CODE_CACHE_FILENAME);
+	const persisted = failOpenReadJson(cacheFilePath, null);
+	if (persisted === null || !isRecord(persisted) || persisted.version !== 2 || persisted.key !== input.cacheKey || !isRecord(persisted.files) || !Array.isArray(persisted.diagnostics)) return null;
+	const storedFileEntries = Object.entries(persisted.files);
+	if (storedFileEntries.length !== input.currentFileStats.size) return null;
+	const repairedFiles = {};
+	let repairedCount = 0;
+	for (const [relativePath, storedIdentity] of storedFileEntries) {
+		if (!isPersistedFileIdentity(storedIdentity)) return null;
+		const currentStat = input.currentFileStats.get(relativePath);
+		if (currentStat === void 0) return null;
+		const [storedMtimeMs, storedSize, storedContentHash] = storedIdentity;
+		if (currentStat.mtimeMs === storedMtimeMs && currentStat.size === storedSize) {
+			repairedFiles[relativePath] = storedIdentity;
+			continue;
+		}
+		if (currentStat.size !== storedSize) return null;
+		const currentContentHash = hashFileContents(Path.join(input.rootDirectory, relativePath));
+		if (currentContentHash === null || currentContentHash !== storedContentHash) return null;
+		repairedFiles[relativePath] = [
+			currentStat.mtimeMs,
+			currentStat.size,
+			storedContentHash
+		];
+		repairedCount += 1;
+	}
+	const diagnostics = decodeCachedDiagnostics(persisted.diagnostics);
+	if (diagnostics === null) return null;
+	if (repairedCount > 0) atomicWriteJson(cacheFilePath, {
+		version: 2,
+		key: input.cacheKey,
+		files: repairedFiles,
+		diagnostics: persisted.diagnostics
+	});
+	return diagnostics;
 };
-const storeDeadCodeResultCache = (cacheDirectory, cacheKey, diagnostics) => {
-	atomicWriteJson(Path.join(cacheDirectory, DEAD_CODE_CACHE_FILENAME), {
-		version: 1,
-		key: cacheKey,
-		diagnostics
+const storeDeadCodeResultCache = (input) => {
+	const persistedFiles = {};
+	for (const [relativePath, snapshotStat] of input.snapshotFileStats) {
+		const absolutePath = Path.join(input.rootDirectory, relativePath);
+		const contentHash = hashFileContents(absolutePath);
+		if (contentHash === null) return;
+		let currentStat;
+		try {
+			currentStat = NFS.statSync(absolutePath);
+		} catch {
+			return;
+		}
+		if (currentStat.mtimeMs !== snapshotStat.mtimeMs || currentStat.size !== snapshotStat.size) return;
+		persistedFiles[relativePath] = [
+			snapshotStat.mtimeMs,
+			snapshotStat.size,
+			contentHash
+		];
+	}
+	atomicWriteJson(Path.join(input.cacheDirectory, DEAD_CODE_CACHE_FILENAME), {
+		version: 2,
+		key: input.cacheKey,
+		files: persistedFiles,
+		diagnostics: input.diagnostics
 	});
 };
 const readSystemFacts = () => ({
@@ -37829,16 +37896,22 @@ const checkDeadCode = async (options) => {
 	const ignorePatterns = collectDeadCodeIgnorePatterns(rootDirectory);
 	const tsConfigPath = resolveTsConfigPath(rootDirectory);
 	const deslopJsModuleSpecifier = options.deslopJsModuleSpecifier ?? import.meta.resolve("deslop-js");
-	const cacheKey = options.cacheEnabled ? computeDeadCodeCacheKey({
