react-doctor 0.9.4-dev.8b97fdc → 0.9.4-dev.bafef41

package/dist/cli.js

@@ -1,5 +1,5 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="cae1c0fa-086e-5609-a7c4-729ec799fb2c")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="e74e6a68-20e1-59fe-8db0-62b87e8fe049")}catch(e){}}();
 import { createRequire } from "node:module";
 import * as NodeChildProcess from "node:child_process";
 import { execFile, execFileSync, spawn, spawnSync } from "node:child_process";
@@ -65501,17 +65501,20 @@ const SUPPLY_CHAIN_IGNORED_PACKAGES = new Set(["next"]);
 const isErrnoException = (error) => error instanceof Error && "code" in error;
 const IGNORABLE_READDIR_ERROR_CODES = new Set([
 	"EACCES",
+	"EBUSY",
 	"EPERM",
 	"ENOENT",
 	"ENOTDIR",
 	"EINVAL",
 	"ELOOP",
-	"ENAMETOOLONG"
+	"ENAMETOOLONG",
+	"ETIMEDOUT",
+	"UNKNOWN"
 ]);
 const isIgnorableReaddirError = (error) => isErrnoException(error) && typeof error.code === "string" && IGNORABLE_READDIR_ERROR_CODES.has(error.code);
 const readDirectoryEntries = (directoryPath) => {
 	try {
-		return NFS.readdirSync(directoryPath, { withFileTypes: true });
+		return fs.readdirSync(directoryPath, { withFileTypes: true });
 	} catch (error) {
 		if (isIgnorableReaddirError(error)) return [];
 		throw error;
@@ -65519,14 +65522,14 @@ const readDirectoryEntries = (directoryPath) => {
 };
 const isFile = (filePath) => {
 	try {
-		return NFS.statSync(filePath).isFile();
+		return fs.statSync(filePath).isFile();
 	} catch {
 		return false;
 	}
 };
 const isDirectory = (directoryPath) => {
 	try {
-		return NFS.statSync(directoryPath).isDirectory();
+		return fs.statSync(directoryPath).isDirectory();
 	} catch {
 		return false;
 	}
@@ -65950,7 +65953,12 @@ const mergeCompilerOptions = (inherited, current) => {
 	};
 };
 const readResolvedCompilerOptions = (tsConfigPath, extendsDepth, visitedPaths) => {
-	const realPath = NFS.realpathSync.native(tsConfigPath);
+	let realPath;
+	try {
+		realPath = NFS.realpathSync.native(tsConfigPath);
+	} catch {
+		return null;
+	}
 	if (visitedPaths.has(realPath)) return null;
 	const tsConfig = readTsConfig(realPath);
 	if (!tsConfig) return null;
@@ -66478,27 +66486,30 @@ const getSelectedObjectProperty = (expression, propertyName, analysis, visitedEx
 	}
 	return null;
 };
-const configExpressionMayDefineProperty = (expression, propertyName, analysis) => {
+const configExpressionMayDefineProperty = (expression, propertyName, analysis, visitedExpressions = /* @__PURE__ */ new Set()) => {
 	let resolvedExpression = expression;
 	while (ts.isParenthesizedExpression(resolvedExpression) || ts.isAsExpression(resolvedExpression) || ts.isTypeAssertionExpression(resolvedExpression) || ts.isSatisfiesExpression(resolvedExpression) || ts.isNonNullExpression(resolvedExpression)) resolvedExpression = resolvedExpression.expression;
+	if (visitedExpressions.has(resolvedExpression)) return true;
+	const nextVisitedExpressions = new Set(visitedExpressions);
+	nextVisitedExpressions.add(resolvedExpression);
 	if (ts.isIdentifier(resolvedExpression)) {
 		if (analysis.localBindings.has(resolvedExpression.text)) {
 			const localReference = analysis.localBindings.get(resolvedExpression.text);
-			return localReference?.expression ? configExpressionMayDefineProperty(localReference.expression, propertyName, localReference.analysis) : true;
+			return localReference?.expression ? configExpressionMayDefineProperty(localReference.expression, propertyName, localReference.analysis, nextVisitedExpressions) : true;
 		}
 		const scopedBinding = getScopedConfigBinding(resolvedExpression);
-		if (scopedBinding.wasFound) return scopedBinding.initializer ? configExpressionMayDefineProperty(scopedBinding.initializer, propertyName, analysis) : true;
+		if (scopedBinding.wasFound) return scopedBinding.initializer ? configExpressionMayDefineProperty(scopedBinding.initializer, propertyName, analysis, nextVisitedExpressions) : true;
 		const topLevelBinding = getTopLevelBinding(analysis.sourceFile, resolvedExpression.text);
-		return topLevelBinding && ts.isExpression(topLevelBinding) ? configExpressionMayDefineProperty(topLevelBinding, propertyName, analysis) : true;
+		return topLevelBinding && ts.isExpression(topLevelBinding) ? configExpressionMayDefineProperty(topLevelBinding, propertyName, analysis, nextVisitedExpressions) : true;
 	}
 	if (ts.isConditionalExpression(resolvedExpression)) {
-		if (isStaticallyTruthyConfigExpression(resolvedExpression.condition, analysis)) return configExpressionMayDefineProperty(resolvedExpression.whenTrue, propertyName, analysis);
-		if (isStaticallyDisabledConfigExpression(resolvedExpression.condition, analysis)) return configExpressionMayDefineProperty(resolvedExpression.whenFalse, propertyName, analysis);
-		return configExpressionMayDefineProperty(resolvedExpression.whenTrue, propertyName, analysis) || configExpressionMayDefineProperty(resolvedExpression.whenFalse, propertyName, analysis);
+		if (isStaticallyTruthyConfigExpression(resolvedExpression.condition, analysis)) return configExpressionMayDefineProperty(resolvedExpression.whenTrue, propertyName, analysis, nextVisitedExpressions);
