react-doctor 0.7.3 → 0.7.4-dev.118f806

package/dist/index.js

@@ -1,15 +1,15 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="4940d639-1712-5f20-ae4a-a6bf10741ae9")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="95e70e55-12b7-5577-81f3-f5331db7ca53")}catch(e){}}();
 import { r as __toESM$1, t as __commonJSMin$1 } from "./chunk-N93fKeF6.js";
 import { createRequire } from "node:module";
+import reactDoctorPlugin, { ALL_REACT_DOCTOR_RULE_KEYS, CROSS_FILE_DEPENDENCY_COLLECTORS, CROSS_FILE_RULE_IDS, FRAMEWORK_SPECIFIC_RULE_KEYS, FRAMEWORK_TOKENS, MOTION_LIBRARY_PACKAGES, REACT_COMPILER_RULES, REACT_DOCTOR_RULES, classifySecurityScanFile, collectCrossFileDependencyProbes, resetManifestCaches, shouldReadSecurityScanContent } from "oxlint-plugin-react-doctor";
 import * as NFS from "node:fs";
 import fs from "node:fs";
 import * as Path from "node:path";
 import path from "node:path";
 import * as NodeChildProcess from "node:child_process";
 import { execFileSync, spawn, spawnSync } from "node:child_process";
-import * as ts from "typescript";
-import reactDoctorPlugin, { ALL_REACT_DOCTOR_RULE_KEYS, CROSS_FILE_DEPENDENCY_COLLECTORS, CROSS_FILE_RULE_IDS, FRAMEWORK_SPECIFIC_RULE_KEYS, MOTION_LIBRARY_PACKAGES, REACT_COMPILER_RULES, REACT_DOCTOR_RULES, classifySecurityScanFile, collectCrossFileDependencyProbes, resetManifestCaches, shouldReadSecurityScanContent } from "oxlint-plugin-react-doctor";
+import ts from "typescript";
 import * as OS from "node:os";
 import os from "node:os";
 import { parseJSON5 } from "confbox";
@@ -19310,12 +19310,45 @@ var Diagnostic = class extends Class("Diagnostic")({
 	relatedLocations: optional(ArraySchema(DiagnosticRelatedLocation)),
 	fixGroupId: optional(String$1)
 }) {};
+var JsonReportDiagnosticV3 = class extends Class("JsonReportDiagnosticV3")({
+	id: String$1,
+	normalizedFilePath: String$1,
+	filePath: String$1,
+	plugin: String$1,
+	rule: String$1,
+	severity: Severity,
+	tags: ArraySchema(String$1),
+	title: optional(String$1),
+	message: String$1,
+	help: String$1,
+	url: optional(String$1),
+	line: Number$1,
+	column: Number$1,
+	offset: optional(Number$1),
+	length: optional(Number$1),
+	endLine: optional(Number$1),
+	endColumn: optional(Number$1),
+	category: String$1,
+	matchByOccurrence: optional(Boolean$1),
+	fileContext: optional(Literals(["test", "story"])),
+	suppressionHint: optional(String$1),
+	relatedLocations: optional(ArraySchema(DiagnosticRelatedLocation)),
+	fixGroupId: optional(String$1)
+}) {};
+/**
+* Deterministic identity string for a diagnostic. Same diagnostic
+* across two scans yields the same identity; lets baselines,
+* suppression files, content-hash caches, and IDE "ignore this"
+* actions all key off one shared shape.
+*/
+const buildDiagnosticIdentity = (input) => `${input.filePath}::${input.line}:${input.column}::${input.plugin}/${input.rule}`;
 const JsonReportMode = Literals([
 	"full",
 	"diff",
 	"staged",
 	"baseline"
 ]);
+const Framework = Literals(FRAMEWORK_TOKENS);
 var JsonReportSummary = class extends Class("JsonReportSummary")({
 	errorCount: Number$1,
 	warningCount: Number$1,
@@ -19353,13 +19386,22 @@ var JsonReportProjectEntry = class extends Class("JsonReportProjectEntry")({
 	scannedFileCount: optional(Number$1),
 	elapsedMilliseconds: Number$1
 }) {};
-/**
-* Versioned JsonReport schema. `JsonReport` is a `Schema.Union` so we
-* can add `schemaVersion: 2` later as one new union member without
-* breaking existing v1 consumers (the GitHub Action keys off the
-* version literal). Today's union is single-arm; the shape is
-* intentional.
