react-doctor 0.9.9 → 0.9.10

package/dist/{build-section-divider-rq_KQONI.js → build-section-divider-BBuZ20p0.js}

@@ -1,43 +1,8 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="06e4b6f8-462c-50f8-b9dd-7090f8152dff")}catch(e){}}();
-import { D as SENTRY_FLUSH_TIMEOUT_MS, I as isDebugFlagEnabled, On as scrubSensitivePaths, U as CANONICAL_GITHUB_URL, X as DOCS_URL, en as highlighter, i as buildSentryScope, on as isPlainObject, yn as redactSensitiveText } from "./record-metric-b5KUd2XK.js";
-import { o as isExpectedUserError } from "./unref-stdin-DTLx8HEf.js";
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="f486e580-9557-556a-b470-90390c8dfca4")}catch(e){}}();
+import { At as anonymizeInPlace, Fn as scrubSensitivePaths, M as SENTRY_FLUSH_TIMEOUT_MS, Y as CANONICAL_GITHUB_URL, a as isEnvFlagEnabled, cn as highlighter, i as isTelemetryEnabled, jt as anonymizeText, nt as DOCS_URL, o as buildSentryScope } from "./record-metric-CuPtdZfm.js";
+import { c as isExpectedUserError } from "./unref-stdin-D0Lq28Bk.js";
 import * as Sentry from "@sentry/node";
-//#region src/cli/utils/is-env-flag-enabled.ts
-const isEnvFlagEnabled = (value) => value === "1" || value?.toLowerCase() === "true";
-//#endregion
-//#region src/cli/utils/anonymize-text.ts
-/**
-* Free-text fields can carry both a home-directory path (the OS username) and a
-* secret/email echoed from user code, so run both scrubbers: strip the username
-* from paths, then mask any known credential/PII shape. Shared by the Sentry
-* event scrubber ({@link scrubSentryEvent}) and metric scrubber
-* ({@link scrubSentryMetric}).
-*/
-const anonymizeText = (text) => redactSensitiveText(scrubSensitivePaths(text));
-/**
-* Recursively rewrites every string within an arbitrary value (object / array /
-* primitive) through {@link anonymizeText}, mutating in place. Used to sweep the
-* unstructured corners of a Sentry payload (event contexts/extra/tags, breadcrumb
-* data, span attributes, metric attributes) where a path or secret could hide.
-*/
-const anonymizeInPlace = (value) => {
-	if (Array.isArray(value)) {
-		for (let index = 0; index < value.length; index += 1) {
-			const item = value[index];
-			if (typeof item === "string") value[index] = anonymizeText(item);
-			else anonymizeInPlace(item);
-		}
-		return;
-	}
-	if (!isPlainObject(value)) return;
-	for (const key of Object.keys(value)) {
-		const inner = value[key];
-		if (typeof inner === "string") value[key] = anonymizeText(inner);
-		else anonymizeInPlace(inner);
-	}
-};
-//#endregion
 //#region src/cli/utils/scrub-sentry-event.ts
 /**
 * Anonymizes a Sentry event (error or transaction) before it leaves the
@@ -86,27 +51,6 @@ const scrubSentryEvent = (event) => {
 	}
 };
 //#endregion
-//#region src/cli/utils/scrub-sentry-metric.ts
-/**
-* Anonymizes a Sentry metric before it leaves the machine, mirroring
-* {@link scrubSentryEvent}. Drops the `server.address` default attribute (the
-* hostname) and scrubs home-directory paths + known secrets/emails from every
-* remaining attribute value (metric names are our own constants, so they're
-* left intact to avoid splitting a series). Returns `null` on any failure so an
-* un-anonymized metric is never sent. Wired into `beforeSendMetric`.
-*/
-const scrubSentryMetric = (metric) => {
-	try {
-		if (metric.attributes) {
-			delete metric.attributes["server.address"];
-			anonymizeInPlace(metric.attributes);
-		}
-		return metric;
-	} catch {
-		return null;
-	}
-};
-//#endregion
 //#region src/cli/utils/sentry-config.ts
 /**
 * Shared Sentry configuration resolution — release, environment, and tracing
@@ -127,41 +71,16 @@ const isDevVersion = (version) => version === "0.0.0" || version.includes("-");
 * uploads source-map artifacts under, so stack frames symbolicate. Honors the
 * standard `SENTRY_RELEASE` override.
 */
-const resolveSentryRelease = () => process.env.SENTRY_RELEASE || `react-doctor@0.9.9`;
+const resolveSentryRelease = () => process.env.SENTRY_RELEASE || `react-doctor@0.9.10`;
 /**
 * Deployment environment shown in Sentry's environment filter. Defaults to
 * `production` for tagged releases and `development` for dev/unbuilt versions,
 * overridable via the standard `SENTRY_ENVIRONMENT` env var.
 */
-const resolveSentryEnvironment = () => process.env.SENTRY_ENVIRONMENT || (isDevVersion("0.9.9") ? "development" : "production");
-/**
-* Performance-tracing sample rate in `[0, 1]`. Reads `SENTRY_TRACES_SAMPLE_RATE`
-* (set to `0` to disable tracing) and falls back to