+		if (isStaticallyDisabledConfigExpression(resolvedExpression.condition, analysis)) return configExpressionMayDefineProperty(resolvedExpression.whenFalse, propertyName, analysis, nextVisitedExpressions);
+		return configExpressionMayDefineProperty(resolvedExpression.whenTrue, propertyName, analysis, nextVisitedExpressions) || configExpressionMayDefineProperty(resolvedExpression.whenFalse, propertyName, analysis, nextVisitedExpressions);
 	}
 	if (!ts.isObjectLiteralExpression(resolvedExpression)) return true;
 	return resolvedExpression.properties.some((property) => {
-		if (ts.isSpreadAssignment(property)) return configExpressionMayDefineProperty(property.expression, propertyName, analysis);
+		if (ts.isSpreadAssignment(property)) return configExpressionMayDefineProperty(property.expression, propertyName, analysis, nextVisitedExpressions);
 		if (ts.isPropertyAssignment(property) || ts.isShorthandPropertyAssignment(property) || ts.isMethodDeclaration(property) || ts.isGetAccessorDeclaration(property) || ts.isSetAccessorDeclaration(property)) {
 			const staticPropertyName = getStaticPropertyName$2(property.name);
 			return staticPropertyName === null || staticPropertyName === propertyName;
@@ -66574,7 +66585,13 @@ const analyzeConfigModuleExport = (filePath, exportName, allowCompilerTransform,
 	if (visitedModules.has(moduleVisitKey)) return false;
 	const nextVisitedModules = new Set(visitedModules);
 	nextVisitedModules.add(moduleVisitKey);
-	return analyzeConfigSourceFileExport(parseConfigSourceFile(filePath, NFS.readFileSync(filePath, "utf-8")), filePath, exportName, allowCompilerTransform, importDepth, nextVisitedModules, argumentsList, argumentAnalysis);
+	let sourceText;
+	try {
+		sourceText = NFS.readFileSync(filePath, "utf-8");
+	} catch {
+		return false;
+	}
+	return analyzeConfigSourceFileExport(parseConfigSourceFile(filePath, sourceText), filePath, exportName, allowCompilerTransform, importDepth, nextVisitedModules, argumentsList, argumentAnalysis);
 };
 const analyzeConfigSourceFileExport = (sourceFile, filePath, exportName, allowCompilerTransform, importDepth, visitedModules, argumentsList = [], argumentAnalysis) => {
 	const analysis = {
@@ -70077,6 +70094,43 @@ const validateStringArrayField = (fieldName, value) => {
 		return false;
 	});
 };
+const validateIgnoreOverride = (rawOverride, index) => {
+	const fieldName = `ignore.overrides[${index}]`;
+	if (!isRecord$1(rawOverride)) {
+		warnConfigIssue(`config field "${fieldName}" must be an object (got ${typeof rawOverride}); ignoring this override.`);
+		return;
+	}
+	const files = validateStringArrayField(`${fieldName}.files`, rawOverride.files);
+	if (files === void 0) return void 0;
+	const validatedOverride = { files };
+	if (rawOverride.rules !== void 0) {
+		const rules = validateStringArrayField(`${fieldName}.rules`, rawOverride.rules);
+		if (rules !== void 0) validatedOverride.rules = rules;
+	}
+	return validatedOverride;
+};
+const validateIgnoreField = (rawIgnore) => {
+	if (!isRecord$1(rawIgnore)) {
+		warnConfigIssue(`config field "ignore" must be an object (got ${typeof rawIgnore}); ignoring this field.`);
+		return;
+	}
+	const validatedIgnore = {};
+	for (const fieldName of [
+		"rules",
+		"files",
+		"tags"
+	]) {
+		if (rawIgnore[fieldName] === void 0) continue;
+		const validatedValues = validateStringArrayField(`ignore.${fieldName}`, rawIgnore[fieldName]);
+		if (validatedValues !== void 0) validatedIgnore[fieldName] = validatedValues;
+	}
+	if (rawIgnore.overrides !== void 0) if (!Array.isArray(rawIgnore.overrides)) warnConfigIssue(`config field "ignore.overrides" must be an array (got ${typeof rawIgnore.overrides}); ignoring this field.`);
+	else validatedIgnore.overrides = rawIgnore.overrides.flatMap((rawOverride, index) => {
+		const validatedOverride = validateIgnoreOverride(rawOverride, index);
+		return validatedOverride ? [validatedOverride] : [];
+	});
+	return validatedIgnore;
+};
 const validateSurfaceControls = (surface, rawControls) => {
 	if (!isRecord$1(rawControls)) {
 		warnConfigIssue(`config field "surfaces.${surface}" must be an object (got ${typeof rawControls}); ignoring this surface.`);
@@ -70152,6 +70206,7 @@ const validateConfigTypes = (config) => {
 	for (const fieldName of BOOLEAN_FIELD_NAMES) applyFieldValidator(config, validated, fieldName, (value) => coerceMaybeBooleanString(fieldName, value));
 	for (const fieldName of STRING_FIELD_NAMES) applyFieldValidator(config, validated, fieldName, (value) => validateString(fieldName, value));
 	for (const fieldName of STRING_ARRAY_FIELD_NAMES) applyFieldValidator(config, validated, fieldName, (value) => validateStringArrayField(fieldName, value));
+	applyFieldValidator(config, validated, "ignore", validateIgnoreField);
 	applyFieldValidator(config, validated, "surfaces", validateSurfacesField);
 	for (const fieldName of SEVERITY_FIELD_NAMES) applyFieldValidator(config, validated, fieldName, (value) => validateSeverityMap(fieldName, value, fieldName === "categories"));
 	applyFieldValidator(config, validated, "plugins", (value) => validateStringArrayField("plugins", value));
@@ -71844,7 +71899,7 @@ const collectScriptMotionEvidence = (sourceFile, typeChecker, program) => {
 			if (calleeEvidence.isReducedMotionHook && isExpressionValueConsumed(node)) evidence.hasReducedMotionHandling = true;
