claude-crap 0.3.7 → 0.4.0

package/plugin/package-lock.json

@@ -1,16 +1,17 @@
 {
   "name": "claude-crap-plugin",
-  "version": "0.3.7",
+  "version": "0.4.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "claude-crap-plugin",
-      "version": "0.3.7",
+      "version": "0.4.0",
       "dependencies": {
         "@fastify/static": "^8.0.3",
         "@modelcontextprotocol/sdk": "^1.0.4",
         "fastify": "^5.2.0",
+        "picomatch": "^2.3.0",
         "pino": "^9.5.0",
         "tree-sitter-wasms": "^0.1.12",
         "web-tree-sitter": "^0.24.4"
@@ -2069,6 +2070,18 @@
         "url": "https://opencollective.com/express"
       }
     },
+    "node_modules/picomatch": {
+      "version": "2.3.2",
+      "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-2.3.2.tgz",
+      "integrity": "sha512-V7+vQEJ06Z+c5tSye8S+nHUfI51xoXIXjHQ99cQtKUkQqqO1kO/KCJUfZXuB47h/YBlDhah2H3hdUGXn8ie0oA==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=8.6"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/jonschlinkert"
+      }
+    },
     "node_modules/pino": {
       "version": "9.14.0",
       "resolved": "https://registry.npmjs.org/pino/-/pino-9.14.0.tgz",

package/plugin/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-crap-plugin",
-  "version": "0.3.7",
+  "version": "0.4.0",
   "private": true,
   "description": "Runtime dependencies for the claude-crap plugin bundle",
   "type": "module",
@@ -10,6 +10,7 @@
     "fastify": "^5.2.0",
     "pino": "^9.5.0",
     "tree-sitter-wasms": "^0.1.12",
+    "picomatch": "^2.3.0",
     "web-tree-sitter": "^0.24.4"
   },
   "engines": {

package/scripts/bundle-plugin.mjs

@@ -34,7 +34,8 @@ async function main() {
       "pino",
       "fastify",
       "@fastify/static",
-      "@modelcontextprotocol/sdk"
+      "@modelcontextprotocol/sdk",
+      "picomatch",
     ],
     banner: {
       js: "// Generated by scripts/bundle-plugin.mjs — DO NOT EDIT",

package/src/adapters/common.ts

@@ -23,7 +23,7 @@ import type { SarifLevel } from "../sarif/sarif-builder.js";
  * `ingest_scanner_output` MCP tool uses this as its `enum` constraint,
  * so keeping it narrow prevents drift.
  */
-export const KNOWN_SCANNERS = ["semgrep", "eslint", "bandit", "stryker"] as const;
+export const KNOWN_SCANNERS = ["semgrep", "eslint", "bandit", "stryker", "dart_analyze", "dotnet_format"] as const;
 
 /**
  * Union of supported scanner identifiers.

