@t09tanaka/test-gates 0.2.0 → 0.3.0

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # Changelog
 
+## 0.3.0
+
+Three defaults move to the strict side. A project that passed with 0.2.0 can fail with 0.3.0 without any change of its own; each case below says what to do.
+
+### Changed (breaking)
+
+- `settings.mutation.maxTimeouts` defaults to `0` (was: no limit). A mutant that times out outside `expectedTimeouts` now fails `test-gates mutation`. Run again with less load (`-- --concurrency 1`) first. For a mutant that can never finish, add it to `expectedTimeouts` of the gate with the reason. To tolerate some for now, set `settings.mutation.maxTimeouts` to a number.
+- `test-gates check` fails, instead of warning, when the gate run uses Vitest below 4 with the v8 provider and neither `istanbul` nor `experimentalAstAwareRemapping: true`. Use `createVitestGatesConfig({ coverageProvider: 'istanbul' })` (needs `@vitest/coverage-istanbul`), or move to Vitest 4.
+- A gate that reads `process.env` fails `test-gates check` (new built-in `forbiddenSource` rule). Take the value as an argument and read the environment in the caller. `settings.forbiddenSource.defaults: false` turns the built-in rules off, including the `'use client'` / `'use server'` one.
+
+### Removed
+
+- The `warning:` line of `test-gates check`. Nothing is reported as a warning any more.
+
 ## 0.2.0
 
 Everything added here is opt-in. With an unchanged `test-gates.json` and unchanged config files, 0.2.0 gives the same verdicts, exit codes and summary line as 0.1.0. The one visible difference is a warning on stderr from `test-gates check` for Vitest 3 with the v8 provider (see below); it does not change the exit code.

package/README.md

@@ -199,12 +199,14 @@ Static checks, before the gate run. Reports every violation as `file:line: reaso
 - Every gate exists, and so does its spec. **The check is case-sensitive** even on macOS and Windows, because CI on Linux is.
 - No path is listed twice, or in both `gates` and `candidates`. Candidates exist.
 - A gate has no decorator (`@Name(` at the start of a line) and no runtime import of a framework, database client or SDK. `import type` is ignored.
+- A gate does not read `process.env` (since 0.3.0). What comes from the environment is an input: take it as an argument.
 - A gate and its spec have no coverage ignore directive (`istanbul ignore`, `c8 ignore`, `v8 ignore`).
 - A spec has no `.skip`, `.only`, `.todo`, `xit`, `xdescribe`, `fit`, `fdescribe`, `.skipIf`, `.runIf`, `.fails`.
 - A spec does not `jest.mock` / `vi.mock` the module it is supposed to test.
 - A gate has no `Stryker disable` / `Stryker restore` comment. Such a comment turns off a whole line for a whole mutator, which takes non-equivalent mutants out with it.
 - `equivalentMutants` entries are well formed and each has a `reason`.
 - The Stryker config does not use `excludedMutations`, `ignoreStatic` or `ignorers`.
+- A Vitest gate run below Vitest 4 does not use the plain v8 coverage provider (since 0.3.0), see [Vitest: v8 or istanbul](#vitest-v8-or-istanbul).
 
 ### `test-gates mutation [-- <stryker arguments>]`
 
@@ -228,9 +230,9 @@ The run also fails when
 - two allowances point at the same mutant, or an allowance has no `reason`,
 - a gate is missing from the report or has no mutants, or no mutant was evaluated at all,
 - the report was made from a different version of a gate than the one on disk.
-- more mutants timed out than `settings.mutation.maxTimeouts` allows (only when that setting is present, see [Timeouts](#timeouts)).
+- a mutant timed out outside `expectedTimeouts`, or more of them than `settings.mutation.maxTimeouts` allows (see [Timeouts](#timeouts)).
 
-`Timeout` counts as detected, but its count is always printed on its own (`detected N (timeout M)`). On a loaded machine mutants time out that would otherwise survive, so a rising timeout count means the run may be hiding survivors: rerun with lower `--concurrency`.
+`Timeout` counts as detected, but its count is always printed on its own (`detected N (timeout M)`). On a loaded machine mutants time out that would otherwise survive, so a timeout nobody has explained fails the run.
 
