coverage-check 0.5.0 → 0.7.0

package/README.md

@@ -120,6 +120,60 @@ Two common sources of confusion:
 The annotation affects only the stdout failure output. The GitHub PR sticky comment and Actions step
 summary are unchanged.
 
+### Merging LCOV files
+
+Use the `merge` subcommand to fold multiple `lcov.info` files into a single output that preserves function and branch records (`FN`, `FNDA`, `BRDA`) as well as summary counters (`LF/LH/FNF/FNH/BRF/BRH`):
+
+```sh
+coverage-check merge \
+  --artifacts ./coverage-artifacts \
+  --output ./coverage-merged/lcov.info
+```
+
+Hit counts are **summed** across inputs (consistent with the package's internal multi-suite merge). Parent directories of `--output` are created automatically.
+
+### Advisory (non-blocking) mode
+
+Pass `--advisory` to exit `0` even when coverage falls short. The check still runs in full — JSON is written, the PR comment is posted, and uncovered lines are printed — but the process never exits `1`. Useful for pre-push hooks where you want feedback without blocking the push:
+
+```sh
+coverage-check check \
+  --rules .coverage-rules.yml \
+  --artifacts ./coverage-artifacts \
+  --base origin/main \
+  --head HEAD \
+  --advisory
+```
+
+### PR-scoped regression gate
+
+By default, `no_coverage_drop` applies to every rule area regardless of what changed. Pass `--drop-only-changed-areas` to restrict the drop gate to rule areas that contain at least one changed file in the PR diff. Areas with no changed files are reported as `skipped` — they pass non-blockingly:
+
+```sh
+coverage-check check \
+  --rules .coverage-rules.yml \
+  --artifacts ./coverage-artifacts \
+  --base origin/main \
+  --head HEAD \
+  --drop-only-changed-areas
+```
+
+This avoids false positives when a CI run only exercises a subset of areas.
+
+### Required artifacts
+
+Pass `--require-artifact <relpath>` (repeatable) to fail early — exit `2` with a `::error::` annotation — if an expected `lcov.info` is absent from `--artifacts`. This distinguishes a missing coverage upload (CI job didn't run) from genuine uncovered lines:
+
+```sh
+coverage-check check \
+  --rules .coverage-rules.yml \
+  --artifacts ./coverage-artifacts \
+  --require-artifact coverage-backend/lcov.info \
+  --require-artifact coverage-frontend/lcov.info
+```
+
+`--require-artifact` is also accepted by `coverage-check merge`.
+
 ## Rules file
 
 ```yaml
@@ -135,26 +189,67 @@ rules:
 
 Rules are matched in order; the first match wins. Files in the diff not matched by any rule are reported as informational (not gated).
 
+### `no_coverage_drop`
+
+Add `no_coverage_drop: true` to a rule to also gate total line-coverage regression — not just patch lines. When enabled, the check fails if the overall line-coverage percentage of files matched by that rule falls below the `main` baseline stored in the suite store.
+
+```yaml
+rules:
+  - paths: backend/scripts/**
+    patch_coverage_min: 0 # exempt from patch gate
+  - paths: backend/**
+    patch_coverage_min: 95
+    no_coverage_drop: true # also gate overall regression
+  - paths: web/**
+    patch_coverage_min: 80
+    no_coverage_drop: true
+    max_coverage_drop: 0.5 # allow up to 0.5 percentage-point drop
+```
+
+`max_coverage_drop` (default `0`) sets the tolerance in percentage points. First-match-wins applies: `backend/scripts/**` files are matched by the earlier rule and are not included in the `backend/**` total.
+
+**Requirements:**
+
+- A suite store (`--store-s3` or `--store-fs`) must be configured on the `check` command.
+- A baseline must exist in the store (written by `store-put --sha ... --branch main` on main pushes).
+- When no baseline is available (e.g. fork PRs without store access), the no-drop check is **skipped non-blockingly** with a warning — the patch coverage gate still runs.
+
+First-match-wins means that if you have a more specific rule before a broader one (e.g. `backend/scripts/**` before `backend/**`), only files matched by the broader rule's first-match contribute to its total — scripts are excluded from the broader `backend/**` aggregate.
+
 ## CLI reference
 
 ### `coverage-check check`
 
-| Flag                | Default                | Description                                                                                                |
-| ------------------- | ---------------------- | ---------------------------------------------------------------------------------------------------------- |
-| `--rules`           | `.coverage-rules.yml`  | Path to YAML rules file                                                                                    |
-| `--artifacts`       | `./coverage-artifacts` | Directory to scan for `lcov.info` files                                                                    |
-| `--base`            | `origin/main`          | Base git ref for `git diff`                                                                                |