-*/
+var JsonReportProjectEntryV3 = class extends Class("JsonReportProjectEntryV3")({
+	directory: String$1,
+	packageRoot: String$1,
+	framework: Framework,
+	project: Unknown,
+	diagnostics: ArraySchema(JsonReportDiagnosticV3),
+	score: Unknown,
+	skippedChecks: ArraySchema(String$1),
+	skippedCheckReasons: optional(Record$1(String$1, String$1)),
+	analyzedFiles: ArraySchema(String$1),
+	analyzedFileCount: Number$1,
+	complete: Boolean$1,
+	scannedFileCount: optional(Number$1),
+	elapsedMilliseconds: Number$1
+}) {};
+/** Original full, diff, and staged report contract. */
 var JsonReportV1 = class extends Class("JsonReportV1")({
 	schemaVersion: Literal(1),
 	version: String$1,
@@ -19420,7 +19462,27 @@ var JsonReportV2 = class extends Class("JsonReportV2")({
 	elapsedMilliseconds: Number$1,
 	error: NullOr(JsonReportError)
 }) {};
-Union([JsonReportV1, JsonReportV2]);
+var JsonReportV3 = class extends Class("JsonReportV3")({
+	schemaVersion: Literal(3),
+	version: String$1,
+	ok: Boolean$1,
+	directory: String$1,
+	mode: JsonReportMode,
+	baselineDegraded: optional(Boolean$1),
+	reactDetected: optional(Boolean$1),
+	diff: NullOr(JsonReportDiffInfo),
+	baseline: optional(JsonReportBaseline),
+	projects: ArraySchema(JsonReportProjectEntryV3),
+	diagnostics: ArraySchema(JsonReportDiagnosticV3),
+	summary: JsonReportSummary,
+	elapsedMilliseconds: Number$1,
+	error: NullOr(JsonReportError)
+}) {};
+Union([
+	JsonReportV1,
+	JsonReportV2,
+	JsonReportV3
+]);
 //#endregion
 //#region ../../node_modules/.pnpm/semver@7.7.4/node_modules/semver/internal/constants.js
 var require_constants$1 = /* @__PURE__ */ __commonJSMin$1(((exports, module) => {
@@ -32978,7 +33040,7 @@ const SOCKET_FREE_USER_AGENT = "react-doctor-supply-chain";
 const FILE_LINT_CACHE_FILENAME = "file-lint-cache.json";
 const FILE_LINT_CACHE_MAX_FILE_COUNT = 5e4;
 const SIDECAR_LINT_CACHE_FILENAME = "sidecar-lint-cache.json";
-const CORE_PACKAGE_VERSION = "0.7.3";
+const CORE_PACKAGE_VERSION = "0.7.4";
 const DEAD_CODE_CACHE_FILENAME = "dead-code-cache.json";
 const DEAD_CODE_SUMMARY_CACHE_FILENAME = "dead-code-summaries.json";
 const SUPPLY_CHAIN_PLUGIN = "socket";
@@ -33890,6 +33952,22 @@ const isPackageJsonReanimatedAware = (packageJson) => {
 	};
 	return Object.hasOwn(allDependencies, REANIMATED_DEPENDENCY_NAME$1);
 };
+const SSR_DEPENDENCY_NAMES = new Set([
+	"@react-router/cloudflare",
+	"@react-router/node",
+	"@react-router/serve",
+	"vike",
+	"vite-plugin-ssr"
+]);
+const isPackageJsonSsrAware = (packageJson) => {
+	const allDependencies = {
+		...packageJson.peerDependencies,
+		...packageJson.dependencies,
+		...packageJson.devDependencies,
+		...packageJson.optionalDependencies
+	};
+	return Object.keys(allDependencies).some((packageName) => SSR_DEPENDENCY_NAMES.has(packageName));
+};
 const getWorkspacePatterns = (rootDirectory, packageJson) => {
 	const pnpmPatterns = parsePnpmWorkspacePatterns(rootDirectory);
 	if (pnpmPatterns.length > 0) return pnpmPatterns;
@@ -34030,6 +34108,7 @@ const evaluateManifestFacts = (facts, packageJson, directory) => {
 	}
 	facts.hasReactNativeAwarePackage = facts.hasReactNativeAwarePackage || isPackageJsonReactNativeAware(packageJson);
 	facts.hasReanimatedAwarePackage = facts.hasReanimatedAwarePackage || isPackageJsonReanimatedAware(packageJson);
+	facts.hasSsrDependency = facts.hasSsrDependency || isPackageJsonSsrAware(packageJson);
 };
 const collectWorkspaceFacts = (rootDirectory, rootPackageJson, { collectReactGroup }) => {
 	const facts = {
@@ -34051,6 +34130,7 @@ const collectWorkspaceFacts = (rootDirectory, rootPackageJson, { collectReactGro
 		},
 		hasReactNativeAwarePackage: false,
 		hasReanimatedAwarePackage: false,
+		hasSsrDependency: false,
 		reanimatedVersion: null
 	};
 	evaluateManifestFacts(facts, rootPackageJson, rootDirectory);
@@ -34290,6 +34370,7 @@ const discoverProjectWithoutPackageJson = (directory) => {
 		hasTypeScript: hasOwnTsConfig,
 		hasReactCompiler: false,
 		hasTanStackQuery: false,
+		hasSsrDependency: false,
 		preactVersion: null,
 		preactMajorVersion: null,
 		hasReactNativeWorkspace: false,
