.c8rc.json

{
  "reporter": ["text-summary", "text", "json-summary", "lcov"],
  "all": true,
  "src": ["src/lib"],
  "include": ["src/lib/**/*.ts"],
  "exclude": [
    "**/*.test.ts",
    "**/*.d.ts",
    "test/**",
    "src/**/*.tsx",

    "//─── GENUINE I/O GLUE — needs live Postgres/network/FS/crypto services; no branching logic to unit-test. NOT excluded to game coverage; each is a thin adapter whose PURE decision half lives in a separate, tested module. ───",

    "src/lib/store.ts",
    "src/lib/keycloak-admin.ts",
    "src/lib/keycloak-realm.ts",
    "src/lib/qdrant.ts",
    "src/lib/redis.ts",
    "src/lib/cache.ts",
    "src/lib/adapters/cache.ts",
    "src/lib/adapters/mdm.ts",
    "src/lib/adapters/sandbox.ts",
    "src/lib/adapters/qdrant.ts",
    "src/lib/adapters/redis.ts",

    "// db-stores: Drizzle/pg CRUD stores — raw DB reads/writes, no decision logic (exercised by the *.integration.test.ts suites against a real DB).",
    "src/lib/agent-runs-store.ts",
    "src/lib/agentrun.ts",
    "src/lib/app-run-store.ts",
    "src/lib/apps-store.ts",
    "src/lib/data-domains-store.ts",
    "src/lib/data-catalog-store.ts",
    "src/lib/etl-jobs-store.ts",
    "src/lib/feedback-store.ts",
    "src/lib/publish-jobs-store.ts",
    "src/lib/rate-limit-store.ts",
    "src/lib/resend-domains-store.ts",
    "src/lib/org-knowledge.ts",
    "src/lib/prompt-partials.ts",
    "src/lib/prompts.ts",
    "src/lib/token-budgets.ts",
    "src/lib/policy-rules.ts",
    "src/lib/analytics-rules.ts",
    "src/lib/service-credentials.ts",
    "src/lib/service-credentials-lib.ts",
    "src/lib/secret-keys.ts",
    "src/lib/gateway-api-keys.ts",
    "src/lib/gateway-api-key.ts",
    "src/lib/connector-secrets.ts",
    "src/lib/pipeline-api-keys.ts",
    "src/lib/backups.ts",
    "src/lib/config.ts",
    "src/lib/config-registry.ts",
    "src/lib/edge-log.ts",
    "src/lib/edge-intent.ts",
    "src/lib/ingest.ts",

    "// network-fetchers: Fetch/HTTP clients to external services (gateway, OpenSearch, Marquez, Langfuse, Unleash, Keycloak, Superset, OPA, Kestra, Airbyte, IMAP/SMTP) — no branch logic beyond ok/!ok fallbacks the read-back tests cover; pure shaping lives in *-shape / *-aggs / *-policy siblings.",
    "src/lib/marquez.ts",
    "src/lib/langfuse.ts",
    "src/lib/langfuse-registry.ts",
    "src/lib/victoria-metrics.ts",
    "src/lib/victoria-logs.ts",
    "src/lib/jaeger.ts",
    "src/lib/superset.ts",
    "src/lib/superset-provision.ts",
    "src/lib/superset-data.ts",
    "src/lib/opensearch-alerting.ts",
    "src/lib/unleash-client.ts",
    "src/lib/unleash-admin.ts",
    "src/lib/opa-policy.ts",
    "src/lib/accounting.ts",
    "src/lib/analytics.ts",
    "src/lib/siem.ts",
    "src/lib/otel.ts",
    "src/lib/imagegen.ts",
    "src/lib/rag.ts",
    "src/lib/eval-runner.ts",
    "src/lib/connector-exec.ts",
    "src/lib/fleetdm.ts",
    "src/lib/copilot-gateway.ts",
    "src/lib/copilot-gather.ts",
    "src/lib/chat-audio-server.ts",

    "// worker-orchestration-glue: Multi-step I/O orchestrators — walk a graph and call real subsystems; scheduling/reducer/durability decisions are pure in *-plan / *-durable / *-policy siblings that ARE tested.",
    "src/lib/app-run.ts",
    "src/lib/chat.ts",
    "src/lib/chat-tools.ts",
    "src/lib/chat-actions.ts",
    "src/lib/chat-attach.ts",
    "src/lib/chat-governance.ts",
    "src/lib/chat-memory.ts",
    "src/lib/chat-audio.ts",
    "src/lib/chat-run-dispatch.ts",
    "src/lib/reports.ts",
    "src/lib/reports/build.ts",
    "src/lib/brain.ts",
    "src/lib/files.ts",
    "src/lib/trigger-dispatch.ts",

