react-doctor 0.9.15-dev.3242a81 → 0.9.15-dev.8ed70df

package/dist/{should-fail-scan-gate-Du7mOvEl.js → should-fail-scan-gate-Bjr43-87.js}

@@ -1,18 +1,18 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="c2e73740-419c-5dc4-ab42-cc207a6a11cc")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="93c39db1-e810-5852-8880-ad0dee772a41")}catch(e){}}();
 import { E as TRACKED_FILE_FLAGS_GIT_ARGUMENTS, Ft as HTML_FILE_PATTERN, Ht as MAINTAINABILITY_SOURCE_FILE_PATTERN, Jt as OXLINT_NODE_REQUIREMENT, K as resolveReactDoctorCacheDir, Nt as GIT_SHOW_MAX_BUFFER_BYTES, Rt as JSX_FILE_PATTERN, St as ENTERPRISE_CONTACT_URL, Wt as MILLISECONDS_PER_SECOND, _t as DIAGNOSTIC_CATEGORY_BUCKETS, c as HEAD_SHA_GIT_ARGUMENTS, dn as SHARE_BASE_URL, h as REPOSITORY_ROOT_GIT_ARGUMENTS, i as BASELINE_FILES_TEMP_DIR_PREFIX, k as WORKTREE_STATUS_GIT_ARGUMENTS, q as resolveScanConcurrency, u as METRIC, ut as CI_URL, v as SCAN_RESULT_CACHE_FILENAME } from "./constants-DJ3RtEMu.js";
 import { t as isCacheGloballyDisabled } from "./is-cache-globally-disabled-De19063F.js";
-import { $ as buildSkippedChecks, A as Git, B as Progress, Bt as materializeSourceTree, C as ACTION_INPUT_ENVIRONMENT_VARIABLES, Dt as hashFileContents, E as isCiOrCodingAgentEnvironment, En as succeed, F as Maintainability, Ft as listSourceFiles, Gt as resolveScanTarget, H as Reporter, Ht as remainingDeadlineBudgetMs, I as NodeResolver, In as isDirectory, It as listSourceFilesCooperative, K as SupplyChain, Kt as restoreLegacyThrow, L as OxlintConcurrency, Lt as listWorkspacePackages, Mn as isMonorepoRoot, N as LintPartialFailures, Nn as yieldToEventLoop, Nt as isScanComplete, O as Config, Ot as highlighter, P as Linter, Q as buildRuleSeverityControls, R as OxlintSpawnSlots, Rn as isFile, T as isCiEnvironment, Tt as hasPublishedFixRecipe, U as Score, Ut as resolveGithubActionsScoreMetadata, V as Project, Vt as mergeReactDoctorConfigs, W as SidecarLintCacheEnabled, Wt as resolveLintBatchOrdering, Xt as shouldUseMaintainabilityLayer, Y as atomicWriteJson, Z as buildRuleDocsUrl, Zt as summarizeDiagnostics, _ as VERSION, _n as provideService, an as log, at as computeConfigFingerprint, b as isNonInteractiveEnvironment, bn as sync, cn as decodeUnknownSync, ct as createInvocationCaches, d as isJsonModeActive, en as warmDuplicateJsxWorker, et as calculateScore, fn as map, ft as discoverSupportedSubprojects, gn as provideContext, hn as provide, ht as filterSourceFiles, it as collectSourceFilesByDirectory, j as InvocationCaches, jn as ParentSpan, jt as isReactDoctorError, k as Files, kt as isPathInsideDirectory, l as getRunId, lt as createNodeReadFileLinesSync, mn as promise, mt as filterPathsOutsideDirectories, n as recordDistribution, nn as Console, nt as classifyFileContext, on as warn, ot as computeDiagnosticDelta, pn as orElseSucceed, pt as filterDiagnosticsForSurface, qt as runInspect, r as toSpanAttributes, rn as error, sn as Diagnostic, st as countOptInProjectRuleSelections, t as recordCount, tn as warmOxlintWorkerPool, tt as canonicalizeUserRuleKey, un as gen, ut as createOxlintSpawnSlots, v as makeNoopConsole, vn as runPromise, w as detectRunnerOs, wn as mergeAll, wt as groupBy, xn as try_, xt as getDiagnosticRuleIdentity, y as CliInputError, yn as runSync, z as PerFileLintCacheEnabled, zt as mapWithConcurrency } from "./record-metric-DUV0U_Gf.js";
-import { t as getTelemetryContext } from "./telemetry-runtime-o4N789Mp.js";
+import { $ as buildRuleSeverityControls, A as Files, At as isPathInsideDirectory, B as PerFileLintCacheEnabled, Bn as isFile, Bt as mapWithConcurrency, C as ACTION_INPUT_ENVIRONMENT_VARIABLES, Cn as try_, E as isCiOrCodingAgentEnvironment, En as mergeAll, Et as hasPublishedFixRecipe, F as Linter, Fn as yieldToEventLoop, G as SidecarLintCacheEnabled, Gt as resolveLintBatchOrdering, H as Project, Ht as mergeReactDoctorConfigs, I as Maintainability, It as listSourceFiles, Jt as runInspect, Kt as resolveScanTarget, L as NodeResolver, Lt as listSourceFilesCooperative, M as InvocationCaches, Mt as isReactDoctorError, Nn as ParentSpan, O as