@@ -34409,6 +34490,7 @@ const discoverProject = (directory) => {
 		hasTypeScript,
 		hasReactCompiler: detectReactCompiler(directory, packageJson),
 		hasTanStackQuery: hasTanStackQuery(packageJson),
+		hasSsrDependency: workspaceFacts.hasSsrDependency,
 		preactVersion,
 		preactMajorVersion: parseReactMajor(preactVersion),
 		hasReactNativeWorkspace,
@@ -35488,6 +35570,14 @@ var AmbiguousProject = class extends TaggedErrorClass()("AmbiguousProject", {
 		return `Ambiguous project at ${this.directory}: found ${this.candidates.length} candidates (${this.candidates.join(", ")})`;
 	}
 };
+var ProjectDiscoveryFailed = class extends TaggedErrorClass()("ProjectDiscoveryFailed", {
+	directory: String$1,
+	cause: Unknown
+}) {
+	get message() {
+		return `Project discovery failed for ${this.directory}: ${pretty(fail$6(this.cause))}`;
+	}
+};
 var DeadCodeAnalysisFailed = class extends TaggedErrorClass()("DeadCodeAnalysisFailed", { cause: Unknown }) {
 	get message() {
 		return `Dead-code analysis failed: ${pretty(fail$6(this.cause))}`;
@@ -35522,6 +35612,7 @@ const ReactDoctorErrorReason = Union([
 	ProjectNotFound,
 	NoReactDependency,
 	AmbiguousProject,
+	ProjectDiscoveryFailed,
 	DeadCodeAnalysisFailed,
 	GitInvocationFailed,
 	GitBaseBranchMissing,
@@ -37218,6 +37309,12 @@ const CLIENT_ONLY_FRAMEWORKS = new Set([
 	"react-native",
 	"expo"
 ]);
+const SSR_FRAMEWORKS = new Set([
+	"nextjs",
+	"remix",
+	"gatsby",
+	"tanstack-start"
+]);
 const addMajorLadder = (capabilities, name, major, earliest, latest) => {
 	if (major === null) return;
 	const cappedMajor = Math.min(major, latest);
@@ -37230,6 +37327,7 @@ const buildCapabilities = (project) => {
 	if (project.framework === "expo" || project.framework === "react-native" || project.hasReactNativeWorkspace) capabilities.add("react-native");
 	if (project.expoVersion !== null) capabilities.add("expo");
 	if ((project.framework === "nextjs" || project.framework === "tanstack-start" || project.framework === "remix") && !project.isStaticExport) capabilities.add("server-actions");
+	if (SSR_FRAMEWORKS.has(project.framework) || project.hasSsrDependency) capabilities.add("ssr");
 	if (CLIENT_ONLY_FRAMEWORKS.has(project.framework)) capabilities.add("client-only");
 	if (project.isStaticExport) capabilities.add("nextjs:static-export");
 	if (project.nextjsMajorVersion !== null && project.nextjsMajorVersion >= 15) capabilities.add("nextjs:15");
@@ -40634,6 +40732,8 @@ const spawnLintBatches = async (input) => {
 	const reasonHint = firstDropReason ? ` — first failure: ${firstDropReason}` : "";
 	reportSkippedFiles(droppedFiles, (fileListPreview) => `${droppedFiles.length} file(s) failed to lint and were skipped (${fileListPreview})${reasonHint}`);
 	reportSkippedFiles(outcome.deadlineSkippedFiles, (fileListPreview) => `${outcome.deadlineSkippedFiles.length} file(s) skipped — max scan duration reached before they were linted (${fileListPreview})`);
+	const unavailableFiles = new Set([...droppedFiles, ...outcome.deadlineSkippedFiles]);
+	input.onAnalyzedFiles?.([...new Set(fileBatches.flat().filter((filePath) => !unavailableFiles.has(filePath)))].sort());
 	return dedupeDiagnostics(diagnostics);
 };
 let didValidate = false;
@@ -40890,12 +40990,18 @@ const reactHooksJsPluginDropNote = (error) => {
 *   6. always restore disable directives + clean up the temp dir
 */
 const runOxlint = async (options) => {
-	const { rootDirectory, project, includePaths, nodeBinaryPath = process.execPath, customRulesOnly = false, respectInlineDisables = true, adoptExistingLintConfig = true, ignoredTags = /* @__PURE__ */ new Set(), userConfig, configSourceDirectory = rootDirectory, onPartialFailure, perFileLintCacheEnabled = false, sidecarLintCacheEnabled = false, onCacheStats, onSidecarStats, spawnTimeoutMs, outputMaxBytes, lintBatchOrdering = "cost" } = options;
+	const { rootDirectory, project, includePaths, nodeBinaryPath = process.execPath, customRulesOnly = false, respectInlineDisables = true, adoptExistingLintConfig = true, ignoredTags = /* @__PURE__ */ new Set(), userConfig, configSourceDirectory = rootDirectory, onPartialFailure, onFileCoverage, perFileLintCacheEnabled = false, sidecarLintCacheEnabled = false, onCacheStats, onSidecarStats, spawnTimeoutMs, outputMaxBytes, lintBatchOrdering = "cost" } = options;