 On failure every unallowed survivor is listed as `file:line:column / mutator / original → replacement / occurrence`, followed by a JSON fragment that can be pasted into `equivalentMutants`. The last line gives the real numbers, never a percentage:
 
@@ -240,7 +242,7 @@ test-gates mutation: OK (mutants 317 / detected 308 (timeout 0) / allowed equiva
 
 #### Timeouts
 
-A timeout is a detection only if the mutant really cannot finish. On a loaded machine a mutant that would have survived can time out instead, and the run looks better than it is. Two opt-in controls (since 0.2.0):
+A timeout is a detection only if the mutant really cannot finish. On a loaded machine a mutant that would have survived can time out instead, and the run looks better than it is. Since 0.3.0 a timeout therefore fails the run unless the gate lists it:
 
 ```json
 {
@@ -258,13 +260,12 @@ A timeout is a detection only if the mutant really cannot finish. On a loaded ma
         }
       ]
     }
-  ],
-  "settings": { "mutation": { "maxTimeouts": 0 } }
+  ]
 }
 ```
 
-- `settings.mutation.maxTimeouts`: how many timeouts outside `expectedTimeouts` are tolerated. Above it the run fails with exit code 1 and lists every such mutant as `file:line:column / mutator / original → replacement`, with a fragment to paste. Not set means no limit, which is the 0.1.0 behaviour.
 - `expectedTimeouts` (per gate): mutants that turn a loop into one that never ends. Same key as `equivalentMutants` (`mutator` + `original` + `replacement`, `occurrence` when ambiguous, `reason` required).
+- `settings.mutation.maxTimeouts`: how many timeouts outside `expectedTimeouts` are tolerated, default `0`. Above it the run fails with exit code 1 and lists every such mutant as `file:line:column / mutator / original → replacement`, with a fragment to paste. Up to 0.2.0 the default was no limit; a project that cannot get its timeouts to zero yet sets a number here and lowers it.
 
 How an `expectedTimeouts` entry is judged:
 
@@ -277,7 +278,7 @@ How an `expectedTimeouts` entry is judged:
 
 `Killed` is accepted on purpose, unlike a stale `equivalentMutants` entry. A mutant that hangs is reported as `Timeout` when Stryker's timer fires first and as `Killed` when the test runner's own per-test timeout fires first; which one wins depends on the load. Failing on `Killed` would make the list flap between two runs of the same code. And nothing is hidden by accepting it: `Killed` is the best possible outcome.
 
-When the limit is exceeded, first run again with less load (`npm run test:gates:mutation -- --concurrency 1`). Add an entry only for a mutant that can never finish.
+When the run fails on a timeout, first run again with less load (`npm run test:gates:mutation -- --concurrency 1`). Add an entry only for a mutant that can never finish.
 
 ### `test-gates selfcheck [--all | --first] [-- <gate command>]`
 
@@ -360,7 +361,7 @@ All optional. Patterns are regular expressions written as JSON strings; a rule i
 | `impureImports.allow`          | none                                                         | Module patterns exempt from every rule (e.g. `^express$` where `express` is imported only for its types without `import type`)                       |
 | `impureNamedImports`           | `PrismaClient` from `@prisma/client`                         | `{ "defaults", "add": [{ "module", "names", "reason" }] }`: names banned from a module that is otherwise fine                                        |
 | `impurePaths`                  | `.vue` `.jsx` `.tsx`, `.d.ts`                                | `{ "defaults", "add" }`: gate paths that are rejected (`\\.service\\.ts$`, `^src/hooks/`)                                                            |
-| `forbiddenSource`              | `'use client'` / `'use server'`                              | `{ "defaults", "add" }`: lines that must not appear in a gate, tested one line at a time                                                             |
+| `forbiddenSource`              | `'use client'` / `'use server'`, `process.env` (0.3.0)       | `{ "defaults", "add" }`: lines that must not appear in a gate, tested one line at a time                                                             |
 | `importAliases`                | none                                                         | `[{ "prefix": "@/", "target": "src/" }]`, to recognise `jest.mock('@/x')` of the module under test                                                   |
 | `gateCommand`                  | derived from `jest.gates.config.*` / `vitest.gates.config.*` | Command `selfcheck` runs, as an array (`["jest", "--config", "jest.gates.config.js", "--maxWorkers=2"]`)                                             |
 | `selfcheck.mode`               | `all`                                                        | `all` or `first`                                                                                                                                     |
@@ -371,7 +372,7 @@ All optional. Patterns are regular expressions written as JSON strings; a rule i
 | `lcov.summaryExclude`          | none                                                         | Paths left out of the reference total (`\\.g\\.dart$`)                                                                                               |
 | `imports.mode` (0.2.0)         | `blocklist`                                                  | `allowlist` turns the import check around, see [Allowlist mode](#allowlist-mode)                                                                     |
 | `imports.allow` (0.2.0)        | none                                                         | Packages a gate may import in allowlist mode: `"decimal.js"`, `{ "pattern": "^@acme/pure-" }`, `{ "module": "@prisma/client", "names": ["Prisma"] }` |
-| `mutation.maxTimeouts` (0.2.0) | none (no limit)                                              | Timeouts tolerated outside `expectedTimeouts`, see [Timeouts](#timeouts)                                                                             |
+| `mutation.maxTimeouts` (0.2.0) | `0` (0.3.0; no limit before)                                 | Timeouts tolerated outside `expectedTimeouts`, see [Timeouts](#timeouts)                                                                             |
 
