react-doctor 0.9.12-dev.a2b460d → 0.9.12-dev.ac87f7d

package/README.md

@@ -9,7 +9,7 @@
 
 Your agent writes bad React, this catches it.
 
-React Doctor deterministically scans your codebase and finds issues across state & effects, performance, architecture, security, and accessibility.
+React Doctor deterministically scans your codebase and finds issues across state and effects, performance, architecture, security, accessibility, and maintainability. It highlights overly complex React functions and repeated JSX trees that are good candidates for composition.
 
 Works across React frameworks and React-enabled sites - Next.js, Vite, Astro, TanStack, React Native, Expo, you name it.
 
@@ -55,6 +55,33 @@ You can configure which rules to run and how to run them in `doctor.config.ts`.
 
 [Learn more →](https://react.doctor/docs/configuration/config-files)
 
+## Runtime performance traces
+
+Record a Chrome DevTools performance trace while you interact with a running React app:
+
+```bash
+npx react-doctor@latest scan http://localhost:3000
+```
+
+React Doctor opens system Chrome in a temporary isolated profile, records until you press Enter
+(up to five minutes), and flashes purple outlines with component names as React renders. It then
+returns a readable summary plus the path to a compressed DevTools trace. Use `--format json` or
+`--format jsonl` for coding agents. In an interactive terminal, you can run `react-doctor scan`
+without a URL and choose a detected localhost app or enter another URL; coding agents and CI must
+pass the URL explicitly.
+
+An already-open normal browser is left alone. To reuse an authenticated session, start a dedicated
+Chrome profile with remote debugging, sign in, close its non-blank tabs, and pass its endpoint:
+
+```bash
+npx react-doctor@latest scan https://app.example.com --cdp http://127.0.0.1:9222
+```
+
+Chrome performance tracing is browser-wide, so React Doctor rejects attached profiles with open
+pages. It closes blank startup tabs before tracing and closes its scan tab afterward; the attached
+browser stays open. The trace is stored locally and is never uploaded, but it can contain page
+URLs, source paths, and React profiling details. Treat it as sensitive application data.
+
 ## Telemetry
 
 The CLI reports crashes, basic run traces, and anonymous usage counters to [Sentry](https://sentry.io/) to help us fix bugs and prioritize work.

package/bin/react-doctor.js

@@ -10,12 +10,4 @@ if (module.enableCompileCache && !process.env.NODE_DISABLE_COMPILE_CACHE) {
   }
 }
 
-// Fast-path the (experimental) language server so it runs without the CLI's
-// commander / prompts / ora layer, which would touch process.stdin before the
-// LSP connection attaches and break the stdio transport.
-if (process.argv[2] === "experimental-lsp") {
-  const { startLanguageServer } = await import("../dist/lsp.js");
-  startLanguageServer();
-} else {
-  await import("../dist/cli.js");
-}
+await import("../dist/cli.js");

package/dist/active-run-trace-dlIZeEvb.js

@@ -0,0 +1,18 @@
+//#region src/cli/utils/active-run-trace.ts
+
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="38d6312b-a431-5dea-8088-ac88f4110ce8")}catch(e){}}();
+let activeRunTrace = null;
+const setActiveRunTrace = (trace) => {
+	activeRunTrace = trace;
+};
+const getActiveRunTrace = () => activeRunTrace;
+let lastRunTraceId = null;
+const recordRunTraceId = (traceId) => {
+	lastRunTraceId = traceId;
+};
+const getLastRunTraceId = () => lastRunTraceId;
+//#endregion
+export { setActiveRunTrace as i, getLastRunTraceId as n, recordRunTraceId as r, getActiveRunTrace as t };
+
+//# sourceMappingURL=active-run-trace-dlIZeEvb.js.map
+//# debugId=38d6312b-a431-5dea-8088-ac88f4110ce8

package/dist/active-scan-abort-registry-DwG6tSPy.js

@@ -0,0 +1,28 @@
+//#region src/cli/utils/active-scan-abort-registry.ts
+
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="464e40c7-b98a-555d-a847-5ddb886227d3")}catch(e){}}();
+const activeScanAbortControllers = /* @__PURE__ */ new Set();
+const activeScanCleanups = /* @__PURE__ */ new Set();
+const activeScanAbortRegistry = {
+	register: (controller) => {
+		activeScanAbortControllers.add(controller);
+		return () => activeScanAbortControllers.delete(controller);
+	},
+	registerCleanup: (cleanup) => {
+		activeScanCleanups.add(cleanup);
+		return () => activeScanCleanups.delete(cleanup);
+	},
+	abortAll: async () => {
+		const controllers = [...activeScanAbortControllers];
+		const cleanups = [...activeScanCleanups];
+		activeScanAbortControllers.clear();
+		activeScanCleanups.clear();
+		for (const controller of controllers) controller.abort();
+		await Promise.allSettled(cleanups.map((cleanup) => cleanup()));
+	}
+};
+//#endregion
+export { activeScanAbortRegistry as t };
+
+//# sourceMappingURL=active-scan-abort-registry-DwG6tSPy.js.map
+//# debugId=464e40c7-b98a-555d-a847-5ddb886227d3

package/dist/{build-section-divider-Vz879zXD.js → build-section-divider-BpENvzwG.js}

