react-doctor 0.7.9-dev.1a30f2c → 0.7.9-dev.21043e0

package/dist/cli.js

@@ -1,5 +1,5 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="23161367-202b-57f9-9fc4-293d3fc10d75")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="6f05eada-46fe-5b24-92d8-15fa92a38b00")}catch(e){}}();
 import { createRequire } from "node:module";
 import * as NodeChildProcess from "node:child_process";
 import { execFile, execFileSync, spawn, spawnSync } from "node:child_process";
@@ -36252,6 +36252,53 @@ const SUPPLY_CHAIN_OVERLAP_TIMEOUT_MS = 9e4;
 const SUPPLY_CHAIN_CACHE_TTL_MS = 864e5;
 const SUPPLY_CHAIN_CACHE_SUBDIR = "supply-chain";
 const SUPPLY_CHAIN_IGNORED_PACKAGES = new Set(["next"]);
+const lastSourceMappingUrl = (fileContent) => {
+	const lastReference = [...fileContent.matchAll(/\/\/# sourceMappingURL=(\S+)/g)].at(-1);
+	return lastReference ? lastReference[1] : null;
+};
+const mapTargetsSource = (mapContent, input) => {
+	const parsedMap = JSON.parse(mapContent);
+	if (typeof parsedMap !== "object" || parsedMap === null) return false;
+	const { file, sources } = parsedMap;
+	if (file !== input.expectedFile) return false;
+	if (!Array.isArray(sources) || sources.length !== 1 || typeof sources[0] !== "string") return false;
+	return Path.posix.normalize(Path.posix.join(input.mapDirectory, sources[0])) === input.sourcePath;
+};
+const quartetProvesEmit = (stem, sourcePath, readFileText) => {
+	try {
+		const emitBaseName = Path.posix.basename(stem);
+		const mapDirectory = Path.posix.dirname(stem);
+		return lastSourceMappingUrl(readFileText(`${stem}.js`)) === `${emitBaseName}.js.map` && lastSourceMappingUrl(readFileText(`${stem}.d.ts`)) === `${emitBaseName}.d.ts.map` && mapTargetsSource(readFileText(`${stem}.js.map`), {
+			expectedFile: `${emitBaseName}.js`,
+			mapDirectory,
+			sourcePath
+		}) && mapTargetsSource(readFileText(`${stem}.d.ts.map`), {
+			expectedFile: `${emitBaseName}.d.ts`,
+			mapDirectory,
+			sourcePath
+		});
+	} catch {
+		return false;
+	}
+};
+const collectTypeScriptEmitDuplicateJsPaths = (input) => {
+	const untracked = new Set(input.untrackedPaths);
+	const duplicateJsPaths = /* @__PURE__ */ new Set();
+	for (const jsPath of untracked) {
+		if (!jsPath.endsWith(".js")) continue;
+		const stem = jsPath.slice(0, -3);
+		if (![
+			jsPath,
+			`${stem}.js.map`,
+			`${stem}.d.ts`,
+			`${stem}.d.ts.map`
+		].every((emitPath) => untracked.has(emitPath) && !input.trackedPaths.has(emitPath))) continue;
+		const sourcePath = [`${stem}.ts`, `${stem}.tsx`].find((candidatePath) => input.trackedPaths.has(candidatePath));
+		if (!sourcePath) continue;
+		if (quartetProvesEmit(stem, sourcePath, input.readFileText)) duplicateJsPaths.add(jsPath);
+	}
+	return duplicateJsPaths;
+};
 const isIgnoredDirectoryName = (directoryName) => IGNORED_DIRECTORIES.has(directoryName) || directoryName.startsWith(".") && !SCANNED_DOT_DIRECTORIES.has(directoryName);
 const hasIgnoredPathSegment = (relativePath) => relativePath.split(/[/\\]/).slice(0, -1).some((segment) => isIgnoredDirectoryName(segment));
 const isLintableSourceFile = (filePath) => SOURCE_FILE_PATTERN.test(filePath) && !GENERATED_BUNDLE_FILE_PATTERN.test(filePath) && !GENERATED_SOURCE_DIRECTORY_PATTERN.test(filePath);
