react-doctor 0.9.15-dev.3242a81 → 0.9.15-dev.8ed70df

package/README.md

@@ -59,6 +59,9 @@ This adds the workflow, scans every pull request, and posts a summary comment. C
 
 You can configure which rules to run and how to run them in `doctor.config.ts`.
 
+The pnpm hardening check is off by default. To enable it, set
+`rules: { "react-doctor/require-pnpm-hardening": "warn" }` in your config.
+
 [Learn more →](https://react.doctor/docs/configuration/config-files)
 
 ## Runtime performance traces
@@ -88,6 +91,28 @@ pages. It closes blank startup tabs before tracing and closes its scan tab after
 browser stays open. The trace is stored locally and is never uploaded, but it can contain page
 URLs, source paths, and React profiling details. Treat it as sensitive application data.
 
+## Scan scope
+
+`--scope changed --base <ref>` reports only new findings in files touched by the diff. It scans those files at the base and in the current tree. Uncommitted changes use `HEAD` when the base is the current branch.
+
+A match uses the rule ID, file path (following Git renames), diagnostic message, and a fingerprint of the flagged source span with whitespace normalized. Line and column numbers do not affect the match. Each base finding matches at most one current finding: two matching findings at base and three now produce one new finding. Changes elsewhere in a function do not change a finding's fingerprint. Changed flagged code or a changed message can produce a new finding.
+
+New files have no base findings. Add `--include-untracked` to scan untracked files too. Deleted files and removed findings are not reported. `--blocking`, the exit code, and summary counts use only the unmatched current findings. The score still describes the current scan.
+
+Use `--scope lines` to report findings on changed lines, or `--scope files` to report all findings in changed files. The default `--scope full` scans the full project.
+
+Save a full scan once, then reuse it as the comparison base:
+
+```bash
+react-doctor --json --blocking none > base-report.json
+react-doctor --baseline base-report.json --blocking warning
+react-doctor --scope changed --baseline base-report.json --blocking warning
+```
+
+`--baseline` uses the same matching rules and skips the base scan. Use the same React Doctor version, rules, and scan options for both scans. The saved report must be a complete scan with fingerprints, not a previous comparison result. Regenerate older reports that lack fingerprints. Without Git, a saved report still works; rename matching requires Git history for the report's `sourceRevision`. With `--scope changed`, Git limits the scan to changed files when available; otherwise the full current tree is compared.
+
+JSON reports keep schema version 3 and add optional diagnostic `fingerprint` and report `sourceRevision` fields. The `baseline` block records `source` (`"base"` or `"baseline"`), `baseRef`, `baselineFile` for saved reports, and `matchedCount`. `newCount` equals the summary finding count.
+
 ## Telemetry
 
 The CLI reports crashes, basic run traces, and anonymous usage counters to [Sentry](https://sentry.io/) to help us fix bugs and prioritize work.

package/dist/{build-section-divider-B-Bbahk_.js → build-section-divider-BSEx7sis.js}

@@ -1,7 +1,7 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="c53b4ec0-7ac7-5ffa-bdd1-c1dc074e27ea")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="f514ec13-e923-5fb4-9160-12c362951239")}catch(e){}}();
 import { bt as DOCS_URL, lt as CANONICAL_GITHUB_URL } from "./constants-DJ3RtEMu.js";
-import { Ot as highlighter } from "./record-metric-DUV0U_Gf.js";
+import { kt as highlighter } from "./record-metric-Do1JAZVB.js";
 //#region src/cli/utils/resolve-measure-width.ts
 const resolveClampedWidth = (input) => {
 	const terminalColumns = process.stdout.columns;
@@ -77,5 +77,5 @@ const buildSectionDivider = () => highlighter.dim(`${DIVIDER_INDENT}${"─".repe
 //#endregion
 export { buildFooterLinkLines as n, buildSectionDivider as t };
 
-//# sourceMappingURL=build-section-divider-B-Bbahk_.js.map
-//# debugId=c53b4ec0-7ac7-5ffa-bdd1-c1dc074e27ea
+//# sourceMappingURL=build-section-divider-BSEx7sis.js.map
+//# debugId=f514ec13-e923-5fb4-9160-12c362951239

package/dist/{ci-D_GhoEkY.js → ci-D4R9kdc2.js}

@@ -1,16 +1,16 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="6bebe060-0f7b-51c9-afb6-d5a47c42a01f")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="cfbd6c92-741c-53ee-9fe2-02bf2f83f79c")}catch(e){}}();
 import { i as __toESM, r as __require, t as __commonJSMin } from "./chunk-ChKA3wi6.js";
 import { kt as GITHUB_ACTIONS_SETUP_URL, u as METRIC, ut as CI_URL } from "./constants-DJ3RtEMu.js";
-import { Ot as highlighter, t as recordCount, yn as runSync } from "./record-metric-DUV0U_Gf.js";
-import { o as isExpectedUserError } from "./telemetry-runtime-o4N789Mp.js";
-import { n as handleUserError, t as handleError } from "./handle-error-JId9eFQ_.js";
-import { t as reportErrorToSentry } from "./report-error-Df6kpdn5.js";
-import { N as cliLogger, c as spinner, n as findNearestPackageDirectory } from "./install-doctor-script-ByhqWGm4.js";
-import { a as readReactDoctorWorkflow, d as detectDefaultBranch, f as runCommand, l as prompts, n as getReactDoctorWorkflowPath, s as upgradeWorkflowActionToV2, t as buildWorkflowContent } from "./install-github-workflow-CMVYSVGv.js";
-import { a as isValidBlockingLevel, c as openWorkflowPullRequest, l as stageWorkflowFile, n as isScopeValue } from "./resolve-scope-BQLYQkzz.js";
-import { t as shouldSkipPrompts } from "./should-skip-prompts-DaKPFC6p.js";
-import { t as printBrandedHeader } from "./print-branded-header-ToEzN9wS.js";
+import { kt as highlighter, t as recordCount, xn as runSync } from "./record-metric-Do1JAZVB.js";
+import { o as isExpectedUserError } from "./telemetry-runtime-D3teullu.js";
+import { n as handleUserError, t as handleError } from "./handle-error-RLjKeLDA.js";
+import { t as reportErrorToSentry } from "./report-error-DL7M0AGh.js";
+import { N as cliLogger, c as spinner, n as findNearestPackageDirectory } from "./install-doctor-script-B84ViKF6.js";
+import { a as readReactDoctorWorkflow, d as detectDefaultBranch, f as runCommand, l as prompts, n as getReactDoctorWorkflowPath, s as upgradeWorkflowActionToV2, t as buildWorkflowContent } from "./install-github-workflow-BunRUQaF.js";
+import { a as isValidBlockingLevel, c as openWorkflowPullRequest, l as stageWorkflowFile, n as isScopeValue } from "./resolve-scope-_R2u_rWR.js";
+import { t as shouldSkipPrompts } from "./should-skip-prompts-DKwyzEkM.js";
+import { t as printBrandedHeader } from "./print-branded-header-BNKQT5ZQ.js";
 import * as fs$1 from "node:fs";
 import * as path$1 from "node:path";
 //#region src/cli/utils/ci/ci-provider.ts
@@ -7499,5 +7499,5 @@ const ciConfigAction = (options) => runCiCommand("config", runCiConfig, options)
 //#endregion
 export { ciConfigAction, ciInstallAction, ciUpgradeAction };
 
