npm - claude-crap - Versions diffs - 0.4.5 → 0.4.7 - Mend

claude-crap 0.4.5 → 0.4.7

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (34) hide show

package/CHANGELOG.md +25 -0
package/README.md +22 -25
package/dist/dashboard/file-detail.d.ts +6 -0
package/dist/dashboard/file-detail.d.ts.map +1 -1
package/dist/dashboard/file-detail.js +1 -0
package/dist/dashboard/file-detail.js.map +1 -1
package/dist/monorepo/project-map.d.ts.map +1 -1
package/dist/monorepo/project-map.js +135 -6
package/dist/monorepo/project-map.js.map +1 -1
package/dist/scanner/bootstrap.d.ts.map +1 -1
package/dist/scanner/bootstrap.js +2 -2
package/dist/scanner/bootstrap.js.map +1 -1
package/dist/shared/exclusions.d.ts.map +1 -1
package/dist/shared/exclusions.js +22 -0
package/dist/shared/exclusions.js.map +1 -1
package/package.json +1 -1
package/plugin/.claude-plugin/plugin.json +1 -1
package/plugin/bundle/dashboard/public/index.html +216 -7
package/plugin/bundle/mcp-server.mjs +145 -31
package/plugin/bundle/mcp-server.mjs.map +3 -3
package/plugin/hooks/lib/gatekeeper-rules.mjs +274 -45
package/plugin/hooks/lib/quality-gate.mjs +3 -0
package/plugin/package-lock.json +8 -8
package/plugin/package.json +1 -1
package/src/dashboard/file-detail.ts +7 -0
package/src/dashboard/public/index.html +216 -7
package/src/monorepo/project-map.ts +144 -6
package/src/scanner/bootstrap.ts +7 -2
package/src/shared/exclusions.ts +26 -0
package/src/tests/exclusions.test.ts +53 -0
package/src/tests/file-detail-api.test.ts +38 -0
package/src/tests/gatekeeper-rules.test.ts +173 -0
package/src/tests/project-map.test.ts +216 -0
package/src/tests/workspace-walker.test.ts +94 -0