@@ -1,7 +1,7 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="140b0cea-029f-5af2-8653-e99462b0ce17")}catch(e){}}();
-import { At as anonymizeInPlace, Fn as scrubSensitivePaths, M as SENTRY_FLUSH_TIMEOUT_MS, Y as CANONICAL_GITHUB_URL, a as isEnvFlagEnabled, cn as highlighter, i as isTelemetryEnabled, jt as anonymizeText, nt as DOCS_URL, o as buildSentryScope } from "./record-metric-CMe2d1Xv.js";
-import { c as isExpectedUserError } from "./unref-stdin-Cxhw67r6.js";
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="e059bb3a-af98-5a74-9eea-96e05673fc48")}catch(e){}}();
+import { Kt as highlighter, N as SENTRY_FLUSH_TIMEOUT_MS, a as isEnvFlagEnabled, er as CANONICAL_GITHUB_URL, ft as anonymizeInPlace, hn as scrubSensitivePaths, i as isTelemetryEnabled, o as buildSentryScope, or as DOCS_URL, pt as anonymizeText } from "./record-metric-DVm5sVu2.js";
+import { r as isExpectedUserError } from "./telemetry-runtime-B45Ns9aS.js";
 import * as Sentry from "@sentry/node";
 //#region src/cli/utils/scrub-sentry-event.ts
 /**
@@ -55,9 +55,8 @@ const scrubSentryEvent = (event) => {
 /**
 * Shared Sentry configuration resolution — release, environment, and tracing
 * sample rate — derived from `VERSION` and the standard `SENTRY_*` env
-* overrides. Lives apart from `instrument.ts` (the CLI's run-context-aware
-* init) so both the CLI and the editor language server can resolve identical
-* release/environment values without the LSP pulling in CLI run-context code.
+* overrides. Lives apart from `instrument.ts` so this resolution remains
+* independently testable.
 */
 /**
 * A version is a "dev" build when it's the unbuilt placeholder (`0.0.0`) or
@@ -71,13 +70,13 @@ const isDevVersion = (version) => version === "0.0.0" || version.includes("-");
 * uploads source-map artifacts under, so stack frames symbolicate. Honors the
 * standard `SENTRY_RELEASE` override.
 */
-const resolveSentryRelease = () => process.env.SENTRY_RELEASE || `react-doctor@0.9.12-dev.a2b460d`;
+const resolveSentryRelease = () => process.env.SENTRY_RELEASE || `react-doctor@0.9.12-dev.ac87f7d`;
 /**
 * Deployment environment shown in Sentry's environment filter. Defaults to
 * `production` for tagged releases and `development` for dev/unbuilt versions,
 * overridable via the standard `SENTRY_ENVIRONMENT` env var.
 */
-const resolveSentryEnvironment = () => process.env.SENTRY_ENVIRONMENT || (isDevVersion("0.9.12-dev.a2b460d") ? "development" : "production");
+const resolveSentryEnvironment = () => process.env.SENTRY_ENVIRONMENT || (isDevVersion("0.9.12-dev.ac87f7d") ? "development" : "production");
 //#endregion
 //#region src/instrument.ts
 let isInitialized = false;
@@ -138,20 +137,6 @@ const initializeSentry = () => {
 	} catch {}
 };
 //#endregion
-//#region src/cli/utils/active-scan-abort-registry.ts
-const activeScanAbortControllers = /* @__PURE__ */ new Set();
-const activeScanAbortRegistry = {
-	register: (controller) => {
-		activeScanAbortControllers.add(controller);
-		return () => activeScanAbortControllers.delete(controller);
-	},
-	abortAll: () => {
-		const controllers = [...activeScanAbortControllers];
-		activeScanAbortControllers.clear();
-		for (const controller of controllers) controller.abort();
-	}
-};
-//#endregion
 //#region src/cli/utils/resolve-measure-width.ts
 const resolveClampedWidth = (input) => {
 	const terminalColumns = process.stdout.columns;
@@ -225,7 +210,7 @@ const buildFooterLinkLines = ({ shareUrl }) => [
 const DIVIDER_INDENT = "  ";
 const buildSectionDivider = () => highlighter.dim(`${DIVIDER_INDENT}${"─".repeat(resolveMeasureWidth(2))}`);
 //#endregion
-export { initializeSentry as a, flushSentry as i, buildFooterLinkLines as n, activeScanAbortRegistry as r, buildSectionDivider as t };
+export { initializeSentry as i, buildFooterLinkLines as n, flushSentry as r, buildSectionDivider as t };
 
-//# sourceMappingURL=build-section-divider-Vz879zXD.js.map
-//# debugId=140b0cea-029f-5af2-8653-e99462b0ce17
+//# sourceMappingURL=build-section-divider-BpENvzwG.js.map
+//# debugId=e059bb3a-af98-5a74-9eea-96e05673fc48

