react-doctor 0.9.2-dev.9512488 → 0.9.2-dev.992205a

package/dist/cli.js

@@ -1,5 +1,5 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="bb982094-8280-5afe-b061-eb103665c55c")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="3bff4f9b-31f8-5abe-b7a2-a0ab9f6a85b4")}catch(e){}}();
 import { createRequire } from "node:module";
 import * as NodeChildProcess from "node:child_process";
 import { execFile, execFileSync, spawn, spawnSync } from "node:child_process";
@@ -8,7 +8,7 @@ import path from "node:path";
 import * as NFS from "node:fs";
 import fs, { mkdtempSync, rmSync } from "node:fs";
 import process$1 from "node:process";
-import reactDoctorPlugin, { ALL_REACT_DOCTOR_RULE_KEYS, CROSS_FILE_DEPENDENCY_COLLECTORS, CROSS_FILE_RULE_IDS, FRAMEWORK_SPECIFIC_RULE_KEYS, FRAMEWORK_TOKENS, MOTION_LIBRARY_PACKAGES, REACT_COMPILER_RULES, REACT_DOCTOR_RULES, classifySecurityScanFile, collectCrossFileDependencyProbes, resetManifestCaches, shouldReadSecurityScanContent } from "oxlint-plugin-react-doctor";
+import { ALL_REACT_DOCTOR_RULE_KEYS, CROSS_FILE_DEPENDENCY_COLLECTORS, CROSS_FILE_RULE_IDS, FRAMEWORK_SPECIFIC_RULE_KEYS, FRAMEWORK_TOKENS, MOTION_LIBRARY_PACKAGES, REACT_COMPILER_RULES, REACT_DOCTOR_RULES, REACT_DOCTOR_RULE_REGISTRY, REACT_DOCTOR_SCAN_RULES, classifySecurityScanFile, collectCrossFileDependencyProbes, resetManifestCaches, shouldReadSecurityScanContent } from "oxlint-plugin-react-doctor/core";
 import * as Crypto from "node:crypto";
 import crypto, { createHash, randomUUID } from "node:crypto";
 import { ResolverFactory } from "oxc-resolver";
@@ -68874,7 +68874,7 @@ const evaluateSuppression = (lines, diagnosticLineIndex, ruleId) => {
 const getDiagnosticRuleIdentity = (diagnostic) => ({
 	ruleKey: `${diagnostic.plugin}/${diagnostic.rule}`,
 	category: diagnostic.category,
-	tags: diagnostic.plugin === "react-doctor" ? reactDoctorPlugin.rules[diagnostic.rule]?.tags ?? [] : []
+	tags: diagnostic.plugin === "react-doctor" ? REACT_DOCTOR_RULE_REGISTRY[diagnostic.rule]?.tags ?? [] : []
 });
 const compileIgnoredFilePatterns = (userConfig) => {
 	const files = userConfig?.ignore?.files;
@@ -69222,7 +69222,7 @@ const buildDiagnosticPipeline = (input) => {
 	};
 	const shouldAutoSuppress = (diagnostic) => {
 		if (diagnostic.plugin !== "react-doctor") return false;
-		const rule = reactDoctorPlugin.rules[diagnostic.rule];
+		const rule = REACT_DOCTOR_RULE_REGISTRY[diagnostic.rule];
 		if (!rule?.tags?.includes("test-noise")) return false;
 		if (rule.tags.includes("migration-hint")) return false;
 		return getFileContext(diagnostic.filePath) !== "production";
@@ -69654,6 +69654,7 @@ var OxlintConcurrency = class extends Reference("react-doctor/OxlintConcurrency"
 	if (Number.isInteger(parsed) && parsed > 0) return resolveScanConcurrency(parsed);
 	return resolveAutoScanConcurrency();
 } }) {};
+var OxlintSpawnSlots = class extends Reference("react-doctor/OxlintSpawnSlots", { defaultValue: () => null }) {};
 /**
 * Three-state control for overlapping the dead-code pass with the lint pass —
 * forking dead-code as a child fiber that runs DURING lint instead of strictly
@@ -72004,8 +72005,8 @@ const getCapabilities = (project) => {
 	const cached = capabilitiesByProject.get(project);
 	if (cached !== void 0) return cached;
 	const capabilities = new Set(buildCapabilities(project));
-	const packageJson = readPackageJson$1(Path.join(project.rootDirectory, "package.json"));
-	const targetBlankOpenerProtection = detectTargetBlankOpenerProtection(project.rootDirectory, packageJson);
+	const capabilityRootDirectory = isFile(Path.join(project.rootDirectory, "package.json")) ? project.rootDirectory : findNearestAncestorPackageJson(project.rootDirectory) ?? project.rootDirectory;
+	const targetBlankOpenerProtection = detectTargetBlankOpenerProtection(capabilityRootDirectory, readPackageJson$1(Path.join(capabilityRootDirectory, "package.json")));
 	if (targetBlankOpenerProtection !== void 0) capabilities.add("target-blank-needs-explicit-protection");
 	if (targetBlankOpenerProtection === "noreferrer") capabilities.add("target-blank-needs-noreferrer");
 	capabilitiesByProject.set(project, capabilities);
@@ -72035,7 +72036,7 @@ const createSecurityScanSession = (rootDirectory, options) => {
 	const capabilities = options.project ? getCapabilities(options.project) : /* @__PURE__ */ new Set();
 	const ignoredTags = options.ignoredTags ?? /* @__PURE__ */ new Set();
 	const includedTags = options.includedTags ?? /* @__PURE__ */ new Set();
-	const enabledScanRules = REACT_DOCTOR_RULES.flatMap((entry) => {
+	const enabledScanRules = REACT_DOCTOR_SCAN_RULES.flatMap((entry) => {
 		const rule = entry.rule;
 		const scan = rule.scan;
 		if (typeof scan !== "function") return [];
@@ -72496,47 +72497,55 @@ const resolveDeadCodeConcurrency = (facts = readSystemFacts()) => {
 	const memoryBoundedWorkers = Math.floor(availableMemoryBytes / DEAD_CODE_WORKER_MEM_BUDGET_BYTES);
 	return Math.max(1, Math.min(facts.availableCores, memoryBoundedWorkers));
 };
-let availableSlots = -1;
-const waiters = [];
-const releaseSlot = () => {
-	const nextWaiter = waiters.shift();
-	if (nextWaiter !== void 0) nextWaiter();
-	else availableSlots += 1;
+const createWorkerSlots = (input) => {
+	let availableSlotCount = input.slotCount;
+	const waiters = [];
+	const releaseSlot = () => {
+		const nextWaiter = waiters.shift();
+		if (nextWaiter === void 0) {
+			availableSlotCount += 1;
+			return;
+		}
+		nextWaiter.abortSignal?.removeEventListener("abort", nextWaiter.onAbort);
+		nextWaiter.resolve();
+	};
+	const acquireSlot = async (abortSignal) => {
+		if (abortSignal?.aborted) throw input.createAbortError();
+		if (availableSlotCount > 0) {
+			availableSlotCount -= 1;
+			return;
+		}
+		await new Promise((resolve, reject) => {
+			const onAbort = () => {
+				const waiterIndex = waiters.indexOf(waiter);
+				if (waiterIndex !== -1) waiters.splice(waiterIndex, 1);
+				reject(input.createAbortError());
+			};
+			const waiter = {
+				resolve,
+				abortSignal,
+				onAbort
+			};
+			waiters.push(waiter);
+			abortSignal?.addEventListener("abort", onAbort, { once: true });
+		});
+	};
+	return { run: async (task, abortSignal) => {
+		await acquireSlot(abortSignal);
+		try {
+			return await task();
+		} finally {
+			releaseSlot();
+		}
+	} };
 };
-/**
-* Runs `task` once a dead-code worker slot is free, releasing the slot when the
-* task settles (success or failure). With a high cap (roomy machine) every
-* caller proceeds immediately; with a low cap (constrained runner) callers
-* queue and run as slots free.
-*
-* `abortSignal` short-circuits the WAIT: if it's already aborted, or fires while
-* this caller is queued, the call rejects without acquiring a slot or running
-* `task` — so a cancelled scan (e.g. lint failed) doesn't sit in the queue and
-* then spawn a child only to tear it down. A queued caller that aborts removes
-* its own waiter so a later release never hands a slot to a dead request.
-*/
+let deadCodeWorkerSlots = null;
 const withDeadCodeWorkerSlot = async (task, abortSignal) => {
-	if (abortSignal?.aborted) throw new Error("Dead-code worker aborted.");
-	if (availableSlots < 0) availableSlots = resolveDeadCodeConcurrency();
-	if (availableSlots > 0) availableSlots -= 1;
-	else await new Promise((resolve, reject) => {
-		const waiter = () => {
-			abortSignal?.removeEventListener("abort", onAbort);
-			resolve();
-		};
-		const onAbort = () => {
-			const queuedIndex = waiters.indexOf(waiter);
-			if (queuedIndex !== -1) waiters.splice(queuedIndex, 1);
-			reject(/* @__PURE__ */ new Error("Dead-code worker aborted."));
-		};
-		waiters.push(waiter);
-		abortSignal?.addEventListener("abort", onAbort, { once: true });
+	deadCodeWorkerSlots ??= createWorkerSlots({
+		slotCount: resolveDeadCodeConcurrency(),
+		createAbortError: () => /* @__PURE__ */ new Error("Dead-code worker aborted.")
