react-doctor 0.7.9-dev.e86bc57 → 0.8.0-dev.0618ff6

package/dist/cli.js

@@ -1,5 +1,5 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="a51e06c5-66da-5c06-be51-50358579743c")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="4433c20d-e5c5-50db-ab5b-0ff72ef6f226")}catch(e){}}();
 import { createRequire } from "node:module";
 import * as NodeChildProcess from "node:child_process";
 import { execFile, execFileSync, spawn, spawnSync } from "node:child_process";
@@ -36242,7 +36242,7 @@ const SOCKET_FREE_USER_AGENT = "react-doctor-supply-chain";
 const FILE_LINT_CACHE_FILENAME = "file-lint-cache.json";
 const FILE_LINT_CACHE_MAX_FILE_COUNT = 5e4;
 const SIDECAR_LINT_CACHE_FILENAME = "sidecar-lint-cache.json";
-const CORE_PACKAGE_VERSION = "0.7.9";
+const CORE_PACKAGE_VERSION = "0.8.0";
 const DEAD_CODE_CACHE_FILENAME = "dead-code-cache.json";
 const DEAD_CODE_SUMMARY_CACHE_FILENAME = "dead-code-summaries.json";
 const SUPPLY_CHAIN_PLUGIN = "socket";
@@ -36252,6 +36252,53 @@ const SUPPLY_CHAIN_OVERLAP_TIMEOUT_MS = 9e4;
 const SUPPLY_CHAIN_CACHE_TTL_MS = 864e5;
 const SUPPLY_CHAIN_CACHE_SUBDIR = "supply-chain";
 const SUPPLY_CHAIN_IGNORED_PACKAGES = new Set(["next"]);
+const lastSourceMappingUrl = (fileContent) => {
+	const lastReference = [...fileContent.matchAll(/\/\/# sourceMappingURL=(\S+)/g)].at(-1);
+	return lastReference ? lastReference[1] : null;
+};
+const mapTargetsSource = (mapContent, input) => {
+	const parsedMap = JSON.parse(mapContent);
+	if (typeof parsedMap !== "object" || parsedMap === null) return false;
+	const { file, sources } = parsedMap;
+	if (file !== input.expectedFile) return false;
+	if (!Array.isArray(sources) || sources.length !== 1 || typeof sources[0] !== "string") return false;
+	return Path.posix.normalize(Path.posix.join(input.mapDirectory, sources[0])) === input.sourcePath;
+};
+const quartetProvesEmit = (stem, sourcePath, readFileText) => {
+	try {
+		const emitBaseName = Path.posix.basename(stem);
+		const mapDirectory = Path.posix.dirname(stem);
+		return lastSourceMappingUrl(readFileText(`${stem}.js`)) === `${emitBaseName}.js.map` && lastSourceMappingUrl(readFileText(`${stem}.d.ts`)) === `${emitBaseName}.d.ts.map` && mapTargetsSource(readFileText(`${stem}.js.map`), {
+			expectedFile: `${emitBaseName}.js`,
+			mapDirectory,
+			sourcePath
+		}) && mapTargetsSource(readFileText(`${stem}.d.ts.map`), {
+			expectedFile: `${emitBaseName}.d.ts`,
+			mapDirectory,
+			sourcePath
+		});
+	} catch {
+		return false;
+	}
+};
+const collectTypeScriptEmitDuplicateJsPaths = (input) => {
+	const untracked = new Set(input.untrackedPaths);
+	const duplicateJsPaths = /* @__PURE__ */ new Set();
+	for (const jsPath of untracked) {
+		if (!jsPath.endsWith(".js")) continue;
+		const stem = jsPath.slice(0, -3);
+		if (![
+			jsPath,
+			`${stem}.js.map`,
+			`${stem}.d.ts`,
+			`${stem}.d.ts.map`
+		].every((emitPath) => untracked.has(emitPath) && !input.trackedPaths.has(emitPath))) continue;
+		const sourcePath = [`${stem}.ts`, `${stem}.tsx`].find((candidatePath) => input.trackedPaths.has(candidatePath));
+		if (!sourcePath) continue;
+		if (quartetProvesEmit(stem, sourcePath, input.readFileText)) duplicateJsPaths.add(jsPath);
+	}
+	return duplicateJsPaths;
+};
 const isIgnoredDirectoryName = (directoryName) => IGNORED_DIRECTORIES.has(directoryName) || directoryName.startsWith(".") && !SCANNED_DOT_DIRECTORIES.has(directoryName);
 const hasIgnoredPathSegment = (relativePath) => relativePath.split(/[/\\]/).slice(0, -1).some((segment) => isIgnoredDirectoryName(segment));
 const isLintableSourceFile = (filePath) => SOURCE_FILE_PATTERN.test(filePath) && !GENERATED_BUNDLE_FILE_PATTERN.test(filePath) && !GENERATED_SOURCE_DIRECTORY_PATTERN.test(filePath);
@@ -36319,20 +36366,29 @@ const collectSizedSourceFiles = (rootDirectory, relativePaths) => {
 	}
 	return entries;
 };
-const listSourceFilesViaGit = (rootDirectory) => {
+const gitLsFiles = (rootDirectory, flags) => {
 	const result = spawnSync("git", [
 		"ls-files",
 		"-z",
-		"--cached",
-		"--others",
-		"--exclude-standard"
+		...flags
 	], {
 		cwd: rootDirectory,
 		encoding: "utf-8",
 		maxBuffer: GIT_LS_FILES_MAX_BUFFER_BYTES
 	});
 	if (result.error || result.status !== 0) return null;
-	return result.stdout.split("\0").filter((filePath) => filePath.length > 0 && isLintableSourceFile(filePath) && !hasIgnoredPathSegment(filePath));
+	return result.stdout.split("\0").filter((filePath) => filePath.length > 0);
+};
+const listSourceFilesViaGit = (rootDirectory) => {
+	const trackedPaths = gitLsFiles(rootDirectory, ["--cached"]);
+	const untrackedPaths = gitLsFiles(rootDirectory, ["--others", "--exclude-standard"]);
+	if (trackedPaths === null || untrackedPaths === null) return null;
+	const emitDuplicateJsPaths = collectTypeScriptEmitDuplicateJsPaths({
+		trackedPaths: new Set(trackedPaths),
+		untrackedPaths,
+		readFileText: (relativePath) => NFS.readFileSync(Path.resolve(rootDirectory, relativePath), "utf-8")
+	});
+	return [...trackedPaths, ...untrackedPaths].filter((filePath) => isLintableSourceFile(filePath) && !hasIgnoredPathSegment(filePath) && !emitDuplicateJsPaths.has(filePath));
 };
 const listSourceFilesViaFilesystem = (rootDirectory) => {
 	const filePaths = [];
@@ -36532,11 +36588,8 @@ const frameworkMergeRank = (framework) => {
 	if (framework === "unknown") return 3;
 	return MOBILE_FRAMEWORKS.has(framework) ? 2 : 1;
 };
-const REACT_COMPILER_PACKAGES = new Set([
-	"babel-plugin-react-compiler",
-	"react-compiler-runtime",
-	"eslint-plugin-react-compiler"
-]);
+const REACT_COMPILER_TRANSFORM_PACKAGES = new Set(["babel-plugin-react-compiler", "react-compiler-runtime"]);
+const REACT_COMPILER_LINT_PACKAGES = new Set(["eslint-plugin-react-compiler"]);
 const NEXT_CONFIG_FILENAMES = [
 	"next.config.js",
 	"next.config.mjs",
@@ -36566,16 +36619,29 @@ const EXPO_APP_CONFIG_FILENAMES = [
 	"app.config.js",
 	"app.config.ts"
 ];
-const REACT_COMPILER_PACKAGE_REFERENCE_PATTERN = /babel-plugin-react-compiler|react-compiler-runtime|eslint-plugin-react-compiler|["']react-compiler["']/;
+const REACT_COMPILER_PACKAGE_REFERENCE_PATTERN = /babel-plugin-react-compiler|react-compiler-runtime|["']react-compiler["']/;
 const REACT_COMPILER_ENABLED_FLAG_PATTERN = /["']?reactCompiler["']?\s*:\s*(?:true\b|\{)/;
 const STATIC_EXPORT_OUTPUT_PATTERN = /(?:^|[^.\w])["']?output["']?\s*:\s*["']export["']/m;
-const hasCompilerPackage = (packageJson) => {
+const hasCompilerPackage = (packageJson, compilerPackages) => {
 	const allDependencies = {
 		...packageJson.peerDependencies,
 		...packageJson.dependencies,
 		...packageJson.devDependencies
 	};
-	return Object.keys(allDependencies).some((packageName) => REACT_COMPILER_PACKAGES.has(packageName));
+	return Object.keys(allDependencies).some((packageName) => compilerPackages.has(packageName));
+};
+const hasCompilerPackageInAncestors = (directory, compilerPackages) => {
+	if (isProjectBoundary(directory)) return false;
+	let ancestorDirectory = Path.dirname(directory);
+	while (ancestorDirectory !== Path.dirname(ancestorDirectory)) {
+		const ancestorPackagePath = Path.join(ancestorDirectory, "package.json");
+		if (isFile(ancestorPackagePath)) {
+			if (hasCompilerPackage(readPackageJson$1(ancestorPackagePath), compilerPackages)) return true;
+		}
+		if (isProjectBoundary(ancestorDirectory)) return false;
+		ancestorDirectory = Path.dirname(ancestorDirectory);
+	}
+	return false;
 };
 const hasCompilerInConfigFile = (filePath) => {
 	if (!isFile(filePath)) return false;
@@ -36584,23 +36650,14 @@ const hasCompilerInConfigFile = (filePath) => {
 };
 const hasCompilerInConfigFiles = (directory, filenames) => filenames.some((filename) => hasCompilerInConfigFile(Path.join(directory, filename)));
 const detectReactCompiler = (directory, packageJson) => {
-	if (hasCompilerPackage(packageJson)) return true;
+	if (hasCompilerPackage(packageJson, REACT_COMPILER_TRANSFORM_PACKAGES)) return true;
 	if (hasCompilerInConfigFiles(directory, NEXT_CONFIG_FILENAMES)) return true;
 	if (hasCompilerInConfigFiles(directory, BABEL_CONFIG_FILENAMES)) return true;
 	if (hasCompilerInConfigFiles(directory, VITE_CONFIG_FILENAMES)) return true;
 	if (hasCompilerInConfigFiles(directory, EXPO_APP_CONFIG_FILENAMES)) return true;
-	if (isProjectBoundary(directory)) return false;
-	let ancestorDirectory = Path.dirname(directory);
-	while (ancestorDirectory !== Path.dirname(ancestorDirectory)) {
-		const ancestorPackagePath = Path.join(ancestorDirectory, "package.json");
-		if (isFile(ancestorPackagePath)) {
-			if (hasCompilerPackage(readPackageJson$1(ancestorPackagePath))) return true;
-		}
-		if (isProjectBoundary(ancestorDirectory)) return false;
-		ancestorDirectory = Path.dirname(ancestorDirectory);
-	}
-	return false;
+	return hasCompilerPackageInAncestors(directory, REACT_COMPILER_TRANSFORM_PACKAGES);
 };
+const detectReactCompilerLintPlugin = (directory, packageJson) => hasCompilerPackage(packageJson, REACT_COMPILER_LINT_PACKAGES) || hasCompilerPackageInAncestors(directory, REACT_COMPILER_LINT_PACKAGES);
 const detectNextjsStaticExport = (directory) => NEXT_CONFIG_FILENAMES.some((filename) => {
 	const filePath = Path.join(directory, filename);
 	return isFile(filePath) && STATIC_EXPORT_OUTPUT_PATTERN.test(NFS.readFileSync(filePath, "utf-8"));
@@ -37564,6 +37621,7 @@ const discoverProjectWithoutPackageJson = (directory) => {
 		framework: "unknown",
 		hasTypeScript: hasOwnTsConfig,
 		hasReactCompiler: false,
+		hasReactCompilerLintPlugin: false,
 		hasTanStackQuery: false,
 		hasSsrDependency: false,
 		preactVersion: null,
@@ -37684,6 +37742,7 @@ const discoverProject = (directory) => {
 		framework,
 		hasTypeScript,
 		hasReactCompiler: detectReactCompiler(directory, packageJson),
+		hasReactCompilerLintPlugin: detectReactCompilerLintPlugin(directory, packageJson),
 		hasTanStackQuery: hasTanStackQuery(packageJson),
 		hasSsrDependency: workspaceFacts.hasSsrDependency,
 		preactVersion,
@@ -39169,8 +39228,10 @@ const isDiagnosticSurface = (value) => typeof value === "string" && DIAGNOSTIC_S
 * to the local CLI so developers see them while editing, but they're
 * removed from the PR comment surface, the score, and the CI gate so
 * they can't bury real React findings or fail a build over a Tailwind
-* shorthand. Override per-surface via `config.surfaces.<surface>` to
-* promote individual rules back in by tag, category, or rule id.