package/src/dashboard/public/index.html CHANGED Viewed

@@ -317,6 +317,95 @@
         opacity: 0.7;
         margin-left: 12px;
       }
+      /* CC heat bar — ReportGenerator-style visual severity */
+      .heat-bar {
+        position: relative;
+        width: 140px;
+        height: 8px;
+        background: rgba(255, 255, 255, 0.06);
+        border-radius: 4px;
+        overflow: hidden;
+      }
+      .heat-bar-fill {
+        height: 100%;
+        border-radius: 4px;
+        transition: width 120ms ease-out;
+      }
+      .heat-bar-threshold {
+        position: absolute;
+        top: -2px;
+        bottom: -2px;
+        width: 1px;
+        background: rgba(255, 255, 255, 0.35);
+      }
+      /* CC chip — numeric value + % of threshold */
+      .cc-chip {
+        display: inline-flex;
+        align-items: baseline;
+        gap: 6px;
+        font-variant-numeric: tabular-nums;
+      }
+      .cc-chip .cc-value {
+        font-weight: 700;
+        font-size: 13px;
+      }
+      .cc-chip .cc-ratio {
+        font-size: 11px;
+        color: var(--muted);
+      }
+      /* Method name button — scrolls source view to fn start line */
+      .method-jump {
+        background: none;
+        border: none;
+        padding: 0;
+        font: inherit;
+        font-family: "SF Mono", "Fira Code", "Consolas", monospace;
+        font-size: 13px;
+        color: var(--accent);
+        cursor: pointer;
+      }
+      .method-jump:hover { text-decoration: underline; }
+      /* "Open in editor" icon link */
+      .editor-link {
+        display: inline-flex;
+        align-items: center;
+        justify-content: center;
+        width: 24px;
+        height: 24px;
+        border-radius: 4px;
+        color: var(--muted);
+        text-decoration: none;
+        font-size: 13px;
+        transition: background 120ms, color 120ms;
+      }
+      .editor-link:hover {
+        background: rgba(62, 166, 255, 0.12);
+        color: var(--accent);
+        text-decoration: none;
+      }
+      /* "Show all / show fewer" toggle under the methods table */
+      .show-all-btn {
+        display: inline-block;
+        margin: 12px 0 0 0;
+        padding: 6px 12px;
+        background: transparent;
+        border: 1px solid var(--border);
+        border-radius: 6px;
+        color: var(--accent);
+        font-size: 12px;
+        cursor: pointer;
+      }
+      .show-all-btn:hover {
+        background: rgba(62, 166, 255, 0.08);
+      }
+      /* Line-flash animation when the user jumps to a source line */
+      .source-line.jump-target {
+        animation: jumpFlash 1.2s ease-out;
+      }
+      @keyframes jumpFlash {
+        0%   { background: rgba(62, 166, 255, 0.35); }
+        100% { background: transparent; }
+      }
     </style>
   </head>
   <body>
@@ -372,33 +461,74 @@
             </div>
           </div>
-          <!-- Methods table -->
-          <div v-if="fileDetail.functions.length" class="section-title">Methods</div>
+          <!-- Methods table — top-5 by CC with heat bar + jump + editor link -->
+          <div v-if="fileDetail.functions.length" class="section-title">
+            Methods
+            <span style="color: var(--muted); font-weight: 400; text-transform: none; letter-spacing: 0; margin-left: 8px;">
+              threshold CC {{ fileDetail.cyclomaticMax }}
+            </span>
+          </div>
           <div v-if="fileDetail.functions.length" class="card">
             <table>
               <thead>
                 <tr>
                   <th>Method</th>
                   <th style="text-align: right">Line</th>
-                  <th style="text-align: right">CC</th>
+                  <th style="width: 180px;">CC</th>
                   <th style="text-align: right">Lines</th>
                   <th>Status</th>
+                  <th style="width: 32px;"></th>
                 </tr>
               </thead>
               <tbody>
-                <tr v-for="fn in sortedFunctions" :key="fn.startLine">
-                  <td><code>{{ fn.name }}</code></td>
+                <tr v-for="fn in visibleFunctions" :key="fn.startLine">
+                  <td>
+                    <button
+                      class="method-jump"
+                      @click="jumpToLine(fn.startLine)"
+                      :title="'Jump to line ' + fn.startLine"
+                    >{{ fn.name }}</button>
+                  </td>
                   <td style="text-align: right; font-variant-numeric: tabular-nums;">{{ fn.startLine }}</td>
-                  <td style="text-align: right; font-variant-numeric: tabular-nums;">{{ fn.cyclomaticComplexity }}</td>
+                  <td>
+                    <div class="cc-chip">
+                      <div class="heat-bar" :title="ccTooltip(fn)">
+                        <div
+                          class="heat-bar-fill"
+                          :style="heatBarStyle(fn)"
+                        ></div>
+                        <div
+                          class="heat-bar-threshold"
+                          :style="{ left: thresholdMarker() + '%' }"
+                        ></div>
+                      </div>
+                      <span class="cc-value" :style="{ color: ccColor(fn) }">{{ fn.cyclomaticComplexity }}</span>
+                      <span class="cc-ratio">{{ ccRatio(fn) }}%</span>
+                    </div>
+                  </td>
                   <td style="text-align: right; font-variant-numeric: tabular-nums;">{{ fn.lineCount }}</td>
