@sasjs/cli 6.2.7 → 6.4.0

package/README.md

@@ -17,6 +17,7 @@
 - Scaffold a new SAS App in seconds (`sasjs create myApp -t jobs`)
 - Compile / Build SAS Jobs, Services & Macros _locally_ and deploy / execute _remotely_, in isolation from other developers (`sasjs cbd`)
 - Compile a single Job, Service or Test without touching the rest of the build (`sasjs compile identify --source sasjs/jobs/daily/load.sas`)
+- Write the test coverage report to `sasjsbuild/coverage.json` on every compile, ready for a CI job to publish
 - No dependency on the server filesystem
 - Optionally synchronise a local folder onto the server filesystem using `sasjs fs`
 - Trigger Viya Jobs & Flows (`sasjs job execute` / `sasjs flow execute`)

package/build/commands/auth/authCommand.js

@@ -68,15 +68,17 @@ var syntax = 'auth [subCommand] [options]';
 var usage = 'sasjs auth login --target <target-name> | sasjs auth [options]';
 var description = "Authenticates against the specified target.\n" +
     "With the 'login' subCommand, authentication is performed with a SAS username and password " +
-    "(no OAuth client/secret required, SASVIYA targets only) and the resulting tokens are saved.\n" +
+    "(no OAuth client/secret required) and the resulting tokens are saved. " +
+    "Supported on SASVIYA targets, and on SASJS targets, where the server's own local login is used.\n" +
     "Without a subCommand, behaves like 'sasjs add cred' (client/secret based authentication).\n" +
     "\n" +
     "Non-interactive use (CI/agents): set SAS_USERNAME and SAS_PASSWORD environment variables, " +
-    "or pipe the password and use --password-stdin.";
+    "or pipe the password and use --password-stdin. On a SASJS target, set SASJS_CLIENT to the " +
+    "registered client id when the account is not an administrator.";
 var examples = [
     {
         command: 'sasjs auth login --target <target-name>',
-        description: 'Logs in with SAS username/password (no client/secret required).'
+        description: 'Logs in with SAS username/password (no client/secret required) on a SASVIYA or SASJS target.'
     },
     {
         command: 'sasjs auth login -t <target-name>',

package/build/commands/auth/login.d.ts

@@ -1,11 +1,17 @@
 import { Target } from '@sasjs/utils';
 /**
- * Authenticates against a SASVIYA target using a SAS username and password
- * (OAuth2 resource owner password grant against the built-in, secret-less
- * `sas.cli` client) and persists the resulting token pair. This enables all
+ * Authenticates against a SASVIYA or SASJS target using a SAS username and
+ * password, and persists the resulting token pair. This enables all
  * authenticated commands (`sasjs run`, `sasjs deploy`, etc.) on estates where
  * no administrator-registered OAuth client/secret is available.
  *
+ * The two server types issue tokens differently: SASVIYA uses the OAuth2
+ * resource owner password grant against the built-in, secret-less `sas.cli`
+ * client, while SASJS has no password grant and is authenticated through the
+ * server's own local login (@see getTokensWithSasjsLogin). Everything else -
+ * how the credentials are obtained, and the rule that nothing is prompted for
+ * when there is no TTY - is shared by both.
+ *
  * Credentials are resolved in this order (highest precedence first):
  *
  *   Username:  SAS_USERNAME env var  >  interactive prompt (TTY only)

