claude-crap 0.3.8 → 0.4.0

package/CHANGELOG.md

@@ -5,6 +5,39 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.4.0] - 2026-04-13
+
+### Added
+
+- **Monorepo project map** — auto-discovers sub-projects at session boot
+  by probing npm workspaces and `apps/`, `packages/`, `libs/` directories.
+  Persisted to `.claude-crap/projects.json`.
+- **`list_projects` MCP tool** — returns all sub-projects with type, path,
+  recommended scanner, and availability.
+- **Scoped `score_project`** — optional `scope` parameter to score a
+  single sub-project instead of the entire monorepo.
+- **Dart analyzer scanner** — `dart analyze --format=json` → SARIF 2.1.0.
+  Auto-detected in monorepo subdirectories via `pubspec.yaml`.
+- **`dotnet format` scanner** — built-in Roslyn analyzer for C# projects.
+  No extra install needed when .NET SDK is present.
+- **Centralized file exclusions** — shared module replaces 3 independent
+  `SKIP_DIRS` sets. Covers `bundle/`, `vendor/`, `.astro`, `.svelte-kit`,
+  `.dart_tool`, `.expo`, `.angular`, `.turbo`, and 15+ more.
+- **User-configurable `exclude`** — `.claude-crap.json` now supports an
+  `exclude` array with glob patterns and directory exclusions.
+- **Auto-bootstrap ESLint** in monorepos — detects JS/TS sub-projects
+  and installs ESLint at root automatically.
+- **Auto-sync plugin cache** — `npm run build:plugin` syncs to all
+  cached versions under `~/.claude/plugins/cache/`.
+
+### Changed
+
+- C# projects now use `dotnet format` instead of Semgrep.
+- Scanner detector validates `node_modules/.bin/` binary exists before
+  marking a package.json dependency as available.
+- Workspace LOC excludes bundle/vendor files (dropped from ~25K to ~15K
+  for the claude-crap repo itself).
+
 ## [0.3.6] - 2026-04-12
 
 ### Fixed

package/README.md

@@ -100,8 +100,9 @@ CRAP formula, TDR formula, letter ratings, and adoption strategy.
 | **Stop quality gate** | `plugin/hooks/stop-quality-gate.mjs` | Reads the SARIF store, computes CRAP / TDR / reliability / security ratings, and blocks task close if any metric is outside policy. |
 | **MCP server** | `src/index.ts` | Stdio-transport server exposing CRAP, TDR, tree-sitter AST, and SARIF engines as deterministic tools. |
 | **SARIF store** | `src/sarif/sarif-store.ts` | On-disk consolidated report with finding deduplication. Tolerates malformed entries so a tampered file can't DoS the boot. |
-| **Scanner adapters** | `src/adapters/` | Semgrep, ESLint, Bandit, Stryker — each stamps `effortMinutes` for uniform TDR computation. |
-| **Dashboard** | `src/dashboard/server.ts` | Fastify on `127.0.0.1:5117` serving a Vue 3 SPA. Offline-capable (vendored runtime). Port auto-fallback on conflict. |
+| **Scanner adapters** | `src/adapters/` | ESLint, Semgrep, Bandit, Stryker, `dart analyze`, `dotnet format` — each stamps `effortMinutes` for uniform TDR computation. |
+| **Project map** | `src/monorepo/project-map.ts` | Auto-discovers monorepo sub-projects at boot, persists to `.claude-crap/projects.json`. |
+| **Dashboard** | `src/dashboard/server.ts` | Fastify on `127.0.0.1:5117` serving a Vue 3 SPA. Offline-capable (vendored runtime). PID-based port management. |
 
 All findings are normalized to **SARIF 2.1.0** — one vocabulary,
 exact coordinates, no grep walls in the context window.
@@ -113,7 +114,7 @@ for the boot sequence, data flow, and design decisions.
 
 ## MCP Tools
 
-Nine deterministic tools and two resources, all with strict JSON Schema validation.
+Ten deterministic tools and two resources, all with strict JSON Schema validation.
 
 | Tool | Purpose |
 | :--- | :------ |
@@ -121,11 +122,12 @@ Nine deterministic tools and two resources, all with strict JSON Schema validati
 | `compute_tdr` | Technical Debt Ratio and A..E maintainability rating. |
 | `analyze_file_ast` | Tree-sitter AST metrics: LOC + per-function cyclomatic complexity. TypeScript, JavaScript, Python, Java, C#. |
 | `ingest_sarif` | Merge a raw SARIF 2.1.0 document into the store with deduplication. |
-| `ingest_scanner_output` | Route native scanner output through adapter, enrich with `effortMinutes`, persist as SARIF. |
+| `ingest_scanner_output` | Route native scanner output through adapter, enrich with `effortMinutes`, persist as SARIF. Supports ESLint, Semgrep, Bandit, Stryker, `dart_analyze`, and `dotnet_format`. |
 | `require_test_harness` | Check whether a source file has an accompanying test file. |
-| `score_project` | Aggregate workspace into Maintainability / Reliability / Security / Overall A..E grades. |
-| `auto_scan` | Auto-detect scanners, run them, ingest findings. |
+| `score_project` | Aggregate workspace into A..E grades. Optional `scope` parameter to score a single monorepo sub-project. |
+| `auto_scan` | Auto-detect scanners (including monorepo subdirectories), run them, ingest findings. |
 | `bootstrap_scanner` | Detect project type, install the right scanner, configure, and verify. |
+| `list_projects` | List all discovered monorepo sub-projects with type, scanner, and availability. |
 
 | Resource | Description |
 | :------- | :---------- |
@@ -151,26 +153,66 @@ See [docs/contributing.md](./docs/contributing.md) for Windows setup details.
 