+	const fileStatsSnapshot = options.cacheEnabled ? collectAnalyzedFileStats(rootDirectory) : null;
+	const cacheKey = fileStatsSnapshot === null ? null : computeDeadCodeCacheKey({
 		rootDirectory,
 		entryPatterns,
 		ignorePatterns,
 		tsConfigPath,
 		deslopJsModuleSpecifier,
 		coreVersion: CORE_PACKAGE_VERSION
-	}) : null;
-	if (cacheKey !== null) {
-		const cachedDiagnostics = lookupDeadCodeResultCache(resolveReactDoctorCacheDir(rootDirectory), cacheKey);
+	});
+	if (cacheKey !== null && fileStatsSnapshot !== null) {
+		const cachedDiagnostics = lookupDeadCodeResultCache({
+			cacheDirectory: resolveReactDoctorCacheDir(rootDirectory),
+			cacheKey,
+			rootDirectory,
+			currentFileStats: fileStatsSnapshot
+		});
 		options.onCacheOutcome?.(cachedDiagnostics !== null);
 		if (cachedDiagnostics !== null) return [...cachedDiagnostics];
 	}
@@ -37912,7 +37985,13 @@ const checkDeadCode = async (options) => {
 			category: DEAD_CODE_CATEGORY
 		});
 	}
-	if (cacheKey !== null) storeDeadCodeResultCache(resolveReactDoctorCacheDir(rootDirectory), cacheKey, diagnostics);
+	if (cacheKey !== null && fileStatsSnapshot !== null) storeDeadCodeResultCache({
+		cacheDirectory: resolveReactDoctorCacheDir(rootDirectory),
+		cacheKey,
+		rootDirectory,
+		snapshotFileStats: fileStatsSnapshot,
+		diagnostics
+	});
 	return diagnostics;
 };
 const DEAD_CODE_RULE_KEY_PREFIX = `${DEAD_CODE_PLUGIN}/`;
@@ -39008,13 +39087,6 @@ const createFileLintCache = (cacheDirectory, rulesetHash) => {
 		}
 	};
 };
-const hashFileContents = (filePath) => {
-	try {
-		return crypto.createHash("sha1").update(NFS.readFileSync(filePath)).digest("hex");
-	} catch {
-		return null;
-	}
-};
 const ABSENT_CONTENT_ANSWER = "absent";
 /**
 * Answers dependency probes for the sidecar lint cache — used both when
@@ -41155,6 +41227,20 @@ const writeCachedSocketBody = (cacheFile, body) => {
 		}));
 	} catch {}
 };
+const pruneExpiredSocketCache = (cacheDirectory) => {
+	try {
+		const supplyChainCacheDirectory = Path.join(cacheDirectory, SUPPLY_CHAIN_CACHE_SUBDIR);
+		const expiryThresholdMs = Date.now() - SUPPLY_CHAIN_CACHE_TTL_MS;
+		for (const entryName of NFS.readdirSync(supplyChainCacheDirectory)) {
+			const entryPath = Path.join(supplyChainCacheDirectory, entryName);
+			try {
+				if (NFS.statSync(entryPath).mtimeMs < expiryThresholdMs) NFS.rmSync(entryPath);
+			} catch {
+				continue;
+			}
+		}
+	} catch {}
+};
 const fetchSocketArtifact = (dependency, cacheDirectory) => tryPromise(async (signal) => {
 	const cacheFile = cacheDirectory === null ? null : supplyChainCacheFile(cacheDirectory, dependency);
 	if (cacheFile !== null) {
@@ -41282,6 +41368,7 @@ const checkSupplyChain = (input) => gen(function* () {
 	const dependencies = collectDependenciesToScore(readPackageJson(packageJsonPath), readPackageJsonText(packageJsonPath), options.includeDevDependencies);
 	if (dependencies.length === 0) return [];
 	const cacheDirectory = isSupplyChainCacheDisabled() ? null : resolveReactDoctorCacheDir(input.rootDirectory);
