mirror of
https://github.com/mauriceboe/TREK.git
synced 2026-11-12 15:21:08 +00:00
d7c4324afc
* chore(capacitor): base files for capacitor
* chore(capacitor): base plugins
* feat(auth): hand a browser sign-in over to the native app
The native apps show the server's own UI in a WebView, where neither SSO nor
passkeys can run. They sign in through the system browser instead and need a
way to carry that session back.
The app keeps a random verifier and sends only its sha256 into the browser.
Once signed in there, the browser trades that challenge for a one-time code
(cookie session only, so an API or MCP token cannot mint itself a browser
session), and the WebView redeems the code together with the verifier. The
code rides through a URL scheme any app could claim, so on its own it is
worthless; it is single use and good for a minute.
Also: /api/health/features reports nativeApp so the apps can refuse servers
that predate this, and hashed files under assets/ are served immutable,
which the iOS app needs to start offline without a service worker.
* feat(native): the apps load the server's own UI
The apps ship only an address screen now. Once a server is picked, the
native side points the WebView at it: TrekBridgeViewController on iOS and a
config copy with server.url on Android. The UI then comes from that server,
in the version it runs and on its own origin, so the session cookie,
uploads, /ws and plugins work exactly as in a browser and no app release
has to keep pace with the servers out there.
The address screen (native-shell/, built into native-dist/) probes
/api/health/features through native HTTP, tries https before http when no
scheme was typed, and refuses servers without the nativeApp flag. It also
serves as the error page when the remembered server does not load: retry,
change server, or on iOS the stored copy of the server's start page.
TrekShell is the app's own plugin for all of that: remember, change and
reload the server, sign in through ASWebAuthenticationSession or a Custom
Tab, and on iOS keep and open the offline copy of the start page, because
WKWebView runs no service worker for a domain the app does not list.
Plugins the frame does not use are gone (push, camera, geolocation,
calendar, file transfer, in-app browser and more): the WebView covers the
camera and location itself, and push needs a relay before it is worth
shipping. With them go the push entitlement, the calendar usage strings
and the Firebase bits. The iOS scheme falls back to capacitor://, since
Capacitor drops an iosScheme of https, and the arm64 capability replaces
armv7.
* feat(native): the UI knows when it runs inside the app
Everything the server's UI does differently inside the iOS and Android app
lives under src/native and is inert in a browser.
Sign-in: SSO and the passkey button go through the system browser
(signInThroughBrowser), because identity providers refuse embedded
browsers and WebAuthn needs a domain association no build can have for
every server. The browser end is the new /native-handoff page: it signs
the user in if needed and hands the session over only after an explicit
tap, so a link carrying somebody else's challenge cannot pass a session
on silently. The verifier is hashed with @noble/hashes because
crypto.subtle is missing on the plain-http servers many home networks
use. An OIDC-only install no longer bounces to the IdP inside the
WebView, and passkey management is hidden in the app.
Downloads: the WebView cannot save a blob, so downloadBlob, downloadFile
and openFile write to the app cache and open the share sheet. The eight
places that built their own download anchor now use downloadBlob, which
they should have anyway.
The rest: "Change server" on the login page and in the account settings,
the splash hides after the first frame, Android's back button walks
history before it leaves the app, the status bar follows the scheme, and
on iOS the start page is refreshed and every chunk of the build (listed
in the new asset-manifest.json) is pulled into WebKit's cache so the app
can start without network.
* ci(native): build the Android and iOS shells on every change to them
Compiles the Swift side on a macOS runner so nobody needs a Mac to know it
still builds, and leaves a debug APK on every run to install on a phone.
Unsigned: signing and store uploads need secrets fork PRs do not get.
* feat(native): offline vector maps in the iOS app
In a browser the service worker answers MapLibre from the gl-map-offline
cache that glPrefetcher fills for trips marked for offline. The iOS app has
no service worker, so nothing read that cache there and the map went blank
without network.
A trek-offline:// protocol takes the service worker's place. Inside the iOS
app the MapLibre style URL is rewritten to it, the handler rewrites every
https URL inside the style and its TileJSON the same way, and then serves
documents network first and tiles, glyphs and sprites cache first. Outside
the iOS app nothing changes. The default OpenFreeMap basemap is covered;
Mapbox GL has no protocol hook and stays online-only in the app, as does a
custom raster template, whose opaque responses only a service worker can
store.
* fix(native): keep the iOS offline copy inside the app
loadSimulatedRequest went to the server URL without its trailing slash, and
Capacitor keeps a navigation in the WebView only when it starts with the
bridge's serverURL, slash included. The offline start page would have
opened in Safari instead. Also covers the platform helpers and the
hand-off API module.
* feat(native): the small things that give a WebView away
- A short haptic tap on success, warning and error toasts, which is where
every save and delete already reports. Info toasts stay silent.
- No "‹ › Done" strip above the iOS keyboard.