package/build/commands/auth/login.js

@@ -139,12 +139,18 @@ var readPasswordFromStdin = function () { return __awaiter(void 0, void 0, void
     });
 }); };
 /**
- * Authenticates against a SASVIYA target using a SAS username and password
- * (OAuth2 resource owner password grant against the built-in, secret-less
- * `sas.cli` client) and persists the resulting token pair. This enables all
+ * Authenticates against a SASVIYA or SASJS target using a SAS username and
+ * password, and persists the resulting token pair. This enables all
  * authenticated commands (`sasjs run`, `sasjs deploy`, etc.) on estates where
  * no administrator-registered OAuth client/secret is available.
  *
+ * The two server types issue tokens differently: SASVIYA uses the OAuth2
+ * resource owner password grant against the built-in, secret-less `sas.cli`
+ * client, while SASJS has no password grant and is authenticated through the
+ * server's own local login (@see getTokensWithSasjsLogin). Everything else -
+ * how the credentials are obtained, and the rule that nothing is prompted for
+ * when there is no TTY - is shared by both.
+ *
  * Credentials are resolved in this order (highest precedence first):
  *
  *   Username:  SAS_USERNAME env var  >  interactive prompt (TTY only)
@@ -175,15 +181,16 @@ var authLogin = function (target_1) {
         args_1[_i - 1] = arguments[_i];
     }
     return __awaiter(void 0, __spreadArray([target_1], __read(args_1), false), void 0, function (target, insecure, passwordStdin) {
-        var isTty, envUser, envPass, user, hint, pass, promptedPass, _a, access_token, refresh_token, _b, id, name;
-        var _c, _d, _e;
+        var isTty, envUser, envPass, user, hint, pass, promptedPass, _a, access_token_1, refresh_token_1, client, displayName, _b, access_token, refresh_token, _c, id, name;
+        var _d, _e, _f, _g, _h;
         if (insecure === void 0) { insecure = false; }
         if (passwordStdin === void 0) { passwordStdin = false; }
-        return __generator(this, function (_f) {
-            switch (_f.label) {
+        return __generator(this, function (_j) {
+            switch (_j.label) {
                 case 0:
-                    if (target.serverType !== utils_1.ServerType.SasViya) {
-                        throw new Error("'sasjs auth login' is only supported for SASVIYA targets. " +
+                    if (target.serverType !== utils_1.ServerType.SasViya &&
+                        target.serverType !== utils_1.ServerType.Sasjs) {
+                        throw new Error("'sasjs auth login' is supported for SASVIYA and SASJS targets. " +
                             "Target '".concat(target.name, "' is of type '").concat(target.serverType, "'. ") +
                             "Use 'sasjs add cred -t ".concat(target.name, "' instead."));
                     }
@@ -192,7 +199,7 @@ var authLogin = function (target_1) {
                     }
                     if (insecure) {
                         target = new utils_1.Target(__assign(__assign({}, target.toJson(false)), { httpsAgentOptions: __assign(__assign({}, target.httpsAgentOptions), { allowInsecureRequests: true, rejectUnauthorized: false }) }));
-                        (_c = process.logger) === null || _c === void 0 ? void 0 : _c.warn('Executing with insecure connection.');
+                        (_d = process.logger) === null || _d === void 0 ? void 0 : _d.warn('Executing with insecure connection.');
                     }
                     isTty = !!process.stdin.isTTY;
                     envUser = process.env.SAS_USERNAME;
@@ -204,7 +211,7 @@ var authLogin = function (target_1) {
                     if (!(isTty && !passwordStdin)) return [3 /*break*/, 3];
                     return [4 /*yield*/, (0, utils_1.getString)('Please enter your SAS username', function (v) { return !!v || 'Username is required.'; })];
                 case 2:
-                    user = _f.sent();
+                    user = _j.sent();
                     return [3 /*break*/, 4];
                 case 3:
                     hint = passwordStdin
@@ -215,7 +222,7 @@ var authLogin = function (target_1) {
                     if (!passwordStdin) return [3 /*break*/, 6];