Config, On as succeed, Ot as hashFileContents, P as LintPartialFailures, Pn as isMonorepoRoot, Pt as isScanComplete, Q as buildRuleDocsUrl, Qt as summarizeDiagnostics, R as OxlintConcurrency, Rn as isDirectory, Rt as listWorkspacePackages, Sn as sync, St as getDiagnosticRuleIdentity, T as isCiEnvironment, Tt as groupBy, U as Reporter, Ut as remainingDeadlineBudgetMs, V as Progress, Vt as materializeSourceTree, W as Score, Wt as resolveGithubActionsScoreMetadata, X as atomicWriteJson, Zt as shouldUseMaintainabilityLayer, _ as VERSION, _n as provide, _t as fingerprintDiagnosticEvidence, at as collectSourceFilesByDirectory, b as isNonInteractiveEnvironment, bn as runPromise, cn as Diagnostic, ct as countOptInProjectRuleSelections, d as isJsonModeActive, et as buildSkippedChecks, fn as gen, ft as discoverSupportedSubprojects, gn as promise, hn as orElseSucceed, ht as filterSourceFiles, in as error, j as Git, k as DIAGNOSTIC_DELTA_IDENTITY, kt as highlighter, l as getRunId, lt as createInvocationCaches, mn as map, mt as filterPathsOutsideDirectories, n as recordDistribution, nn as warmOxlintWorkerPool, nt as canonicalizeUserRuleKey, on as log, ot as computeConfigFingerprint, pt as filterDiagnosticsForSurface, q as SupplyChain, qt as restoreLegacyThrow, r as toSpanAttributes, rn as Console, rt as classifyFileContext, sn as warn, st as computeDiagnosticDelta, t as recordCount, tn as warmDuplicateJsxWorker, tt as calculateScore, un as decodeUnknownSync, ut as createOxlintSpawnSlots, v as makeNoopConsole, vn as provideContext, w as detectRunnerOs, xn as runSync, y as CliInputError, yn as provideService, z as OxlintSpawnSlots } from "./record-metric-Do1JAZVB.js";
+import { t as getTelemetryContext } from "./telemetry-runtime-D3teullu.js";
 import { t as activeScanAbortRegistry } from "./active-scan-abort-registry-CCTgal0O.js";
-import { n as buildFooterLinkLines, t as buildSectionDivider } from "./build-section-divider-B-Bbahk_.js";
+import { n as buildFooterLinkLines, t as buildSectionDivider } from "./build-section-divider-BSEx7sis.js";
 import { t as toForwardSlashes } from "./path-format-By20mo8A.js";
 import { t as typescriptBinding } from "./_react-doctor_require-typescript-DXQDYeWK.js";
-import { A as runGitAsync, C as isRecord, N as cliLogger, S as getPackageJsonPath, a as installReactDoctorScriptStep, c as spinner, n as findNearestPackageDirectory, o as isSpinnerSilent, s as setSpinnerSilent } from "./install-doctor-script-ByhqWGm4.js";
-import { d as detectDefaultBranch, l as prompts, r as installReactDoctorWorkflow, u as isCommandAvailable } from "./install-github-workflow-CMVYSVGv.js";
-import { a as isValidBlockingLevel, c as openWorkflowPullRequest, l as stageWorkflowFile, o as pickBlockingLevel } from "./resolve-scope-BQLYQkzz.js";
-import { n as resetSentryRunState, r as withRunSpan, t as recordSentryProjectContext } from "./with-run-span-Bgitvg5D.js";
-import { h as detectAvailableAgents, t as reportWorkflowResult } from "./report-workflow-result-CDjrtaab.js";
+import { A as runGitAsync, C as isRecord, N as cliLogger, S as getPackageJsonPath, a as installReactDoctorScriptStep, c as spinner, n as findNearestPackageDirectory, o as isSpinnerSilent, s as setSpinnerSilent } from "./install-doctor-script-B84ViKF6.js";
+import { d as detectDefaultBranch, l as prompts, r as installReactDoctorWorkflow, u as isCommandAvailable } from "./install-github-workflow-BunRUQaF.js";
+import { a as isValidBlockingLevel, c as openWorkflowPullRequest, l as stageWorkflowFile, o as pickBlockingLevel } from "./resolve-scope-_R2u_rWR.js";
+import { n as resetSentryRunState, r as withRunSpan, t as recordSentryProjectContext } from "./with-run-span-y8D-ZUGk.js";
+import { h as detectAvailableAgents, t as reportWorkflowResult } from "./report-workflow-result-BSLZylKS.js";
 import { createRequire } from "node:module";
 import * as fs$2 from "node:fs";
 import fs, { mkdtempSync, rmSync } from "node:fs";
@@ -511,6 +511,7 @@ const buildOutcomeAttributes = (input) => {
 		fixed: result.baselineDelta.fixedCount,