+	if (cacheDirectory !== null) pruneExpiredSocketCache(cacheDirectory);
 	const artifacts = yield* forEach$1(dependencies, (dependency) => fetchSocketArtifact(dependency, cacheDirectory), { concurrency: 8 }).pipe(timeoutOption(input.totalTimeoutMs ?? 9e4), map$3((maybeArtifacts) => getOrElse$1(maybeArtifacts, () => [])));
 	const diagnostics = [];
 	for (let index = 0; index < dependencies.length; index += 1) {
@@ -42326,4 +42413,4 @@ const toJsonReport = (result, options) => buildJsonReport({
 export { AmbiguousProjectError, NoReactDependencyError, NotADirectoryError, PackageJsonNotFoundError, ProjectNotFoundError, ReactDoctorError, buildJsonReport, buildJsonReportError, clearCaches, defineConfig, diagnose, filterSourceFiles, getDiffInfo, isProjectDiscoveryError, isReactDoctorError, summarizeDiagnostics, toJsonReport };
 
 //# sourceMappingURL=index.js.map
-//# debugId=b55ef8b2-8e9d-512b-81de-a01f6ce3e60e
+//# debugId=5c52dece-7b5e-5102-9381-7d05fa45734f

package/dist/lsp.js

@@ -32988,13 +32988,14 @@ const SOCKET_FREE_USER_AGENT = "react-doctor-supply-chain";
 const FILE_LINT_CACHE_FILENAME = "file-lint-cache.json";
 const FILE_LINT_CACHE_MAX_FILE_COUNT = 5e4;
 const SIDECAR_LINT_CACHE_FILENAME = "sidecar-lint-cache.json";
-const CORE_PACKAGE_VERSION = "0.6.3";
+const CORE_PACKAGE_VERSION = "0.7.0";
 const DEAD_CODE_CACHE_FILENAME = "dead-code-cache.json";
 const DEAD_CODE_SUMMARY_CACHE_FILENAME = "dead-code-summaries.json";
 const SUPPLY_CHAIN_PLUGIN = "socket";
 const SUPPLY_CHAIN_RULE = "low-supply-chain-score";
 const SUPPLY_CHAIN_CATEGORY = "Security";
 const SUPPLY_CHAIN_OVERLAP_TIMEOUT_MS = 9e4;
+const SUPPLY_CHAIN_CACHE_TTL_MS = 864e5;
 const SUPPLY_CHAIN_CACHE_SUBDIR = "supply-chain";
 const SUPPLY_CHAIN_IGNORED_PACKAGES = new Set(["next"]);
 const hasIgnoredPathSegment = (relativePath) => relativePath.split(/[/\\]/).slice(0, -1).some((segment) => IGNORED_DIRECTORIES.has(segment));
@@ -37350,22 +37351,37 @@ const failOpenReadJson = (filePath, fallback) => {
 		return fallback;
 	}
 };
+const hashFileContents = (filePath) => {
+	try {
+		return crypto.createHash("sha1").update(NFS.readFileSync(filePath)).digest("hex");
+	} catch {
+		return null;
+	}
+};
 const ANALYZED_FILE_EXTENSIONS = new Set(DEFAULT_EXTENSIONS);
 const CORE_SIDE_MANIFEST_NAMES = ["knip.json", "deno.lock"];
 const ANALYZED_MANIFEST_NAMES = new Set([...ANALYZED_MANIFEST_FILENAMES, ...CORE_SIDE_MANIFEST_NAMES]);
 const isTsConfigLikeFile = (fileName) => (fileName.startsWith("tsconfig") || fileName.startsWith("jsconfig")) && fileName.endsWith(".json");
 const isFingerprintedFile = (fileName) => ANALYZED_FILE_EXTENSIONS.has(Path.extname(fileName).toLowerCase()) || ANALYZED_MANIFEST_NAMES.has(fileName) || isTsConfigLikeFile(fileName);
-const collectAnalyzedFileFingerprints = (rootDirectory) => {
-	const fingerprints = [];
+/**
+* Stat snapshot of every file the analysis reads, keyed by root-relative
+* `/`-separated path. Taken BEFORE the (long) analysis so a stored result is
+* verified against the tree it started from.