 		}
 		if (ts.isJsxOpeningElement(node) || ts.isJsxSelfClosingElement(node)) {
-			const tagEvidence = ts.isJsxNamespacedName(node.tagName) ? EMPTY_MOTION_EXPRESSION_EVIDENCE : resolveMotionExpressionEvidence(node.tagName, typeChecker, program);
+			const tagEvidence = ts.isIdentifier(node.tagName) || ts.isPropertyAccessExpression(node.tagName) ? resolveMotionExpressionEvidence(node.tagName, typeChecker, program) : EMPTY_MOTION_EXPRESSION_EVIDENCE;
 			if (tagEvidence.isMotionComponent || tagEvidence.isMotionComponentFactory) evidence.hasMotionUse = true;
 			if (tagEvidence.isMotionConfig && jsxElementHasReducedMotionConfiguration(node.attributes, typeChecker)) evidence.hasReducedMotionHandling = true;
 		}
@@ -73844,7 +73899,7 @@ var Git = class Git extends Service()("react-doctor/Git") {
 					changedFiles: yield* mergeUntracked(directory, splitNullSeparated(diff.stdout), includeUntracked),
 					isCurrentChanges: false
 				};
-			}).pipe(withSpan("Git.diffSelection")),
+			}).pipe(catchReasons("ReactDoctorError", { GitInvocationFailed: () => succeed$2(null) }, (_reason, error) => fail$4(error)), withSpan("Git.diffSelection")),
 			stagedFilePaths: (directory) => runGit(directory, [
 				"diff",
 				"--no-ext-diff",
@@ -74060,6 +74115,33 @@ const detectUserLintConfigPaths = (rootDirectory) => {
 	return [];
 };
 const DISABLE_DIRECTIVE_PATTERN = /(eslint|oxlint)-disable/;
+const neutralizedFileLeases = /* @__PURE__ */ new Map();
+const activeNeutralizationInitializations = /* @__PURE__ */ new Set();
+const directoriesOverlap = (left, right) => {
+	const isWithin = (parent, candidate) => {
+		const relativePath = Path.relative(parent, candidate);
+		return relativePath.length === 0 || !relativePath.startsWith(`..${Path.sep}`) && relativePath !== ".." && !Path.isAbsolute(relativePath);
+	};
+	return isWithin(left, right) || isWithin(right, left);
+};
+const withOverlappingInitializationLock = async (rootDirectory, operation) => {
+	const blockers = [...activeNeutralizationInitializations].filter((initialization) => directoriesOverlap(initialization.rootDirectory, rootDirectory)).map((initialization) => initialization.done);
+	let release;
+	const initialization = {
+		rootDirectory,
+		done: new Promise((resolve) => {
+			release = resolve;
+		})
+	};
+	activeNeutralizationInitializations.add(initialization);
+	await Promise.all(blockers);
+	try {
+		return await operation();
+	} finally {
+		activeNeutralizationInitializations.delete(initialization);
+		release();
+	}
+};
 const findFilesWithDisableDirectivesViaGit = async (rootDirectory, includePaths) => {
 	const program = gen(function* () {
 		return yield* (yield* Git).grep({
@@ -74102,34 +74184,84 @@ const findFilesWithDisableDirectivesViaFilesystem = (rootDirectory, includePaths
 };
 const findFilesWithDisableDirectives = async (rootDirectory, includePaths) => await findFilesWithDisableDirectivesViaGit(rootDirectory, includePaths) ?? findFilesWithDisableDirectivesViaFilesystem(rootDirectory, includePaths);
 const neutralizeContent = (content) => content.replaceAll("eslint-disable", "eslint_disable").replaceAll("oxlint-disable", "oxlint_disable");
-const neutralizeDisableDirectives = async (rootDirectory, includePaths) => {
-	const filePaths = await findFilesWithDisableDirectives(rootDirectory, includePaths);
-	const originalContents = /* @__PURE__ */ new Map();
+const collectNeutralizationCandidatePaths = (rootDirectory, discoveredRelativePaths, includePaths) => {
+	const resolvedRootDirectory = NFS.realpathSync(rootDirectory);
+	const requestedPaths = includePaths && includePaths.length > 0 ? new Set(includePaths.flatMap((includePath) => {
+		try {
+			return [NFS.realpathSync(Path.resolve(resolvedRootDirectory, includePath))];
+		} catch {
+			return [];
+		}
+	})) : null;
+	const candidatePaths = /* @__PURE__ */ new Set();
+	for (const relativePath of discoveredRelativePaths) try {
+		candidatePaths.add(NFS.realpathSync(Path.resolve(resolvedRootDirectory, relativePath)));
+	} catch {
+		continue;
+	}
+	for (const leasedPath of neutralizedFileLeases.keys()) {
+		const relativePath = Path.relative(resolvedRootDirectory, leasedPath);
+		if (!(relativePath.length === 0 || !relativePath.startsWith(`..${Path.sep}`) && relativePath !== ".." && !Path.isAbsolute(relativePath)) || requestedPaths && !requestedPaths.has(leasedPath)) continue;
+		candidatePaths.add(leasedPath);
+	}
+	return candidatePaths;
+};
+const neutralizeDisableDirectives = async (rootDirectory, includePaths, options = {}) => {
+	const resolvedRootDirectory = NFS.realpathSync(rootDirectory);
+	const leasedPaths = /* @__PURE__ */ new Set();
 	let isRestored = false;
 	const restore = () => {
 		if (isRestored) return;
 		isRestored = true;
-		for (const [absolutePath, originalContent] of originalContents) try {
-			NFS.writeFileSync(absolutePath, originalContent);
-		} catch (error) {
-			process.stderr.write(`[react-doctor] Failed to restore inline disable directives in ${absolutePath}: ${messageFromUnknown(error)}\n[react-doctor] Run: git checkout -- ${absolutePath}\n`);
+		for (const absolutePath of leasedPaths) {
+			const lease = neutralizedFileLeases.get(absolutePath);
+			if (!lease) continue;
+			lease.referenceCount -= 1;