-* {@link SENTRY_DEFAULT_TRACES_SAMPLE_RATE}. Invalid / out-of-range values fall
-* back to the default rather than silently disabling tracing.
-*/
-const resolveTracesSampleRate = () => {
-	const raw = process.env.SENTRY_TRACES_SAMPLE_RATE;
-	if (raw === void 0 || raw.trim() === "") return 1;
-	const parsed = Number(raw);
-	if (Number.isNaN(parsed) || parsed < 0 || parsed > 1) return 1;
-	return parsed;
-};
+const resolveSentryEnvironment = () => process.env.SENTRY_ENVIRONMENT || (isDevVersion("0.9.10") ? "development" : "production");
 //#endregion
 //#region src/instrument.ts
 let isInitialized = false;
-let resolvedTracesSampleRate = 0;
-const shouldEnableSentry = () => {
-	if (process.argv.includes("--no-score") || process.argv.includes("--no-telemetry")) return false;
-	if (process.env.VITEST || process.env.NODE_ENV === "test") return false;
-	return true;
-};
-/**
-* Whether performance traces will actually be recorded — Sentry is live and the
-* resolved sample rate is above zero. Used to gate the per-run root span and
-* the Effect→Sentry tracer bridge so they're true no-ops when tracing is off.
-*/
-const isSentryTracingEnabled = () => Sentry.isInitialized() && resolvedTracesSampleRate > 0;
 /**
 * Flushes queued Sentry events (errors + transactions) before the CLI exits, so
 * the success-path transaction is delivered. A no-op when Sentry was never
@@ -176,9 +95,15 @@ const flushSentry = async () => {
 };
 /**
 * Initializes the Sentry Node SDK for CLI crash reporting and performance
-* tracing. Invoked as the first statement of the CLI entry (`cli/index.ts`) so
-* the SDK's global `uncaughtException` / `unhandledRejection` handlers and OTel
-* auto-instrumentation are armed before any command runs.
+* crash reporting. Invoked as the first statement of the CLI entry
+* (`cli/index.ts`) so the SDK's global `uncaughtException` /
+* `unhandledRejection` handlers are armed before any command runs.
+*
+* Performance tracing is off: spans are exported to Axiom instead (see
+* `telemetry-runtime.ts`), and Effect has a single `Tracer` reference, so the
+* two backends are mutually exclusive. Sentry keeps what it is good at —
+* symbolicated stack traces, issue grouping, and a quotable event id — while
+* crashes carry the Axiom trace id as a tag so an issue pivots into its trace.
 *
 * Exported as a function rather than a bare side-effecting import because the
 * package declares `"sideEffects": false`, which lets the bundler tree-shake
@@ -190,13 +115,11 @@ const flushSentry = async () => {
 * app can't hijack their telemetry.
 *
 * Configuration is environment-overridable for self-hosting and tuning:
-* `SENTRY_DSN`, `SENTRY_ENVIRONMENT`, `SENTRY_RELEASE`,
-* `SENTRY_TRACES_SAMPLE_RATE` (`0` disables tracing), and `SENTRY_DEBUG`.
+* `SENTRY_DSN`, `SENTRY_ENVIRONMENT`, `SENTRY_RELEASE`, and `SENTRY_DEBUG`.
 */
 const initializeSentry = () => {
-	if (isInitialized || !shouldEnableSentry()) return;
+	if (isInitialized || !isTelemetryEnabled()) return;
 	isInitialized = true;
-	resolvedTracesSampleRate = isDebugFlagEnabled() ? 1 : resolveTracesSampleRate();
 	const { tags, contexts } = buildSentryScope();
 	try {
 		Sentry.init({
@@ -204,19 +127,15 @@ const initializeSentry = () => {
 			release: resolveSentryRelease(),
 			environment: resolveSentryEnvironment(),
 			sendDefaultPii: false,
-			tracesSampleRate: resolvedTracesSampleRate,
+			tracesSampleRate: 0,
 			debug: isEnvFlagEnabled(process.env.SENTRY_DEBUG),
 			initialScope: {
 				tags,
 				contexts
 			},
-			beforeSend: (event, hint) => isExpectedUserError(hint.originalException) ? null : scrubSentryEvent(event),
-			beforeSendTransaction: (event) => scrubSentryEvent(event),
-			beforeSendMetric: (metric) => scrubSentryMetric(metric)
+			beforeSend: (event, hint) => isExpectedUserError(hint.originalException) ? null : scrubSentryEvent(event)
 		});
-	} catch {
-		resolvedTracesSampleRate = 0;
-	}
+	} catch {}
 };
 //#endregion
 //#region src/cli/utils/active-scan-abort-registry.ts
@@ -306,7 +225,7 @@ const buildFooterLinkLines = ({ shareUrl }) => [
 const DIVIDER_INDENT = "  ";
 const buildSectionDivider = () => highlighter.dim(`${DIVIDER_INDENT}${"─".repeat(resolveMeasureWidth(2))}`);
 //#endregion
-export { initializeSentry as a, flushSentry as i, buildFooterLinkLines as n, isSentryTracingEnabled as o, activeScanAbortRegistry as r, buildSectionDivider as t };
+export { initializeSentry as a, flushSentry as i, buildFooterLinkLines as n, activeScanAbortRegistry as r, buildSectionDivider as t };
 