 ## Supported Languages & Scanners
 
-| Language | Extensions | AST analysis | Scanner | Auto-install | Monorepo |
-| :------- | :--------- | :----------: | :------ | :----------: | :------: |
-| TypeScript | `.ts` `.tsx` `.mts` `.cts` | Cyclomatic complexity | ESLint | Yes (npm) | Root |
-| JavaScript | `.js` `.jsx` `.mjs` `.cjs` | Cyclomatic complexity | ESLint | Yes (npm) | Root |
-| Python | `.py` `.pyi` | Cyclomatic complexity | Bandit | Manual | Root |
-| Java | `.java` | Cyclomatic complexity | Semgrep | Manual | Root |
-| C# | `.cs` | Cyclomatic complexity | Semgrep | Manual | Root |
-| Dart / Flutter | `.dart` | LOC only | `dart analyze` | SDK required | Subdir probing |
-| Vue | `.vue` | LOC only | ESLint (via root) | — | — |
-| Go | `.go` | LOC only | — | — | — |
-| Rust | `.rs` | LOC only | — | — | — |
-| Ruby | `.rb` | LOC only | — | — | — |
-| PHP | `.php` | LOC only | — | — | — |
-| Swift | `.swift` | LOC only | — | — | — |
-| Kotlin | `.kt` | LOC only | — | — | — |
-| Scala | `.scala` | LOC only | — | — | — |
-
-**AST analysis** = tree-sitter cyclomatic complexity per function. **LOC only** = counted toward workspace metrics but no per-function analysis.
-
-**Monorepo support**: auto-scan probes `apps/`, `packages/`, `libs/` and npm workspaces for scanner configs in subdirectories (e.g., `apps/mobile/pubspec.yaml`).
+| Language | Extensions | AST analysis | Scanner | Setup |
+| :------- | :--------- | :----------: | :------ | :---- |
+| TypeScript | `.ts` `.tsx` `.mts` `.cts` | Cyclomatic complexity | ESLint | **Auto-installed** via npm |
+| JavaScript | `.js` `.jsx` `.mjs` `.cjs` | Cyclomatic complexity | ESLint | **Auto-installed** via npm |
+| Python | `.py` `.pyi` | Cyclomatic complexity | Bandit | `pip install bandit` |
+| Java | `.java` | Cyclomatic complexity | Semgrep | `brew install semgrep` |
+| C# / .NET | `.cs` | Cyclomatic complexity | `dotnet format` | **Included in .NET SDK** |
+| Dart / Flutter | `.dart` | LOC only | `dart analyze` | **Included in Dart/Flutter SDK** |
+| Vue | `.vue` | LOC only | ESLint (via root config) | Auto with TypeScript |
+| Go | `.go` | LOC only | — | — |
+| Rust | `.rs` | LOC only | — | — |
+| Ruby | `.rb` | LOC only | — | — |
+| PHP | `.php` | LOC only | — | — |
+| Swift | `.swift` | LOC only | — | — |
+| Kotlin | `.kt` | LOC only | — | — |
+| Scala | `.scala` | LOC only | — | — |
+
+**AST analysis** = tree-sitter cyclomatic complexity per function.
+**LOC only** = counted toward workspace metrics but no per-function analysis.
+
+### Monorepo auto-discovery
+
+In monorepos, claude-crap automatically discovers sub-projects at
+session startup — no per-project configuration needed. The plugin
+probes npm workspaces and common directories (`apps/`, `packages/`,
+`libs/`, `modules/`, `services/`) to build a **project map**:
+
+```
+Session start
+  → discover project map
+  → detect: www (TypeScript), app (TypeScript), mobile (Dart), api (C#)
+  → ESLint not installed? → auto-install at monorepo root
+  → run ESLint from root (covers all JS/TS)
+  → run dart analyze from apps/mobile/
+  → run dotnet format from apps/api/
+  → aggregate all findings into one SARIF store
+  → score_project ready with real data
+```
+
+The project map is persisted to `.claude-crap/projects.json` and
+exposed via the `list_projects` MCP tool. Use `score_project` with
+the optional `scope` parameter to score a single sub-project:
+
+```ts
+// Score only the mobile app
+score_project({ format: "both", scope: "mobile" })
+```
+
+**File exclusions** are centralized and cover all major frameworks
+out of the box: `dist/`, `build/`, `bundle/`, `vendor/`,
+`.next`, `.nuxt`, `.astro`, `.svelte-kit`, `.dart_tool`,
+`.expo`, `.angular`, `.turbo`, and more. Custom exclusions can be
+added via `.claude-crap.json`:
+
+```jsonc
+{
+  "strictness": "strict",
+  "exclude": ["apps/legacy/", "generated/", "*.proto.ts"]
+}
+```
 
 ---
 
@@ -195,7 +237,7 @@ See [docs/contributing.md](./docs/contributing.md) for Windows setup details.
 
 ```bash
 npm install          # postinstall builds dist/ automatically
-npm test             # 225 tests across 37 suites
+npm test             # 265 tests across 46 suites
 npm run build:fast   # esbuild dev build (10-20x faster than tsc)
 npm run doctor       # full diagnostic
 ```

package/dist/adapters/common.d.ts

@@ -21,7 +21,7 @@ import type { SarifLevel } from "../sarif/sarif-builder.js";
  * `ingest_scanner_output` MCP tool uses this as its `enum` constraint,
  * so keeping it narrow prevents drift.
  */
-export declare const KNOWN_SCANNERS: readonly ["semgrep", "eslint", "bandit", "stryker", "dart_analyze"];
+export declare const KNOWN_SCANNERS: readonly ["semgrep", "eslint", "bandit", "stryker", "dart_analyze", "dotnet_format"];
 /**
  * Union of supported scanner identifiers.
  */