-//# sourceMappingURL=ci-D_GhoEkY.js.map
-//# debugId=6bebe060-0f7b-51c9-afb6-d5a47c42a01f
+//# sourceMappingURL=ci-D4R9kdc2.js.map
+//# debugId=cfbd6c92-741c-53ee-9fe2-02bf2f83f79c

package/dist/cli.js

@@ -1,14 +1,14 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="d3696fb6-15d5-5a85-b708-3f058c610990")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="cc8f2e34-2b12-55f0-907a-f0131fd67226")}catch(e){}}();
 import { i as __toESM, r as __require, t as __commonJSMin } from "./chunk-ChKA3wi6.js";
 import { lt as CANONICAL_GITHUB_URL, ut as CI_URL } from "./constants-DJ3RtEMu.js";
 import "./start-scan-preamble-DZknzhHU.js";
-import { In as isDirectory, Ot as highlighter, Rn as isFile, S as isDebugFlagEnabled, Yt as setColorEnabled, _ as VERSION, d as isJsonModeActive, h as writeJsonErrorReport, ht as filterSourceFiles, i as isTelemetryEnabled, kt as isPathInsideDirectory, y as CliInputError } from "./record-metric-DUV0U_Gf.js";
-import { a as initializeSentry, n as shutdownTelemetry, o as isExpectedUserError, r as flushSentry } from "./telemetry-runtime-o4N789Mp.js";
-import { t as exitGracefully } from "./exit-gracefully-BTVhlyoR.js";
-import { n as handleUserError, t as handleError } from "./handle-error-JId9eFQ_.js";
+import { At as isPathInsideDirectory, Bn as isFile, Rn as isDirectory, S as isDebugFlagEnabled, Xt as setColorEnabled, _ as VERSION, d as isJsonModeActive, h as writeJsonErrorReport, ht as filterSourceFiles, i as isTelemetryEnabled, kt as highlighter, y as CliInputError } from "./record-metric-Do1JAZVB.js";
+import { a as initializeSentry, n as shutdownTelemetry, o as isExpectedUserError, r as flushSentry } from "./telemetry-runtime-D3teullu.js";
+import { t as exitGracefully } from "./exit-gracefully-DkeS8hHp.js";
+import { n as handleUserError, t as handleError } from "./handle-error-RLjKeLDA.js";
 import { n as getLastRunTraceId } from "./active-run-trace-Dewycxda.js";
-import { t as reportErrorToSentry } from "./report-error-Df6kpdn5.js";
+import { t as reportErrorToSentry } from "./report-error-DL7M0AGh.js";
 import { t as toForwardSlashes } from "./path-format-By20mo8A.js";
 import { t as unrefStdin } from "./unref-stdin-D-NZBFpg.js";
 import * as path$1 from "node:path";
@@ -3232,6 +3232,7 @@ const ROOT_FLAG_SPEC = {
 	]),
 	longOptionsWithRequiredValues: new Set([
 		"--base",
+		"--baseline",
 		"--category",
 		"--changed-files-from",
 		"--blocking",
@@ -3557,9 +3558,9 @@ ${highlighter.dim("Learn more:")}
   ${highlighter.info(CI_URL)}
 `;
 const collectCategoryOption = (value, previousValues) => [...previousValues ?? [], value];
-const program = new Command().name("react-doctor").description("Diagnose React codebase health").version(VERSION, "-v, --version", "display the version number").argument("[paths...]", "one project directory or source file paths to scan").option("--lint", "enable linting").option("--no-lint", "skip linting").addOption(new Option("--dead-code").hideHelp()).addOption(new Option("--no-dead-code").hideHelp()).option("--supply-chain", "enable the dependency supply-chain scan (default)").option("--no-supply-chain", "skip the dependency supply-chain scan (Socket.dev dependency health checks)").option("--verbose", "show every rule and per-file details (default shows top 3 rules)").option("--debug", "force a Sentry trace and print its id at the end (paste it into a bug report)").option("--output-dir <dir>", "directory for the full diagnostics dump (default: a temp folder)").option("--score", "output only the score").option("--json", "output a single structured JSON report (suppresses other output)").option("--json-compact", "with --json, emit compact JSON (no indentation)").option("--json-out <path>", "with --json, write the report to a file instead of stdout").option("--no-cache", "disable all scan caches for this run").option("-y, --yes", "skip prompts, scan all workspace projects").option("--no-parallel", "lint serially with one worker (default: parallel across CPU cores; set the worker count with REACT_DOCTOR_PARALLEL)").option("--project <name>", "select projects: workspace names or directory paths (comma-separated for multiple); overrides the `projects` config field").option("--scope <value>", "how much supported JS/TS and inline HTML script source to scan/report: full (default), files, changed (only new issues vs base), or lines (issues whose source spans touch changed lines)").option("--base <ref>", "base git ref for files/changed/lines scope (auto-detected when omitted)").option("--include-untracked", "with --scope files/changed/lines, also scan ordinary untracked files (respects .gitignore)").addOption(new Option("--diff [base]", "[deprecated] alias for --scope changed (pass `false` to force a full scan)").hideHelp()).addOption(new Option("--changed-files-from <file>", "scan source files listed in a newline-delimited changed-files file").hideHelp()).option("--no-score", "skip the score API, the share URL, and crash reporting").addOption(new Option("--category <category>", "only show diagnostics in a category (repeatable; e.g. Security)").argParser(collectCategoryOption)).option("--no-telemetry", "alias for --no-score (skip the score API, share URL, and crash reporting)").option("--staged", "scan only staged (git index) files for pre-commit hooks (honors --project and config `projects`; exits 0 when nothing is staged)").option("--max-duration <seconds>", MAX_DURATION_OPTION_DESCRIPTION).option("--blocking <level>", "severity that fails CI: error (default), warning, or none (advisory)").addOption(new Option("--fail-on <level>", "[deprecated] alias for --blocking <level>").hideHelp()).option("--no-respect-inline-disables", "audit mode: neutralize inline lint suppressions before scanning").option("--warnings", "show warning-severity diagnostics (default)").option("--no-warnings", "hide warning-severity diagnostics (errors only)").option("--color", "force colored output").option("--no-color", "disable colored output (also honors NO_COLOR)").addHelpText("after", renderRootHelpEpilog);
+const program = new Command().name("react-doctor").description("Diagnose React codebase health").version(VERSION, "-v, --version", "display the version number").argument("[paths...]", "one project directory or source file paths to scan").option("--lint", "enable linting").option("--no-lint", "skip linting").addOption(new Option("--dead-code").hideHelp()).addOption(new Option("--no-dead-code").hideHelp()).option("--supply-chain", "enable the dependency supply-chain scan (default)").option("--no-supply-chain", "skip the dependency supply-chain scan (Socket.dev dependency health checks)").option("--verbose", "show every rule and per-file details (default shows top 3 rules)").option("--debug", "force a Sentry trace and print its id at the end (paste it into a bug report)").option("--output-dir <dir>", "directory for the full diagnostics dump (default: a temp folder)").option("--score", "output only the score").option("--json", "output a single structured JSON report (suppresses other output)").option("--json-compact", "with --json, emit compact JSON (no indentation)").option("--json-out <path>", "with --json, write the report to a file instead of stdout").option("--no-cache", "disable all scan caches for this run").option("-y, --yes", "skip prompts, scan all workspace projects").option("--no-parallel", "lint serially with one worker (default: parallel across CPU cores; set the worker count with REACT_DOCTOR_PARALLEL)").option("--project <name>", "select projects: workspace names or directory paths (comma-separated for multiple); overrides the `projects` config field").option("--scope <value>", "how much supported JS/TS and inline HTML script source to scan/report: full (default), files, changed (only new issues vs base), or lines (issues whose source spans touch changed lines)").option("--baseline <report.json>", "report only new issues compared with a saved JSON report").option("--base <ref>", "base git ref for files/changed/lines scope (auto-detected when omitted)").option("--include-untracked", "with --scope files/changed/lines, also scan ordinary untracked files (respects .gitignore)").addOption(new Option("--diff [base]", "[deprecated] alias for --scope changed (pass `false` to force a full scan)").hideHelp()).addOption(new Option("--changed-files-from <file>", "scan source files listed in a newline-delimited changed-files file").hideHelp()).option("--no-score", "skip the score API, the share URL, and crash reporting").addOption(new Option("--category <category>", "only show diagnostics in a category (repeatable; e.g. Security)").argParser(collectCategoryOption)).option("--no-telemetry", "alias for --no-score (skip the score API, share URL, and crash reporting)").option("--staged", "scan only staged (git index) files for pre-commit hooks (honors --project and config `projects`; exits 0 when nothing is staged)").option("--max-duration <seconds>", MAX_DURATION_OPTION_DESCRIPTION).option("--blocking <level>", "severity that fails CI: error (default), warning, or none (advisory)").addOption(new Option("--fail-on <level>", "[deprecated] alias for --blocking <level>").hideHelp()).option("--no-respect-inline-disables", "audit mode: neutralize inline lint suppressions before scanning").option("--warnings", "show warning-severity diagnostics (default)").option("--no-warnings", "hide warning-severity diagnostics (errors only)").option("--color", "force colored output").option("--no-color", "disable colored output (also honors NO_COLOR)").addHelpText("after", renderRootHelpEpilog);
 program.action(async (positionalPaths = [], flags) => {
-	const { runScanCommand } = await import("./scan-Cuyc4IC8.js");
+	const { runScanCommand } = await import("./scan-B4oVxvqa.js");
 	return runScanCommand({
 		...resolvePositionalScanInput(positionalPaths),
 		flags,
@@ -3567,75 +3568,75 @@ program.action(async (positionalPaths = [], flags) => {
 	});
 });
 program.command("design [directory]").description("Run only the focused UI design diagnostics").addHelpText("after", renderDesignHelpEpilog).action(async (directory, _options, command) => {
-	const { designAction } = await import("./design-B8EMFKlN.js");
+	const { designAction } = await import("./design-T850ewH9.js");
 	return designAction(directory ?? ".", command.optsWithGlobals());
 });
 program.command("scan").description("Scan a React interaction in Chrome until you press Enter").argument("[url]", "HTTP(S) URL of the running React app; detects local apps when omitted").option("-f, --format <format>", "report format: text, json, or jsonl", "text").option("--cdp <url>", "reuse Chrome at this remote-debugging endpoint").option("--trace-out <path>", "save the compressed .json.gz DevTools trace at this path").addHelpText("after", renderRuntimeScanHelpEpilog).action(async (url, options) => {
-	const { runtimeScanAction } = await import("./runtime-scan-CxErJEVf.js");
+	const { runtimeScanAction } = await import("./runtime-scan-HiSmF8di.js");
 	return runtimeScanAction(url, options);
 });
 program.command("why <location>").description("Explain why a rule fired (or why a suppression didn't apply) at a file:line").option("--project <name>", "select projects: workspace names or directory paths (comma-separated for multiple)").option("-c, --cwd <cwd>", "working directory", process.cwd()).option("--color", "force colored output").option("--no-color", "disable colored output (also honors NO_COLOR)").action(async (location, options) => {
-	const { whyAction } = await import("./why-BDgcBrL3.js");
+	const { whyAction } = await import("./why-BV74fXYk.js");
 	return whyAction(location, options);
 });
 program.command("install").alias("setup").description("Install the react-doctor skill into your coding agents and optional git hook").option("-y, --yes", "skip prompts, install for all detected agents").option("--dry-run", "show what would be installed without writing files").option("--agent-hooks", "install end-of-turn agent hooks for Claude Code and Cursor").option("-c, --cwd <cwd>", "working directory", process.cwd()).option("--color", "force colored output").option("--no-color", "disable colored output (also honors NO_COLOR)").addHelpText("after", renderInstallHelpEpilog).action(async (options, command) => {
-	const { installAction } = await import("./install-bAES9fz_.js");
+	const { installAction } = await import("./install-BeahaWiL.js");
 	return installAction(options, command);
 });
 const providerOption = ["--provider <name>", "ci provider: github-actions or gitlab-ci (auto-detected by default)"];
 const prOption = ["--pr", "open a pull request with the change instead of writing it to the working tree"];
 const ci = program.command("ci").description("Set up, upgrade, and configure React Doctor in your CI");
 ci.command("install").description("Add a CI workflow that scans every pull request").option(...providerOption).option(...prOption).option("--blocking <level>", "gate level: none (advisory, default), warning, or error").option("--scope <value>", "what a pull-request scan reports: changed (default), files, lines, full").option("--comment", "post a summary comment on each pull request").option("--no-comment", "don't post a summary comment").option("--review-comments", "add inline review comments on changed lines").option("--no-review-comments", "don't add inline review comments").option("--commit-status", "report a commit status with the health score").option("--no-commit-status", "don't report a commit status").option("-y, --yes", "skip prompts; use the defaults").option("-c, --cwd <cwd>", "working directory", process.cwd()).option("--color", "force colored output").option("--no-color", "disable colored output (also honors NO_COLOR)").addHelpText("after", renderCiHelpEpilog).action(async (_options, command) => {
-	const { ciInstallAction } = await import("./ci-D_GhoEkY.js");
+	const { ciInstallAction } = await import("./ci-D4R9kdc2.js");
 	return ciInstallAction(command.optsWithGlobals());
 });