@@ -36319,20 +36366,29 @@ const collectSizedSourceFiles = (rootDirectory, relativePaths) => {
 	}
 	return entries;
 };
-const listSourceFilesViaGit = (rootDirectory) => {
+const gitLsFiles = (rootDirectory, flags) => {
 	const result = spawnSync("git", [
 		"ls-files",
 		"-z",
-		"--cached",
-		"--others",
-		"--exclude-standard"
+		...flags
 	], {
 		cwd: rootDirectory,
 		encoding: "utf-8",
 		maxBuffer: GIT_LS_FILES_MAX_BUFFER_BYTES
 	});
 	if (result.error || result.status !== 0) return null;
-	return result.stdout.split("\0").filter((filePath) => filePath.length > 0 && isLintableSourceFile(filePath) && !hasIgnoredPathSegment(filePath));
+	return result.stdout.split("\0").filter((filePath) => filePath.length > 0);
+};
+const listSourceFilesViaGit = (rootDirectory) => {
+	const trackedPaths = gitLsFiles(rootDirectory, ["--cached"]);
+	const untrackedPaths = gitLsFiles(rootDirectory, ["--others", "--exclude-standard"]);
+	if (trackedPaths === null || untrackedPaths === null) return null;
+	const emitDuplicateJsPaths = collectTypeScriptEmitDuplicateJsPaths({
+		trackedPaths: new Set(trackedPaths),
+		untrackedPaths,
+		readFileText: (relativePath) => NFS.readFileSync(Path.resolve(rootDirectory, relativePath), "utf-8")
+	});
+	return [...trackedPaths, ...untrackedPaths].filter((filePath) => isLintableSourceFile(filePath) && !hasIgnoredPathSegment(filePath) && !emitDuplicateJsPaths.has(filePath));
 };
 const listSourceFilesViaFilesystem = (rootDirectory) => {
 	const filePaths = [];
@@ -45276,6 +45332,14 @@ var Reporter = class Reporter extends Service()("react-doctor/Reporter") {
 		});
 	}));
 };
+const HOME_DIRECTORY = os.homedir();
+const USER_HOME_PATTERNS = [/[A-Za-z]:[\\/]Users[\\/][^\\/]+/gi, /(?:\/Users\/|\/home\/)[^/\\]+/gi];
+const scrubSensitivePaths = (text) => {
+	let scrubbed = text;
+	if (HOME_DIRECTORY.length > 1) scrubbed = scrubbed.split(HOME_DIRECTORY).join("~");
+	for (const pattern of USER_HOME_PATTERNS) scrubbed = scrubbed.replace(pattern, "~");
+	return scrubbed;
+};
 const ScoreApiResponseSchema = Struct({
 	score: Number$1,
 	label: String$1,
@@ -45290,7 +45354,10 @@ const ScoreApiResponseSchema = Struct({
 	})))
 });
 const parseScoreResult = (value) => getOrNull(decodeUnknownOption(ScoreApiResponseSchema)(value));
-const stripLocalFileFields = (diagnostics) => diagnostics.map(({ filePath: _filePath, fileContext: _fileContext, fixGroupId: _fixGroupId, ...rest }) => rest);
+const sanitizeScoreDiagnostics = (diagnostics) => diagnostics.map(({ filePath, fileContext: _fileContext, fixGroupId: _fixGroupId, ...rest }) => ({
+	...rest,
+	filePath: redactSensitiveText(scrubSensitivePaths(filePath))
+}));
 const isAbortError = (error) => error instanceof Error && (error.name === "AbortError" || error.name === "TimeoutError");
 const describeFailure = (error) => {
 	if (isAbortError(error)) return `timed out after ${FETCH_TIMEOUT_MS / 1e3}s`;
@@ -45303,7 +45370,7 @@ const calculateScore = async (diagnostics, options = {}) => {
 	const requestUrl = options.isCi ? `${SCORE_API_URL}?ci=1` : SCORE_API_URL;
 	try {
 		const compressedBody = gzipSync(JSON.stringify({