package/dist/adapters/common.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"common.d.ts","sourceRoot":"","sources":["../../src/adapters/common.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAE5D;;;;GAIG;AACH,eAAO,MAAM,cAAc,qEAAsE,CAAC;AAElG;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAE3D;;;;;;;GAOG;AACH,eAAO,MAAM,0BAA0B,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAK1E,CAAC;AAEH;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,wEAAwE;IACxE,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,mFAAmF;IACnF,QAAQ,CAAC,UAAU,EAAE,YAAY,CAAC;IAClC,gFAAgF;IAChF,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,0EAA0E;IAC1E,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;CACrC;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,YAAY,EACxB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,GAC7B,cAAc,CAgBhB;AAyBD;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,UAAU,GAAG,SAAS,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAM9F"}
+{"version":3,"file":"common.d.ts","sourceRoot":"","sources":["../../src/adapters/common.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAE5D;;;;GAIG;AACH,eAAO,MAAM,cAAc,sFAAuF,CAAC;AAEnH;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAE3D;;;;;;;GAOG;AACH,eAAO,MAAM,0BAA0B,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAK1E,CAAC;AAEH;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,wEAAwE;IACxE,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,mFAAmF;IACnF,QAAQ,CAAC,UAAU,EAAE,YAAY,CAAC;IAClC,gFAAgF;IAChF,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,0EAA0E;IAC1E,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;CACrC;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,YAAY,EACxB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,GAC7B,cAAc,CAgBhB;AAyBD;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,UAAU,GAAG,SAAS,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAM9F"}

package/dist/adapters/common.js

@@ -19,7 +19,7 @@
  * `ingest_scanner_output` MCP tool uses this as its `enum` constraint,
  * so keeping it narrow prevents drift.
  */
-export const KNOWN_SCANNERS = ["semgrep", "eslint", "bandit", "stryker", "dart_analyze"];
+export const KNOWN_SCANNERS = ["semgrep", "eslint", "bandit", "stryker", "dart_analyze", "dotnet_format"];
 /**
  * Default remediation effort in minutes per SARIF severity level. These
  * numbers are deliberately conservative — real projects should override

package/dist/adapters/common.js.map

@@ -1 +1 @@
-{"version":3,"file":"common.js","sourceRoot":"","sources":["../../src/adapters/common.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAKH;;;;GAIG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,cAAc,CAAU,CAAC;AAOlG;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAyC,MAAM,CAAC,MAAM,CAAC;IAC5F,KAAK,EAAE,EAAE;IACT,OAAO,EAAE,EAAE;IACX,IAAI,EAAE,EAAE;IACR,IAAI,EAAE,CAAC;CACR,CAAC,CAAC;AAmBH;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAChC,UAAwB,EACxB,OAAe,EACf,OAA8B;IAE9B,OAAO;QACL,OAAO,EAAE,qEAAqE;QAC9E,OAAO,EAAE,OAAO;QAChB,IAAI,EAAE;YACJ;gBACE,IAAI,EAAE;oBACJ,MAAM,EAAE;wBACN,IAAI,EAAE,UAAU;wBAChB,OAAO;qBACR;iBACF;gBACD,OAAO,EAAE,OAA0C;aACpD;SACF;KACgB,CAAC;AACtB,CAAC;AAyBD;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAA6B,EAAE,QAAiB;IACpF,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,IAAI,CAAC,EAAE,CAAC;QAC/E,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC;IACD,MAAM,IAAI,GAAG,0BAA0B,CAAC,KAAK,IAAI,SAAS,CAAC,CAAC;IAC5D,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;AAC7C,CAAC"}
+{"version":3,"file":"common.js","sourceRoot":"","sources":["../../src/adapters/common.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAKH;;;;GAIG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,cAAc,EAAE,eAAe,CAAU,CAAC;AAOnH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAyC,MAAM,CAAC,MAAM,CAAC;IAC5F,KAAK,EAAE,EAAE;IACT,OAAO,EAAE,EAAE;IACX,IAAI,EAAE,EAAE;IACR,IAAI,EAAE,CAAC;CACR,CAAC,CAAC;AAmBH;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAChC,UAAwB,EACxB,OAAe,EACf,OAA8B;IAE9B,OAAO;QACL,OAAO,EAAE,qEAAqE;QAC9E,OAAO,EAAE,OAAO;QAChB,IAAI,EAAE;YACJ;gBACE,IAAI,EAAE;oBACJ,MAAM,EAAE;wBACN,IAAI,EAAE,UAAU;wBAChB,OAAO;qBACR;iBACF;gBACD,OAAO,EAAE,OAA0C;aACpD;SACF;KACgB,CAAC;AACtB,CAAC;AAyBD;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAA6B,EAAE,QAAiB;IACpF,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,IAAI,CAAC,EAAE,CAAC;QAC/E,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC;IACD,MAAM,IAAI,GAAG,0BAA0B,CAAC,KAAK,IAAI,SAAS,CAAC,CAAC;IAC5D,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;AAC7C,CAAC"}

package/dist/adapters/dotnet-format.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Adapter: `dotnet format --report <path>` JSON output → SARIF 2.1.0.
+ *
+ * The dotnet format tool emits a JSON array with this shape:
+ *
+ *   [
+ *     {
+ *       "DocumentId": { "ProjectId": { "Id": "..." }, "Id": "..." },
+ *       "FileName": "AuthController.cs",
+ *       "FilePath": "/absolute/path/to/AuthController.cs",
+ *       "FileChanges": [
+ *         {
+ *           "LineNumber": 84,
+ *           "CharNumber": 16,
+ *           "DiagnosticId": "WHITESPACE",
+ *           "FormatDescription": "Fix whitespace formatting. Delete 5 characters."
+ *         }
+ *       ]
+ *     }
+ *   ]
+ *
+ * All dotnet format findings are style/formatting issues, so they
+ * map uniformly to SARIF "warning" level with a 5-minute effort
+ * estimate (formatting fixes are quick, mechanical changes).
+ *
+ * @module adapters/dotnet-format
+ */
+import { type AdapterResult } from "./common.js";
+/**
+ * Convert `dotnet format --report <path>` JSON output to SARIF 2.1.0.
+ *
+ * @param rawOutput The JSON string or pre-parsed array from `dotnet format`.
+ */
+export declare function adaptDotnetFormat(rawOutput: unknown): AdapterResult;
+//# sourceMappingURL=dotnet-format.d.ts.map

package/dist/adapters/dotnet-format.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dotnet-format.d.ts","sourceRoot":"","sources":["../../src/adapters/dotnet-format.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EACL,KAAK,aAAa,EAEnB,MAAM,aAAa,CAAC;AAuBrB;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,OAAO,GAAG,aAAa,CAiEnE"}