 		baseTotal: result.baselineDelta.baseTotalCount,
 		crossFileMatches: result.baselineDelta.crossFileMatchCount,
+		source: result.baselineDelta.source ?? "base",
 		degraded: false
 	}));
 	else if (input.gateExempt) attributes["baseline.degraded"] = true;
@@ -721,6 +722,7 @@ const resolveInspectOptions = (inputOptions, userConfig) => {
 		concurrentScan: inputOptions.concurrentScan ?? false,
 		concurrency: inputOptions.concurrency,
 		maxDurationMs: inputOptions.maxDurationMs ?? null,
+		baselineReport: inputOptions.baselineReport ?? null,
 		baseline: inputOptions.baseline ?? null,
 		changedLineRanges: inputOptions.changedLineRanges ?? null,
 		supplyChainManifestChanged: inputOptions.supplyChainManifestChanged ?? false,
@@ -1089,7 +1091,7 @@ const resolveWorkerTelemetry = (resolvedWorkerCount, pinnedConcurrency) => {
 //#region src/cli/utils/render-and-record-scan.ts
 const silentConsole$2 = makeNoopConsole();
 const deriveScope = (options) => {
-	if (options.baseline) return "changed";
+	if (options.baseline || options.baselineReport) return "changed";
 	if (options.changedLineRanges !== null) return "lines";
 	return options.includePaths.length > 0 ? "files" : "full";
 };
@@ -1516,7 +1518,11 @@ const createDiagnosticEvidenceReader = (rootDirectory, options = {}) => {
 		const sourceLines = record.sourceText.split(/\r?\n/);
 		const startLineIndex = Math.max(0, diagnostic.line - 1);
 		const endLineIndex = Math.max(startLineIndex, (diagnostic.endLine ?? diagnostic.line) - 1);
-		const evidence = sourceLines.slice(startLineIndex, endLineIndex + 1).join("\n");
+		const evidence = diagnostic.offset !== void 0 && diagnostic.length !== void 0 && diagnostic.length > 0 ? Buffer.from(record.sourceText).subarray(diagnostic.offset, diagnostic.offset + diagnostic.length).toString("utf-8") : sourceLines.slice(startLineIndex, endLineIndex + 1).map((line, index, lines) => {
+			const start = index === 0 ? Math.max(0, diagnostic.column - 1) : 0;
+			const end = index === lines.length - 1 && diagnostic.endColumn !== void 0 ? diagnostic.endColumn - 1 : void 0;
+			return line.slice(start, end);
+		}).join("\n");
 		if (!options.resolveForwardedHandlers) return evidence;
 		const propNames = new Set(evidence.match(/\bon[A-Z]\w*\b/g) ?? []);
 		if (propNames.size === 0) return evidence;
@@ -1526,23 +1532,16 @@ const createDiagnosticEvidenceReader = (rootDirectory, options = {}) => {
 	};
 };
 //#endregion
-//#region src/cli/utils/read-source-line.ts
-/**
-* Builds a cached `(filePath, line) -> source text` reader rooted at
-* `rootDirectory`, used as the fallback when construct-level diagnostic
-* evidence cannot be read. Wraps core's
-* `createNodeReadFileLinesSync` with per-file memoization + 1-indexed line
-* lookup; unreadable files / out-of-range lines return `null`.
-*/
-const createSourceLineReader = (rootDirectory) => {
-	const readFileLines = createNodeReadFileLinesSync(rootDirectory);
-	const fileLinesCache = /* @__PURE__ */ new Map();
-	return (filePath, line) => {
-		if (!fileLinesCache.has(filePath)) fileLinesCache.set(filePath, readFileLines(filePath));
-		const lines = fileLinesCache.get(filePath) ?? null;
-		if (lines === null || line < 1 || line > lines.length) return null;
-		return lines[line - 1] ?? null;
-	};
+//#region src/cli/utils/with-diagnostic-fingerprints.ts
+const withDiagnosticFingerprints = (directory, diagnostics) => {
+	const readEvidence = createDiagnosticEvidenceReader(directory);
+	return diagnostics.map((diagnostic) => {
+		const explicitIdentity = Reflect.get(diagnostic, DIAGNOSTIC_DELTA_IDENTITY);
+		return {
+			...diagnostic,
+			fingerprint: typeof explicitIdentity === "string" ? `identity:${fingerprintDiagnosticEvidence(explicitIdentity)}` : fingerprintDiagnosticEvidence(readEvidence(diagnostic) ?? "")
+		};
+	});
 };
 //#endregion
 //#region src/cli/utils/is-materializable-git-source.ts
@@ -1550,16 +1549,6 @@ const GIT_LFS_POINTER_HEADER = "version https://git-lfs.github.com/spec/v1";
 const isMaterializableGitSource = (content) => !content.includes("\0") && !content.startsWith(GIT_LFS_POINTER_HEADER);
