supercov 1.2.0-x86_64-linux-gnu → 2.0.1-x86_64-linux-gnu

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 969173b17a30e27f86d3017cb35022bdaee26bb9726c78157a6022510e8df070
-  data.tar.gz: 1ccca54e811f1935491f6a88fab9a7f2f5b0c3ceccf8cb3ad87d15e54cf71997
+  metadata.gz: 73748b44c6d1b5b9f020a0df7acc0f51cf77d21ad9004e144f241e9656d23694
+  data.tar.gz: 910fe5b3111591a25c6e2addefe20c5da12d3fa75fecf13a9c650d53356ad543
 SHA512:
-  metadata.gz: 85c57f82f1811e696fd4a5ed3e51a8031027787a7a87f7fc691471021619a0c1ff3e85e460949f1b75c2db76a54f61f4b609e8cd6f007765f5e06fec21e4fbce
-  data.tar.gz: 4d92eda1cfae461f589787f55ebabd3d09d7d64115a8c168600c17b53692ecd4f976006388e57f374677fcba31dc91903b3f7621858caaafa2219ef302909d49
+  metadata.gz: 84290e10ffed3c993f0c121186f8eb3b52768dddc8e10670e6c829df46ba3b40253f251c4bbd932e05ec7f4b3e606947173b2fa4282efcacd48d08fe5166b989
+  data.tar.gz: 4144ede9f1489085ccff05718451a71dc92c44d50feeedb6a472311991d20b8abaad0a18cdd679f7fd8ac4339085a410068e0dc61a992db1d88e37af0e7c255e

data/README.md

@@ -1,8 +1,8 @@
-![Code quality and coverage for coding agents](https://raw.githubusercontent.com/supercorp-ai/supercov/main/supercov.jpg)
+![Coverage, security and code quality for coding agents](https://raw.githubusercontent.com/supercorp-ai/supercov/main/supercov.jpg)
 
-**Code quality and coverage for coding agents**
+**Coverage, security and code quality for coding agents**
 
-**Supercov tells your coding agent what to fix and what to test.** It scores your code quality with [Jev](https://typesafe.ai), runs the test command you already use, and turns uncovered paths into small, actionable queries. Your agent picks a target, writes a focused test or a focused refactor, proves what improved, and keeps going.
+**Supercov tells your coding agent what to fix and what to test.** It scores your code quality and flags security risks with [Jev](https://typesafe.ai), runs the test command you already use, and turns uncovered paths into small, actionable queries. Your agent picks a target, writes a focused test or a focused refactor, proves what improved, and keeps going.
 
 Paste this to your coding agent to start:
 
@@ -16,6 +16,8 @@ Scoring needs a [TypeSafe AI](https://typesafe.ai) API key, and your coding agen
 
 Supported languages: [JavaScript](https://supercov.com/docs/javascript) · [TypeScript](https://supercov.com/docs/javascript) · [Rust](https://supercov.com/docs/rust) · [Python](https://supercov.com/docs/python) · [Ruby](https://supercov.com/docs/ruby) · [Go](https://supercov.com/docs/go) · [Java](https://supercov.com/docs/java) · [Kotlin](https://supercov.com/docs/kotlin).
 
+In Claude Code, Codex and Gemini CLI you can also [install it as a plugin](#give-supercov-a-job).
+
 Supported by [Supercorp](https://supercorp.ai).
 
 [Agent workflow](https://supercov.com/docs/agent-loop): ask your coding agent
@@ -56,6 +58,18 @@ Jev charges for what it reads and nothing for what it writes, so a megabyte of
 source costs a little over a cent. Answers are cached by content, so a second
 run pays only for what changed. See [Understanding quality](docs/quality.md).
 
+## Find security risks
+
+```bash
+npx supercov security
+npx supercov security patch   # what a change introduced
+```
+
+Twelve security checks asked of every file with the same key, from injection
+and secrets in source to paths and redirects taken from a request. Nothing is
+averaged: a file is clean, or it names what fired, with the line and the code on
+it where Jev confirms one. See [Security surface](docs/security.md).
+
 ## Start with the suite you already have
 
 ```bash
@@ -102,6 +116,19 @@ npx supercov -- npm test
 npx supercov diff <previous-run-id> latest
 ```
 