+* shorthand. Diagnostics from test and story files likewise remain in
+* raw output while staying out of the production-health score and CI
+* gate. Override per-surface via `config.surfaces.<surface>` to promote
+* individual rules back in by tag, category, or rule id.
 */
 const DEFAULT_SURFACE_EXCLUDED_TAGS = {
 	cli: [],
@@ -42001,6 +42062,7 @@ const isDiagnosticOnSurface = (diagnostic, surface, config) => {
 	if (resolved.includeRuleKeys.has(ruleKey)) return true;
 	if (resolved.includeCategories.has(category)) return true;
 	if (intersects(tags, resolved.includeTags)) return true;
+	if (diagnostic.fileContext !== void 0 && (surface === "score" || surface === "ciFailure")) return false;
 	if (resolved.excludeRuleKeys.has(ruleKey)) return false;
 	if (resolved.excludeCategories.has(category)) return false;
 	if (intersects(tags, resolved.excludeTags)) return false;
@@ -42425,6 +42487,7 @@ var Git = class Git extends Service()("react-doctor/Git") {
 			}
 			const diff = yield* runGit(input.directory, [
 				"diff",
+				"--no-ext-diff",
 				"-z",
 				"--name-only",
 				"--diff-filter=ACMR",
@@ -42471,6 +42534,7 @@ var Git = class Git extends Service()("react-doctor/Git") {
 				if (resolvedCurrentBranch !== null && resolvedCurrentBranch === baseBranch) {
 					const uncommitted = yield* runGit(directory, [
 						"diff",
+						"--no-ext-diff",
 						"-z",
 						"--name-only",
 						"--diff-filter=ACMR",
@@ -42497,6 +42561,7 @@ var Git = class Git extends Service()("react-doctor/Git") {
 				if (mergeBaseRef === null) return null;
 				const diff = yield* runGit(directory, [
 					"diff",
+					"--no-ext-diff",
 					"-z",
 					"--name-only",
 					"--diff-filter=ACMR",
@@ -42514,6 +42579,7 @@ var Git = class Git extends Service()("react-doctor/Git") {
 			}).pipe(withSpan("Git.diffSelection")),
 			stagedFilePaths: (directory) => runGit(directory, [
 				"diff",
+				"--no-ext-diff",
 				"--cached",
 				"-z",
 				"--name-only",
@@ -42559,6 +42625,7 @@ var Git = class Git extends Service()("react-doctor/Git") {
 				if (baseRef !== void 0 && !isSafeGitRevision(baseRef)) return null;
 				const result = yield* runGit(directory, [
 					"diff",
+					"--no-ext-diff",
 					"--unified=0",
 					"--diff-filter=ACMR",
 					"--relative",
@@ -42963,7 +43030,7 @@ const buildUserPluginRules = (userPlugin, severityControls) => {
 	return enabled;
 };
 const createOxlintConfig = ({ pluginPath, project, customRulesOnly = false, extendsPaths = [], ignoredTags = /* @__PURE__ */ new Set(), serverAuthFunctionNames, severityControls, userPlugins = [], disableReactHooksJsPlugin = false, ruleSelection, sidecarRuleIdFilter }) => {
-	const reactHooksJsPlugin = disableReactHooksJsPlugin || ruleSelection === "sidecar" ? null : resolveReactHooksJsPlugin(project.hasReactCompiler, customRulesOnly);
+	const reactHooksJsPlugin = disableReactHooksJsPlugin || ruleSelection === "sidecar" ? null : resolveReactHooksJsPlugin(project.hasReactCompiler || project.hasReactCompilerLintPlugin === true, customRulesOnly);
 	const reactCompilerRules = reactHooksJsPlugin ? applyRuleSeverityControls(filterRulesToAvailable(REACT_COMPILER_RULES, "react-hooks-js", reactHooksJsPlugin.availableRuleNames), severityControls) : {};
 	const jsPlugins = [];
 	if (reactHooksJsPlugin) jsPlugins.push(reactHooksJsPlugin.entry);
@@ -43926,6 +43993,8 @@ const LEADING_SEVERITY_LABEL_PATTERN = /^(?:Error|Warning):\s*/;
 const TRAILING_PERIOD_PATTERN = /\.$/;
 const REACT_COMPILER_TITLE = "React Compiler can't optimize this";
 const REACT_COMPILER_TODO_TITLE = "React Compiler doesn't support this syntax";
+const REACT_ERROR_BOUNDARY_TITLE = "JSX render errors need an Error Boundary";
+const REACT_ERROR_BOUNDARY_MESSAGE = "This try/catch cannot catch errors thrown while the JSX child renders. Use an Error Boundary instead.";
 const REACT_COMPILER_IMPACT = "This component misses React Compiler's automatic memoization & re-renders more than it should";
 const REACT_COMPILER_ACTION = "Rewrite the flagged code so the compiler can optimize it.";
 const REACT_COMPILER_INCOMPATIBLE_LIBRARY_ACTION = "It's how the library works, not a bug in your code. Memoize values you pass from it into other memoized components, or suppress it with `// react-doctor-disable-next-line react-hooks-js/incompatible-library`.";
@@ -43969,6 +44038,7 @@ const getRuleCategory = (ruleName) => reactDoctorPlugin.rules[ruleName]?.categor
 const getRuleTitle = (ruleName) => reactDoctorPlugin.rules[ruleName]?.title;
 const resolveDiagnosticTitle = (plugin, rule) => {
 	if (plugin !== "react-hooks-js") return getRuleTitle(rule);
+	if (rule === "error-boundaries") return REACT_ERROR_BOUNDARY_TITLE;
 	return rule === "todo" ? REACT_COMPILER_TODO_TITLE : REACT_COMPILER_TITLE;
 };
 const cleanDiagnosticMessage = (message, help, plugin, rule, project) => {
@@ -43987,6 +44057,10 @@ const resolveCleanedDiagnostic = (message, help, plugin, rule, project) => {
 		};
 		const [reasonSummary = "", ...reasonDetailLines] = bailoutReason.split("\n");
 		const reasonDetail = reasonDetailLines.join("\n").trim();
+		if (rule === "error-boundaries") return {
+			message: REACT_ERROR_BOUNDARY_MESSAGE,
+			help: reasonDetail || help
+		};
 		return {
 			message: buildReactCompilerMessage(reasonSummary.trim(), rule === "incompatible-library" ? REACT_COMPILER_INCOMPATIBLE_LIBRARY_ACTION : REACT_COMPILER_ACTION),
 			help: appendReanimatedSharedValueHint(reasonDetail || help, rule, project)
@@ -44008,7 +44082,10 @@ const parseRuleCode = (code) => {
 		rule: match[2]
 	};
 };
-const resolveDiagnosticCategory = (plugin, rule) => getRuleCategory(rule) ?? lookupOwnString(PLUGIN_CATEGORY_MAP, plugin) ?? "Bugs";
+const resolveDiagnosticCategory = (plugin, rule) => {
+	if (plugin === "react-hooks-js" && rule === "error-boundaries") return "Bugs";
+	return getRuleCategory(rule) ?? lookupOwnString(PLUGIN_CATEGORY_MAP, plugin) ?? "Bugs";
+};
 const resolveMatchByOccurrence = (rule, category) => OCCURRENCE_MATCHED_CATEGORIES.has(category) || Boolean(reactDoctorPlugin.rules[rule]?.matchByOccurrence);
 /**
 * Maps oxlint's non-primary labels (`labels[1..]`) into related source
@@ -44821,7 +44898,7 @@ const runOxlint = async (options) => {
 				};
 			}
 		};
-		if (perFileLintCacheEnabled && !project.hasReactCompiler && extendsPaths.length === 0 && userPlugins.length === 0) {
+		if (perFileLintCacheEnabled && !project.hasReactCompiler && project.hasReactCompilerLintPlugin !== true && extendsPaths.length === 0 && userPlugins.length === 0) {
 			const rulesetHash = computeRulesetHash({
 				config: buildConfig({
 					extendsPaths: [],
@@ -45263,6 +45340,14 @@ var Reporter = class Reporter extends Service()("react-doctor/Reporter") {
 		});
 	}));
 };
+const HOME_DIRECTORY = os.homedir();
+const USER_HOME_PATTERNS = [/[A-Za-z]:[\\/]Users[\\/][^\\/]+/gi, /(?:\/Users\/|\/home\/)[^/\\]+/gi];
+const scrubSensitivePaths = (text) => {
+	let scrubbed = text;
+	if (HOME_DIRECTORY.length > 1) scrubbed = scrubbed.split(HOME_DIRECTORY).join("~");
+	for (const pattern of USER_HOME_PATTERNS) scrubbed = scrubbed.replace(pattern, "~");
+	return scrubbed;
+};
 const ScoreApiResponseSchema = Struct({
 	score: Number$1,
 	label: String$1,
@@ -45277,7 +45362,10 @@ const ScoreApiResponseSchema = Struct({
 	})))
 });
 const parseScoreResult = (value) => getOrNull(decodeUnknownOption(ScoreApiResponseSchema)(value));
-const stripLocalFileFields = (diagnostics) => diagnostics.map(({ filePath: _filePath, fileContext: _fileContext, fixGroupId: _fixGroupId, ...rest }) => rest);
+const sanitizeScoreDiagnostics = (diagnostics) => diagnostics.map(({ filePath, fileContext: _fileContext, fixGroupId: _fixGroupId, ...rest }) => ({
+	...rest,
+	filePath: redactSensitiveText(scrubSensitivePaths(filePath))
+}));
 const isAbortError = (error) => error instanceof Error && (error.name === "AbortError" || error.name === "TimeoutError");
 const describeFailure = (error) => {