-//# sourceMappingURL=build-section-divider-rq_KQONI.js.map
-//# debugId=06e4b6f8-462c-50f8-b9dd-7090f8152dff
+//# sourceMappingURL=build-section-divider-BBuZ20p0.js.map
+//# debugId=f486e580-9557-556a-b470-90390c8dfca4

package/dist/{ci-BwCh-hUD.js → ci-Cje97GMB.js}

@@ -1,14 +1,14 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="f3e38226-c677-554f-843a-df9d0b3fec5a")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="0905c1ed-726a-5c21-b012-6460d6209b68")}catch(e){}}();
 import { n as __require, r as __toESM, t as __commonJSMin } from "./chunk-q7NCDQ7-.js";
-import { W as CI_URL, Yn as runSync, en as highlighter, et as GITHUB_ACTIONS_SETUP_URL, t as recordCount, y as METRIC } from "./record-metric-b5KUd2XK.js";
-import { o as isExpectedUserError } from "./unref-stdin-DTLx8HEf.js";
-import { n as handleError, r as handleUserError, t as reportErrorToSentry } from "./report-error-DU6Bxy9R.js";
-import { L as cliLogger, c as spinner, n as findNearestPackageDirectory } from "./install-doctor-script-BEIl1lby.js";
-import { a as readReactDoctorWorkflow, d as detectDefaultBranch, f as runCommand, l as prompts, n as getReactDoctorWorkflowPath, s as upgradeWorkflowActionToV2, t as buildWorkflowContent } from "./install-github-workflow-Cun64Fxh.js";
-import { a as isValidBlockingLevel, c as openWorkflowPullRequest, l as stageWorkflowFile, n as isScopeValue } from "./resolve-scope-pjSIB8ZY.js";
-import { t as shouldSkipPrompts } from "./should-skip-prompts-Q3cS356Z.js";
-import { t as printBrandedHeader } from "./print-branded-header-C9de_0PE.js";
+import { X as CI_URL, ar as runSync, cn as highlighter, ot as GITHUB_ACTIONS_SETUP_URL, t as recordCount, w as METRIC } from "./record-metric-CuPtdZfm.js";
+import { c as isExpectedUserError } from "./unref-stdin-D0Lq28Bk.js";
+import { n as handleError, r as handleUserError, t as reportErrorToSentry } from "./report-error-DemUcOtc.js";
+import { L as cliLogger, c as spinner, n as findNearestPackageDirectory } from "./install-doctor-script-BM5NC98v.js";
+import { a as readReactDoctorWorkflow, d as detectDefaultBranch, f as runCommand, l as prompts, n as getReactDoctorWorkflowPath, s as upgradeWorkflowActionToV2, t as buildWorkflowContent } from "./install-github-workflow-L48jbG9d.js";
+import { a as isValidBlockingLevel, c as openWorkflowPullRequest, l as stageWorkflowFile, n as isScopeValue } from "./resolve-scope-BGBQcbGi.js";
+import { t as shouldSkipPrompts } from "./should-skip-prompts-DaBGPwa3.js";
+import { t as printBrandedHeader } from "./print-branded-header-DQn3TZpV.js";
 import * as path$1 from "node:path";
 import * as fs$1 from "node:fs";
 //#region src/cli/utils/ci/ci-provider.ts
@@ -7497,5 +7497,5 @@ const ciConfigAction = (options) => runCiCommand("config", runCiConfig, options)
 //#endregion
 export { ciConfigAction, ciInstallAction, ciUpgradeAction };
 