+			if (lease.referenceCount > 0) continue;
+			neutralizedFileLeases.delete(absolutePath);
+			try {
+				NFS.writeFileSync(absolutePath, lease.originalContent);
+			} catch (error) {
+				process.stderr.write(`[react-doctor] Failed to restore inline disable directives in ${absolutePath}: ${messageFromUnknown(error)}\n[react-doctor] Run: git checkout -- ${absolutePath}\n`);
+			}
 		}
 	};
 	const onExit = () => restore();
 	process.once("exit", onExit);
-	for (const relativePath of filePaths) {
-		const absolutePath = Path.join(rootDirectory, relativePath);
+	const leaseCandidatePath = (absolutePath) => {
+		if (leasedPaths.has(absolutePath)) return;
+		const existingLease = neutralizedFileLeases.get(absolutePath);
+		if (existingLease) {
+			existingLease.referenceCount += 1;
+			leasedPaths.add(absolutePath);
+			return;
+		}
 		let originalContent;
 		try {
 			originalContent = NFS.readFileSync(absolutePath, "utf-8");
 		} catch {
-			continue;
+			return;
 		}
 		const neutralizedContent = neutralizeContent(originalContent);
 		if (neutralizedContent !== originalContent) {
-			originalContents.set(absolutePath, originalContent);
 			NFS.writeFileSync(absolutePath, neutralizedContent);
+			neutralizedFileLeases.set(absolutePath, {
+				originalContent,
+				referenceCount: 1
+			});
+			leasedPaths.add(absolutePath);
 		}
+	};
+	try {
+		await withOverlappingInitializationLock(resolvedRootDirectory, async () => {
+			for (const absolutePath of collectNeutralizationCandidatePaths(resolvedRootDirectory, [], includePaths)) if (neutralizedFileLeases.has(absolutePath)) leaseCandidatePath(absolutePath);
+			const discoveredRelativePaths = await (options.findFiles ?? findFilesWithDisableDirectives)(resolvedRootDirectory, includePaths);
+			for (const absolutePath of collectNeutralizationCandidatePaths(resolvedRootDirectory, discoveredRelativePaths, includePaths)) leaseCandidatePath(absolutePath);
+		});
+	} catch (error) {
+		restore();
+		process.removeListener("exit", onExit);
+		throw error;
 	}
 	return () => {
 		restore();
@@ -78475,7 +78607,7 @@ const materializeSourceTree = (input) => gen(function* () {
 			const sourcePath = path.join(input.directory, subdirectory, configFilename);
 			const targetPath = path.resolve(resolvedTempDirectory, subdirectory, configFilename);
 			if (!isPathInsideDirectory(targetPath, resolvedTempDirectory)) continue;
-			if (fs.existsSync(sourcePath) && !fs.existsSync(targetPath)) {
+			if (isFile(sourcePath) && !fs.existsSync(targetPath)) {
 				fs.mkdirSync(path.dirname(targetPath), { recursive: true });
 				fs.cpSync(sourcePath, targetPath);
 			}
@@ -78993,16 +79125,17 @@ const groupBy = (items, keyFn) => {
 * a 404. Gate the directive on this predicate.
 */
 const hasPublishedFixRecipe = (diagnostic) => diagnostic.plugin === "react-doctor" && Object.hasOwn(REACT_DOCTOR_RULE_REGISTRY, diagnostic.rule);
-const unionValues = (baseValues, overrideValues) => [...new Set([...baseValues, ...overrideValues])];
+const stringValues = (values) => Array.isArray(values) ? values.filter((value) => typeof value === "string") : [];
+const unionValues = (baseValues, overrideValues) => [...new Set([...stringValues(baseValues), ...stringValues(overrideValues)])];
 const mergeIgnores = (baseIgnore, overrideIgnore) => {
 	const mergedIgnore = {
 		...baseIgnore,
 		...overrideIgnore
 	};
-	if (baseIgnore.rules && overrideIgnore.rules) mergedIgnore.rules = unionValues(baseIgnore.rules, overrideIgnore.rules);
-	if (baseIgnore.files && overrideIgnore.files) mergedIgnore.files = unionValues(baseIgnore.files, overrideIgnore.files);
-	if (baseIgnore.tags && overrideIgnore.tags) mergedIgnore.tags = unionValues(baseIgnore.tags, overrideIgnore.tags);
-	if (baseIgnore.overrides && overrideIgnore.overrides) mergedIgnore.overrides = [...baseIgnore.overrides, ...overrideIgnore.overrides];
+	if (baseIgnore.rules !== void 0 || overrideIgnore.rules !== void 0) mergedIgnore.rules = unionValues(baseIgnore.rules, overrideIgnore.rules);
+	if (baseIgnore.files !== void 0 || overrideIgnore.files !== void 0) mergedIgnore.files = unionValues(baseIgnore.files, overrideIgnore.files);
+	if (baseIgnore.tags !== void 0 || overrideIgnore.tags !== void 0) mergedIgnore.tags = unionValues(baseIgnore.tags, overrideIgnore.tags);
+	if (baseIgnore.overrides !== void 0 || overrideIgnore.overrides !== void 0) mergedIgnore.overrides = [...Array.isArray(baseIgnore.overrides) ? baseIgnore.overrides : [], ...Array.isArray(overrideIgnore.overrides) ? overrideIgnore.overrides : []];
 	return mergedIgnore;
 };
 /**
@@ -79197,6 +79330,21 @@ const NON_INTERACTIVE_ENVIRONMENT_VARIABLES = [
 ];
 const isNonInteractiveEnvironment = () => NON_INTERACTIVE_ENVIRONMENT_VARIABLES.some((envVariable) => Boolean(process.env[envVariable])) || isCodingAgentEnvironment();
 //#endregion
+//#region src/cli/utils/cli-input-error.ts
+/**
+* A mistake in *how the CLI was invoked* — a malformed `<file>:<line>`
+* argument, mutually exclusive flags, or an unknown `--project` name. This is
+* user input, not a react-doctor bug, so `isExpectedUserError` routes it
+* through `handleUserError`: a clean, single-line message with no Sentry
+* report and no "Something went wrong, open a prefilled issue" block.