- No Safari preview when a link is long-pressed.
- The swipe from the left edge goes back on iOS, through the same history
Android's back button walks.
* test(mobile): the backup-code download revokes its URL after the shared delay
The mobile twin of the AccountTab test still expected the object URL to be
revoked in the same tick. Since both screens download through downloadBlob,
the revoke happens after its 100 ms grace period.
* fix(native): remember the login by default inside the app
With the switch off the app got a session cookie, which dies with the app
process, so every time the phone unloaded TREK the user had to sign in
again. Found while running the Android build in the emulator.
* fix(native): no overscroll stretch on Android
The UI asks for no overscroll effect with overscroll-behavior: none on html,
and Chrome honours it. The Android WebView draws the stretch on its root
scroller natively, though, and it scales the whole view, so the top bar and
the bottom dock were pulled along with the page. Found in the emulator.
* fix(native): Android shows "server not reachable" instead of a blank page
Capacitor injects its bridge on Android only into the server's origin once
server.url is set, so the local error page it switches to when the server
does not load had no bridge. It could neither retry nor change the server
and stayed blank.
TrekWebViewClient now catches a failed page load (a network error, or a 5xx
from a proxy while TREK restarts) and the app starts over on the bundled
address screen, where the bridge is present and the screen offers exactly
those two choices. The server config no longer carries errorPath.
Two traps on the way, both found in the emulator: a restart during launch
has to be a fresh task, since recreate() leaves the system splash lying over
the new page; and a restart shows no launch splash at all, because the
splash plugin cannot take it down again when the page hides it early.
* feat(native): TREK's own app icon and launch screen, named just TREK
The shells still carried Capacitor's placeholder icon and splash, the blue
X on a grid. They now show the white TREK mark on a dark, slightly glassy
tile: a soft light from the top left and a sheen over the upper half, in
the app's launch colour #09090b. Android 12+ draws its launch screen on the
same colour instead of light grey.
scripts/generate-app-icons.mjs renders the sources into assets/ from
public/icons/icon-white.svg, and `npm run icons:app` turns them into every
size both platforms ask for through @capacitor/assets. The Android
foreground mark is sized for the adaptive icon's round mask.
The home screen label is TREK: the old "TREK - Plan your trips!" was cut
off under the icon, and the longer title belongs to the store listings.
* fix(native): new lint warnings and the MapLibre protocol type after the dev merge
Awaits that sat in loops in the native-auth tests run together, the hand-off hook marks its navigations as ignored, the native tests drop their non-null assertions, and the offline protocol answers with the data type MapLibre 6.15 expects.
* fix(native): strict types in the address screen, Prettier on the native-auth e2e suite, file-local exports
The address screen's element helper returns the plain element instead of Object.assign's intersection, which strict mode could not represent; the haptics test reads an optional argument as optional; three exports only their own file used are local now.
* fix(native): Prettier on the native client files, rate-limit e2e requests in sequence
Formats the files the client formatting gate listed, and NATIVE-E2E-005 sends its twenty exchange attempts one after another: all at once they reset the test server's connections.
* fix(native): hide passkeys in the app through usePasskeys
The flag in useAccountSettings grew the identical destructuring in both account views past the duplication threshold; the shared passkeys hook already decides when its card is hidden, so the app check lives there now.
* feat(native): everything the App Store and Google Play submissions need
- iOS: microphone usage text for "Take Video", no-export-compliance flag,
ExportOptions.plist for App Store Connect uploads, the unused push
forwarders gone; CI builds with Xcode 26 and lints the property lists.
- Android: version and signing from Gradle properties (unsigned without
them), R8 with keep rules for TREK's and Capacitor's reflective classes,
no Auto Backup of the session cookie, no external file provider path,
template and Firebase leftovers removed, keystores and service accounts
ignored, full-size adaptive icon layers with a monochrome layer; CI also
builds the release APK.
- native-release.yml: signed bundle to a Play testing track and archive to
TestFlight, by hand or on a v* tag, behind the store environment.
- Version handshake: the server reports nativeApi 1, the app refuses a
server below its minimum and tolerates an app older than the offline copy.
- Address screen: privacy policy link, "Try the demo" and "What is a TREK
server?"; the privacy link also in the app's server settings. Three new
native strings in all 27 locales.
- Donation links and the notices asking for one are hidden in the app.
- Store listings for "TREK Travel Planner" in client/fastlane: texts, review
notes with placeholders, privacy and account deletion page drafts, the
feature graphic and icon, a length and image check in CI, and a Playwright
store project with the scripts that turn its captures into screenshots.
- Docs: wiki/Native-Apps.md, README no longer says there is no store app.
* fix(native): read a notice button's href without a weak type
An action button carries no href, so a parameter typed as only an optional href refused the notice DTO; the button type now names its kind as well.