+*/
+const collectAnalyzedFileStats = (rootDirectory) => {
+	const statByRelativePath = /* @__PURE__ */ new Map();
 	for (const { absolutePath, name } of walkSourceTreeFiles(rootDirectory)) {
 		if (!isFingerprintedFile(name)) continue;
 		try {
 			const fileStat = NFS.statSync(absolutePath);
 			const relativePath = Path.relative(rootDirectory, absolutePath).replace(/\\/g, "/");
-			fingerprints.push(`${relativePath}:${fileStat.mtimeMs}:${fileStat.size}`);
+			statByRelativePath.set(relativePath, {
+				mtimeMs: fileStat.mtimeMs,
+				size: fileStat.size
+			});
 		} catch {}
 	}
-	return fingerprints.sort();
+	return statByRelativePath;
 };
 const bundledRequire$2 = createRequire(import.meta.url);
 const resolveDeslopVersion = () => {
@@ -37377,14 +37393,13 @@ const resolveDeslopVersion = () => {
 	}
 };
 const computeDeadCodeCacheKey = (input) => crypto.createHash("sha1").update(JSON.stringify({
-	schemaVersion: 1,
+	schemaVersion: 2,
 	coreVersion: input.coreVersion,
 	deslopVersion: resolveDeslopVersion(),
 	deslopJsModuleSpecifier: input.deslopJsModuleSpecifier,
 	entryPatterns: input.entryPatterns,
 	ignorePatterns: input.ignorePatterns,
-	tsConfigFile: input.tsConfigPath === void 0 ? null : Path.relative(input.rootDirectory, input.tsConfigPath).replace(/\\/g, "/"),
-	files: collectAnalyzedFileFingerprints(input.rootDirectory)
+	tsConfigFile: input.tsConfigPath === void 0 ? null : Path.relative(input.rootDirectory, input.tsConfigPath).replace(/\\/g, "/")
 })).digest("hex");
 const validateDiagnostic$2 = decodeUnknownSync(Diagnostic);
 const decodeCachedDiagnostics = (raw) => {
@@ -37395,16 +37410,68 @@ const decodeCachedDiagnostics = (raw) => {
 		return null;
 	}
 };
-const lookupDeadCodeResultCache = (cacheDirectory, cacheKey) => {
-	const persisted = failOpenReadJson(Path.join(cacheDirectory, DEAD_CODE_CACHE_FILENAME), null);
-	if (persisted === null || !isRecord(persisted) || persisted.version !== 1 || persisted.key !== cacheKey || !Array.isArray(persisted.diagnostics)) return null;
-	return decodeCachedDiagnostics(persisted.diagnostics);
+const isPersistedFileIdentity = (value) => Array.isArray(value) && value.length === 3 && typeof value[0] === "number" && typeof value[1] === "number" && typeof value[2] === "string";
+const lookupDeadCodeResultCache = (input) => {
+	const cacheFilePath = Path.join(input.cacheDirectory, DEAD_CODE_CACHE_FILENAME);
+	const persisted = failOpenReadJson(cacheFilePath, null);
+	if (persisted === null || !isRecord(persisted) || persisted.version !== 2 || persisted.key !== input.cacheKey || !isRecord(persisted.files) || !Array.isArray(persisted.diagnostics)) return null;
+	const storedFileEntries = Object.entries(persisted.files);
+	if (storedFileEntries.length !== input.currentFileStats.size) return null;
+	const repairedFiles = {};
+	let repairedCount = 0;
+	for (const [relativePath, storedIdentity] of storedFileEntries) {
+		if (!isPersistedFileIdentity(storedIdentity)) return null;
+		const currentStat = input.currentFileStats.get(relativePath);
+		if (currentStat === void 0) return null;
+		const [storedMtimeMs, storedSize, storedContentHash] = storedIdentity;
+		if (currentStat.mtimeMs === storedMtimeMs && currentStat.size === storedSize) {
+			repairedFiles[relativePath] = storedIdentity;
+			continue;
+		}
+		if (currentStat.size !== storedSize) return null;
+		const currentContentHash = hashFileContents(Path.join(input.rootDirectory, relativePath));
+		if (currentContentHash === null || currentContentHash !== storedContentHash) return null;
+		repairedFiles[relativePath] = [
+			currentStat.mtimeMs,
+			currentStat.size,
+			storedContentHash
+		];
+		repairedCount += 1;
+	}
+	const diagnostics = decodeCachedDiagnostics(persisted.diagnostics);
+	if (diagnostics === null) return null;