package/dist/adapters/dotnet-format.js

@@ -0,0 +1,96 @@
+/**
+ * Adapter: `dotnet format --report <path>` JSON output → SARIF 2.1.0.
+ *
+ * The dotnet format tool emits a JSON array with this shape:
+ *
+ *   [
+ *     {
+ *       "DocumentId": { "ProjectId": { "Id": "..." }, "Id": "..." },
+ *       "FileName": "AuthController.cs",
+ *       "FilePath": "/absolute/path/to/AuthController.cs",
+ *       "FileChanges": [
+ *         {
+ *           "LineNumber": 84,
+ *           "CharNumber": 16,
+ *           "DiagnosticId": "WHITESPACE",
+ *           "FormatDescription": "Fix whitespace formatting. Delete 5 characters."
+ *         }
+ *       ]
+ *     }
+ *   ]
+ *
+ * All dotnet format findings are style/formatting issues, so they
+ * map uniformly to SARIF "warning" level with a 5-minute effort
+ * estimate (formatting fixes are quick, mechanical changes).
+ *
+ * @module adapters/dotnet-format
+ */
+import { wrapResultsInSarif, } from "./common.js";
+// ── Public API ─────────────────────────────────────────────────────
+/**
+ * Convert `dotnet format --report <path>` JSON output to SARIF 2.1.0.
+ *
+ * @param rawOutput The JSON string or pre-parsed array from `dotnet format`.
+ */
+export function adaptDotnetFormat(rawOutput) {
+    let parsed;
+    if (typeof rawOutput === "string") {
+        try {
+            parsed = JSON.parse(rawOutput);
+        }
+        catch {
+            throw new Error("[dotnet-format adapter] rawOutput is not valid JSON");
+        }
+    }
+    else if (Array.isArray(rawOutput)) {
+        parsed = rawOutput;
+    }
+    else {
+        throw new Error("[dotnet-format adapter] rawOutput must be a JSON string or an array of document entries");
+    }
+    if (!Array.isArray(parsed)) {
+        throw new Error("[dotnet-format adapter] parsed output must be an array");
+    }
+    const EFFORT_MINUTES = 5;
+    const results = [];
+    let findingCount = 0;
+    let totalEffortMinutes = 0;
+    for (const doc of parsed) {
+        if (!Array.isArray(doc.FileChanges))
+            continue;
+        for (const change of doc.FileChanges) {
+            findingCount++;
+            totalEffortMinutes += EFFORT_MINUTES;
+            results.push({
+                ruleId: change.DiagnosticId,
+                level: "warning",
+                message: {
+                    text: change.FormatDescription,
+                },
+                locations: [
+                    {
+                        physicalLocation: {
+                            artifactLocation: {
+                                uri: doc.FilePath,
+                            },
+                            region: {
+                                startLine: change.LineNumber,
+                                startColumn: change.CharNumber,
+                            },
+                        },
+                    },
+                ],
+                properties: {
+                    effortMinutes: EFFORT_MINUTES,
+                },
+            });
+        }
+    }
+    return {
+        document: wrapResultsInSarif("dotnet_format", "1.0.0", results),
+        sourceTool: "dotnet_format",
+        findingCount,
+        totalEffortMinutes,
+    };
+}
+//# sourceMappingURL=dotnet-format.js.map

package/dist/adapters/dotnet-format.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dotnet-format.js","sourceRoot":"","sources":["../../src/adapters/dotnet-format.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAEL,kBAAkB,GACnB,MAAM,aAAa,CAAC;AAqBrB,sEAAsE;AAEtE;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,SAAkB;IAClD,IAAI,MAA8B,CAAC;IAEnC,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAA2B,CAAC;QAC3D,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;SAAM,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACpC,MAAM,GAAG,SAAmC,CAAC;IAC/C,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,KAAK,CACb,yFAAyF,CAC1F,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IAED,MAAM,cAAc,GAAG,CAAC,CAAC;IACzB,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,kBAAkB,GAAG,CAAC,CAAC;IAE3B,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QACzB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;YAAE,SAAS;QAE9C,KAAK,MAAM,MAAM,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;YACrC,YAAY,EAAE,CAAC;YACf,kBAAkB,IAAI,cAAc,CAAC;YAErC,OAAO,CAAC,IAAI,CAAC;gBACX,MAAM,EAAE,MAAM,CAAC,YAAY;gBAC3B,KAAK,EAAE,SAAS;gBAChB,OAAO,EAAE;oBACP,IAAI,EAAE,MAAM,CAAC,iBAAiB;iBAC/B;gBACD,SAAS,EAAE;oBACT;wBACE,gBAAgB,EAAE;4BAChB,gBAAgB,EAAE;gCAChB,GAAG,EAAE,GAAG,CAAC,QAAQ;6BAClB;4BACD,MAAM,EAAE;gCACN,SAAS,EAAE,MAAM,CAAC,UAAU;gCAC5B,WAAW,EAAE,MAAM,CAAC,UAAU;6BAC/B;yBACF;qBACF;iBACF;gBACD,UAAU,EAAE;oBACV,aAAa,EAAE,cAAc;iBAC9B;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,kBAAkB,CAAC,eAAe,EAAE,OAAO,EAAE,OAAO,CAAC;QAC/D,UAAU,EAAE,eAAe;QAC3B,YAAY;QACZ,kBAAkB;KACnB,CAAC;AACJ,CAAC"}

package/dist/adapters/index.d.ts

@@ -30,6 +30,7 @@ export { adaptEslint } from "./eslint.js";
 export { adaptBandit } from "./bandit.js";
 export { adaptStryker } from "./stryker.js";
 export { adaptDartAnalyzer } from "./dart-analyzer.js";
+export { adaptDotnetFormat } from "./dotnet-format.js";
 export { DEFAULT_EFFORT_BY_SEVERITY, KNOWN_SCANNERS, estimateEffortMinutes, wrapResultsInSarif, } from "./common.js";
 export type { AdapterResult, KnownScanner } from "./common.js";
 import type { AdapterResult, KnownScanner } from "./common.js";