-//# sourceMappingURL=ci-BwCh-hUD.js.map
-//# debugId=f3e38226-c677-554f-843a-df9d0b3fec5a
+//# sourceMappingURL=ci-Cje97GMB.js.map
+//# debugId=0905c1ed-726a-5c21-b012-6460d6209b68

package/dist/cli.js

@@ -1,13 +1,12 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="d2821496-7d1e-5e21-b186-142795117cf0")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="c779427c-ed7c-5be4-b123-73410d3af015")}catch(e){}}();
 import { n as __require, r as __toESM, t as __commonJSMin } from "./chunk-q7NCDQ7-.js";
-import { I as isDebugFlagEnabled, N as CliInputError, U as CANONICAL_GITHUB_URL, W as CI_URL, en as highlighter, f as writeJsonErrorReport, kn as setColorEnabled, l as isJsonModeActive, m as VERSION } from "./record-metric-b5KUd2XK.js";
-import { a as initializeSentry, i as flushSentry } from "./build-section-divider-rq_KQONI.js";
-import { o as isExpectedUserError, r as getLastRunTraceId, t as unrefStdin } from "./unref-stdin-DTLx8HEf.js";
-import { t as exitGracefully } from "./exit-gracefully-C7wgCb-s.js";
-import { n as handleError, r as handleUserError, t as reportErrorToSentry } from "./report-error-DU6Bxy9R.js";
+import { In as setColorEnabled, R as CliInputError, V as isDebugFlagEnabled, X as CI_URL, Y as CANONICAL_GITHUB_URL, cn as highlighter, d as isJsonModeActive, g as VERSION, i as isTelemetryEnabled, m as writeJsonErrorReport } from "./record-metric-CuPtdZfm.js";
+import { c as isExpectedUserError, r as getLastRunTraceId, s as shutdownTelemetry, t as unrefStdin } from "./unref-stdin-D0Lq28Bk.js";
+import { a as initializeSentry, i as flushSentry } from "./build-section-divider-BBuZ20p0.js";
+import { t as exitGracefully } from "./exit-gracefully-GZXxMj5W.js";
+import { n as handleError, r as handleUserError, t as reportErrorToSentry } from "./report-error-DemUcOtc.js";
 import { execFileSync } from "node:child_process";
-import * as Sentry from "@sentry/node";
 //#region ../../node_modules/.pnpm/commander@14.0.3/node_modules/commander/lib/error.js
 var require_error = /* @__PURE__ */ __commonJSMin(((exports) => {
 	/**
@@ -3121,18 +3120,22 @@ const normalizeHelpInvocation = (argv, knownCommands) => {
 //#endregion
 //#region src/cli/utils/print-debug-trace.ts
 /**
-* The `--debug` end-of-run line, pure so it's testable without the Sentry SDK.
+* The `--debug` end-of-run line, pure so it's testable without a live exporter.
 * Mirrors the crash-reference phrasing in `handle-error.ts` ("mention this when
 * reporting") so users learn one habit for both paths. A `null` trace says why,
 * so `--debug` never silently does nothing.
 */
-const buildDebugTraceMessage = (traceId) => traceId === null ? "Sentry trace unavailable for this run (no trace was recorded)." : `Sentry trace (mention this when reporting): ${traceId}`;
+const buildDebugTraceMessage = (traceId) => traceId === null ? "Trace unavailable for this run (no trace was recorded)." : `Trace (mention this when reporting): ${traceId}`;
 /**
-* Prints the run's Sentry trace id to stderr at the end of a `--debug` run, so
+* Prints the run's trace id to stderr at the end of a `--debug` run, so
 * maintainers can pull the full trace from a pasted id. Runs from the process
 * `exit` handler, so it's the last line on both the success path and the error
 * funnels (which `process.exit()` before the promise chain could resume).
 *
+* The id now identifies the trace in Axiom rather than Sentry — spans moved
+* there — and the same id is attached to any Sentry crash report for this run
+* (see `report-error.ts`), so one pasted id resolves in both.
+*
 * Writes straight to `process.stderr` (not `Console`) for three reasons: the
 * exit handler is synchronous, JSON mode patches the global console to no-ops —
 * a diagnostic the user explicitly asked for must survive that — and stderr
@@ -3140,7 +3143,7 @@ const buildDebugTraceMessage = (traceId) => traceId === null ? "Sentry trace una
 * a diagnostic must never throw out of an exit handler.
 */
 const printDebugTrace = () => {
-	if (!Sentry.isInitialized()) return;
+	if (!isTelemetryEnabled()) return;
 	try {
 		process.stderr.write(`${highlighter.dim(buildDebugTraceMessage(getLastRunTraceId()))}\n`);
 	} catch {}
@@ -3478,7 +3481,7 @@ ${highlighter.dim("Learn more:")}
 const collectCategoryOption = (value, previousValues) => [...previousValues ?? [], value];