 	const serverAuthFunctionNames = Array.isArray(userConfig?.serverAuthFunctionNames) ? userConfig.serverAuthFunctionNames.filter((entry) => typeof entry === "string" && entry.length > 0) : void 0;
 	const severityControls = buildRuleSeverityControls(userConfig);
 	validateRuleRegistration();
 	resetManifestCaches();
-	if (includePaths !== void 0 && includePaths.length === 0) return [];
+	if (includePaths !== void 0 && includePaths.length === 0) {
+		onFileCoverage?.({
+			candidateFiles: [],
+			analyzedFiles: []
+		});
+		return [];
+	}
 	const pluginPath = resolvePluginPath();
 	const extendsPaths = (adoptExistingLintConfig && !customRulesOnly ? detectUserLintConfigPaths(rootDirectory) : []).filter(canOxlintExtendConfig);
 	const userPlugins = resolveUserPlugins(userConfig?.plugins, configSourceDirectory);
@@ -40956,6 +41062,7 @@ const runOxlint = async (options) => {
 		const runConfigOverFiles = async (buildConfigForPass, configFileName, files, fileProgress) => {
 			if (files.length === 0) return {
 				diagnostics: [],
+				analyzedFiles: [],
 				didDropReactHooksJsPlugin: false,
 				hadPartialFailure: false
 			};
@@ -40967,24 +41074,32 @@ const runOxlint = async (options) => {
 			const passConfigPath = Path.join(configDirectory, configFileName);
 			const passBaseArgs = makeBaseArgs(passConfigPath);
 			const passFileBatches = buildFileBatches(passBaseArgs, files);
-			const spawnPass = () => spawnLintBatches({
-				baseArgs: passBaseArgs,
-				fileBatches: passFileBatches,
-				rootDirectory,
-				nodeBinaryPath,
-				project,
-				onPartialFailure: reportPartialFailure,
-				onFileProgress: fileProgress,
-				spawnTimeoutMs,
-				outputMaxBytes,
-				concurrency: options.concurrency,
-				signal: options.signal,
-				deadlineEpochMs: options.deadlineEpochMs
-			});
+			let analyzedFiles = [];
+			const spawnPass = () => {
+				analyzedFiles = [];
+				return spawnLintBatches({
+					baseArgs: passBaseArgs,
+					fileBatches: passFileBatches,
+					rootDirectory,
+					nodeBinaryPath,
+					project,
+					onPartialFailure: reportPartialFailure,
+					onAnalyzedFiles: (filePaths) => {
+						analyzedFiles = filePaths;
+					},
+					onFileProgress: fileProgress,
+					spawnTimeoutMs,
+					outputMaxBytes,
+					concurrency: options.concurrency,
+					signal: options.signal,
+					deadlineEpochMs: options.deadlineEpochMs
+				});
+			};
 			writeOxlintConfig(passConfigPath, buildConfigForPass({}));
 			try {
 				return {
 					diagnostics: await spawnPass(),
+					analyzedFiles,
 					didDropReactHooksJsPlugin: false,
 					hadPartialFailure
 				};
@@ -40996,6 +41111,7 @@ const runOxlint = async (options) => {
 				reportPartialFailure(reactHooksJsDropNote);
 				return {
 					diagnostics,
+					analyzedFiles,
 					didDropReactHooksJsPlugin: true,
 					hadPartialFailure
 				};
@@ -41071,6 +41187,7 @@ const runOxlint = async (options) => {
 			const missFileSet = new Set(missFiles);
 			const hitFiles = candidateFiles.filter((candidateFile) => !missFileSet.has(candidateFile));
 			const sidecarReplayedDiagnostics = [];
+			const sidecarReplayedFiles = [];
 			const sidecarLintFiles = [];
 			if (sidecarCache === null) sidecarLintFiles.push(...hitFiles);
 			else {
@@ -41078,8 +41195,10 @@ const runOxlint = async (options) => {
 				for (const hitFile of hitFiles) {
 					const cacheKey = cacheKeyByFile.get(hitFile);
 					const entry = cacheKey === void 0 ? null : sidecarCache.lookup(cacheKey);
-					if (entry !== null && entry.probes.every((probe) => probeAnswers.answerFor(probe.kind, probe.path) === probe.answer)) sidecarReplayedDiagnostics.push(...entry.diagnostics);
-					else sidecarLintFiles.push(hitFile);
+					if (entry !== null && entry.probes.every((probe) => probeAnswers.answerFor(probe.kind, probe.path) === probe.answer)) {
+						sidecarReplayedFiles.push(hitFile);
+						sidecarReplayedDiagnostics.push(...entry.diagnostics);