 	});
-	try {
-		return await task();
-	} finally {
-		releaseSlot();
-	}
+	return deadCodeWorkerSlots.run(task, abortSignal);
 };
 const projectCacheSubdir = (projectDirectory) => crypto.createHash("sha256").update(projectDirectory).digest("hex").slice(0, 16);
 const resolveReactDoctorCacheDir = (projectDirectory) => {
@@ -74063,12 +74072,12 @@ const createOxlintConfig = ({ pluginPath, project, customRulesOnly = false, exte
 	const settingsRootDirectory = resolveSettingsRootDirectory(project.rootDirectory);
 	const enabledReactDoctorRules = {};
 	for (const registryEntry of REACT_DOCTOR_RULES) {
-		const rule = reactDoctorPlugin.rules[registryEntry.id];
+		const rule = REACT_DOCTOR_RULE_REGISTRY[registryEntry.id];
 		if (!rule) continue;
 		if (ruleSelection === "cacheable" && CROSS_FILE_RULE_IDS.has(registryEntry.id)) continue;
 		if (ruleSelection === "sidecar" && !CROSS_FILE_RULE_IDS.has(registryEntry.id)) continue;
 		if (ruleSelection === "sidecar" && sidecarRuleIdFilter !== void 0 && !sidecarRuleIdFilter.has(registryEntry.id)) continue;
-		if (rule.scan !== void 0) continue;
+		if (rule.isScanRule) continue;
 		if (customRulesOnly && registryEntry.originallyExternal) continue;
 		if (rule.framework !== "global" && !rule.requires) continue;
 		if (!shouldEnableRule(rule.requires, rule.tags, capabilities, ignoredTags, rule.disabledWhen, includedTags)) continue;
@@ -75379,7 +75388,7 @@ const PLUGIN_CATEGORY_MAP = {
 };
 const lookupOwnString = (record, key) => Object.hasOwn(record, key) ? record[key] : void 0;
 const getRuleRecommendation = (ruleName, project) => {
-	const rule = reactDoctorPlugin.rules[ruleName];
+	const rule = REACT_DOCTOR_RULE_REGISTRY[ruleName];
 	if (!rule) return void 0;
 	if (rule.recommendationFor) {
 		const capabilities = getCapabilities(project);
@@ -75388,8 +75397,8 @@ const getRuleRecommendation = (ruleName, project) => {
 	}
 	return rule.recommendation;
 };
-const getRuleCategory = (ruleName) => reactDoctorPlugin.rules[ruleName]?.category;
-const getRuleTitle = (ruleName) => reactDoctorPlugin.rules[ruleName]?.title;
+const getRuleCategory = (ruleName) => REACT_DOCTOR_RULE_REGISTRY[ruleName]?.category;
+const getRuleTitle = (ruleName) => REACT_DOCTOR_RULE_REGISTRY[ruleName]?.title;
 const resolveDiagnosticTitle = (plugin, rule) => {
 	if (plugin !== "react-hooks-js") return getRuleTitle(rule);
 	if (rule === "error-boundaries") return REACT_ERROR_BOUNDARY_TITLE;
@@ -75444,7 +75453,7 @@ const resolveDiagnosticCategory = (plugin, rule) => {
 	if (plugin === "react-hooks-js" && rule === "error-boundaries") return "Bugs";
 	return getRuleCategory(rule) ?? lookupOwnString(PLUGIN_CATEGORY_MAP, plugin) ?? "Bugs";
 };
-const resolveMatchByOccurrence = (rule, category) => OCCURRENCE_MATCHED_CATEGORIES.has(category) || Boolean(reactDoctorPlugin.rules[rule]?.matchByOccurrence);
+const resolveMatchByOccurrence = (rule, category) => OCCURRENCE_MATCHED_CATEGORIES.has(category) || Boolean(REACT_DOCTOR_RULE_REGISTRY[rule]?.matchByOccurrence);
 /**
 * Maps oxlint's non-primary labels (`labels[1..]`) into related source
 * locations. Editors surface these as a diagnostic's
@@ -75535,7 +75544,7 @@ const parseOxlintOutput = (stdout, project, rootDirectory, sourcePathByLintPath,
 		const preparedSourceMap = resolvePreparedSourceMap(diagnostic.filename);
 		if (preparedSourceMap === void 0) return [diagnostic];
 		const { plugin, rule } = parseRuleCode(diagnostic.code);
-		if (plugin !== "react-doctor" || !reactDoctorPlugin.rules[rule]?.tags?.includes("design")) return [];
+		if (plugin !== "react-doctor" || !REACT_DOCTOR_RULE_REGISTRY[rule]?.tags?.includes("design")) return [];
 		const labels = mapPreparedSourceLabels(diagnostic.labels, preparedSourceMap);
 		const sourceFilename = resolveMappedSourceFilename(diagnostic.filename);
 		return labels === null || sourceFilename === void 0 ? [] : [{
@@ -75621,11 +75630,12 @@ const SANITIZED_ENV = buildOxlintChildEnv(process.env);
 * The first three are splittable (the caller's binary-split retry
 * shrinks the batch and re-spawns); the fourth isn't.
 */
-const spawnOxlint = (args, rootDirectory, nodeBinaryPath, spawnTimeoutMs = OXLINT_SPAWN_TIMEOUT_MS, outputMaxBytes = OXLINT_OUTPUT_MAX_BYTES, abortSignal) => new Promise((resolve, reject) => {
+const spawnOxlint = (args, rootDirectory, nodeBinaryPath, spawnTimeoutMs = OXLINT_SPAWN_TIMEOUT_MS, outputMaxBytes = OXLINT_OUTPUT_MAX_BYTES, abortSignal, onSpawn) => new Promise((resolve, reject) => {
 	if (abortSignal?.aborted) {
 		reject(new ReactDoctorError({ reason: new OxlintSpawnFailed({ cause: "lint phase aborted" }) }));
 		return;
 	}
+	onSpawn?.();
 	const child = spawn(nodeBinaryPath, buildProfiledNodeArguments({
 		argumentsList: args,
 		cpuProfileDirectory: SANITIZED_ENV.REACT_DOCTOR_CPU_PROFILE_DIR,
@@ -75785,7 +75795,21 @@ const spawnLintBatches = async (input) => {
 			}
 			const batchArgs = [...baseArgs, ...batch];
 			try {
-				return parseOxlintOutput(await spawnOxlint(batchArgs, rootDirectory, nodeBinaryPath, spawnTimeoutMs, outputMaxBytes, signal), project, rootDirectory, sourcePathByLintPath, sourceMapByLintPath);
+				const spawnBatch = () => {
+					if (isPastDeadline()) {
+						deadlineSkippedFiles.push(...batch);
+						batchState.deadlineSkippedFileCount += batch.length;
+						return Promise.resolve(null);
+					}
+					return spawnOxlint(batchArgs, rootDirectory, nodeBinaryPath, spawnTimeoutMs, outputMaxBytes, signal, () => {
+						if (batchState.didStart) return;
+						batchState.didStart = true;
+						startedFileCount += batchState.initialFileCount;
+					});
+				};
+				const stdout = input.spawnSlots === void 0 ? await spawnBatch() : await input.spawnSlots.run(spawnBatch, signal);
+				if (stdout === null) return [];
+				return parseOxlintOutput(stdout, project, rootDirectory, sourcePathByLintPath, sourceMapByLintPath);
 			} catch (error) {
 				if (!isSplittableReactDoctorError(error)) throw error;
 				if (isPastDeadline()) {
@@ -75829,14 +75853,15 @@ const spawnLintBatches = async (input) => {
 					deadlineSkippedFiles.push(...batch);
 					return [];
 				}
-				startedFileCount += batch.length;
 				const batchState = {
 					deadlineMs: null,
-					deadlineSkippedFileCount: 0
+					deadlineSkippedFileCount: 0,
+					didStart: false,
+					initialFileCount: batch.length
 				};
 				const batchDiagnostics = await spawnLintBatch(batch, 0, batchState);
 				scannedFileCount += batch.length - batchState.deadlineSkippedFileCount;
-				if (passOnFileProgress) {
+				if (passOnFileProgress && batchState.didStart) {
 					displayedFileCount = Math.min(Math.max(displayedFileCount, scannedFileCount), totalFileCount);
 					passOnFileProgress(displayedFileCount, totalFileCount);
 				}
@@ -75920,8 +75945,8 @@ const validateRuleRegistration = () => {
 	for (const fullKey of ALL_REACT_DOCTOR_RULE_KEYS) {
 		const ruleName = fullKey.replace(/^react-doctor\//, "");
 		if (!getRuleCategory(ruleName)) missingCategory.push(fullKey);
-		if (!reactDoctorPlugin.rules[ruleName]?.recommendation) missingHelp.push(fullKey);
-		if (FRAMEWORK_SPECIFIC_RULE_KEYS.has(fullKey) && !reactDoctorPlugin.rules[ruleName]?.requires) missingMetadata.push(fullKey);
+		if (!REACT_DOCTOR_RULE_REGISTRY[ruleName]?.recommendation) missingHelp.push(fullKey);
+		if (FRAMEWORK_SPECIFIC_RULE_KEYS.has(fullKey) && !REACT_DOCTOR_RULE_REGISTRY[ruleName]?.requires) missingMetadata.push(fullKey);
 	}
 	if (missingCategory.length === 0 && missingHelp.length === 0 && missingMetadata.length === 0) return;
 	const detail = [
@@ -76562,6 +76587,7 @@ const runOxlint = async (options) => {
 					spawnTimeoutMs,
 					outputMaxBytes,
 					concurrency: options.concurrency,
+					spawnSlots: options.spawnSlots,
 					signal: options.signal,
 					deadlineEpochMs: options.deadlineEpochMs
 				});
@@ -76764,6 +76790,7 @@ const runOxlint = async (options) => {
 			spawnTimeoutMs,
 			outputMaxBytes,
 			concurrency: options.concurrency,
+			spawnSlots: options.spawnSlots,
 			signal: options.signal,
 			deadlineEpochMs: options.deadlineEpochMs
 		});
@@ -76858,6 +76885,7 @@ var Linter = class Linter extends Service()("react-doctor/Linter") {
 		const spawnTimeoutMs = yield* OxlintSpawnTimeoutMs;
 		const outputMaxBytes = yield* OxlintOutputMaxBytes;
 		const concurrency = yield* OxlintConcurrency;
+		const spawnSlots = yield* OxlintSpawnSlots;
 		const lintBatchOrdering = yield* LintBatchOrdering;
 		const perFileLintCacheEnabled = yield* PerFileLintCacheEnabled;
 		const sidecarLintCacheEnabled = yield* SidecarLintCacheEnabled;
@@ -76887,6 +76915,7 @@ var Linter = class Linter extends Service()("react-doctor/Linter") {
 				onSidecarStats: input.onSidecarStats,
 				spawnTimeoutMs,
 				outputMaxBytes,
+				spawnSlots: spawnSlots ?? void 0,
 				concurrency,
 				signal,
 				lintBatchOrdering,
@@ -78549,6 +78578,11 @@ const computeConfigFingerprint = (projectDirectory, version) => {
 	}
 	return crypto.createHash("sha1").update(parts.join("|")).digest("hex");
 };
+const createLintPhaseAbortError = () => new ReactDoctorError({ reason: new OxlintSpawnFailed({ cause: "lint phase aborted" }) });
+const createOxlintSpawnSlots = (concurrency) => createWorkerSlots({
+	slotCount: resolveScanConcurrency(concurrency),
+	createAbortError: createLintPhaseAbortError
+});
 const AI_TRAINING_ENV_VARS = [
 	["HF_DATASETS_CACHE", "huggingface"],
 	["HF_HOME", "huggingface"],
@@ -78628,7 +78662,7 @@ const groupBy = (items, keyFn) => {
 * recipe, so advertising "fetch the fix recipe" for them sends agents to
 * a 404. Gate the directive on this predicate.
 */
-const hasPublishedFixRecipe = (diagnostic) => diagnostic.plugin === "react-doctor" && Object.hasOwn(reactDoctorPlugin.rules, diagnostic.rule);
+const hasPublishedFixRecipe = (diagnostic) => diagnostic.plugin === "react-doctor" && Object.hasOwn(REACT_DOCTOR_RULE_REGISTRY, diagnostic.rule);
 const unionValues = (baseValues, overrideValues) => [...new Set([...baseValues, ...overrideValues])];
 const mergeIgnores = (baseIgnore, overrideIgnore) => {
 	const mergedIgnore = {
@@ -78976,7 +79010,7 @@ const makeNoopConsole = () => ({
 });
 //#endregion
 //#region src/cli/utils/version.ts
-const VERSION = "0.9.2-dev.9512488";
+const VERSION = "0.9.2-dev.992205a";
 //#endregion
 //#region src/cli/utils/json-mode.ts
 let context = null;
@@ -79334,13 +79368,13 @@ const isDevVersion = (version) => version === "0.0.0" || version.includes("-");
 * uploads source-map artifacts under, so stack frames symbolicate. Honors the
 * standard `SENTRY_RELEASE` override.