 	if (isAbortError(error)) return `timed out after ${FETCH_TIMEOUT_MS / 1e3}s`;
@@ -45290,7 +45378,7 @@ const calculateScore = async (diagnostics, options = {}) => {
 	const requestUrl = options.isCi ? `${SCORE_API_URL}?ci=1` : SCORE_API_URL;
 	try {
 		const compressedBody = gzipSync(JSON.stringify({
-			diagnostics: stripLocalFileFields(diagnostics),
+			diagnostics: sanitizeScoreDiagnostics(diagnostics),
 			...options.metadata?.repo ? { repo: options.metadata.repo } : {},
 			...options.metadata?.sha ? { sha: options.metadata.sha } : {},
 			...options.metadata?.framework ? { framework: options.metadata.framework } : {},
@@ -47135,7 +47223,7 @@ const makeNoopConsole = () => ({
 });
 //#endregion
 //#region src/cli/utils/version.ts
-const VERSION = "0.7.9-dev.e86bc57";
+const VERSION = "0.8.0-dev.0618ff6";
 //#endregion
 //#region src/cli/utils/json-mode.ts
 let context = null;
@@ -47221,23 +47309,6 @@ const getRunId = () => {
 	return cachedRunId;
 };
 //#endregion
-//#region src/cli/utils/scrub-sensitive-text.ts
-const HOME_DIRECTORY = os.homedir();
-const USER_HOME_PATTERNS = [/[A-Za-z]:[\\/]Users[\\/][^\\/]+/gi, /(?:\/Users\/|\/home\/)[^/\\]+/gi];
-/**
-* Replaces the user's home directory (and generic `/Users|/home|C:\Users\<name>`
-* roots) with `~` so absolute paths can't be tied back to an individual. Keeps
-* the path's relative structure intact, which stays useful for debugging while
-* dropping the personally-identifying prefix. Idempotent — re-running on an
-* already-scrubbed `~/...` path is a no-op.
-*/
-const scrubSensitivePaths = (text) => {
-	let scrubbed = text;
-	if (HOME_DIRECTORY.length > 1) scrubbed = scrubbed.split(HOME_DIRECTORY).join("~");
-	for (const pattern of USER_HOME_PATTERNS) scrubbed = scrubbed.replace(pattern, "~");
-	return scrubbed;
-};
-//#endregion
 //#region src/cli/utils/build-run-context.ts
 const ROOT_SUBCOMMANDS = new Set(["install", "setup"]);
 const detectInvokedVia = () => {
@@ -47504,13 +47575,13 @@ const isDevVersion = (version) => version === "0.0.0" || version.includes("-");
 * uploads source-map artifacts under, so stack frames symbolicate. Honors the
 * standard `SENTRY_RELEASE` override.
 */
-const resolveSentryRelease = () => process.env.SENTRY_RELEASE || `react-doctor@0.7.9-dev.e86bc57`;
+const resolveSentryRelease = () => process.env.SENTRY_RELEASE || `react-doctor@0.8.0-dev.0618ff6`;
 /**
 * Deployment environment shown in Sentry's environment filter. Defaults to
 * `production` for tagged releases and `development` for dev/unbuilt versions,
 * overridable via the standard `SENTRY_ENVIRONMENT` env var.
 */
-const resolveSentryEnvironment = () => process.env.SENTRY_ENVIRONMENT || (isDevVersion("0.7.9-dev.e86bc57") ? "development" : "production");
+const resolveSentryEnvironment = () => process.env.SENTRY_ENVIRONMENT || (isDevVersion("0.8.0-dev.0618ff6") ? "development" : "production");
 /**
 * Performance-tracing sample rate in `[0, 1]`. Reads `SENTRY_TRACES_SAMPLE_RATE`
 * (set to `0` to disable tracing) and falls back to
@@ -60005,6 +60076,7 @@ const buildOutcomeAttributes = (input) => {
 	const summary = summarizeDiagnostics(result.diagnostics);
 	const blockingLevel = resolveTelemetryBlocking(input.userConfig);
 	const gateDiagnostics = filterDiagnosticsForSurface(result.diagnostics, "ciFailure", input.userConfig);
+	const gateDiagnosticSet = new Set(gateDiagnostics);
 	const complete = isInspectResultComplete(result);
 	const didLintHardFail = hasLintHardFailure(result);
 	const failsOnHardFailure = didLintHardFail && blockingLevel !== "none";
@@ -60027,11 +60099,13 @@ const buildOutcomeAttributes = (input) => {
 	const largestRuleBucket = buildRuleBlastRadii(result.diagnostics)[0] ?? null;
 	let diagnosticsInTestFiles = 0;
 	let diagnosticsInStoryFiles = 0;
+	let nonProductionGateExcluded = 0;
 	const diagnosticSiteCounts = /* @__PURE__ */ new Map();
 	const findingsPerFixGroup = /* @__PURE__ */ new Map();
 	for (const diagnostic of result.diagnostics) {
 		if (diagnostic.fileContext === "test") diagnosticsInTestFiles += 1;
 		if (diagnostic.fileContext === "story") diagnosticsInStoryFiles += 1;
+		if (diagnostic.fileContext !== void 0 && !gateDiagnosticSet.has(diagnostic)) nonProductionGateExcluded += 1;
 		const diagnosticSite = JSON.stringify([
 			diagnostic.filePath,
 			diagnostic.line,
@@ -60080,6 +60154,7 @@ const buildOutcomeAttributes = (input) => {
 			affectedFiles: summary.affectedFileCount,
 			inTestFiles: diagnosticsInTestFiles,
 			inStoryFiles: diagnosticsInStoryFiles,
+			nonProductionGateExcluded,
 			distinctRules: countByRule.size,
 			topRule,
 			sameSiteOccurrences,
@@ -61919,7 +61994,9 @@ const finalizeAndRender = (input) => gen(function* () {
 		yield* log(highlighter.gray(`  ${demotedDiagnosticCount} demoted from the ${options.outputSurface} surface (e.g. design cleanup) — run \`npx react-doctor@latest .\` locally for the full list.`));
 		yield* log("");
 	}
-	const potentialScore = score ? yield* promise(() => computeProjectedScore([...printedDiagnostics], [...surfaceDiagnostics], score)) : null;
+	const scoreDiagnostics = filterDiagnosticsForSurface([...diagnostics], "score", userConfig);
+	const displayedScoreDiagnostics = filterDiagnosticsForSurface([...printedDiagnostics], "score", userConfig);
+	const potentialScore = score ? yield* promise(() => computeProjectedScore(displayedScoreDiagnostics, scoreDiagnostics, score)) : null;
 	const shouldShowShareLink = !options.noScore && options.share && !options.isCi;
 	yield* pause;
 	yield* printSummary({
@@ -63820,6 +63897,8 @@ const printMultiProjectSummary = (input) => gen(function* () {
 	const categoryFilters = input.categoryFilters ?? /* @__PURE__ */ new Set();
 	const animateRender = !verbose && canAnimateOnboarding(process.stdout);
 	const displayDiagnostics = filterDiagnosticsByCategories(filterScansForSurface(completedScans, "cli"), categoryFilters);
+	const scoreDiagnostics = new Set(filterScansForSurface(completedScans, "score"));
+	const displayedScoreDiagnostics = displayDiagnostics.filter((diagnostic) => scoreDiagnostics.has(diagnostic));
 	const projectRootByDiagnostic = /* @__PURE__ */ new WeakMap();
 	for (const scan of completedScans) for (const diagnostic of scan.result.diagnostics) projectRootByDiagnostic.set(diagnostic, scan.result.project.rootDirectory);
 	const resolveDiagnosticSourceRoot = (diagnostic) => projectRootByDiagnostic.get(diagnostic) ?? "";
@@ -63843,7 +63922,7 @@ const printMultiProjectSummary = (input) => gen(function* () {
 		diagnostics: displayDiagnostics,
 		elapsedMilliseconds: totalElapsedMilliseconds,
 		scoreResult: aggregateScore,
-		potentialScore: lowestScoredScan ? yield* promise(() => computeProjectedScore(displayDiagnostics, filterScansForSurface([lowestScoredScan], "cli"), lowestScoredScan.result.score)) : null,
+		potentialScore: lowestScoredScan ? yield* promise(() => computeProjectedScore(displayedScoreDiagnostics, filterScansForSurface([lowestScoredScan], "score"), lowestScoredScan.result.score)) : null,
 		totalSourceFileCount,
 		noScoreMessage: "Score unavailable.",
 		verbose,
@@ -65788,4 +65867,4 @@ Promise.resolve().then(() => assertNoRemovedFlags(process.argv)).then(() => prog
 export {};
 
 //# sourceMappingURL=cli.js.map
-//# debugId=a51e06c5-66da-5c06-be51-50358579743c
+//# debugId=4433c20d-e5c5-50db-ab5b-0ff72ef6f226

package/dist/index.d.ts

@@ -9056,8 +9056,10 @@ interface ReactDoctorIgnoreConfig {
  *
  * Defaults: design rules (tag `"design"`) are excluded from `prComment`,
  * `score`, and `ciFailure` so style cleanup doesn't dilute meaningful
- * React findings. They remain in `cli` so locally-running developers
- * still see the suggestion when they touch the file.
+ * React findings. Diagnostics stamped with `fileContext: "test" | "story"`
+ * are excluded from `score` and `ciFailure`. Both remain in `cli`, and an
+ * explicit rule, category, or tag include promotes a diagnostic back onto
+ * the selected surface.