 ci.command("config").description("Change the gate, scan scope, and pull-request reporting").option(...providerOption).option("--blocking <level>", "gate level: none (advisory), warning, or error").option("--scope <value>", "what a pull-request scan reports: changed, files, lines, or full").option("--comment", "post a summary comment on each pull request").option("--no-comment", "don't post a summary comment").option("--review-comments", "add inline review comments on changed lines").option("--no-review-comments", "don't add inline review comments").option("--commit-status", "report a commit status with the health score").option("--no-commit-status", "don't report a commit status").option("-y, --yes", "skip prompts; print the current settings").option("-c, --cwd <cwd>", "working directory", process.cwd()).option("--color", "force colored output").option("--no-color", "disable colored output (also honors NO_COLOR)").action(async (_options, command) => {
-	const { ciConfigAction } = await import("./ci-D_GhoEkY.js");
+	const { ciConfigAction } = await import("./ci-D4R9kdc2.js");
 	return ciConfigAction(command.optsWithGlobals());
 });
 ci.command("upgrade").description("Upgrade the CI workflow to the action's current major").option(...providerOption).option(...prOption).option("-y, --yes", "skip prompts").option("-c, --cwd <cwd>", "working directory", process.cwd()).option("--color", "force colored output").option("--no-color", "disable colored output (also honors NO_COLOR)").action(async (_options, command) => {
-	const { ciUpgradeAction } = await import("./ci-D_GhoEkY.js");
+	const { ciUpgradeAction } = await import("./ci-D4R9kdc2.js");
 	return ciUpgradeAction(command.optsWithGlobals());
 });
 program.command("version").description("show the version with Node and platform info").option("--color", "force colored output").option("--no-color", "disable colored output (also honors NO_COLOR)").action(async () => {
-	const { versionAction } = await import("./version-CtgKUicn.js");
+	const { versionAction } = await import("./version-Kj44qNuh.js");
 	return versionAction();
 });
 const rules = program.command("rules").description("List, explain, and configure which React Doctor rules run");
 rules.command("list").description("List rules and the severity they run at under your config").option("--category <name>", "only show rules in a category (e.g. Performance)").option("--tag <name>", "only show rules with a tag (e.g. design, test-noise)").option("--framework <name>", "only show rules for a framework (e.g. global, nextjs)").option("--configured", "only show rules your config has changed from the default").option("--json", "output a structured JSON array").option("-c, --cwd <cwd>", "working directory", process.cwd()).action(async (_options, command) => {
-	const { rulesListAction } = await import("./rules-BvI82y2z.js");
+	const { rulesListAction } = await import("./rules-DD_Jp7ZA.js");
 	return rulesListAction(command.optsWithGlobals());
 });
 rules.command("explain <rule>").description("Explain why a rule matters, its current severity, and how to configure it").option("--json", "output a structured JSON object").option("-c, --cwd <cwd>", "working directory", process.cwd()).action(async (rule, _options, command) => {
-	const { rulesExplainAction } = await import("./rules-BvI82y2z.js");
+	const { rulesExplainAction } = await import("./rules-DD_Jp7ZA.js");
 	return rulesExplainAction(rule, command.optsWithGlobals());
 });
 rules.command("set <rule> <severity>").description("Set a rule's severity: off, warn, or error").option("-c, --cwd <cwd>", "working directory", process.cwd()).action(async (rule, severity, _options, command) => {
-	const { rulesSetAction } = await import("./rules-BvI82y2z.js");
+	const { rulesSetAction } = await import("./rules-DD_Jp7ZA.js");
 	return rulesSetAction(rule, severity, command.optsWithGlobals());
 });
 rules.command("enable <rule>").description("Enable a rule at its recommended severity (or pass --severity)").option("--severity <level>", "severity to enable at: warn or error").option("-c, --cwd <cwd>", "working directory", process.cwd()).action(async (rule, _options, command) => {
-	const { rulesEnableAction } = await import("./rules-BvI82y2z.js");
+	const { rulesEnableAction } = await import("./rules-DD_Jp7ZA.js");
 	return rulesEnableAction(rule, command.optsWithGlobals());
 });
 rules.command("disable <rule>").description("Disable a rule so it never runs").option("-c, --cwd <cwd>", "working directory", process.cwd()).action(async (rule, _options, command) => {
-	const { rulesDisableAction } = await import("./rules-BvI82y2z.js");
+	const { rulesDisableAction } = await import("./rules-DD_Jp7ZA.js");
 	return rulesDisableAction(rule, command.optsWithGlobals());
 });
 rules.command("category <category> <severity>").description("Set the severity for a whole category (off, warn, error)").option("-c, --cwd <cwd>", "working directory", process.cwd()).action(async (category, severity, _options, command) => {
-	const { rulesCategoryAction } = await import("./rules-BvI82y2z.js");
+	const { rulesCategoryAction } = await import("./rules-DD_Jp7ZA.js");
 	return rulesCategoryAction(category, severity, command.optsWithGlobals());
 });
 rules.command("ignore-tag <tag>").description("Skip a whole rule family by tag before linting (e.g. design)").option("-c, --cwd <cwd>", "working directory", process.cwd()).action(async (tag, _options, command) => {
-	const { rulesIgnoreTagAction } = await import("./rules-BvI82y2z.js");
+	const { rulesIgnoreTagAction } = await import("./rules-DD_Jp7ZA.js");
 	return rulesIgnoreTagAction(tag, command.optsWithGlobals());
 });
 rules.command("unignore-tag <tag>").description("Stop ignoring a tag previously skipped via ignore-tag").option("-c, --cwd <cwd>", "working directory", process.cwd()).action(async (tag, _options, command) => {
-	const { rulesUnignoreTagAction } = await import("./rules-BvI82y2z.js");
+	const { rulesUnignoreTagAction } = await import("./rules-DD_Jp7ZA.js");
 	return rulesUnignoreTagAction(tag, command.optsWithGlobals());
 });
 program.command("experimental-tui [directory]", { hidden: true }).description("[experimental] interactive, scrollable scan report").option("--blocking <level>", "severity that fails CI: error (default), warning, or none (advisory)").option("--color", "force colored output").option("--no-color", "disable colored output (also honors NO_COLOR)").addOption(new Option("--no-dead-code").hideHelp()).option("--no-supply-chain", "skip the dependency supply-chain scan").option("--score", "only print the numeric score (for scripts and CI)").option("--no-score", "skip the score API, the share URL, and crash reporting").option("--no-cache", "disable all scan caches for this run").option("--max-duration <seconds>", MAX_DURATION_OPTION_DESCRIPTION).option("-p, --project <names>", "scan specific workspace projects (comma-separated, or *)").option("-y, --yes", "skip the project prompt and scan every discovered project").action(async (directory = ".", _localOptions, command) => {
-	const { runScanCommand } = await import("./scan-Cuyc4IC8.js");
+	const { runScanCommand } = await import("./scan-B4oVxvqa.js");
 	return runScanCommand({
 		directory,
 		flags: command.optsWithGlobals(),
@@ -3675,4 +3676,4 @@ Promise.resolve().then(() => assertNoRemovedFlags(process.argv)).then(() => prog
 export {};
 