package/src/adapters/dart-analyzer.ts

@@ -0,0 +1,161 @@
+/**
+ * Adapter: `dart analyze --format=json` → SARIF 2.1.0.
+ *
+ * The Dart analyzer emits JSON with this shape:
+ *
+ *   {
+ *     "version": 1,
+ *     "diagnostics": [
+ *       {
+ *         "code": "unused_import",
+ *         "severity": "WARNING",
+ *         "type": "STATIC_WARNING",
+ *         "location": {
+ *           "file": "/absolute/path/to/file.dart",
+ *           "range": {
+ *             "start": { "offset": 7, "line": 1, "column": 8 },
+ *             "end":   { "offset": 16, "line": 1, "column": 17 }
+ *           }
+ *         },
+ *         "problemMessage": "Unused import: 'dart:io'.",
+ *         "correctionMessage": "Try removing the import directive.",
+ *         "documentation": "https://dart.dev/diagnostics/unused_import"
+ *       }
+ *     ]
+ *   }
+ *
+ * Severity mapping:
+ *   - "ERROR"   → SARIF "error"   (30 min effort)
+ *   - "WARNING" → SARIF "warning" (15 min effort)
+ *   - "INFO"    → SARIF "note"    (5 min effort)
+ *
+ * @module adapters/dart-analyzer
+ */
+
+import {
+  type AdapterResult,
+  wrapResultsInSarif,
+  estimateEffortMinutes,
+} from "./common.js";
+import type { SarifLevel } from "../sarif/sarif-builder.js";
+
+// ── Types ──────────────────────────────────────────────────────────
+
+interface DartDiagnosticLocation {
+  file: string;
+  range: {
+    start: { offset: number; line: number; column: number };
+    end: { offset: number; line: number; column: number };
+  };
+}
+
+interface DartDiagnostic {
+  code: string;
+  severity: string;
+  type: string;
+  location: DartDiagnosticLocation;
+  problemMessage: string;
+  correctionMessage?: string;
+  documentation?: string;
+}
+
+interface DartAnalyzeOutput {
+  version: number;
+  diagnostics: DartDiagnostic[];
+}
+
+// ── Severity mapping ───────────────────────────────────────────────
+
+function mapSeverity(dartSeverity: string): SarifLevel {
+  switch (dartSeverity.toUpperCase()) {
+    case "ERROR":
+      return "error";
+    case "WARNING":
+      return "warning";
+    case "INFO":
+      return "note";
+    default:
+      return "warning";
+  }
+}
+
+// ── Effort estimates per severity ──────────────────────────────────
+
+const EFFORT_BY_SEVERITY: Record<SarifLevel, number> = {
+  error: 30,
+  warning: 15,
+  note: 5,
+  none: 0,
+};
+
+// ── Public API ─────────────────────────────────────────────────────
+
+/**
+ * Convert `dart analyze --format=json` output to SARIF 2.1.0.
+ *
+ * @param rawOutput The JSON string or pre-parsed object from `dart analyze`.
+ */
+export function adaptDartAnalyzer(rawOutput: unknown): AdapterResult {
+  let parsed: DartAnalyzeOutput;
+
+  if (typeof rawOutput === "string") {
+    try {
+      parsed = JSON.parse(rawOutput) as DartAnalyzeOutput;
+    } catch {
+      throw new Error("[dart-analyzer adapter] rawOutput is not valid JSON");
+    }
+  } else if (rawOutput && typeof rawOutput === "object" && "diagnostics" in rawOutput) {
+    parsed = rawOutput as DartAnalyzeOutput;
+  } else {
+    throw new Error(
+      "[dart-analyzer adapter] rawOutput must be a JSON string or an object with a 'diagnostics' array",
+    );
+  }
+
+  if (!Array.isArray(parsed.diagnostics)) {
+    throw new Error("[dart-analyzer adapter] 'diagnostics' must be an array");
+  }
+
+  const results: object[] = [];
+  let totalEffortMinutes = 0;
+
+  for (const diag of parsed.diagnostics) {
+    const level = mapSeverity(diag.severity);
+    const effort = EFFORT_BY_SEVERITY[level] ?? estimateEffortMinutes(level);
+    totalEffortMinutes += effort;
+
+    results.push({
+      ruleId: diag.code,
+      level,
+      message: {
+        text: diag.problemMessage + (diag.correctionMessage ? ` ${diag.correctionMessage}` : ""),
+      },
+      locations: [
+        {
+          physicalLocation: {
+            artifactLocation: {
+              uri: diag.location.file,
+            },
+            region: {
+              startLine: diag.location.range.start.line,
+              startColumn: diag.location.range.start.column,
+              endLine: diag.location.range.end.line,
+              endColumn: diag.location.range.end.column,
+            },
+          },
+        },
+      ],
+      properties: {
+        effortMinutes: effort,
+        ...(diag.documentation ? { helpUri: diag.documentation } : {}),
+      },
+    });
+  }
+
+  return {
+    document: wrapResultsInSarif("dart_analyze", "1.0.0", results),
+    sourceTool: "dart_analyze",
+    findingCount: parsed.diagnostics.length,
+    totalEffortMinutes,
+  };
+}

