sonar-project.properties

# SPDX-License-Identifier: MPL-2.0
# SonarQube Cloud (SonarCloud) configuration.
# Project: https://sonarcloud.io/project/overview?id=hyperpolymath_dicta-task
# Requires the SONAR_TOKEN repository secret + a SonarCloud project (owner setup).
sonar.organization=hyperpolymath
sonar.projectKey=hyperpolymath_dicta-task

# Analysable surface = shell scripts + any JS/TS the template carries. Idris2,
# Zig, Elixir and AffineScript have no SonarCloud analyser; vendored, generated,
# build, proof, doc-template and dependency trees are excluded to keep findings
# signal-rich (mirrors the boj-server arrangement).
# .machine_readable/ (formerly machine-readable/) is DELIBERATELY NOT excluded.
# Un-hiding that tree exposed 108 files to analysis for the first time, 11 of
# them shell scripts. Excluding them here would have bought human legibility
# while preserving the scanner blind spot, which is the defect - not the fix.
# Any findings it surfaces were always there; they were merely unscanned.
# NOTE: the finding-count delta against main must still be measured on the
# branch before merge, since it is unverified whether each scanner skipped
# dot-directories by default.
#
# The rename back to the dotted spelling (2026-09-17) makes that question live
# again rather than moot. Un-hiding the tree is what exposed 108 files to
# analysis; re-hiding it may restore the blind spot this whole decision was
# about, IF a scanner skips dot-directories. Measure before assuming.
sonar.exclusions=build/**,generated/**,**/node_modules/**,**/_build/**,**/deps/**,**/.lake/**,verification/**,build/docs-seed/**,machine-readable-design/**,**/*.idr,**/*.ipkg,**/*.zig
sonar.coverage.exclusions=tests/**,**/*test*