 //#endregion
 //#region src/cli/utils/materialize-baseline-files.ts
-/**
-* Materializes the base side of the `ref` → worktree diff into
-* `tempDirectory`, mirroring the project layout plus head's config files so
-* both sides lint under the same rules. Git rename heuristics are disabled by
-* the diff planner, so an old path is retained as a base deletion while its
-* new path is a head addition. Missing head-only additions are expected, and a
-* base-only deletion that cannot be read has nothing at head to compare
-* against; only a missing path that the plan says exists on both sides makes
-* `isComplete` false.
-*/
 const materializeBaselineFiles = (input) => runPromise(gen(function* () {
 	const git = yield* Git;
 	const diffPlan = yield* git.baselineDiffPlan({
@@ -1586,9 +1575,10 @@ const materializeBaselineFiles = (input) => runPromise(gen(function* () {
 	const headFileSet = new Set(headFiles);
 	return {
 		...tree,
+		renamedFiles: diffPlan?.renamedFiles,
 		baseFiles,
 		headFiles,
-		isComplete: baseFiles.every((filePath) => materializedFiles.has(filePath) || !headFileSet.has(filePath)),
+		isComplete: baseFiles.every((filePath) => materializedFiles.has(filePath) || !headFileSet.has(diffPlan?.renamedFiles?.[filePath] ?? filePath)),
 		untrackedFiles
 	};
 }).pipe(provide(Git.layerNode)));
@@ -1613,7 +1603,7 @@ const resolveMergeBaseRef = async (directory, ref) => {
 //#region src/cli/utils/has-unlinted-surviving-base-file.ts
 const hasUnlintedSurvivingBaseFile = (input) => {
 	const analyzedBaseFiles = new Set(input.analyzedBaseFiles.map(toForwardSlashes));
-	return filterSourceFiles(input.baseLintPaths.map(toForwardSlashes)).some((filePath) => input.headFiles.has(filePath) && !analyzedBaseFiles.has(filePath));
+	return filterSourceFiles(input.baseLintPaths.map(toForwardSlashes)).some((filePath) => input.headFiles.has(input.renamedFiles?.[filePath] ?? filePath) && !analyzedBaseFiles.has(filePath));
 };
 //#endregion
 //#region src/cli/utils/run-baseline-comparison.ts
@@ -1745,7 +1735,8 @@ const runBaselineComparison = async (input) => {
 		if (countIncompleteLintFiles(baseOutput.lintPartialFailures) > 0 && hasUnlintedSurvivingBaseFile({
 			baseLintPaths: materializedLintPaths,
 			headFiles: expectedHeadFiles,
-			analyzedBaseFiles: baseOutput.analyzedFiles
+			analyzedBaseFiles: baseOutput.analyzedFiles,
+			renamedFiles: snapshot.renamedFiles
 		})) return null;
 		const hasUnscannedUntrackedSourceFiles = filterSourceFiles(filterPathsOutsideDirectories({
 			rootDirectory: input.directory,
@@ -1754,16 +1745,17 @@ const runBaselineComparison = async (input) => {
 		}).map(toForwardSlashes)).some((filePath) => !analyzedHeadFiles.has(filePath));
 		const diagnosticDelta = computeDiagnosticDelta({
 			headDiagnostics: input.headDiagnostics,
-			baseDiagnostics: baseOutput.diagnostics,
-			readHeadLine: createSourceLineReader(input.directory),
-			readBaseLine: createSourceLineReader(snapshot.tempDirectory),
-			readHeadEvidence: createDiagnosticEvidenceReader(input.directory, { resolveForwardedHandlers: true }),
-			readBaseEvidence: createDiagnosticEvidenceReader(snapshot.tempDirectory)
+			renamedFiles: snapshot.renamedFiles ?? {},
+			baseDiagnostics: withDiagnosticFingerprints(snapshot.tempDirectory, baseOutput.diagnostics),
+			readHeadLine: () => null,
+			readBaseLine: () => null
 		});
 		return {
 			displayDiagnostics: diagnosticDelta.newDiagnostics,
 			baselineDelta: {
 				baseRef: input.baselineRef,
+				source: "base",
+				matchedCount: baseOutput.diagnostics.length - diagnosticDelta.fixedCount,
 				fixedCount: hasUnscannedUntrackedSourceFiles ? 0 : diagnosticDelta.fixedCount,
 				baseTotalCount: baseOutput.diagnostics.length,
 				crossFileMatchCount: diagnosticDelta.crossFileMatchCount
@@ -2056,12 +2048,12 @@ const resolveCacheFilePath = (projectDirectory) => path.join(resolveReactDoctorC
 const readPersistedCache = (cacheFilePath) => {
 	try {
 		const parsed = JSON.parse(fs.readFileSync(cacheFilePath, "utf8"));