 */
-const resolveSentryRelease = () => process.env.SENTRY_RELEASE || `react-doctor@0.9.2-dev.9512488`;
+const resolveSentryRelease = () => process.env.SENTRY_RELEASE || `react-doctor@0.9.2-dev.992205a`;
 /**
 * Deployment environment shown in Sentry's environment filter. Defaults to
 * `production` for tagged releases and `development` for dev/unbuilt versions,
 * overridable via the standard `SENTRY_ENVIRONMENT` env var.
 */
-const resolveSentryEnvironment = () => process.env.SENTRY_ENVIRONMENT || (isDevVersion("0.9.2-dev.9512488") ? "development" : "production");
+const resolveSentryEnvironment = () => process.env.SENTRY_ENVIRONMENT || (isDevVersion("0.9.2-dev.992205a") ? "development" : "production");
 /**
 * Performance-tracing sample rate in `[0, 1]`. Reads `SENTRY_TRACES_SAMPLE_RATE`
 * (set to `0` to disable tracing) and falls back to
@@ -91194,7 +91228,8 @@ const buildRuntimeLayers = (input) => {
 		resolvedDirectory: input.directory,
 		configSourceDirectory: input.configSourceDirectory
 	}) : Config.layerNode, Files.layerNode, Git.layerNode, linterLayer, LintPartialFailures.layerLive, deadCodeLayer, progressLayer, reporterLayer, scoreLayer, supplyChainLayer);
-	return input.oxlintConcurrency === void 0 ? baseLayers : mergeAll$1(baseLayers, succeed$3(OxlintConcurrency, input.oxlintConcurrency));
+	const layersWithConcurrency = input.oxlintConcurrency === void 0 ? baseLayers : mergeAll$1(baseLayers, succeed$3(OxlintConcurrency, input.oxlintConcurrency));
+	return input.oxlintSpawnSlots === void 0 ? layersWithConcurrency : mergeAll$1(layersWithConcurrency, succeed$3(OxlintSpawnSlots, input.oxlintSpawnSlots));
 };
 //#endregion
 //#region src/cli/utils/with-sentry-run-span.ts
@@ -93698,7 +93733,7 @@ const buildRunEventConfig = (options, userConfig, hasCustomConfig, resolvedWorke
 		userConfig
 	};
 };
-const inspect = async (directory, inputOptions = {}) => {
+const inspectWithOxlintRuntime = async (directory, inputOptions, oxlintRuntime) => {
 	const startTime = performance$1.now();
 	const deadlineEpochMs = inputOptions.deadlineEpochMs ?? (inputOptions.maxDurationMs != null ? Date.now() + inputOptions.maxDurationMs : null);
 	const isConcurrentScan = inputOptions.concurrentScan === true;
@@ -93724,7 +93759,7 @@ const inspect = async (directory, inputOptions = {}) => {
 	try {
 		const result = await withSentryRunSpan(async (rootSentrySpan) => {
 			try {
-				return await runInspectWithRuntime(scanDirectory, options, userConfig, hasConfigOverride, configSourceDirectory, startTime, deadlineEpochMs, rootSentrySpan);
+				return await runInspectWithRuntime(scanDirectory, options, userConfig, hasConfigOverride, configSourceDirectory, startTime, deadlineEpochMs, rootSentrySpan, oxlintRuntime);
 			} catch (error) {
 				recordRunEvent(rootSentrySpan, {
 					...buildRunEventConfig(options, userConfig, userConfig !== null),
@@ -93740,6 +93775,15 @@ const inspect = async (directory, inputOptions = {}) => {
 		if (ownsSpinnerSilence) setSpinnerSilent(wasSpinnerSilent);
 	}
 };
+const createInvocationInspect = (requestedOxlintConcurrency) => {
+	const concurrency = resolveScanConcurrency(requestedOxlintConcurrency ?? runSync(OxlintConcurrency));
+	const oxlintRuntime = {
+		concurrency,
+		spawnSlots: createOxlintSpawnSlots(concurrency)
+	};
+	return (directory, inputOptions = {}) => inspectWithOxlintRuntime(directory, inputOptions, oxlintRuntime);
+};
+const inspect = async (directory, inputOptions = {}) => createInvocationInspect(inputOptions.concurrency)(directory, inputOptions);
 const countIncompleteLintFiles = (lintPartialFailures) => countDroppedLintFiles(lintPartialFailures) + countDeadlineSkippedFiles(lintPartialFailures);
 /**
 * Runs a second, lint-only scan over the changed files as they existed at the
@@ -93793,7 +93837,8 @@ const runBaselineComparison = async (params) => {
 			shouldRunSupplyChain: params.options.supplyChain,
 			shouldComputeScore: false,
 			shouldShowProgressSpinners: false,
-			oxlintConcurrency: params.options.concurrency
+			oxlintConcurrency: params.oxlintRuntime.concurrency,
+			oxlintSpawnSlots: params.oxlintRuntime.spawnSlots
 		});
 		const baseOutput = await runPromise(restoreLegacyThrow(runInspect({
 			directory: snapshot.tempDirectory,
@@ -93838,7 +93883,7 @@ const runBaselineComparison = async (params) => {
 		snapshot.cleanup();
 	}
 };
-const runInspectWithRuntime = async (directory, options, userConfig, hasConfigOverride, configSourceDirectory, startTime, deadlineEpochMs, rootSentrySpan) => {
+const runInspectWithRuntime = async (directory, options, userConfig, hasConfigOverride, configSourceDirectory, startTime, deadlineEpochMs, rootSentrySpan, oxlintRuntime) => {
 	const isDiffMode = options.includePaths.length > 0;
 	const resolvedNodeBinaryPath = await resolveOxlintNode(options.lint, options.scoreOnly || options.silent);
 	const lintBindingMissing = options.lint && !resolvedNodeBinaryPath;
@@ -93888,7 +93933,8 @@ const runInspectWithRuntime = async (directory, options, userConfig, hasConfigOv
 		shouldRunSupplyChain: options.supplyChain,
 		shouldComputeScore: !options.noScore,
 		shouldShowProgressSpinners,
-		oxlintConcurrency: options.concurrency,
+		oxlintConcurrency: oxlintRuntime.concurrency,
+		oxlintSpawnSlots: oxlintRuntime.spawnSlots,
 		reporterLayer: options.uiLayers?.reporter,
 		progressLayer: options.uiLayers?.progress
 	});
@@ -93945,7 +93991,8 @@ const runInspectWithRuntime = async (directory, options, userConfig, hasConfigOv
 			baseFiles: options.baseline.baseFiles,
 			headFiles: options.baseline.headFiles,
 			headAnalyzedFiles: output.analyzedFiles,
-			deadlineEpochMs
+			deadlineEpochMs,
+			oxlintRuntime
 		});
 		if (comparison) {
 			inspectDiagnostics = comparison.displayDiagnostics;
@@ -96778,6 +96825,7 @@ const inspectAction = async (directory, flags, invocationCommand = "inspect") =>
 		if (!isQuiet) if (!flags.verbose && canAnimateOnboarding(process.stdout)) await runPromise(playWelcomeScene({ speedMultiplier: !isOnboardingForced() && hasCompletedOnboarding() ? 2 : 1 }));
 		else runSync(printBrandedHeader);
 		const scanOptions = resolveCliInspectOptions(flags, userConfig);
+		const inspectProject = createInvocationInspect(scanOptions.concurrency);
 		const scanDeadlineEpochMs = scanOptions.maxDurationMs !== void 0 ? Date.now() + scanOptions.maxDurationMs : void 0;
 		const categoryFilters = new Set(scanOptions.categoryFilters ?? []);
 		const skipPrompts = shouldSkipPrompts({
@@ -96923,7 +96971,7 @@ const inspectAction = async (directory, flags, invocationCommand = "inspect") =>
 			const scanStagedProject = async (projectRun) => {
 				const { projectScan, includePaths } = projectRun;
 				const projectTempDirectory = Path.join(snapshot.tempDirectory, projectScan.treeRelativeDirectory);
-				const scanResult = await inspect(projectTempDirectory, {
+				const scanResult = await inspectProject(projectTempDirectory, {
 					...scanOptions,
 					deadlineEpochMs: scanDeadlineEpochMs,
 					includePaths: [...includePaths],
@@ -97082,7 +97130,7 @@ const inspectAction = async (directory, flags, invocationCommand = "inspect") =>
 				if (supplyChainManifestChanged) includePaths.push("package.json");
 			}
 			if (!isQuiet && !isMultiProject) cliLogger.dim("  ");
-			const scanResult = await inspect(scanDirectory, {
+			const scanResult = await inspectProject(scanDirectory, {
 				...scanOptions,
 				deadlineEpochMs: scanDeadlineEpochMs,
 				includePaths,
@@ -98307,7 +98355,7 @@ program.command("experimental-tui [directory]", { hidden: true }).description("[
 		return;
 	}
 	recordCount(METRIC.cliInvoked, 1, { command: "experimental-tui" });
-	const { runScanApp } = await import("./run-scan-app-C9MJnVwv.js");
+	const { runScanApp } = await import("./run-scan-app-DHRvqfkX.js");
 	const { shouldFail } = await runScanApp({
 		directory,
 		options: {
@@ -98347,7 +98395,7 @@ Promise.resolve().then(() => assertNoRemovedFlags(process.argv)).then(() => prog
 	handleError(error, { sentryEventId });
 });
 //#endregion
-export { toForwardSlashes as A, getCategoryImpact as B, buildRulePriorityMap as C, resolveBlockingLevel as D, formatLearnMoreLine as E, TUI_REPORT_DETAIL_WIDTH_FRACTION as F, runPromise as G, mapWithConcurrency as H, isCiEnvironment as I, succeed$3 as J, sync as K, DIAGNOSTIC_CATEGORY_BUCKETS as L, isUnicodeSupported as M, METRIC as N, isReactDoctorWorkflowInstalled as O, TUI_REPORT_COMPACT_MAX_ROWS as P, Progress as R, hasLintHardFailure as S, formatFixRecipeLine as T, mergeReactDoctorConfigs as U, highlighter as V, resolveScanTarget as W, canAnimateOnboarding as _, resolveCliInspectOptions as a, buildCodeFrame as b, detectLaunchableAgents as c, launchCliAgent as d, isShareOptedOut as f, doctorFace as g, easeOutCubic as h, selectProjects as i, findNearestPackageDirectory as j, recordCount as k, CLI_AGENT_BINARIES as l, printFooter as m, shouldFailScanGate as n, countUniqueScannedFiles as o, inspect as p, void_ as q, discoverWorkspacePackages as r, setUpGitHubActions as s, exitGracefully as t, copyToClipboard as u, computeProjectedScore as v, buildSortedRuleGroups as w, buildNoScoreMessage as x, formatElapsedTime as y, Reporter as z };