* feat(native): a welcoming onboarding for the address screen
The app's own screen now opens on a welcome: the TREK mark, a line about what
TREK is, and two clear paths — connect the TREK you already open in the browser,
or get TREK Cloud. Both lead to polished screens: the address field with live
validation, a shake and haptic on a bad address and a success tick before the
server takes over; and a TREK Cloud intro with what it offers and a way in.
Screens slide and stagger in, buttons give a tap, and it all respects the safe
areas, light and dark, and reduced motion. Self-hosters are unaffected: cloud is
its own path, never in the way. New native strings are added across all locales
(English placeholders outside en/de, to translate).
* feat(native): a plan picker for TREK Cloud, with live prices
The Get TREK Cloud path now leads to a plan picker that reads the live plans
from the site (/api/plans), so the prices and quotas always match the website.
Monthly and yearly in a segmented toggle, the year marked with its saving, each
plan a card with its price and what it includes. Subscribe is wired to finish on
the web order for now; it becomes an Apple/Google in-app purchase once the store
products exist. New strings across all locales (en and de translated).
* feat(native): light status bar and a Go key on the address screen
The address screen sits on the near-black surface, so set the status bar to draw
its clock and icons in light while it is up; the server's own UI takes over the
style once it loads. The address field's on-screen return key now reads Go. Both
fail quietly where there is no native status bar (web, the simulator).
* i18n(native): translate the onboarding into es, fr, it, nl and pl
The welcome, TREK Cloud and plan-picker strings were English placeholders in
every locale but en and de. The five largest remaining European languages are
now translated in full; the others still carry the English text and are a
follow-up for native speakers.
* feat(native): the in-app TREK Cloud subscription flow
After picking a plan, the app now carries the whole purchase itself when the build
can take one: choose your address (checked for free as you type, against the same
endpoint the website uses), your email, and subscribe. The receipt goes to
/api/iap/redeem, and a Setting up your TREK screen waits on the new address and
loads it the moment it answers.
The purchase sits behind an IapClient seam (src/native/iap.ts): a fake drives the
whole flow in development and preview, the native client reports itself
unavailable until the store plugin and products exist, and until then the plan
picker still finishes on the web, so nothing half-wired faces a customer. New
claim and provisioning strings across all locales (en, de and the five largest
European languages translated).
* i18n(native): translate the app into the remaining 20 languages
The onboarding, plan picker, claim and provisioning strings were English
placeholders outside en, de and the five largest European languages. They are
now translated in full across the other 20 locales (ar, az, br, ca, cs, et, gr,
hu, id, ja, ko, ru, sk, sv, th, tr, uk, vi, zh, zh-TW), placeholders and brand
kept. The app now speaks every language TREK does.
* fix(i18n): add the Hebrew native strings, and correct the LoginPage size baseline
The he locale had every domain but native.ts, which broke i18n parity, the shared
coverage specs and the client parity test once the native strings existed. Add
he/native.ts with all native keys translated. Also correct the LoginPage size
baseline to its current line count.
* i18n(native): excuse the TREK Cloud brand, mark Email same-as-en, exempt the quota counts
The strict i18n checks, which the feature-branch CI does not run, catch three
things now that the native strings exist in every locale: TREK Cloud read as an
untranslated English phrase (it is a product name, like Vacay and Atlas, so add
it to the brand list); Email left identical in Italian, Indonesian and
Vietnamese, where it is the local word too (mark same-as-en) and in Greek (give
it a Greek term); and the GB and AI-document quota strings carrying {n} without
being plural groups (both are figures that never show a singular, like the other
unit-symbol counts in NOT_PLURAL).
* fix(native): typecheck, lint and knip on the native code; wire he's native bundle
The full suite, which the feature-branch CI does not run, catches four things the
native work still had: a non-narrowed union in the claim flow (tsc), a helper
named useFake that the react-hooks rule read as a hook (eslint), two iap types
exported but used only inside the file (knip), and the Hebrew native strings
present as a file but never spread into he's merged bundle (the aggregated key
parity test). All four fixed.
* fix(native): a flat redeem result, so the claim flow typechecks
The discriminated union did not narrow under the native-shell tsconfig, so the
failure code read as absent on the whole type. Use a flat result with optional
instanceUrl and code instead: both are always present on the type, no narrowing
needed, and the ok plus instanceUrl guard still routes success from refusal.
* style: prettier-format the native and i18n changes
The feature-branch CI does not run the formatting check, so the conflict-resolved
files (AboutTab, useAccountSettings, useTripExport), the native shell and iap
module, and the i18n files touched by the translation scripts were never run
through Prettier. Format them all; no behaviour changes.