                   <td>
                     <span v-if="fn.cyclomaticComplexity >= fileDetail.cyclomaticMax * 2" class="pill pill-error">error</span>
                     <span v-else-if="fn.cyclomaticComplexity > fileDetail.cyclomaticMax" class="pill pill-warning">warning</span>
                     <span v-else class="pill pill-note">ok</span>
                   </td>
+                  <td>
+                    <a
+                      class="editor-link"
+                      :href="editorLink(fn)"
+                      :title="'Open ' + fileDetail.filePath + ':' + fn.startLine + ' in VS Code'"
+                    >&#x2197;</a>
+                  </td>
                 </tr>
               </tbody>
             </table>
+            <button
+              v-if="fileDetail.functions.length > topMethodsLimit"
+              class="show-all-btn"
+              @click="toggleShowAllMethods()"
+            >
+              {{ showAllMethods ? 'Show top ' + topMethodsLimit : 'Show all ' + fileDetail.functions.length + ' methods' }}
+            </button>
           </div>
           <!-- Findings table -->
@@ -622,11 +752,87 @@
           });
           // ── File detail computed ──
+          const topMethodsLimit = 5;
+          const showAllMethods = ref(false);
           const sortedFunctions = computed(() => {
             if (!fileDetail.value) return [];
             return [...fileDetail.value.functions].sort((a, b) => b.cyclomaticComplexity - a.cyclomaticComplexity);
           });
+          const visibleFunctions = computed(() => {
+            if (showAllMethods.value) return sortedFunctions.value;
+            return sortedFunctions.value.slice(0, topMethodsLimit);
+          });
+          function toggleShowAllMethods() {
+            showAllMethods.value = !showAllMethods.value;
+          }
+          // ── CC heat-bar helpers ──
+          // Fill width is clamped at 3× threshold so a CC of 80 with
+          // threshold 15 still produces a visually meaningful bar rather
+          // than overflowing. The threshold marker sits at the "1.0×"
+          // position (i.e. threshold/3threshold = 33%).
+          function ccRatio(fn) {
+            const max = fileDetail.value?.cyclomaticMax || 1;
+            return Math.round((fn.cyclomaticComplexity / max) * 100);
+          }
+          function heatBarStyle(fn) {
+            const max = fileDetail.value?.cyclomaticMax || 1;
+            const cap = max * 3;
+            const pct = Math.min(100, (fn.cyclomaticComplexity / cap) * 100);
+            return { width: pct + "%", background: ccColor(fn) };
+          }
+          function thresholdMarker() {
+            // threshold sits at 1/3 of the bar (since we cap at 3× threshold)
+            return 33.33;
+          }
+          function ccColor(fn) {
+            const max = fileDetail.value?.cyclomaticMax || 1;
+            const r = fn.cyclomaticComplexity / max;
+            if (r >= 2) return "var(--rating-E)"; // red — error (≥ 2×)
+            if (r > 1) return "var(--rating-C)";  // yellow — warning
+            if (r > 0.66) return "var(--rating-B)"; // yellow-green — near threshold
+            return "var(--rating-A)";              // green — healthy
+          }
+          function ccTooltip(fn) {
+            const max = fileDetail.value?.cyclomaticMax || 1;
+            return (
+              "CC " + fn.cyclomaticComplexity +
+              " / threshold " + max +
+              " (" + ccRatio(fn) + "% of threshold)"
+            );
+          }
+          // ── Editor deep-link + jump-to-line ──
+          // vscode:// handler accepts absolute paths. The `absolutePath`
+          // field is resolved server-side through the workspace-traversal
+          // guard, so this is safe to paste into an href.
+          function editorLink(fn) {
+            const abs = fileDetail.value?.absolutePath;
+            if (!abs) return "#";
+            return "vscode://file" + abs + ":" + fn.startLine + ":1";
+          }
+          function jumpToLine(lineNum) {
+            // Source lines are keyed by 0-based index, so line N lives at
+            // child index N-1 of `.source-view`.
+            const view = document.querySelector(".source-view");
+            if (!view) return;
+            const row = view.children[lineNum - 1];
+            if (!row) return;
+            row.scrollIntoView({ behavior: "smooth", block: "center" });
+            row.classList.remove("jump-target");
+            // force reflow so the animation restarts on repeat clicks
+            void row.offsetWidth;
+            row.classList.add("jump-target");
+          }
           const sortedFindings = computed(() => {
             if (!fileDetail.value) return [];
             return [...fileDetail.value.findings].sort((a, b) => a.startLine - b.startLine);
@@ -777,7 +983,10 @@
             currentView, selectedFile, fileDetail,
             score, complexity, loading, error,
             toolEntries, fileEntries, formatTimestamp,
-            sortedFunctions, sortedFindings,
+            sortedFunctions, sortedFindings, visibleFunctions,
+            showAllMethods, toggleShowAllMethods, topMethodsLimit,
+            ccRatio, ccColor, ccTooltip, heatBarStyle, thresholdMarker,
+            editorLink, jumpToLine,
             navigateToFile, goBack,
             lineFindings, lineClass, gutterClass, lineFnLabel,
           };