 const program = new Command().name("react-doctor").description("Diagnose React codebase health").version(VERSION, "-v, --version", "display the version number").argument("[directory]", "project directory to scan", ".").option("--lint", "enable linting").option("--no-lint", "skip linting").option("--dead-code", "enable dead-code analysis (default)").option("--no-dead-code", "skip dead-code analysis (unused files / exports / dependencies, circular imports)").option("--supply-chain", "enable the dependency supply-chain scan (default)").option("--no-supply-chain", "skip the dependency supply-chain scan (Socket.dev dependency health checks)").option("--verbose", "show every rule and per-file details (default shows top 3 rules)").option("--debug", "force a Sentry trace and print its id at the end (paste it into a bug report)").option("--output-dir <dir>", "directory for the full diagnostics dump (default: a temp folder)").option("--score", "output only the score").option("--json", "output a single structured JSON report (suppresses other output)").option("--json-compact", "with --json, emit compact JSON (no indentation)").option("--json-out <path>", "with --json, write the report to a file instead of stdout").option("--no-cache", "disable all scan caches for this run").option("-y, --yes", "skip prompts, scan all workspace projects").option("--no-parallel", "lint serially with one worker (default: parallel across CPU cores; set the worker count with REACT_DOCTOR_PARALLEL)").option("--project <name>", "select projects: workspace names or directory paths (comma-separated for multiple); overrides the `projects` config field").option("--scope <value>", "how much supported JS/TS and inline HTML script source to scan/report: full (default), files, changed (only new issues vs base), or lines (issues whose source spans touch changed lines)").option("--base <ref>", "base git ref for files/changed/lines scope (auto-detected when omitted)").option("--include-untracked", "with --scope files/changed/lines, also scan ordinary untracked files (respects .gitignore)").addOption(new Option("--diff [base]", "[deprecated] alias for --scope changed (pass `false` to force a full scan)").hideHelp()).addOption(new Option("--changed-files-from <file>", "scan source files listed in a newline-delimited changed-files file").hideHelp()).option("--no-score", "skip the score API, the share URL, and crash reporting").addOption(new Option("--category <category>", "only show diagnostics in a category (repeatable; e.g. Security)").argParser(collectCategoryOption)).option("--no-telemetry", "alias for --no-score (skip the score API, share URL, and crash reporting)").option("--staged", "scan only staged (git index) files for pre-commit hooks (honors --project and config `projects`; exits 0 when nothing is staged)").option("--max-duration <seconds>", MAX_DURATION_OPTION_DESCRIPTION).option("--blocking <level>", "severity that fails CI: error (default), warning, or none (advisory)").addOption(new Option("--fail-on <level>", "[deprecated] alias for --blocking <level>").hideHelp()).option("--no-respect-inline-disables", "audit mode: neutralize inline lint suppressions before scanning").option("--warnings", "show warning-severity diagnostics (default)").option("--no-warnings", "hide warning-severity diagnostics (errors only)").option("--color", "force colored output").option("--no-color", "disable colored output (also honors NO_COLOR)").addHelpText("after", renderRootHelpEpilog);
 program.action(async (directory = ".", flags) => {
-	const { runScanCommand } = await import("./scan-CHh6DGmw.js");
+	const { runScanCommand } = await import("./scan-D8DHxJxj.js");
 	return runScanCommand({
 		directory,
 		flags,
@@ -3486,72 +3489,72 @@ program.action(async (directory = ".", flags) => {
 	});
 });
 program.command("design [directory]").description("Run only the focused UI design diagnostics").addHelpText("after", renderDesignHelpEpilog).action(async (directory, _options, command) => {
-	const { designAction } = await import("./design-CTL1QpZB.js");
+	const { designAction } = await import("./design-swBQC07N.js");
 	return designAction(directory ?? ".", command.optsWithGlobals());
 });
 program.command("why <location>").description("Explain why a rule fired (or why a suppression didn't apply) at a file:line").option("--project <name>", "select projects: workspace names or directory paths (comma-separated for multiple)").option("-c, --cwd <cwd>", "working directory", process.cwd()).option("--color", "force colored output").option("--no-color", "disable colored output (also honors NO_COLOR)").action(async (location, options) => {
-	const { whyAction } = await import("./why-DB_XpRpg.js");
+	const { whyAction } = await import("./why-nfPQ3AAq.js");
 	return whyAction(location, options);
 });
 program.command("install").alias("setup").description("Install the react-doctor skill into your coding agents and optional git hook").option("-y, --yes", "skip prompts, install for all detected agents").option("--dry-run", "show what would be installed without writing files").option("--agent-hooks", "install native non-blocking agent hooks for Claude Code and Cursor").option("-c, --cwd <cwd>", "working directory", process.cwd()).option("--color", "force colored output").option("--no-color", "disable colored output (also honors NO_COLOR)").addHelpText("after", renderInstallHelpEpilog).action(async (options, command) => {
-	const { installAction } = await import("./install-CdlRGSxJ.js");
+	const { installAction } = await import("./install-CChowo4Z.js");