* chore(native): re-trigger CI on the formatted tree
---------
Co-authored-by: Maurice <mauriceboe@icloud.com>
290 lines
21 KiB
TypeScript
290 lines
21 KiB
TypeScript
import swc from 'unplugin-swc';
|
||
import { defineConfig } from 'vitest/config';
|
||
|
||
export default defineConfig({
|
||
// SWC transform so NestJS decorator metadata is emitted in tests
|
||
// (vitest's default esbuild does not emit it -> type-based DI would break).
|
||
plugins: [
|
||
swc.vite({
|
||
// unplugin-swc's default filter is /\.m?[jt]sx?$/ — anchored at the end of the
|
||
// id, so anything carrying a query string skips the SWC transform. The istanbul
|
||
// provider's uncovered-file pass asks vite for every never-imported source as
|
||
// `<file>.ts?cache=<n>&vitest-uncovered-coverage=true`; with the default filter
|
||
// those ids come back as raw TypeScript and babel's instrumenter (no TS or
|
||
// decorator plugins) dies on the first `as const`/`interface`/`@Global()`.
|
||
// Match the same extensions with an optional query so those ids are transformed
|
||
// exactly like the imported ones.
|
||
include: /\.[cm]?[jt]sx?(\?.*)?$/,
|
||
jsc: {
|
||
parser: { syntax: 'typescript', decorators: true },
|
||
transform: { legacyDecorator: true, decoratorMetadata: true },
|
||
keepClassNames: true,
|
||
},
|
||
}),
|
||
],
|
||
test: {
|
||
root: '.',
|
||
include: ['tests/**/*.test.ts'],
|
||
globals: true,
|
||
// Migrates one database for the whole run and snapshots it; workers open a
|
||
// copy instead of replaying 242 migrations per file. See tests/global-setup.ts.
|
||
globalSetup: ['tests/global-setup.ts'],
|
||
setupFiles: ['tests/setup.ts', 'tests/setup.console-noise.ts'],
|
||
testTimeout: 15000,
|
||
hookTimeout: 15000,
|
||
pool: 'forks',
|
||
// Console output is kept for failing tests and dropped for passing ones: a
|
||
// green run used to print every e2e boot and every migrator line (~100k
|
||
// lines) and a red one buried its failure in them. `default` prints one line
|
||
// per file and the full detail only for failures; on CI the github-actions
|
||
// reporter adds inline annotations on the PR.
|
||
silent: 'passed-only',
|
||
reporters: process.env.CI ? ['default', 'github-actions'] : ['default'],
|
||
coverage: {
|
||
// Vite 8 + Vitest 4 made the sourcemap-based `v8` provider under-report branch
|
||
// coverage on the SWC/decorator-transformed output (it dropped to ~68% even
|
||
// though every test passes). `istanbul` instruments the source directly, so
|
||
// coverage is measured independently of the transform pipeline.
|
||
provider: 'istanbul',
|
||
// Serialises report processing: three identical runs otherwise gave 13/6/6
|
||
// threshold errors (files like platform/api-docs.ts flipping between 0% and
|
||
// 100%) because the default concurrency processes per-file coverage results
|
||
// out of order against istanbul's shared state.
|
||
processingConcurrency: 1,
|
||
// json-summary is what the per-domain ratchet below is derived from: the text
|
||
// reporter prints one row per DIRECTORY, not a recursive total, so reading the
|
||
// thresholds off it silently understates any domain with subdirectories.
|
||
reporter: ['lcov', 'text', 'json-summary'],
|
||
reportsDirectory: './coverage',
|
||
include: ['src/**/*.ts'],
|
||
// The plugin child bootstrap runs in a forked subprocess via tsx, so the
|
||
// parent's instrumentation can't measure it; it's exercised end-to-end by
|
||
// the supervisor integration test instead. Everything else in the plugin
|
||
// module runs in-process and is unit-tested.
|
||
exclude: ['src/nest/plugins/runtime/plugin-host-entry.ts'],
|
||
// Coverage gate scoped to the new NestJS code only — the legacy codebase is
|
||
// intentionally ungated.
|
||
//
|
||
// The bar is PER DOMAIN and works as a ratchet: each entry is that domain's
|
||
// measured coverage at the time it was set, minus one point of slack. Regenerate
|
||
// with `node scripts/coverage-thresholds.mjs` after a run that RAISED coverage. A single
|
||
// repo-wide 80% let a well-covered domain subsidise a thin one, so a domain could
|
||
// lose ten points and the build stayed green. Now it cannot: the only way past a
|
||
// number here is to raise it, which makes the ratchet visible in the diff.
|
||
//
|
||
// Raise an entry when you improve a domain. Never lower one to make a build pass —
|
||
// that is the whole point of the mechanism.
|
||
//
|
||
// Regenerate from a LINUX run if you can: CI runs on Linux, and a few branches are
|
||
// platform-specific (the drive-letter half of the backup zip-slip guard is only
|
||
// reachable on win32). Numbers taken on Windows can therefore sit a hair above what
|
||
// CI measures, which shows up as a threshold failure that reproduces nowhere local.