  */
 type DiagnosticSurface = "cli" | "prComment" | "score" | "ciFailure";
 /**
@@ -9338,23 +9340,22 @@ interface ReactDoctorConfig {
    */
   adoptExistingLintConfig?: boolean;
   /**
-   * Per-surface include/exclude controls. Each `DiagnosticSurface` is
-   * resolved independently against rule tags, category, and id so a
-   * single rule can be visible locally yet hidden from PR comments,
-   * neutralized from the score, and excluded from the CI gate — all
-   * without touching the rule's severity or activation.
+   * Per-surface include/exclude controls. Each `DiagnosticSurface` resolves
+   * rule tags, categories, and identifiers independently. This lets you keep a rule
+   * visible locally while hiding it from PR comments, the score, or the CI
+   * gate. These controls don't change rule severity or activation.
    *
    * Defaults (applied before user overrides):
    *
    * - `prComment` excludes tag `"design"`
    * - `score` excludes tag `"design"`
    * - `ciFailure` excludes tag `"design"`
+   * - `score` and `ciFailure` exclude test/story file contexts unless explicitly included
    *
-   * Pass any controls block (even an empty `{}`) to keep the default
-   * exclusions; the user's include/exclude entries layer on top.
-   * Include entries always win over exclude entries — handy for
-   * promoting a single high-signal `design-*` rule back into the
-   * score or PR-comment surface.
+   * Pass any controls block, including an empty `{}`, to keep the defaults.
+   * Your include/exclude entries layer on top. Includes always win over
+   * excludes. For example, you can promote one high-signal `design-*` rule
+   * back into the score or PR-comment surface.
    */
   surfaces?: Partial<Record<DiagnosticSurface, SurfaceControls>>;
   /**
@@ -9540,6 +9541,7 @@ interface ProjectInfo {
   framework: Framework;
   hasTypeScript: boolean;
   hasReactCompiler: boolean;
+  hasReactCompilerLintPlugin?: boolean;
   hasTanStackQuery: boolean;
   /**
    * `true` when the project or a workspace declares a Vite-based SSR runtime

package/dist/index.js

@@ -1,5 +1,5 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="b173f528-892d-5c34-b63a-37cb26d03f0f")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="81e065f1-a43b-51c2-ac53-2f38390032ed")}catch(e){}}();
 import { r as __toESM$1, t as __commonJSMin$1 } from "./chunk-N93fKeF6.js";
 import { createRequire } from "node:module";
 import reactDoctorPlugin, { ALL_REACT_DOCTOR_RULE_KEYS, CROSS_FILE_DEPENDENCY_COLLECTORS, CROSS_FILE_RULE_IDS, FRAMEWORK_SPECIFIC_RULE_KEYS, FRAMEWORK_TOKENS, MOTION_LIBRARY_PACKAGES, REACT_COMPILER_RULES, REACT_DOCTOR_RULES, classifySecurityScanFile, collectCrossFileDependencyProbes, resetManifestCaches, shouldReadSecurityScanContent } from "oxlint-plugin-react-doctor";
@@ -33040,7 +33040,7 @@ const SOCKET_FREE_USER_AGENT = "react-doctor-supply-chain";
 const FILE_LINT_CACHE_FILENAME = "file-lint-cache.json";
 const FILE_LINT_CACHE_MAX_FILE_COUNT = 5e4;
 const SIDECAR_LINT_CACHE_FILENAME = "sidecar-lint-cache.json";
-const CORE_PACKAGE_VERSION = "0.7.9";
+const CORE_PACKAGE_VERSION = "0.8.0";
 const DEAD_CODE_CACHE_FILENAME = "dead-code-cache.json";
 const DEAD_CODE_SUMMARY_CACHE_FILENAME = "dead-code-summaries.json";
 const SUPPLY_CHAIN_PLUGIN = "socket";
@@ -33050,6 +33050,53 @@ const SUPPLY_CHAIN_OVERLAP_TIMEOUT_MS = 9e4;
 const SUPPLY_CHAIN_CACHE_TTL_MS = 864e5;
 const SUPPLY_CHAIN_CACHE_SUBDIR = "supply-chain";
 const SUPPLY_CHAIN_IGNORED_PACKAGES = new Set(["next"]);
+const lastSourceMappingUrl = (fileContent) => {
+	const lastReference = [...fileContent.matchAll(/\/\/# sourceMappingURL=(\S+)/g)].at(-1);
+	return lastReference ? lastReference[1] : null;
+};
+const mapTargetsSource = (mapContent, input) => {
+	const parsedMap = JSON.parse(mapContent);
+	if (typeof parsedMap !== "object" || parsedMap === null) return false;
+	const { file, sources } = parsedMap;
+	if (file !== input.expectedFile) return false;
+	if (!Array.isArray(sources) || sources.length !== 1 || typeof sources[0] !== "string") return false;
+	return Path.posix.normalize(Path.posix.join(input.mapDirectory, sources[0])) === input.sourcePath;
+};
+const quartetProvesEmit = (stem, sourcePath, readFileText) => {
+	try {
+		const emitBaseName = Path.posix.basename(stem);
+		const mapDirectory = Path.posix.dirname(stem);
+		return lastSourceMappingUrl(readFileText(`${stem}.js`)) === `${emitBaseName}.js.map` && lastSourceMappingUrl(readFileText(`${stem}.d.ts`)) === `${emitBaseName}.d.ts.map` && mapTargetsSource(readFileText(`${stem}.js.map`), {
+			expectedFile: `${emitBaseName}.js`,
+			mapDirectory,
+			sourcePath
+		}) && mapTargetsSource(readFileText(`${stem}.d.ts.map`), {
+			expectedFile: `${emitBaseName}.d.ts`,
+			mapDirectory,
+			sourcePath
+		});
+	} catch {
+		return false;
+	}
+};
+const collectTypeScriptEmitDuplicateJsPaths = (input) => {
+	const untracked = new Set(input.untrackedPaths);
+	const duplicateJsPaths = /* @__PURE__ */ new Set();
+	for (const jsPath of untracked) {
+		if (!jsPath.endsWith(".js")) continue;
+		const stem = jsPath.slice(0, -3);
+		if (![
+			jsPath,
+			`${stem}.js.map`,
+			`${stem}.d.ts`,
+			`${stem}.d.ts.map`
+		].every((emitPath) => untracked.has(emitPath) && !input.trackedPaths.has(emitPath))) continue;
+		const sourcePath = [`${stem}.ts`, `${stem}.tsx`].find((candidatePath) => input.trackedPaths.has(candidatePath));
+		if (!sourcePath) continue;
+		if (quartetProvesEmit(stem, sourcePath, input.readFileText)) duplicateJsPaths.add(jsPath);
+	}
+	return duplicateJsPaths;
+};
 const isIgnoredDirectoryName = (directoryName) => IGNORED_DIRECTORIES.has(directoryName) || directoryName.startsWith(".") && !SCANNED_DOT_DIRECTORIES.has(directoryName);
 const hasIgnoredPathSegment = (relativePath) => relativePath.split(/[/\\]/).slice(0, -1).some((segment) => isIgnoredDirectoryName(segment));
 const isLintableSourceFile = (filePath) => SOURCE_FILE_PATTERN.test(filePath) && !GENERATED_BUNDLE_FILE_PATTERN.test(filePath) && !GENERATED_SOURCE_DIRECTORY_PATTERN.test(filePath);
@@ -33120,20 +33167,29 @@ const collectSizedSourceFiles = (rootDirectory, relativePaths) => {
 	}
 	return entries;
 };
-const listSourceFilesViaGit = (rootDirectory) => {
+const gitLsFiles = (rootDirectory, flags) => {
 	const result = spawnSync("git", [
 		"ls-files",
 		"-z",
-		"--cached",
-		"--others",
-		"--exclude-standard"
+		...flags
 	], {
 		cwd: rootDirectory,
 		encoding: "utf-8",
 		maxBuffer: GIT_LS_FILES_MAX_BUFFER_BYTES
 	});
 	if (result.error || result.status !== 0) return null;
-	return result.stdout.split("\0").filter((filePath) => filePath.length > 0 && isLintableSourceFile(filePath) && !hasIgnoredPathSegment(filePath));
+	return result.stdout.split("\0").filter((filePath) => filePath.length > 0);
+};
+const listSourceFilesViaGit = (rootDirectory) => {
+	const trackedPaths = gitLsFiles(rootDirectory, ["--cached"]);
+	const untrackedPaths = gitLsFiles(rootDirectory, ["--others", "--exclude-standard"]);
+	if (trackedPaths === null || untrackedPaths === null) return null;
+	const emitDuplicateJsPaths = collectTypeScriptEmitDuplicateJsPaths({
+		trackedPaths: new Set(trackedPaths),
+		untrackedPaths,
+		readFileText: (relativePath) => NFS.readFileSync(Path.resolve(rootDirectory, relativePath), "utf-8")
+	});
+	return [...trackedPaths, ...untrackedPaths].filter((filePath) => isLintableSourceFile(filePath) && !hasIgnoredPathSegment(filePath) && !emitDuplicateJsPaths.has(filePath));
 };
 const listSourceFilesViaFilesystem = (rootDirectory) => {
 	const filePaths = [];
@@ -33336,11 +33392,8 @@ const frameworkMergeRank = (framework) => {
 	if (framework === "unknown") return 3;
 	return MOBILE_FRAMEWORKS.has(framework) ? 2 : 1;
 };
-const REACT_COMPILER_PACKAGES = new Set([
-	"babel-plugin-react-compiler",
-	"react-compiler-runtime",
-	"eslint-plugin-react-compiler"
-]);
+const REACT_COMPILER_TRANSFORM_PACKAGES = new Set(["babel-plugin-react-compiler", "react-compiler-runtime"]);