package/src/adapters/dotnet-format.ts

@@ -0,0 +1,125 @@
+/**
+ * Adapter: `dotnet format --report <path>` JSON output → SARIF 2.1.0.
+ *
+ * The dotnet format tool emits a JSON array with this shape:
+ *
+ *   [
+ *     {
+ *       "DocumentId": { "ProjectId": { "Id": "..." }, "Id": "..." },
+ *       "FileName": "AuthController.cs",
+ *       "FilePath": "/absolute/path/to/AuthController.cs",
+ *       "FileChanges": [
+ *         {
+ *           "LineNumber": 84,
+ *           "CharNumber": 16,
+ *           "DiagnosticId": "WHITESPACE",
+ *           "FormatDescription": "Fix whitespace formatting. Delete 5 characters."
+ *         }
+ *       ]
+ *     }
+ *   ]
+ *
+ * All dotnet format findings are style/formatting issues, so they
+ * map uniformly to SARIF "warning" level with a 5-minute effort
+ * estimate (formatting fixes are quick, mechanical changes).
+ *
+ * @module adapters/dotnet-format
+ */
+
+import {
+  type AdapterResult,
+  wrapResultsInSarif,
+} from "./common.js";
+
+// ── Types ──────────────────────────────────────────────────────────
+
+interface DotnetFileChange {
+  LineNumber: number;
+  CharNumber: number;
+  DiagnosticId: string;
+  FormatDescription: string;
+}
+
+interface DotnetFormatDocument {
+  DocumentId: {
+    ProjectId: { Id: string };
+    Id: string;
+  };
+  FileName: string;
+  FilePath: string;
+  FileChanges: DotnetFileChange[];
+}
+
+// ── Public API ─────────────────────────────────────────────────────
+
+/**
+ * Convert `dotnet format --report <path>` JSON output to SARIF 2.1.0.
+ *
+ * @param rawOutput The JSON string or pre-parsed array from `dotnet format`.
+ */
+export function adaptDotnetFormat(rawOutput: unknown): AdapterResult {
+  let parsed: DotnetFormatDocument[];
+
+  if (typeof rawOutput === "string") {
+    try {
+      parsed = JSON.parse(rawOutput) as DotnetFormatDocument[];
+    } catch {
+      throw new Error("[dotnet-format adapter] rawOutput is not valid JSON");
+    }
+  } else if (Array.isArray(rawOutput)) {
+    parsed = rawOutput as DotnetFormatDocument[];
+  } else {
+    throw new Error(
+      "[dotnet-format adapter] rawOutput must be a JSON string or an array of document entries",
+    );
+  }
+
+  if (!Array.isArray(parsed)) {
+    throw new Error("[dotnet-format adapter] parsed output must be an array");
+  }
+
+  const EFFORT_MINUTES = 5;
+  const results: object[] = [];
+  let findingCount = 0;
+  let totalEffortMinutes = 0;
+
+  for (const doc of parsed) {
+    if (!Array.isArray(doc.FileChanges)) continue;
+
+    for (const change of doc.FileChanges) {
+      findingCount++;
+      totalEffortMinutes += EFFORT_MINUTES;
+
+      results.push({
+        ruleId: change.DiagnosticId,
+        level: "warning",
+        message: {
+          text: change.FormatDescription,
+        },
+        locations: [
+          {
+            physicalLocation: {
+              artifactLocation: {
+                uri: doc.FilePath,
+              },
+              region: {
+                startLine: change.LineNumber,
+                startColumn: change.CharNumber,
+              },
+            },
+          },
+        ],
+        properties: {
+          effortMinutes: EFFORT_MINUTES,
+        },
+      });
+    }
+  }
+
+  return {
+    document: wrapResultsInSarif("dotnet_format", "1.0.0", results),
+    sourceTool: "dotnet_format",
+    findingCount,
+    totalEffortMinutes,
+  };
+}

package/src/adapters/index.ts

@@ -30,6 +30,8 @@ export { adaptSemgrep } from "./semgrep.js";
 export { adaptEslint } from "./eslint.js";
 export { adaptBandit } from "./bandit.js";
 export { adaptStryker } from "./stryker.js";
+export { adaptDartAnalyzer } from "./dart-analyzer.js";
+export { adaptDotnetFormat } from "./dotnet-format.js";
 
 export {
   DEFAULT_EFFORT_BY_SEVERITY,
@@ -44,6 +46,8 @@ import { adaptSemgrep } from "./semgrep.js";
 import { adaptEslint } from "./eslint.js";
 import { adaptBandit } from "./bandit.js";
 import { adaptStryker } from "./stryker.js";
+import { adaptDartAnalyzer } from "./dart-analyzer.js";
+import { adaptDotnetFormat } from "./dotnet-format.js";
 import type { AdapterResult, KnownScanner } from "./common.js";
 
 /**
@@ -70,6 +74,10 @@ export function adaptScannerOutput(
       return adaptBandit(rawOutput);
     case "stryker":
       return adaptStryker(rawOutput);
+    case "dart_analyze":
+      return adaptDartAnalyzer(rawOutput);
+    case "dotnet_format":
+      return adaptDotnetFormat(rawOutput);
     default: {
       const exhaustive: never = scanner;
       throw new Error(`[adapters] Unknown scanner: ${String(exhaustive)}`);

package/src/crap-config.ts

@@ -81,6 +81,10 @@ export interface CrapConfig {
   readonly strictness: Strictness;
   /** Where the strictness value actually came from. Useful for diagnostics. */
   readonly strictnessSource: "env" | "file" | "default";
+  /** User-defined exclusion patterns (directories with trailing `/`, or file globs). */
+  readonly exclude: ReadonlyArray<string>;
+  /** Relative paths to directories containing sub-projects (e.g. `["apps", "packages"]`). */
+  readonly projectDirs: ReadonlyArray<string>;
 }
 