|
||
//
|
||
// A file matched by a glob below is EXCLUDED from the catch-all, so the last entry
|
||
// only covers what sits directly under src/nest (app.module.ts and the like).
|
||
thresholds: {
|
||
'src/nest/accommodations/**/*.ts': { statements: 92, branches: 87, functions: 99, lines: 97 },
|
||
'src/nest/addons/**/*.ts': { statements: 99, branches: 89, functions: 99, lines: 99 },
|
||
'src/nest/admin/**/*.ts': { statements: 86, branches: 70, functions: 89, lines: 88 },
|
||
// New domains in this change, unmeasured: pinned at the 80 floor. Regenerate
|
||
// with scripts/coverage-thresholds.mjs after the first full run.
|
||
'src/nest/ai-connections/**/*.ts': { statements: 80, branches: 80, functions: 80, lines: 80 },
|
||
'src/nest/airports/**/*.ts': { statements: 68, branches: 60, functions: 93, lines: 73 },
|
||
'src/nest/app-config/**/*.ts': { statements: 79, branches: 100, functions: 65, lines: 71 },
|
||
'src/nest/assignments/**/*.ts': { statements: 90, branches: 80, functions: 97, lines: 96 },
|
||
'src/nest/assistant/**/*.ts': { statements: 80, branches: 80, functions: 80, lines: 80 },
|
||
'src/nest/atlas/**/*.ts': { statements: 92, branches: 82, functions: 96, lines: 94 },
|
||
'src/nest/audit/**/*.ts': { statements: 93, branches: 80, functions: 99, lines: 96 },
|
||
'src/nest/auth/**/*.ts': { statements: 93, branches: 85, functions: 95, lines: 96 },
|
||
'src/nest/auth-core/**/*.ts': { statements: 89, branches: 83, functions: 94, lines: 89 },
|
||
'src/nest/backup/**/*.ts': { statements: 97, branches: 93, functions: 99, lines: 98 },
|
||
'src/nest/booking-import/**/*.ts': { statements: 50, branches: 28, functions: 64, lines: 53 },
|
||
'src/nest/budget/**/*.ts': { statements: 91, branches: 77, functions: 97, lines: 95 },
|
||
'src/nest/calendar/**/*.ts': { statements: 96, branches: 93, functions: 99, lines: 99 },
|
||
'src/nest/categories/**/*.ts': { statements: 99, branches: 80, functions: 99, lines: 99 },
|
||
'src/nest/collab/**/*.ts': { statements: 92, branches: 85, functions: 95, lines: 97 },
|
||
'src/nest/collections/**/*.ts': { statements: 86, branches: 75, functions: 95, lines: 95 },
|
||
'src/nest/common/**/*.ts': { statements: 95, branches: 89, functions: 99, lines: 97 },
|
||
'src/nest/config/**/*.ts': { statements: 99, branches: 100, functions: 99, lines: 99 },
|
||
'src/nest/database/**/*.ts': { statements: 99, branches: 100, functions: 99, lines: 99 },
|
||
'src/nest/day-notes/**/*.ts': { statements: 92, branches: 83, functions: 99, lines: 99 },
|
||
'src/nest/days/**/*.ts': { statements: 92, branches: 82, functions: 98, lines: 97 },
|
||
'src/nest/doc-sync/**/*.ts': { statements: 91, branches: 79, functions: 96, lines: 95 },
|
||
'src/nest/feeds/**/*.ts': { statements: 91, branches: 83, functions: 83, lines: 91 },
|
||
// New domain in this change, unmeasured: pinned at the 80 floor so it
|
||
// has its own entry rather than hiding in the catch-all. Regenerate with
|
||
// scripts/coverage-thresholds.mjs after the first full run.
|
||
'src/nest/ferratas/**/*.ts': { statements: 80, branches: 80, functions: 80, lines: 80 },
|
||
'src/nest/files/**/*.ts': { statements: 97, branches: 95, functions: 99, lines: 98 },
|
||
'src/nest/geo/**/*.ts': { statements: 99, branches: 95, functions: 99, lines: 99 },
|
||
// google-quota, managed, mcp-shared, mcp-transport, public-api,
|
||
// receipt-scan, route-usage, scheduling, school-holidays, tokens and tours
|
||
// sat on the 80 catch-all until 2026-10-08. Each is pinned one point under
|
||
// what the unit, integration and e2e suites that load it measure, as the
|
||
// script prints it: a subset a full run can only measure higher. managed holds an empty
|
||
// module and nothing to count. mcp-shared and route-usage measure below
|
||
// the 80 floor on branches and functions and are pinned where they are.
|
||
// tests/unit/coverage-thresholds.test.ts fails on a domain without an entry.