+	if (repairedCount > 0) atomicWriteJson(cacheFilePath, {
+		version: 2,
+		key: input.cacheKey,
+		files: repairedFiles,
+		diagnostics: persisted.diagnostics
+	});
+	return diagnostics;
 };
-const storeDeadCodeResultCache = (cacheDirectory, cacheKey, diagnostics) => {
-	atomicWriteJson(Path.join(cacheDirectory, DEAD_CODE_CACHE_FILENAME), {
-		version: 1,
-		key: cacheKey,
-		diagnostics
+const storeDeadCodeResultCache = (input) => {
+	const persistedFiles = {};
+	for (const [relativePath, snapshotStat] of input.snapshotFileStats) {
+		const absolutePath = Path.join(input.rootDirectory, relativePath);
+		const contentHash = hashFileContents(absolutePath);
+		if (contentHash === null) return;
+		let currentStat;
+		try {
+			currentStat = NFS.statSync(absolutePath);
+		} catch {
+			return;
+		}
+		if (currentStat.mtimeMs !== snapshotStat.mtimeMs || currentStat.size !== snapshotStat.size) return;
+		persistedFiles[relativePath] = [
+			snapshotStat.mtimeMs,
+			snapshotStat.size,
+			contentHash
+		];
+	}
+	atomicWriteJson(Path.join(input.cacheDirectory, DEAD_CODE_CACHE_FILENAME), {
+		version: 2,
+		key: input.cacheKey,
+		files: persistedFiles,
+		diagnostics: input.diagnostics
 	});
 };
 const readSystemFacts = () => ({
@@ -37814,16 +37881,22 @@ const checkDeadCode = async (options) => {
 	const ignorePatterns = collectDeadCodeIgnorePatterns(rootDirectory);
 	const tsConfigPath = resolveTsConfigPath(rootDirectory);
 	const deslopJsModuleSpecifier = options.deslopJsModuleSpecifier ?? import.meta.resolve("deslop-js");
-	const cacheKey = options.cacheEnabled ? computeDeadCodeCacheKey({
+	const fileStatsSnapshot = options.cacheEnabled ? collectAnalyzedFileStats(rootDirectory) : null;
+	const cacheKey = fileStatsSnapshot === null ? null : computeDeadCodeCacheKey({
 		rootDirectory,
 		entryPatterns,
 		ignorePatterns,
 		tsConfigPath,
 		deslopJsModuleSpecifier,
 		coreVersion: CORE_PACKAGE_VERSION
-	}) : null;
-	if (cacheKey !== null) {
-		const cachedDiagnostics = lookupDeadCodeResultCache(resolveReactDoctorCacheDir(rootDirectory), cacheKey);
+	});
+	if (cacheKey !== null && fileStatsSnapshot !== null) {
+		const cachedDiagnostics = lookupDeadCodeResultCache({
+			cacheDirectory: resolveReactDoctorCacheDir(rootDirectory),
+			cacheKey,
+			rootDirectory,
+			currentFileStats: fileStatsSnapshot
+		});
 		options.onCacheOutcome?.(cachedDiagnostics !== null);
 		if (cachedDiagnostics !== null) return [...cachedDiagnostics];
 	}
@@ -37897,7 +37970,13 @@ const checkDeadCode = async (options) => {
 			category: DEAD_CODE_CATEGORY
 		});
 	}
-	if (cacheKey !== null) storeDeadCodeResultCache(resolveReactDoctorCacheDir(rootDirectory), cacheKey, diagnostics);
+	if (cacheKey !== null && fileStatsSnapshot !== null) storeDeadCodeResultCache({
+		cacheDirectory: resolveReactDoctorCacheDir(rootDirectory),
+		cacheKey,
+		rootDirectory,
+		snapshotFileStats: fileStatsSnapshot,
+		diagnostics
+	});
 	return diagnostics;
 };
 const DEAD_CODE_RULE_KEY_PREFIX = `${DEAD_CODE_PLUGIN}/`;
@@ -38993,13 +39072,6 @@ const createFileLintCache = (cacheDirectory, rulesetHash) => {
 		}
 	};
 };
-const hashFileContents = (filePath) => {
-	try {
-		return crypto.createHash("sha1").update(NFS.readFileSync(filePath)).digest("hex");
-	} catch {
-		return null;
-	}
-};
 const ABSENT_CONTENT_ANSWER = "absent";
 /**
 * Answers dependency probes for the sidecar lint cache — used both when
@@ -41140,6 +41212,20 @@ const writeCachedSocketBody = (cacheFile, body) => {
 		}));
 	} catch {}
 };
+const pruneExpiredSocketCache = (cacheDirectory) => {
+	try {
+		const supplyChainCacheDirectory = Path.join(cacheDirectory, SUPPLY_CHAIN_CACHE_SUBDIR);
+		const expiryThresholdMs = Date.now() - SUPPLY_CHAIN_CACHE_TTL_MS;
+		for (const entryName of NFS.readdirSync(supplyChainCacheDirectory)) {