package/src/monorepo/project-map.ts CHANGED Viewed

@@ -30,7 +30,7 @@
 import { existsSync, readFileSync, readdirSync } from "node:fs";
 import { promises as fs } from "node:fs";
-import { join, basename, resolve } from "node:path";
+import { join, basename, resolve, relative, isAbsolute } from "node:path";
 import { execFile } from "node:child_process";
 // ── Types ──────────────────────────────────────────────────────────────────
@@ -170,11 +170,17 @@ function detectProjectType(dir: string): ProjectType {
   }
   // C# — check the well-known single-file marker first, then scan for
-  // per-project extension files (.csproj / .sln) at this level only.
+  // per-project extension files (.csproj / .sln / .slnx) at this level
+  // only. .slnx is the XML solution format introduced with .NET 9.
   if (has("Directory.Build.props")) return "csharp";
   try {
     const entries = readdirSync(dir);
-    if (entries.some((e) => e.endsWith(".csproj") || e.endsWith(".sln"))) {
+    if (
+      entries.some(
+        (e) =>
+          e.endsWith(".csproj") || e.endsWith(".sln") || e.endsWith(".slnx"),
+      )
+    ) {
       return "csharp";
     }
   } catch {
@@ -210,6 +216,88 @@ function extractWorkspacePatterns(workspaces: unknown): string[] {
   return [];
 }
+/**
+ * Parse a minimal pnpm-workspace.yaml into a list of package patterns.
+ *
+ * Supports the shape the pnpm CLI actually emits and documents:
+ *
+ *   packages:
+ *     - "apps/*"
+ *     - 'clients/mobile'
+ *     - tooling/cli
+ *
+ * Deliberately a bespoke parser: a full YAML engine is a large
+ * dependency for a single configuration file, and pnpm's own format is
+ * a narrow subset. Unsupported constructs (anchors, flow sequences,
+ * nested mappings) fall through as "no patterns", which in turn lets
+ * the caller fall back to the conventional directory scan.
+ *
+ * @param yaml Raw contents of a pnpm-workspace.yaml file.
+ * @returns    Array of package patterns, or an empty array.
+ */
+/**
+ * Strip a `#` inline comment from a YAML line while respecting single-
+ * and double-quoted scalars. Anchors, block scalars, and escape sequences
+ * beyond `\"` are out of scope — pnpm-workspace.yaml never uses them.
+ */
+function stripYamlComment(line: string): string {
+  let inSingle = false;
+  let inDouble = false;
+  for (let i = 0; i < line.length; i++) {
+    const ch = line[i];
+    if (ch === "\\" && inDouble && i + 1 < line.length) {
+      i++; // skip the escaped character inside a double-quoted scalar
+      continue;
+    }
+    if (!inDouble && ch === "'") {
+      inSingle = !inSingle;
+    } else if (!inSingle && ch === '"') {
+      inDouble = !inDouble;
+    } else if (!inSingle && !inDouble && ch === "#") {
+      return line.slice(0, i);
+    }
+  }
+  return line;
+}
+function parsePnpmWorkspaceYaml(yaml: string): string[] {
+  const patterns: string[] = [];
+  const lines = yaml.split(/\r?\n/);
+  let inPackages = false;
+  for (const rawLine of lines) {
+    // Strip inline comments — but only when `#` is outside quotes, so a
+    // valid entry like `"packages/#tools"` survives.
+    const line = stripYamlComment(rawLine).replace(/\s+$/, "");
+    if (line.length === 0) continue;
+    // Top-level key "packages:" starts the list.
+    if (/^packages\s*:\s*$/.test(line)) {
+      inPackages = true;
+      continue;
+    }
+    // Any other top-level key ends the packages block.
+    if (inPackages && /^[^\s-]/.test(line)) {
+      inPackages = false;
+      continue;
+    }
+    if (!inPackages) continue;
+    // List item: "  - value" with optional single/double quotes. The
+    // bare-word branch can now safely include `#`, because inline
+    // comments are already stripped by stripYamlComment() above.
+    const m = /^\s*-\s*("([^"]*)"|'([^']*)'|(\S+))\s*$/.exec(line);
+    if (m) {
+      const value = m[2] ?? m[3] ?? m[4] ?? "";
+      if (value.length > 0) patterns.push(value);