-		if (!isRecord(parsed) || parsed.version !== 7) return {
-			version: 7,
+		if (!isRecord(parsed) || parsed.version !== 8) return {
+			version: 8,
 			entries: []
 		};
 		if (!Array.isArray(parsed.entries)) return {
-			version: 7,
+			version: 8,
 			entries: []
 		};
 		const entries = [];
@@ -2076,12 +2068,12 @@ const readPersistedCache = (cacheFilePath) => {
 			});
 		}
 		return {
-			version: 7,
+			version: 8,
 			entries
 		};
 	} catch {
 		return {
-			version: 7,
+			version: 8,
 			entries: []
 		};
 	}
@@ -2125,14 +2117,14 @@ const resolveScanResultToolchainFingerprint = (nodeBinaryPath) => {
 	return fingerprints;
 };
 const buildScanResultCacheKey = async (input) => {
-	if (isCacheGloballyDisabled()) return null;
+	if (isCacheGloballyDisabled() || input.options.baselineReport) return null;
 	const isTrustworthyPromise = isGitIdentityTrustworthy(input.projectDirectory);
 	const repositoryIdentityPromise = resolveRepositoryCacheIdentity(input.projectDirectory, input.invocationState, runGitAsync(input.projectDirectory, REPOSITORY_ROOT_GIT_ARGUMENTS));
 	const [isTrustworthy, repositoryIdentity] = await Promise.all([isTrustworthyPromise, repositoryIdentityPromise]);
 	if (!isTrustworthy || repositoryIdentity === null) return null;
 	if (stringifyStableJson(input.userConfig) === null) return null;
 	const cacheKeyJson = stringifyStableJson({
-		schemaVersion: 7,
+		schemaVersion: 8,
 		projectIdentity: resolveProjectIdentity(input.projectDirectory),
 		headSha: repositoryIdentity.headSha,
 		worktreeFingerprint: repositoryIdentity.worktreeFingerprint,
@@ -2180,7 +2172,7 @@ const createScanResultCache = (projectDirectory) => {
 		for (const entry of readPersistedCache(cacheFilePath).entries) mergedEntries.set(entry.key, entry);
 		for (const entry of entries.values()) mergedEntries.set(entry.key, entry);
 		atomicWriteJson(cacheFilePath, {
-			version: 7,
+			version: 8,
 			entries: [...mergedEntries.values()].sort((firstEntry, secondEntry) => secondEntry.createdAtMs - firstEntry.createdAtMs).slice(0, 20)
 		});
 	};
@@ -2224,7 +2216,7 @@ const createScanResultCacheLifecycle = async (input) => {
 			recordSentryProjectContext(cachedPayload.project, input.rootSpan, { concurrentScan: input.options.concurrentScan });
 			recordCount(METRIC.projectDetected, 1);
 			const isDiffMode = input.options.includePaths.length > 0;
-			const baselineDegraded = Boolean(input.options.baseline) && isDiffMode && cachedPayload.baselineDelta === void 0;
+			const baselineDegraded = (Boolean(input.options.baselineReport) || Boolean(input.options.baseline) && isDiffMode) && cachedPayload.baselineDelta === void 0;
 			return renderAndRecordScan({
 				payload: cachedPayload,
 				options: input.options,
@@ -2395,16 +2387,36 @@ const runInspectWithRuntime = async (directory, options, userConfig, hasConfigOv
 	const lintFailureReason = lintBindingMissing ? `oxlint native binding not found for Node ${process.version}; expected one matching ${OXLINT_NODE_REQUIREMENT}` : output.lintFailureReason;
 	if (!options.scoreOnly && !options.uiLayers && !lintBindingMissing && output.didLintFail && lintFailureReason !== null) if (output.lintFailureReasonKind === "native-binding-missing") runSync(log(highlighter.gray(`  Upgrade to Node ${OXLINT_NODE_REQUIREMENT} or run: npx -p oxlint@latest react-doctor@latest`)));
 	else runSync(error(highlighter.error(lintFailureReason)));
-	let inspectDiagnostics = output.diagnostics;
+	const headDiagnostics = withDiagnosticFingerprints(directory, output.diagnostics);
+	let inspectDiagnostics = headDiagnostics;
 	let baselineDelta;
-	if (options.baseline && isDiffMode && !didLintFail && !output.didDeadCodeFail && countIncompleteLintFiles(output.lintPartialFailures) === 0) {
+	if (options.baselineReport && !didLintFail && !output.didDeadCodeFail && countIncompleteLintFiles(output.lintPartialFailures) === 0) {
+		const baseDiagnostics = options.baselineReport.diagnostics;
+		const delta = computeDiagnosticDelta({
+			headDiagnostics,
+			baseDiagnostics,
+			renamedFiles: options.baselineReport.renamedFiles ?? {},