|
||
'src/nest/google-quota/**/*.ts': { statements: 99, branches: 99, functions: 99, lines: 99 },
|
||
'src/nest/health/**/*.ts': { statements: 99, branches: 65, functions: 99, lines: 99 },
|
||
'src/nest/help/**/*.ts': { statements: 81, branches: 70, functions: 99, lines: 86 },
|
||
'src/nest/integrations/**/*.ts': { statements: 78, branches: 68, functions: 78, lines: 80 },
|
||
'src/nest/journey/**/*.ts': { statements: 91, branches: 84, functions: 88, lines: 93 },
|
||
// New domain in this change (JRN-01), unmeasured: pinned at the 80 floor
|
||
// like ferratas until the first full run regenerates it.
|
||
'src/nest/journey-recordings/**/*.ts': { statements: 80, branches: 80, functions: 80, lines: 80 },
|
||
'src/nest/llm-parse/**/*.ts': { statements: 91, branches: 85, functions: 85, lines: 94 },
|
||
'src/nest/managed/**/*.ts': { statements: 100, branches: 100, functions: 100, lines: 100 },
|
||
'src/nest/maps/**/*.ts': { statements: 93, branches: 86, functions: 97, lines: 96 },
|
||
'src/nest/mcp-shared/**/*.ts': { statements: 84, branches: 59, functions: 99, lines: 88 },
|
||
'src/nest/mcp-transport/**/*.ts': { statements: 89, branches: 79, functions: 87, lines: 90 },
|
||
'src/nest/memories/**/*.ts': { statements: 92, branches: 83, functions: 97, lines: 94 },
|
||
// New domain in this change, fully covered by its unit and e2e suites.
|
||
// Pinned a little under that until a full run regenerates the block.
|
||
'src/nest/native-auth/**/*.ts': { statements: 95, branches: 90, functions: 95, lines: 95 },
|
||
'src/nest/notifications/**/*.ts': { statements: 83, branches: 72, functions: 85, lines: 87 },
|
||
'src/nest/oauth/**/*.ts': { statements: 96, branches: 95, functions: 97, lines: 97 },
|
||
'src/nest/oidc/**/*.ts': { statements: 88, branches: 83, functions: 91, lines: 92 },
|
||
// The Overpass client the ferratas and the tours share, moved out of ferratas in this
|
||
// change with its tests: pinned at the 80 floor until a full run measures it.
|
||
'src/nest/overpass/**/*.ts': { statements: 80, branches: 80, functions: 80, lines: 80 },
|
||
'src/nest/packing/**/*.ts': { statements: 92, branches: 83, functions: 99, lines: 97 },
|
||
'src/nest/paddle-obstacles/**/*.ts': { statements: 96, branches: 92, functions: 94, lines: 97 },
|
||
// PAD-11, new in this change: measured by its unit and e2e suites, one point of slack.
|
||
'src/nest/paddle-routing/**/*.ts': { statements: 94, branches: 83, functions: 96, lines: 97 },
|
||
'src/nest/permissions/**/*.ts': { statements: 97, branches: 92, functions: 99, lines: 97 },
|
||
'src/nest/photos/**/*.ts': { statements: 96, branches: 92, functions: 92, lines: 96 },
|
||
// Landed on dev without an entry, so it sat on the 80 catch-all while
|
||
// measuring 99.5/99.0/97.4/100 — the gap the per-domain ratchet exists to
|
||
// close. Set with a few points of slack against the Linux/Windows drift.
|
||
// New domain: community enrichment of place details. On the floor until a
|
||
// full CI run measures it; raise it with scripts/coverage-thresholds.mjs then.
|
||
'src/nest/place-contrib/**/*.ts': { statements: 80, branches: 80, functions: 80, lines: 80 },
|
||
'src/nest/place-enrichment/**/*.ts': { statements: 96, branches: 95, functions: 94, lines: 97 },
|
||
// New domain: the file and list readers that moved out of places/ and
|
||
// collections/. On the floor until a full CI run measures it; raise it
|
||
// with scripts/coverage-thresholds.mjs then, never lower it.
|
||
'src/nest/place-import/**/*.ts': { statements: 80, branches: 80, functions: 80, lines: 80 },
|
||
'src/nest/place-photos/**/*.ts': { statements: 87, branches: 79, functions: 72, lines: 89 },
|
||
// New domain in this change. Measured over its own suites at
|
||
// 98.3/89.8/96.2/100, and pinned well under that on purpose: the
|
||
// subset run does not load the controller the way the full run does,
|
||
// so the real figure is not this one. Regenerate with
|
||
// scripts/coverage-thresholds.mjs after a full run. What matters now is
|
||
// that it is off the 80 catch-all, where a new domain could shed twenty
|
||
// points without anything noticing.