package/dist/adapters/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/adapters/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAEvD,OAAO,EACL,0BAA0B,EAC1B,cAAc,EACd,qBAAqB,EACrB,kBAAkB,GACnB,MAAM,aAAa,CAAC;AAErB,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAO/D,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE/D;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,YAAY,EACrB,SAAS,EAAE,OAAO,GACjB,aAAa,CAiBf"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/adapters/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAEvD,OAAO,EACL,0BAA0B,EAC1B,cAAc,EACd,qBAAqB,EACrB,kBAAkB,GACnB,MAAM,aAAa,CAAC;AAErB,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAQ/D,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE/D;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,YAAY,EACrB,SAAS,EAAE,OAAO,GACjB,aAAa,CAmBf"}

package/dist/adapters/index.js

@@ -30,12 +30,14 @@ export { adaptEslint } from "./eslint.js";
 export { adaptBandit } from "./bandit.js";
 export { adaptStryker } from "./stryker.js";
 export { adaptDartAnalyzer } from "./dart-analyzer.js";
+export { adaptDotnetFormat } from "./dotnet-format.js";
 export { DEFAULT_EFFORT_BY_SEVERITY, KNOWN_SCANNERS, estimateEffortMinutes, wrapResultsInSarif, } from "./common.js";
 import { adaptSemgrep } from "./semgrep.js";
 import { adaptEslint } from "./eslint.js";
 import { adaptBandit } from "./bandit.js";
 import { adaptStryker } from "./stryker.js";
 import { adaptDartAnalyzer } from "./dart-analyzer.js";
+import { adaptDotnetFormat } from "./dotnet-format.js";
 /**
  * Route a raw scanner output to the correct adapter based on its
  * name. Preferred entry point for the `ingest_scanner_output` MCP
@@ -59,6 +61,8 @@ export function adaptScannerOutput(scanner, rawOutput) {
             return adaptStryker(rawOutput);
         case "dart_analyze":
             return adaptDartAnalyzer(rawOutput);
+        case "dotnet_format":
+            return adaptDotnetFormat(rawOutput);
         default: {
             const exhaustive = scanner;
             throw new Error(`[adapters] Unknown scanner: ${String(exhaustive)}`);

package/dist/adapters/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/adapters/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAEvD,OAAO,EACL,0BAA0B,EAC1B,cAAc,EACd,qBAAqB,EACrB,kBAAkB,GACnB,MAAM,aAAa,CAAC;AAIrB,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAGvD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAAqB,EACrB,SAAkB;IAElB,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,SAAS;YACZ,OAAO,YAAY,CAAC,SAAS,CAAC,CAAC;QACjC,KAAK,QAAQ;YACX,OAAO,WAAW,CAAC,SAAS,CAAC,CAAC;QAChC,KAAK,QAAQ;YACX,OAAO,WAAW,CAAC,SAAS,CAAC,CAAC;QAChC,KAAK,SAAS;YACZ,OAAO,YAAY,CAAC,SAAS,CAAC,CAAC;QACjC,KAAK,cAAc;YACjB,OAAO,iBAAiB,CAAC,SAAS,CAAC,CAAC;QACtC,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,UAAU,GAAU,OAAO,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,+BAA+B,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;AACH,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/adapters/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAEvD,OAAO,EACL,0BAA0B,EAC1B,cAAc,EACd,qBAAqB,EACrB,kBAAkB,GACnB,MAAM,aAAa,CAAC;AAIrB,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAGvD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAAqB,EACrB,SAAkB;IAElB,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,SAAS;YACZ,OAAO,YAAY,CAAC,SAAS,CAAC,CAAC;QACjC,KAAK,QAAQ;YACX,OAAO,WAAW,CAAC,SAAS,CAAC,CAAC;QAChC,KAAK,QAAQ;YACX,OAAO,WAAW,CAAC,SAAS,CAAC,CAAC;QAChC,KAAK,SAAS;YACZ,OAAO,YAAY,CAAC,SAAS,CAAC,CAAC;QACjC,KAAK,cAAc;YACjB,OAAO,iBAAiB,CAAC,SAAS,CAAC,CAAC;QACtC,KAAK,eAAe;YAClB,OAAO,iBAAiB,CAAC,SAAS,CAAC,CAAC;QACtC,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,UAAU,GAAU,OAAO,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,+BAA+B,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/crap-config.d.ts

@@ -72,6 +72,8 @@ export interface CrapConfig {
     readonly strictnessSource: "env" | "file" | "default";
     /** User-defined exclusion patterns (directories with trailing `/`, or file globs). */
     readonly exclude: ReadonlyArray<string>;
+    /** Relative paths to directories containing sub-projects (e.g. `["apps", "packages"]`). */
+    readonly projectDirs: ReadonlyArray<string>;
 }
 /**
  * Options accepted by {@link loadCrapConfig}. The only required

package/dist/crap-config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"crap-config.d.ts","sourceRoot":"","sources":["../src/crap-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAKH;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,yCAA0C,CAAC;AAEzE;;;;GAIG;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5D;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,EAAE,UAAqB,CAAC;AAEvD;;;;;GAKG;AACH,qBAAa,eAAgB,SAAQ,KAAK;gBAC5B,OAAO,EAAE,MAAM;CAI5B;AAED;;;;;GAKG;AACH,MAAM,WAAW,UAAU;IACzB,wEAAwE;IACxE,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,6EAA6E;IAC7E,QAAQ,CAAC,gBAAgB,EAAE,KAAK,GAAG,MAAM,GAAG,SAAS,CAAC;IACtD,sFAAsF;IACtF,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC;;;;OAIG;IACH,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,qBAAqB,GAAG,UAAU,CAuBzE"}
+{"version":3,"file":"crap-config.d.ts","sourceRoot":"","sources":["../src/crap-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAKH;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,yCAA0C,CAAC;AAEzE;;;;GAIG;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5D;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,EAAE,UAAqB,CAAC;AAEvD;;;;;GAKG;AACH,qBAAa,eAAgB,SAAQ,KAAK;gBAC5B,OAAO,EAAE,MAAM;CAI5B;AAED;;;;;GAKG;AACH,MAAM,WAAW,UAAU;IACzB,wEAAwE;IACxE,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,6EAA6E;IAC7E,QAAQ,CAAC,gBAAgB,EAAE,KAAK,GAAG,MAAM,GAAG,SAAS,CAAC;IACtD,sFAAsF;IACtF,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACxC,2FAA2F;IAC3F,QAAQ,CAAC,WAAW,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;CAC7C;AAED;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC;;;;OAIG;IACH,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,qBAAqB,GAAG,UAAU,CAwBzE"}