 Built-in impure imports: `@nestjs/*`, `class-validator`, `class-transformer`, `typeorm`, `sequelize`, `mongoose`, `knex`, `pg`, `mysql`, `mysql2`, `ioredis`, `redis`, `@prisma/adapter-*`, `react`, `react-dom`, `next`, `server-only`, `client-only`, `vue`, `vue-router`, `vue-i18n`, `pinia`, `nuxt`, `#app`, `#imports`, `*.vue`, `express`, `express-jwt`, `fastify`, `koa`, `rxjs`, `passport`, `passport-*`, `axios`, `openapi-fetch`, `stripe`, `nodemailer`, `firebase-admin`, `@aws-sdk/*`, `@sentry/*`, `@slack/*`, `@stripe/*`, and the Node.js modules `fs`, `http`, `https`, `http2`, `net`, `tls`, `dgram`, `dns`, `child_process`, `worker_threads`.
 
@@ -490,7 +491,7 @@ export default defineConfig(
 );
 ```
 
-The default stays `v8` because changing it would break every project that has only `@vitest/coverage-v8` installed. Instead `test-gates check` prints a warning (the exit code does not change) when it finds a `vitest.gates.config.*`, an installed Vitest below 4, and neither `istanbul` nor `experimentalAstAwareRemapping: true` in that config.
+The helper's default stays `v8` because changing it would break every project that has only `@vitest/coverage-v8` installed. Instead `test-gates check` fails (since 0.3.0; a warning in 0.2.0) when it finds a `vitest.gates.config.*`, an installed Vitest below 4, and neither `istanbul` nor `experimentalAstAwareRemapping: true` in that config. On Vitest 4 the v8 provider passes the check.
 
 ## Cost, and how to use Stryker's incremental mode
 
@@ -523,6 +524,7 @@ How the incremental file and this tool interact (covered by `test/incremental.te
 - **Stryker 10 does not start on Node.js 22.10** (`ERR_REQUIRE_ESM`). It runs on 22.14 and 22.22. On Node.js below 22.12 use Stryker 9.
 - **Do not call the gate while the spec file is being collected** (in the body of `describe`, or at module level). The mutants reached that way become _static_ mutants, and with Stryker 10 and Vitest 3 a spec file that throws during collection was reported as `Survived`, not `Killed`. Call the gate inside `it` / `beforeEach`.
 - **Jest treats an empty `testMatch` as its default pattern** and would run every test of the project. The helpers never produce an empty list; if you write the gate config by hand, do not either.
+- **`process.env` is found by text too.** A comment that mentions it is reported, and reading the environment through another name (`const { env } = process`) is not. The clock (`Date.now()`, `new Date()`) and `Math.random()` are not checked: a default argument such as `now = new Date()` is a legitimate way to pass them in, and text cannot tell it from a direct read. Add a `forbiddenSource` rule if the project wants one.
 - **Imports are found by text, not by parsing.** The checks run without the project's dependencies installed, so an import inside a comment is reported too, and only the gate's own imports are looked at, not what those modules import in turn.
 - **An ordinary `import { Request } from 'express'` used only as a type is reported.** Write `import type`, or exempt the module with `impureImports.allow`.
 - **`test-gates lcov` checks lines only.** lcov from Flutter carries no branch data, and Dart has no established mutation testing tool; a Dart gate is guarded by coverage alone.

package/dist/{chunk-XEKQKLKY.js → chunk-F7WBEFIL.js}

@@ -174,8 +174,13 @@ var DEFAULT_FORBIDDEN_SOURCE = [
   {
     pattern: `^\\s*(['"])use (client|server)\\1`,
     reason: "'use client' / 'use server' directive (not a pure module)"
+  },
+  {
+    pattern: "\\bprocess\\??\\.env\\b",
+    reason: "reads process.env (not a pure module). Take the value as an argument"
   }
 ];
+var DEFAULT_MAX_TIMEOUTS = 0;
 var SettingsError = class extends Error {
 };
 function isRecord2(value) {
@@ -437,7 +442,7 @@ function resolveSettings(raw) {
     strykerReportFile: optionalString(stryker.reportFile, "settings.stryker.reportFile") ?? DEFAULT_REPORT_FILE,
     importMode: importsSection.mode ?? "blocklist",
     importAllow,
-    maxTimeouts: mutation.maxTimeouts ?? null,