+    }
+  }
+  return patterns;
+}
 /**
  * Expand a single workspace glob pattern into matching absolute paths.
  *
@@ -225,14 +313,24 @@ function expandWorkspacePattern(
   workspaceRoot: string,
   pattern: string,
 ): string[] {
+  // Guard against patterns that escape the workspace root (e.g.
+  // `../shared/*` in pnpm-workspace.yaml). External paths are dropped
+  // silently so a misconfigured manifest cannot widen the scan scope.
+  const isInsideWorkspace = (candidate: string): boolean => {
+    const rel = relative(workspaceRoot, candidate);
+    return rel === "" || (!rel.startsWith("..") && !isAbsolute(rel));
+  };
   if (pattern.endsWith("/*")) {
     // Glob: list one level of the parent directory.
     const parentDir = join(workspaceRoot, pattern.slice(0, -2));
+    if (!isInsideWorkspace(parentDir)) return [];
     try {
       const entries = readdirSync(parentDir, { withFileTypes: true });
       return entries
         .filter((e) => e.isDirectory() && !e.name.startsWith("."))
-        .map((e) => join(parentDir, e.name));
+        .map((e) => join(parentDir, e.name))
+        .filter(isInsideWorkspace);
     } catch {
       return [];
     }
@@ -240,6 +338,7 @@ function expandWorkspacePattern(
   // Plain path — verify it exists and is a directory.
   const full = resolve(workspaceRoot, pattern);
+  if (!isInsideWorkspace(full)) return [];
   try {
     const entries = readdirSync(full, { withFileTypes: true });
     // readdirSync succeeds only for directories; if we got here it exists.
@@ -288,6 +387,24 @@ function collectSubdirectories(
     }
   }
+  // 1b. pnpm workspaces — package.json does not carry a `workspaces`
+  //     field under pnpm; the source of truth is pnpm-workspace.yaml.
+  const pnpmPath = join(workspaceRoot, "pnpm-workspace.yaml");
+  if (existsSync(pnpmPath)) {
+    try {
+      const raw = readFileSync(pnpmPath, "utf-8");
+      const patterns = parsePnpmWorkspaceYaml(raw);
+      for (const pattern of patterns) {
+        for (const absPath of expandWorkspacePattern(workspaceRoot, pattern)) {
+          subdirs.add(absPath);
+        }
+      }
+    } catch {
+      // Read error — skip pnpm workspaces source. The parser itself
+      // never throws; malformed content just yields an empty array.
+    }
+  }
   // 2. User-configured projectDirs from .claude-crap.json (highest priority).
   //    These can be parent directories scanned one level deep (e.g. "apps")
   //    or direct project paths (e.g. "tools/cli").
@@ -297,8 +414,7 @@ function collectSubdirectories(
       if (!existsSync(absDir)) continue;
       // If the directory itself has a project marker, treat it as a project.
-      const hasMarker = PROJECT_MARKERS.some((m) => existsSync(join(absDir, m)));
-      if (hasMarker) {
+      if (directoryIsProjectRoot(absDir)) {
         subdirs.add(absDir);
         continue;
       }
@@ -344,6 +460,28 @@ const PROJECT_MARKERS = [
   "pom.xml", "build.gradle", "build.gradle.kts", "Directory.Build.props",
 ];
+/** Per-project file extensions that indicate a .NET project root. */
+const DOTNET_PROJECT_EXTENSIONS = [".csproj", ".sln", ".slnx"] as const;
+/**
+ * Return true when `absDir` looks like a project root — either because
+ * it carries one of the well-known {@link PROJECT_MARKERS} single-file
+ * markers, or because it contains a .NET per-project file
+ * (`.csproj` / `.sln` / `.slnx`). The .NET branch is separate because
+ * those markers use extensions rather than fixed filenames.
+ */
+function directoryIsProjectRoot(absDir: string): boolean {
+  if (PROJECT_MARKERS.some((m) => existsSync(join(absDir, m)))) return true;
+  try {
+    const entries = readdirSync(absDir);
+    return entries.some((e) =>
+      DOTNET_PROJECT_EXTENSIONS.some((ext) => e.endsWith(ext)),
+    );
+  } catch {
+    return false;
+  }
+}
 // ── Public API ─────────────────────────────────────────────────────────────
 /**

