[Coverage Report] Test Coverage Report — 2026-05-03

[github-actions[bot]]

📊 Overall Coverage

Metric	Coverage
Statements	85.72% (3272/3817)
Branches	78.69% (1840/2338)
Functions	88.11% (304/345)
Lines	85.84% (3171/3694)

32 source files · 32 test files · suite passes all configured thresholds

---

🔴 Critical Gaps (< 50% statement coverage)

None. All files are ≥ 59% statement coverage.

---

🟡 Low Coverage (50–79% statement coverage)

File	Stmts	Branches	Functions	Lines
src/cli.ts	59.3%	53.0%	74.3%	58.9%
src/commands/logs-command-helpers.ts	83.3%	73.1%	100%	83.0%

---

🛡️ Security-Critical Path Status

File	Stmts	Branches	Functions	Status
src/host-iptables.ts	88.5%	81.0%	100%	🟢 Good
src/squid-config.ts	97.0%	94.2%	88.0%	🟢 Excellent
src/docker-manager.ts	87.3%	83.9%	90.5%	🟢 Good
src/domain-patterns.ts	97.7%	95.4%	100%	🟢 Excellent
src/cli.ts	59.3%	53.0%	74.3%	🟡 Low

---

📋 Full Coverage Table

File	Stmts	Branches	Functions	Lines
src/cli.ts	59.3%	53.0%	74.3%	58.9%
src/commands/logs-command-helpers.ts	83.3%	73.1%	100%	83.0%
src/logs/audit-enricher.ts	83.6%	74.1%	100%	89.4%
src/logs/log-parser.ts	86.9%	68.6%	100%	87.8%
src/logs/log-streamer.ts	87.0%	67.4%	77.8%	86.8%
src/docker-manager.ts	87.3%	83.9%	90.5%	87.7%
src/host-iptables.ts	88.5%	81.0%	100%	88.5%
src/cli-workflow.ts	88.9%	85.7%	100%	88.9%
src/ssl-bump.ts	94.1%	88.5%	100%	94.8%
src/logs/log-aggregator.ts	94.7%	87.5%	100%	94.7%
src/upstream-proxy.ts	94.9%	95.4%	100%	94.7%
src/pid-tracker.ts	95.8%	71.4%	100%	97.3%
src/squid-config.ts	97.0%	94.2%	88.0%	96.9%
src/logs/log-formatter.ts	97.4%	92.8%	100%	97.3%
src/domain-patterns.ts	97.7%	95.4%	100%	97.6%
src/config-file.ts	98.0%	96.8%	87.5%	100%
src/rules.ts	98.3%	91.9%	100%	98.2%
src/dlp.ts	100%	100%	100%	100%
src/dns-resolver.ts	100%	93.8%	100%	100%
src/image-tag.ts	100%	100%	100%	100%
src/logger.ts	100%	90.9%	100%	100%
src/redact-secrets.ts	100%	100%	100%	100%
src/schema-validator.ts	100%	97.6%	100%	100%
src/types.ts	100%	100%	100%	100%
src/commands/logs-audit.ts	100%	95.7%	100%	100%
src/commands/logs-stats.ts	100%	50.0%	100%	100%
src/commands/logs-summary.ts	100%	50.0%	100%	100%
src/commands/logs.ts	100%	100%	100%	100%
src/commands/predownload.ts	100%	100%	100%	100%
src/logs/index.ts	100%	100%	35.3%	100%
src/logs/log-discovery.ts	100%	90.0%	100%	100%
src/logs/stats-formatter.ts	100%	93.5%	100%	100%

---

🔍 Notable Findings

1. src/cli.ts — low branch coverage (53%): The main entry point has roughly 40% of its branches untested. This includes argument parsing edge cases, signal handling (SIGINT/SIGTERM), and error propagation paths. A single commit was merged in the past 7 days (feat: add 4 agentic code quality workflows) that touched src/cli.ts, potentially adding uncovered branches.

2. src/host-iptables.ts — branch coverage 81%: All 5 exported functions are covered but ~19% of branches are not, likely the IPv6 fallback paths in setupHostIptables and edge cases in cleanupHostIptables/cleanupFirewallNetwork. These are security-critical iptables rules — missed branches could mean untested failure modes.

3. src/logs/log-streamer.ts — function coverage 77.8%: Two or three functions in the log-streamer have zero coverage. Streamer errors (e.g., file-not-found, permission denied) are likely untested.

4. src/commands/logs-stats.ts / logs-summary.ts — branch coverage 50%: Both commands are at 100% statement coverage but only 50% branch coverage, suggesting that only the happy-path format (markdown/pretty) is exercised by tests, while json format or error cases are not.

---

📈 Recommendations

1. High — src/cli.ts branch coverage: Add tests for the signal-handling paths (SIGINT/SIGTERM in flight), --keep-containers error cases, and invalid flag combinations. Goal: raise branch coverage from 53% → 75%+.

2. High — src/host-iptables.ts IPv6 / cleanup branches: Add unit tests that mock getDockerBridgeGateway returning null and simulate cleanupHostIptables when no rules exist (idempotency). Goal: raise branch coverage from 81% → 90%+.

3. Medium — src/logs/log-streamer.ts missing functions: Identify the two uncovered functions (likely error/close handlers) and add tests for file-not-found and early-close scenarios.

4. Low — src/commands/logs-stats.ts / logs-summary.ts JSON format: Add a test that calls each command with --format json to cover the remaining 50% of branches.

---

Generated by test-coverage-reporter workflow. Trigger: schedule

Generated by Test Coverage Reporter · ● 212.3K · ◷

• expires on May 10, 2026, 12:48 PM UTC

[github-actions[bot]]

This discussion was automatically closed because it expired on 2026-05-10T12:48:25.990Z.

Closed by Workflow