package/dist/crap-config.js

@@ -72,6 +72,7 @@ export function loadCrapConfig(options) {
     // comes from the environment variable.
     const fileResult = readFromFile(options.workspaceRoot);
     const exclude = fileResult?.exclude ?? [];
+    const projectDirs = fileResult?.projectDirs ?? [];
     const envRaw = process.env["CLAUDE_CRAP_STRICTNESS"];
     if (typeof envRaw === "string" && envRaw.trim() !== "") {
         const normalized = envRaw.trim().toLowerCase();
@@ -79,12 +80,12 @@ export function loadCrapConfig(options) {
             throw new CrapConfigError(`[crap-config] CLAUDE_CRAP_STRICTNESS="${envRaw}" is not a valid strictness. ` +
                 `Expected one of: ${STRICTNESS_VALUES.join(", ")}.`);
         }
-        return { strictness: normalized, strictnessSource: "env", exclude };
+        return { strictness: normalized, strictnessSource: "env", exclude, projectDirs };
     }
     if (fileResult?.strictness) {
-        return { strictness: fileResult.strictness, strictnessSource: "file", exclude };
+        return { strictness: fileResult.strictness, strictnessSource: "file", exclude, projectDirs };
     }
-    return { strictness: DEFAULT_STRICTNESS, strictnessSource: "default", exclude };
+    return { strictness: DEFAULT_STRICTNESS, strictnessSource: "default", exclude, projectDirs };
 }
 function readFromFile(workspaceRoot) {
     const filePath = join(workspaceRoot, ".claude-crap.json");
@@ -137,7 +138,21 @@ function readFromFile(workspaceRoot) {
         }
         exclude = raw;
     }
-    return { strictness, exclude };
+    // Parse projectDirs
+    let projectDirs = [];
+    if ("projectDirs" in doc) {
+        const raw = doc["projectDirs"];
+        if (!Array.isArray(raw)) {
+            throw new CrapConfigError(`[crap-config] ${filePath}: 'projectDirs' must be an array of strings`);
+        }
+        for (const item of raw) {
+            if (typeof item !== "string") {
+                throw new CrapConfigError(`[crap-config] ${filePath}: every entry in 'projectDirs' must be a string, got ${typeof item}`);
+            }
+        }
+        projectDirs = raw;
+    }
+    return { strictness, exclude, projectDirs };
 }
 /**
  * Runtime type guard for the {@link Strictness} union. Lets callers