+			readHeadLine: () => null,
+			readBaseLine: () => null
+		});
+		inspectDiagnostics = delta.newDiagnostics;
+		baselineDelta = {
+			baseRef: options.baselineReport.file,
+			source: "baseline",
+			baselineFile: options.baselineReport.file,
+			matchedCount: baseDiagnostics.length - delta.fixedCount,
+			baseTotalCount: baseDiagnostics.length,
+			fixedCount: delta.fixedCount,
+			crossFileMatchCount: delta.crossFileMatchCount
+		};
+	} else if (options.baseline && isDiffMode && !didLintFail && !output.didDeadCodeFail && countIncompleteLintFiles(output.lintPartialFailures) === 0) {
 		const comparison = await runBaselineComparison({
 			directory,
 			options,
 			userConfig,
 			configSourceDirectory,
 			headProjectInfo: output.project,
-			headDiagnostics: output.diagnostics,
+			headDiagnostics,
 			resolvedNodeBinaryPath,
 			baselineRef: options.baseline.ref,
 			baseFiles: options.baseline.baseFiles,
@@ -2419,10 +2431,10 @@ const runInspectWithRuntime = async (directory, options, userConfig, hasConfigOv
 		}
 	} else if (options.changedLineRanges !== null && isDiffMode) inspectDiagnostics = filterDiagnosticsByChangedLines({
 		directory,
-		diagnostics: output.diagnostics,
+		diagnostics: headDiagnostics,
 		changedLineRanges: options.changedLineRanges
 	});
-	const baselineDegraded = Boolean(options.baseline) && isDiffMode && baselineDelta === void 0;
+	const baselineDegraded = (Boolean(options.baselineReport) || Boolean(options.baseline) && isDiffMode) && baselineDelta === void 0;
 	const score = didLintFail ? null : output.score;
 	const payload = {
 		diagnostics: inspectDiagnostics,
@@ -3046,6 +3058,7 @@ const validateFilePathSelectionFlags = (flags) => {
 	if (flags.base !== void 0) throw new CliInputError("Cannot combine file path arguments with --base. The selected files do not need a Git base.");
 };
 const validateModeFlags = (flags) => {
+	if (flags.baseline && (flags.staged || flags.scope === "lines" || flags.scope === "files")) throw new CliInputError("--baseline requires a full or changed scan; it cannot be combined with --staged.");
 	if (usedScope(flags) && usedDiffAlias(flags)) throw new CliInputError("Cannot combine --scope and --diff; --diff is the deprecated alias.");
 	if (flags.staged && usedDiffAlias(flags)) throw new CliInputError("Cannot combine --staged and --diff; pick one mode.");
 	if (flags.staged && (flags.scope === "full" || flags.scope === "changed")) throw new CliInputError(`Cannot combine --staged with --scope ${flags.scope}; use --scope files or --scope lines, or drop --scope.`);
@@ -3071,5 +3084,5 @@ const shouldFailScanGate = (input) => {
 //#endregion
 export { createInvocationInspect as A, hasIncompleteScoreAnalysis as B, detectLaunchableAgents as C, buildHandoffPayload as D, launchCliAgent as E, formatSkippedCheckLabel as F, hasLintHardFailure as G, buildNoScoreMessage as H, formatElapsedTime as I, formatFixRecipeLine as J, buildRulePriorityMap as K, printFooter as L, resolveMergeBaseRef as M, printHeadlessReport as N, collectProjectSourceFiles as O, pluralize as P, printDiagnosticsDump as R, setUpGitHubActions as S, copyToClipboard as T, buildEmptyReportMessage as U, filterDiagnosticsByCategories as V, resolveInvocationOxlintConcurrency as W, formatLearnMoreLine as Y, retryMissingProjectScores as _, validateModeFlags as a, filterScansForSurface as b, partitionProjectScanOutcomes as c, buildCodeFrame as d, resolveProjectScan as f, resolveProjectRelativeDirectory as g, resolveProjectSourceFilePaths as h, validateIncludeUntrackedScope as i, inspect as j, deduplicateProjectScans as k, discoverWorkspacePackages as l, resolveProjectDiffIncludePaths as m, formatSkippedProjectsMessage as n, resolveExcludedProjectDirectories as o, resolveProjectChangedLineRanges as p, buildSortedRuleGroups as q, validateFilePathSelectionFlags as r, projectManifestChanged as s, shouldFailScanGate as t, selectProjects as u, resolveWorkspaceDeadCodeOwner as v, CLI_AGENT_BINARIES as w, countUniqueScannedFiles as x, resolveCliInspectOptions as y, formatDiagnosticSite as z };
 