+export { toForwardSlashes as A, getCategoryImpact as B, buildRulePriorityMap as C, resolveBlockingLevel as D, formatLearnMoreLine as E, TUI_REPORT_DETAIL_WIDTH_FRACTION as F, runPromise as G, mapWithConcurrency as H, isCiEnvironment as I, succeed$3 as J, sync as K, DIAGNOSTIC_CATEGORY_BUCKETS as L, isUnicodeSupported as M, METRIC as N, isReactDoctorWorkflowInstalled as O, TUI_REPORT_COMPACT_MAX_ROWS as P, Progress as R, hasLintHardFailure as S, formatFixRecipeLine as T, mergeReactDoctorConfigs as U, highlighter as V, resolveScanTarget as W, canAnimateOnboarding as _, resolveCliInspectOptions as a, buildCodeFrame as b, detectLaunchableAgents as c, launchCliAgent as d, isShareOptedOut as f, doctorFace as g, easeOutCubic as h, selectProjects as i, findNearestPackageDirectory as j, recordCount as k, CLI_AGENT_BINARIES as l, printFooter as m, shouldFailScanGate as n, countUniqueScannedFiles as o, createInvocationInspect as p, void_ as q, discoverWorkspacePackages as r, setUpGitHubActions as s, exitGracefully as t, copyToClipboard as u, computeProjectedScore as v, buildSortedRuleGroups as w, buildNoScoreMessage as x, formatElapsedTime as y, Reporter as z };
 
 //# sourceMappingURL=cli.js.map
-//# debugId=bb982094-8280-5afe-b061-eb103665c55c
+//# debugId=3bff4f9b-31f8-5abe-b7a2-a0ab9f6a85b4

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import { FrameworkToken } from "oxlint-plugin-react-doctor";
+import { FrameworkToken } from "oxlint-plugin-react-doctor/core";
 
 //#region ../../node_modules/.pnpm/effect@4.0.0-beta.70/node_modules/effect/dist/Types.d.ts
 /**

package/dist/index.js

@@ -1,8 +1,8 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="18c61424-4926-5cae-8f2a-6001534ea755")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="61d9689f-8ba5-5ca3-a0c2-09557d3f7028")}catch(e){}}();
 import { i as __toESM$1, r as __require, t as __commonJSMin$1 } from "./chunk-ChKA3wi6.js";
 import { createRequire } from "node:module";
-import reactDoctorPlugin, { ALL_REACT_DOCTOR_RULE_KEYS, CROSS_FILE_DEPENDENCY_COLLECTORS, CROSS_FILE_RULE_IDS, FRAMEWORK_SPECIFIC_RULE_KEYS, FRAMEWORK_TOKENS, MOTION_LIBRARY_PACKAGES, REACT_COMPILER_RULES, REACT_DOCTOR_RULES, classifySecurityScanFile, collectCrossFileDependencyProbes, resetManifestCaches, shouldReadSecurityScanContent } from "oxlint-plugin-react-doctor";
+import { ALL_REACT_DOCTOR_RULE_KEYS, CROSS_FILE_DEPENDENCY_COLLECTORS, CROSS_FILE_RULE_IDS, FRAMEWORK_SPECIFIC_RULE_KEYS, FRAMEWORK_TOKENS, MOTION_LIBRARY_PACKAGES, REACT_COMPILER_RULES, REACT_DOCTOR_RULES, REACT_DOCTOR_RULE_REGISTRY, REACT_DOCTOR_SCAN_RULES, classifySecurityScanFile, collectCrossFileDependencyProbes, resetManifestCaches, shouldReadSecurityScanContent } from "oxlint-plugin-react-doctor/core";
 import * as Crypto from "node:crypto";
 import crypto, { createHash } from "node:crypto";
 import * as NFS from "node:fs";
@@ -65673,7 +65673,7 @@ const evaluateSuppression = (lines, diagnosticLineIndex, ruleId) => {
 const getDiagnosticRuleIdentity = (diagnostic) => ({
 	ruleKey: `${diagnostic.plugin}/${diagnostic.rule}`,
 	category: diagnostic.category,
-	tags: diagnostic.plugin === "react-doctor" ? reactDoctorPlugin.rules[diagnostic.rule]?.tags ?? [] : []
+	tags: diagnostic.plugin === "react-doctor" ? REACT_DOCTOR_RULE_REGISTRY[diagnostic.rule]?.tags ?? [] : []
 });
 const compileIgnoredFilePatterns = (userConfig) => {
 	const files = userConfig?.ignore?.files;
@@ -66025,7 +66025,7 @@ const buildDiagnosticPipeline = (input) => {
 	};
 	const shouldAutoSuppress = (diagnostic) => {
 		if (diagnostic.plugin !== "react-doctor") return false;
-		const rule = reactDoctorPlugin.rules[diagnostic.rule];
+		const rule = REACT_DOCTOR_RULE_REGISTRY[diagnostic.rule];
 		if (!rule?.tags?.includes("test-noise")) return false;
 		if (rule.tags.includes("migration-hint")) return false;
 		return getFileContext(diagnostic.filePath) !== "production";
@@ -66457,6 +66457,7 @@ var OxlintConcurrency = class extends Reference("react-doctor/OxlintConcurrency"
 	if (Number.isInteger(parsed) && parsed > 0) return resolveScanConcurrency(parsed);
 	return resolveAutoScanConcurrency();
 } }) {};
+var OxlintSpawnSlots = class extends Reference("react-doctor/OxlintSpawnSlots", { defaultValue: () => null }) {};
 /**
 * Three-state control for overlapping the dead-code pass with the lint pass —
 * forking dead-code as a child fiber that runs DURING lint instead of strictly
@@ -68779,8 +68780,8 @@ const getCapabilities = (project) => {
 	const cached = capabilitiesByProject.get(project);
 	if (cached !== void 0) return cached;
 	const capabilities = new Set(buildCapabilities(project));
-	const packageJson = readPackageJson(Path.join(project.rootDirectory, "package.json"));
-	const targetBlankOpenerProtection = detectTargetBlankOpenerProtection(project.rootDirectory, packageJson);
+	const capabilityRootDirectory = isFile(Path.join(project.rootDirectory, "package.json")) ? project.rootDirectory : findNearestAncestorPackageJson(project.rootDirectory) ?? project.rootDirectory;
+	const targetBlankOpenerProtection = detectTargetBlankOpenerProtection(capabilityRootDirectory, readPackageJson(Path.join(capabilityRootDirectory, "package.json")));
 	if (targetBlankOpenerProtection !== void 0) capabilities.add("target-blank-needs-explicit-protection");
 	if (targetBlankOpenerProtection === "noreferrer") capabilities.add("target-blank-needs-noreferrer");
 	capabilitiesByProject.set(project, capabilities);
@@ -68810,7 +68811,7 @@ const createSecurityScanSession = (rootDirectory, options) => {
 	const capabilities = options.project ? getCapabilities(options.project) : /* @__PURE__ */ new Set();
 	const ignoredTags = options.ignoredTags ?? /* @__PURE__ */ new Set();
 	const includedTags = options.includedTags ?? /* @__PURE__ */ new Set();
-	const enabledScanRules = REACT_DOCTOR_RULES.flatMap((entry) => {
+	const enabledScanRules = REACT_DOCTOR_SCAN_RULES.flatMap((entry) => {
 		const rule = entry.rule;
 		const scan = rule.scan;
 		if (typeof scan !== "function") return [];
@@ -69255,47 +69256,55 @@ const resolveDeadCodeConcurrency = (facts = readSystemFacts()) => {
 	const memoryBoundedWorkers = Math.floor(availableMemoryBytes / DEAD_CODE_WORKER_MEM_BUDGET_BYTES);
 	return Math.max(1, Math.min(facts.availableCores, memoryBoundedWorkers));
 };
-let availableSlots = -1;
-const waiters = [];
-const releaseSlot = () => {
-	const nextWaiter = waiters.shift();
-	if (nextWaiter !== void 0) nextWaiter();
-	else availableSlots += 1;
+const createWorkerSlots = (input) => {
+	let availableSlotCount = input.slotCount;
+	const waiters = [];
+	const releaseSlot = () => {
+		const nextWaiter = waiters.shift();
+		if (nextWaiter === void 0) {
+			availableSlotCount += 1;
+			return;
+		}
+		nextWaiter.abortSignal?.removeEventListener("abort", nextWaiter.onAbort);
+		nextWaiter.resolve();
+	};
+	const acquireSlot = async (abortSignal) => {
+		if (abortSignal?.aborted) throw input.createAbortError();
+		if (availableSlotCount > 0) {
+			availableSlotCount -= 1;
+			return;
+		}
+		await new Promise((resolve, reject) => {
+			const onAbort = () => {
+				const waiterIndex = waiters.indexOf(waiter);
+				if (waiterIndex !== -1) waiters.splice(waiterIndex, 1);
+				reject(input.createAbortError());
+			};
+			const waiter = {
+				resolve,
+				abortSignal,
+				onAbort
+			};
+			waiters.push(waiter);
+			abortSignal?.addEventListener("abort", onAbort, { once: true });
+		});
+	};
+	return { run: async (task, abortSignal) => {
+		await acquireSlot(abortSignal);
+		try {
+			return await task();
+		} finally {
+			releaseSlot();
+		}
+	} };
 };
-/**
-* Runs `task` once a dead-code worker slot is free, releasing the slot when the
-* task settles (success or failure). With a high cap (roomy machine) every
-* caller proceeds immediately; with a low cap (constrained runner) callers
-* queue and run as slots free.
-*
-* `abortSignal` short-circuits the WAIT: if it's already aborted, or fires while
-* this caller is queued, the call rejects without acquiring a slot or running
-* `task` — so a cancelled scan (e.g. lint failed) doesn't sit in the queue and
-* then spawn a child only to tear it down. A queued caller that aborts removes
-* its own waiter so a later release never hands a slot to a dead request.
-*/
+let deadCodeWorkerSlots = null;
 const withDeadCodeWorkerSlot = async (task, abortSignal) => {
-	if (abortSignal?.aborted) throw new Error("Dead-code worker aborted.");
-	if (availableSlots < 0) availableSlots = resolveDeadCodeConcurrency();
-	if (availableSlots > 0) availableSlots -= 1;
-	else await new Promise((resolve, reject) => {
-		const waiter = () => {
-			abortSignal?.removeEventListener("abort", onAbort);
-			resolve();
-		};
-		const onAbort = () => {
-			const queuedIndex = waiters.indexOf(waiter);
-			if (queuedIndex !== -1) waiters.splice(queuedIndex, 1);
-			reject(/* @__PURE__ */ new Error("Dead-code worker aborted."));
-		};
-		waiters.push(waiter);
-		abortSignal?.addEventListener("abort", onAbort, { once: true });
+	deadCodeWorkerSlots ??= createWorkerSlots({
+		slotCount: resolveDeadCodeConcurrency(),
+		createAbortError: () => /* @__PURE__ */ new Error("Dead-code worker aborted.")