package/src/scanner/bootstrap.ts CHANGED Viewed

@@ -107,11 +107,16 @@ export function detectProjectType(workspaceRoot: string): ProjectType {
     return "java";
   }
-  // C# detection
+  // C# detection — .slnx is the XML solution format introduced with .NET 9.
   if (has("Directory.Build.props")) return "csharp";
   try {
     const entries = readdirSync(workspaceRoot);
-    if (entries.some((e) => e.endsWith(".csproj") || e.endsWith(".sln"))) {
+    if (
+      entries.some(
+        (e) =>
+          e.endsWith(".csproj") || e.endsWith(".sln") || e.endsWith(".slnx"),
+      )
+    ) {
       return "csharp";
     }
   } catch {

package/src/shared/exclusions.ts CHANGED Viewed

@@ -37,6 +37,32 @@ export const DEFAULT_SKIP_DIRS: ReadonlySet<string> = new Set([
   "out",
   "target",
   "coverage",
+  "artifacts",    // CI artefact staging, Maven
+  "publish",      // `dotnet publish` output
+  // Test coverage report bundles (generated HTML/JS from coverage tools;
+  // walking them floods the complexity scanner with synthetic minified
+  // functions like `coverage-report/main.js::gG` at CC 80+).
+  "coverage-report",  // ReportGenerator default (.NET)
+  "CoverageReport",   // ReportGenerator PascalCase variant
+  "coveragereport",   // ReportGenerator lowercase fallback
+  "TestResults",      // `dotnet test` default output
+  "cobertura",        // Cobertura XML reporter
+  "lcov-report",      // Istanbul HTML reporter
+  "htmlcov",          // coverage.py HTML output
+  // Desktop / mobile packaging outputs
+  "dist-electron",// Electron-builder
+  "release",      // Electron-builder, Tauri
+  // .NET per-project build outputs (conventional at any depth)
+  "bin",
+  "obj",
+  // iOS / macOS dependency + build caches
+  "Pods",         // CocoaPods
+  "DerivedData",  // Xcode
+  "Carthage",     // Swift
   // Framework build outputs
   ".next",        // Next.js