+*
+* The `message` is rendered verbatim, so it must read as a complete,
+* human-readable sentence that tells the user how to fix their invocation.
+*/
+var CliInputError = class extends Error {
+	name = "CliInputError";
+};
+//#endregion
 //#region src/cli/utils/constants.ts
 const REACT_DOCTOR_CONFIG_PROJECT_NAME = "react-doctor";
 const STAGED_FILES_TEMP_DIR_PREFIX = "react-doctor-staged-";
@@ -79348,7 +79496,7 @@ const makeNoopConsole = () => ({
 });
 //#endregion
 //#region src/cli/utils/version.ts
-const VERSION = "0.9.4-dev.8b97fdc";
+const VERSION = "0.9.4-dev.bafef41";
 //#endregion
 //#region src/cli/utils/json-mode.ts
 let context = null;
@@ -79392,9 +79540,14 @@ const enableJsonMode = ({ compact, directory, outputFile }) => {
 		directory,
 		startTime: performance$1.now(),
 		mode: "full",
-		outputFile: outputFile ?? null
+		outputFile: null
 	};
 	installSilentConsole();
+	if (outputFile) {
+		const resolvedOutputFile = Path.resolve(outputFile);
+		if (NFS.existsSync(resolvedOutputFile) && !NFS.statSync(resolvedOutputFile).isFile()) throw new CliInputError(`--json-out must point to a file, not ${resolvedOutputFile}.`);
+		context.outputFile = outputFile;
+	}
 };
 const isJsonModeActive = () => context !== null;
 const setJsonReportDirectory = (directory) => {
@@ -79588,6 +79741,101 @@ const buildSentryScope = (runContext = buildRunContext()) => {
 //#region src/cli/utils/is-env-flag-enabled.ts
 const isEnvFlagEnabled = (value) => value === "1" || value?.toLowerCase() === "true";
 //#endregion
+//#region src/cli/utils/is-environment-error.ts
+const ENVIRONMENT_ERROR_CODES = new Set([
+	"EACCES",
+	"EIO",
+	"ENOSPC",
+	"ENOTDIR",
+	"EPERM",
+	"EROFS"
+]);
+const ENVIRONMENT_FILESYSTEM_SYSCALLS = new Set([
+	"lstat",
+	"open",
+	"read",
+	"readdir",
+	"readlink",
+	"realpath",
+	"scandir",
+	"stat"
+]);
+const TRANSIENT_FILESYSTEM_ERROR_CODES = new Set([
+	"EBUSY",
+	"ETIMEDOUT",
+	"UNKNOWN"
+]);
+const findEnvironmentError = (error) => {
+	const pendingErrors = [error];
+	const visitedErrors = /* @__PURE__ */ new Set();
+	while (pendingErrors.length > 0) {
+		const currentError = pendingErrors.pop();
+		if (typeof currentError !== "object" || currentError === null) continue;
+		if (visitedErrors.has(currentError)) continue;
+		visitedErrors.add(currentError);
+		if (isErrnoException(currentError) && typeof currentError.code === "string") {
+			const syscall = currentError.syscall ?? "";
+			if (ENVIRONMENT_ERROR_CODES.has(currentError.code) || currentError.code === "ENOENT" && syscall.startsWith("spawn") || TRANSIENT_FILESYSTEM_ERROR_CODES.has(currentError.code) && ENVIRONMENT_FILESYSTEM_SYSCALLS.has(syscall)) return currentError;
+		}
+		if (currentError instanceof Error && currentError.cause !== void 0) pendingErrors.push(currentError.cause);
+		if (isReactDoctorError(currentError) && "cause" in currentError.reason) pendingErrors.push(currentError.reason.cause);
+	}
+	return null;
+};
+const isEnvironmentError = (error) => findEnvironmentError(error) !== null;
+const formatEnvironmentError = (error) => {
+	const environmentError = findEnvironmentError(error);
+	if (!environmentError) return messageFromUnknown(error);
+	switch (environmentError.code) {
+		case "EBUSY": return environmentError.path ? `Resource busy or locked at ${environmentError.path}. Close the process using it and try again.` : "Resource busy or locked. Close the process using it and try again.";
+		case "ENOSPC": return "No space left on device. Free up disk space and try again.";
+		case "EIO": return "I/O error: the filesystem or disk may be failing. Check your system logs.";
+		case "EROFS": return "Read-only filesystem: cannot write to this location.";
+		case "EACCES":
+		case "EPERM": return environmentError.path ? `Permission denied accessing ${environmentError.path}. Check file permissions and try again.` : "Permission denied. Check file permissions and try again.";
+		case "ENOTDIR": return environmentError.path ? `A file exists at ${environmentError.path} or one of its parent paths where a directory was expected.` : "A file exists where a directory was expected.";
+		case "ENOENT": return "Required command not found. Ensure the tool (e.g. git) is installed and on your PATH.";
+		case "ETIMEDOUT": return environmentError.path ? `Timed out accessing ${environmentError.path}. Check the network or cloud drive and try again.` : "Filesystem access timed out. Check the network or cloud drive and try again.";
+		case "UNKNOWN": return environmentError.path ? `The operating system could not access ${environmentError.path}. Check the filesystem and try again.` : "The operating system could not access the filesystem. Check it and try again.";
+		default: return environmentError.message;
+	}
+};
+//#endregion
+//#region src/cli/utils/is-expected-user-error.ts
+/**
+* Whether `error` is an expected, user-actionable failure — the user's project
+* or input, not a react-doctor bug. Such failures must be kept out of crash
+* reporting (Sentry + the alertable error-rate metric) and rendered via
+* `handleUserError` (a plain message — no "Something went wrong", prefilled
+* issue, Discord link, or Sentry reference), since there is no bug to report.