-			diagnostics: stripLocalFileFields(diagnostics),
+			diagnostics: sanitizeScoreDiagnostics(diagnostics),
 			...options.metadata?.repo ? { repo: options.metadata.repo } : {},
 			...options.metadata?.sha ? { sha: options.metadata.sha } : {},
 			...options.metadata?.framework ? { framework: options.metadata.framework } : {},
@@ -47148,7 +47215,7 @@ const makeNoopConsole = () => ({
 });
 //#endregion
 //#region src/cli/utils/version.ts
-const VERSION = "0.7.9-dev.1a30f2c";
+const VERSION = "0.7.9-dev.21043e0";
 //#endregion
 //#region src/cli/utils/json-mode.ts
 let context = null;
@@ -47234,23 +47301,6 @@ const getRunId = () => {
 	return cachedRunId;
 };
 //#endregion
-//#region src/cli/utils/scrub-sensitive-text.ts
-const HOME_DIRECTORY = os.homedir();
-const USER_HOME_PATTERNS = [/[A-Za-z]:[\\/]Users[\\/][^\\/]+/gi, /(?:\/Users\/|\/home\/)[^/\\]+/gi];
-/**
-* Replaces the user's home directory (and generic `/Users|/home|C:\Users\<name>`
-* roots) with `~` so absolute paths can't be tied back to an individual. Keeps
-* the path's relative structure intact, which stays useful for debugging while
-* dropping the personally-identifying prefix. Idempotent — re-running on an
-* already-scrubbed `~/...` path is a no-op.
-*/
-const scrubSensitivePaths = (text) => {
-	let scrubbed = text;
-	if (HOME_DIRECTORY.length > 1) scrubbed = scrubbed.split(HOME_DIRECTORY).join("~");
-	for (const pattern of USER_HOME_PATTERNS) scrubbed = scrubbed.replace(pattern, "~");
-	return scrubbed;
-};
-//#endregion
 //#region src/cli/utils/build-run-context.ts
 const ROOT_SUBCOMMANDS = new Set(["install", "setup"]);
 const detectInvokedVia = () => {
@@ -47517,13 +47567,13 @@ const isDevVersion = (version) => version === "0.0.0" || version.includes("-");
 * uploads source-map artifacts under, so stack frames symbolicate. Honors the
 * standard `SENTRY_RELEASE` override.
 */
-const resolveSentryRelease = () => process.env.SENTRY_RELEASE || `react-doctor@0.7.9-dev.1a30f2c`;
+const resolveSentryRelease = () => process.env.SENTRY_RELEASE || `react-doctor@0.7.9-dev.21043e0`;
 /**
 * Deployment environment shown in Sentry's environment filter. Defaults to
 * `production` for tagged releases and `development` for dev/unbuilt versions,
 * overridable via the standard `SENTRY_ENVIRONMENT` env var.
 */
-const resolveSentryEnvironment = () => process.env.SENTRY_ENVIRONMENT || (isDevVersion("0.7.9-dev.1a30f2c") ? "development" : "production");
+const resolveSentryEnvironment = () => process.env.SENTRY_ENVIRONMENT || (isDevVersion("0.7.9-dev.21043e0") ? "development" : "production");
 /**
 * Performance-tracing sample rate in `[0, 1]`. Reads `SENTRY_TRACES_SAMPLE_RATE`
 * (set to `0` to disable tracing) and falls back to
@@ -65801,4 +65851,4 @@ Promise.resolve().then(() => assertNoRemovedFlags(process.argv)).then(() => prog
 export {};
 
 //# sourceMappingURL=cli.js.map
-//# debugId=23161367-202b-57f9-9fc4-293d3fc10d75
+//# debugId=6f05eada-46fe-5b24-92d8-15fa92a38b00

package/dist/index.js

@@ -1,5 +1,5 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="bc3f4cb3-9cb9-5b3f-a968-1596305e5a01")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="28287c1c-b7b6-53b8-9e72-7d28d4f3ca45")}catch(e){}}();