 	return installAction(options, command);
 });
 const providerOption = ["--provider <name>", "ci provider: github-actions or gitlab-ci (auto-detected by default)"];
 const prOption = ["--pr", "open a pull request with the change instead of writing it to the working tree"];
 const ci = program.command("ci").description("Set up, upgrade, and configure React Doctor in your CI");
 ci.command("install").description("Add a CI workflow that scans every pull request").option(...providerOption).option(...prOption).option("--blocking <level>", "gate level: none (advisory, default), warning, or error").option("--scope <value>", "what a pull-request scan reports: changed (default), files, lines, full").option("--comment", "post a summary comment on each pull request").option("--no-comment", "don't post a summary comment").option("--review-comments", "add inline review comments on changed lines").option("--no-review-comments", "don't add inline review comments").option("--commit-status", "report a commit status with the health score").option("--no-commit-status", "don't report a commit status").option("-y, --yes", "skip prompts; use the defaults").option("-c, --cwd <cwd>", "working directory", process.cwd()).option("--color", "force colored output").option("--no-color", "disable colored output (also honors NO_COLOR)").addHelpText("after", renderCiHelpEpilog).action(async (_options, command) => {
-	const { ciInstallAction } = await import("./ci-BwCh-hUD.js");
+	const { ciInstallAction } = await import("./ci-Cje97GMB.js");
 	return ciInstallAction(command.optsWithGlobals());
 });
 ci.command("config").description("Change the gate, scan scope, and pull-request reporting").option(...providerOption).option("--blocking <level>", "gate level: none (advisory), warning, or error").option("--scope <value>", "what a pull-request scan reports: changed, files, lines, or full").option("--comment", "post a summary comment on each pull request").option("--no-comment", "don't post a summary comment").option("--review-comments", "add inline review comments on changed lines").option("--no-review-comments", "don't add inline review comments").option("--commit-status", "report a commit status with the health score").option("--no-commit-status", "don't report a commit status").option("-y, --yes", "skip prompts; print the current settings").option("-c, --cwd <cwd>", "working directory", process.cwd()).option("--color", "force colored output").option("--no-color", "disable colored output (also honors NO_COLOR)").action(async (_options, command) => {
-	const { ciConfigAction } = await import("./ci-BwCh-hUD.js");
+	const { ciConfigAction } = await import("./ci-Cje97GMB.js");
 	return ciConfigAction(command.optsWithGlobals());
 });
 ci.command("upgrade").description("Upgrade the CI workflow to the action's current major").option(...providerOption).option(...prOption).option("-y, --yes", "skip prompts").option("-c, --cwd <cwd>", "working directory", process.cwd()).option("--color", "force colored output").option("--no-color", "disable colored output (also honors NO_COLOR)").action(async (_options, command) => {
-	const { ciUpgradeAction } = await import("./ci-BwCh-hUD.js");
+	const { ciUpgradeAction } = await import("./ci-Cje97GMB.js");
 	return ciUpgradeAction(command.optsWithGlobals());
 });
 program.command("version").description("show the version with Node and platform info").option("--color", "force colored output").option("--no-color", "disable colored output (also honors NO_COLOR)").action(async () => {
-	const { versionAction } = await import("./version-BrAILQSv.js");
+	const { versionAction } = await import("./version-CyVLelBf.js");
 	return versionAction();
 });
 const rules = program.command("rules").description("List, explain, and configure which React Doctor rules run");
 rules.command("list").description("List rules and the severity they run at under your config").option("--category <name>", "only show rules in a category (e.g. Performance)").option("--tag <name>", "only show rules with a tag (e.g. design, test-noise)").option("--framework <name>", "only show rules for a framework (e.g. global, nextjs)").option("--configured", "only show rules your config has changed from the default").option("--json", "output a structured JSON array").option("-c, --cwd <cwd>", "working directory", process.cwd()).action(async (_options, command) => {
-	const { rulesListAction } = await import("./rules-Ds2rHd-a.js");
+	const { rulesListAction } = await import("./rules-BsYE5BBb.js");
 	return rulesListAction(command.optsWithGlobals());
 });
 rules.command("explain <rule>").description("Explain why a rule matters, its current severity, and how to configure it").option("--json", "output a structured JSON object").option("-c, --cwd <cwd>", "working directory", process.cwd()).action(async (rule, _options, command) => {
-	const { rulesExplainAction } = await import("./rules-Ds2rHd-a.js");