+    maxTimeouts: mutation.maxTimeouts ?? DEFAULT_MAX_TIMEOUTS,
     lcovFile: optionalString(lcov.file, "settings.lcov.file"),
     lcovSummaryExclude: lcov.summaryExclude === void 0 ? [] : stringArray(lcov.summaryExclude, "settings.lcov.summaryExclude").map(
       (pattern, index) => compile(pattern, void 0, `settings.lcov.summaryExclude[${index}]`)

package/dist/cli.js

@@ -542,7 +542,7 @@ function looksLikeSpec(gatePath, settings) {
 }
 
 // src/core/vitest-coverage.ts
-function vitestCoverageWarning(input) {
+function vitestCoverageViolation(input) {
   if (input.vitestVersion === null || input.vitestVersion === "") {
     return null;
   }
@@ -649,8 +649,13 @@ var DEFAULT_FORBIDDEN_SOURCE = [
   {
     pattern: `^\\s*(['"])use (client|server)\\1`,
     reason: "'use client' / 'use server' directive (not a pure module)"
+  },
+  {
+    pattern: "\\bprocess\\??\\.env\\b",
+    reason: "reads process.env (not a pure module). Take the value as an argument"
   }
 ];
+var DEFAULT_MAX_TIMEOUTS = 0;
 var SettingsError = class extends Error {
 };
 function isRecord2(value) {
@@ -912,7 +917,7 @@ function resolveSettings(raw) {
     strykerReportFile: optionalString(stryker.reportFile, "settings.stryker.reportFile") ?? DEFAULT_REPORT_FILE,
     importMode: importsSection.mode ?? "blocklist",
     importAllow,
-    maxTimeouts: mutation.maxTimeouts ?? null,
+    maxTimeouts: mutation.maxTimeouts ?? DEFAULT_MAX_TIMEOUTS,
     lcovFile: optionalString(lcov.file, "settings.lcov.file"),
     lcovSummaryExclude: lcov.summaryExclude === void 0 ? [] : stringArray(lcov.summaryExclude, "settings.lcov.summaryExclude").map(
       (pattern, index) => compile(pattern, void 0, `settings.lcov.summaryExclude[${index}]`)
@@ -1086,6 +1091,7 @@ function checkGates(manifest) {
       violations.push(...scanStrykerConfig(strykerConfig, readText(dir, strykerConfig)));
     }
   }
+  violations.push(...checkVitestCoverage(manifest));
   return violations;
 }
 var VITEST_GATE_CONFIGS = ["ts", "mts", "cts", "js", "mjs", "cjs"].map(
@@ -1108,23 +1114,20 @@ function installedVitestVersion(startDir) {
     }
   }
 }
-function checkWarnings(manifest) {
+function checkVitestCoverage(manifest) {
   const config = VITEST_GATE_CONFIGS.find((name) => fs3.existsSync(path3.join(manifest.dir, name)));
   if (!config) {
     return [];
   }
-  const warning = vitestCoverageWarning({
+  const message = vitestCoverageViolation({
     vitestVersion: installedVitestVersion(manifest.dir),
     configSource: readText(manifest.dir, config)
   });
-  return warning === null ? [] : [`${config}: ${warning}`];
+  return message === null ? [] : [{ file: config, message }];
 }
 function runCheck(dir, io2) {
   const manifest = readManifest(dir);
   const violations = checkGates(manifest);
-  for (const warning of checkWarnings(manifest)) {
-    io2.err(`test-gates check: warning: ${warning}`);
-  }
   if (violations.length > 0) {
     printViolations(io2, "check", violations);
     return 1;
@@ -1531,8 +1534,8 @@ function judgeMutationReport(input) {
       message: "no mutants were evaluated (the mutation test ran on nothing)"
     });
   }
-  const maxTimeouts = input.maxTimeouts ?? null;
-  if (maxTimeouts !== null && unexpectedTimeouts.length > maxTimeouts) {
+  const maxTimeouts = input.maxTimeouts ?? 0;
+  if (unexpectedTimeouts.length > maxTimeouts) {
     violations.push({
       file: MANIFEST_FILE,
       message: `${unexpectedTimeouts.length} mutant(s) timed out outside expectedTimeouts; settings.mutation.maxTimeouts allows ${maxTimeouts}`
@@ -1614,7 +1617,7 @@ function runMutationResult(dir, reportOverride, io2) {
     io2.err("");
   }
   const maxTimeouts = manifest.settings.maxTimeouts;
-  if (maxTimeouts !== null && verdict.unexpectedTimeouts.length > maxTimeouts) {
+  if (verdict.unexpectedTimeouts.length > maxTimeouts) {
     io2.err(
       `test-gates mutation: ${verdict.unexpectedTimeouts.length} mutant(s) timed out (settings.mutation.maxTimeouts: ${maxTimeouts})`
     );