 import { r as __toESM$1, t as __commonJSMin$1 } from "./chunk-N93fKeF6.js";
 import { createRequire } from "node:module";
 import reactDoctorPlugin, { ALL_REACT_DOCTOR_RULE_KEYS, CROSS_FILE_DEPENDENCY_COLLECTORS, CROSS_FILE_RULE_IDS, FRAMEWORK_SPECIFIC_RULE_KEYS, FRAMEWORK_TOKENS, MOTION_LIBRARY_PACKAGES, REACT_COMPILER_RULES, REACT_DOCTOR_RULES, classifySecurityScanFile, collectCrossFileDependencyProbes, resetManifestCaches, shouldReadSecurityScanContent } from "oxlint-plugin-react-doctor";
@@ -33050,6 +33050,53 @@ const SUPPLY_CHAIN_OVERLAP_TIMEOUT_MS = 9e4;
 const SUPPLY_CHAIN_CACHE_TTL_MS = 864e5;
 const SUPPLY_CHAIN_CACHE_SUBDIR = "supply-chain";
 const SUPPLY_CHAIN_IGNORED_PACKAGES = new Set(["next"]);
+const lastSourceMappingUrl = (fileContent) => {
+	const lastReference = [...fileContent.matchAll(/\/\/# sourceMappingURL=(\S+)/g)].at(-1);
+	return lastReference ? lastReference[1] : null;
+};
+const mapTargetsSource = (mapContent, input) => {
+	const parsedMap = JSON.parse(mapContent);
+	if (typeof parsedMap !== "object" || parsedMap === null) return false;
+	const { file, sources } = parsedMap;
+	if (file !== input.expectedFile) return false;
+	if (!Array.isArray(sources) || sources.length !== 1 || typeof sources[0] !== "string") return false;
+	return Path.posix.normalize(Path.posix.join(input.mapDirectory, sources[0])) === input.sourcePath;
+};
+const quartetProvesEmit = (stem, sourcePath, readFileText) => {
+	try {
+		const emitBaseName = Path.posix.basename(stem);
+		const mapDirectory = Path.posix.dirname(stem);
+		return lastSourceMappingUrl(readFileText(`${stem}.js`)) === `${emitBaseName}.js.map` && lastSourceMappingUrl(readFileText(`${stem}.d.ts`)) === `${emitBaseName}.d.ts.map` && mapTargetsSource(readFileText(`${stem}.js.map`), {
+			expectedFile: `${emitBaseName}.js`,
+			mapDirectory,
+			sourcePath
+		}) && mapTargetsSource(readFileText(`${stem}.d.ts.map`), {
+			expectedFile: `${emitBaseName}.d.ts`,
+			mapDirectory,
+			sourcePath
+		});
+	} catch {
+		return false;
+	}
+};
+const collectTypeScriptEmitDuplicateJsPaths = (input) => {
+	const untracked = new Set(input.untrackedPaths);
+	const duplicateJsPaths = /* @__PURE__ */ new Set();
+	for (const jsPath of untracked) {
+		if (!jsPath.endsWith(".js")) continue;
+		const stem = jsPath.slice(0, -3);
+		if (![
+			jsPath,
+			`${stem}.js.map`,
+			`${stem}.d.ts`,
+			`${stem}.d.ts.map`
+		].every((emitPath) => untracked.has(emitPath) && !input.trackedPaths.has(emitPath))) continue;
+		const sourcePath = [`${stem}.ts`, `${stem}.tsx`].find((candidatePath) => input.trackedPaths.has(candidatePath));
+		if (!sourcePath) continue;
+		if (quartetProvesEmit(stem, sourcePath, input.readFileText)) duplicateJsPaths.add(jsPath);
+	}
+	return duplicateJsPaths;
+};
 const isIgnoredDirectoryName = (directoryName) => IGNORED_DIRECTORIES.has(directoryName) || directoryName.startsWith(".") && !SCANNED_DOT_DIRECTORIES.has(directoryName);
 const hasIgnoredPathSegment = (relativePath) => relativePath.split(/[/\\]/).slice(0, -1).some((segment) => isIgnoredDirectoryName(segment));
 const isLintableSourceFile = (filePath) => SOURCE_FILE_PATTERN.test(filePath) && !GENERATED_BUNDLE_FILE_PATTERN.test(filePath) && !GENERATED_SOURCE_DIRECTORY_PATTERN.test(filePath);