                     return [4 /*yield*/, readPasswordFromStdin()];
                 case 5:
-                    pass = _f.sent();
+                    pass = _j.sent();
                     if (!pass) {
                         throw new Error("--password-stdin was specified but no password was read from stdin. " +
                             "Pipe the password, e.g. echo \"$SAS_PASSWORD\" | sasjs auth login --password-stdin -t ".concat(target.name, "."));
@@ -237,23 +244,35 @@ var authLogin = function (target_1) {
                             }
                         })];
                 case 8:
-                    promptedPass = (_f.sent()).pass;
+                    promptedPass = (_j.sent()).pass;
                     pass = promptedPass;
                     return [3 /*break*/, 10];
                 case 9: throw new Error("A SAS password is required but was not provided. " +
                     "Set the SAS_PASSWORD environment variable, or pipe the password and use --password-stdin " +
                     "(e.g. echo \"$SAS_PASSWORD\" | sasjs auth login --password-stdin -t ".concat(target.name, ")."));
-                case 10: return [4 /*yield*/, (0, utils_2.getTokensWithPasswordGrant)(target, user, pass)];
+                case 10:
+                    if (!(target.serverType === utils_1.ServerType.Sasjs)) return [3 /*break*/, 13];
+                    return [4 /*yield*/, (0, utils_2.getTokensWithSasjsLogin)(target, user, pass, process.env.SASJS_CLIENT)];
                 case 11:
-                    _a = _f.sent(), access_token = _a.access_token, refresh_token = _a.refresh_token;
-                    return [4 /*yield*/, (0, utils_2.fetchLoggedInUser)(target, access_token)];
+                    _a = _j.sent(), access_token_1 = _a.access_token, refresh_token_1 = _a.refresh_token, client = _a.client, displayName = _a.displayName;
+                    return [4 /*yield*/, (0, utils_2.saveTokens)(target.name, access_token_1, refresh_token_1, client)];
                 case 12:
-                    _b = _f.sent(), id = _b.id, name = _b.name;
+                    _j.sent();
+                    (_e = process.logger) === null || _e === void 0 ? void 0 : _e.success("Logged in as ".concat(displayName || user, " on ").concat(target.serverUrl, "."));
+                    (_f = process.logger) === null || _f === void 0 ? void 0 : _f.info("The access token is valid for the duration configured on the server " +
+                        "(24 hours by default). When it expires, re-run 'sasjs auth login -t ".concat(target.name, "'."));
+                    return [2 /*return*/];
+                case 13: return [4 /*yield*/, (0, utils_2.getTokensWithPasswordGrant)(target, user, pass)];
+                case 14:
+                    _b = _j.sent(), access_token = _b.access_token, refresh_token = _b.refresh_token;
+                    return [4 /*yield*/, (0, utils_2.fetchLoggedInUser)(target, access_token)];
+                case 15:
+                    _c = _j.sent(), id = _c.id, name = _c.name;
                     return [4 /*yield*/, (0, utils_2.saveTokens)(target.name, access_token, refresh_token || '')];
-                case 13:
-                    _f.sent();
-                    (_d = process.logger) === null || _d === void 0 ? void 0 : _d.success("Logged in as ".concat(id || 'unknown user').concat(name ? " (".concat(name, ")") : '', " on ").concat(target.serverUrl, "."));
-                    (_e = process.logger) === null || _e === void 0 ? void 0 : _e.info("The access token is valid for the duration configured on the server (12 hours by default). " +
+                case 16:
+                    _j.sent();
+                    (_g = process.logger) === null || _g === void 0 ? void 0 : _g.success("Logged in as ".concat(id || 'unknown user').concat(name ? " (".concat(name, ")") : '', " on ").concat(target.serverUrl, "."));
+                    (_h = process.logger) === null || _h === void 0 ? void 0 : _h.info("The access token is valid for the duration configured on the server (12 hours by default). " +
                         "When it expires, re-run 'sasjs auth login -t ".concat(target.name, "'."));
                     return [2 /*return*/];
             }