+const REACT_COMPILER_LINT_PACKAGES = new Set(["eslint-plugin-react-compiler"]);
 const NEXT_CONFIG_FILENAMES = [
 	"next.config.js",
 	"next.config.mjs",
@@ -33370,16 +33423,29 @@ const EXPO_APP_CONFIG_FILENAMES = [
 	"app.config.js",
 	"app.config.ts"
 ];
-const REACT_COMPILER_PACKAGE_REFERENCE_PATTERN = /babel-plugin-react-compiler|react-compiler-runtime|eslint-plugin-react-compiler|["']react-compiler["']/;
+const REACT_COMPILER_PACKAGE_REFERENCE_PATTERN = /babel-plugin-react-compiler|react-compiler-runtime|["']react-compiler["']/;
 const REACT_COMPILER_ENABLED_FLAG_PATTERN = /["']?reactCompiler["']?\s*:\s*(?:true\b|\{)/;
 const STATIC_EXPORT_OUTPUT_PATTERN = /(?:^|[^.\w])["']?output["']?\s*:\s*["']export["']/m;
-const hasCompilerPackage = (packageJson) => {
+const hasCompilerPackage = (packageJson, compilerPackages) => {
 	const allDependencies = {
 		...packageJson.peerDependencies,
 		...packageJson.dependencies,
 		...packageJson.devDependencies
 	};
-	return Object.keys(allDependencies).some((packageName) => REACT_COMPILER_PACKAGES.has(packageName));
+	return Object.keys(allDependencies).some((packageName) => compilerPackages.has(packageName));
+};
+const hasCompilerPackageInAncestors = (directory, compilerPackages) => {
+	if (isProjectBoundary(directory)) return false;
+	let ancestorDirectory = Path.dirname(directory);
+	while (ancestorDirectory !== Path.dirname(ancestorDirectory)) {
+		const ancestorPackagePath = Path.join(ancestorDirectory, "package.json");
+		if (isFile(ancestorPackagePath)) {
+			if (hasCompilerPackage(readPackageJson(ancestorPackagePath), compilerPackages)) return true;
+		}
+		if (isProjectBoundary(ancestorDirectory)) return false;
+		ancestorDirectory = Path.dirname(ancestorDirectory);
+	}
+	return false;
 };
 const hasCompilerInConfigFile = (filePath) => {
 	if (!isFile(filePath)) return false;
@@ -33388,23 +33454,14 @@ const hasCompilerInConfigFile = (filePath) => {
 };
 const hasCompilerInConfigFiles = (directory, filenames) => filenames.some((filename) => hasCompilerInConfigFile(Path.join(directory, filename)));
 const detectReactCompiler = (directory, packageJson) => {
-	if (hasCompilerPackage(packageJson)) return true;
+	if (hasCompilerPackage(packageJson, REACT_COMPILER_TRANSFORM_PACKAGES)) return true;
 	if (hasCompilerInConfigFiles(directory, NEXT_CONFIG_FILENAMES)) return true;
 	if (hasCompilerInConfigFiles(directory, BABEL_CONFIG_FILENAMES)) return true;
 	if (hasCompilerInConfigFiles(directory, VITE_CONFIG_FILENAMES)) return true;
 	if (hasCompilerInConfigFiles(directory, EXPO_APP_CONFIG_FILENAMES)) return true;
-	if (isProjectBoundary(directory)) return false;
-	let ancestorDirectory = Path.dirname(directory);
-	while (ancestorDirectory !== Path.dirname(ancestorDirectory)) {
-		const ancestorPackagePath = Path.join(ancestorDirectory, "package.json");
-		if (isFile(ancestorPackagePath)) {
-			if (hasCompilerPackage(readPackageJson(ancestorPackagePath))) return true;
-		}
-		if (isProjectBoundary(ancestorDirectory)) return false;
-		ancestorDirectory = Path.dirname(ancestorDirectory);
-	}
-	return false;
+	return hasCompilerPackageInAncestors(directory, REACT_COMPILER_TRANSFORM_PACKAGES);
 };
+const detectReactCompilerLintPlugin = (directory, packageJson) => hasCompilerPackage(packageJson, REACT_COMPILER_LINT_PACKAGES) || hasCompilerPackageInAncestors(directory, REACT_COMPILER_LINT_PACKAGES);
 const detectNextjsStaticExport = (directory) => NEXT_CONFIG_FILENAMES.some((filename) => {
 	const filePath = Path.join(directory, filename);
 	return isFile(filePath) && STATIC_EXPORT_OUTPUT_PATTERN.test(NFS.readFileSync(filePath, "utf-8"));
@@ -34371,6 +34428,7 @@ const discoverProjectWithoutPackageJson = (directory) => {
 		framework: "unknown",
 		hasTypeScript: hasOwnTsConfig,
 		hasReactCompiler: false,
+		hasReactCompilerLintPlugin: false,
 		hasTanStackQuery: false,
 		hasSsrDependency: false,
 		preactVersion: null,
@@ -34491,6 +34549,7 @@ const discoverProject = (directory) => {
 		framework,
 		hasTypeScript,
 		hasReactCompiler: detectReactCompiler(directory, packageJson),
+		hasReactCompilerLintPlugin: detectReactCompilerLintPlugin(directory, packageJson),
 		hasTanStackQuery: hasTanStackQuery(packageJson),
 		hasSsrDependency: workspaceFacts.hasSsrDependency,
 		preactVersion,
@@ -35969,8 +36028,10 @@ const isDiagnosticSurface = (value) => typeof value === "string" && DIAGNOSTIC_S
 * to the local CLI so developers see them while editing, but they're
 * removed from the PR comment surface, the score, and the CI gate so
 * they can't bury real React findings or fail a build over a Tailwind
-* shorthand. Override per-surface via `config.surfaces.<surface>` to
-* promote individual rules back in by tag, category, or rule id.
+* shorthand. Diagnostics from test and story files likewise remain in
+* raw output while staying out of the production-health score and CI
+* gate. Override per-surface via `config.surfaces.<surface>` to promote
+* individual rules back in by tag, category, or rule id.
 */
 const DEFAULT_SURFACE_EXCLUDED_TAGS = {
 	cli: [],
@@ -38757,6 +38818,7 @@ const isDiagnosticOnSurface = (diagnostic, surface, config) => {
 	if (resolved.includeRuleKeys.has(ruleKey)) return true;
 	if (resolved.includeCategories.has(category)) return true;
 	if (intersects(tags, resolved.includeTags)) return true;
+	if (diagnostic.fileContext !== void 0 && (surface === "score" || surface === "ciFailure")) return false;
 	if (resolved.excludeRuleKeys.has(ruleKey)) return false;
 	if (resolved.excludeCategories.has(category)) return false;
 	if (intersects(tags, resolved.excludeTags)) return false;
@@ -39181,6 +39243,7 @@ var Git = class Git extends Service()("react-doctor/Git") {
 			}
 			const diff = yield* runGit(input.directory, [
 				"diff",
+				"--no-ext-diff",
 				"-z",
 				"--name-only",
 				"--diff-filter=ACMR",
@@ -39227,6 +39290,7 @@ var Git = class Git extends Service()("react-doctor/Git") {
 				if (resolvedCurrentBranch !== null && resolvedCurrentBranch === baseBranch) {
 					const uncommitted = yield* runGit(directory, [
 						"diff",
+						"--no-ext-diff",
 						"-z",
 						"--name-only",
 						"--diff-filter=ACMR",
@@ -39253,6 +39317,7 @@ var Git = class Git extends Service()("react-doctor/Git") {
 				if (mergeBaseRef === null) return null;
 				const diff = yield* runGit(directory, [
 					"diff",
+					"--no-ext-diff",
 					"-z",
 					"--name-only",
 					"--diff-filter=ACMR",
@@ -39270,6 +39335,7 @@ var Git = class Git extends Service()("react-doctor/Git") {
 			}).pipe(withSpan("Git.diffSelection")),
 			stagedFilePaths: (directory) => runGit(directory, [
 				"diff",
+				"--no-ext-diff",
 				"--cached",
 				"-z",
 				"--name-only",
@@ -39315,6 +39381,7 @@ var Git = class Git extends Service()("react-doctor/Git") {
 				if (baseRef !== void 0 && !isSafeGitRevision(baseRef)) return null;
 				const result = yield* runGit(directory, [
 					"diff",
+					"--no-ext-diff",
 					"--unified=0",
 					"--diff-filter=ACMR",
 					"--relative",
@@ -39719,7 +39786,7 @@ const buildUserPluginRules = (userPlugin, severityControls) => {
 	return enabled;
 };
 const createOxlintConfig = ({ pluginPath, project, customRulesOnly = false, extendsPaths = [], ignoredTags = /* @__PURE__ */ new Set(), serverAuthFunctionNames, severityControls, userPlugins = [], disableReactHooksJsPlugin = false, ruleSelection, sidecarRuleIdFilter }) => {
-	const reactHooksJsPlugin = disableReactHooksJsPlugin || ruleSelection === "sidecar" ? null : resolveReactHooksJsPlugin(project.hasReactCompiler, customRulesOnly);
+	const reactHooksJsPlugin = disableReactHooksJsPlugin || ruleSelection === "sidecar" ? null : resolveReactHooksJsPlugin(project.hasReactCompiler || project.hasReactCompilerLintPlugin === true, customRulesOnly);
 	const reactCompilerRules = reactHooksJsPlugin ? applyRuleSeverityControls(filterRulesToAvailable(REACT_COMPILER_RULES, "react-hooks-js", reactHooksJsPlugin.availableRuleNames), severityControls) : {};
 	const jsPlugins = [];
 	if (reactHooksJsPlugin) jsPlugins.push(reactHooksJsPlugin.entry);