@@ -33120,20 +33167,29 @@ const collectSizedSourceFiles = (rootDirectory, relativePaths) => {
 	}
 	return entries;
 };
-const listSourceFilesViaGit = (rootDirectory) => {
+const gitLsFiles = (rootDirectory, flags) => {
 	const result = spawnSync("git", [
 		"ls-files",
 		"-z",
-		"--cached",
-		"--others",
-		"--exclude-standard"
+		...flags
 	], {
 		cwd: rootDirectory,
 		encoding: "utf-8",
 		maxBuffer: GIT_LS_FILES_MAX_BUFFER_BYTES
 	});
 	if (result.error || result.status !== 0) return null;
-	return result.stdout.split("\0").filter((filePath) => filePath.length > 0 && isLintableSourceFile(filePath) && !hasIgnoredPathSegment(filePath));
+	return result.stdout.split("\0").filter((filePath) => filePath.length > 0);
+};
+const listSourceFilesViaGit = (rootDirectory) => {
+	const trackedPaths = gitLsFiles(rootDirectory, ["--cached"]);
+	const untrackedPaths = gitLsFiles(rootDirectory, ["--others", "--exclude-standard"]);
+	if (trackedPaths === null || untrackedPaths === null) return null;
+	const emitDuplicateJsPaths = collectTypeScriptEmitDuplicateJsPaths({
+		trackedPaths: new Set(trackedPaths),
+		untrackedPaths,
+		readFileText: (relativePath) => NFS.readFileSync(Path.resolve(rootDirectory, relativePath), "utf-8")
+	});
+	return [...trackedPaths, ...untrackedPaths].filter((filePath) => isLintableSourceFile(filePath) && !hasIgnoredPathSegment(filePath) && !emitDuplicateJsPaths.has(filePath));
 };
 const listSourceFilesViaFilesystem = (rootDirectory) => {
 	const filePaths = [];
@@ -42032,6 +42088,14 @@ var Reporter = class Reporter extends Service()("react-doctor/Reporter") {
 		});
 	}));
 };
+const HOME_DIRECTORY = os.homedir();
+const USER_HOME_PATTERNS = [/[A-Za-z]:[\\/]Users[\\/][^\\/]+/gi, /(?:\/Users\/|\/home\/)[^/\\]+/gi];
+const scrubSensitivePaths = (text) => {
+	let scrubbed = text;
+	if (HOME_DIRECTORY.length > 1) scrubbed = scrubbed.split(HOME_DIRECTORY).join("~");
+	for (const pattern of USER_HOME_PATTERNS) scrubbed = scrubbed.replace(pattern, "~");
+	return scrubbed;
+};
 const ScoreApiResponseSchema = Struct({
 	score: Number$1,
 	label: String$1,
@@ -42046,7 +42110,10 @@ const ScoreApiResponseSchema = Struct({
 	})))
 });
 const parseScoreResult = (value) => getOrNull(decodeUnknownOption(ScoreApiResponseSchema)(value));
-const stripLocalFileFields = (diagnostics) => diagnostics.map(({ filePath: _filePath, fileContext: _fileContext, fixGroupId: _fixGroupId, ...rest }) => rest);
+const sanitizeScoreDiagnostics = (diagnostics) => diagnostics.map(({ filePath, fileContext: _fileContext, fixGroupId: _fixGroupId, ...rest }) => ({
+	...rest,
+	filePath: redactSensitiveText(scrubSensitivePaths(filePath))
+}));
 const isAbortError = (error) => error instanceof Error && (error.name === "AbortError" || error.name === "TimeoutError");
 const describeFailure = (error) => {
 	if (isAbortError(error)) return `timed out after ${FETCH_TIMEOUT_MS / 1e3}s`;
@@ -42059,7 +42126,7 @@ const calculateScore = async (diagnostics, options = {}) => {
 	const requestUrl = options.isCi ? `${SCORE_API_URL}?ci=1` : SCORE_API_URL;
 	try {
 		const compressedBody = gzipSync(JSON.stringify({