 //# sourceMappingURL=cli.js.map
-//# debugId=d3696fb6-15d5-5a85-b708-3f058c610990
+//# debugId=cc8f2e34-2b12-55f0-907a-f0131fd67226

package/dist/constants-DJ3RtEMu.js

@@ -1,5 +1,5 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="3b95005b-24cd-50cf-8561-851ccaa5a388")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="b07ab884-a667-5937-9ca2-c09876a82e13")}catch(e){}}();
 import { createRequire } from "node:module";
 import * as fs$1 from "node:fs";
 import fs from "node:fs";
@@ -1032,4 +1032,4 @@ const METRIC = {
 export { warmReactCompilerDetection as $, OXLINT_WORKER_JOB_END_MARKER as $t, buildGitSourceListingRequest as A, TARGET_BLANK_BROWSER_SUPPORT as An, GITHUB_VIEWER_PERMISSION_TIMEOUT_MS as At, resolveGitCommand as B, MAINTAINABILITY_DUPLICATE_JSX_RULE as Bt, SENTRY_RELEASE_PREFIX as C, SUPPLY_CHAIN_CACHE_TTL_MS as Cn, ES_TARGET_YEAR_BY_NAME as Ct, TUI_REPORT_COMPACT_MAX_ROWS as D, SUPPLY_CHAIN_PLUGIN as Dn, GENERATED_BUNDLE_FILE_PATTERN as Dt, TRACKED_FILE_FLAGS_GIT_ARGUMENTS as E, SUPPLY_CHAIN_OVERLAP_TIMEOUT_MS as En, FILE_LINT_CACHE_MAX_FILE_COUNT as Et, lowerChildProcessPriority as F, VERCEL_NEXTJS_SECURITY_RELEASE_URL as Fn, HTML_FILE_PATTERN as Ft, resolvePluginPath as G, MINIFIED_SNIFF_BYTES as Gt, resolveOxlintThreadCount as H, MAINTAINABILITY_SOURCE_FILE_PATTERN as Ht, prefetchGitCommand as I, getCategoryImpact as In, IGNORED_DIRECTORIES as It, resolveTsConfigRelativePath as J, OXLINT_NODE_REQUIREMENT as Jt, resolveReactDoctorCacheDir as K, OCCURRENCE_MATCHED_CATEGORIES as Kt, prespawnOxlintWorkers as L, JSX_DUPLICATION_SOURCE_FILE_PATTERN as Lt, buildOxlintWorkerSpawnSpec as M, TELEMETRY_SHUTDOWN_TIMEOUT_MS as Mn, GIT_LS_FILES_MAX_BUFFER_BYTES as Mt, discardPrefetchedGitCommands as N, TSCONFIG_FILENAMES as Nn, GIT_SHOW_MAX_BUFFER_BYTES as Nt, TUI_REPORT_DETAIL_WIDTH_FRACTION as O, SUPPLY_CHAIN_RULE as On, GENERATED_SOURCE_DIRECTORY_PATTERN as Ot, killUnadoptedOxlintWorkers as P, TYPESCRIPT_DECLARATION_FILE_PATTERN as Pn, GIT_SOURCE_LISTING_ARGUMENTS as Pt, takeReactCompilerDetection as Q, OXLINT_SPLIT_TOTAL_BUDGET_MS as Qt, readSystemConcurrencyFacts as R, JSX_FILE_PATTERN as Rt, SENTRY_FLUSH_TIMEOUT_MS as S, SUPPLY_CHAIN_CACHE_SUBDIR as Sn, ENTERPRISE_CONTACT_URL as St, STAGED_SNAPSHOT_ADDITIONAL_CONFIG_FILENAMES as T, SUPPLY_CHAIN_IGNORED_PACKAGES as Tn, FILE_LINT_CACHE_FILENAME as Tt, resolveOxlintToolchainVersions as U, MAX_GLOB_PATTERN_LENGTH_CHARS as Ut, resolveOxlintBinary as V, MAINTAINABILITY_PLUGIN as Vt, resolveOxlintWorkerRuntime as W, MILLISECONDS_PER_SECOND as Wt, spawnOxlintWorkerProcess as X, OXLINT_OUTPUT_MAX_BYTES as Xt, setChildProcessRef as Y, OXLINT_OOM_RESCUE_BUDGET_MS as Yt, takePrespawnedOxlintWorker as Z, OXLINT_SPAWN_TIMEOUT_MS as Zt, SCAN_PREAMBLE_SKIP_FLAGS as _, SOURCE_FILE_PATTERN as _n, DIAGNOSTIC_CATEGORY_BUCKETS as _t, CACHE_DISABLED_VALUES as a, REACT_ROUTER_CAPABILITY_THRESHOLDS as an, AXIOM_METRICS_DATASET_HEADER as at, SCAN_RESULT_CACHE_MAX_HASHED_FILE_SIZE_BYTES as b, SPAWN_ARGS_MAX_LENGTH_CHARS_POSIX as bn, DOCS_URL as bt, HEAD_SHA_GIT_ARGUMENTS as c, ROOT_CAUSE_GROUPABLE_RULE_KEYS as cn, CANONICAL_DISCORD_URL as ct, METRIC_DISTRIBUTION_BOUNDARIES as d, SHARE_BASE_URL as dn, COMPILER_CLEANUP_BUCKET as dt, PROJECT_ANALYSIS_WORKER_MAX_OLD_SPACE_MB as en, ABORT_EXIT_CODES as et, MINIMUM_VTE_VERSION_FOR_HYPERLINKS as f, SIDECAR_LINT_CACHE_FILENAME as fn, COMPILER_CLEANUP_RULE_KEYS as ft, RUN_GIT_MAX_BUFFER_BYTES as g, SOCKET_PACKAGE_PAGE_BASE as gn, DEFAULT_BRANCH_CANDIDATES as gt, REPOSITORY_ROOT_GIT_ARGUMENTS as h, SOCKET_FREE_USER_AGENT as hn, CONFIG_SCHEMA_URL as ht, BASELINE_FILES_TEMP_DIR_PREFIX as i, REACT_BLOG_RSC_ADVISORY_URL as in, AXIOM_DEFAULT_DOMAIN as it, buildOxlintChildEnv as j, TELEMETRY_EXPORT_INTERVAL_MS as jn, GIT_CHECK_ATTR_MAX_BUFFER_BYTES as jt, WORKTREE_STATUS_GIT_ARGUMENTS as k, TAILWIND_POSTCSS7_COMPAT_ALIAS as kn, GITHUB_ACTIONS_SETUP_URL as kt, INTERNAL_ERROR_JSON_FALLBACK as l, SCANNED_DOT_DIRECTORIES as ln, CANONICAL_GITHUB_URL as lt, REACT_DOCTOR_CONFIG_PROJECT_NAME as m, SOCKET_FREE_PURL_API_BASE as mn, CONFIG_FINGERPRINT_FILENAMES as mt, AXIOM_METRICS_DATASET as n, PROJECT_ANALYSIS_WORKER_TIMEOUT_CEILING_MS as nn, APP_ONLY_RULE_KEYS as nt, CI_TRUST_COMPANIES as o, REACT_SERVER_DOM_PACKAGES as on, AXIOM_METRICS_PATH as ot, NANOSECONDS_PER_MILLISECOND as p, SKILL_NAME as pn, CONFIG_CACHE_TTL_MS as pt, resolveScanConcurrency as q, OXLINT_IGNORED_DECLARATION_DIAGNOSTIC_CODES as qt, AXIOM_TRACES_DATASET as r, PROJECT_ANALYSIS_WORKER_TIMEOUT_MS as rn, AXIOM_DATASET_HEADER as rt, GH_DEFAULT_BRANCH_PROBE_TIMEOUT_MS as s, RECOMMENDED_PNPM_MINIMUM_RELEASE_AGE_MINUTES as sn, AXIOM_TRACES_PATH as st, AXIOM_INGEST_TOKEN as t, PROJECT_ANALYSIS_WORKER_MEMORY_BUDGET_BYTES as tn, ADOPTABLE_LINT_CONFIG_FILENAMES as tt, METRIC as u, SCORE_API_URL as un, CI_URL as ut, SCAN_RESULT_CACHE_FILENAME as v, SPAWN_ARGS_MAX_LENGTH_CHARS as vn, DISABLE_DIRECTIVE_BACKUP_DIRECTORY_SEGMENTS as vt, STAGED_FILES_TEMP_DIR_PREFIX as w, SUPPLY_CHAIN_CATEGORY as wn, FETCH_TIMEOUT_MS as wt, SENTRY_DSN as x, STAGED_FILES_PROJECT_CONFIG_FILENAMES as xn, DUPLICATE_JSX_WORKER_IDLE_TIMEOUT_MS as xt, SCAN_RESULT_CACHE_GIT_ARGUMENTS as y, SPAWN_ARGS_MAX_LENGTH_CHARS_DARWIN as yn, DOCS_RULES_BASE_URL as yt, resolveConfiguredScanConcurrency as z, MAINTAINABILITY_CATEGORY as zt };
 