package/build/commands/auth/spec/login.spec.js

@@ -103,7 +103,7 @@ var utils_2 = require("@sasjs/utils");
 // Mock the three orchestration dependencies that authLogin delegates to.
 // We spy on the utils barrel (../../utils) which re-exports from auth.ts and
 // config.ts, so the spies are the same references login.ts resolves at runtime.
-jest.mock('../../../utils', function () { return (__assign(__assign({}, jest.requireActual('../../../utils')), { getTokensWithPasswordGrant: jest.fn(), fetchLoggedInUser: jest.fn(), saveTokens: jest.fn() })); });
+jest.mock('../../../utils', function () { return (__assign(__assign({}, jest.requireActual('../../../utils')), { getTokensWithPasswordGrant: jest.fn(), getTokensWithSasjsLogin: jest.fn(), fetchLoggedInUser: jest.fn(), saveTokens: jest.fn() })); });
 var viyaTarget = new utils_1.Target({
     name: 'viya-test',
     serverType: utils_1.ServerType.SasViya,
@@ -111,6 +111,12 @@ var viyaTarget = new utils_1.Target({
     appLoc: '/Public/test',
     contextName: 'test context'
 });
+var sasjsTarget = new utils_1.Target({
+    name: 'sasjs-test',
+    serverType: utils_1.ServerType.Sasjs,
+    serverUrl: 'https://sasjs.example.com',
+    appLoc: '/Public/app'
+});
 var sas9Target = new utils_1.Target({
     name: 'sas9-test',
     serverType: utils_1.ServerType.Sas9,
@@ -157,10 +163,10 @@ describe('authLogin', function () {
     // ---------------------------------------------------------------------------
     // Guard 1: Non-Viya rejection
     // ---------------------------------------------------------------------------
-    it('should reject when target.serverType is not SASVIYA', function () { return __awaiter(void 0, void 0, void 0, function () {
+    it('should reject when target.serverType is SAS9', function () { return __awaiter(void 0, void 0, void 0, function () {
         return __generator(this, function (_a) {
             switch (_a.label) {
-                case 0: return [4 /*yield*/, expect(authLoginModule.authLogin(sas9Target)).rejects.toThrow("'sasjs auth login' is only supported for SASVIYA targets.")];
+                case 0: return [4 /*yield*/, expect(authLoginModule.authLogin(sas9Target)).rejects.toThrow("'sasjs auth login' is supported for SASVIYA and SASJS targets.")];
                 case 1:
                     _a.sent();
                     expect(utilsModule.getTokensWithPasswordGrant).not.toHaveBeenCalled();
@@ -672,4 +678,98 @@ describe('authLogin', function () {
             }
         });
     }); });
+    // ---------------------------------------------------------------------------
+    // SASJS: local login against a SASjs Server target
+    // ---------------------------------------------------------------------------
+    describe('SASJS target', function () {
+        beforeEach(function () {
+            delete process.env.SASJS_CLIENT;
+            utilsModule.getTokensWithSasjsLogin.mockResolvedValue({
+                access_token: 'sasjs-access',
+                refresh_token: 'sasjs-refresh',
+                client: 'client-id-1',
+                displayName: 'SASJS Test User'
+            });
+        });
+        afterEach(function () {
+            delete process.env.SASJS_CLIENT;
+        });
+        it('should mint tokens with the SASJS login flow instead of the password grant', function () { return __awaiter(void 0, void 0, void 0, function () {
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0: return [4 /*yield*/, authLoginModule.authLogin(sasjsTarget)];
+                    case 1:
+                        _a.sent();
+                        expect(utilsModule.getTokensWithPasswordGrant).not.toHaveBeenCalled();