 	});
-	try {
-		return await task();
-	} finally {
-		releaseSlot();
-	}
+	return deadCodeWorkerSlots.run(task, abortSignal);
 };
 const projectCacheSubdir = (projectDirectory) => crypto.createHash("sha256").update(projectDirectory).digest("hex").slice(0, 16);
 const resolveReactDoctorCacheDir = (projectDirectory) => {
@@ -70822,12 +70831,12 @@ const createOxlintConfig = ({ pluginPath, project, customRulesOnly = false, exte
 	const settingsRootDirectory = resolveSettingsRootDirectory(project.rootDirectory);
 	const enabledReactDoctorRules = {};
 	for (const registryEntry of REACT_DOCTOR_RULES) {
-		const rule = reactDoctorPlugin.rules[registryEntry.id];
+		const rule = REACT_DOCTOR_RULE_REGISTRY[registryEntry.id];
 		if (!rule) continue;
 		if (ruleSelection === "cacheable" && CROSS_FILE_RULE_IDS.has(registryEntry.id)) continue;
 		if (ruleSelection === "sidecar" && !CROSS_FILE_RULE_IDS.has(registryEntry.id)) continue;
 		if (ruleSelection === "sidecar" && sidecarRuleIdFilter !== void 0 && !sidecarRuleIdFilter.has(registryEntry.id)) continue;
-		if (rule.scan !== void 0) continue;
+		if (rule.isScanRule) continue;
 		if (customRulesOnly && registryEntry.originallyExternal) continue;
 		if (rule.framework !== "global" && !rule.requires) continue;
 		if (!shouldEnableRule(rule.requires, rule.tags, capabilities, ignoredTags, rule.disabledWhen, includedTags)) continue;
@@ -72138,7 +72147,7 @@ const PLUGIN_CATEGORY_MAP = {
 };
 const lookupOwnString = (record, key) => Object.hasOwn(record, key) ? record[key] : void 0;
 const getRuleRecommendation = (ruleName, project) => {
-	const rule = reactDoctorPlugin.rules[ruleName];
+	const rule = REACT_DOCTOR_RULE_REGISTRY[ruleName];
 	if (!rule) return void 0;
 	if (rule.recommendationFor) {
 		const capabilities = getCapabilities(project);
@@ -72147,8 +72156,8 @@ const getRuleRecommendation = (ruleName, project) => {
 	}
 	return rule.recommendation;
 };
-const getRuleCategory = (ruleName) => reactDoctorPlugin.rules[ruleName]?.category;
-const getRuleTitle = (ruleName) => reactDoctorPlugin.rules[ruleName]?.title;
+const getRuleCategory = (ruleName) => REACT_DOCTOR_RULE_REGISTRY[ruleName]?.category;
+const getRuleTitle = (ruleName) => REACT_DOCTOR_RULE_REGISTRY[ruleName]?.title;
 const resolveDiagnosticTitle = (plugin, rule) => {
 	if (plugin !== "react-hooks-js") return getRuleTitle(rule);
 	if (rule === "error-boundaries") return REACT_ERROR_BOUNDARY_TITLE;
@@ -72203,7 +72212,7 @@ const resolveDiagnosticCategory = (plugin, rule) => {
 	if (plugin === "react-hooks-js" && rule === "error-boundaries") return "Bugs";
 	return getRuleCategory(rule) ?? lookupOwnString(PLUGIN_CATEGORY_MAP, plugin) ?? "Bugs";
 };
-const resolveMatchByOccurrence = (rule, category) => OCCURRENCE_MATCHED_CATEGORIES.has(category) || Boolean(reactDoctorPlugin.rules[rule]?.matchByOccurrence);
+const resolveMatchByOccurrence = (rule, category) => OCCURRENCE_MATCHED_CATEGORIES.has(category) || Boolean(REACT_DOCTOR_RULE_REGISTRY[rule]?.matchByOccurrence);
 /**
 * Maps oxlint's non-primary labels (`labels[1..]`) into related source
 * locations. Editors surface these as a diagnostic's
@@ -72294,7 +72303,7 @@ const parseOxlintOutput = (stdout, project, rootDirectory, sourcePathByLintPath,
 		const preparedSourceMap = resolvePreparedSourceMap(diagnostic.filename);
 		if (preparedSourceMap === void 0) return [diagnostic];
 		const { plugin, rule } = parseRuleCode(diagnostic.code);
-		if (plugin !== "react-doctor" || !reactDoctorPlugin.rules[rule]?.tags?.includes("design")) return [];
+		if (plugin !== "react-doctor" || !REACT_DOCTOR_RULE_REGISTRY[rule]?.tags?.includes("design")) return [];
 		const labels = mapPreparedSourceLabels(diagnostic.labels, preparedSourceMap);
 		const sourceFilename = resolveMappedSourceFilename(diagnostic.filename);
 		return labels === null || sourceFilename === void 0 ? [] : [{
@@ -72380,11 +72389,12 @@ const SANITIZED_ENV = buildOxlintChildEnv(process.env);
 * The first three are splittable (the caller's binary-split retry
 * shrinks the batch and re-spawns); the fourth isn't.
 */
-const spawnOxlint = (args, rootDirectory, nodeBinaryPath, spawnTimeoutMs = OXLINT_SPAWN_TIMEOUT_MS, outputMaxBytes = OXLINT_OUTPUT_MAX_BYTES, abortSignal) => new Promise((resolve, reject) => {
+const spawnOxlint = (args, rootDirectory, nodeBinaryPath, spawnTimeoutMs = OXLINT_SPAWN_TIMEOUT_MS, outputMaxBytes = OXLINT_OUTPUT_MAX_BYTES, abortSignal, onSpawn) => new Promise((resolve, reject) => {
 	if (abortSignal?.aborted) {
 		reject(new ReactDoctorError({ reason: new OxlintSpawnFailed({ cause: "lint phase aborted" }) }));
 		return;
 	}
+	onSpawn?.();
 	const child = spawn(nodeBinaryPath, buildProfiledNodeArguments({
 		argumentsList: args,
 		cpuProfileDirectory: SANITIZED_ENV.REACT_DOCTOR_CPU_PROFILE_DIR,
@@ -72544,7 +72554,21 @@ const spawnLintBatches = async (input) => {
 			}
 			const batchArgs = [...baseArgs, ...batch];
 			try {
-				return parseOxlintOutput(await spawnOxlint(batchArgs, rootDirectory, nodeBinaryPath, spawnTimeoutMs, outputMaxBytes, signal), project, rootDirectory, sourcePathByLintPath, sourceMapByLintPath);
+				const spawnBatch = () => {
+					if (isPastDeadline()) {
+						deadlineSkippedFiles.push(...batch);
+						batchState.deadlineSkippedFileCount += batch.length;
+						return Promise.resolve(null);
+					}
+					return spawnOxlint(batchArgs, rootDirectory, nodeBinaryPath, spawnTimeoutMs, outputMaxBytes, signal, () => {
+						if (batchState.didStart) return;
+						batchState.didStart = true;
+						startedFileCount += batchState.initialFileCount;
+					});
+				};
+				const stdout = input.spawnSlots === void 0 ? await spawnBatch() : await input.spawnSlots.run(spawnBatch, signal);
+				if (stdout === null) return [];
+				return parseOxlintOutput(stdout, project, rootDirectory, sourcePathByLintPath, sourceMapByLintPath);
 			} catch (error) {
 				if (!isSplittableReactDoctorError(error)) throw error;
 				if (isPastDeadline()) {
@@ -72588,14 +72612,15 @@ const spawnLintBatches = async (input) => {
 					deadlineSkippedFiles.push(...batch);
 					return [];
 				}
-				startedFileCount += batch.length;
 				const batchState = {
 					deadlineMs: null,
-					deadlineSkippedFileCount: 0
+					deadlineSkippedFileCount: 0,
+					didStart: false,
+					initialFileCount: batch.length
 				};
 				const batchDiagnostics = await spawnLintBatch(batch, 0, batchState);
 				scannedFileCount += batch.length - batchState.deadlineSkippedFileCount;
-				if (passOnFileProgress) {
+				if (passOnFileProgress && batchState.didStart) {
 					displayedFileCount = Math.min(Math.max(displayedFileCount, scannedFileCount), totalFileCount);
 					passOnFileProgress(displayedFileCount, totalFileCount);
 				}
@@ -72679,8 +72704,8 @@ const validateRuleRegistration = () => {
 	for (const fullKey of ALL_REACT_DOCTOR_RULE_KEYS) {
 		const ruleName = fullKey.replace(/^react-doctor\//, "");
 		if (!getRuleCategory(ruleName)) missingCategory.push(fullKey);
-		if (!reactDoctorPlugin.rules[ruleName]?.recommendation) missingHelp.push(fullKey);
-		if (FRAMEWORK_SPECIFIC_RULE_KEYS.has(fullKey) && !reactDoctorPlugin.rules[ruleName]?.requires) missingMetadata.push(fullKey);
+		if (!REACT_DOCTOR_RULE_REGISTRY[ruleName]?.recommendation) missingHelp.push(fullKey);
+		if (FRAMEWORK_SPECIFIC_RULE_KEYS.has(fullKey) && !REACT_DOCTOR_RULE_REGISTRY[ruleName]?.requires) missingMetadata.push(fullKey);
 	}
 	if (missingCategory.length === 0 && missingHelp.length === 0 && missingMetadata.length === 0) return;
 	const detail = [
@@ -73321,6 +73346,7 @@ const runOxlint = async (options) => {
 					spawnTimeoutMs,
 					outputMaxBytes,
 					concurrency: options.concurrency,
+					spawnSlots: options.spawnSlots,
 					signal: options.signal,
 					deadlineEpochMs: options.deadlineEpochMs
 				});
@@ -73523,6 +73549,7 @@ const runOxlint = async (options) => {
 			spawnTimeoutMs,
 			outputMaxBytes,
 			concurrency: options.concurrency,
+			spawnSlots: options.spawnSlots,
 			signal: options.signal,
 			deadlineEpochMs: options.deadlineEpochMs
 		});
@@ -73617,6 +73644,7 @@ var Linter = class Linter extends Service()("react-doctor/Linter") {
 		const spawnTimeoutMs = yield* OxlintSpawnTimeoutMs;
 		const outputMaxBytes = yield* OxlintOutputMaxBytes;
 		const concurrency = yield* OxlintConcurrency;
+		const spawnSlots = yield* OxlintSpawnSlots;
 		const lintBatchOrdering = yield* LintBatchOrdering;
 		const perFileLintCacheEnabled = yield* PerFileLintCacheEnabled;
 		const sidecarLintCacheEnabled = yield* SidecarLintCacheEnabled;
@@ -73646,6 +73674,7 @@ var Linter = class Linter extends Service()("react-doctor/Linter") {
 				onSidecarStats: input.onSidecarStats,
 				spawnTimeoutMs,
 				outputMaxBytes,
+				spawnSlots: spawnSlots ?? void 0,
 				concurrency,
 				signal,
 				lintBatchOrdering,
@@ -75173,6 +75202,11 @@ const filterSourceFiles = (filePaths) => filePaths.filter(isLintableSourceFile);
 * other `clear*` helpers.
 */
 const clearAutoSuppressionCaches = () => {};
+const createLintPhaseAbortError = () => new ReactDoctorError({ reason: new OxlintSpawnFailed({ cause: "lint phase aborted" }) });
+const createOxlintSpawnSlots = (concurrency) => createWorkerSlots({
+	slotCount: resolveScanConcurrency(concurrency),
+	createAbortError: createLintPhaseAbortError
+});
 /**
 * Identity helper for authoring a typed `doctor.config.{ts,js,mjs,cjs}`.