package/src/tests/exclusions.test.ts CHANGED Viewed

@@ -31,6 +31,44 @@ describe("DEFAULT_SKIP_DIRS", () => {
       assert.ok(DEFAULT_SKIP_DIRS.has(dir), `missing: ${dir}`);
     }
   });
+  it("includes Electron/CI/iOS/.NET build outputs", () => {
+    // These directories host compiled or packaged artefacts; counting
+    // them inflates the LOC denominator of the TDR on every real
+    // Electron, Xcode, or .NET workspace.
+    for (const dir of [
+      "dist-electron",  // Electron-builder
+      "release",        // Electron-builder, Tauri
+      "artifacts",      // CI, Maven
+      "publish",        // dotnet publish
+      "bin",            // .NET build
+      "obj",            // .NET build
+      "Pods",           // CocoaPods
+      "DerivedData",    // Xcode
+      "Carthage",       // Swift
+    ]) {
+      assert.ok(DEFAULT_SKIP_DIRS.has(dir), `missing skip dir: ${dir}`);
+    }
+  });
+  it("includes coverage report directories emitted by test tooling", () => {
+    // ReportGenerator (.NET), Istanbul (JS) and dotCover emit generated
+    // HTML/JS bundles into these folders. Previously only the bare
+    // `coverage` name was skipped, which leaked files like
+    // `GanttLite.Server/coverage-report/main.js` into complexity scans
+    // and flooded the dashboard with false-positive high-CC findings.
+    for (const dir of [
+      "coverage-report",  // ReportGenerator default
+      "CoverageReport",   // ReportGenerator PascalCase
+      "coveragereport",   // ReportGenerator lowercase fallback
+      "TestResults",      // dotnet test default
+      "cobertura",        // Cobertura XML output
+      "lcov-report",      // Istanbul HTML reporter
+      "htmlcov",          // coverage.py HTML output
+    ]) {
+      assert.ok(DEFAULT_SKIP_DIRS.has(dir), `missing coverage skip dir: ${dir}`);
+    }
+  });
 });
 describe("DEFAULT_SKIP_PATTERNS", () => {
@@ -74,6 +112,21 @@ describe("createExclusionFilter", () => {
       assert.equal(filter.shouldSkipDir("generated"), true);
       assert.equal(filter.shouldSkipDir("src"), false);
     });
+    it("skips coverage report directories from every major test runner", () => {
+      // Regression: the ReportGenerator bundle
+      // (`coverage-report/main.js`, `class.js`, etc.) used to surface
+      // in the dashboard's complexity hotspots as minified code with
+      // CC ≥ 80. These directories must never be walked.
+      const filter = createExclusionFilter();
+      assert.equal(filter.shouldSkipDir("coverage-report"), true);
+      assert.equal(filter.shouldSkipDir("CoverageReport"), true);
+      assert.equal(filter.shouldSkipDir("coveragereport"), true);
+      assert.equal(filter.shouldSkipDir("TestResults"), true);
+      assert.equal(filter.shouldSkipDir("cobertura"), true);
+      assert.equal(filter.shouldSkipDir("lcov-report"), true);
+      assert.equal(filter.shouldSkipDir("htmlcov"), true);
+    });
   });
   describe("shouldSkipFile", () => {

package/src/tests/file-detail-api.test.ts CHANGED Viewed

@@ -190,6 +190,44 @@ describe("buildFileDetail", () => {
     }
   });
+  it("returns the resolved absolute path so the UI can build editor deep-links", async () => {
+    // The file-detail view exposes "Open in editor" buttons that emit
+    // `vscode://file/{absolutePath}:{line}` (and JetBrains equivalents).
+    // Constructing that URL client-side requires the absolute path —
+    // the workspace-relative `filePath` alone is not enough. This
+    // characterization test pins that contract so the UI can rely on it.
+    const dir = makeTmpDir();
+    try {
+      writeFileSync(join(dir, "hello.ts"), SAMPLE_TS);
+      const store = new SarifStore({
+        workspaceRoot: dir,
+        outputDir: join(dir, ".claude-crap/reports"),
+      });
+      const result = await buildFileDetail({
+        relativePath: "hello.ts",
+        workspaceRoot: dir,
+        astEngine: engine,
+        sarifStore: store,
+        cyclomaticMax: 15,
+      });
+      assert.equal(
+        result.absolutePath,
+        join(dir, "hello.ts"),
+        `expected absolutePath to join workspaceRoot with filePath, got ${result.absolutePath}`,
+      );
+      assert.ok(
+        result.absolutePath.endsWith("hello.ts"),
+        "absolutePath should end with the relative path",
+      );
+      assert.ok(
+        result.absolutePath.startsWith(dir),
+        "absolutePath must live under the workspace root (path-traversal defense)",
+      );
+    } finally {
+      rmSync(dir, { recursive: true, force: true });
+    }
+  });
   it("returns empty functions for unsupported languages", async () => {
     const dir = makeTmpDir();
     try {