 //# sourceMappingURL=constants-DJ3RtEMu.js.map
-//# debugId=3b95005b-24cd-50cf-8561-851ccaa5a388
+//# debugId=b07ab884-a667-5937-9ca2-c09876a82e13

package/dist/{design-B8EMFKlN.js → design-T850ewH9.js}

@@ -1,6 +1,6 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="756ec694-1485-54d4-abaf-f39049149c20")}catch(e){}}();
-import { t as inspectAction } from "./inspect-ClJlUcd6.js";
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="e5ffd13c-b6d2-55b0-a232-c75049f3b405")}catch(e){}}();
+import { t as inspectAction } from "./inspect-DuT3v6KA.js";
 //#region src/cli/commands/design.ts
 const designAction = async (directory, flags) => inspectAction(directory, {
 	...flags,
@@ -10,5 +10,5 @@ const designAction = async (directory, flags) => inspectAction(directory, {
 //#endregion
 export { designAction };
 
-//# sourceMappingURL=design-B8EMFKlN.js.map
-//# debugId=756ec694-1485-54d4-abaf-f39049149c20
+//# sourceMappingURL=design-T850ewH9.js.map
+//# debugId=e5ffd13c-b6d2-55b0-a232-c75049f3b405

package/dist/{exit-gracefully-BTVhlyoR.js → exit-gracefully-DkeS8hHp.js}

@@ -1,9 +1,9 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="32063c9c-da9d-5dfe-947f-19e8269c2729")}catch(e){}}();
-import { d as isJsonModeActive, m as writeJsonCancellationReport } from "./record-metric-DUV0U_Gf.js";
-import { n as shutdownTelemetry, r as flushSentry } from "./telemetry-runtime-o4N789Mp.js";
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="d971a325-9627-5365-ae95-48fe23dd3762")}catch(e){}}();
+import { d as isJsonModeActive, m as writeJsonCancellationReport } from "./record-metric-Do1JAZVB.js";
+import { n as shutdownTelemetry, r as flushSentry } from "./telemetry-runtime-D3teullu.js";
 import { t as activeScanAbortRegistry } from "./active-scan-abort-registry-CCTgal0O.js";
-import { n as buildFooterLinkLines, t as buildSectionDivider } from "./build-section-divider-B-Bbahk_.js";
+import { n as buildFooterLinkLines, t as buildSectionDivider } from "./build-section-divider-BSEx7sis.js";
 //#region src/cli/utils/active-tui-renderer.ts
 let activeTuiRenderer = null;
 const registerActiveTuiRenderer = (renderer) => {
@@ -50,5 +50,5 @@ const exitGracefully = () => {
 //#endregion
 export { registerActiveTuiRenderer as n, exitGracefully as t };
 