+*
+* Four distinct shapes reach the CLI's catch blocks:
+*
+* - **Project-discovery failures** (`NoReactDependencyError`,
+*   `ProjectNotFoundError`, `PackageJsonNotFoundError`, `NotADirectoryError`,
+*   `AmbiguousProjectError`) arrive as their plain legacy classes (so
+*   `isReactDoctorError` is `false` for them) — narrow with
+*   `isProjectDiscoveryError`. Running react-doctor against a directory that
+*   has no React, or a path that doesn't exist, is the canonical example.
+* - **CLI invocation mistakes** (`CliInputError`): a malformed
+*   `<file>:<line>` argument, mutually exclusive flags, or an unknown
+*   `--project` name.
+* - **Bad `--diff` input** (`GitBaseBranchInvalid` / `GitBaseBranchMissing`)
+*   stays the tagged `ReactDoctorError`, so dispatch on the reason `_tag`.
+* - **Environment failures** (`ENOSPC`, `EIO`, `EROFS`, `EACCES`, `EPERM`,
+*   `ENOTDIR`, plus a `spawn`-scoped `ENOENT` for a missing binary) — disk
+*   full / failing / read-only, permission denied, or a path blocked by a
+*   file. React Doctor cannot fix the user's environment; exit cleanly with an
+*   actionable message instead of crashing. See `is-environment-error.ts` for
+*   why the set stays narrow (codes that usually mean our bug keep reaching
+*   Sentry).
+*
+* This composes the existing core narrowers rather than introducing a new
+* error-shape helper (AGENTS.md): it encodes CLI-layer reporting policy, not
+* knowledge of the `ReactDoctorError` shape.
+*/
+const isExpectedUserError = (error) => error instanceof CliInputError || isProjectDiscoveryError(error) || isEnvironmentError(error) || isReactDoctorError(error) && (error.reason._tag === "GitBaseBranchInvalid" || error.reason._tag === "GitBaseBranchMissing");
+//#endregion
 //#region src/cli/utils/anonymize-text.ts
 /**
 * Free-text fields can carry both a home-directory path (the OS username) and a
@@ -79709,13 +79957,13 @@ const isDevVersion = (version) => version === "0.0.0" || version.includes("-");
 * uploads source-map artifacts under, so stack frames symbolicate. Honors the
 * standard `SENTRY_RELEASE` override.
 */
-const resolveSentryRelease = () => process.env.SENTRY_RELEASE || `react-doctor@0.9.4-dev.8b97fdc`;
+const resolveSentryRelease = () => process.env.SENTRY_RELEASE || `react-doctor@0.9.4-dev.bafef41`;
 /**
 * Deployment environment shown in Sentry's environment filter. Defaults to
 * `production` for tagged releases and `development` for dev/unbuilt versions,
 * overridable via the standard `SENTRY_ENVIRONMENT` env var.