-//# sourceMappingURL=should-fail-scan-gate-Du7mOvEl.js.map
-//# debugId=c2e73740-419c-5dc4-ab42-cc207a6a11cc
+//# sourceMappingURL=should-fail-scan-gate-Bjr43-87.js.map
+//# debugId=93c39db1-e810-5852-8880-ad0dee772a41

package/dist/{should-skip-prompts-DaKPFC6p.js → should-skip-prompts-DKwyzEkM.js}

@@ -1,10 +1,10 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="4836ddd5-0ad3-5be0-8480-d18e6da95e4a")}catch(e){}}();
-import { b as isNonInteractiveEnvironment } from "./record-metric-DUV0U_Gf.js";
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="a1c762f4-09d6-5163-a7af-b5f42cc7fd1f")}catch(e){}}();
+import { b as isNonInteractiveEnvironment } from "./record-metric-Do1JAZVB.js";
 //#region src/cli/utils/should-skip-prompts.ts
 const shouldSkipPrompts = (input = {}) => Boolean(input.yes) || Boolean(input.json) || isNonInteractiveEnvironment() || !process.stdin.isTTY;
 //#endregion
 export { shouldSkipPrompts as t };
 
-//# sourceMappingURL=should-skip-prompts-DaKPFC6p.js.map
-//# debugId=4836ddd5-0ad3-5be0-8480-d18e6da95e4a
+//# sourceMappingURL=should-skip-prompts-DKwyzEkM.js.map
+//# debugId=a1c762f4-09d6-5163-a7af-b5f42cc7fd1f

package/dist/{should-use-tui-DZ2iTCn1.js → should-use-tui-DO7NdqR8.js}

@@ -1,6 +1,6 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="c7c5233d-86bc-52b2-be0c-aaaf0813085d")}catch(e){}}();
-import { b as isNonInteractiveEnvironment } from "./record-metric-DUV0U_Gf.js";
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="cd63faec-0fc8-54a4-a321-2f11048e332d")}catch(e){}}();
+import { b as isNonInteractiveEnvironment } from "./record-metric-Do1JAZVB.js";
 //#region src/cli/utils/resolve-tui-environment.ts
 const resolveTuiEnvironment = (outputIsTty = process.stdout.isTTY === true) => ({
 	isNonInteractiveEnvironment: isNonInteractiveEnvironment(),
@@ -21,5 +21,5 @@ const shouldUseTui = (input) => {
 //#endregion
 export { shouldUseTui as n, resolveTuiEnvironment as r, isTuiEnvironmentSupported as t };
 
-//# sourceMappingURL=should-use-tui-DZ2iTCn1.js.map
-//# debugId=c7c5233d-86bc-52b2-be0c-aaaf0813085d
+//# sourceMappingURL=should-use-tui-DO7NdqR8.js.map
+//# debugId=cd63faec-0fc8-54a4-a321-2f11048e332d

package/dist/skills/react-doctor/SKILL.md

@@ -60,3 +60,7 @@ npx react-doctor@latest --verbose --scope changed
 | `--scope lines`   | Only report issues on the changed lines                          |
 | `--score`         | Output only the numeric score                                    |
 | `design`          | Run only the focused UI design diagnostics                       |
+
+### Reuse a base scan
+
+Save a complete `--json` scan, then pass `--baseline base-report.json` to report only new findings. This also works with `--scope changed`. Use the same version and rules for both scans. Matches use the rule, file path with Git renames, message, and normalized flagged source. Each base finding can match once; line and column shifts do not make it new. Older reports without fingerprints must be regenerated.

package/dist/{telemetry-runtime-o4N789Mp.js → telemetry-runtime-D3teullu.js}

@@ -1,7 +1,7 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="5c224c5d-f916-5e9f-ab74-83947fbde8dd")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="e9138331-ba00-5487-b1f1-01bf85703d32")}catch(e){}}();
 import { S as SENTRY_FLUSH_TIMEOUT_MS } from "./constants-DJ3RtEMu.js";
-import { An as void_, At as isProjectDiscoveryError, Cn as buildWithScope, Dn as close, J as anonymizeText, Jt as scrubSensitivePaths, Ln as isErrnoException, On as makeUnsafe, Pn as messageFromUnknown, Pt as layerObservability, _ as VERSION, a as isEnvFlagEnabled, i as isTelemetryEnabled, jt as isReactDoctorError, ln as make, o as buildSentryScope, q as anonymizeInPlace, vn as runPromise, y as CliInputError, yn as runSync } from "./record-metric-DUV0U_Gf.js";
+import { An as makeUnsafe, Ft as layerObservability, In as messageFromUnknown, J as anonymizeInPlace, Mn as void_, Mt as isReactDoctorError, Tn as buildWithScope, Y as anonymizeText, Yt as scrubSensitivePaths, _ as VERSION, a as isEnvFlagEnabled, bn as runPromise, dn as make, i as isTelemetryEnabled, jt as isProjectDiscoveryError, kn as close, o as buildSentryScope, xn as runSync, y as CliInputError, zn as isErrnoException } from "./record-metric-Do1JAZVB.js";
 //#region src/cli/utils/is-environment-error.ts
 const ENVIRONMENT_ERROR_CODES = new Set([
 	"EACCES",
@@ -212,13 +212,13 @@ const isDevVersion = (version) => version === "0.0.0" || version.includes("-");
 * uploads source-map artifacts under, so stack frames symbolicate. Honors the
 * standard `SENTRY_RELEASE` override.
 */
-const resolveSentryRelease = () => process.env.SENTRY_RELEASE || `react-doctor@0.9.15-dev.3242a81`;
+const resolveSentryRelease = () => process.env.SENTRY_RELEASE || `react-doctor@0.9.15-dev.8ed70df`;
 /**
 * Deployment environment shown in Sentry's environment filter. Defaults to
 * `production` for tagged releases and `development` for dev/unbuilt versions,
 * overridable via the standard `SENTRY_ENVIRONMENT` env var.
 */
-const resolveSentryEnvironment = () => process.env.SENTRY_ENVIRONMENT || (isDevVersion("0.9.15-dev.3242a81") ? "development" : "production");
+const resolveSentryEnvironment = () => process.env.SENTRY_ENVIRONMENT || (isDevVersion("0.9.15-dev.8ed70df") ? "development" : "production");
 //#endregion
 //#region src/instrument.ts
 let sentryPromise = null;
@@ -396,5 +396,5 @@ const shutdownTelemetry = async () => {
 //#endregion
 export { initializeSentry as a, isNpmCacheCorruptionError as c, getSentry as i, formatEnvironmentError as l, shutdownTelemetry as n, isExpectedUserError as o, flushSentry as r, formatNpmCacheCorruptionError as s, getTelemetryContext as t, isEnvironmentError as u };
 