-//# sourceMappingURL=exit-gracefully-BTVhlyoR.js.map
-//# debugId=32063c9c-da9d-5dfe-947f-19e8269c2729
+//# sourceMappingURL=exit-gracefully-DkeS8hHp.js.map
+//# debugId=d971a325-9627-5365-ae95-48fe23dd3762

package/dist/{handle-error-JId9eFQ_.js → handle-error-RLjKeLDA.js}

@@ -1,8 +1,8 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="0f6436d5-fd1a-5ef8-9484-8b07ae867c1a")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="b73a4025-411c-54ee-9e80-13716c33dab0")}catch(e){}}();
 import { ct as CANONICAL_DISCORD_URL, lt as CANONICAL_GITHUB_URL, u as METRIC } from "./constants-DJ3RtEMu.js";
-import { Ln as isErrnoException, Ot as highlighter, _ as VERSION, _t as formatErrorChain, jt as isReactDoctorError, rn as error, t as recordCount, un as gen, vt as formatReactDoctorError, yn as runSync } from "./record-metric-DUV0U_Gf.js";
-import { c as isNpmCacheCorruptionError, l as formatEnvironmentError, s as formatNpmCacheCorruptionError, u as isEnvironmentError } from "./telemetry-runtime-o4N789Mp.js";
+import { Mt as isReactDoctorError, _ as VERSION, fn as gen, in as error, kt as highlighter, t as recordCount, vt as formatErrorChain, xn as runSync, yt as formatReactDoctorError, zn as isErrnoException } from "./record-metric-Do1JAZVB.js";
+import { c as isNpmCacheCorruptionError, l as formatEnvironmentError, s as formatNpmCacheCorruptionError, u as isEnvironmentError } from "./telemetry-runtime-D3teullu.js";
 //#region src/cli/utils/handle-error.ts
 const OTLP_ENDPOINT_ENVIRONMENT_VARIABLE = "REACT_DOCTOR_OTLP_ENDPOINT";
 const OTLP_AUTH_HEADER_ENVIRONMENT_VARIABLE = "REACT_DOCTOR_OTLP_AUTH_HEADER";
@@ -111,5 +111,5 @@ const handleUserError = (error$1, options = {}) => {
 //#endregion
 export { handleUserError as n, handleError as t };
 
-//# sourceMappingURL=handle-error-JId9eFQ_.js.map
-//# debugId=0f6436d5-fd1a-5ef8-9484-8b07ae867c1a
+//# sourceMappingURL=handle-error-RLjKeLDA.js.map
+//# debugId=b73a4025-411c-54ee-9e80-13716c33dab0

package/dist/index.d.ts

@@ -341,7 +341,7 @@ interface Pipeable {
  */
 declare const Class$1: new () => Pipeable;
 //#endregion
-//#region ../core/dist/resolve-scan-concurrency-ByLNS-wF.d.ts
+//#region ../core/dist/resolve-scan-concurrency-CVKviZpM.d.ts
 /**
  * A secondary source location attached to a diagnostic (oxlint's
  * non-primary labels). Editors render these as
@@ -363,6 +363,7 @@ interface DiagnosticRelatedLocation {
 }
 type DiagnosticFileContext = "test" | "story" | "production";
 interface Diagnostic {
+  fingerprint?: string;
   filePath: string;
   plugin: string;
   rule: string;
@@ -1271,7 +1272,10 @@ interface InspectResult {
    * carries the comparison totals for Codecov-style delta reporting.
    */
   baselineDelta?: {
-    /** The commit the base content was read from (resolved merge-base). */baseRef: string; /** Findings present at base but gone at head — resolved by the change. */
+    /** Git ref or saved report path used for comparison. */baseRef: string;
+    source?: "base" | "baseline";
+    baselineFile?: string;
+    matchedCount?: number; /** Findings present at base but gone at head — resolved by the change. */
     fixedCount: number; /** Total findings at base (over the same files), for context. */
     baseTotalCount: number; /** Pre-existing findings matched after moving to a different file. */
     crossFileMatchCount?: number;
@@ -1323,7 +1327,10 @@ interface DiffInfo {
 }
 type JsonReportMode = "full" | "diff" | "staged" | "baseline";
 interface JsonReportBaselineInfo {
-  /** Resolved base commit (merge-base) the head was compared against. */
+  source?: "base" | "baseline";
+  baselineFile?: string;
+  matchedCount?: number;
+  /** Git ref or saved report path used for comparison. */
   baseRef: string;
   /** Count of introduced findings (equals `summary.totalDiagnosticCount`). */
   newCount: number;
@@ -1447,6 +1454,7 @@ interface JsonReportV2 extends Omit<JsonReportV1, "schemaVersion" | "baselineDeg
 }
 interface JsonReportV3 extends Omit<JsonReportV1, "schemaVersion" | "projects" | "diagnostics"> {
   schemaVersion: 3;
+  sourceRevision?: string;
   baseline?: JsonReportBaselineInfo;
   projects: JsonReportProjectEntryV3[];
   diagnostics: JsonReportDiagnosticV3[];
@@ -10920,6 +10928,7 @@ interface BuildJsonReportErrorInput {
 declare const buildJsonReportError: (input: BuildJsonReportErrorInput) => JsonReport; //#endregion
 //#region src/build-json-report.d.ts
 interface BuildJsonReportInput {
+  sourceRevision?: string;
   version: string;
   directory: string;
   mode: JsonReportMode;
@@ -10935,11 +10944,7 @@ interface BuildJsonReportInput {
    * introduced findings only. Emits a `schemaVersion: 3` report with the
    * delta totals and `mode: "baseline"`.
    */
-  baseline?: {
-    baseRef: string;
-    fixedCount: number;
-    baseTotalCount: number;
-  };
+  baseline?: InspectResult["baselineDelta"];
   /**
    * True when a `changed` run was intended but its baseline delta couldn't be
    * computed (no merge base — usually a shallow CI checkout — or a failed