    "// thin-io-adapters-over-pure-siblings: Each is a documented thin I/O adapter whose decision half is a separate PURE, tested module (named in the file header).",
    "src/lib/cloud-route-plan.ts",
    "src/lib/cloud-client.ts",
    "src/lib/pipeline-chip.ts",
    "src/lib/device-auth.ts",
    "src/lib/audit-log-reader.ts",
    "src/lib/audit-actor.ts",
    "src/lib/runs-monitor-reader.ts",
    "src/lib/app-runs-view-reader.ts",
    "src/lib/user-activity-reader.ts",
    "src/lib/connector-detail.ts",
    "src/lib/pipeline-run-glue.ts",
    "src/lib/provenance-ops.ts",
    "src/lib/retrieval-writer.ts",
    "src/lib/lineage-writer.ts",
    "src/lib/status.ts",
    "src/lib/embeds.ts",
    "src/lib/handbook.ts",
    "src/lib/prompt-intel.ts",

    "// provenance-signing-crypto: server-only signing/verify + provit broker — network + crypto + external Provit API; no unit-testable branches.",
    "src/lib/sigstore.ts",
    "src/lib/c2pa.ts",
    "src/lib/provenance.ts",
    "src/lib/pdf.ts",
    "src/lib/provit.ts",
    "src/lib/provit-intelligence.ts",
    "src/lib/provit-access.ts",
    "src/lib/provit-token.ts",
    "src/lib/provit-upload.ts",

    "// next-request-surface: Server-only guards that touch next/navigation, next/server or @/auth (notFound()/NextResponse/session) — no pure branch logic; the permission RULES they call live in role-permissions.ts / tenancy-policy.ts (tested).",
    "src/lib/authz.ts",
    "src/lib/tenancy.ts",
    "src/lib/modules.ts",
    "src/lib/module-access.ts",
    "src/lib/auth/identity.ts",
    "src/lib/auth/token-verifier.ts",
    "src/lib/use-pagination.ts",

    "// static-content-data: Hand-authored static content/spec data (arrays of strings) — no branching logic; testing them only re-asserts literals.",
    "src/lib/openapi.ts",
    "src/lib/architecture.ts",
    "src/lib/docs/**",

    "// qa-adapters: QA sweep/scoring — I/O adapters over the drift/eval registries; the pure scoring rules are covered where they compute.",
    "src/lib/qa/sweep.ts",
    "src/lib/qa/scoring.ts",

    "// exporter-runner-io: Exporter runner + wire-emitters that open sockets/HTTP; the payload SHAPING (openlineage/prometheus/splunk) is unit-tested in exporters-payloads.test.ts.",
    "src/lib/exporters/run.ts",
    "src/lib/adapters/sinks/report.ts",
    "src/lib/adapters/sinks/email-smtp.ts",
    "src/lib/adapters/apprun.ts",
    "src/lib/adapters/agentruntime.ts",
    "src/lib/adapters/signing.ts",
    "src/lib/adapters/connector-query.ts",
    "src/lib/adapters/triggers/email-imap.ts",
    "src/lib/adapters/triggers/whatsapp-onprem.ts",

    "// adapter-ports-io: The remaining src/lib/adapters/* port implementations — each is the I/O half of a ports-and-adapters seam (execFile/fetch/DB/socket); the PURE gating + shaping lives in the sibling *-regex / *-catalog / *-shape / lib/* module (all tested). registry.ts is pure wiring of those ports (no logic).",
    "src/lib/adapters/tool-primitives.ts",
    "src/lib/adapters/warehouse.ts",
    "src/lib/adapters/data-quality.ts",
    "src/lib/adapters/drift.ts",
    "src/lib/adapters/flags.ts",
    "src/lib/adapters/evals.ts",
    "src/lib/adapters/secrets.ts",
    "src/lib/adapters/registry.ts",
    "src/lib/adapters/inference.ts",
    "src/lib/adapters/policy.ts",
    "src/lib/adapters/lineage.ts",
    "src/lib/adapters/grounding.ts",
    "src/lib/adapters/pii.ts",
    "src/lib/adapters/airbyte.ts",
    "src/lib/adapters/kestra.ts",
    "src/lib/adapters/web-search.ts",

    "// db-io-libs: DB/network read libs whose pure decision/shape half is a tested sibling.",
    "src/lib/evals.ts",
    "src/lib/agents.ts",
    "src/lib/compliance-adoption.ts",
    "src/lib/compliance.ts",
    "src/lib/finops.ts",
    "src/lib/flags-manager.ts",
    "src/lib/gateways.ts",
    "src/lib/policy-view.ts",
    "src/lib/provenance-view.ts",
    "src/lib/retrieval-view.ts",
    "src/lib/studio.ts",
    "src/lib/retrieval/router.ts",
    "src/lib/retrieval/sources.ts",
    "src/lib/pipelines.ts",
    "src/lib/app-schedules.ts",
    "src/lib/observability-settings.ts",
    "src/lib/pipeline-release.ts"
  ],
  "excludeNodeModules": true,
  "skip-full": false,
  "lines": 85,
  "functions": 85,
  "branches": 85,
  "statements": 85,
  "check-coverage": true
}