@@ -1625,7 +1628,8 @@ function runMutationResult(dir, reportOverride, io2) {
     io2.err("A timeout counts as detected, but on a loaded machine a mutant that would survive");
     io2.err("can time out instead. Run again with less load (-- --concurrency 1). Only for a");
     io2.err("mutant that can never finish (a loop that no longer ends), add it to");
-    io2.err('"expectedTimeouts" of the gate in test-gates.json and fill in "reason":');
+    io2.err('"expectedTimeouts" of the gate in test-gates.json and fill in "reason"');
+    io2.err("(settings.mutation.maxTimeouts raises the limit for the whole project):");
     for (const mutant of verdict.unexpectedTimeouts) {
       io2.err(`    ${mutant.file}: ${JSON.stringify(mutant.allowance)}`);
     }

package/dist/index.cjs

@@ -236,8 +236,13 @@ var DEFAULT_FORBIDDEN_SOURCE = [
   {
     pattern: `^\\s*(['"])use (client|server)\\1`,
     reason: "'use client' / 'use server' directive (not a pure module)"
+  },
+  {
+    pattern: "\\bprocess\\??\\.env\\b",
+    reason: "reads process.env (not a pure module). Take the value as an argument"
   }
 ];
+var DEFAULT_MAX_TIMEOUTS = 0;
 var SettingsError = class extends Error {
 };
 function isRecord2(value) {
@@ -499,7 +504,7 @@ function resolveSettings(raw) {
     strykerReportFile: optionalString(stryker.reportFile, "settings.stryker.reportFile") ?? DEFAULT_REPORT_FILE,
     importMode: importsSection.mode ?? "blocklist",
     importAllow,
-    maxTimeouts: mutation.maxTimeouts ?? null,
+    maxTimeouts: mutation.maxTimeouts ?? DEFAULT_MAX_TIMEOUTS,
     lcovFile: optionalString(lcov.file, "settings.lcov.file"),
     lcovSummaryExclude: lcov.summaryExclude === void 0 ? [] : stringArray(lcov.summaryExclude, "settings.lcov.summaryExclude").map(
       (pattern, index) => compile(pattern, void 0, `settings.lcov.summaryExclude[${index}]`)
@@ -918,6 +923,21 @@ function scanStrykerConfig(configPath, source) {
   return violations;
 }
 
+// src/core/vitest-coverage.ts
+function vitestCoverageViolation(input) {
+  if (input.vitestVersion === null || input.vitestVersion === "") {
+    return null;
+  }
+  const major = Number(input.vitestVersion.split(".")[0]);
+  if (!Number.isInteger(major) || major >= 4) {
+    return null;
+  }
+  if (/\bistanbul\b/.test(input.configSource) || /\bexperimentalAstAwareRemapping\s*:\s*true\b/.test(input.configSource)) {
+    return null;
+  }
+  return `Vitest ${input.vitestVersion} with the v8 coverage provider does not count the skipped side of an "if" without "else", so a gate can show 100% branches with that side untested. Use coverageProvider: 'istanbul' (needs @vitest/coverage-istanbul), set coverage.experimentalAstAwareRemapping: true, or move to Vitest 4`;
+}
+
 // src/commands/check.ts
 var STRYKER_CONFIG_NAMES = [
   "stryker.gates.config.mjs",
@@ -1008,11 +1028,40 @@ function checkGates(manifest) {
       violations.push(...scanStrykerConfig(strykerConfig, readText(dir, strykerConfig)));
     }
   }
+  violations.push(...checkVitestCoverage(manifest));
   return violations;
 }
 var VITEST_GATE_CONFIGS = ["ts", "mts", "cts", "js", "mjs", "cjs"].map(
   (extension) => `vitest.gates.config.${extension}`
 );
+function installedVitestVersion(startDir) {
+  let current = startDir;
+  for (; ; ) {
+    try {
+      const pkg = JSON.parse(
+        import_node_fs3.default.readFileSync(import_node_path3.default.join(current, "node_modules", "vitest", "package.json"), "utf8")
+      );
+      return typeof pkg.version === "string" ? pkg.version : null;
+    } catch {
+      const parent = import_node_path3.default.dirname(current);
+      if (parent === current) {
+        return null;
+      }
+      current = parent;
+    }
+  }
+}
+function checkVitestCoverage(manifest) {
+  const config = VITEST_GATE_CONFIGS.find((name) => import_node_fs3.default.existsSync(import_node_path3.default.join(manifest.dir, name)));
+  if (!config) {
+    return [];
+  }
+  const message = vitestCoverageViolation({
+    vitestVersion: installedVitestVersion(manifest.dir),
+    configSource: readText(manifest.dir, config)