 */
-const resolveSentryEnvironment = () => process.env.SENTRY_ENVIRONMENT || (isDevVersion("0.9.4-dev.8b97fdc") ? "development" : "production");
+const resolveSentryEnvironment = () => process.env.SENTRY_ENVIRONMENT || (isDevVersion("0.9.4-dev.bafef41") ? "development" : "production");
 /**
 * Performance-tracing sample rate in `[0, 1]`. Reads `SENTRY_TRACES_SAMPLE_RATE`
 * (set to `0` to disable tracing) and falls back to
@@ -79780,21 +80028,25 @@ const initializeSentry = () => {
 	isInitialized = true;
 	resolvedTracesSampleRate = isDebugFlagEnabled() ? 1 : resolveTracesSampleRate();
 	const { tags, contexts } = buildSentryScope();
-	Sentry.init({
-		dsn: process.env.SENTRY_DSN || "https://f253d570240a59b8dbd77b7a548ef133@o4510226365743104.ingest.us.sentry.io/4511487817809920",
-		release: resolveSentryRelease(),
-		environment: resolveSentryEnvironment(),
-		sendDefaultPii: false,
-		tracesSampleRate: resolvedTracesSampleRate,
-		debug: isEnvFlagEnabled(process.env.SENTRY_DEBUG),
-		initialScope: {
-			tags,
-			contexts
-		},
-		beforeSend: (event) => scrubSentryEvent(event),
-		beforeSendTransaction: (event) => scrubSentryEvent(event),
-		beforeSendMetric: (metric) => scrubSentryMetric(metric)
-	});
+	try {
+		Sentry.init({
+			dsn: process.env.SENTRY_DSN || "https://f253d570240a59b8dbd77b7a548ef133@o4510226365743104.ingest.us.sentry.io/4511487817809920",
+			release: resolveSentryRelease(),
+			environment: resolveSentryEnvironment(),
+			sendDefaultPii: false,
+			tracesSampleRate: resolvedTracesSampleRate,
+			debug: isEnvFlagEnabled(process.env.SENTRY_DEBUG),
+			initialScope: {
+				tags,
+				contexts
+			},
+			beforeSend: (event, hint) => isExpectedUserError(hint.originalException) ? null : scrubSentryEvent(event),
+			beforeSendTransaction: (event) => scrubSentryEvent(event),
+			beforeSendMetric: (metric) => scrubSentryMetric(metric)
+		});
+	} catch {
+		resolvedTracesSampleRate = 0;
+	}
 };
 //#endregion
 //#region src/cli/utils/cli-logger.ts
@@ -91109,34 +91361,6 @@ const runCiConfig = async (options = {}) => {
 	});
 };
 //#endregion
-//#region src/cli/utils/is-environment-error.ts
-const ENVIRONMENT_ERROR_CODES = new Set([
-	"ENOSPC",
-	"EIO",
-	"EROFS",
-	"EACCES",
-	"EPERM",
-	"ENOTDIR"
-]);
-const isEnvironmentError = (error) => {
-	if (!isErrnoException(error) || typeof error.code !== "string") return false;
-	if (error.code === "ENOENT") return error.syscall?.startsWith("spawn") ?? false;
-	return ENVIRONMENT_ERROR_CODES.has(error.code);
-};
-const formatEnvironmentError = (error) => {
-	if (!isErrnoException(error)) return messageFromUnknown(error);
-	switch (error.code) {
-		case "ENOSPC": return "No space left on device. Free up disk space and try again.";
-		case "EIO": return "I/O error: the filesystem or disk may be failing. Check your system logs.";
-		case "EROFS": return "Read-only filesystem: cannot write to this location.";
-		case "EACCES":
-		case "EPERM": return error.path ? `Permission denied accessing ${error.path}. Check file permissions and try again.` : "Permission denied. Check file permissions and try again.";
-		case "ENOTDIR": return error.path ? `A file exists at ${error.path} or one of its parent paths where a directory was expected.` : "A file exists where a directory was expected.";
-		case "ENOENT": return "Required command not found. Ensure the tool (e.g. git) is installed and on your PATH.";
-		default: return error.message;
-	}
-};
-//#endregion
 //#region src/cli/utils/handle-error.ts
 const OTLP_ENDPOINT_ENVIRONMENT_VARIABLE = "REACT_DOCTOR_OTLP_ENDPOINT";
 const OTLP_AUTH_HEADER_ENVIRONMENT_VARIABLE = "REACT_DOCTOR_OTLP_AUTH_HEADER";
@@ -91238,56 +91462,6 @@ const handleUserError = (error, options = {}) => {
 	process.exitCode = 1;
 };
 //#endregion
-//#region src/cli/utils/cli-input-error.ts
-/**
-* A mistake in *how the CLI was invoked* — a malformed `<file>:<line>`
-* argument, mutually exclusive flags, or an unknown `--project` name. This is
-* user input, not a react-doctor bug, so `isExpectedUserError` routes it
-* through `handleUserError`: a clean, single-line message with no Sentry
-* report and no "Something went wrong, open a prefilled issue" block.
-*
-* The `message` is rendered verbatim, so it must read as a complete,
-* human-readable sentence that tells the user how to fix their invocation.
-*/
-var CliInputError = class extends Error {
-	name = "CliInputError";
-};
-//#endregion
-//#region src/cli/utils/is-expected-user-error.ts
-/**
-* Whether `error` is an expected, user-actionable failure — the user's project
-* or input, not a react-doctor bug. Such failures must be kept out of crash
-* reporting (Sentry + the alertable error-rate metric) and rendered via
-* `handleUserError` (a plain message — no "Something went wrong", prefilled
-* issue, Discord link, or Sentry reference), since there is no bug to report.
-*
-* Four distinct shapes reach the CLI's catch blocks:
-*
-* - **Project-discovery failures** (`NoReactDependencyError`,
-*   `ProjectNotFoundError`, `PackageJsonNotFoundError`, `NotADirectoryError`,
-*   `AmbiguousProjectError`) arrive as their plain legacy classes (so
-*   `isReactDoctorError` is `false` for them) — narrow with
-*   `isProjectDiscoveryError`. Running react-doctor against a directory that
-*   has no React, or a path that doesn't exist, is the canonical example.
-* - **CLI invocation mistakes** (`CliInputError`): a malformed
-*   `<file>:<line>` argument, mutually exclusive flags, or an unknown
-*   `--project` name.
-* - **Bad `--diff` input** (`GitBaseBranchInvalid` / `GitBaseBranchMissing`)
-*   stays the tagged `ReactDoctorError`, so dispatch on the reason `_tag`.
-* - **Environment failures** (`ENOSPC`, `EIO`, `EROFS`, `EACCES`, `EPERM`,
-*   `ENOTDIR`, plus a `spawn`-scoped `ENOENT` for a missing binary) — disk
-*   full / failing / read-only, permission denied, or a path blocked by a
-*   file. React Doctor cannot fix the user's environment; exit cleanly with an
-*   actionable message instead of crashing. See `is-environment-error.ts` for
-*   why the set stays narrow (codes that usually mean our bug keep reaching
-*   Sentry).
