[Coverage Report] Test Coverage Report — 2026-05-12

[github-actions[bot]]

Overall Coverage

Metric	Coverage
Statements	87.67% (3586/4090)
Branches	79.69% (1935/2428)
Functions	92.16% (388/421)
Lines	87.71% (3477/3964)

🔴 Critical Gaps (< 50% statement coverage)

File	Statements	Branches	Functions	Notes
src/commands/main-action.ts	5.7%	0.0%	12.5%	Added in last 7 days — zero branch coverage

🟡 Low Coverage (50–79% statement coverage)

File	Statements	Branches	Functions
src/commands/subcommands.ts	50.0%	21.4%	41.7%
src/container-cleanup.ts	77.1%	79.2%	100.0%

🛡️ Security-Critical Path Status

File	Statements	Branches	Functions	Status
src/host-iptables.ts	97.3%	92.0%	100%	✅ Excellent
src/squid-config.ts	97.2%	94.8%	88.0%	✅ Excellent
src/docker-manager.ts	100.0%	100.0%	96.5%	✅ Excellent
src/domain-patterns.ts	97.7%	95.4%	100%	✅ Excellent
src/cli.ts	85.7%	50.0%	100%	🟡 Branch coverage low

📋 Full Coverage Table

Per-file breakdown (click to expand)

File	Statements	Branches	Functions
commands/main-action.ts	5.7%	0.0%	12.5%
commands/subcommands.ts	50.0%	21.4%	41.7%
container-cleanup.ts	77.1%	79.2%	100.0%
logs/audit-enricher.ts	83.6%	74.1%	100.0%
cli.ts	85.7%	50.0%	100.0%
logs/log-parser.ts	85.5%	65.6%	100.0%
commands/logs-command-helpers.ts	88.5%	83.3%	100.0%
cli-workflow.ts	88.9%	75.0%	100.0%
container-lifecycle.ts	88.8%	75.0%	100.0%
services/doh-proxy-service.ts	88.9%	75.0%	100.0%
services/agent-volumes.ts	89.7%	74.4%	100.0%
logs/log-streamer.ts	92.2%	77.8%	88.9%
cli-options.ts	93.0%	60.0%	25.0%
ssl-bump.ts	94.1%	88.5%	100.0%
logs/log-aggregator.ts	94.7%	87.5%	100.0%
services/cli-proxy-service.ts	94.7%	93.3%	100.0%
upstream-proxy.ts	94.9%	94.7%	100.0%
pid-tracker.ts	96.3%	76.9%	100.0%
squid-config.ts	97.2%	94.8%	88.0%
host-iptables.ts	97.3%	92.0%	100.0%
logs/log-formatter.ts	97.4%	92.8%	100.0%
services/agent-service.ts	97.6%	94.6%	100.0%
domain-patterns.ts	97.7%	95.4%	100.0%
services/agent-environment.ts	97.9%	92.5%	100.0%
config-file.ts	98.0%	96.8%	87.5%
rules.ts	98.3%	91.9%	100.0%
host-env.ts	98.4%	93.2%	100.0%
compose-generator.ts	98.5%	91.7%	100.0%
services/api-proxy-service.ts	98.7%	94.6%	100.0%
option-parsers.ts	99.0%	94.6%	100.0%
docker-manager.ts	100.0%	100.0%	96.5%
api-proxy-config.ts	100.0%	100.0%	100.0%
copilot-api-resolver.ts	100.0%	87.0%	100.0%
dlp.ts	100.0%	100.0%	100.0%
dns-resolver.ts	100.0%	93.8%	100.0%
domain-utils.ts	100.0%	100.0%	100.0%
env-utils.ts	100.0%	100.0%	100.0%
image-tag.ts	100.0%	100.0%	100.0%
logger.ts	100.0%	90.9%	100.0%
redact-secrets.ts	100.0%	100.0%	100.0%
schema-validator.ts	100.0%	100.0%	100.0%
commands/logs-audit.ts	100.0%	95.7%	100.0%
commands/logs-stats.ts	100.0%	100.0%	100.0%
commands/logs-summary.ts	100.0%	100.0%	100.0%
commands/logs.ts	100.0%	100.0%	100.0%
commands/predownload.ts	100.0%	100.0%	100.0%
logs/index.ts	100.0%	100.0%	23.1%
logs/log-discovery.ts	100.0%	90.0%	100.0%
logs/stats-formatter.ts	100.0%	93.5%	100.0%
services/squid-service.ts	100.0%	100.0%	100.0%

🔍 Notable Findings

1. commands/main-action.ts — newly added, 5.7% coverage: Added in the last 7 days, createMainAction() is the core CLI dispatch function but has almost no test coverage. Zero branch coverage means error paths, help handling, and config-load failures are completely untested.

2. cli.ts — 50% branch coverage: The main entry point has full function coverage but only half of its conditional branches are exercised. Uncovered branches likely include error-handling paths (Docker daemon not running, permission errors, signal handling edge cases).

3. commands/subcommands.ts — 21.4% branch coverage: Low branch coverage on subcommand routing means most command dispatch paths are untested. At 41.7% function coverage, more than half the functions have zero coverage.

4. cli-options.ts — 25% function coverage: Three-quarters of option-parsing functions are uncovered, which could hide bugs in edge-case flag combinations (e.g., conflicting --enable-api-proxy + --build-local combinations).

📈 Recommendations

1. High: Add tests for commands/main-action.ts — specifically for createMainAction() error paths (bad config, Docker unavailable, signal interrupts). Branch coverage is 0%; even basic happy-path + one error-path tests would dramatically improve it.

2. High: Improve cli.ts branch coverage from 50% → 70%+. Focus on error branches: what happens when startContainers() fails mid-way, or when SIGTERM arrives during container startup.

3. Medium: Add tests for commands/subcommands.ts command routing — especially the dispatch paths for logs, predownload, and unknown subcommands.

4. Low: Improve cli-options.ts function coverage — parse the uncovered option-combination validation functions to ensure conflicting flags are rejected correctly.

---

Generated by test-coverage-reporter workflow. Trigger: push

Generated by Test Coverage Reporter · ● 279.4K · ◷

• expires on May 19, 2026, 4:28 PM UTC

[github-actions[bot]]

This discussion was automatically closed because it expired on 2026-05-19T16:28:22.247Z.

Closed by Workflow