+					} else sidecarLintFiles.push(hitFile);
 					if (performance.now() - verifySliceStartedAt >= 12) {
 						await yieldToEventLoop();
 						verifySliceStartedAt = performance.now();
@@ -41105,6 +41224,7 @@ const runOxlint = async (options) => {
 				sidecarRuleIdFilter: new Set(unboundedSidecarRuleIds)
 			}), "oxlintrc.sidecar-unbounded.json", hitFiles, void 0) : {
 				diagnostics: [],
+				analyzedFiles: [],
 				didDropReactHooksJsPlugin: false,
 				hadPartialFailure: false
 			};
@@ -41135,6 +41255,15 @@ const runOxlint = async (options) => {
 					probesByFile: await missProbesTask
 				}]
 			});
+			const analyzedFileSet = new Set(fullResult.analyzedFiles);
+			const boundedSidecarAnalyzedFileSet = new Set(boundedSidecarResult.analyzedFiles);
+			const unboundedSidecarAnalyzedFileSet = new Set(unboundedSidecarResult.analyzedFiles);
+			const sidecarReplayedFileSet = new Set(sidecarReplayedFiles);
+			for (const hitFile of hitFiles) if (useSidecarCache ? (sidecarReplayedFileSet.has(hitFile) || boundedSidecarAnalyzedFileSet.has(hitFile)) && (unboundedSidecarRuleIds.length === 0 || unboundedSidecarAnalyzedFileSet.has(hitFile)) : boundedSidecarAnalyzedFileSet.has(hitFile)) analyzedFileSet.add(hitFile);
+			onFileCoverage?.({
+				candidateFiles,
+				analyzedFiles: candidateFiles.filter((candidateFile) => analyzedFileSet.has(candidateFile))
+			});
 			return dedupeDiagnostics([
 				...replayedDiagnostics,
 				...fullResult.diagnostics,
@@ -41145,6 +41274,7 @@ const runOxlint = async (options) => {
 		}
 		const baseArgs = makeBaseArgs(configPath);
 		const fileBatches = buildFileBatches(baseArgs, candidateFiles);
+		let analyzedFiles = [];
 		const runBatches = () => spawnLintBatches({
 			baseArgs,
 			fileBatches,
@@ -41152,6 +41282,9 @@ const runOxlint = async (options) => {
 			nodeBinaryPath,
 			project,
 			onPartialFailure,
+			onAnalyzedFiles: (filePaths) => {
+				analyzedFiles = filePaths;
+			},
 			onFileProgress: options.onFileProgress,
 			spawnTimeoutMs,
 			outputMaxBytes,
@@ -41161,7 +41294,12 @@ const runOxlint = async (options) => {
 		});
 		writeOxlintConfig(configPath, buildConfig({ extendsPaths }));
 		try {
-			return await runBatches();
+			const diagnostics = await runBatches();
+			onFileCoverage?.({
+				candidateFiles,
+				analyzedFiles
+			});
+			return diagnostics;
 		} catch (error) {
 			const reactHooksJsDropNote = reactHooksJsPluginDropNote(error);
 			if (reactHooksJsDropNote !== null) {
@@ -41171,11 +41309,20 @@ const runOxlint = async (options) => {
 				}));
 				const diagnostics = await runBatches();
 				onPartialFailure?.(reactHooksJsDropNote);
+				onFileCoverage?.({
+					candidateFiles,
+					analyzedFiles
+				});
 				return diagnostics;
 			}
 			if (extendsPaths.length === 0) throw error;
 			writeOxlintConfig(configPath, buildConfig({ extendsPaths: [] }));
-			return await runBatches();
+			const diagnostics = await runBatches();
+			onFileCoverage?.({
+				candidateFiles,
+				analyzedFiles
+			});
+			return diagnostics;
 		}
 	} finally {
 		restoreDisableDirectives();
@@ -41255,6 +41402,7 @@ var Linter = class Linter extends Service()("react-doctor/Linter") {
 				onPartialFailure: (reason) => {
 					collectedFailures.push(reason);
 				},
+				onFileCoverage: input.onFileCoverage,
 				onFileProgress: input.onFileProgress,
 				perFileLintCacheEnabled,
 				sidecarLintCacheEnabled,
@@ -41347,7 +41495,10 @@ const translateProjectInfoError = (cause, directory) => {
 		directory: cause.directory,
 		candidates: cause.candidates
 	}) });
-	return new ReactDoctorError({ reason: new ProjectNotFound({ directory }) });
+	return new ReactDoctorError({ reason: new ProjectDiscoveryFailed({
+		directory,
+		cause
+	}) });
 };
 var Project = class Project extends Service()("react-doctor/Project") {
 	static layerNode = succeed$3(Project, Project.of({ discover: fn("Project.discover")(function* (directory) {
@@ -41959,6 +42110,7 @@ const resolveGithubActionsScoreMetadata = (environment = process.env) => {
 		...actorAssociation !== void 0 ? { githubActorAssociation: actorAssociation } : {}