-//# sourceMappingURL=telemetry-runtime-o4N789Mp.js.map
-//# debugId=5c224c5d-f916-5e9f-ab74-83947fbde8dd
+//# sourceMappingURL=telemetry-runtime-D3teullu.js.map
+//# debugId=e9138331-ba00-5487-b1f1-01bf85703d32

package/dist/{version-CtgKUicn.js → version-Kj44qNuh.js}

@@ -1,7 +1,7 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="caab90c1-7d26-5f2a-acc1-d4456907eed5")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="ae2c8f8c-82a3-552f-8125-ff661638d6a2")}catch(e){}}();
 import { u as METRIC } from "./constants-DJ3RtEMu.js";
-import { _ as VERSION, t as recordCount } from "./record-metric-DUV0U_Gf.js";
+import { _ as VERSION, t as recordCount } from "./record-metric-Do1JAZVB.js";
 //#region src/cli/commands/version.ts
 /**
 * oclif-style version line. 12-factor CLI Apps (#3, "What version am I
@@ -18,5 +18,5 @@ const versionAction = () => {
 //#endregion
 export { versionAction };
 
-//# sourceMappingURL=version-CtgKUicn.js.map
-//# debugId=caab90c1-7d26-5f2a-acc1-d4456907eed5
+//# sourceMappingURL=version-Kj44qNuh.js.map
+//# debugId=ae2c8f8c-82a3-552f-8125-ff661638d6a2

package/dist/{why-BDgcBrL3.js → why-BV74fXYk.js}

@@ -1,6 +1,6 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="9ade3c5a-86be-5399-803e-898f50801ffe")}catch(e){}}();
-import { t as inspectAction } from "./inspect-ClJlUcd6.js";
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="558ccca9-960f-507d-abf5-64368cbf0899")}catch(e){}}();
+import { t as inspectAction } from "./inspect-DuT3v6KA.js";
 //#region src/cli/commands/why.ts
 /**
 * `why <file:line>` — explains why a rule fired (or why a suppression didn't
@@ -17,5 +17,5 @@ const whyAction = async (location, options) => {
 //#endregion
 export { whyAction };
 
-//# sourceMappingURL=why-BDgcBrL3.js.map
-//# debugId=9ade3c5a-86be-5399-803e-898f50801ffe
+//# sourceMappingURL=why-BV74fXYk.js.map
+//# debugId=558ccca9-960f-507d-abf5-64368cbf0899

package/dist/{with-run-span-Bgitvg5D.js → with-run-span-y8D-ZUGk.js}

@@ -1,8 +1,8 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="43fbee64-48b0-5149-a470-d321eb04f384")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="19cd77b1-a7ef-5d7f-8e2e-924be42e2271")}catch(e){}}();
 import { p as NANOSECONDS_PER_MILLISECOND } from "./constants-DJ3RtEMu.js";
-import { An as void_, c as setSentryProjectInfo, dn as makeSpan, gn as provideContext, kn as fail, o as buildSentryScope, r as toSpanAttributes, s as buildSentryProjectContext, yn as runSync } from "./record-metric-DUV0U_Gf.js";
-import { t as getTelemetryContext } from "./telemetry-runtime-o4N789Mp.js";
+import { Mn as void_, c as setSentryProjectInfo, jn as fail, o as buildSentryScope, pn as makeSpan, r as toSpanAttributes, s as buildSentryProjectContext, vn as provideContext, xn as runSync } from "./record-metric-Do1JAZVB.js";
+import { t as getTelemetryContext } from "./telemetry-runtime-D3teullu.js";
 import { i as setActiveRunTrace, r as recordRunTraceId } from "./active-run-trace-Dewycxda.js";
 //#region src/cli/utils/with-run-span.ts
 /**
@@ -107,5 +107,5 @@ const recordSentryProjectContext = (projectInfo, rootSpan, options = {}) => {
 //#endregion
 export { resetSentryRunState as n, withRunSpan as r, recordSentryProjectContext as t };
 
-//# sourceMappingURL=with-run-span-Bgitvg5D.js.map
-//# debugId=43fbee64-48b0-5149-a470-d321eb04f384
+//# sourceMappingURL=with-run-span-y8D-ZUGk.js.map
+//# debugId=19cd77b1-a7ef-5d7f-8e2e-924be42e2271

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "react-doctor",
-  "version": "0.9.15-dev.3242a81",
+  "version": "0.9.15-dev.8ed70df",
   "description": "Your agent writes bad React. This catches it",
   "keywords": [
     "accessibility",
@@ -70,7 +70,7 @@
     "typescript": ">=5.0.4 <6",
     "yaml": "^2.9.0",
     "yoga-layout": "~3.2.1",
-    "oxlint-plugin-react-doctor": "0.9.15-dev.3242a81"
+    "oxlint-plugin-react-doctor": "0.9.15-dev.8ed70df"
   },
   "devDependencies": {
     "@types/babel__code-frame": "^7.27.0",