 * Gives editor autocomplete and type-checking for the config object without
@@ -75293,7 +75327,7 @@ const buildDiagnoseLayer = (input) => {
 		resolvedDirectory: input.configOverrideTarget.resolvedDirectory,
 		configSourceDirectory: input.configOverrideTarget.configSourceDirectory
 	});
-	return mergeAll$1(Project.layerNode, configLayer, input.shouldRunDeadCode ? DeadCode.layerNode : DeadCode.layerOf([]), Files.layerNode, Git.layerNode, input.shouldRunLint ? Linter.layerOxlint : Linter.layerOf([]), LintPartialFailures.layerLive, Progress.layerNoop, Reporter.layerNoop, Score.layerHttp, input.config?.supplyChain?.enabled !== false ? SupplyChain.layerNode : SupplyChain.layerOf([]));
+	return mergeAll$1(Project.layerNode, configLayer, input.shouldRunDeadCode ? DeadCode.layerNode : DeadCode.layerOf([]), Files.layerNode, Git.layerNode, input.shouldRunLint ? Linter.layerOxlint : Linter.layerOf([]), LintPartialFailures.layerLive, succeed$3(OxlintConcurrency, input.oxlintConcurrency), succeed$3(OxlintSpawnSlots, input.oxlintSpawnSlots), Progress.layerNoop, Reporter.layerNoop, Score.layerHttp, input.config?.supplyChain?.enabled !== false ? SupplyChain.layerNode : SupplyChain.layerOf([]));
 };
 const buildInspectProgram = (scanTarget, options, configOverride) => {
 	const effectiveConfig = configOverride ?? scanTarget.userConfig;
@@ -75334,10 +75368,14 @@ const diagnoseDirectory = async (directory, options) => {
 	const program = buildInspectProgram(scanTarget, options);
 	const shouldRunLint = resolveShouldRunLint(options, scanTarget.userConfig);
 	const shouldRunDeadCode = resolveShouldRunDeadCode(options, scanTarget.userConfig);
+	const oxlintConcurrency = runSync(OxlintConcurrency);
+	const oxlintSpawnSlots = createOxlintSpawnSlots(oxlintConcurrency);
 	return outputToDiagnoseResult(await runPromise(restoreLegacyThrow(program.pipe(provide(buildDiagnoseLayer({
 		config: scanTarget.userConfig,
 		shouldRunLint,
-		shouldRunDeadCode
+		shouldRunDeadCode,
+		oxlintConcurrency,
+		oxlintSpawnSlots
 	})), provide(layerOtlp)))), globalThis.performance.now() - startTime);
 };
 const findWorstScore = (projectResults) => {
@@ -75352,7 +75390,7 @@ const findWorstScore = (projectResults) => {
 	}
 	return worstResult;
 };
-const diagnoseProject = async (projectDefinition, baseOptions, batchConfig) => {
+const diagnoseProject = async (projectDefinition, baseOptions, batchConfig, oxlintConcurrency, oxlintSpawnSlots) => {
 	const startTime = globalThis.performance.now();
 	try {
 		const scanTarget = await resolveScanTarget(projectDefinition.directory);
@@ -75371,6 +75409,8 @@ const diagnoseProject = async (projectDefinition, baseOptions, batchConfig) => {
 			config: effectiveConfig,
 			shouldRunLint,
 			shouldRunDeadCode,
+			oxlintConcurrency,
+			oxlintSpawnSlots,
 			configOverrideTarget: {
 				resolvedDirectory: scanTarget.resolvedDirectory,
 				configSourceDirectory: didOverridePlugins ? null : scanTarget.configSourceDirectory
@@ -75378,7 +75418,9 @@ const diagnoseProject = async (projectDefinition, baseOptions, batchConfig) => {
 		} : {
 			config: effectiveConfig,
 			shouldRunLint,
-			shouldRunDeadCode
+			shouldRunDeadCode,
+			oxlintConcurrency,
+			oxlintSpawnSlots
 		});
 		return {
 			ok: true,
@@ -75397,7 +75439,9 @@ const diagnoseProjectBatch = async (input) => {
 	warnIfAiTrainingEnvironment();
 	const startTime = globalThis.performance.now();
 	const { projects, concurrency, config: batchConfig, ...baseOptions } = input;
-	const projectResults = await mapWithConcurrency(projects, concurrency ?? 4, (projectDefinition) => diagnoseProject(projectDefinition, baseOptions, batchConfig));
+	const oxlintConcurrency = runSync(OxlintConcurrency);
+	const oxlintSpawnSlots = createOxlintSpawnSlots(oxlintConcurrency);
+	const projectResults = await mapWithConcurrency(projects, concurrency ?? 4, (projectDefinition) => diagnoseProject(projectDefinition, baseOptions, batchConfig, oxlintConcurrency, oxlintSpawnSlots));
 	const succeededProjects = projectResults.filter((projectResult) => projectResult.ok);
 	return {
 		projects: projectResults,
@@ -75443,4 +75487,4 @@ const toJsonReport = (result, options) => buildJsonReport({
 export { AmbiguousProjectError, NoReactDependencyError, NotADirectoryError, PackageJsonNotFoundError, ProjectNotFoundError, ReactDoctorError, buildJsonReport, buildJsonReportError, clearCaches, defineConfig, diagnose, filterSourceFiles, getDiffInfo, hasReactRuntime, isProjectDiscoveryError, isReactDoctorError, summarizeDiagnostics, toJsonReport };
 
 //# sourceMappingURL=index.js.map
-//# debugId=18c61424-4926-5cae-8f2a-6001534ea755
+//# debugId=61d9689f-8ba5-5ca3-a0c2-09557d3f7028

package/dist/lsp.js

@@ -5,7 +5,7 @@ import * as OS from "node:os";
 import os from "node:os";
 import * as Path from "node:path";
 import path from "node:path";
-import reactDoctorPlugin, { ALL_REACT_DOCTOR_RULE_KEYS, CROSS_FILE_DEPENDENCY_COLLECTORS, CROSS_FILE_RULE_IDS, FRAMEWORK_SPECIFIC_RULE_KEYS, FRAMEWORK_TOKENS, MOTION_LIBRARY_PACKAGES, REACT_COMPILER_RULES, REACT_DOCTOR_RULES, classifySecurityScanFile, collectCrossFileDependencyProbes, resetManifestCaches, shouldReadSecurityScanContent } from "oxlint-plugin-react-doctor";
+import { ALL_REACT_DOCTOR_RULE_KEYS, CROSS_FILE_DEPENDENCY_COLLECTORS, CROSS_FILE_RULE_IDS, FRAMEWORK_SPECIFIC_RULE_KEYS, FRAMEWORK_TOKENS, MOTION_LIBRARY_PACKAGES, REACT_COMPILER_RULES, REACT_DOCTOR_RULES, REACT_DOCTOR_RULE_REGISTRY, REACT_DOCTOR_SCAN_RULES, classifySecurityScanFile, collectCrossFileDependencyProbes, resetManifestCaches, shouldReadSecurityScanContent } from "oxlint-plugin-react-doctor/core";
 import * as Crypto from "node:crypto";
 import crypto, { createHash } from "node:crypto";
 import * as NodeChildProcess from "node:child_process";
@@ -65726,7 +65726,7 @@ const evaluateSuppression = (lines, diagnosticLineIndex, ruleId) => {
 const getDiagnosticRuleIdentity = (diagnostic) => ({
 	ruleKey: `${diagnostic.plugin}/${diagnostic.rule}`,
 	category: diagnostic.category,
-	tags: diagnostic.plugin === "react-doctor" ? reactDoctorPlugin.rules[diagnostic.rule]?.tags ?? [] : []
+	tags: diagnostic.plugin === "react-doctor" ? REACT_DOCTOR_RULE_REGISTRY[diagnostic.rule]?.tags ?? [] : []
 });
 const compileIgnoredFilePatterns = (userConfig) => {
 	const files = userConfig?.ignore?.files;
@@ -66074,7 +66074,7 @@ const buildDiagnosticPipeline = (input) => {
 	};
 	const shouldAutoSuppress = (diagnostic) => {
 		if (diagnostic.plugin !== "react-doctor") return false;
-		const rule = reactDoctorPlugin.rules[diagnostic.rule];
+		const rule = REACT_DOCTOR_RULE_REGISTRY[diagnostic.rule];
 		if (!rule?.tags?.includes("test-noise")) return false;
 		if (rule.tags.includes("migration-hint")) return false;
 		return getFileContext(diagnostic.filePath) !== "production";
@@ -66484,6 +66484,7 @@ var OxlintConcurrency = class extends Reference("react-doctor/OxlintConcurrency"
 	if (Number.isInteger(parsed) && parsed > 0) return resolveScanConcurrency(parsed);
 	return resolveAutoScanConcurrency();
 } }) {};
+var OxlintSpawnSlots = class extends Reference("react-doctor/OxlintSpawnSlots", { defaultValue: () => null }) {};
 /**
 * Three-state control for overlapping the dead-code pass with the lint pass —
 * forking dead-code as a child fiber that runs DURING lint instead of strictly
@@ -68758,8 +68759,8 @@ const getCapabilities = (project) => {
 	const cached = capabilitiesByProject.get(project);
 	if (cached !== void 0) return cached;
 	const capabilities = new Set(buildCapabilities(project));
-	const packageJson = readPackageJson(Path.join(project.rootDirectory, "package.json"));
-	const targetBlankOpenerProtection = detectTargetBlankOpenerProtection(project.rootDirectory, packageJson);
+	const capabilityRootDirectory = isFile(Path.join(project.rootDirectory, "package.json")) ? project.rootDirectory : findNearestAncestorPackageJson(project.rootDirectory) ?? project.rootDirectory;
+	const targetBlankOpenerProtection = detectTargetBlankOpenerProtection(capabilityRootDirectory, readPackageJson(Path.join(capabilityRootDirectory, "package.json")));
 	if (targetBlankOpenerProtection !== void 0) capabilities.add("target-blank-needs-explicit-protection");
 	if (targetBlankOpenerProtection === "noreferrer") capabilities.add("target-blank-needs-noreferrer");
 	capabilitiesByProject.set(project, capabilities);
@@ -68789,7 +68790,7 @@ const createSecurityScanSession = (rootDirectory, options) => {
 	const capabilities = options.project ? getCapabilities(options.project) : /* @__PURE__ */ new Set();
 	const ignoredTags = options.ignoredTags ?? /* @__PURE__ */ new Set();
 	const includedTags = options.includedTags ?? /* @__PURE__ */ new Set();
-	const enabledScanRules = REACT_DOCTOR_RULES.flatMap((entry) => {
+	const enabledScanRules = REACT_DOCTOR_SCAN_RULES.flatMap((entry) => {
 		const rule = entry.rule;
 		const scan = rule.scan;
 		if (typeof scan !== "function") return [];
@@ -69234,47 +69235,55 @@ const resolveDeadCodeConcurrency = (facts = readSystemFacts()) => {
 	const memoryBoundedWorkers = Math.floor(availableMemoryBytes / DEAD_CODE_WORKER_MEM_BUDGET_BYTES);
 	return Math.max(1, Math.min(facts.availableCores, memoryBoundedWorkers));
 };
-let availableSlots = -1;
-const waiters = [];
-const releaseSlot = () => {
-	const nextWaiter = waiters.shift();
-	if (nextWaiter !== void 0) nextWaiter();
-	else availableSlots += 1;
+const createWorkerSlots = (input) => {
+	let availableSlotCount = input.slotCount;
+	const waiters = [];
+	const releaseSlot = () => {
+		const nextWaiter = waiters.shift();
+		if (nextWaiter === void 0) {
+			availableSlotCount += 1;
+			return;
+		}
+		nextWaiter.abortSignal?.removeEventListener("abort", nextWaiter.onAbort);
+		nextWaiter.resolve();
+	};
+	const acquireSlot = async (abortSignal) => {
+		if (abortSignal?.aborted) throw input.createAbortError();
+		if (availableSlotCount > 0) {
+			availableSlotCount -= 1;
+			return;
+		}
+		await new Promise((resolve, reject) => {
+			const onAbort = () => {
+				const waiterIndex = waiters.indexOf(waiter);
+				if (waiterIndex !== -1) waiters.splice(waiterIndex, 1);
+				reject(input.createAbortError());
+			};
+			const waiter = {
+				resolve,
+				abortSignal,
+				onAbort
+			};
+			waiters.push(waiter);
+			abortSignal?.addEventListener("abort", onAbort, { once: true });
+		});
+	};
+	return { run: async (task, abortSignal) => {
+		await acquireSlot(abortSignal);
+		try {
+			return await task();
+		} finally {
+			releaseSlot();
+		}
+	} };
 };
-/**
-* Runs `task` once a dead-code worker slot is free, releasing the slot when the
-* task settles (success or failure). With a high cap (roomy machine) every
-* caller proceeds immediately; with a low cap (constrained runner) callers
-* queue and run as slots free.