 	};
 };
+const toNormalizedRelativePath = (filePath, rootDirectory) => Path.relative(Path.resolve(rootDirectory), Path.resolve(rootDirectory, filePath)).replaceAll("\\", "/") || ".";
 const NO_HOOKS = {
 	beforeLint: () => void_,
 	afterLint: () => void_
@@ -42057,7 +42209,7 @@ const runInspect = (input, hooks = {}) => gen(function* () {
 		repo
 	}).pipe(orElseSucceed(() => null)) : succeed$2(null));
 	const lintIncludePaths = (input.skipJsxIncludeFilter ? input.includePaths.length > 0 ? [...input.includePaths] : void 0 : computeExplicitLintIncludePaths([...input.includePaths], project)) ?? resolveLintIncludePaths(scanDirectory, resolvedConfig.config, project);
-	const scannedFilePaths = input.suppressScanSummary ? (lintIncludePaths ?? (yield* filesService.listSourceFiles(scanDirectory))).map((relativePath) => Path.resolve(scanDirectory, relativePath)) : [];
+	const fallbackScannedFilePaths = input.suppressScanSummary ? (lintIncludePaths ?? (yield* filesService.listSourceFiles(scanDirectory))).map((relativePath) => Path.resolve(scanDirectory, relativePath)) : [];
 	const beforeLint = hooks.beforeLint ?? NO_HOOKS.beforeLint;
 	const afterLint = hooks.afterLint ?? NO_HOOKS.afterLint;
 	yield* beforeLint(project, lintIncludePaths ?? void 0);
@@ -42162,6 +42314,7 @@ const runInspect = (input, hooks = {}) => gen(function* () {
 	let deadCodeCacheHit = null;
 	let deadCodeSummaryCacheHits = null;
 	let deadCodeSummaryCacheMisses = null;
+	const lintFileCoverageState = { value: null };
 	const baseLintStream = linterService.run({
 		rootDirectory: scanDirectory,
 		project,
@@ -42177,6 +42330,9 @@ const runInspect = (input, hooks = {}) => gen(function* () {
 			lastReportedTotalFileCount = totalFileCount;
 			runSync(scanProgress.update(`Scanning files (${scannedFileCount}/${totalFileCount})${workerCountSuffix}...`));
 		},
+		onFileCoverage: (coverage) => {
+			lintFileCoverageState.value = coverage;
+		},
 		onCacheStats: (cacheHitFileCount, totalConsideredFileCount) => {
 			lintCacheHitFileCount = cacheHitFileCount;
 			lintCacheTotalFileCount = totalConsideredFileCount;
@@ -42207,7 +42363,10 @@ const runInspect = (input, hooks = {}) => gen(function* () {
 	const lintFailureState = yield* get$2(lintFailure);
 	yield* afterLint(lintFailureState.didFail);
 	if (lintFailureState.didFail) yield* scanProgress.fail(formatLintFailText(lintFailureState.reasonTag, process.version));
-	const totalFileCount = lastReportedTotalFileCount || (lintIncludePaths?.length ?? project.sourceFileCount);
+	const candidateFiles = lintFileCoverageState.value === null ? [] : [...new Set(lintFileCoverageState.value.candidateFiles.map((filePath) => toNormalizedRelativePath(filePath, scanDirectory)))];
+	const analyzedFiles = lintFileCoverageState.value === null ? [] : [...new Set(lintFileCoverageState.value.analyzedFiles.map((filePath) => toNormalizedRelativePath(filePath, scanDirectory)))].sort();
+	const totalFileCount = candidateFiles.length || lastReportedTotalFileCount || (lintIncludePaths?.length ?? project.sourceFileCount);
+	const scannedFilePaths = input.suppressScanSummary ? candidateFiles.length > 0 ? candidateFiles.map((filePath) => Path.resolve(scanDirectory, filePath)) : fallbackScannedFilePaths : [];
 	const scannedFilesLabel = `${totalFileCount} ${totalFileCount === 1 ? "file" : "files"}`;
 	let deadCodeCollected = [];
 	if (lintFailureState.didFail) {
@@ -42289,6 +42448,7 @@ const runInspect = (input, hooks = {}) => gen(function* () {
 		deadCodeOverlapped: shouldOverlapDeadCode,
 		scannedFileCount: totalFileCount,
 		scannedFilePaths,
+		analyzedFiles,
 		scanElapsedMilliseconds,
 		scanConcurrency,
 		supplyChainOverlapTimedOut: supplyChainResult.timedOut,
@@ -42540,7 +42700,7 @@ const buildJsonReportError = (input) => {
 		sentryEventId
 	};
 	return {
-		schemaVersion: 1,
+		schemaVersion: 3,
 		version: input.version,
 		ok: false,
 		directory: input.directory,
@@ -42585,6 +42745,7 @@ const summarizeDiagnostics = (diagnostics, worstScore = null, worstScoreLabel =
 * React-runtime rule family was gated off for the project.