@@ -40682,6 +40749,8 @@ const LEADING_SEVERITY_LABEL_PATTERN = /^(?:Error|Warning):\s*/;
 const TRAILING_PERIOD_PATTERN = /\.$/;
 const REACT_COMPILER_TITLE = "React Compiler can't optimize this";
 const REACT_COMPILER_TODO_TITLE = "React Compiler doesn't support this syntax";
+const REACT_ERROR_BOUNDARY_TITLE = "JSX render errors need an Error Boundary";
+const REACT_ERROR_BOUNDARY_MESSAGE = "This try/catch cannot catch errors thrown while the JSX child renders. Use an Error Boundary instead.";
 const REACT_COMPILER_IMPACT = "This component misses React Compiler's automatic memoization & re-renders more than it should";
 const REACT_COMPILER_ACTION = "Rewrite the flagged code so the compiler can optimize it.";
 const REACT_COMPILER_INCOMPATIBLE_LIBRARY_ACTION = "It's how the library works, not a bug in your code. Memoize values you pass from it into other memoized components, or suppress it with `// react-doctor-disable-next-line react-hooks-js/incompatible-library`.";
@@ -40725,6 +40794,7 @@ const getRuleCategory = (ruleName) => reactDoctorPlugin.rules[ruleName]?.categor
 const getRuleTitle = (ruleName) => reactDoctorPlugin.rules[ruleName]?.title;
 const resolveDiagnosticTitle = (plugin, rule) => {
 	if (plugin !== "react-hooks-js") return getRuleTitle(rule);
+	if (rule === "error-boundaries") return REACT_ERROR_BOUNDARY_TITLE;
 	return rule === "todo" ? REACT_COMPILER_TODO_TITLE : REACT_COMPILER_TITLE;
 };
 const cleanDiagnosticMessage = (message, help, plugin, rule, project) => {
@@ -40743,6 +40813,10 @@ const resolveCleanedDiagnostic = (message, help, plugin, rule, project) => {
 		};
 		const [reasonSummary = "", ...reasonDetailLines] = bailoutReason.split("\n");
 		const reasonDetail = reasonDetailLines.join("\n").trim();
+		if (rule === "error-boundaries") return {
+			message: REACT_ERROR_BOUNDARY_MESSAGE,
+			help: reasonDetail || help
+		};
 		return {
 			message: buildReactCompilerMessage(reasonSummary.trim(), rule === "incompatible-library" ? REACT_COMPILER_INCOMPATIBLE_LIBRARY_ACTION : REACT_COMPILER_ACTION),
 			help: appendReanimatedSharedValueHint(reasonDetail || help, rule, project)
@@ -40764,7 +40838,10 @@ const parseRuleCode = (code) => {
 		rule: match[2]
 	};
 };
-const resolveDiagnosticCategory = (plugin, rule) => getRuleCategory(rule) ?? lookupOwnString(PLUGIN_CATEGORY_MAP, plugin) ?? "Bugs";
+const resolveDiagnosticCategory = (plugin, rule) => {
+	if (plugin === "react-hooks-js" && rule === "error-boundaries") return "Bugs";
+	return getRuleCategory(rule) ?? lookupOwnString(PLUGIN_CATEGORY_MAP, plugin) ?? "Bugs";
+};
 const resolveMatchByOccurrence = (rule, category) => OCCURRENCE_MATCHED_CATEGORIES.has(category) || Boolean(reactDoctorPlugin.rules[rule]?.matchByOccurrence);
 /**
 * Maps oxlint's non-primary labels (`labels[1..]`) into related source
@@ -41577,7 +41654,7 @@ const runOxlint = async (options) => {
 				};
 			}
 		};
-		if (perFileLintCacheEnabled && !project.hasReactCompiler && extendsPaths.length === 0 && userPlugins.length === 0) {
+		if (perFileLintCacheEnabled && !project.hasReactCompiler && project.hasReactCompilerLintPlugin !== true && extendsPaths.length === 0 && userPlugins.length === 0) {
 			const rulesetHash = computeRulesetHash({
 				config: buildConfig({
 					extendsPaths: [],
@@ -42019,6 +42096,14 @@ var Reporter = class Reporter extends Service()("react-doctor/Reporter") {
 		});
 	}));
 };
+const HOME_DIRECTORY = os.homedir();
+const USER_HOME_PATTERNS = [/[A-Za-z]:[\\/]Users[\\/][^\\/]+/gi, /(?:\/Users\/|\/home\/)[^/\\]+/gi];
+const scrubSensitivePaths = (text) => {
+	let scrubbed = text;
+	if (HOME_DIRECTORY.length > 1) scrubbed = scrubbed.split(HOME_DIRECTORY).join("~");
+	for (const pattern of USER_HOME_PATTERNS) scrubbed = scrubbed.replace(pattern, "~");
+	return scrubbed;
+};
 const ScoreApiResponseSchema = Struct({
 	score: Number$1,
 	label: String$1,
@@ -42033,7 +42118,10 @@ const ScoreApiResponseSchema = Struct({
 	})))
 });
 const parseScoreResult = (value) => getOrNull(decodeUnknownOption(ScoreApiResponseSchema)(value));
-const stripLocalFileFields = (diagnostics) => diagnostics.map(({ filePath: _filePath, fileContext: _fileContext, fixGroupId: _fixGroupId, ...rest }) => rest);
+const sanitizeScoreDiagnostics = (diagnostics) => diagnostics.map(({ filePath, fileContext: _fileContext, fixGroupId: _fixGroupId, ...rest }) => ({
+	...rest,
+	filePath: redactSensitiveText(scrubSensitivePaths(filePath))
+}));
 const isAbortError = (error) => error instanceof Error && (error.name === "AbortError" || error.name === "TimeoutError");
 const describeFailure = (error) => {
 	if (isAbortError(error)) return `timed out after ${FETCH_TIMEOUT_MS / 1e3}s`;
@@ -42046,7 +42134,7 @@ const calculateScore = async (diagnostics, options = {}) => {
 	const requestUrl = options.isCi ? `${SCORE_API_URL}?ci=1` : SCORE_API_URL;
 	try {
 		const compressedBody = gzipSync(JSON.stringify({
-			diagnostics: stripLocalFileFields(diagnostics),
+			diagnostics: sanitizeScoreDiagnostics(diagnostics),
 			...options.metadata?.repo ? { repo: options.metadata.repo } : {},
 			...options.metadata?.sha ? { sha: options.metadata.sha } : {},
 			...options.metadata?.framework ? { framework: options.metadata.framework } : {},
@@ -43639,4 +43727,4 @@ const toJsonReport = (result, options) => buildJsonReport({
 export { AmbiguousProjectError, NoReactDependencyError, NotADirectoryError, PackageJsonNotFoundError, ProjectNotFoundError, ReactDoctorError, buildJsonReport, buildJsonReportError, clearCaches, defineConfig, diagnose, filterSourceFiles, getDiffInfo, hasReactRuntime, isProjectDiscoveryError, isReactDoctorError, summarizeDiagnostics, toJsonReport };
 
 //# sourceMappingURL=index.js.map
-//# debugId=b173f528-892d-5c34-b63a-37cb26d03f0f
+//# debugId=81e065f1-a43b-51c2-ac53-2f38390032ed

package/dist/lsp.js

@@ -33092,7 +33092,7 @@ const SOCKET_FREE_USER_AGENT = "react-doctor-supply-chain";
 const FILE_LINT_CACHE_FILENAME = "file-lint-cache.json";
 const FILE_LINT_CACHE_MAX_FILE_COUNT = 5e4;
 const SIDECAR_LINT_CACHE_FILENAME = "sidecar-lint-cache.json";
-const CORE_PACKAGE_VERSION = "0.7.9";
+const CORE_PACKAGE_VERSION = "0.8.0";
 const DEAD_CODE_CACHE_FILENAME = "dead-code-cache.json";
 const DEAD_CODE_SUMMARY_CACHE_FILENAME = "dead-code-summaries.json";
 const SUPPLY_CHAIN_PLUGIN = "socket";
@@ -33102,6 +33102,53 @@ const SUPPLY_CHAIN_OVERLAP_TIMEOUT_MS = 9e4;
 const SUPPLY_CHAIN_CACHE_TTL_MS = 864e5;
 const SUPPLY_CHAIN_CACHE_SUBDIR = "supply-chain";
 const SUPPLY_CHAIN_IGNORED_PACKAGES = new Set(["next"]);
+const lastSourceMappingUrl = (fileContent) => {
+	const lastReference = [...fileContent.matchAll(/\/\/# sourceMappingURL=(\S+)/g)].at(-1);
+	return lastReference ? lastReference[1] : null;
+};
+const mapTargetsSource = (mapContent, input) => {
+	const parsedMap = JSON.parse(mapContent);
+	if (typeof parsedMap !== "object" || parsedMap === null) return false;
+	const { file, sources } = parsedMap;
+	if (file !== input.expectedFile) return false;
+	if (!Array.isArray(sources) || sources.length !== 1 || typeof sources[0] !== "string") return false;
+	return Path.posix.normalize(Path.posix.join(input.mapDirectory, sources[0])) === input.sourcePath;
+};
+const quartetProvesEmit = (stem, sourcePath, readFileText) => {
+	try {
+		const emitBaseName = Path.posix.basename(stem);
+		const mapDirectory = Path.posix.dirname(stem);
+		return lastSourceMappingUrl(readFileText(`${stem}.js`)) === `${emitBaseName}.js.map` && lastSourceMappingUrl(readFileText(`${stem}.d.ts`)) === `${emitBaseName}.d.ts.map` && mapTargetsSource(readFileText(`${stem}.js.map`), {
+			expectedFile: `${emitBaseName}.js`,
+			mapDirectory,
+			sourcePath
+		}) && mapTargetsSource(readFileText(`${stem}.d.ts.map`), {
+			expectedFile: `${emitBaseName}.d.ts`,
+			mapDirectory,
+			sourcePath
+		});
+	} catch {
+		return false;
+	}
+};
+const collectTypeScriptEmitDuplicateJsPaths = (input) => {
+	const untracked = new Set(input.untrackedPaths);
+	const duplicateJsPaths = /* @__PURE__ */ new Set();