+                        expect(utilsModule.getTokensWithSasjsLogin).toHaveBeenCalledWith(expect.objectContaining({ name: 'sasjs-test' }), 'test-user', 'test-pass', undefined);
+                        return [2 /*return*/];
+                }
+            });
+        }); });
+        it('should persist the client alongside the tokens', function () { return __awaiter(void 0, void 0, void 0, function () {
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0: return [4 /*yield*/, authLoginModule.authLogin(sasjsTarget)];
+                    case 1:
+                        _a.sent();
+                        expect(utilsModule.saveTokens).toHaveBeenCalledWith('sasjs-test', 'sasjs-access', 'sasjs-refresh', 'client-id-1');
+                        expect(utilsModule.fetchLoggedInUser).not.toHaveBeenCalled();
+                        return [2 /*return*/];
+                }
+            });
+        }); });
+        it('should pass SASJS_CLIENT through so CI can pin the client', function () { return __awaiter(void 0, void 0, void 0, function () {
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0:
+                        process.env.SASJS_CLIENT = 'pinned-client';
+                        return [4 /*yield*/, authLoginModule.authLogin(sasjsTarget)];
+                    case 1:
+                        _a.sent();
+                        expect(utilsModule.getTokensWithSasjsLogin).toHaveBeenCalledWith(expect.objectContaining({ name: 'sasjs-test' }), 'test-user', 'test-pass', 'pinned-client');
+                        return [2 /*return*/];
+                }
+            });
+        }); });
+        it('should authenticate from env vars with no TTY, as CI would', function () { return __awaiter(void 0, void 0, void 0, function () {
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0:
+                        process.env.SAS_USERNAME = 'ci-user';
+                        process.env.SAS_PASSWORD = 'ci-pass';
+                        Object.defineProperty(process.stdin, 'isTTY', {
+                            value: false,
+                            configurable: true
+                        });
+                        return [4 /*yield*/, authLoginModule.authLogin(sasjsTarget)];
+                    case 1:
+                        _a.sent();
+                        expect(utilsModule.getTokensWithSasjsLogin).toHaveBeenCalledWith(expect.objectContaining({ name: 'sasjs-test' }), 'ci-user', 'ci-pass', undefined);
+                        expect(utils_2.getString).not.toHaveBeenCalled();
+                        expect(prompts_1.default).not.toHaveBeenCalled();
+                        return [2 /*return*/];
+                }
+            });
+        }); });
+        it('should fall back to the username when the server reports no display name', function () { return __awaiter(void 0, void 0, void 0, function () {
+            var success;
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0:
+                        ;
+                        utilsModule.getTokensWithSasjsLogin.mockResolvedValue({
+                            access_token: 'sasjs-access',
+                            refresh_token: 'sasjs-refresh',
+                            client: 'client-id-1'
+                        });
+                        success = jest.spyOn(process.logger, 'success');
+                        return [4 /*yield*/, authLoginModule.authLogin(sasjsTarget)];
+                    case 1:
+                        _a.sent();
+                        expect(success).toHaveBeenCalledWith(expect.stringContaining('Logged in as test-user on'));
+                        return [2 /*return*/];
+                }
+            });
+        }); });
+    });
 });