 /**
@@ -107,6 +111,12 @@ export interface LoadCrapConfigOptions {
  * @throws        {@link CrapConfigError} on any invalid input.
  */
 export function loadCrapConfig(options: LoadCrapConfigOptions): CrapConfig {
+  // Always read the file to extract `exclude`, even when strictness
+  // comes from the environment variable.
+  const fileResult = readFromFile(options.workspaceRoot);
+  const exclude = fileResult?.exclude ?? [];
+  const projectDirs = fileResult?.projectDirs ?? [];
+
   const envRaw = process.env["CLAUDE_CRAP_STRICTNESS"];
   if (typeof envRaw === "string" && envRaw.trim() !== "") {
     const normalized = envRaw.trim().toLowerCase();
@@ -116,13 +126,14 @@ export function loadCrapConfig(options: LoadCrapConfigOptions): CrapConfig {
           `Expected one of: ${STRICTNESS_VALUES.join(", ")}.`,
       );
     }
-    return { strictness: normalized, strictnessSource: "env" };
+    return { strictness: normalized, strictnessSource: "env", exclude, projectDirs };
   }
 
-  const fromFile = readFromFile(options.workspaceRoot);
-  if (fromFile) return { strictness: fromFile, strictnessSource: "file" };
+  if (fileResult?.strictness) {
+    return { strictness: fileResult.strictness, strictnessSource: "file", exclude, projectDirs };
+  }
 
-  return { strictness: DEFAULT_STRICTNESS, strictnessSource: "default" };
+  return { strictness: DEFAULT_STRICTNESS, strictnessSource: "default", exclude, projectDirs };
 }
 
 /**
@@ -138,7 +149,13 @@ export function loadCrapConfig(options: LoadCrapConfigOptions): CrapConfig {
  * @returns             The validated strictness, or `null` when no
  *                      file is present.
  */
-function readFromFile(workspaceRoot: string): Strictness | null {
+interface FileResult {
+  strictness: Strictness | null;
+  exclude: string[];
+  projectDirs: string[];
+}
+
+function readFromFile(workspaceRoot: string): FileResult | null {
   const filePath = join(workspaceRoot, ".claude-crap.json");
   let raw: string;
   try {
@@ -166,22 +183,65 @@ function readFromFile(workspaceRoot: string): Strictness | null {
     );
   }
   const doc = parsed as Record<string, unknown>;
-  if (!("strictness" in doc)) return null;
 
-  const value = doc["strictness"];
-  if (typeof value !== "string") {
-    throw new CrapConfigError(
-      `[crap-config] ${filePath}: 'strictness' must be a string, got ${typeof value}`,
-    );
+  // Parse strictness
+  let strictness: Strictness | null = null;
+  if ("strictness" in doc) {
+    const value = doc["strictness"];
+    if (typeof value !== "string") {
+      throw new CrapConfigError(
+        `[crap-config] ${filePath}: 'strictness' must be a string, got ${typeof value}`,
+      );
+    }
+    const normalized = value.trim().toLowerCase();
+    if (!isStrictness(normalized)) {
+      throw new CrapConfigError(
+        `[crap-config] ${filePath}: 'strictness' is "${value}"; ` +
+          `expected one of ${STRICTNESS_VALUES.join(", ")}.`,
+      );
+    }
+    strictness = normalized;
   }
-  const normalized = value.trim().toLowerCase();
-  if (!isStrictness(normalized)) {
-    throw new CrapConfigError(
-      `[crap-config] ${filePath}: 'strictness' is "${value}"; ` +
-        `expected one of ${STRICTNESS_VALUES.join(", ")}.`,
-    );
+
+  // Parse exclude
+  let exclude: string[] = [];
+  if ("exclude" in doc) {
+    const raw = doc["exclude"];
+    if (!Array.isArray(raw)) {
+      throw new CrapConfigError(
+        `[crap-config] ${filePath}: 'exclude' must be an array of strings`,
+      );
+    }
+    for (const item of raw) {
+      if (typeof item !== "string") {
+        throw new CrapConfigError(
+          `[crap-config] ${filePath}: every entry in 'exclude' must be a string, got ${typeof item}`,
+        );
+      }
+    }
+    exclude = raw as string[];
   }
-  return normalized;
+
+  // Parse projectDirs
+  let projectDirs: string[] = [];
+  if ("projectDirs" in doc) {
+    const raw = doc["projectDirs"];
+    if (!Array.isArray(raw)) {
+      throw new CrapConfigError(
+        `[crap-config] ${filePath}: 'projectDirs' must be an array of strings`,
+      );
+    }
+    for (const item of raw) {
+      if (typeof item !== "string") {
+        throw new CrapConfigError(
+          `[crap-config] ${filePath}: every entry in 'projectDirs' must be a string, got ${typeof item}`,
+        );
+      }
+    }
+    projectDirs = raw as string[];
+  }
+
+  return { strictness, exclude, projectDirs };
 }
 