-*
-* `abortSignal` short-circuits the WAIT: if it's already aborted, or fires while
-* this caller is queued, the call rejects without acquiring a slot or running
-* `task` — so a cancelled scan (e.g. lint failed) doesn't sit in the queue and
-* then spawn a child only to tear it down. A queued caller that aborts removes
-* its own waiter so a later release never hands a slot to a dead request.
-*/
+let deadCodeWorkerSlots = null;
 const withDeadCodeWorkerSlot = async (task, abortSignal) => {
-	if (abortSignal?.aborted) throw new Error("Dead-code worker aborted.");
-	if (availableSlots < 0) availableSlots = resolveDeadCodeConcurrency();
-	if (availableSlots > 0) availableSlots -= 1;
-	else await new Promise((resolve, reject) => {
-		const waiter = () => {
-			abortSignal?.removeEventListener("abort", onAbort);
-			resolve();
-		};
-		const onAbort = () => {
-			const queuedIndex = waiters.indexOf(waiter);
-			if (queuedIndex !== -1) waiters.splice(queuedIndex, 1);
-			reject(/* @__PURE__ */ new Error("Dead-code worker aborted."));
-		};
-		waiters.push(waiter);
-		abortSignal?.addEventListener("abort", onAbort, { once: true });
+	deadCodeWorkerSlots ??= createWorkerSlots({
+		slotCount: resolveDeadCodeConcurrency(),
+		createAbortError: () => /* @__PURE__ */ new Error("Dead-code worker aborted.")
 	});
-	try {
-		return await task();
-	} finally {
-		releaseSlot();
-	}
+	return deadCodeWorkerSlots.run(task, abortSignal);
 };
 const projectCacheSubdir = (projectDirectory) => crypto.createHash("sha256").update(projectDirectory).digest("hex").slice(0, 16);
 const resolveReactDoctorCacheDir = (projectDirectory) => {
@@ -70801,12 +70810,12 @@ const createOxlintConfig = ({ pluginPath, project, customRulesOnly = false, exte
 	const settingsRootDirectory = resolveSettingsRootDirectory(project.rootDirectory);
 	const enabledReactDoctorRules = {};
 	for (const registryEntry of REACT_DOCTOR_RULES) {
-		const rule = reactDoctorPlugin.rules[registryEntry.id];
+		const rule = REACT_DOCTOR_RULE_REGISTRY[registryEntry.id];
 		if (!rule) continue;
 		if (ruleSelection === "cacheable" && CROSS_FILE_RULE_IDS.has(registryEntry.id)) continue;
 		if (ruleSelection === "sidecar" && !CROSS_FILE_RULE_IDS.has(registryEntry.id)) continue;
 		if (ruleSelection === "sidecar" && sidecarRuleIdFilter !== void 0 && !sidecarRuleIdFilter.has(registryEntry.id)) continue;
-		if (rule.scan !== void 0) continue;
+		if (rule.isScanRule) continue;
 		if (customRulesOnly && registryEntry.originallyExternal) continue;
 		if (rule.framework !== "global" && !rule.requires) continue;
 		if (!shouldEnableRule(rule.requires, rule.tags, capabilities, ignoredTags, rule.disabledWhen, includedTags)) continue;
@@ -72117,7 +72126,7 @@ const PLUGIN_CATEGORY_MAP = {
 };
 const lookupOwnString = (record, key) => Object.hasOwn(record, key) ? record[key] : void 0;
 const getRuleRecommendation = (ruleName, project) => {
-	const rule = reactDoctorPlugin.rules[ruleName];
+	const rule = REACT_DOCTOR_RULE_REGISTRY[ruleName];
 	if (!rule) return void 0;
 	if (rule.recommendationFor) {
 		const capabilities = getCapabilities(project);
@@ -72126,8 +72135,8 @@ const getRuleRecommendation = (ruleName, project) => {
 	}
 	return rule.recommendation;
 };
-const getRuleCategory = (ruleName) => reactDoctorPlugin.rules[ruleName]?.category;
-const getRuleTitle = (ruleName) => reactDoctorPlugin.rules[ruleName]?.title;
+const getRuleCategory = (ruleName) => REACT_DOCTOR_RULE_REGISTRY[ruleName]?.category;
+const getRuleTitle = (ruleName) => REACT_DOCTOR_RULE_REGISTRY[ruleName]?.title;
 const resolveDiagnosticTitle = (plugin, rule) => {
 	if (plugin !== "react-hooks-js") return getRuleTitle(rule);
 	if (rule === "error-boundaries") return REACT_ERROR_BOUNDARY_TITLE;
@@ -72182,7 +72191,7 @@ const resolveDiagnosticCategory = (plugin, rule) => {
 	if (plugin === "react-hooks-js" && rule === "error-boundaries") return "Bugs";
 	return getRuleCategory(rule) ?? lookupOwnString(PLUGIN_CATEGORY_MAP, plugin) ?? "Bugs";
 };
-const resolveMatchByOccurrence = (rule, category) => OCCURRENCE_MATCHED_CATEGORIES.has(category) || Boolean(reactDoctorPlugin.rules[rule]?.matchByOccurrence);
+const resolveMatchByOccurrence = (rule, category) => OCCURRENCE_MATCHED_CATEGORIES.has(category) || Boolean(REACT_DOCTOR_RULE_REGISTRY[rule]?.matchByOccurrence);
 /**
 * Maps oxlint's non-primary labels (`labels[1..]`) into related source
 * locations. Editors surface these as a diagnostic's
@@ -72273,7 +72282,7 @@ const parseOxlintOutput = (stdout, project, rootDirectory, sourcePathByLintPath,
 		const preparedSourceMap = resolvePreparedSourceMap(diagnostic.filename);
 		if (preparedSourceMap === void 0) return [diagnostic];
 		const { plugin, rule } = parseRuleCode(diagnostic.code);
-		if (plugin !== "react-doctor" || !reactDoctorPlugin.rules[rule]?.tags?.includes("design")) return [];
+		if (plugin !== "react-doctor" || !REACT_DOCTOR_RULE_REGISTRY[rule]?.tags?.includes("design")) return [];
 		const labels = mapPreparedSourceLabels(diagnostic.labels, preparedSourceMap);
 		const sourceFilename = resolveMappedSourceFilename(diagnostic.filename);
 		return labels === null || sourceFilename === void 0 ? [] : [{
@@ -72359,11 +72368,12 @@ const SANITIZED_ENV = buildOxlintChildEnv(process.env);
 * The first three are splittable (the caller's binary-split retry
 * shrinks the batch and re-spawns); the fourth isn't.
 */
-const spawnOxlint = (args, rootDirectory, nodeBinaryPath, spawnTimeoutMs = OXLINT_SPAWN_TIMEOUT_MS, outputMaxBytes = OXLINT_OUTPUT_MAX_BYTES, abortSignal) => new Promise((resolve, reject) => {
+const spawnOxlint = (args, rootDirectory, nodeBinaryPath, spawnTimeoutMs = OXLINT_SPAWN_TIMEOUT_MS, outputMaxBytes = OXLINT_OUTPUT_MAX_BYTES, abortSignal, onSpawn) => new Promise((resolve, reject) => {
 	if (abortSignal?.aborted) {
 		reject(new ReactDoctorError({ reason: new OxlintSpawnFailed({ cause: "lint phase aborted" }) }));
 		return;
 	}
+	onSpawn?.();
 	const child = spawn(nodeBinaryPath, buildProfiledNodeArguments({
 		argumentsList: args,
 		cpuProfileDirectory: SANITIZED_ENV.REACT_DOCTOR_CPU_PROFILE_DIR,
@@ -72523,7 +72533,21 @@ const spawnLintBatches = async (input) => {
 			}
 			const batchArgs = [...baseArgs, ...batch];
 			try {
-				return parseOxlintOutput(await spawnOxlint(batchArgs, rootDirectory, nodeBinaryPath, spawnTimeoutMs, outputMaxBytes, signal), project, rootDirectory, sourcePathByLintPath, sourceMapByLintPath);
+				const spawnBatch = () => {
+					if (isPastDeadline()) {
+						deadlineSkippedFiles.push(...batch);
+						batchState.deadlineSkippedFileCount += batch.length;
+						return Promise.resolve(null);
+					}
+					return spawnOxlint(batchArgs, rootDirectory, nodeBinaryPath, spawnTimeoutMs, outputMaxBytes, signal, () => {
+						if (batchState.didStart) return;
+						batchState.didStart = true;
+						startedFileCount += batchState.initialFileCount;
+					});
+				};
+				const stdout = input.spawnSlots === void 0 ? await spawnBatch() : await input.spawnSlots.run(spawnBatch, signal);
+				if (stdout === null) return [];
+				return parseOxlintOutput(stdout, project, rootDirectory, sourcePathByLintPath, sourceMapByLintPath);
 			} catch (error) {
 				if (!isSplittableReactDoctorError(error)) throw error;
 				if (isPastDeadline()) {
@@ -72567,14 +72591,15 @@ const spawnLintBatches = async (input) => {
 					deadlineSkippedFiles.push(...batch);
 					return [];
 				}
-				startedFileCount += batch.length;
 				const batchState = {
 					deadlineMs: null,
-					deadlineSkippedFileCount: 0
+					deadlineSkippedFileCount: 0,
+					didStart: false,
+					initialFileCount: batch.length
 				};
 				const batchDiagnostics = await spawnLintBatch(batch, 0, batchState);
 				scannedFileCount += batch.length - batchState.deadlineSkippedFileCount;
-				if (passOnFileProgress) {
+				if (passOnFileProgress && batchState.didStart) {
 					displayedFileCount = Math.min(Math.max(displayedFileCount, scannedFileCount), totalFileCount);
 					passOnFileProgress(displayedFileCount, totalFileCount);
 				}
@@ -72658,8 +72683,8 @@ const validateRuleRegistration = () => {
 	for (const fullKey of ALL_REACT_DOCTOR_RULE_KEYS) {
 		const ruleName = fullKey.replace(/^react-doctor\//, "");
 		if (!getRuleCategory(ruleName)) missingCategory.push(fullKey);
-		if (!reactDoctorPlugin.rules[ruleName]?.recommendation) missingHelp.push(fullKey);
-		if (FRAMEWORK_SPECIFIC_RULE_KEYS.has(fullKey) && !reactDoctorPlugin.rules[ruleName]?.requires) missingMetadata.push(fullKey);
+		if (!REACT_DOCTOR_RULE_REGISTRY[ruleName]?.recommendation) missingHelp.push(fullKey);
+		if (FRAMEWORK_SPECIFIC_RULE_KEYS.has(fullKey) && !REACT_DOCTOR_RULE_REGISTRY[ruleName]?.requires) missingMetadata.push(fullKey);
 	}
 	if (missingCategory.length === 0 && missingHelp.length === 0 && missingMetadata.length === 0) return;
 	const detail = [
@@ -73300,6 +73325,7 @@ const runOxlint = async (options) => {
 					spawnTimeoutMs,
 					outputMaxBytes,
 					concurrency: options.concurrency,
+					spawnSlots: options.spawnSlots,
 					signal: options.signal,
 					deadlineEpochMs: options.deadlineEpochMs
 				});
@@ -73502,6 +73528,7 @@ const runOxlint = async (options) => {
 			spawnTimeoutMs,
 			outputMaxBytes,
 			concurrency: options.concurrency,
+			spawnSlots: options.spawnSlots,
 			signal: options.signal,
 			deadlineEpochMs: options.deadlineEpochMs
 		});
@@ -73596,6 +73623,7 @@ var Linter = class Linter extends Service()("react-doctor/Linter") {
 		const spawnTimeoutMs = yield* OxlintSpawnTimeoutMs;
 		const outputMaxBytes = yield* OxlintOutputMaxBytes;
 		const concurrency = yield* OxlintConcurrency;
+		const spawnSlots = yield* OxlintSpawnSlots;
 		const lintBatchOrdering = yield* LintBatchOrdering;
 		const perFileLintCacheEnabled = yield* PerFileLintCacheEnabled;
 		const sidecarLintCacheEnabled = yield* SidecarLintCacheEnabled;
@@ -73625,6 +73653,7 @@ var Linter = class Linter extends Service()("react-doctor/Linter") {
 				onSidecarStats: input.onSidecarStats,
 				spawnTimeoutMs,
 				outputMaxBytes,
+				spawnSlots: spawnSlots ?? void 0,
 				concurrency,
 				signal,
 				lintBatchOrdering,
@@ -74995,7 +75024,7 @@ const runEditorScan = async (input) => {
 * other `clear*` helpers.