-			diagnostics: stripLocalFileFields(diagnostics),
+			diagnostics: sanitizeScoreDiagnostics(diagnostics),
 			...options.metadata?.repo ? { repo: options.metadata.repo } : {},
 			...options.metadata?.sha ? { sha: options.metadata.sha } : {},
 			...options.metadata?.framework ? { framework: options.metadata.framework } : {},
@@ -43652,4 +43719,4 @@ const toJsonReport = (result, options) => buildJsonReport({
 export { AmbiguousProjectError, NoReactDependencyError, NotADirectoryError, PackageJsonNotFoundError, ProjectNotFoundError, ReactDoctorError, buildJsonReport, buildJsonReportError, clearCaches, defineConfig, diagnose, filterSourceFiles, getDiffInfo, hasReactRuntime, isProjectDiscoveryError, isReactDoctorError, summarizeDiagnostics, toJsonReport };
 
 //# sourceMappingURL=index.js.map
-//# debugId=bc3f4cb3-9cb9-5b3f-a968-1596305e5a01
+//# debugId=28287c1c-b7b6-53b8-9e72-7d28d4f3ca45

package/dist/lsp.js

@@ -33102,6 +33102,53 @@ const SUPPLY_CHAIN_OVERLAP_TIMEOUT_MS = 9e4;
 const SUPPLY_CHAIN_CACHE_TTL_MS = 864e5;
 const SUPPLY_CHAIN_CACHE_SUBDIR = "supply-chain";
 const SUPPLY_CHAIN_IGNORED_PACKAGES = new Set(["next"]);
+const lastSourceMappingUrl = (fileContent) => {
+	const lastReference = [...fileContent.matchAll(/\/\/# sourceMappingURL=(\S+)/g)].at(-1);
+	return lastReference ? lastReference[1] : null;
+};
+const mapTargetsSource = (mapContent, input) => {
+	const parsedMap = JSON.parse(mapContent);
+	if (typeof parsedMap !== "object" || parsedMap === null) return false;
+	const { file, sources } = parsedMap;
+	if (file !== input.expectedFile) return false;
+	if (!Array.isArray(sources) || sources.length !== 1 || typeof sources[0] !== "string") return false;
+	return Path.posix.normalize(Path.posix.join(input.mapDirectory, sources[0])) === input.sourcePath;
+};
+const quartetProvesEmit = (stem, sourcePath, readFileText) => {
+	try {
+		const emitBaseName = Path.posix.basename(stem);
+		const mapDirectory = Path.posix.dirname(stem);
+		return lastSourceMappingUrl(readFileText(`${stem}.js`)) === `${emitBaseName}.js.map` && lastSourceMappingUrl(readFileText(`${stem}.d.ts`)) === `${emitBaseName}.d.ts.map` && mapTargetsSource(readFileText(`${stem}.js.map`), {
+			expectedFile: `${emitBaseName}.js`,
+			mapDirectory,
+			sourcePath
+		}) && mapTargetsSource(readFileText(`${stem}.d.ts.map`), {
+			expectedFile: `${emitBaseName}.d.ts`,
+			mapDirectory,
+			sourcePath
+		});
+	} catch {
+		return false;
+	}
+};
+const collectTypeScriptEmitDuplicateJsPaths = (input) => {
+	const untracked = new Set(input.untrackedPaths);
+	const duplicateJsPaths = /* @__PURE__ */ new Set();
+	for (const jsPath of untracked) {
+		if (!jsPath.endsWith(".js")) continue;
+		const stem = jsPath.slice(0, -3);
+		if (![
+			jsPath,
+			`${stem}.js.map`,
+			`${stem}.d.ts`,
+			`${stem}.d.ts.map`
+		].every((emitPath) => untracked.has(emitPath) && !input.trackedPaths.has(emitPath))) continue;
+		const sourcePath = [`${stem}.ts`, `${stem}.tsx`].find((candidatePath) => input.trackedPaths.has(candidatePath));
+		if (!sourcePath) continue;
+		if (quartetProvesEmit(stem, sourcePath, input.readFileText)) duplicateJsPaths.add(jsPath);
+	}
+	return duplicateJsPaths;