 /**

package/src/dashboard/file-detail.ts

@@ -15,8 +15,6 @@
  */
 
 import { promises as fs } from "node:fs";
-import { join } from "node:path";
-
 import { resolveWithinWorkspace } from "../workspace-guard.js";
 import { detectLanguageFromPath, type SupportedLanguage } from "../ast/language-config.js";
 import type { TreeSitterEngine, FunctionMetrics } from "../ast/tree-sitter-engine.js";

package/src/dashboard/server.ts

@@ -33,6 +33,7 @@ import fastifyStatic from "@fastify/static";
 import type { Logger } from "pino";
 
 import type { CrapConfig } from "../config.js";
+import { createExclusionFilter } from "../shared/exclusions.js";
 import {
   computeProjectScore,
   type ProjectScore,
@@ -64,6 +65,8 @@ export interface StartDashboardOptions {
   readonly logger: Logger;
   /** Tree-sitter engine for the /api/complexity endpoint. */
   readonly astEngine?: TreeSitterEngine;
+  /** User-defined exclusion patterns from .claude-crap.json. */
+  readonly exclude?: ReadonlyArray<string>;
 }
 
 /**
@@ -104,7 +107,7 @@ export async function startDashboard(options: StartDashboardOptions): Promise<Da
   // ------------------------------------------------------------------
   // /api/health — liveness probe
   // ------------------------------------------------------------------
-  fastify.get("/api/health", async () => ({ status: "ok", server: "claude-crap", version: "0.3.7" }));
+  fastify.get("/api/health", async () => ({ status: "ok", server: "claude-crap", version: "0.4.0" }));
 
   // ------------------------------------------------------------------
   // /api/score — live project score
@@ -127,7 +130,7 @@ export async function startDashboard(options: StartDashboardOptions): Promise<Da
     if (!options.astEngine) {
       return { threshold: config.cyclomaticMax, totalFunctions: 0, violationCount: 0, topFunctions: [] };
     }
-    return buildComplexityReport(config, options.astEngine, logger);
+    return buildComplexityReport(config, options.astEngine, logger, options.exclude);
   });
 
   // ------------------------------------------------------------------
@@ -394,12 +397,7 @@ interface ComplexityReport {
   topFunctions: ComplexityEntry[];
 }
 
-/** Directories to skip (mirrors workspace-walker.ts). */
-const SKIP_DIRS: ReadonlySet<string> = new Set([
-  "node_modules", ".git", "dist", "build", "out", "target",
-  ".venv", "venv", "__pycache__", ".cache", ".next", ".nuxt",
-  ".claude-crap", ".codesight",
-]);
+// Directory exclusions are now centralized in src/shared/exclusions.ts.
 
 /**
  * Walk the workspace and collect per-function complexity metrics,
@@ -410,8 +408,10 @@ async function buildComplexityReport(
   config: CrapConfig,
   engine: TreeSitterEngine,
   logger: Logger,
+  exclude?: ReadonlyArray<string>,
 ): Promise<ComplexityReport> {
   const threshold = config.cyclomaticMax;
+  const filter = createExclusionFilter(exclude);
   const allFunctions: ComplexityEntry[] = [];
   let totalFunctions = 0;
 
@@ -423,10 +423,9 @@ async function buildComplexityReport(
       return;
     }
     for (const entry of entries) {
-      if (entry.name.startsWith(".") && entry.name !== ".claude-plugin") continue;
       const full = join(dir, entry.name);
       if (entry.isDirectory()) {
-        if (SKIP_DIRS.has(entry.name)) continue;
+        if (filter.shouldSkipDir(entry.name)) continue;
         await walk(full);
         continue;
       }