package/dist/{ci-BVYrYekU.js → ci-BhOBG3T0.js}

@@ -1,14 +1,15 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="78f87d33-c5f6-5495-9915-ffb7a60836c3")}catch(e){}}();
-import { n as __require, r as __toESM, t as __commonJSMin } from "./chunk-q7NCDQ7-.js";
-import { X as CI_URL, ar as runSync, cn as highlighter, ot as GITHUB_ACTIONS_SETUP_URL, t as recordCount, w as METRIC } from "./record-metric-CMe2d1Xv.js";
-import { c as isExpectedUserError } from "./unref-stdin-Cxhw67r6.js";
-import { n as handleError, r as handleUserError, t as reportErrorToSentry } from "./report-error-1l7v6_dE.js";
-import { L as cliLogger, c as spinner, n as findNearestPackageDirectory } from "./install-doctor-script-D58Hr1dM.js";
-import { a as readReactDoctorWorkflow, d as detectDefaultBranch, f as runCommand, l as prompts, n as getReactDoctorWorkflowPath, s as upgradeWorkflowActionToV2, t as buildWorkflowContent } from "./install-github-workflow-DkMicv8E.js";
-import { a as isValidBlockingLevel, c as openWorkflowPullRequest, l as stageWorkflowFile, n as isScopeValue } from "./resolve-scope-CMNrOdDf.js";
-import { t as shouldSkipPrompts } from "./should-skip-prompts-mXKZBNCz.js";
-import { t as printBrandedHeader } from "./print-branded-header-D4QYSu-h.js";
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="286265b6-b9b2-528c-913f-8747779b7b1c")}catch(e){}}();
+import { i as __toESM, r as __require, t as __commonJSMin } from "./chunk-ChKA3wi6.js";
+import { Kt as highlighter, T as METRIC, cr as GITHUB_ACTIONS_SETUP_URL, t as recordCount, tr as CI_URL, zn as runSync } from "./record-metric-DVm5sVu2.js";
+import { r as isExpectedUserError } from "./telemetry-runtime-B45Ns9aS.js";
+import { n as handleUserError, t as handleError } from "./handle-error-CU-FMRyI.js";
+import { t as reportErrorToSentry } from "./report-error-JXHy8xn6.js";
+import { M as cliLogger, c as spinner, n as findNearestPackageDirectory } from "./install-doctor-script-GGnj8tcj.js";
+import { a as readReactDoctorWorkflow, d as detectDefaultBranch, f as runCommand, l as prompts, n as getReactDoctorWorkflowPath, s as upgradeWorkflowActionToV2, t as buildWorkflowContent } from "./install-github-workflow-DWmRP55H.js";
+import { a as isValidBlockingLevel, c as openWorkflowPullRequest, l as stageWorkflowFile, n as isScopeValue } from "./resolve-scope-CWo3o4bf.js";
+import { t as shouldSkipPrompts } from "./should-skip-prompts-DzzBAamD.js";
+import { t as printBrandedHeader } from "./print-branded-header-CqvClso3.js";
 import * as path$1 from "node:path";
 import * as fs$1 from "node:fs";
 //#region src/cli/utils/ci/ci-provider.ts
@@ -7497,5 +7498,5 @@ const ciConfigAction = (options) => runCiCommand("config", runCiConfig, options)
 //#endregion
 export { ciConfigAction, ciInstallAction, ciUpgradeAction };
 
-//# sourceMappingURL=ci-BVYrYekU.js.map
-//# debugId=78f87d33-c5f6-5495-9915-ffb7a60836c3
+//# sourceMappingURL=ci-BhOBG3T0.js.map
+//# debugId=286265b6-b9b2-528c-913f-8747779b7b1c

package/dist/cli.js

@@ -1,11 +1,14 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="c779427c-ed7c-5be4-b123-73410d3af015")}catch(e){}}();
-import { n as __require, r as __toESM, t as __commonJSMin } from "./chunk-q7NCDQ7-.js";
-import { In as setColorEnabled, R as CliInputError, V as isDebugFlagEnabled, X as CI_URL, Y as CANONICAL_GITHUB_URL, cn as highlighter, d as isJsonModeActive, g as VERSION, i as isTelemetryEnabled, m as writeJsonErrorReport } from "./record-metric-CMe2d1Xv.js";
-import { c as isExpectedUserError, r as getLastRunTraceId, s as shutdownTelemetry, t as unrefStdin } from "./unref-stdin-Cxhw67r6.js";
-import { a as initializeSentry, i as flushSentry } from "./build-section-divider-Vz879zXD.js";
-import { t as exitGracefully } from "./exit-gracefully-Cjv5kC_l.js";
-import { n as handleError, r as handleUserError, t as reportErrorToSentry } from "./report-error-1l7v6_dE.js";
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="f42b1a1f-3941-5a61-bf1b-ea87400b9ec6")}catch(e){}}();
+import { i as __toESM, r as __require, t as __commonJSMin } from "./chunk-ChKA3wi6.js";
+import { H as isDebugFlagEnabled, Kt as highlighter, _ as VERSION, d as isJsonModeActive, er as CANONICAL_GITHUB_URL, gn as setColorEnabled, h as writeJsonErrorReport, i as isTelemetryEnabled, tr as CI_URL, z as CliInputError } from "./record-metric-DVm5sVu2.js";
+import { n as shutdownTelemetry, r as isExpectedUserError } from "./telemetry-runtime-B45Ns9aS.js";
+import { i as initializeSentry, r as flushSentry } from "./build-section-divider-BpENvzwG.js";
+import { t as exitGracefully } from "./exit-gracefully-CYfF0GCJ.js";
+import { n as handleUserError, t as handleError } from "./handle-error-CU-FMRyI.js";
+import { n as getLastRunTraceId } from "./active-run-trace-dlIZeEvb.js";
+import { t as reportErrorToSentry } from "./report-error-JXHy8xn6.js";
+import { t as unrefStdin } from "./unref-stdin-BKT_s38a.js";
 import { execFileSync } from "node:child_process";
 //#region ../../node_modules/.pnpm/commander@14.0.3/node_modules/commander/lib/error.js
 var require_error = /* @__PURE__ */ __commonJSMin(((exports) => {
@@ -3291,6 +3294,24 @@ const COMMAND_FLAG_SPECS = new Map([
 		shortOptionsWithoutValues: new Set(["-h", "-y"]),
 		shortOptionsWithRequiredValues: new Set(["-c"])
 	}],
+	["scan", {
+		longOptionsWithoutValues: new Set([
+			"--color",
+			"--debug",
+			"--help",
+			"--no-color",
+			"--no-score",
+			"--no-telemetry"
+		]),
+		longOptionsWithRequiredValues: new Set([
+			"--cdp",
+			"--format",
+			"--trace-out"
+		]),
+		longOptionsWithOptionalValues: /* @__PURE__ */ new Set(),
+		shortOptionsWithoutValues: new Set(["-h"]),
+		shortOptionsWithRequiredValues: new Set(["-f"])
+	}],
 	["why", {
 		longOptionsWithoutValues: new Set([
 			"--color",
@@ -3408,6 +3429,7 @@ ${highlighter.dim("Examples:")}
 ${formatExampleLines([
 	["react-doctor", "scan the current project"],
 	["react-doctor ./apps/web", "scan a specific directory"],
+	["react-doctor scan http://localhost:3000", "profile one interaction in a running React app"],
 	["react-doctor --scope changed --base main", "scan only new issues vs. main"],
 	["react-doctor --project modules/a,modules/b", "score each module separately (names or paths)"],
 	["react-doctor --staged", "scan staged files (pre-commit hook)"],
@@ -3456,10 +3478,36 @@ ${formatExampleLines([
 