package/build/commands/compile/internal/compileTestFile.d.ts

@@ -1,5 +1,7 @@
 import { CompileTree, Target } from '@sasjs/utils';
 import { TestFlow } from '../../../types';
+/** The coverage report `sasjs compile` writes to the build folder. */
+export declare const coverageFileName = "coverage.json";
 /**
  * Resolves the relative destination fragment for a compiled test file inside
  * `sasjsbuild/tests` - either just the file's basename (saveToRoot, used for

package/build/commands/compile/internal/compileTestFile.js

@@ -64,7 +64,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.compileTestFlow = exports.getTestFileDestinationFragment = void 0;
+exports.compileTestFlow = exports.getTestFileDestinationFragment = exports.coverageFileName = void 0;
 exports.compileTestFile = compileTestFile;
 exports.copyTestMacroFiles = copyTestMacroFiles;
 var utils_1 = require("@sasjs/utils");
@@ -75,6 +75,8 @@ var config_1 = require("../../../utils/config");
 var file_1 = require("../../../utils/file");
 var _1 = require("./");
 var getFileName = function (filePath) { return path_1.default.parse(filePath).base; };
+/** The coverage report `sasjs compile` writes to the build folder. */
+exports.coverageFileName = 'coverage.json';
 /**
  * Resolves the relative destination fragment for a compiled test file inside
  * `sasjsbuild/tests` - either just the file's basename (saveToRoot, used for
@@ -232,7 +234,7 @@ var compileTestFlow = function (target) { return __awaiter(void 0, void 0, void
 }); };
 exports.compileTestFlow = compileTestFlow;
 var printTestCoverage = function (testFlow, buildDestinationFolder, target) { return __awaiter(void 0, void 0, void 0, function () {
-    var toCover, covered, extraTests, serviceFolder, collectCoverage, jobFolder, macroFolders, filter, coverage, notCovered, coveredServices, servicesToCover, notCoveredServices, coveredJobs, jobsToCover, notCoveredJobs, coveredMacros, macrosToCover, notCoveredMacros, calculateCoverage, formatCoverage;
+    var toCover, covered, extraTests, serviceFolder, collectCoverage, jobFolder, macroFolders, filter, coveredServices, servicesToCover, coveredJobs, jobsToCover, coveredMacros, macrosToCover, coverage, markCoverage, summarize, formatCoverage, summary, report;
     var _a, _b, _c;
     return __generator(this, function (_d) {
         switch (_d.label) {
@@ -315,74 +317,52 @@ var printTestCoverage = function (testFlow, buildDestinationFolder, target) { re
                 filter = function (files, type) {
                     return files.filter(function (file) { return new RegExp("^".concat(type)).test(file); });
                 };
-                coverage = {};
-                notCovered = toCover.filter(function (tc) { return !covered.includes(tc); });
                 coveredServices = filter(covered, types_1.CoverageType.service);
                 servicesToCover = filter(toCover, types_1.CoverageType.service);
-                notCoveredServices = filter(notCovered, types_1.CoverageType.service);
-                notCoveredServices.forEach(function (file, i) {
-                    coverage[file] = {
-                        Type: types_1.CoverageType.service,
-                        Coverage: types_1.CoverageState.notCovered
-                    };
-                });
                 coveredJobs = filter(covered, types_1.CoverageType.job);
                 jobsToCover = filter(toCover, types_1.CoverageType.job);
-                notCoveredJobs = filter(notCovered, types_1.CoverageType.job);
-                notCoveredJobs.forEach(function (file, i) {
-                    coverage[file] = {
-                        Type: types_1.CoverageType.job,
-                        Coverage: types_1.CoverageState.notCovered
-                    };
-                });
                 coveredMacros = filter(covered, types_1.CoverageType.macro);
                 macrosToCover = filter(toCover, types_1.CoverageType.macro);
-                notCoveredMacros = filter(notCovered, types_1.CoverageType.macro);
-                if (!notCoveredMacros.length) return [3 /*break*/, 6];
-                return [4 /*yield*/, (0, utils_1.asyncForEach)(macroFolders, function (macroFolder) { return __awaiter(void 0, void 0, void 0, function () {
-                        var macros, macroTypeRegExp;
-                        return __generator(this, function (_a) {
-                            switch (_a.label) {
-                                case 0: return [4 /*yield*/, (0, utils_1.listFilesAndSubFoldersInFolder)(macroFolder)];
-                                case 1: return [4 /*yield*/, (_a.sent()).filter(function (file) { return !(0, utils_1.isTestFile)(file); })];
-                                case 2:
-                                    macros = _a.sent();
-                                    macroTypeRegExp = new RegExp("^macros".concat(utils_1.pathSepEscaped));
-                                    notCoveredMacros = notCoveredMacros.map(function (macro) {
-                                        return macros.includes(macro.replace(macroTypeRegExp, ''))
-                                            ? macro.replace(macroTypeRegExp, macroFolder + path_1.default.sep)
-                                            : macro;
-                                    });
-                                    return [2 /*return*/];