|
||
'src/nest/place-shadow/**/*.ts': { statements: 90, branches: 80, functions: 90, lines: 95 },
|
||
'src/nest/places/**/*.ts': { statements: 91, branches: 82, functions: 96, lines: 94 },
|
||
'src/nest/platform/**/*.ts': { statements: 99, branches: 99, functions: 99, lines: 99 },
|
||
'src/nest/plugins/**/*.ts': { statements: 86, branches: 81, functions: 78, lines: 89 },
|
||
'src/nest/public-api/**/*.ts': { statements: 97, branches: 86, functions: 99, lines: 99 },
|
||
'src/nest/query-helpers/**/*.ts': { statements: 90, branches: 75, functions: 99, lines: 92 },
|
||
'src/nest/realtime/**/*.ts': { statements: 99, branches: 100, functions: 99, lines: 99 },
|
||
'src/nest/receipt-scan/**/*.ts': { statements: 99, branches: 99, functions: 99, lines: 99 },
|
||
'src/nest/reservation-import/**/*.ts': { statements: 61, branches: 55, functions: 41, lines: 61 },
|
||
'src/nest/reservations/**/*.ts': { statements: 92, branches: 83, functions: 96, lines: 96 },
|
||
// New domain in this change. Measured over its own suites at
|
||
// 94.0/81.1/100/99.1 and pinned under that: the subset run does not
|
||
// load the controller the way the full run does, so the real figure is
|
||
// not this one. Regenerate with scripts/coverage-thresholds.mjs after a
|
||
// full run. What matters now is that it carries its own floor instead of
|
||
// hiding in the 80 catch-all, where 557 new lines could shed twenty
|
||
// points against the headroom of the domains beside them.
|
||
'src/nest/roadtrip/**/*.ts': { statements: 88, branches: 80, functions: 95, lines: 95 },
|
||
'src/nest/route-usage/**/*.ts': { statements: 84, branches: 66, functions: 77, lines: 83 },
|
||
// New domain in this change, unmeasured: on the 80 floor until the first
|
||
// full CI run, then raised with scripts/coverage-thresholds.mjs, never lowered.
|
||
'src/nest/routing-relay/**/*.ts': { statements: 80, branches: 80, functions: 80, lines: 80 },
|
||
'src/nest/scheduling/**/*.ts': { statements: 99, branches: 92, functions: 99, lines: 99 },
|
||
'src/nest/school-holidays/**/*.ts': { statements: 97, branches: 95, functions: 99, lines: 97 },
|
||
// New domain in this change, unmeasured: on the 80 floor until the first
|
||
// full CI run, then raised with scripts/coverage-thresholds.mjs, never lowered.
|
||
'src/nest/service-identity/**/*.ts': { statements: 80, branches: 80, functions: 80, lines: 80 },
|
||
// New domain in this change, unmeasured: pinned at the 80 floor so it
|
||
// has its own entry rather than hiding in the catch-all. Its suites
|
||
// cover every branch they can reach; regenerate with
|
||
// scripts/coverage-thresholds.mjs after the first full run.
|
||
'src/nest/sessions/**/*.ts': { statements: 80, branches: 80, functions: 80, lines: 80 },
|
||
'src/nest/settings/**/*.ts': { statements: 87, branches: 71, functions: 99, lines: 88 },
|
||
'src/nest/share/**/*.ts': { statements: 97, branches: 87, functions: 99, lines: 99 },
|
||
// The piste router, new in this change and not measured yet: on the floor until the first full CI
|
||
// run, then raised with scripts/coverage-thresholds.mjs (the spec aims at 90), never lowered.
|
||
'src/nest/ski-routing/**/*.ts': { statements: 80, branches: 80, functions: 80, lines: 80 },
|
||
'src/nest/storage/**/*.ts': { statements: 94, branches: 84, functions: 97, lines: 94 },
|
||
'src/nest/system-notices/**/*.ts': { statements: 99, branches: 99, functions: 99, lines: 99 },
|
||
'src/nest/tags/**/*.ts': { statements: 97, branches: 89, functions: 99, lines: 99 },
|
||
'src/nest/todo/**/*.ts': { statements: 90, branches: 82, functions: 99, lines: 99 },
|
||
'src/nest/tokens/**/*.ts': { statements: 99, branches: 97, functions: 99, lines: 99 },
|
||
'src/nest/tours/**/*.ts': { statements: 95, branches: 92, functions: 99, lines: 97 },
|
||
'src/nest/transit/**/*.ts': { statements: 92, branches: 83, functions: 97, lines: 94 },
|
||
'src/nest/trip-invite/**/*.ts': { statements: 91, branches: 93, functions: 93, lines: 89 },
|
||
'src/nest/trip-membership/**/*.ts': { statements: 99, branches: 86, functions: 99, lines: 99 },
|
||
'src/nest/trip-members/**/*.ts': { statements: 95, branches: 91, functions: 99, lines: 95 },
|
||
'src/nest/trip-read-model/**/*.ts': { statements: 97, branches: 96, functions: 99, lines: 97 },
|
||
'src/nest/trips/**/*.ts': { statements: 95, branches: 86, functions: 95, lines: 96 },
|
||
'src/nest/unsplash/**/*.ts': { statements: 99, branches: 88, functions: 99, lines: 99 },
|
||
'src/nest/vacay/**/*.ts': { statements: 82, branches: 66, functions: 90, lines: 86 },
|
||
'src/nest/wanderer/**/*.ts': { statements: 80, branches: 80, functions: 80, lines: 80 },
|
||
'src/nest/weather/**/*.ts': { statements: 93, branches: 78, functions: 91, lines: 97 },
|
||
'src/nest/**/*.ts': { statements: 80, branches: 80, functions: 80, lines: 80 },
|
||
|
||
// Outside the container. Coverage MEASURES src/**, but until now only
|
||
// src/nest/** was gated, so the boot path, the scheduler, the MCP
|
||
// handler and the migrations sat under no floor at all — which is
|
||
// exactly where the worst finding of the last audit lived (a swallowed
|
||
// EADDRINUSE that no test could have caught). These entries pin what is
|
||
// measured today so it cannot slide; they are floors to raise, not
|
||
// targets that have been met.