 */
 const clearAutoSuppressionCaches = () => {};
-const lookupOwnRule = (rule) => Object.hasOwn(reactDoctorPlugin.rules, rule) ? reactDoctorPlugin.rules[rule] : void 0;
+const lookupOwnRule = (rule) => Object.hasOwn(REACT_DOCTOR_RULE_REGISTRY, rule) ? REACT_DOCTOR_RULE_REGISTRY[rule] : void 0;
 /**
 * Returns presentation metadata for `<plugin>/<rule>`, or `null` when the
 * rule is not part of the bundled react-doctor plugin (e.g. an adopted
@@ -77071,5 +77100,5 @@ const startLanguageServer = () => {
 };
 //#endregion
 export { startLanguageServer };
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="7cb1cf13-9787-536b-856a-49d43fec26a4")}catch(e){}}();
-//# debugId=7cb1cf13-9787-536b-856a-49d43fec26a4
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="ec49e114-f0f3-593d-b3c1-8b1a04d065a6")}catch(e){}}();
+//# debugId=ec49e114-f0f3-593d-b3c1-8b1a04d065a6

package/dist/{run-scan-app-C9MJnVwv.js → run-scan-app-DHRvqfkX.js}

@@ -1,6 +1,6 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="90f58187-6a1d-56d1-a411-800f7bc51d28")}catch(e){}}();
-import { A as toForwardSlashes, B as getCategoryImpact, C as buildRulePriorityMap, D as resolveBlockingLevel, E as formatLearnMoreLine, F as TUI_REPORT_DETAIL_WIDTH_FRACTION, G as runPromise, H as mapWithConcurrency, I as isCiEnvironment, J as succeed, K as sync, L as DIAGNOSTIC_CATEGORY_BUCKETS, M as isUnicodeSupported, N as METRIC, O as isReactDoctorWorkflowInstalled, P as TUI_REPORT_COMPACT_MAX_ROWS, R as Progress, S as hasLintHardFailure, T as formatFixRecipeLine, U as mergeReactDoctorConfigs, V as highlighter, W as resolveScanTarget, _ as canAnimateOnboarding, a as resolveCliInspectOptions, b as buildCodeFrame, c as detectLaunchableAgents, d as launchCliAgent, f as isShareOptedOut, g as doctorFace, h as easeOutCubic, i as selectProjects, j as findNearestPackageDirectory, k as recordCount, l as CLI_AGENT_BINARIES, m as printFooter, n as shouldFailScanGate, o as countUniqueScannedFiles, p as inspect, q as void_, r as discoverWorkspacePackages, s as setUpGitHubActions, t as exitGracefully, u as copyToClipboard, v as computeProjectedScore, w as buildSortedRuleGroups, x as buildNoScoreMessage, y as formatElapsedTime, z as Reporter } from "./cli.js";
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="898bdb3e-afed-5fca-92a2-f14d1e8ca6fb")}catch(e){}}();
+import { A as toForwardSlashes, B as getCategoryImpact, C as buildRulePriorityMap, D as resolveBlockingLevel, E as formatLearnMoreLine, F as TUI_REPORT_DETAIL_WIDTH_FRACTION, G as runPromise, H as mapWithConcurrency, I as isCiEnvironment, J as succeed, K as sync, L as DIAGNOSTIC_CATEGORY_BUCKETS, M as isUnicodeSupported, N as METRIC, O as isReactDoctorWorkflowInstalled, P as TUI_REPORT_COMPACT_MAX_ROWS, R as Progress, S as hasLintHardFailure, T as formatFixRecipeLine, U as mergeReactDoctorConfigs, V as highlighter, W as resolveScanTarget, _ as canAnimateOnboarding, a as resolveCliInspectOptions, b as buildCodeFrame, c as detectLaunchableAgents, d as launchCliAgent, f as isShareOptedOut, g as doctorFace, h as easeOutCubic, i as selectProjects, j as findNearestPackageDirectory, k as recordCount, l as CLI_AGENT_BINARIES, m as printFooter, n as shouldFailScanGate, o as countUniqueScannedFiles, p as createInvocationInspect, q as void_, r as discoverWorkspacePackages, s as setUpGitHubActions, t as exitGracefully, u as copyToClipboard, v as computeProjectedScore, w as buildSortedRuleGroups, x as buildNoScoreMessage, y as formatElapsedTime, z as Reporter } from "./cli.js";
 import path from "node:path";
 import { performance } from "node:perf_hooks";
 import { getSkillAgentConfig } from "agent-install";
@@ -1610,11 +1610,11 @@ const runMountedScan = async (rootDirectory, presentation, blockingLevel, execut
 		throw error;
 	}
 };
-const runSingleProjectScan = async (rootScanTarget, projectDirectory, input, blockingLevel) => {
+const runSingleProjectScan = async (rootScanTarget, projectDirectory, input, blockingLevel, inspectProject) => {
 	const projectScan = await resolveProjectScan(rootScanTarget, projectDirectory);
 	const presentation = resolveScanPresentation(input, [projectScan]);
 	return runMountedScan(projectScan.directory, presentation, blockingLevel, async (context) => {
-		const result = await inspect(projectScan.directory, {
+		const result = await inspectProject(projectScan.directory, {
 			...resolveTuiInspectOptions(input, projectScan.config),
 			isCi: isCiEnvironment(),
 			configOverride: projectScan.config,
@@ -1645,7 +1645,7 @@ const runSingleProjectScan = async (rootScanTarget, projectDirectory, input, blo
 		};
 	});
 };
-const runMultiProjectScan = async (rootScanTarget, directories, input, blockingLevel) => {
+const runMultiProjectScan = async (rootScanTarget, directories, input, blockingLevel, inspectProject) => {
 	const rootDirectory = rootScanTarget.resolvedDirectory;
 	const projectScans = await mapWithConcurrency([...directories], 4, (projectDirectory) => resolveProjectScan(rootScanTarget, projectDirectory));
 	return runMountedScan(rootDirectory, resolveScanPresentation(input, projectScans), blockingLevel, async (context) => {
@@ -1653,7 +1653,7 @@ const runMultiProjectScan = async (rootScanTarget, directories, input, blockingL
 		let finishedCount = 0;
 		context.store.setProgress(`Scanning ${directories.length} projects…`);
 		const results = await mapWithConcurrency(projectScans, 4, async (projectScan) => {
-			const result = await inspect(projectScan.directory, {
+			const result = await inspectProject(projectScan.directory, {
 				...resolveTuiInspectOptions(input, projectScan.config),
 				isCi: isCiEnvironment(),
 				configOverride: projectScan.config,
@@ -1720,13 +1720,14 @@ const runScanApp = async (input) => {
 		share: input.share ?? scanTarget.userConfig?.share ?? true
 	};
 	const selectedDirectories = await resolveSelectedDirectories(rootDirectory, resolvedInput);
+	const inspectProject = createInvocationInspect(input.options?.concurrency);
 	const blockingLevel = resolveBlockingLevel({ blocking: resolvedInput.blocking }, scanTarget.userConfig);
 	if (selectedDirectories.length === 0) return { shouldFail: false };
-	if (selectedDirectories.length === 1) return runSingleProjectScan(scanTarget, selectedDirectories[0], resolvedInput, blockingLevel);
-	return runMultiProjectScan(scanTarget, selectedDirectories, resolvedInput, blockingLevel);
+	if (selectedDirectories.length === 1) return runSingleProjectScan(scanTarget, selectedDirectories[0], resolvedInput, blockingLevel, inspectProject);
+	return runMultiProjectScan(scanTarget, selectedDirectories, resolvedInput, blockingLevel, inspectProject);
 };
 //#endregion
 export { runScanApp };
 
-//# sourceMappingURL=run-scan-app-C9MJnVwv.js.map
-//# debugId=90f58187-6a1d-56d1-a411-800f7bc51d28
+//# sourceMappingURL=run-scan-app-DHRvqfkX.js.map
+//# debugId=898bdb3e-afed-5fca-92a2-f14d1e8ca6fb

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "react-doctor",
-  "version": "0.9.2-dev.9512488",
+  "version": "0.9.2-dev.992205a",
   "description": "Your agent writes bad React. This catches it",
   "keywords": [
     "accessibility",
@@ -71,8 +71,8 @@
     "vscode-languageserver-textdocument": "^1.0.12",
     "vscode-uri": "^3.1.0",
     "yaml": "^2.9.0",
-    "oxlint-plugin-react-doctor": "0.9.2-dev.9512488",
-    "deslop-js": "0.9.2"
+    "deslop-js": "0.9.2",
+    "oxlint-plugin-react-doctor": "0.9.2-dev.992205a"
   },
   "devDependencies": {
     "@types/babel__code-frame": "^7.27.0",
@@ -82,9 +82,9 @@
     "commander": "^14.0.3",
     "ink-testing-library": "^4.0.0",
     "ora": "^9.4.0",
-    "@react-doctor/api": "0.9.2",
+    "@react-doctor/language-server": "0.9.2",
     "@react-doctor/core": "0.9.2",
-    "@react-doctor/language-server": "0.9.2"
+    "@react-doctor/api": "0.9.2"
   },
   "engines": {
     "node": "^20.19.0 || >=22.13.0"