package/dist/crap-config.js.map

@@ -1 +1 @@
-{"version":3,"file":"crap-config.js","sourceRoot":"","sources":["../src/crap-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAU,CAAC;AASzE;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAe,QAAQ,CAAC;AAEvD;;;;;GAKG;AACH,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACxC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AA+BD;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAAC,OAA8B;IAC3D,kEAAkE;IAClE,uCAAuC;IACvC,MAAM,UAAU,GAAG,YAAY,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACvD,MAAM,OAAO,GAAG,UAAU,EAAE,OAAO,IAAI,EAAE,CAAC;IAE1C,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;IACrD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACvD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC/C,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,eAAe,CACvB,yCAAyC,MAAM,+BAA+B;gBAC5E,oBAAoB,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACtD,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,gBAAgB,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IACtE,CAAC;IAED,IAAI,UAAU,EAAE,UAAU,EAAE,CAAC;QAC3B,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC,UAAU,EAAE,gBAAgB,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAClF,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;AAClF,CAAC;AAoBD,SAAS,YAAY,CAAC,aAAqB;IACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,EAAE,mBAAmB,CAAC,CAAC;IAC1D,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,KAAK,GAAG,GAA4B,CAAC;QAC3C,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACzC,MAAM,IAAI,eAAe,CACvB,gCAAgC,QAAQ,KAAK,KAAK,CAAC,OAAO,EAAE,CAC7D,CAAC;IACJ,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,eAAe,CACvB,iBAAiB,QAAQ,uBAAwB,GAAa,CAAC,OAAO,EAAE,CACzE,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,eAAe,CACvB,iBAAiB,QAAQ,yCAAyC,CACnE,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,MAAiC,CAAC;IAE9C,mBAAmB;IACnB,IAAI,UAAU,GAAsB,IAAI,CAAC;IACzC,IAAI,YAAY,IAAI,GAAG,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC;QAChC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,IAAI,eAAe,CACvB,iBAAiB,QAAQ,wCAAwC,OAAO,KAAK,EAAE,CAChF,CAAC;QACJ,CAAC;QACD,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC9C,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,eAAe,CACvB,iBAAiB,QAAQ,sBAAsB,KAAK,KAAK;gBACvD,mBAAmB,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACrD,CAAC;QACJ,CAAC;QACD,UAAU,GAAG,UAAU,CAAC;IAC1B,CAAC;IAED,gBAAgB;IAChB,IAAI,OAAO,GAAa,EAAE,CAAC;IAC3B,IAAI,SAAS,IAAI,GAAG,EAAE,CAAC;QACrB,MAAM,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC;QAC3B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,eAAe,CACvB,iBAAiB,QAAQ,yCAAyC,CACnE,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,GAAG,EAAE,CAAC;YACvB,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC7B,MAAM,IAAI,eAAe,CACvB,iBAAiB,QAAQ,oDAAoD,OAAO,IAAI,EAAE,CAC3F,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,GAAG,GAAe,CAAC;IAC5B,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;AACjC,CAAC;AAED;;;;;;GAMG;AACH,SAAS,YAAY,CAAC,KAAa;IACjC,OAAQ,iBAA2C,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACtE,CAAC"}
+{"version":3,"file":"crap-config.js","sourceRoot":"","sources":["../src/crap-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAU,CAAC;AASzE;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAe,QAAQ,CAAC;AAEvD;;;;;GAKG;AACH,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACxC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAiCD;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAAC,OAA8B;IAC3D,kEAAkE;IAClE,uCAAuC;IACvC,MAAM,UAAU,GAAG,YAAY,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACvD,MAAM,OAAO,GAAG,UAAU,EAAE,OAAO,IAAI,EAAE,CAAC;IAC1C,MAAM,WAAW,GAAG,UAAU,EAAE,WAAW,IAAI,EAAE,CAAC;IAElD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;IACrD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACvD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC/C,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,eAAe,CACvB,yCAAyC,MAAM,+BAA+B;gBAC5E,oBAAoB,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACtD,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,gBAAgB,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;IACnF,CAAC;IAED,IAAI,UAAU,EAAE,UAAU,EAAE,CAAC;QAC3B,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC,UAAU,EAAE,gBAAgB,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;IAC/F,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;AAC/F,CAAC;AAqBD,SAAS,YAAY,CAAC,aAAqB;IACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,EAAE,mBAAmB,CAAC,CAAC;IAC1D,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,KAAK,GAAG,GAA4B,CAAC;QAC3C,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACzC,MAAM,IAAI,eAAe,CACvB,gCAAgC,QAAQ,KAAK,KAAK,CAAC,OAAO,EAAE,CAC7D,CAAC;IACJ,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,eAAe,CACvB,iBAAiB,QAAQ,uBAAwB,GAAa,CAAC,OAAO,EAAE,CACzE,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,eAAe,CACvB,iBAAiB,QAAQ,yCAAyC,CACnE,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,MAAiC,CAAC;IAE9C,mBAAmB;IACnB,IAAI,UAAU,GAAsB,IAAI,CAAC;IACzC,IAAI,YAAY,IAAI,GAAG,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC;QAChC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,IAAI,eAAe,CACvB,iBAAiB,QAAQ,wCAAwC,OAAO,KAAK,EAAE,CAChF,CAAC;QACJ,CAAC;QACD,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC9C,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,eAAe,CACvB,iBAAiB,QAAQ,sBAAsB,KAAK,KAAK;gBACvD,mBAAmB,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACrD,CAAC;QACJ,CAAC;QACD,UAAU,GAAG,UAAU,CAAC;IAC1B,CAAC;IAED,gBAAgB;IAChB,IAAI,OAAO,GAAa,EAAE,CAAC;IAC3B,IAAI,SAAS,IAAI,GAAG,EAAE,CAAC;QACrB,MAAM,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC;QAC3B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,eAAe,CACvB,iBAAiB,QAAQ,yCAAyC,CACnE,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,GAAG,EAAE,CAAC;YACvB,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC7B,MAAM,IAAI,eAAe,CACvB,iBAAiB,QAAQ,oDAAoD,OAAO,IAAI,EAAE,CAC3F,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,GAAG,GAAe,CAAC;IAC5B,CAAC;IAED,oBAAoB;IACpB,IAAI,WAAW,GAAa,EAAE,CAAC;IAC/B,IAAI,aAAa,IAAI,GAAG,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,GAAG,CAAC,aAAa,CAAC,CAAC;QAC/B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,eAAe,CACvB,iBAAiB,QAAQ,6CAA6C,CACvE,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,GAAG,EAAE,CAAC;YACvB,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC7B,MAAM,IAAI,eAAe,CACvB,iBAAiB,QAAQ,wDAAwD,OAAO,IAAI,EAAE,CAC/F,CAAC;YACJ,CAAC;QACH,CAAC;QACD,WAAW,GAAG,GAAe,CAAC;IAChC,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;AAC9C,CAAC;AAED;;;;;;GAMG;AACH,SAAS,YAAY,CAAC,KAAa;IACjC,OAAQ,iBAA2C,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACtE,CAAC"}

package/dist/dashboard/server.js

@@ -57,7 +57,7 @@ export async function startDashboard(options) {
     // ------------------------------------------------------------------
     // /api/health — liveness probe
     // ------------------------------------------------------------------
-    fastify.get("/api/health", async () => ({ status: "ok", server: "claude-crap", version: "0.3.8" }));
+    fastify.get("/api/health", async () => ({ status: "ok", server: "claude-crap", version: "0.4.0" }));
     // ------------------------------------------------------------------
     // /api/score — live project score
     // ------------------------------------------------------------------