+			const entryPath = Path.join(supplyChainCacheDirectory, entryName);
+			try {
+				if (NFS.statSync(entryPath).mtimeMs < expiryThresholdMs) NFS.rmSync(entryPath);
+			} catch {
+				continue;
+			}
+		}
+	} catch {}
+};
 const fetchSocketArtifact = (dependency, cacheDirectory) => tryPromise(async (signal) => {
 	const cacheFile = cacheDirectory === null ? null : supplyChainCacheFile(cacheDirectory, dependency);
 	if (cacheFile !== null) {
@@ -41267,6 +41353,7 @@ const checkSupplyChain = (input) => gen(function* () {
 	const dependencies = collectDependenciesToScore(readPackageJson(packageJsonPath), readPackageJsonText(packageJsonPath), options.includeDevDependencies);
 	if (dependencies.length === 0) return [];
 	const cacheDirectory = isSupplyChainCacheDisabled() ? null : resolveReactDoctorCacheDir(input.rootDirectory);
+	if (cacheDirectory !== null) pruneExpiredSocketCache(cacheDirectory);
 	const artifacts = yield* forEach$1(dependencies, (dependency) => fetchSocketArtifact(dependency, cacheDirectory), { concurrency: 8 }).pipe(timeoutOption(input.totalTimeoutMs ?? 9e4), map$3((maybeArtifacts) => getOrElse$1(maybeArtifacts, () => [])));
 	const diagnostics = [];
 	for (let index = 0; index < dependencies.length; index += 1) {
@@ -41983,11 +42070,9 @@ const computeConfigFingerprint = (projectDirectory, version) => {
 	const parts = [`v=${version}`];
 	let directory = projectDirectory;
 	for (;;) {
-		for (const filename of CONFIG_FINGERPRINT_FILENAMES) try {
-			const stat = fs.statSync(path.join(directory, filename));
-			parts.push(`${directory}/${filename}=${stat.mtimeMs}:${stat.size}`);
-		} catch {
-			continue;
+		for (const filename of CONFIG_FINGERPRINT_FILENAMES) {
+			const contentHash = hashFileContents(path.join(directory, filename));
+			if (contentHash !== null) parts.push(`${directory}/${filename}=${contentHash}`);
 		}
 		const parent = path.dirname(directory);
 		if (parent === directory) break;
@@ -42000,7 +42085,7 @@ const computeConfigFingerprint = (projectDirectory, version) => {
 /** Display name used in client-facing messages and progress titles. */
 const SERVER_DISPLAY_NAME = "React Doctor";
 /** Server version reported in `serverInfo`; injected at build, `dev` from source. */
-const SERVER_VERSION = "0.6.3";
+const SERVER_VERSION = "0.7.0";
 /** `Diagnostic.source` shown next to every published diagnostic. */
 const DIAGNOSTIC_SOURCE = "react-doctor";
 /**
@@ -44050,5 +44135,5 @@ const startLanguageServer = () => {
 };
 //#endregion
 export { startLanguageServer };
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="17a3f533-8248-511a-859b-584197cefba6")}catch(e){}}();
-//# debugId=17a3f533-8248-511a-859b-584197cefba6
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="1b40bd68-7ad4-55e0-a6bd-91b6cdcd0ba8")}catch(e){}}();
+//# debugId=1b40bd68-7ad4-55e0-a6bd-91b6cdcd0ba8

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "react-doctor",
-  "version": "0.6.3-dev.ea9a775",
+  "version": "0.7.0-dev.574cba6",
   "description": "Your agent writes bad React. This catches it",
   "keywords": [
     "accessibility",
@@ -65,8 +65,8 @@
     "vscode-languageserver-textdocument": "^1.0.12",
     "vscode-uri": "^3.1.0",
     "yaml": "^2.9.0",
-    "oxlint-plugin-react-doctor": "0.6.3-dev.ea9a775",
-    "deslop-js": "0.6.3"
+    "deslop-js": "0.7.0",
+    "oxlint-plugin-react-doctor": "0.7.0-dev.574cba6"
   },
   "devDependencies": {
     "@types/babel__code-frame": "^7.27.0",
@@ -74,9 +74,9 @@
     "@xterm/headless": "^6.0.0",
     "commander": "^14.0.3",
     "ora": "^9.4.0",
-    "@react-doctor/api": "0.6.3",
-    "@react-doctor/core": "0.6.3",
-    "@react-doctor/language-server": "0.6.3"
+    "@react-doctor/api": "0.7.0",
+    "@react-doctor/core": "0.7.0",
+    "@react-doctor/language-server": "0.7.0"
   },
   "engines": {
     "node": "^20.19.0 || >=22.13.0"