+  });
+  return message === null ? [] : [{ file: config, message }];
+}
 
 // src/core/mutation-result.ts
 var DETECTED = /* @__PURE__ */ new Set(["Killed", "Timeout"]);
@@ -1243,8 +1292,8 @@ function judgeMutationReport(input) {
       message: "no mutants were evaluated (the mutation test ran on nothing)"
     });
   }
-  const maxTimeouts = input.maxTimeouts ?? null;
-  if (maxTimeouts !== null && unexpectedTimeouts.length > maxTimeouts) {
+  const maxTimeouts = input.maxTimeouts ?? 0;
+  if (unexpectedTimeouts.length > maxTimeouts) {
     violations.push({
       file: MANIFEST_FILE,
       message: `${unexpectedTimeouts.length} mutant(s) timed out outside expectedTimeouts; settings.mutation.maxTimeouts allows ${maxTimeouts}`

package/dist/index.d.cts

@@ -134,8 +134,8 @@ interface ResolvedSettings {
         regex?: RegExp;
         names?: string[];
     }[];
-    /** `null`: no limit. */
-    maxTimeouts: number | null;
+    /** Timeouts tolerated outside `expectedTimeouts`. */
+    maxTimeouts: number;
 }
 /** One finding. Printed as `file:line: message`. */
 interface Violation {
@@ -279,8 +279,8 @@ interface MutationVerdict {
     violations: Violation[];
     survivors: UnallowedSurvivor[];
     /**
-     * Timed-out mutants that no `expectedTimeouts` entry covers. Informational unless
-     * `maxTimeouts` is set and exceeded, in which case `violations` says so.
+     * Timed-out mutants that no `expectedTimeouts` entry covers. When there are more of them
+     * than `maxTimeouts`, `violations` says so.
      */
     unexpectedTimeouts: UnallowedSurvivor[];
     summary: MutationSummary;
@@ -312,9 +312,9 @@ declare function judgeMutationReport(input: {
     readSource: (gatePath: string) => string | undefined;
     /**
      * `settings.mutation.maxTimeouts`: how many timeouts outside `expectedTimeouts` are
-     * tolerated. `null` or absent means no limit.
+     * tolerated. Absent means 0.
      */
-    maxTimeouts?: number | null;
+    maxTimeouts?: number;
 }): MutationVerdict;
 /** `file:line:column / mutator / original → replacement / occurrence n of m`. */
 declare function formatSurvivor(survivor: UnallowedSurvivor): string;

package/dist/index.d.ts

@@ -134,8 +134,8 @@ interface ResolvedSettings {
         regex?: RegExp;
         names?: string[];
     }[];
-    /** `null`: no limit. */
-    maxTimeouts: number | null;
+    /** Timeouts tolerated outside `expectedTimeouts`. */
+    maxTimeouts: number;
 }
 /** One finding. Printed as `file:line: message`. */
 interface Violation {
@@ -279,8 +279,8 @@ interface MutationVerdict {
     violations: Violation[];
     survivors: UnallowedSurvivor[];
     /**
-     * Timed-out mutants that no `expectedTimeouts` entry covers. Informational unless
-     * `maxTimeouts` is set and exceeded, in which case `violations` says so.
+     * Timed-out mutants that no `expectedTimeouts` entry covers. When there are more of them
+     * than `maxTimeouts`, `violations` says so.
      */
     unexpectedTimeouts: UnallowedSurvivor[];
     summary: MutationSummary;
@@ -312,9 +312,9 @@ declare function judgeMutationReport(input: {
     readSource: (gatePath: string) => string | undefined;
     /**
      * `settings.mutation.maxTimeouts`: how many timeouts outside `expectedTimeouts` are
-     * tolerated. `null` or absent means no limit.
+     * tolerated. Absent means 0.
      */
-    maxTimeouts?: number | null;
+    maxTimeouts?: number;
 }): MutationVerdict;
 /** `file:line:column / mutator / original → replacement / occurrence n of m`. */
 declare function formatSurvivor(survivor: UnallowedSurvivor): string;

package/dist/index.js

@@ -20,7 +20,7 @@ import {
   readText,
   resolveSettings,
   validateEquivalentMutants
-} from "./chunk-XEKQKLKY.js";
+} from "./chunk-F7WBEFIL.js";
 
 // src/commands/check.ts
 import fs from "fs";
@@ -301,6 +301,21 @@ function scanStrykerConfig(configPath, source) {
   return violations;
 }
 
+// src/core/vitest-coverage.ts
+function vitestCoverageViolation(input) {