package/dist/index.js

@@ -47,7 +47,8 @@ import { findTestFile } from "./tools/test-harness.js";
 import { resolveWithinWorkspace } from "./workspace-guard.js";
 import { autoScan } from "./scanner/auto-scan.js";
 import { bootstrapScanner } from "./scanner/bootstrap.js";
-import { autoScanSchema, bootstrapScannerSchema, computeCrapSchema, computeTdrSchema, analyzeFileAstSchema, ingestSarifSchema, ingestScannerOutputSchema, requireTestHarnessSchema, scoreProjectSchema, } from "./schemas/tool-schemas.js";
+import { discoverProjectMap, persistProjectMap } from "./monorepo/project-map.js";
+import { autoScanSchema, bootstrapScannerSchema, computeCrapSchema, computeTdrSchema, analyzeFileAstSchema, ingestSarifSchema, ingestScannerOutputSchema, listProjectsSchema, requireTestHarnessSchema, scoreProjectSchema, } from "./schemas/tool-schemas.js";
 // IMPORTANT: the MCP stdio transport uses stdout for JSON-RPC framing.
 // Anything the server logs MUST go to stderr (fd 2) to avoid corrupting
 // the wire format. We configure pino explicitly to write to fd 2.
@@ -62,14 +63,19 @@ const logger = pino({ level: process.env.CLAUDE_CRAP_LOG_LEVEL ?? "info" }, pino
 async function main() {
     const config = loadConfig();
     logger.info({ config: { ...config, pluginRoot: "<redacted>" } }, "claude-crap MCP server starting");
-    // Load user-defined exclusions from .claude-crap.json (non-fatal).
+    // Load user-defined exclusions and projectDirs from .claude-crap.json (non-fatal).
     let userExclusions = [];
+    let userProjectDirs = [];
     try {
         const crapConfig = loadCrapConfig({ workspaceRoot: config.pluginRoot });
         userExclusions = crapConfig.exclude;
+        userProjectDirs = crapConfig.projectDirs;
         if (userExclusions.length > 0) {
             logger.info({ exclude: userExclusions }, "user exclusions loaded from .claude-crap.json");
         }
+        if (userProjectDirs.length > 0) {
+            logger.info({ projectDirs: userProjectDirs }, "user projectDirs loaded from .claude-crap.json");
+        }
     }
     catch {
         // Non-fatal — use empty exclusions.
@@ -82,6 +88,34 @@ async function main() {
     });
     await sarifStore.loadLatest();
     logger.info({ findings: sarifStore.size(), path: sarifStore.consolidatedReportPath }, "SARIF store ready");
+    // Discover monorepo project map (non-fatal).
+    let projectMap = null;
+    try {
+        projectMap = await discoverProjectMap(config.pluginRoot, { projectDirs: userProjectDirs });
+        if (projectMap.isMonorepo) {
+            logger.info({ projects: projectMap.projects.map((p) => `${p.name}(${p.type})`), count: projectMap.projects.length }, "monorepo project map discovered");
+            await persistProjectMap(projectMap, config.pluginRoot);
+            // If any JS/TS sub-projects need ESLint and it's not available,
+            // run bootstrap at the monorepo root to auto-install it. In
+            // monorepos, ESLint is hoisted to the root node_modules.
+            const needsEslint = projectMap.projects.some((p) => (p.type === "typescript" || p.type === "javascript") && !p.scannerAvailable);
+            if (needsEslint) {
+                logger.info("monorepo: JS/TS projects detected but ESLint not installed — bootstrapping");
+                try {
+                    await bootstrapScanner(config.pluginRoot, sarifStore, logger);
+                    // Re-discover after install so scannerAvailable reflects reality
+                    projectMap = await discoverProjectMap(config.pluginRoot, { projectDirs: userProjectDirs });
+                    await persistProjectMap(projectMap, config.pluginRoot);
+                }
+                catch (err) {
+                    logger.warn({ err: err.message }, "monorepo ESLint bootstrap failed");
+                }
+            }
+        }
+    }
+    catch (err) {
+        logger.warn({ err: err.message }, "project map discovery failed");
+    }
     // Try to start the local Vue.js dashboard. Failures here are
     // intentionally non-fatal — the MCP server still works without it.
     let dashboard = null;
@@ -185,6 +219,11 @@ async function main() {
                 description: "Detect project type, install the right scanner (ESLint for JS/TS, Bandit for Python, Semgrep for Java/C#), create minimal config, and run auto_scan to verify.",
                 inputSchema: bootstrapScannerSchema,
             },
+            {
+                name: "list_projects",
+                description: "List all discovered sub-projects in the workspace. In a monorepo, returns each sub-project with its type, path, and recommended scanner.",
+                inputSchema: listProjectsSchema,
+            },
         ],
     }));
     // ------------------------------------------------------------------
@@ -193,9 +232,16 @@ async function main() {
     // The MCP SDK has already validated `args` against the tool's JSON
     // Schema by the time this handler runs, so we cast to the expected
     // shape without re-validating. Each branch delegates to a pure engine.
+    // Tool dispatch is split across two functions to keep cyclomatic
+    // complexity within the configured threshold (15) as the tool count
+    // grows. Each function handles a subset of tools.
     server.setRequestHandler(CallToolRequestSchema, async (request) => {
         const { name, arguments: args } = request.params;
         logger.info({ tool: name }, "Tool call received");
+        return handleToolCall(name, args);
+    });
+    /** Dispatch a tool call to the correct handler. */
+    async function handleToolCall(name, args) {
         switch (name) {
             case "compute_crap": {
                 const typed = args;
@@ -268,10 +314,19 @@ async function main() {
             case "score_project": {
                 const typed = (args ?? {});
                 const format = typed.format ?? "both";
+                // Resolve scope to a workspace subdirectory
+                let scoreRoot = config.pluginRoot;
+                if (typed.scope && projectMap) {
+                    const project = projectMap.projects.find((p) => p.name === typed.scope);
+                    if (project) {
+                        const { join } = await import("node:path");
+                        scoreRoot = join(config.pluginRoot, project.path);
+                    }
+                }
                 try {
-                    const workspace = await estimateWorkspaceLoc(config.pluginRoot, { exclude: userExclusions });
+                    const workspace = await estimateWorkspaceLoc(scoreRoot, { exclude: userExclusions });
                     const score = computeProjectScore({
-                        workspaceRoot: config.pluginRoot,
+                        workspaceRoot: scoreRoot,
                         minutesPerLoc: config.minutesPerLoc,
                         tdrMaxRating: config.tdrMaxRating,
                         workspace: { physicalLoc: workspace.physicalLoc, fileCount: workspace.fileCount },
@@ -508,10 +563,24 @@ async function main() {
                     };
                 }
             }
+            case "list_projects": {
+                return {
+                    content: [
+                        {
+                            type: "text",
+                            text: JSON.stringify({
+                                tool: "list_projects",
+                                isMonorepo: projectMap?.isMonorepo ?? false,
+                                projects: projectMap?.projects ?? [],
+                            }, null, 2),
+                        },
+                    ],
+                };
+            }
             default:
                 throw new Error(`[claude-crap] Unknown tool: ${name}`);
         }
-    });
+    }
     // ------------------------------------------------------------------
     // Resources — topology and reports
     // ------------------------------------------------------------------