-                            }
-                        });
-                    }); })];
-            case 5:
-                _d.sent();
-                _d.label = 6;
-            case 6:
-                notCoveredMacros.forEach(function (file, i) {
-                    coverage[file] = {
-                        Type: types_1.CoverageType.macro,
-                        Coverage: types_1.CoverageState.notCovered
-                    };
-                });
+                coverage = {};
+                markCoverage = function (type, filesToCover, coveredFiles) {
+                    return filesToCover.forEach(function (file) {
+                        coverage[file] = {
+                            Type: type,
+                            Coverage: coveredFiles.includes(file)
+                                ? types_1.CoverageState.covered
+                                : types_1.CoverageState.notCovered
+                        };
+                    });
+                };
+                markCoverage(types_1.CoverageType.service, servicesToCover, coveredServices);
+                markCoverage(types_1.CoverageType.job, jobsToCover, coveredJobs);
+                markCoverage(types_1.CoverageType.macro, macrosToCover, coveredMacros);
                 extraTests.forEach(function (file) {
                     coverage[file] = {
                         Type: types_1.CoverageType.test,
                         Coverage: types_1.CoverageState.standalone
                     };
                 });
-                calculateCoverage = function (covered, from) {
-                    return (Math.round((covered / from) * 100) || 0) + '%';
-                };
-                formatCoverage = function (type, covered, toCover) {
+                summarize = function (cov, toCov) { return ({
+                    covered: cov.length,
+                    total: toCov.length,
+                    percentage: toCov.length ? Math.round((cov.length / toCov.length) * 100) : 0
+                }); };
+                formatCoverage = function (type, summary) {
                     var _a;
-                    return toCover.length
-                        ? (_a = process.logger) === null || _a === void 0 ? void 0 : _a.info("".concat(type, " coverage: ").concat(covered.length, "/").concat(toCover.length, " (").concat(chalk_1.default.greenBright(calculateCoverage(covered.length, toCover.length)), ")"))
+                    return summary.total
+                        ? (_a = process.logger) === null || _a === void 0 ? void 0 : _a.info("".concat(type, " coverage: ").concat(summary.covered, "/").concat(summary.total, " (").concat(chalk_1.default.greenBright("".concat(summary.percentage, "%")), ")"))
                         : null;
                 };
+                summary = {
+                    services: summarize(coveredServices, servicesToCover),
+                    jobs: summarize(coveredJobs, jobsToCover),
+                    macros: summarize(coveredMacros, macrosToCover),
+                    overall: summarize(covered, toCover)
+                };
                 (_a = process.logger) === null || _a === void 0 ? void 0 : _a.info('Test coverage:');
+                // The table renders the same map coverage.json serialises, so a reader sees
+                // every file - covered rows included - under the key the report uses.
                 (_b = process.logger) === null || _b === void 0 ? void 0 : _b.table(Object.keys(coverage).map(function (key) { return [
                     key,
                     coverage[key].Type,
@@ -390,13 +370,21 @@ var printTestCoverage = function (testFlow, buildDestinationFolder, target) { re
                 ]; }), {
                     head: ['File', 'Type', 'Coverage']
                 });
-                formatCoverage('Services', coveredServices, servicesToCover);
-                formatCoverage('Jobs', coveredJobs, jobsToCover);
-                formatCoverage('Macros', coveredMacros, macrosToCover);
-                formatCoverage('Overall', covered, toCover);
+                formatCoverage('Services', summary.services);
+                formatCoverage('Jobs', summary.jobs);
+                formatCoverage('Macros', summary.macros);
+                formatCoverage('Overall', summary.overall);
                 (_c = process.logger) === null || _c === void 0 ? void 0 : _c.log('');
-                return [4 /*yield*/, (0, utils_1.createFile)(path_1.default.join(buildDestinationFolder, 'testFlow.json'), JSON.stringify(testFlow, null, 2))];
-            case 7:
+                return [4 /*yield*/, (0, utils_1.createFile)(path_1.default.join(buildDestinationFolder, 'testFlow.json'), JSON.stringify(testFlow, null, 2))
+                    // The numbers are already computed and rendered above, so the report costs
+                    // one small file - which lets a CI job publish the figures instead of
+                    // scraping the log.
+                ];
+            case 5:
+                _d.sent();
+                report = { summary: summary, files: coverage };
+                return [4 /*yield*/, (0, utils_1.createFile)(path_1.default.join(buildDestinationFolder, exports.coverageFileName), JSON.stringify(report, null, 2))];
+            case 6:
                 _d.sent();
                 return [2 /*return*/];
         }