|
||
//
|
||
// src/demo/** is deliberately absent: it measures 0%, and a floor of
|
||
// zero asserts nothing. It needs tests before it needs a threshold.
|
||
'src/app-config/**/*.ts': { statements: 99, branches: 95, functions: 99, lines: 99 },
|
||
// Hand-maintained (scripts/coverage-thresholds.mjs only emits src/nest/* lines): floor(measured) - 1 after Plan 2.
|
||
'src/db/**/*.ts': { statements: 84, branches: 42, functions: 95, lines: 87 },
|
||
'src/db/dialect/**/*.ts': { statements: 99, branches: 99, functions: 99, lines: 99 },
|
||
// Branches re-pinned at floor(measured) - 1 once Plans 3a–4 had grown the
|
||
// folder from the Plan 2 handful to 136 repositories (89.83% measured,
|
||
// identical locally and on CI); the 99 was set before any of them existed.
|
||
'src/db/repositories/**/*.ts': { statements: 99, branches: 88, functions: 99, lines: 99 },
|
||
'src/db/types/**/*.ts': { statements: 93, branches: 99, functions: 99, lines: 93 },
|
||
'src/mcp/**/*.ts': { statements: 58, branches: 43, functions: 63, lines: 60 },
|
||
'src/middleware/**/*.ts': { statements: 91, branches: 89, functions: 87, lines: 94 },
|
||
// The folded-in nest-mcp decorator/registry layer keeps the 80% floor
|
||
// its own workspace gate enforced (tests/unit/nest-mcp/).
|
||
'src/nest-mcp/**/*.ts': { statements: 80, branches: 80, functions: 80, lines: 80 },
|
||
// The plugin RPC kit (rpc-kit, rpc-params, rpc-errors, PluginGuards), moved
|
||
// out of src/nest/plugins with its tests (tests/unit/nest-rpc/).
|
||
'src/nest-rpc/**/*.ts': { statements: 92, branches: 85, functions: 95, lines: 94 },
|
||
'src/systemNotices/**/*.ts': { statements: 84, branches: 67, functions: 93, lines: 85 },
|
||
'src/utils/**/*.ts': { statements: 92, branches: 87, functions: 89, lines: 96 },
|
||
// index.ts, bootstrap.ts, scheduler.ts, config.ts, websocket.ts and the
|
||
// small top-level modules beside them.
|
||
'src/*.ts': { statements: 39, branches: 36, functions: 36, lines: 42 },
|
||
},
|
||
},
|
||
},
|
||
resolve: {
|
||
alias: {
|
||
// MCP SDK's exports map uses extension-less wildcard targets that neither
|
||
// Node nor Vite can resolve. Point directly at the CJS dist files.
|
||
// Paths are relative to the monorepo root (packages are hoisted there).
|
||
'@modelcontextprotocol/sdk/server/mcp': new URL(
|
||
'../node_modules/@modelcontextprotocol/sdk/dist/cjs/server/mcp.js',
|
||
import.meta.url,
|
||
).pathname,
|
||
'@modelcontextprotocol/sdk/server/streamableHttp': new URL(
|
||
'../node_modules/@modelcontextprotocol/sdk/dist/cjs/server/streamableHttp.js',
|
||
import.meta.url,
|
||
).pathname,
|
||
'@modelcontextprotocol/sdk/inMemory': new URL(
|
||
'../node_modules/@modelcontextprotocol/sdk/dist/cjs/inMemory.js',
|
||
import.meta.url,
|
||
).pathname,
|
||
'@modelcontextprotocol/sdk/client/index': new URL(
|
||
'../node_modules/@modelcontextprotocol/sdk/dist/cjs/client/index.js',
|
||
import.meta.url,
|
||
).pathname,
|
||
},
|
||
},
|
||
});
|