 */
 const hasReactRuntime = (project) => project.reactVersion !== null || project.preactVersion !== null;
+const isScanComplete = (input) => input.analyzedFileCount !== void 0 && input.scannedFileCount !== void 0 && input.skippedCheckCount === 0 && input.skippedCheckReasonCount === 0 && input.analyzedFileCount === input.scannedFileCount;
 const toJsonDiff = (diff) => {
 	if (!diff) return null;
 	return {
@@ -42607,21 +42768,68 @@ const findWorstScoredProject = (projects) => {
 	}
 	return worst;
 };
+const toJsonReportDiagnostic = (diagnostic, projectRoot, reportRoot) => {
+	const normalizedFilePath = toNormalizedRelativePath(diagnostic.filePath, projectRoot);
+	const reportRelativeFilePath = toNormalizedRelativePath(Path.resolve(projectRoot, diagnostic.filePath), reportRoot);
+	const ruleIdentity = getDiagnosticRuleIdentity(diagnostic);
+	return {
+		...diagnostic,
+		id: buildDiagnosticIdentity({
+			filePath: reportRelativeFilePath,
+			line: diagnostic.line,
+			column: diagnostic.column,
+			plugin: diagnostic.plugin,
+			rule: diagnostic.rule
+		}),
+		normalizedFilePath,
+		category: ruleIdentity.category,
+		tags: [...new Set(ruleIdentity.tags)].sort()
+	};
+};
 const buildJsonReport = (input) => {
-	const projects = input.scans.map(({ directory, result }) => ({
-		directory,
-		project: result.project,
-		diagnostics: result.diagnostics,
-		score: result.score,
-		skippedChecks: result.skippedChecks,
-		...result.skippedCheckReasons ? { skippedCheckReasons: result.skippedCheckReasons } : {},
-		...typeof result.scannedFileCount === "number" ? { scannedFileCount: result.scannedFileCount } : {},
-		elapsedMilliseconds: result.elapsedMilliseconds
-	}));
+	const projects = input.scans.map(({ directory, result }) => {
+		const skippedChecks = result.skippedChecks ?? [];
+		const analyzedFiles = [...new Set((result.analyzedFiles ?? []).map((filePath) => toNormalizedRelativePath(filePath, result.project.rootDirectory)))].sort();
+		const scannedFileCount = result.scannedFileCount ?? result.project.sourceFileCount;
+		return {
+			directory,
+			packageRoot: result.project.rootDirectory,
+			framework: result.project.framework,
+			project: result.project,
+			diagnostics: result.diagnostics.map((diagnostic) => toJsonReportDiagnostic(diagnostic, result.project.rootDirectory, input.directory)),
+			score: result.score,
+			skippedChecks,
+			...result.skippedCheckReasons ? { skippedCheckReasons: result.skippedCheckReasons } : {},
+			analyzedFiles,
+			analyzedFileCount: analyzedFiles.length,
+			complete: isScanComplete({
+				analyzedFileCount: result.analyzedFiles === void 0 ? void 0 : analyzedFiles.length,
+				scannedFileCount,
+				skippedCheckCount: skippedChecks.length,
+				skippedCheckReasonCount: Object.keys(result.skippedCheckReasons ?? {}).length
+			}),
+			...typeof result.scannedFileCount === "number" ? { scannedFileCount } : {},
+			elapsedMilliseconds: result.elapsedMilliseconds
+		};
+	});
 	const flattenedDiagnostics = projects.flatMap((entry) => entry.diagnostics);
 	const worstScoredProject = findWorstScoredProject(projects);
-	const summary = summarizeDiagnostics(flattenedDiagnostics, worstScoredProject?.score?.score ?? null, worstScoredProject?.score?.label ?? null);
-	const shared = {
+	const diagnosticSummary = summarizeDiagnostics(flattenedDiagnostics, worstScoredProject?.score?.score ?? null, worstScoredProject?.score?.label ?? null);
+	const affectedFileCount = projects.reduce((totalAffectedFileCount, project) => totalAffectedFileCount + new Set(project.diagnostics.map((diagnostic) => diagnostic.normalizedFilePath)).size, 0);
+	const summary = {
+		...diagnosticSummary,
+		affectedFileCount
+	};
+	return {
+		schemaVersion: 3,
+		mode: input.baseline !== void 0 ? "baseline" : input.baselineDegraded && input.mode === "baseline" ? "diff" : input.mode,
+		...input.baseline ? { baseline: {