+};
 const isIgnoredDirectoryName = (directoryName) => IGNORED_DIRECTORIES.has(directoryName) || directoryName.startsWith(".") && !SCANNED_DOT_DIRECTORIES.has(directoryName);
 const hasIgnoredPathSegment = (relativePath) => relativePath.split(/[/\\]/).slice(0, -1).some((segment) => isIgnoredDirectoryName(segment));
 const isLintableSourceFile = (filePath) => SOURCE_FILE_PATTERN.test(filePath) && !GENERATED_BUNDLE_FILE_PATTERN.test(filePath) && !GENERATED_SOURCE_DIRECTORY_PATTERN.test(filePath);
@@ -33172,20 +33219,29 @@ const collectSizedSourceFiles = (rootDirectory, relativePaths) => {
 	}
 	return entries;
 };
-const listSourceFilesViaGit = (rootDirectory) => {
+const gitLsFiles = (rootDirectory, flags) => {
 	const result = spawnSync("git", [
 		"ls-files",
 		"-z",
-		"--cached",
-		"--others",
-		"--exclude-standard"
+		...flags
 	], {
 		cwd: rootDirectory,
 		encoding: "utf-8",
 		maxBuffer: GIT_LS_FILES_MAX_BUFFER_BYTES
 	});
 	if (result.error || result.status !== 0) return null;
-	return result.stdout.split("\0").filter((filePath) => filePath.length > 0 && isLintableSourceFile(filePath) && !hasIgnoredPathSegment(filePath));
+	return result.stdout.split("\0").filter((filePath) => filePath.length > 0);
+};
+const listSourceFilesViaGit = (rootDirectory) => {
+	const trackedPaths = gitLsFiles(rootDirectory, ["--cached"]);
+	const untrackedPaths = gitLsFiles(rootDirectory, ["--others", "--exclude-standard"]);
+	if (trackedPaths === null || untrackedPaths === null) return null;
+	const emitDuplicateJsPaths = collectTypeScriptEmitDuplicateJsPaths({
+		trackedPaths: new Set(trackedPaths),
+		untrackedPaths,
+		readFileText: (relativePath) => NFS.readFileSync(Path.resolve(rootDirectory, relativePath), "utf-8")
+	});
+	return [...trackedPaths, ...untrackedPaths].filter((filePath) => isLintableSourceFile(filePath) && !hasIgnoredPathSegment(filePath) && !emitDuplicateJsPaths.has(filePath));
 };
 const listSourceFilesViaFilesystem = (rootDirectory) => {
 	const filePaths = [];
@@ -42010,6 +42066,14 @@ var Reporter = class Reporter extends Service()("react-doctor/Reporter") {
 		});
 	}));
 };
+const HOME_DIRECTORY = os.homedir();
+const USER_HOME_PATTERNS = [/[A-Za-z]:[\\/]Users[\\/][^\\/]+/gi, /(?:\/Users\/|\/home\/)[^/\\]+/gi];
+const scrubSensitivePaths = (text) => {
+	let scrubbed = text;
+	if (HOME_DIRECTORY.length > 1) scrubbed = scrubbed.split(HOME_DIRECTORY).join("~");
+	for (const pattern of USER_HOME_PATTERNS) scrubbed = scrubbed.replace(pattern, "~");
+	return scrubbed;
+};
 const ScoreApiResponseSchema = Struct({
 	score: Number$1,
 	label: String$1,
@@ -42024,7 +42088,10 @@ const ScoreApiResponseSchema = Struct({
 	})))
 });
 const parseScoreResult = (value) => getOrNull(decodeUnknownOption(ScoreApiResponseSchema)(value));
-const stripLocalFileFields = (diagnostics) => diagnostics.map(({ filePath: _filePath, fileContext: _fileContext, fixGroupId: _fixGroupId, ...rest }) => rest);
+const sanitizeScoreDiagnostics = (diagnostics) => diagnostics.map(({ filePath, fileContext: _fileContext, fixGroupId: _fixGroupId, ...rest }) => ({
+	...rest,
+	filePath: redactSensitiveText(scrubSensitivePaths(filePath))
+}));