 ${highlighter.dim("Scope:")}
   Runs every rule tagged ${highlighter.info("design")}; all design rules stay opt-in during a general health scan.
-  Dead-code, supply-chain, external lint-config, custom-plugin, and health-score passes are skipped.
+  Whole-project maintainability, supply-chain, external lint-config, custom-plugin, and health-score passes are skipped.
   Standard scan flags such as ${highlighter.info("--scope")}, ${highlighter.info("--project")}, ${highlighter.info("--verbose")}, and ${highlighter.info("--json")} still work.
 `;
-const MAX_DURATION_OPTION_DESCRIPTION = "scan time budget for the whole run, shared across workspace projects: past it, queued projects, remaining lint batches, and dead-code are skipped and partial results are reported (skipped files and projects are listed in the JSON report)";
+const renderRuntimeScanHelpEpilog = () => `
+${highlighter.dim("Examples:")}
+${formatExampleLines([
+	["react-doctor scan", "choose a detected local app or enter its URL"],
+	["react-doctor scan http://localhost:3000", "scan one interaction in isolated Chrome"],
+	["react-doctor scan http://localhost:3000 --format json", "print a structured report for an agent"],
+	["react-doctor scan http://localhost:3000 --trace-out ./trace.json.gz", "choose where the private trace is saved"],
+	["react-doctor scan https://app.example.com --cdp http://127.0.0.1:9222", "reuse a dedicated debug-enabled Chrome profile"]
+])}
+
+${highlighter.dim("How scanning works:")}
+  1. Start the app. Prefer a production build for representative timings.
+  2. Run this command. If you omit the URL, React Doctor suggests running localhost apps.
+  3. Reproduce one slow interaction within five minutes. Purple labels show component renders.
+  4. Return here and press Enter. React Doctor prints the report and trace path.
+
+${highlighter.dim("Authenticated apps:")}
+  The default temporary profile starts signed out. Start a separate Chrome profile with remote
+  debugging, sign in there, close its non-blank tabs, then pass ${highlighter.info("--cdp <url>")}.
+  React Doctor closes blank startup tabs and its scan tab. The attached browser stays open.
+
+${highlighter.dim("Output and privacy:")}
+  ${highlighter.info("text")} summarizes the evidence for people. ${highlighter.info("json")} returns one report; ${highlighter.info("jsonl")} returns one record per line.
+  Chrome tracing is browser-wide, so ${highlighter.info("--cdp")} rejects profiles with open pages. The compressed
+  ${highlighter.info(".json.gz")} trace stays local and can contain page URLs, source paths, and profiling data.
+`;
+const MAX_DURATION_OPTION_DESCRIPTION = "scan time budget for the whole run, shared across workspace projects: past it, queued projects, remaining lint batches, and maintainability analysis are skipped and partial results are reported (skipped files and projects are listed in the JSON report)";
 const renderCiHelpEpilog = () => `
 ${highlighter.dim("Examples:")}
 ${formatExampleLines([
@@ -3479,9 +3527,9 @@ ${highlighter.dim("Learn more:")}
   ${highlighter.info(CI_URL)}
 `;
 const collectCategoryOption = (value, previousValues) => [...previousValues ?? [], value];
-const program = new Command().name("react-doctor").description("Diagnose React codebase health").version(VERSION, "-v, --version", "display the version number").argument("[directory]", "project directory to scan", ".").option("--lint", "enable linting").option("--no-lint", "skip linting").option("--dead-code", "enable dead-code analysis (default)").option("--no-dead-code", "skip dead-code analysis (unused files / exports / dependencies, circular imports)").option("--supply-chain", "enable the dependency supply-chain scan (default)").option("--no-supply-chain", "skip the dependency supply-chain scan (Socket.dev dependency health checks)").option("--verbose", "show every rule and per-file details (default shows top 3 rules)").option("--debug", "force a Sentry trace and print its id at the end (paste it into a bug report)").option("--output-dir <dir>", "directory for the full diagnostics dump (default: a temp folder)").option("--score", "output only the score").option("--json", "output a single structured JSON report (suppresses other output)").option("--json-compact", "with --json, emit compact JSON (no indentation)").option("--json-out <path>", "with --json, write the report to a file instead of stdout").option("--no-cache", "disable all scan caches for this run").option("-y, --yes", "skip prompts, scan all workspace projects").option("--no-parallel", "lint serially with one worker (default: parallel across CPU cores; set the worker count with REACT_DOCTOR_PARALLEL)").option("--project <name>", "select projects: workspace names or directory paths (comma-separated for multiple); overrides the `projects` config field").option("--scope <value>", "how much supported JS/TS and inline HTML script source to scan/report: full (default), files, changed (only new issues vs base), or lines (issues whose source spans touch changed lines)").option("--base <ref>", "base git ref for files/changed/lines scope (auto-detected when omitted)").option("--include-untracked", "with --scope files/changed/lines, also scan ordinary untracked files (respects .gitignore)").addOption(new Option("--diff [base]", "[deprecated] alias for --scope changed (pass `false` to force a full scan)").hideHelp()).addOption(new Option("--changed-files-from <file>", "scan source files listed in a newline-delimited changed-files file").hideHelp()).option("--no-score", "skip the score API, the share URL, and crash reporting").addOption(new Option("--category <category>", "only show diagnostics in a category (repeatable; e.g. Security)").argParser(collectCategoryOption)).option("--no-telemetry", "alias for --no-score (skip the score API, share URL, and crash reporting)").option("--staged", "scan only staged (git index) files for pre-commit hooks (honors --project and config `projects`; exits 0 when nothing is staged)").option("--max-duration <seconds>", MAX_DURATION_OPTION_DESCRIPTION).option("--blocking <level>", "severity that fails CI: error (default), warning, or none (advisory)").addOption(new Option("--fail-on <level>", "[deprecated] alias for --blocking <level>").hideHelp()).option("--no-respect-inline-disables", "audit mode: neutralize inline lint suppressions before scanning").option("--warnings", "show warning-severity diagnostics (default)").option("--no-warnings", "hide warning-severity diagnostics (errors only)").option("--color", "force colored output").option("--no-color", "disable colored output (also honors NO_COLOR)").addHelpText("after", renderRootHelpEpilog);