+	for (const jsPath of untracked) {
+		if (!jsPath.endsWith(".js")) continue;
+		const stem = jsPath.slice(0, -3);
+		if (![
+			jsPath,
+			`${stem}.js.map`,
+			`${stem}.d.ts`,
+			`${stem}.d.ts.map`
+		].every((emitPath) => untracked.has(emitPath) && !input.trackedPaths.has(emitPath))) continue;
+		const sourcePath = [`${stem}.ts`, `${stem}.tsx`].find((candidatePath) => input.trackedPaths.has(candidatePath));
+		if (!sourcePath) continue;
+		if (quartetProvesEmit(stem, sourcePath, input.readFileText)) duplicateJsPaths.add(jsPath);
+	}
+	return duplicateJsPaths;
+};
 const isIgnoredDirectoryName = (directoryName) => IGNORED_DIRECTORIES.has(directoryName) || directoryName.startsWith(".") && !SCANNED_DOT_DIRECTORIES.has(directoryName);
 const hasIgnoredPathSegment = (relativePath) => relativePath.split(/[/\\]/).slice(0, -1).some((segment) => isIgnoredDirectoryName(segment));
 const isLintableSourceFile = (filePath) => SOURCE_FILE_PATTERN.test(filePath) && !GENERATED_BUNDLE_FILE_PATTERN.test(filePath) && !GENERATED_SOURCE_DIRECTORY_PATTERN.test(filePath);
@@ -33172,20 +33219,29 @@ const collectSizedSourceFiles = (rootDirectory, relativePaths) => {
 	}
 	return entries;
 };
-const listSourceFilesViaGit = (rootDirectory) => {
+const gitLsFiles = (rootDirectory, flags) => {
 	const result = spawnSync("git", [
 		"ls-files",
 		"-z",
-		"--cached",
-		"--others",
-		"--exclude-standard"
+		...flags
 	], {
 		cwd: rootDirectory,
 		encoding: "utf-8",
 		maxBuffer: GIT_LS_FILES_MAX_BUFFER_BYTES
 	});
 	if (result.error || result.status !== 0) return null;
-	return result.stdout.split("\0").filter((filePath) => filePath.length > 0 && isLintableSourceFile(filePath) && !hasIgnoredPathSegment(filePath));
+	return result.stdout.split("\0").filter((filePath) => filePath.length > 0);
+};
+const listSourceFilesViaGit = (rootDirectory) => {
+	const trackedPaths = gitLsFiles(rootDirectory, ["--cached"]);
+	const untrackedPaths = gitLsFiles(rootDirectory, ["--others", "--exclude-standard"]);
+	if (trackedPaths === null || untrackedPaths === null) return null;
+	const emitDuplicateJsPaths = collectTypeScriptEmitDuplicateJsPaths({
+		trackedPaths: new Set(trackedPaths),
+		untrackedPaths,
+		readFileText: (relativePath) => NFS.readFileSync(Path.resolve(rootDirectory, relativePath), "utf-8")
+	});
+	return [...trackedPaths, ...untrackedPaths].filter((filePath) => isLintableSourceFile(filePath) && !hasIgnoredPathSegment(filePath) && !emitDuplicateJsPaths.has(filePath));
 };
 const listSourceFilesViaFilesystem = (rootDirectory) => {
 	const filePaths = [];
@@ -33388,11 +33444,8 @@ const frameworkMergeRank = (framework) => {
 	if (framework === "unknown") return 3;
 	return MOBILE_FRAMEWORKS.has(framework) ? 2 : 1;
 };
-const REACT_COMPILER_PACKAGES = new Set([
-	"babel-plugin-react-compiler",
-	"react-compiler-runtime",
-	"eslint-plugin-react-compiler"
-]);
+const REACT_COMPILER_TRANSFORM_PACKAGES = new Set(["babel-plugin-react-compiler", "react-compiler-runtime"]);
+const REACT_COMPILER_LINT_PACKAGES = new Set(["eslint-plugin-react-compiler"]);
 const NEXT_CONFIG_FILENAMES = [
 	"next.config.js",
 	"next.config.mjs",
@@ -33422,16 +33475,29 @@ const EXPO_APP_CONFIG_FILENAMES = [
 	"app.config.js",
 	"app.config.ts"
 ];
-const REACT_COMPILER_PACKAGE_REFERENCE_PATTERN = /babel-plugin-react-compiler|react-compiler-runtime|eslint-plugin-react-compiler|["']react-compiler["']/;
+const REACT_COMPILER_PACKAGE_REFERENCE_PATTERN = /babel-plugin-react-compiler|react-compiler-runtime|["']react-compiler["']/;
 const REACT_COMPILER_ENABLED_FLAG_PATTERN = /["']?reactCompiler["']?\s*:\s*(?:true\b|\{)/;
 const STATIC_EXPORT_OUTPUT_PATTERN = /(?:^|[^.\w])["']?output["']?\s*:\s*["']export["']/m;
-const hasCompilerPackage = (packageJson) => {
+const hasCompilerPackage = (packageJson, compilerPackages) => {
 	const allDependencies = {
 		...packageJson.peerDependencies,
 		...packageJson.dependencies,
 		...packageJson.devDependencies
 	};
-	return Object.keys(allDependencies).some((packageName) => REACT_COMPILER_PACKAGES.has(packageName));
+	return Object.keys(allDependencies).some((packageName) => compilerPackages.has(packageName));
+};
+const hasCompilerPackageInAncestors = (directory, compilerPackages) => {
+	if (isProjectBoundary(directory)) return false;
+	let ancestorDirectory = Path.dirname(directory);
+	while (ancestorDirectory !== Path.dirname(ancestorDirectory)) {
+		const ancestorPackagePath = Path.join(ancestorDirectory, "package.json");
+		if (isFile(ancestorPackagePath)) {
+			if (hasCompilerPackage(readPackageJson(ancestorPackagePath), compilerPackages)) return true;
+		}
+		if (isProjectBoundary(ancestorDirectory)) return false;
+		ancestorDirectory = Path.dirname(ancestorDirectory);
+	}
+	return false;
 };
 const hasCompilerInConfigFile = (filePath) => {
 	if (!isFile(filePath)) return false;
@@ -33440,23 +33506,14 @@ const hasCompilerInConfigFile = (filePath) => {
 };
 const hasCompilerInConfigFiles = (directory, filenames) => filenames.some((filename) => hasCompilerInConfigFile(Path.join(directory, filename)));
 const detectReactCompiler = (directory, packageJson) => {
-	if (hasCompilerPackage(packageJson)) return true;
+	if (hasCompilerPackage(packageJson, REACT_COMPILER_TRANSFORM_PACKAGES)) return true;
 	if (hasCompilerInConfigFiles(directory, NEXT_CONFIG_FILENAMES)) return true;
 	if (hasCompilerInConfigFiles(directory, BABEL_CONFIG_FILENAMES)) return true;
 	if (hasCompilerInConfigFiles(directory, VITE_CONFIG_FILENAMES)) return true;
 	if (hasCompilerInConfigFiles(directory, EXPO_APP_CONFIG_FILENAMES)) return true;
-	if (isProjectBoundary(directory)) return false;
-	let ancestorDirectory = Path.dirname(directory);
-	while (ancestorDirectory !== Path.dirname(ancestorDirectory)) {
-		const ancestorPackagePath = Path.join(ancestorDirectory, "package.json");
-		if (isFile(ancestorPackagePath)) {
-			if (hasCompilerPackage(readPackageJson(ancestorPackagePath))) return true;
-		}
-		if (isProjectBoundary(ancestorDirectory)) return false;
-		ancestorDirectory = Path.dirname(ancestorDirectory);
-	}
-	return false;
+	return hasCompilerPackageInAncestors(directory, REACT_COMPILER_TRANSFORM_PACKAGES);
 };
+const detectReactCompilerLintPlugin = (directory, packageJson) => hasCompilerPackage(packageJson, REACT_COMPILER_LINT_PACKAGES) || hasCompilerPackageInAncestors(directory, REACT_COMPILER_LINT_PACKAGES);
 const detectNextjsStaticExport = (directory) => NEXT_CONFIG_FILENAMES.some((filename) => {
 	const filePath = Path.join(directory, filename);
 	return isFile(filePath) && STATIC_EXPORT_OUTPUT_PATTERN.test(NFS.readFileSync(filePath, "utf-8"));
@@ -34423,6 +34480,7 @@ const discoverProjectWithoutPackageJson = (directory) => {
 		framework: "unknown",
 		hasTypeScript: hasOwnTsConfig,
 		hasReactCompiler: false,
+		hasReactCompilerLintPlugin: false,
 		hasTanStackQuery: false,
 		hasSsrDependency: false,
 		preactVersion: null,
@@ -34543,6 +34601,7 @@ const discoverProject = (directory) => {
 		framework,
 		hasTypeScript,
 		hasReactCompiler: detectReactCompiler(directory, packageJson),
+		hasReactCompilerLintPlugin: detectReactCompilerLintPlugin(directory, packageJson),
 		hasTanStackQuery: hasTanStackQuery(packageJson),
 		hasSsrDependency: workspaceFacts.hasSsrDependency,
 		preactVersion,
@@ -35995,8 +36054,10 @@ const isDiagnosticSurface = (value) => typeof value === "string" && DIAGNOSTIC_S
 * to the local CLI so developers see them while editing, but they're
 * removed from the PR comment surface, the score, and the CI gate so
 * they can't bury real React findings or fail a build over a Tailwind
-* shorthand. Override per-surface via `config.surfaces.<surface>` to
-* promote individual rules back in by tag, category, or rule id.
+* shorthand. Diagnostics from test and story files likewise remain in
+* raw output while staying out of the production-health score and CI
+* gate. Override per-surface via `config.surfaces.<surface>` to promote
+* individual rules back in by tag, category, or rule id.