+	const { rulesExplainAction } = await import("./rules-BsYE5BBb.js");
 	return rulesExplainAction(rule, command.optsWithGlobals());
 });
 rules.command("set <rule> <severity>").description("Set a rule's severity: off, warn, or error").option("-c, --cwd <cwd>", "working directory", process.cwd()).action(async (rule, severity, _options, command) => {
-	const { rulesSetAction } = await import("./rules-Ds2rHd-a.js");
+	const { rulesSetAction } = await import("./rules-BsYE5BBb.js");
 	return rulesSetAction(rule, severity, command.optsWithGlobals());
 });
 rules.command("enable <rule>").description("Enable a rule at its recommended severity (or pass --severity)").option("--severity <level>", "severity to enable at: warn or error").option("-c, --cwd <cwd>", "working directory", process.cwd()).action(async (rule, _options, command) => {
-	const { rulesEnableAction } = await import("./rules-Ds2rHd-a.js");
+	const { rulesEnableAction } = await import("./rules-BsYE5BBb.js");
 	return rulesEnableAction(rule, command.optsWithGlobals());
 });
 rules.command("disable <rule>").description("Disable a rule so it never runs").option("-c, --cwd <cwd>", "working directory", process.cwd()).action(async (rule, _options, command) => {
-	const { rulesDisableAction } = await import("./rules-Ds2rHd-a.js");
+	const { rulesDisableAction } = await import("./rules-BsYE5BBb.js");
 	return rulesDisableAction(rule, command.optsWithGlobals());
 });
 rules.command("category <category> <severity>").description("Set the severity for a whole category (off, warn, error)").option("-c, --cwd <cwd>", "working directory", process.cwd()).action(async (category, severity, _options, command) => {
-	const { rulesCategoryAction } = await import("./rules-Ds2rHd-a.js");
+	const { rulesCategoryAction } = await import("./rules-BsYE5BBb.js");
 	return rulesCategoryAction(category, severity, command.optsWithGlobals());
 });
 rules.command("ignore-tag <tag>").description("Skip a whole rule family by tag before linting (e.g. design)").option("-c, --cwd <cwd>", "working directory", process.cwd()).action(async (tag, _options, command) => {
-	const { rulesIgnoreTagAction } = await import("./rules-Ds2rHd-a.js");
+	const { rulesIgnoreTagAction } = await import("./rules-BsYE5BBb.js");
 	return rulesIgnoreTagAction(tag, command.optsWithGlobals());
 });
 rules.command("unignore-tag <tag>").description("Stop ignoring a tag previously skipped via ignore-tag").option("-c, --cwd <cwd>", "working directory", process.cwd()).action(async (tag, _options, command) => {
-	const { rulesUnignoreTagAction } = await import("./rules-Ds2rHd-a.js");
+	const { rulesUnignoreTagAction } = await import("./rules-BsYE5BBb.js");
 	return rulesUnignoreTagAction(tag, command.optsWithGlobals());
 });
 program.command("experimental-lsp", { hidden: false }).description("[experimental] run the React Doctor language server over stdio (for editors)").allowUnknownOption().action(() => {});
 program.command("experimental-tui [directory]", { hidden: true }).description("[experimental] interactive, scrollable scan report").option("--blocking <level>", "severity that fails CI: error (default), warning, or none (advisory)").option("--color", "force colored output").option("--no-color", "disable colored output (also honors NO_COLOR)").option("--no-dead-code", "skip dead-code analysis").option("--no-supply-chain", "skip the dependency supply-chain scan").option("--score", "only print the numeric score (for scripts and CI)").option("--no-score", "skip the score API, the share URL, and crash reporting").option("--no-cache", "disable all scan caches for this run").option("--max-duration <seconds>", MAX_DURATION_OPTION_DESCRIPTION).option("-p, --project <names>", "scan specific workspace projects (comma-separated, or *)").option("-y, --yes", "skip the project prompt and scan every discovered project").action(async (directory = ".", _localOptions, command) => {
-	const { runScanCommand } = await import("./scan-CHh6DGmw.js");
+	const { runScanCommand } = await import("./scan-D8DHxJxj.js");
 	return runScanCommand({
 		directory,
 		flags: command.optsWithGlobals(),
@@ -3573,7 +3576,7 @@ if (process.argv.includes("-V") && !strippedArgv.includes("-V")) {
 applyColorPreference(strippedArgv);
 ensureWindowsUtf8Console();
 const argv = normalizeHelpInvocation(strippedArgv, knownCommands);
-Promise.resolve().then(() => assertNoRemovedFlags(process.argv)).then(() => program.parseAsync(argv)).then(() => flushSentry()).catch(async (error) => {
+Promise.resolve().then(() => assertNoRemovedFlags(process.argv)).then(() => program.parseAsync(argv)).then(() => Promise.all([flushSentry(), shutdownTelemetry()])).catch(async (error) => {
 	const isUserError = isExpectedUserError(error);
 	const sentryEventId = isUserError ? void 0 : await reportErrorToSentry(error);
 	if (isJsonModeActive()) {
@@ -3590,4 +3593,4 @@ Promise.resolve().then(() => assertNoRemovedFlags(process.argv)).then(() => prog
 export {};
 
