[Coverage Report] Test Coverage Report — 2026-05-19

[github-actions[bot]]

Overall Coverage

Metric	Coverage	Status
Statements	95.29% (4028/4227)	🟢 Excellent
Branches	87.91% (2161/2458)	🟢 Good
Functions	96.55% (448/464)	🟢 Excellent
Lines	95.47% (3906/4091)	🟢 Excellent

72 test files covering 101 source files

---

🔴 Critical Gaps (< 50% statement coverage)

None — all files are above 50%.

---

🟡 Low Coverage (50–79% statement coverage)

File	Stmts	Branches	Functions	Notes
🟡 src/commands/build-config.ts	50%	0%	0%	Config assembly — recently added, no tests yet

---

🛡️ Security-Critical Path Status

File	Stmts	Branches	Functions
✅ src/host-iptables.ts	100%	100%	100%
✅ src/squid-config.ts	100%	96.12%	100%
✅ src/docker-manager.ts	100%	100%	100%
✅ src/domain-patterns.ts	97.67%	95.38%	100%
⚠️ src/cli.ts	85.71%	50%	100%

All five security-critical files are well-covered. cli.ts branch coverage at 50% is the only security-adjacent gap.

---

📋 Full Coverage Table

All files (click to expand)

File	Stmts	Branches	Functions	Lines
🟡 src/commands/build-config.ts	50%	0%	0%	50%
🟢 src/commands/main-action.ts	81.03%	79.31%	50%	80.7%
🟢 src/logs/audit-enricher.ts	83.6%	74.13%	100%	89.36%
🟢 src/commands/predownload.ts	85.36%	61.11%	66.66%	85.36%
🟢 src/logs/log-parser.ts	85.52%	65.62%	100%	86.48%
🟢 src/config-writer.ts	85.59%	65.51%	100%	85.59%
🟢 src/cli.ts	85.71%	50%	100%	85.71%
🟢 src/commands/validate-options.ts	86.38%	74.65%	100%	87.3%
🟢 src/squid/policy-manifest.ts	87.23%	88.23%	70%	86.95%
🟢 src/commands/logs-command-helpers.ts	88.52%	83.33%	100%	88.33%
🟢 src/cli-workflow.ts	88.88%	85.71%	100%	88.88%
🟢 src/services/host-path-prefix.ts	89.28%	75%	100%	87.5%
🟢 src/services/doh-proxy-service.ts	90%	75%	100%	90%
🟢 src/container-cleanup.ts	90.17%	96.73%	100%	90.11%
🟢 src/host-iptables-shared.ts	90.58%	90%	100%	91.66%
🟢 src/services/agent-volumes.ts	91.79%	78.33%	66.66%	91.6%
🟢 src/logs/log-streamer.ts	92.18%	77.77%	88.88%	92.06%
🟢 src/cli-options.ts	93.02%	60%	25%	93.02%
🟢 src/squid/ssl-bump.ts	93.75%	91.66%	100%	93.75%
🟢 src/ssl-bump.ts	93.96%	84.61%	100%	94.69%
🟢 src/container-lifecycle.ts	94.21%	84.21%	100%	93.93%
🟢 src/logs/log-aggregator.ts	94.73%	87.5%	100%	94.66%
🟢 src/upstream-proxy.ts	94.93%	94.73%	100%	94.52%
🟢 src/services/cli-proxy-service.ts	95.45%	93.33%	100%	95.45%
🟢 src/host-env.ts	95.71%	80%	100%	97.05%
🟢 src/parsers/volume-parsers.ts	95.83%	100%	100%	95.83%
🟢 src/pid-tracker.ts	96.34%	76.92%	100%	97.4%
🟢 src/host-iptables-rules.ts	97.05%	94.02%	100%	97.01%
🟢 src/logs/log-formatter.ts	97.43%	92.85%	100%	97.29%
🟢 src/domain-patterns.ts	97.67%	95.38%	100%	97.61%
🟢 src/services/agent-service.ts	97.77%	94.64%	100%	97.67%
🟢 src/services/agent-environment.ts	97.97%	92.85%	100%	98.62%
🟢 src/config-file.ts	98.03%	96.77%	87.5%	100%
🟢 src/rules.ts	98.21%	91.89%	100%	98.14%
🟢 src/compose-generator.ts	98.48%	91.66%	100%	98.48%
🟢 src/services/api-proxy-service.ts	98.79%	94.17%	100%	98.79%
🟢 src/option-parsers.ts	99.01%	94.73%	100%	99%
🟢 src/api-proxy-config.ts	100%	100%	100%	100%
🟢 src/docker-manager.ts	100%	100%	100%	100%
🟢 src/host-iptables.ts	100%	100%	100%	100%
🟢 src/squid-config.ts	100%	96.12%	100%	100%
🟢 src/domain-patterns.ts	97.67%	95.38%	100%	97.61%
(+40 more files at 100%)	100%	100%	100%	100%

---

🔍 Notable Findings

1. src/commands/build-config.ts (50% stmts, 0% branches/functions) — Added recently as part of CLI refactoring, this config-assembly module has no dedicated tests. The buildConfig() function handles credential resolution (resolveCopilotApiKey) and constructs WrapperConfig, making untested branches a potential source of misconfiguration bugs.

2. src/cli.ts branch coverage at 50% — All functions are covered but half the conditional branches are not exercised. Error-handling paths (e.g., signal handling, partial startup failures) are the most likely gaps.

3. src/commands/predownload.ts (85% stmts, 61% branches) — Pre-image-download logic has uncovered branch paths. Combined with the build-config.ts gap, startup-path error handling is the weakest area in the codebase.

4. src/cli-options.ts (93% stmts, 60% branches, 25% functions) — Only 1 of 4 exported functions is covered. Option-parsing edge cases (invalid input, defaults) are not tested.

---

📈 Recommendations

1. High — Add tests for src/commands/build-config.ts: Write unit tests for buildConfig() covering: valid inputs produce correct WrapperConfig; resolveCopilotApiKey error propagation; optional fields (memoryLimit, agentImage, modelAliases) handled correctly. This brings a 0%-function file up to coverage and closes a config correctness gap.

2. Medium — Cover src/cli.ts branch gaps: Add tests for the untested conditional branches — most likely the SIGINT/SIGTERM handler, --keep-containers early exit path, and startup-failure cleanup. This improves branch coverage from 50% → ~85%.

3. Low — Expand src/cli-options.ts function coverage: Three of four exported functions are untested. Add tests for the uncovered option-parsing helpers to guard against regressions when new CLI flags are added.

---

Generated by test-coverage-reporter workflow. Trigger: schedule

Generated by Test Coverage Reporter · ● 3.3M · ◷

• expires on May 26, 2026, 5:53 AM UTC

[github-actions[bot]]

This discussion was automatically closed because it expired on 2026-05-26T05:53:13.974Z.

Closed by Workflow