+const program = new Command().name("react-doctor").description("Diagnose React codebase health").version(VERSION, "-v, --version", "display the version number").argument("[directory]", "project directory to scan", ".").option("--lint", "enable linting").option("--no-lint", "skip linting").addOption(new Option("--dead-code").hideHelp()).addOption(new Option("--no-dead-code").hideHelp()).option("--supply-chain", "enable the dependency supply-chain scan (default)").option("--no-supply-chain", "skip the dependency supply-chain scan (Socket.dev dependency health checks)").option("--verbose", "show every rule and per-file details (default shows top 3 rules)").option("--debug", "force a Sentry trace and print its id at the end (paste it into a bug report)").option("--output-dir <dir>", "directory for the full diagnostics dump (default: a temp folder)").option("--score", "output only the score").option("--json", "output a single structured JSON report (suppresses other output)").option("--json-compact", "with --json, emit compact JSON (no indentation)").option("--json-out <path>", "with --json, write the report to a file instead of stdout").option("--no-cache", "disable all scan caches for this run").option("-y, --yes", "skip prompts, scan all workspace projects").option("--no-parallel", "lint serially with one worker (default: parallel across CPU cores; set the worker count with REACT_DOCTOR_PARALLEL)").option("--project <name>", "select projects: workspace names or directory paths (comma-separated for multiple); overrides the `projects` config field").option("--scope <value>", "how much supported JS/TS and inline HTML script source to scan/report: full (default), files, changed (only new issues vs base), or lines (issues whose source spans touch changed lines)").option("--base <ref>", "base git ref for files/changed/lines scope (auto-detected when omitted)").option("--include-untracked", "with --scope files/changed/lines, also scan ordinary untracked files (respects .gitignore)").addOption(new Option("--diff [base]", "[deprecated] alias for --scope changed (pass `false` to force a full scan)").hideHelp()).addOption(new Option("--changed-files-from <file>", "scan source files listed in a newline-delimited changed-files file").hideHelp()).option("--no-score", "skip the score API, the share URL, and crash reporting").addOption(new Option("--category <category>", "only show diagnostics in a category (repeatable; e.g. Security)").argParser(collectCategoryOption)).option("--no-telemetry", "alias for --no-score (skip the score API, share URL, and crash reporting)").option("--staged", "scan only staged (git index) files for pre-commit hooks (honors --project and config `projects`; exits 0 when nothing is staged)").option("--max-duration <seconds>", MAX_DURATION_OPTION_DESCRIPTION).option("--blocking <level>", "severity that fails CI: error (default), warning, or none (advisory)").addOption(new Option("--fail-on <level>", "[deprecated] alias for --blocking <level>").hideHelp()).option("--no-respect-inline-disables", "audit mode: neutralize inline lint suppressions before scanning").option("--warnings", "show warning-severity diagnostics (default)").option("--no-warnings", "hide warning-severity diagnostics (errors only)").option("--color", "force colored output").option("--no-color", "disable colored output (also honors NO_COLOR)").addHelpText("after", renderRootHelpEpilog);
 program.action(async (directory = ".", flags) => {
-	const { runScanCommand } = await import("./scan-D4m5r4Rs.js");
+	const { runScanCommand } = await import("./scan-58Yq0rYJ.js");
 	return runScanCommand({
 		directory,
 		flags,
@@ -3489,72 +3537,75 @@ program.action(async (directory = ".", flags) => {
 	});
 });
 program.command("design [directory]").description("Run only the focused UI design diagnostics").addHelpText("after", renderDesignHelpEpilog).action(async (directory, _options, command) => {
-	const { designAction } = await import("./design-D-TYN_tr.js");
+	const { designAction } = await import("./design-Bq6di1tM.js");
 	return designAction(directory ?? ".", command.optsWithGlobals());
 });
+program.command("scan").description("Scan a React interaction in Chrome until you press Enter").argument("[url]", "HTTP(S) URL of the running React app; detects local apps when omitted").option("-f, --format <format>", "report format: text, json, or jsonl", "text").option("--cdp <url>", "reuse Chrome at this remote-debugging endpoint").option("--trace-out <path>", "save the compressed .json.gz DevTools trace at this path").addHelpText("after", renderRuntimeScanHelpEpilog).action(async (url, options) => {
+	const { runtimeScanAction } = await import("./runtime-scan-WErSEFfG.js");
+	return runtimeScanAction(url, options);
+});
 program.command("why <location>").description("Explain why a rule fired (or why a suppression didn't apply) at a file:line").option("--project <name>", "select projects: workspace names or directory paths (comma-separated for multiple)").option("-c, --cwd <cwd>", "working directory", process.cwd()).option("--color", "force colored output").option("--no-color", "disable colored output (also honors NO_COLOR)").action(async (location, options) => {
-	const { whyAction } = await import("./why-BktDEhhH.js");