 //# sourceMappingURL=cli.js.map
-//# debugId=d2821496-7d1e-5e21-b186-142795117cf0
+//# debugId=c779427c-ed7c-5be4-b123-73410d3af015

package/dist/{design-CTL1QpZB.js → design-swBQC07N.js}

@@ -1,6 +1,6 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="89da1a3f-5d17-5b6a-99ab-4f497068de70")}catch(e){}}();
-import { t as inspectAction } from "./inspect-CGCfCxoM.js";
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="2a141417-d7db-5490-8423-762a30d87cc3")}catch(e){}}();
+import { t as inspectAction } from "./inspect-BQapfOJX.js";
 //#region src/cli/commands/design.ts
 const designAction = async (directory, flags) => inspectAction(directory, {
 	...flags,
@@ -10,5 +10,5 @@ const designAction = async (directory, flags) => inspectAction(directory, {
 //#endregion
 export { designAction };
 
-//# sourceMappingURL=design-CTL1QpZB.js.map
-//# debugId=89da1a3f-5d17-5b6a-99ab-4f497068de70
+//# sourceMappingURL=design-swBQC07N.js.map
+//# debugId=2a141417-d7db-5490-8423-762a30d87cc3

package/dist/{exit-gracefully-C7wgCb-s.js → exit-gracefully-GZXxMj5W.js}

@@ -1,7 +1,8 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="1160a1f2-8174-5ea6-850e-b13a5c9aadc8")}catch(e){}}();
-import { f as writeJsonErrorReport, l as isJsonModeActive } from "./record-metric-b5KUd2XK.js";
-import { i as flushSentry, n as buildFooterLinkLines, r as activeScanAbortRegistry, t as buildSectionDivider } from "./build-section-divider-rq_KQONI.js";
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="687f3e03-d984-5dc0-af33-8adb48745651")}catch(e){}}();
+import { d as isJsonModeActive, m as writeJsonErrorReport } from "./record-metric-CuPtdZfm.js";
+import { s as shutdownTelemetry } from "./unref-stdin-D0Lq28Bk.js";
+import { i as flushSentry, n as buildFooterLinkLines, r as activeScanAbortRegistry, t as buildSectionDivider } from "./build-section-divider-BBuZ20p0.js";
 //#region src/cli/utils/active-tui-renderer.ts
 let activeTuiRenderer = null;
 const registerActiveTuiRenderer = (renderer) => {
@@ -38,10 +39,10 @@ const exitGracefully = () => {
 			...buildFooterLinkLines({ shareUrl: null })
 		].join("\n"));
 	} catch {}
-	flushSentry().finally(() => process.exit(130));
+	Promise.all([flushSentry(), shutdownTelemetry()]).finally(() => process.exit(130));
 };
 //#endregion
 export { registerActiveTuiRenderer as n, exitGracefully as t };
 
-//# sourceMappingURL=exit-gracefully-C7wgCb-s.js.map
-//# debugId=1160a1f2-8174-5ea6-850e-b13a5c9aadc8
+//# sourceMappingURL=exit-gracefully-GZXxMj5W.js.map
+//# debugId=687f3e03-d984-5dc0-af33-8adb48745651

package/dist/index.d.ts

@@ -10702,7 +10702,15 @@ interface JsonReportV3$1 extends Omit<JsonReportV1$1, "schemaVersion" | "project
   diagnostics: JsonReportDiagnosticV3[];
 }
 type JsonReport = JsonReportV1$1 | JsonReportV2$1 | JsonReportV3$1; //#endregion
-//#region src/types/prompts.d.ts
+//#region src/types/observability.d.ts
+/**
+ * Credentials and dataset routing for first-party Axiom telemetry.
+ *
+ * Core never reads these from the environment — the CLI owns the embedded
+ * ingest token and passes it in. That keeps `@react-doctor/api` and any other
+ * programmatic consumer silent by construction: a library that never supplies
+ * options can never ship first-party telemetry.
+ */
 //#endregion
 //#region src/project-info/errors.d.ts
 /**