+  if (input.vitestVersion === null || input.vitestVersion === "") {
+    return null;
+  }
+  const major = Number(input.vitestVersion.split(".")[0]);
+  if (!Number.isInteger(major) || major >= 4) {
+    return null;
+  }
+  if (/\bistanbul\b/.test(input.configSource) || /\bexperimentalAstAwareRemapping\s*:\s*true\b/.test(input.configSource)) {
+    return null;
+  }
+  return `Vitest ${input.vitestVersion} with the v8 coverage provider does not count the skipped side of an "if" without "else", so a gate can show 100% branches with that side untested. Use coverageProvider: 'istanbul' (needs @vitest/coverage-istanbul), set coverage.experimentalAstAwareRemapping: true, or move to Vitest 4`;
+}
+
 // src/commands/check.ts
 var STRYKER_CONFIG_NAMES = [
   "stryker.gates.config.mjs",
@@ -391,11 +406,40 @@ function checkGates(manifest) {
       violations.push(...scanStrykerConfig(strykerConfig, readText(dir, strykerConfig)));
     }
   }
+  violations.push(...checkVitestCoverage(manifest));
   return violations;
 }
 var VITEST_GATE_CONFIGS = ["ts", "mts", "cts", "js", "mjs", "cjs"].map(
   (extension) => `vitest.gates.config.${extension}`
 );
+function installedVitestVersion(startDir) {
+  let current = startDir;
+  for (; ; ) {
+    try {
+      const pkg = JSON.parse(
+        fs.readFileSync(path.join(current, "node_modules", "vitest", "package.json"), "utf8")
+      );
+      return typeof pkg.version === "string" ? pkg.version : null;
+    } catch {
+      const parent = path.dirname(current);
+      if (parent === current) {
+        return null;
+      }
+      current = parent;
+    }
+  }
+}
+function checkVitestCoverage(manifest) {
+  const config = VITEST_GATE_CONFIGS.find((name) => fs.existsSync(path.join(manifest.dir, name)));
+  if (!config) {
+    return [];
+  }
+  const message = vitestCoverageViolation({
+    vitestVersion: installedVitestVersion(manifest.dir),
+    configSource: readText(manifest.dir, config)
+  });
+  return message === null ? [] : [{ file: config, message }];
+}
 
 // src/core/mutation-result.ts
 var DETECTED = /* @__PURE__ */ new Set(["Killed", "Timeout"]);
@@ -626,8 +670,8 @@ function judgeMutationReport(input) {
       message: "no mutants were evaluated (the mutation test ran on nothing)"
     });
   }
-  const maxTimeouts = input.maxTimeouts ?? null;
-  if (maxTimeouts !== null && unexpectedTimeouts.length > maxTimeouts) {
+  const maxTimeouts = input.maxTimeouts ?? 0;
+  if (unexpectedTimeouts.length > maxTimeouts) {
     violations.push({
       file: MANIFEST_FILE,
       message: `${unexpectedTimeouts.length} mutant(s) timed out outside expectedTimeouts; settings.mutation.maxTimeouts allows ${maxTimeouts}`

package/dist/jest.cjs

@@ -212,8 +212,13 @@ var DEFAULT_FORBIDDEN_SOURCE = [
   {
     pattern: `^\\s*(['"])use (client|server)\\1`,
     reason: "'use client' / 'use server' directive (not a pure module)"
+  },
+  {
+    pattern: "\\bprocess\\??\\.env\\b",
+    reason: "reads process.env (not a pure module). Take the value as an argument"
   }
 ];
+var DEFAULT_MAX_TIMEOUTS = 0;
 var SettingsError = class extends Error {
 };
 function isRecord2(value) {
@@ -475,7 +480,7 @@ function resolveSettings(raw) {
     strykerReportFile: optionalString(stryker.reportFile, "settings.stryker.reportFile") ?? DEFAULT_REPORT_FILE,
     importMode: importsSection.mode ?? "blocklist",
     importAllow,
-    maxTimeouts: mutation.maxTimeouts ?? null,
+    maxTimeouts: mutation.maxTimeouts ?? DEFAULT_MAX_TIMEOUTS,
     lcovFile: optionalString(lcov.file, "settings.lcov.file"),
     lcovSummaryExclude: lcov.summaryExclude === void 0 ? [] : stringArray(lcov.summaryExclude, "settings.lcov.summaryExclude").map(
       (pattern, index) => compile(pattern, void 0, `settings.lcov.summaryExclude[${index}]`)

package/dist/jest.js

@@ -6,7 +6,7 @@ import {
   NO_SPEC_PATTERN,
   gateSpecs,
   loadGates
-} from "./chunk-XEKQKLKY.js";
+} from "./chunk-F7WBEFIL.js";
 
 // src/jest.ts
 import path from "path";

package/dist/stryker.cjs