+	const { whyAction } = await import("./why-DIEM7rdZ.js");
 	return whyAction(location, options);
 });
-program.command("install").alias("setup").description("Install the react-doctor skill into your coding agents and optional git hook").option("-y, --yes", "skip prompts, install for all detected agents").option("--dry-run", "show what would be installed without writing files").option("--agent-hooks", "install native non-blocking agent hooks for Claude Code and Cursor").option("-c, --cwd <cwd>", "working directory", process.cwd()).option("--color", "force colored output").option("--no-color", "disable colored output (also honors NO_COLOR)").addHelpText("after", renderInstallHelpEpilog).action(async (options, command) => {
-	const { installAction } = await import("./install-ZeYvD9Rw.js");
+program.command("install").alias("setup").description("Install the react-doctor skill into your coding agents and optional git hook").option("-y, --yes", "skip prompts, install for all detected agents").option("--dry-run", "show what would be installed without writing files").option("--agent-hooks", "install end-of-turn agent hooks for Claude Code and Cursor").option("-c, --cwd <cwd>", "working directory", process.cwd()).option("--color", "force colored output").option("--no-color", "disable colored output (also honors NO_COLOR)").addHelpText("after", renderInstallHelpEpilog).action(async (options, command) => {
+	const { installAction } = await import("./install-DoihOMNC.js");
 	return installAction(options, command);
 });
 const providerOption = ["--provider <name>", "ci provider: github-actions or gitlab-ci (auto-detected by default)"];
 const prOption = ["--pr", "open a pull request with the change instead of writing it to the working tree"];
 const ci = program.command("ci").description("Set up, upgrade, and configure React Doctor in your CI");
 ci.command("install").description("Add a CI workflow that scans every pull request").option(...providerOption).option(...prOption).option("--blocking <level>", "gate level: none (advisory, default), warning, or error").option("--scope <value>", "what a pull-request scan reports: changed (default), files, lines, full").option("--comment", "post a summary comment on each pull request").option("--no-comment", "don't post a summary comment").option("--review-comments", "add inline review comments on changed lines").option("--no-review-comments", "don't add inline review comments").option("--commit-status", "report a commit status with the health score").option("--no-commit-status", "don't report a commit status").option("-y, --yes", "skip prompts; use the defaults").option("-c, --cwd <cwd>", "working directory", process.cwd()).option("--color", "force colored output").option("--no-color", "disable colored output (also honors NO_COLOR)").addHelpText("after", renderCiHelpEpilog).action(async (_options, command) => {
-	const { ciInstallAction } = await import("./ci-BVYrYekU.js");
+	const { ciInstallAction } = await import("./ci-BhOBG3T0.js");
 	return ciInstallAction(command.optsWithGlobals());
 });
 ci.command("config").description("Change the gate, scan scope, and pull-request reporting").option(...providerOption).option("--blocking <level>", "gate level: none (advisory), warning, or error").option("--scope <value>", "what a pull-request scan reports: changed, files, lines, or full").option("--comment", "post a summary comment on each pull request").option("--no-comment", "don't post a summary comment").option("--review-comments", "add inline review comments on changed lines").option("--no-review-comments", "don't add inline review comments").option("--commit-status", "report a commit status with the health score").option("--no-commit-status", "don't report a commit status").option("-y, --yes", "skip prompts; print the current settings").option("-c, --cwd <cwd>", "working directory", process.cwd()).option("--color", "force colored output").option("--no-color", "disable colored output (also honors NO_COLOR)").action(async (_options, command) => {
-	const { ciConfigAction } = await import("./ci-BVYrYekU.js");
+	const { ciConfigAction } = await import("./ci-BhOBG3T0.js");
 	return ciConfigAction(command.optsWithGlobals());
 });
 ci.command("upgrade").description("Upgrade the CI workflow to the action's current major").option(...providerOption).option(...prOption).option("-y, --yes", "skip prompts").option("-c, --cwd <cwd>", "working directory", process.cwd()).option("--color", "force colored output").option("--no-color", "disable colored output (also honors NO_COLOR)").action(async (_options, command) => {
-	const { ciUpgradeAction } = await import("./ci-BVYrYekU.js");
+	const { ciUpgradeAction } = await import("./ci-BhOBG3T0.js");
 	return ciUpgradeAction(command.optsWithGlobals());
 });
 program.command("version").description("show the version with Node and platform info").option("--color", "force colored output").option("--no-color", "disable colored output (also honors NO_COLOR)").action(async () => {
-	const { versionAction } = await import("./version-CnvVY2VD.js");
+	const { versionAction } = await import("./version-Cad39N0q.js");
 	return versionAction();
 });
 const rules = program.command("rules").description("List, explain, and configure which React Doctor rules run");
 rules.command("list").description("List rules and the severity they run at under your config").option("--category <name>", "only show rules in a category (e.g. Performance)").option("--tag <name>", "only show rules with a tag (e.g. design, test-noise)").option("--framework <name>", "only show rules for a framework (e.g. global, nextjs)").option("--configured", "only show rules your config has changed from the default").option("--json", "output a structured JSON array").option("-c, --cwd <cwd>", "working directory", process.cwd()).action(async (_options, command) => {
-	const { rulesListAction } = await import("./rules-CzR1qUru.js");
+	const { rulesListAction } = await import("./rules-B4Dq5c0s.js");