package/dist/index.js

@@ -1,5 +1,5 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="1ddac246-1e0a-5a02-a193-6a2c2645e7ae")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="7e9d79da-4d8f-5537-8aff-436f2fb3d131")}catch(e){}}();
 import { i as __toESM, r as __require, t as __commonJSMin } from "./chunk-ChKA3wi6.js";
 import { createRequire } from "node:module";
 import * as fs$1$2 from "node:fs";
@@ -25235,6 +25235,7 @@ var Diagnostic = class extends Class("Diagnostic")({
 	endLine: optional(Number$1),
 	endColumn: optional(Number$1),
 	category: String$1,
+	fingerprint: optional(String$1),
 	matchByOccurrence: optional(Boolean$1),
 	fileContext: optional(Literals(["test", "story"])),
 	suppressionHint: optional(String$1),
@@ -25260,6 +25261,7 @@ var JsonReportDiagnosticV3 = class extends Class("JsonReportDiagnosticV3")({
 	endLine: optional(Number$1),
 	endColumn: optional(Number$1),
 	category: String$1,
+	fingerprint: optional(String$1),
 	matchByOccurrence: optional(Boolean$1),
 	fileContext: optional(Literals(["test", "story"])),
 	suppressionHint: optional(String$1),
@@ -25373,6 +25375,9 @@ var JsonReportV1 = class extends Class("JsonReportV1")({
 }) {};
 var JsonReportBaseline = class extends Class("JsonReportBaseline")({
 	baseRef: String$1,
+	source: optional(Literals(["base", "baseline"])),
+	baselineFile: optional(String$1),
+	matchedCount: optional(Number$1),
 	newCount: Number$1,
 	fixedCount: Number$1,
 	baseTotalCount: Number$1
@@ -25402,6 +25407,7 @@ var JsonReportV2 = class extends Class("JsonReportV2")({
 }) {};
 var JsonReportV3 = class extends Class("JsonReportV3")({
 	schemaVersion: Literal(3),
+	sourceRevision: optional(String$1),
 	version: String$1,
 	ok: Boolean$1,
 	directory: String$1,
@@ -73219,12 +73225,22 @@ const parseGithubViewerPermission = (stdout) => {
 const splitNullSeparated = (value) => value.split("\0").filter((entry) => entry.length > 0);
 const parseBaselineDiffPlan = (value) => {
 	const entries = splitNullSeparated(value);
+	const renamedFiles = {};
 	const baseFiles = /* @__PURE__ */ new Set();
 	const headFiles = /* @__PURE__ */ new Set();
 	for (let entryIndex = 0; entryIndex < entries.length; entryIndex += 2) {
 		const status = entries[entryIndex];
 		const filePath = entries[entryIndex + 1];
-		if (status === void 0 || filePath === void 0 || status.length !== 1) return null;
+		if (status === void 0 || filePath === void 0) return null;
+		if (/^R\d+$/.test(status)) {
+			const headPath = entries[entryIndex + 2];
+			if (headPath === void 0) return null;
+			baseFiles.add(filePath);
+			headFiles.add(headPath);
+			renamedFiles[filePath] = headPath;
+			entryIndex += 1;
+			continue;
+		}
 		if (status === "A") {
 			headFiles.add(filePath);
 			continue;
@@ -73243,7 +73259,8 @@ const parseBaselineDiffPlan = (value) => {
 	return {
 		baseFiles: [...baseFiles],
 		headFiles: [...headFiles],
-		untrackedFiles: []
+		untrackedFiles: [],
+		...Object.keys(renamedFiles).length > 0 ? { renamedFiles } : {}
 	};
 };
 const UNTRACKED_FILE_LAST_LINE = Number.MAX_SAFE_INTEGER;
@@ -73474,7 +73491,7 @@ var Git = class Git extends Service()("react-doctor/Git") {
 						"diff",
 						"--no-ext-diff",
 						"--no-textconv",
-						"--no-renames",
+						"--find-renames",
 						"-z",
 						"--name-status",
 						"--relative",
@@ -73491,6 +73508,7 @@ var Git = class Git extends Service()("react-doctor/Git") {
 					]);
 					if (untracked.status !== 0) return null;
 					return {
+						...plan,
 						baseFiles: plan.baseFiles,
 						headFiles: plan.headFiles,
 						untrackedFiles: splitNullSeparated(untracked.stdout)
@@ -78230,9 +78248,10 @@ const runInspect = (input, hooks = {}) => gen(function* () {
 		return filteredDiagnostic === null ? none() : some(filteredDiagnostic);
 	})));
 	const applyPerElementPipeline = (rawStream) => filterPerElementPipeline(rawStream).pipe(tap((diagnostic) => reporterService.emit(diagnostic)));
+	const pnpmHardeningSeverity = resolveRuleSeverityOverride({ ruleKey: "react-doctor/require-pnpm-hardening" }, buildRuleSeverityControls(resolvedConfig.config));
 	const envCollected = yield* runCollect(applyPerElementPipeline(fromIterable$1(isDiffMode ? [] : [
 		...checkReducedMotion(scanDirectory),
-		...checkPnpmHardening(scanDirectory),
+		...pnpmHardeningSeverity === "warn" || pnpmHardeningSeverity === "error" ? checkPnpmHardening(scanDirectory) : [],
 		...checkReactServerComponentsAdvisory(scanDirectory, project, invocationCaches?.workspaceProbes ?? null),
 		...checkExpoProject(scanDirectory, project),
 		...checkReactNativeProject(scanDirectory, project)
@@ -78852,9 +78871,13 @@ const buildJsonReport = (input) => {
 	};
 	return {
 		schemaVersion: 3,
+		...input.sourceRevision ? { sourceRevision: input.sourceRevision } : {},
 		mode: input.baseline !== void 0 ? "baseline" : input.baselineDegraded && input.mode === "baseline" ? "diff" : input.mode,
 		...input.baseline ? { baseline: {
 			baseRef: input.baseline.baseRef,
+			source: input.baseline.source ?? "base",
+			baselineFile: input.baseline.baselineFile,
+			matchedCount: input.baseline.matchedCount ?? input.baseline.baseTotalCount - input.baseline.fixedCount,
 			newCount: summary.totalDiagnosticCount,
 			fixedCount: input.baseline.fixedCount,
 			baseTotalCount: input.baseline.baseTotalCount
@@ -79289,4 +79312,4 @@ const toJsonReport = (result, options) => buildJsonReport({
 export { AmbiguousProjectError, NoReactDependencyError, NotADirectoryError, PackageJsonNotFoundError, ProjectNotFoundError, ReactDoctorError, buildJsonReport, buildJsonReportError, clearCaches, defineConfig, diagnose, filterSourceFiles, getDiffInfo, hasReactRuntime, isProjectDiscoveryError, isReactDoctorError, summarizeDiagnostics, toJsonReport };
 
 //# sourceMappingURL=index.js.map
-//# debugId=1ddac246-1e0a-5a02-a193-6a2c2645e7ae
+//# debugId=7e9d79da-4d8f-5537-8aff-436f2fb3d131