+Want to hand the evidence to a person? Generate one private, interactive file:
+
+```bash
+npx supercov report
+```
+
+The report opens in your browser with up to ten recent runs in a visual history.
+Selecting a run compares it with the previous snapshot automatically. It has no
+server, external assets, account, or file picker. It is written to
+`.supercov/reports/`, where the store's own `.gitignore` keeps it out of git.
+You can attach that one file directly to a pull request; a reviewer downloads
+it and double-clicks it.
+
 Use whichever complete test command the repository already trusts:
 
 ```bash
@@ -143,6 +170,37 @@ exports the editor schema; `assertions validate --file <path>` checks JSON synta
 
 Paste one of these prompts into Claude Code, Codex, Cursor, Gemini CLI, GitHub Copilot, or any coding agent that can run terminal commands.
 
+Or install the agent skill, and your agent reaches for Supercov on its own when you ask for tests, coverage, refactoring or a security scan. In Claude Code:
+
+```text
+/plugin marketplace add supercorp-ai/supercov
+/plugin install supercov@supercov
+```
+
+In Codex:
+
+```bash
+codex plugin marketplace add supercorp-ai/supercov
+codex plugin add supercov@supercov
+```
+
+In Gemini CLI:
+
+```bash
+gemini extensions install https://github.com/supercorp-ai/supercov
+```
+
+For Cursor, GitHub Copilot and other agents that read skills: `npx skills add supercorp-ai/supercov`.
+
+The Claude Code plugin and the Gemini CLI extension also add four commands you can type:
+
+| Command | What it does |
+| --- | --- |
+| `/supercov:coverage [test command]` | Writes one test for code no test reaches, and reports coverage before and after |
+| `/supercov:security [patch]` | Scans the repository, or a change, for security vulnerabilities |
+| `/supercov:quality [patch]` | Ranks files by code smells, or checks what a change introduced |
+| `/supercov:review [--base ref]` | Checks a branch or uncommitted change for security and quality problems |
+
 ### Write the first useful test
 
 ```text
@@ -286,6 +344,9 @@ npx supercov runs latest line app/checkout/session.ts:64
 
 # What changed between two runs
 npx supercov diff <previous-run-id> latest
+
+# A portable interactive report for a person
+npx supercov report
 ```
 
 Collections accept `--limit` and `--offset` and print a copyable next-page command. Machine-readable output is available with `--json` when an integration needs it.
@@ -299,9 +360,9 @@ The Supercov CLI does not contact a Supercov service during a coverage run. Pack
 Supercov does not rewrite your source files, tests, imports, reporter list, runner configuration, dependency tree, or normal build output. An existing user-created `supercov/` directory is never adopted.
 
 ```bash
-npx supercov clean --dry-run   # preview cleanup
-npx supercov clean --keep 20   # keep the 20 newest runs
-npx supercov clean             # remove all runs and the build cache
+npx supercov runs clean --dry-run   # preview cleanup
+npx supercov runs clean --keep 20   # keep the 20 newest runs
+npx supercov runs clean             # remove all runs and the build cache
 ```
 
 ## Documentation
@@ -315,6 +376,7 @@ npx supercov clean             # remove all runs and the build cache
 - [Supported languages and test suites](https://supercov.com/docs/supported-suites)
 - [Understanding coverage](https://supercov.com/docs/coverage-model)
 - [Runs and evidence](https://supercov.com/docs/evidence)
+- [Portable HTML reports](https://supercov.com/docs/reports)
 - [Files, privacy, and cleanup](https://supercov.com/docs/workspace-isolation)
 - [Trusting a result](https://supercov.com/docs/verification)
 - [Speed and storage](https://supercov.com/docs/performance)
@@ -328,3 +390,4 @@ npx supercov clean             # remove all runs and the build cache
 - [@DaVinciTachyon](https://github.com/DaVinciTachyon)
 - [@Uhbif2](https://github.com/Uhbif2)
 - [@maik-intellicoach](https://github.com/maik-intellicoach)
+- [@untitaker](https://github.com/untitaker)

data/lib/supercov.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Supercov
-  VERSION = "1.2.0"
+  VERSION = "2.0.1"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: supercov
 version: !ruby/object:Gem::Version
-  version: 1.2.0
+  version: 2.0.1
 platform: x86_64-linux-gnu
 authors:
 - Supercorp
@@ -44,5 +44,5 @@ required_rubygems_version: !ruby/object:Gem::Requirement
 requirements: []
 rubygems_version: 3.6.9
 specification_version: 4
-summary: Code quality and coverage for coding agents
+summary: Coverage, security and code quality for coding agents
 test_files: []