 	return rulesListAction(command.optsWithGlobals());
 });
 rules.command("explain <rule>").description("Explain why a rule matters, its current severity, and how to configure it").option("--json", "output a structured JSON object").option("-c, --cwd <cwd>", "working directory", process.cwd()).action(async (rule, _options, command) => {
-	const { rulesExplainAction } = await import("./rules-CzR1qUru.js");
+	const { rulesExplainAction } = await import("./rules-B4Dq5c0s.js");
 	return rulesExplainAction(rule, command.optsWithGlobals());
 });
 rules.command("set <rule> <severity>").description("Set a rule's severity: off, warn, or error").option("-c, --cwd <cwd>", "working directory", process.cwd()).action(async (rule, severity, _options, command) => {
-	const { rulesSetAction } = await import("./rules-CzR1qUru.js");
+	const { rulesSetAction } = await import("./rules-B4Dq5c0s.js");
 	return rulesSetAction(rule, severity, command.optsWithGlobals());
 });
 rules.command("enable <rule>").description("Enable a rule at its recommended severity (or pass --severity)").option("--severity <level>", "severity to enable at: warn or error").option("-c, --cwd <cwd>", "working directory", process.cwd()).action(async (rule, _options, command) => {
-	const { rulesEnableAction } = await import("./rules-CzR1qUru.js");
+	const { rulesEnableAction } = await import("./rules-B4Dq5c0s.js");
 	return rulesEnableAction(rule, command.optsWithGlobals());
 });
 rules.command("disable <rule>").description("Disable a rule so it never runs").option("-c, --cwd <cwd>", "working directory", process.cwd()).action(async (rule, _options, command) => {
-	const { rulesDisableAction } = await import("./rules-CzR1qUru.js");
+	const { rulesDisableAction } = await import("./rules-B4Dq5c0s.js");
 	return rulesDisableAction(rule, command.optsWithGlobals());
 });
 rules.command("category <category> <severity>").description("Set the severity for a whole category (off, warn, error)").option("-c, --cwd <cwd>", "working directory", process.cwd()).action(async (category, severity, _options, command) => {
-	const { rulesCategoryAction } = await import("./rules-CzR1qUru.js");
+	const { rulesCategoryAction } = await import("./rules-B4Dq5c0s.js");
 	return rulesCategoryAction(category, severity, command.optsWithGlobals());
 });
 rules.command("ignore-tag <tag>").description("Skip a whole rule family by tag before linting (e.g. design)").option("-c, --cwd <cwd>", "working directory", process.cwd()).action(async (tag, _options, command) => {
-	const { rulesIgnoreTagAction } = await import("./rules-CzR1qUru.js");
+	const { rulesIgnoreTagAction } = await import("./rules-B4Dq5c0s.js");
 	return rulesIgnoreTagAction(tag, command.optsWithGlobals());
 });
 rules.command("unignore-tag <tag>").description("Stop ignoring a tag previously skipped via ignore-tag").option("-c, --cwd <cwd>", "working directory", process.cwd()).action(async (tag, _options, command) => {
-	const { rulesUnignoreTagAction } = await import("./rules-CzR1qUru.js");
+	const { rulesUnignoreTagAction } = await import("./rules-B4Dq5c0s.js");
 	return rulesUnignoreTagAction(tag, command.optsWithGlobals());
 });
-program.command("experimental-lsp", { hidden: false }).description("[experimental] run the React Doctor language server over stdio (for editors)").allowUnknownOption().action(() => {});
-program.command("experimental-tui [directory]", { hidden: true }).description("[experimental] interactive, scrollable scan report").option("--blocking <level>", "severity that fails CI: error (default), warning, or none (advisory)").option("--color", "force colored output").option("--no-color", "disable colored output (also honors NO_COLOR)").option("--no-dead-code", "skip dead-code analysis").option("--no-supply-chain", "skip the dependency supply-chain scan").option("--score", "only print the numeric score (for scripts and CI)").option("--no-score", "skip the score API, the share URL, and crash reporting").option("--no-cache", "disable all scan caches for this run").option("--max-duration <seconds>", MAX_DURATION_OPTION_DESCRIPTION).option("-p, --project <names>", "scan specific workspace projects (comma-separated, or *)").option("-y, --yes", "skip the project prompt and scan every discovered project").action(async (directory = ".", _localOptions, command) => {
-	const { runScanCommand } = await import("./scan-D4m5r4Rs.js");
+program.command("experimental-tui [directory]", { hidden: true }).description("[experimental] interactive, scrollable scan report").option("--blocking <level>", "severity that fails CI: error (default), warning, or none (advisory)").option("--color", "force colored output").option("--no-color", "disable colored output (also honors NO_COLOR)").addOption(new Option("--no-dead-code").hideHelp()).option("--no-supply-chain", "skip the dependency supply-chain scan").option("--score", "only print the numeric score (for scripts and CI)").option("--no-score", "skip the score API, the share URL, and crash reporting").option("--no-cache", "disable all scan caches for this run").option("--max-duration <seconds>", MAX_DURATION_OPTION_DESCRIPTION).option("-p, --project <names>", "scan specific workspace projects (comma-separated, or *)").option("-y, --yes", "skip the project prompt and scan every discovered project").action(async (directory = ".", _localOptions, command) => {
+	const { runScanCommand } = await import("./scan-58Yq0rYJ.js");
 	return runScanCommand({
 		directory,
 		flags: command.optsWithGlobals(),
@@ -3584,7 +3635,8 @@ Promise.resolve().then(() => assertNoRemovedFlags(process.argv)).then(() => prog
 		process.exit(1);
 	}
 	if (isUserError) {
-		handleUserError(error);
+		handleUserError(error, { shouldExit: false });
+		await Promise.all([flushSentry(), shutdownTelemetry()]);
 		return;
 	}
 	handleError(error, { sentryEventId });
@@ -3593,4 +3645,4 @@ Promise.resolve().then(() => assertNoRemovedFlags(process.argv)).then(() => prog
 export {};
 