 const isAbortError = (error) => error instanceof Error && (error.name === "AbortError" || error.name === "TimeoutError");
 const describeFailure = (error) => {
 	if (isAbortError(error)) return `timed out after ${FETCH_TIMEOUT_MS / 1e3}s`;
@@ -42037,7 +42104,7 @@ const calculateScore = async (diagnostics, options = {}) => {
 	const requestUrl = options.isCi ? `${SCORE_API_URL}?ci=1` : SCORE_API_URL;
 	try {
 		const compressedBody = gzipSync(JSON.stringify({
-			diagnostics: stripLocalFileFields(diagnostics),
+			diagnostics: sanitizeScoreDiagnostics(diagnostics),
 			...options.metadata?.repo ? { repo: options.metadata.repo } : {},
 			...options.metadata?.sha ? { sha: options.metadata.sha } : {},
 			...options.metadata?.framework ? { framework: options.metadata.framework } : {},
@@ -44984,23 +45051,6 @@ const METRIC = {
 */
 const toCategoryKey = (category) => category.toLowerCase().replace(/[^a-z0-9]+/g, "_");
 //#endregion
-//#region src/cli/utils/scrub-sensitive-text.ts
-const HOME_DIRECTORY = os.homedir();
-const USER_HOME_PATTERNS = [/[A-Za-z]:[\\/]Users[\\/][^\\/]+/gi, /(?:\/Users\/|\/home\/)[^/\\]+/gi];
-/**
-* Replaces the user's home directory (and generic `/Users|/home|C:\Users\<name>`
-* roots) with `~` so absolute paths can't be tied back to an individual. Keeps
-* the path's relative structure intact, which stays useful for debugging while
-* dropping the personally-identifying prefix. Idempotent — re-running on an
-* already-scrubbed `~/...` path is a no-op.
-*/
-const scrubSensitivePaths = (text) => {
-	let scrubbed = text;
-	if (HOME_DIRECTORY.length > 1) scrubbed = scrubbed.split(HOME_DIRECTORY).join("~");
-	for (const pattern of USER_HOME_PATTERNS) scrubbed = scrubbed.replace(pattern, "~");
-	return scrubbed;
-};
-//#endregion
 //#region src/cli/utils/anonymize-text.ts
 /**
 * Free-text fields can carry both a home-directory path (the OS username) and a
@@ -45289,5 +45339,5 @@ const startLanguageServer = () => {
 };
 //#endregion
 export { startLanguageServer };
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="3af67fb4-a992-5939-906b-39e662d71deb")}catch(e){}}();
-//# debugId=3af67fb4-a992-5939-906b-39e662d71deb
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="6c89dec9-5fbe-5a2e-b1fe-6b3954e0e85b")}catch(e){}}();
+//# debugId=6c89dec9-5fbe-5a2e-b1fe-6b3954e0e85b

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "react-doctor",
-  "version": "0.7.9-dev.1a30f2c",
+  "version": "0.7.9-dev.21043e0",
   "description": "Your agent writes bad React. This catches it",
   "keywords": [
     "accessibility",
@@ -66,7 +66,7 @@
     "vscode-uri": "^3.1.0",
     "yaml": "^2.9.0",
     "deslop-js": "0.7.9",
-    "oxlint-plugin-react-doctor": "0.7.9-dev.1a30f2c"
+    "oxlint-plugin-react-doctor": "0.7.9-dev.21043e0"
   },
   "devDependencies": {
     "@types/babel__code-frame": "^7.27.0",
@@ -74,9 +74,9 @@
     "@xterm/headless": "^6.0.0",
     "commander": "^14.0.3",
     "ora": "^9.4.0",
-    "@react-doctor/api": "0.7.9",
     "@react-doctor/core": "0.7.9",
-    "@react-doctor/language-server": "0.7.9"
+    "@react-doctor/language-server": "0.7.9",
+    "@react-doctor/api": "0.7.9"
   },
   "engines": {
     "node": "^20.19.0 || >=22.13.0"