+			baseRef: input.baseline.baseRef,
+			newCount: summary.totalDiagnosticCount,
+			fixedCount: input.baseline.fixedCount,
+			baseTotalCount: input.baseline.baseTotalCount
+		} } : {},
+		...input.baselineDegraded ? { baselineDegraded: true } : {},
 		...input.scans.length > 0 ? { reactDetected: input.scans.some((scan) => hasReactRuntime(scan.result.project)) } : {},
 		version: input.version,
 		ok: true,
@@ -42633,39 +42841,26 @@ const buildJsonReport = (input) => {
 		elapsedMilliseconds: input.totalElapsedMilliseconds,
 		error: null
 	};
-	if (input.baseline) return {
-		schemaVersion: 2,
-		mode: "baseline",
-		baseline: {
-			baseRef: input.baseline.baseRef,
-			newCount: summary.totalDiagnosticCount,
-			fixedCount: input.baseline.fixedCount,
-			baseTotalCount: input.baseline.baseTotalCount
-		},
-		...shared
-	};
-	return {
-		schemaVersion: 1,
-		mode: input.mode,
-		...input.baselineDegraded ? { baselineDegraded: true } : {},
-		...shared
-	};
 };
 /**
 * Single source of truth for the skipped-check accounting shared by the
 * CLI renderer (`react-doctor/src/inspect.ts → finalizeAndRender`) and the
 * programmatic shell (`@react-doctor/api → diagnose()`). Both surface a
-* failed lint / dead-code pass instead of a false "all clear", so the
+* failed or partial analysis pass instead of a false "all clear", so the
 * branch logic lives here once.
 */
 const buildSkippedChecks = (input) => {
 	const skippedChecks = [];
 	if (input.didLintFail) skippedChecks.push("lint");
 	if (input.didDeadCodeFail) skippedChecks.push("dead-code");
+	if (input.supplyChainOverlapTimedOut) skippedChecks.push("supply-chain");
+	if (input.securityScanFailed) skippedChecks.push("security-scan");
 	const skippedCheckReasons = {};
 	if (input.didLintFail && input.lintFailureReason !== null) skippedCheckReasons.lint = input.lintFailureReason;
 	else if (input.lintPartialFailures.length > 0) skippedCheckReasons["lint:partial"] = input.lintPartialFailures.join("; ");
 	if (input.didDeadCodeFail && input.deadCodeFailureReason !== null) skippedCheckReasons["dead-code"] = input.deadCodeFailureReason;
+	if (input.supplyChainOverlapTimedOut) skippedCheckReasons["supply-chain"] = "Supply-chain analysis timed out and was skipped.";
+	if (input.securityScanFailed) skippedCheckReasons["security-scan"] = "Security scan failed and was skipped.";
 	return {
 		skippedChecks,
 		skippedCheckReasons
@@ -42854,6 +43049,8 @@ const outputToDiagnoseResult = (output, elapsedMilliseconds) => {
 		score: output.score,
 		skippedChecks,
 		...Object.keys(skippedCheckReasons).length > 0 ? { skippedCheckReasons } : {},
+		analyzedFiles: output.analyzedFiles,
+		scannedFileCount: output.scannedFileCount,
 		project: output.project,
 		reactDetected: hasReactRuntime(output.project),
 		elapsedMilliseconds
@@ -42963,6 +43160,8 @@ const toJsonReport = (result, options) => buildJsonReport({
 			score: result.score,
 			skippedChecks: result.skippedChecks,
 			...result.skippedCheckReasons ? { skippedCheckReasons: result.skippedCheckReasons } : {},
+			...result.analyzedFiles ? { analyzedFiles: result.analyzedFiles } : {},
+			...typeof result.scannedFileCount === "number" ? { scannedFileCount: result.scannedFileCount } : {},
 			project: result.project,
 			elapsedMilliseconds: result.elapsedMilliseconds
 		}
@@ -42973,4 +43172,4 @@ const toJsonReport = (result, options) => buildJsonReport({
 export { AmbiguousProjectError, NoReactDependencyError, NotADirectoryError, PackageJsonNotFoundError, ProjectNotFoundError, ReactDoctorError, buildJsonReport, buildJsonReportError, clearCaches, defineConfig, diagnose, filterSourceFiles, getDiffInfo, hasReactRuntime, isProjectDiscoveryError, isReactDoctorError, summarizeDiagnostics, toJsonReport };
 
 //# sourceMappingURL=index.js.map
-//# debugId=4940d639-1712-5f20-ae4a-a6bf10741ae9
+//# debugId=95e70e55-12b7-5577-81f3-f5331db7ca53