 //# sourceMappingURL=cli.js.map
-//# debugId=c779427c-ed7c-5be4-b123-73410d3af015
+//# debugId=f42b1a1f-3941-5a61-bf1b-ea87400b9ec6

package/dist/{design-D-TYN_tr.js → design-Bq6di1tM.js}

@@ -1,6 +1,6 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="7c9e148d-f31f-56f0-8f3d-5ba7ab111299")}catch(e){}}();
-import { t as inspectAction } from "./inspect-kkvDHKDE.js";
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="0851573f-29ba-5832-8808-638b8687baa9")}catch(e){}}();
+import { t as inspectAction } from "./inspect-B9H_IT4O.js";
 //#region src/cli/commands/design.ts
 const designAction = async (directory, flags) => inspectAction(directory, {
 	...flags,
@@ -10,5 +10,5 @@ const designAction = async (directory, flags) => inspectAction(directory, {
 //#endregion
 export { designAction };
 
-//# sourceMappingURL=design-D-TYN_tr.js.map
-//# debugId=7c9e148d-f31f-56f0-8f3d-5ba7ab111299
+//# sourceMappingURL=design-Bq6di1tM.js.map
+//# debugId=0851573f-29ba-5832-8808-638b8687baa9

package/dist/{devtools-DPRVRu3S.js → devtools-BiC-AP3B.js}

@@ -1,6 +1,6 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="de65e4d1-46e8-5d95-92bc-2e867613f003")}catch(e){}}();
-import { n as __require, r as __toESM, t as __commonJSMin } from "./chunk-q7NCDQ7-.js";
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="27aef5e9-9c40-5fb8-a52c-e639ba9a5c8b")}catch(e){}}();
+import { i as __toESM, r as __require, t as __commonJSMin } from "./chunk-ChKA3wi6.js";
 //#region ../../node_modules/.pnpm/ws@8.20.0/node_modules/ws/lib/constants.js
 var require_constants = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	const BINARY_TYPES = [
@@ -16999,5 +16999,5 @@ if (await isDevToolsReachable()) {
 //#endregion
 export {};
 
-//# sourceMappingURL=devtools-DPRVRu3S.js.map
-//# debugId=de65e4d1-46e8-5d95-92bc-2e867613f003
+//# sourceMappingURL=devtools-BiC-AP3B.js.map
+//# debugId=27aef5e9-9c40-5fb8-a52c-e639ba9a5c8b

package/dist/{exit-gracefully-Cjv5kC_l.js → exit-gracefully-CYfF0GCJ.js}

@@ -1,8 +1,9 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="bd95a7a7-0356-5ed5-91a0-95e7f28f5b63")}catch(e){}}();
-import { d as isJsonModeActive, m as writeJsonErrorReport } from "./record-metric-CMe2d1Xv.js";
-import { s as shutdownTelemetry } from "./unref-stdin-Cxhw67r6.js";
-import { i as flushSentry, n as buildFooterLinkLines, r as activeScanAbortRegistry, t as buildSectionDivider } from "./build-section-divider-Vz879zXD.js";
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="75db7d9b-a9cc-560e-accb-490885713cf6")}catch(e){}}();
+import { d as isJsonModeActive, m as writeJsonCancellationReport } from "./record-metric-DVm5sVu2.js";
+import { n as shutdownTelemetry } from "./telemetry-runtime-B45Ns9aS.js";
+import { n as buildFooterLinkLines, r as flushSentry, t as buildSectionDivider } from "./build-section-divider-BpENvzwG.js";
+import { t as activeScanAbortRegistry } from "./active-scan-abort-registry-DwG6tSPy.js";
 //#region src/cli/utils/active-tui-renderer.ts
 let activeTuiRenderer = null;
 const registerActiveTuiRenderer = (renderer) => {
@@ -22,14 +23,15 @@ let didStartExiting = false;
 const exitGracefully = () => {
 	if (didStartExiting) return process.exit(130);
 	didStartExiting = true;
+	let activeScanCleanup = Promise.resolve();
 	try {
-		activeScanAbortRegistry.abortAll();
+		activeScanCleanup = activeScanAbortRegistry.abortAll();
 	} catch {}
 	try {
 		preserveActiveTuiRendererOutput();
 	} catch {}
 	try {
-		if (isJsonModeActive()) writeJsonErrorReport(/* @__PURE__ */ new Error("Scan cancelled by user (SIGINT/SIGTERM)"));
+		if (isJsonModeActive()) writeJsonCancellationReport();
 		else console.log([
 			"",
 			"Cancelled.",
@@ -39,10 +41,14 @@ const exitGracefully = () => {
 			...buildFooterLinkLines({ shareUrl: null })
 		].join("\n"));
 	} catch {}
-	Promise.all([flushSentry(), shutdownTelemetry()]).finally(() => process.exit(130));
+	Promise.all([
+		activeScanCleanup,
+		flushSentry(),
+		shutdownTelemetry()
+	]).finally(() => process.exit(130));
 };
 //#endregion
 export { registerActiveTuiRenderer as n, exitGracefully as t };
 
-//# sourceMappingURL=exit-gracefully-Cjv5kC_l.js.map
-//# debugId=bd95a7a7-0356-5ed5-91a0-95e7f28f5b63
+//# sourceMappingURL=exit-gracefully-CYfF0GCJ.js.map
+//# debugId=75db7d9b-a9cc-560e-accb-490885713cf6