-*
-* This composes the existing core narrowers rather than introducing a new
-* error-shape helper (AGENTS.md): it encodes CLI-layer reporting policy, not
-* knowledge of the `ReactDoctorError` shape.
-*/
-const isExpectedUserError = (error) => error instanceof CliInputError || isProjectDiscoveryError(error) || isEnvironmentError(error) || isReactDoctorError(error) && (error.reason._tag === "GitBaseBranchInvalid" || error.reason._tag === "GitBaseBranchMissing");
-//#endregion
 //#region src/cli/utils/print-branded-header.ts
 /**
 * Single branded line every command prints first when not in JSON
@@ -97260,16 +97434,16 @@ const inspectAction = async (directory, flags, invocationCommand = "inspect") =>
 	const requestedDirectory = Path.resolve(directory);
 	const startTime = performance$1.now();
 	let scanStartupSpinner = null;
-	if (isJsonMode) {
-		enableJsonMode({
-			compact: Boolean(flags.jsonCompact),
-			directory: requestedDirectory,
-			outputFile: flags.jsonOut
-		});
-		if (flags.jsonOut) recordCount(METRIC.jsonOutUsed, 1);
-	}
-	recordCount(METRIC.cliInvoked, 1, { command: invocationCommand });
 	try {
+		if (isJsonMode) {
+			enableJsonMode({
+				compact: Boolean(flags.jsonCompact),
+				directory: requestedDirectory,
+				outputFile: flags.jsonOut
+			});
+			if (flags.jsonOut) recordCount(METRIC.jsonOutUsed, 1);
+		}
+		recordCount(METRIC.cliInvoked, 1, { command: invocationCommand });
 		validateModeFlags(flags);
 		if (flags.staged) setJsonReportMode("staged");
 		await maybeMigrateLegacyConfig(requestedDirectory, {
@@ -97823,7 +97997,7 @@ const runScanCommand = async (input) => {
 		return;
 	}
 	recordCount(METRIC.cliInvoked, 1, { command: input.invocationCommand });
-	const { runScanApp } = await import("./run-scan-app-QbtG43NL.js");
+	const { runScanApp } = await import("./run-scan-app-C8iWVgvR.js");
 	const { shouldFail } = await runScanApp({
 		directory: input.directory,
 		scanTarget,
@@ -98956,6 +99130,9 @@ program.command("experimental-tui [directory]", { hidden: true }).description("[
 process.stdout.on("error", (error) => {
 	if (error.code === "EPIPE") process.exit(0);
 });
+process.stderr.on("error", (error) => {
+	if (error.code === "EPIPE") process.exit(0);
+});
 const knownCommands = program.commands.flatMap((command) => [command.name(), ...command.aliases()]);
 const strippedArgv = stripUnknownCliFlags(process.argv);
 if (process.argv.includes("-V") && !strippedArgv.includes("-V")) {
@@ -98982,4 +99159,4 @@ Promise.resolve().then(() => assertNoRemovedFlags(process.argv)).then(() => prog
 export { TUI_REPORT_DETAIL_WIDTH_FRACTION as $, shouldRecordOnboarding as A, buildSortedRuleGroups as B, createInvocationInspect as C, markOnboardingComplete as D, doctorFace as E, buildEmptyReportMessage as F, recordCount as G, formatLearnMoreLine as H, hasIncompleteScoreAnalysis as I, findNearestPackageDirectory as J, recordDistribution as K, buildNoScoreMessage as L, computeProjectedScore as M, formatElapsedTime as N, canAnimateOnboarding as O, buildCodeFrame as P, TUI_REPORT_COMPACT_MAX_ROWS as Q, hasLintHardFailure as R, deduplicateProjectScans as S, easeOutCubic as T, resolveBlockingLevel as U, formatFixRecipeLine as V, isReactDoctorWorkflowInstalled as W, CI_TRUST_COMPANIES as X, isUnicodeSupported as Y, METRIC as Z, launchCliAgent as _, succeed$3 as _t, selectProjects as a, buildRuleDocsUrl as at, formatSkippedProjectsMessage as b, resolveWorkspaceDeadCodeOwner as c, highlighter as ct, countUniqueScannedFiles as d, remainingDeadlineBudgetMs as dt, isCiEnvironment as et, setUpGitHubActions as f, resolveScanTarget as ft, copyToClipboard as g, void_ as gt, CLI_AGENT_BINARIES as h, sync as ht, discoverWorkspacePackages as i, Reporter as it, filterDiagnosticsByCategories as j, isOnboardingForced as k, resolveCliInspectOptions as l, isPathInsideDirectory as lt, detectLaunchableAgents as m, runPromise as mt, registerActiveTuiRenderer as n, GITHUB_ACTIONS_SETUP_URL as nt, resolveProjectScan as o, getCategoryImpact as ot, openUrl as p, yieldToEventLoop as pt, toForwardSlashes as q, shouldFailScanGate as r, Progress as rt, retryMissingProjectScores as s, hasPublishedFixRecipe as st, exitGracefully as t, DIAGNOSTIC_CATEGORY_BUCKETS as tt, filterScansForSurface as u, mapWithConcurrency as ut, buildHandoffPayload as v, printFooter as w, collectProjectSourceFileCounts as x, isShareOptedOut as y, buildRulePriorityMap as z };
 
 //# sourceMappingURL=cli.js.map
-//# debugId=cae1c0fa-086e-5609-a7c4-729ec799fb2c
+//# debugId=e74e6a68-20e1-59fe-8db0-62b87e8fe049