 */
 const DEFAULT_SURFACE_EXCLUDED_TAGS = {
 	cli: [],
@@ -38735,6 +38796,7 @@ const isDiagnosticOnSurface = (diagnostic, surface, config) => {
 	if (resolved.includeRuleKeys.has(ruleKey)) return true;
 	if (resolved.includeCategories.has(category)) return true;
 	if (intersects(tags, resolved.includeTags)) return true;
+	if (diagnostic.fileContext !== void 0 && (surface === "score" || surface === "ciFailure")) return false;
 	if (resolved.excludeRuleKeys.has(ruleKey)) return false;
 	if (resolved.excludeCategories.has(category)) return false;
 	if (intersects(tags, resolved.excludeTags)) return false;
@@ -39159,6 +39221,7 @@ var Git = class Git extends Service()("react-doctor/Git") {
 			}
 			const diff = yield* runGit(input.directory, [
 				"diff",
+				"--no-ext-diff",
 				"-z",
 				"--name-only",
 				"--diff-filter=ACMR",
@@ -39205,6 +39268,7 @@ var Git = class Git extends Service()("react-doctor/Git") {
 				if (resolvedCurrentBranch !== null && resolvedCurrentBranch === baseBranch) {
 					const uncommitted = yield* runGit(directory, [
 						"diff",
+						"--no-ext-diff",
 						"-z",
 						"--name-only",
 						"--diff-filter=ACMR",
@@ -39231,6 +39295,7 @@ var Git = class Git extends Service()("react-doctor/Git") {
 				if (mergeBaseRef === null) return null;
 				const diff = yield* runGit(directory, [
 					"diff",
+					"--no-ext-diff",
 					"-z",
 					"--name-only",
 					"--diff-filter=ACMR",
@@ -39248,6 +39313,7 @@ var Git = class Git extends Service()("react-doctor/Git") {
 			}).pipe(withSpan("Git.diffSelection")),
 			stagedFilePaths: (directory) => runGit(directory, [
 				"diff",
+				"--no-ext-diff",
 				"--cached",
 				"-z",
 				"--name-only",
@@ -39293,6 +39359,7 @@ var Git = class Git extends Service()("react-doctor/Git") {
 				if (baseRef !== void 0 && !isSafeGitRevision(baseRef)) return null;
 				const result = yield* runGit(directory, [
 					"diff",
+					"--no-ext-diff",
 					"--unified=0",
 					"--diff-filter=ACMR",
 					"--relative",
@@ -39697,7 +39764,7 @@ const buildUserPluginRules = (userPlugin, severityControls) => {
 	return enabled;
 };
 const createOxlintConfig = ({ pluginPath, project, customRulesOnly = false, extendsPaths = [], ignoredTags = /* @__PURE__ */ new Set(), serverAuthFunctionNames, severityControls, userPlugins = [], disableReactHooksJsPlugin = false, ruleSelection, sidecarRuleIdFilter }) => {
-	const reactHooksJsPlugin = disableReactHooksJsPlugin || ruleSelection === "sidecar" ? null : resolveReactHooksJsPlugin(project.hasReactCompiler, customRulesOnly);
+	const reactHooksJsPlugin = disableReactHooksJsPlugin || ruleSelection === "sidecar" ? null : resolveReactHooksJsPlugin(project.hasReactCompiler || project.hasReactCompilerLintPlugin === true, customRulesOnly);
 	const reactCompilerRules = reactHooksJsPlugin ? applyRuleSeverityControls(filterRulesToAvailable(REACT_COMPILER_RULES, "react-hooks-js", reactHooksJsPlugin.availableRuleNames), severityControls) : {};
 	const jsPlugins = [];
 	if (reactHooksJsPlugin) jsPlugins.push(reactHooksJsPlugin.entry);
@@ -40660,6 +40727,8 @@ const LEADING_SEVERITY_LABEL_PATTERN = /^(?:Error|Warning):\s*/;
 const TRAILING_PERIOD_PATTERN = /\.$/;
 const REACT_COMPILER_TITLE = "React Compiler can't optimize this";
 const REACT_COMPILER_TODO_TITLE = "React Compiler doesn't support this syntax";
+const REACT_ERROR_BOUNDARY_TITLE = "JSX render errors need an Error Boundary";
+const REACT_ERROR_BOUNDARY_MESSAGE = "This try/catch cannot catch errors thrown while the JSX child renders. Use an Error Boundary instead.";
 const REACT_COMPILER_IMPACT = "This component misses React Compiler's automatic memoization & re-renders more than it should";
 const REACT_COMPILER_ACTION = "Rewrite the flagged code so the compiler can optimize it.";
 const REACT_COMPILER_INCOMPATIBLE_LIBRARY_ACTION = "It's how the library works, not a bug in your code. Memoize values you pass from it into other memoized components, or suppress it with `// react-doctor-disable-next-line react-hooks-js/incompatible-library`.";
@@ -40703,6 +40772,7 @@ const getRuleCategory = (ruleName) => reactDoctorPlugin.rules[ruleName]?.categor
 const getRuleTitle = (ruleName) => reactDoctorPlugin.rules[ruleName]?.title;
 const resolveDiagnosticTitle = (plugin, rule) => {
 	if (plugin !== "react-hooks-js") return getRuleTitle(rule);
+	if (rule === "error-boundaries") return REACT_ERROR_BOUNDARY_TITLE;
 	return rule === "todo" ? REACT_COMPILER_TODO_TITLE : REACT_COMPILER_TITLE;
 };
 const cleanDiagnosticMessage = (message, help, plugin, rule, project) => {
@@ -40721,6 +40791,10 @@ const resolveCleanedDiagnostic = (message, help, plugin, rule, project) => {
 		};
 		const [reasonSummary = "", ...reasonDetailLines] = bailoutReason.split("\n");
 		const reasonDetail = reasonDetailLines.join("\n").trim();
+		if (rule === "error-boundaries") return {
+			message: REACT_ERROR_BOUNDARY_MESSAGE,
+			help: reasonDetail || help
+		};
 		return {
 			message: buildReactCompilerMessage(reasonSummary.trim(), rule === "incompatible-library" ? REACT_COMPILER_INCOMPATIBLE_LIBRARY_ACTION : REACT_COMPILER_ACTION),
 			help: appendReanimatedSharedValueHint(reasonDetail || help, rule, project)
@@ -40742,7 +40816,10 @@ const parseRuleCode = (code) => {
 		rule: match[2]
 	};
 };
-const resolveDiagnosticCategory = (plugin, rule) => getRuleCategory(rule) ?? lookupOwnString(PLUGIN_CATEGORY_MAP, plugin) ?? "Bugs";
+const resolveDiagnosticCategory = (plugin, rule) => {
+	if (plugin === "react-hooks-js" && rule === "error-boundaries") return "Bugs";
+	return getRuleCategory(rule) ?? lookupOwnString(PLUGIN_CATEGORY_MAP, plugin) ?? "Bugs";
+};
 const resolveMatchByOccurrence = (rule, category) => OCCURRENCE_MATCHED_CATEGORIES.has(category) || Boolean(reactDoctorPlugin.rules[rule]?.matchByOccurrence);
 /**
 * Maps oxlint's non-primary labels (`labels[1..]`) into related source
@@ -41555,7 +41632,7 @@ const runOxlint = async (options) => {
 				};
 			}
 		};
-		if (perFileLintCacheEnabled && !project.hasReactCompiler && extendsPaths.length === 0 && userPlugins.length === 0) {
+		if (perFileLintCacheEnabled && !project.hasReactCompiler && project.hasReactCompilerLintPlugin !== true && extendsPaths.length === 0 && userPlugins.length === 0) {
 			const rulesetHash = computeRulesetHash({
 				config: buildConfig({
 					extendsPaths: [],
@@ -41997,6 +42074,14 @@ var Reporter = class Reporter extends Service()("react-doctor/Reporter") {
 		});
 	}));
 };
+const HOME_DIRECTORY = os.homedir();
+const USER_HOME_PATTERNS = [/[A-Za-z]:[\\/]Users[\\/][^\\/]+/gi, /(?:\/Users\/|\/home\/)[^/\\]+/gi];
+const scrubSensitivePaths = (text) => {
+	let scrubbed = text;
+	if (HOME_DIRECTORY.length > 1) scrubbed = scrubbed.split(HOME_DIRECTORY).join("~");
+	for (const pattern of USER_HOME_PATTERNS) scrubbed = scrubbed.replace(pattern, "~");
+	return scrubbed;
+};
 const ScoreApiResponseSchema = Struct({
 	score: Number$1,
 	label: String$1,
@@ -42011,7 +42096,10 @@ const ScoreApiResponseSchema = Struct({
 	})))
 });
 const parseScoreResult = (value) => getOrNull(decodeUnknownOption(ScoreApiResponseSchema)(value));
-const stripLocalFileFields = (diagnostics) => diagnostics.map(({ filePath: _filePath, fileContext: _fileContext, fixGroupId: _fixGroupId, ...rest }) => rest);
+const sanitizeScoreDiagnostics = (diagnostics) => diagnostics.map(({ filePath, fileContext: _fileContext, fixGroupId: _fixGroupId, ...rest }) => ({
+	...rest,
+	filePath: redactSensitiveText(scrubSensitivePaths(filePath))
+}));
 const isAbortError = (error) => error instanceof Error && (error.name === "AbortError" || error.name === "TimeoutError");
 const describeFailure = (error) => {
 	if (isAbortError(error)) return `timed out after ${FETCH_TIMEOUT_MS / 1e3}s`;
@@ -42024,7 +42112,7 @@ const calculateScore = async (diagnostics, options = {}) => {
 	const requestUrl = options.isCi ? `${SCORE_API_URL}?ci=1` : SCORE_API_URL;
 	try {
 		const compressedBody = gzipSync(JSON.stringify({
-			diagnostics: stripLocalFileFields(diagnostics),
+			diagnostics: sanitizeScoreDiagnostics(diagnostics),
 			...options.metadata?.repo ? { repo: options.metadata.repo } : {},
 			...options.metadata?.sha ? { sha: options.metadata.sha } : {},
 			...options.metadata?.framework ? { framework: options.metadata.framework } : {},
@@ -43229,7 +43317,7 @@ const computeConfigFingerprint = (projectDirectory, version) => {
 /** Display name used in client-facing messages and progress titles. */
 const SERVER_DISPLAY_NAME = "React Doctor";
 /** Server version reported in `serverInfo`; injected at build, `dev` from source. */
-const SERVER_VERSION = "0.7.9";
+const SERVER_VERSION = "0.8.0";
 /** `Diagnostic.source` shown next to every published diagnostic. */
 const DIAGNOSTIC_SOURCE = "react-doctor";
 /**
@@ -44971,23 +45059,6 @@ const METRIC = {
 */
 const toCategoryKey = (category) => category.toLowerCase().replace(/[^a-z0-9]+/g, "_");
 //#endregion
-//#region src/cli/utils/scrub-sensitive-text.ts
-const HOME_DIRECTORY = os.homedir();
-const USER_HOME_PATTERNS = [/[A-Za-z]:[\\/]Users[\\/][^\\/]+/gi, /(?:\/Users\/|\/home\/)[^/\\]+/gi];
-/**
-* Replaces the user's home directory (and generic `/Users|/home|C:\Users\<name>`
-* roots) with `~` so absolute paths can't be tied back to an individual. Keeps
-* the path's relative structure intact, which stays useful for debugging while
-* dropping the personally-identifying prefix. Idempotent — re-running on an
-* already-scrubbed `~/...` path is a no-op.
-*/
-const scrubSensitivePaths = (text) => {
-	let scrubbed = text;
-	if (HOME_DIRECTORY.length > 1) scrubbed = scrubbed.split(HOME_DIRECTORY).join("~");
-	for (const pattern of USER_HOME_PATTERNS) scrubbed = scrubbed.replace(pattern, "~");
-	return scrubbed;
-};
-//#endregion
 //#region src/cli/utils/anonymize-text.ts
 /**
 * Free-text fields can carry both a home-directory path (the OS username) and a
@@ -45276,5 +45347,5 @@ const startLanguageServer = () => {
 };
 //#endregion
 export { startLanguageServer };
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="8227a9ff-6d2c-5cc4-99b6-7016d7554b99")}catch(e){}}();
-//# debugId=8227a9ff-6d2c-5cc4-99b6-7016d7554b99
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="9eca6678-56ba-5032-b04c-b1ed965dffb4")}catch(e){}}();
+//# debugId=9eca6678-56ba-5032-b04c-b1ed965dffb4

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "react-doctor",
-  "version": "0.7.9-dev.e86bc57",
+  "version": "0.8.0-dev.0618ff6",
   "description": "Your agent writes bad React. This catches it",
   "keywords": [
     "accessibility",
@@ -65,8 +65,8 @@
     "vscode-languageserver-textdocument": "^1.0.12",
     "vscode-uri": "^3.1.0",
     "yaml": "^2.9.0",
-    "deslop-js": "0.7.9",
-    "oxlint-plugin-react-doctor": "0.7.9-dev.e86bc57"
+    "deslop-js": "0.8.0",
+    "oxlint-plugin-react-doctor": "0.8.0-dev.0618ff6"
   },
   "devDependencies": {
     "@types/babel__code-frame": "^7.27.0",
@@ -74,9 +74,9 @@
     "@xterm/headless": "^6.0.0",
     "commander": "^14.0.3",
     "ora": "^9.4.0",
-    "@react-doctor/api": "0.7.9",
-    "@react-doctor/core": "0.7.9",
-    "@react-doctor/language-server": "0.7.9"
+    "@react-doctor/api": "0.8.0",
+    "@react-doctor/language-server": "0.8.0",
+    "@react-doctor/core": "0.8.0"
   },
   "engines": {
     "node": "^20.19.0 || >=22.13.0"