@@ -211,8 +211,13 @@ var DEFAULT_FORBIDDEN_SOURCE = [
   {
     pattern: `^\\s*(['"])use (client|server)\\1`,
     reason: "'use client' / 'use server' directive (not a pure module)"
+  },
+  {
+    pattern: "\\bprocess\\??\\.env\\b",
+    reason: "reads process.env (not a pure module). Take the value as an argument"
   }
 ];
+var DEFAULT_MAX_TIMEOUTS = 0;
 var SettingsError = class extends Error {
 };
 function isRecord2(value) {
@@ -474,7 +479,7 @@ function resolveSettings(raw) {
     strykerReportFile: optionalString(stryker.reportFile, "settings.stryker.reportFile") ?? DEFAULT_REPORT_FILE,
     importMode: importsSection.mode ?? "blocklist",
     importAllow,
-    maxTimeouts: mutation.maxTimeouts ?? null,
+    maxTimeouts: mutation.maxTimeouts ?? DEFAULT_MAX_TIMEOUTS,
     lcovFile: optionalString(lcov.file, "settings.lcov.file"),
     lcovSummaryExclude: lcov.summaryExclude === void 0 ? [] : stringArray(lcov.summaryExclude, "settings.lcov.summaryExclude").map(
       (pattern, index) => compile(pattern, void 0, `settings.lcov.summaryExclude[${index}]`)

package/dist/stryker.js

@@ -3,7 +3,7 @@ import {
 } from "./chunk-4HAJIKDZ.js";
 import {
   loadGates
-} from "./chunk-XEKQKLKY.js";
+} from "./chunk-F7WBEFIL.js";
 
 // src/stryker.ts
 var WEAKENING_OPTIONS = ["ignoreStatic", "ignorers"];

package/dist/vitest.cjs

@@ -211,8 +211,13 @@ var DEFAULT_FORBIDDEN_SOURCE = [
   {
     pattern: `^\\s*(['"])use (client|server)\\1`,
     reason: "'use client' / 'use server' directive (not a pure module)"
+  },
+  {
+    pattern: "\\bprocess\\??\\.env\\b",
+    reason: "reads process.env (not a pure module). Take the value as an argument"
   }
 ];
+var DEFAULT_MAX_TIMEOUTS = 0;
 var SettingsError = class extends Error {
 };
 function isRecord2(value) {
@@ -474,7 +479,7 @@ function resolveSettings(raw) {
     strykerReportFile: optionalString(stryker.reportFile, "settings.stryker.reportFile") ?? DEFAULT_REPORT_FILE,
     importMode: importsSection.mode ?? "blocklist",
     importAllow,
-    maxTimeouts: mutation.maxTimeouts ?? null,
+    maxTimeouts: mutation.maxTimeouts ?? DEFAULT_MAX_TIMEOUTS,
     lcovFile: optionalString(lcov.file, "settings.lcov.file"),
     lcovSummaryExclude: lcov.summaryExclude === void 0 ? [] : stringArray(lcov.summaryExclude, "settings.lcov.summaryExclude").map(
       (pattern, index) => compile(pattern, void 0, `settings.lcov.summaryExclude[${index}]`)

package/dist/vitest.js

@@ -6,7 +6,7 @@ import {
   NO_SPEC_PATTERN,
   gateSpecs,
   loadGates
-} from "./chunk-XEKQKLKY.js";
+} from "./chunk-F7WBEFIL.js";
 
 // src/vitest.ts
 function createVitestGatesConfig(options = {}) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@t09tanaka/test-gates",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "Test gates for the code that must not be wrong: per-file 100% coverage as the floor, mutation testing with a per-mutant allow list as the real check.",
   "author": "t09tanaka",
   "license": "MIT",

package/schema/test-gates.schema.json

@@ -263,7 +263,7 @@
           "$ref": "#/definitions/ruleList"
         },
         "forbiddenSource": {
-          "description": "Lines that must not appear in a gate (regular expressions, tested one line at a time). Default: 'use client' / 'use server'.",
+          "description": "Lines that must not appear in a gate (regular expressions, tested one line at a time). Default: 'use client' / 'use server', and process.env (since 0.3.0).",
           "$ref": "#/definitions/ruleList"
         },
         "importAliases": {
@@ -397,7 +397,7 @@
           "additionalProperties": false,
           "properties": {
             "maxTimeouts": {
-              "description": "How many timed-out mutants outside expectedTimeouts are tolerated. Above it the run fails. Not set: no limit.",
+              "description": "How many timed-out mutants outside expectedTimeouts are tolerated. Above it the run fails. Default: 0 (since 0.3.0; before that, not set meant no limit).",
               "type": "integer",
               "minimum": 0
             }