-| `--head`            | `HEAD`                 | Head git ref for `git diff`                                                                                |
-| `--store-fs`        | —                      | Path to a filesystem suite store directory                                                                 |
-| `--store`           | —                      | Alias for `--store-fs`                                                                                     |
-| `--store-s3`        | —                      | S3 suite store spec: `<bucket>[/<prefix>]`                                                                 |
-| `--branch`          | `"main"`               | Branch pointer to follow when reading from the store                                                       |
-| `--suite`           | —                      | Name of the current suite (no `/` or `\\`); fresh artifacts override this suite in the store               |
-| `--strip-prefix`    | —                      | Extra path prefix to strip from LCOV `SF:` lines (repeatable)                                              |
-| `--pr`              | —                      | Pull request number for sticky comment                                                                     |
-| `--repo`            | `$GITHUB_REPOSITORY`   | `owner/repo` for sticky comment                                                                            |
-| `--json`            | —                      | Write JSON result to this path                                                                             |
-| `--annotate-source` | —                      | Print the trimmed source text of each uncovered line in stdout (does not alter PR comment or step summary) |
+| Flag                        | Default                | Description                                                                                                |
+| --------------------------- | ---------------------- | ---------------------------------------------------------------------------------------------------------- |
+| `--rules`                   | `.coverage-rules.yml`  | Path to YAML rules file                                                                                    |
+| `--artifacts`               | `./coverage-artifacts` | Directory to scan for `lcov.info` files                                                                    |
+| `--base`                    | `origin/main`          | Base git ref for `git diff`                                                                                |
+| `--head`                    | `HEAD`                 | Head git ref for `git diff`                                                                                |
+| `--store-fs`                | —                      | Path to a filesystem suite store directory                                                                 |
+| `--store`                   | —                      | Alias for `--store-fs`                                                                                     |
+| `--store-s3`                | —                      | S3 suite store spec: `<bucket>[/<prefix>]`                                                                 |
+| `--branch`                  | `"main"`               | Branch pointer to follow when reading from the store                                                       |
+| `--suite`                   | —                      | Name of the current suite (no `/` or `\\`); fresh artifacts override this suite in the store               |
+| `--strip-prefix`            | —                      | Extra path prefix to strip from LCOV `SF:` lines (repeatable)                                              |
+| `--pr`                      | —                      | Pull request number for sticky comment                                                                     |
+| `--repo`                    | `$GITHUB_REPOSITORY`   | `owner/repo` for sticky comment                                                                            |
+| `--json`                    | —                      | Write JSON result to this path                                                                             |
+| `--annotate-source`         | —                      | Print the trimmed source text of each uncovered line in stdout (does not alter PR comment or step summary) |
+| `--advisory`                | —                      | Exit `0` even on shortfall; still prints, writes JSON, and posts PR comment                                |
+| `--drop-only-changed-areas` | —                      | Restrict `no_coverage_drop` to rule areas that have ≥1 changed file; others are reported as skipped        |
+| `--require-artifact`        | —                      | Fail (exit `2`) if this relative path is absent under `--artifacts` (repeatable)                           |
+
+### `coverage-check merge`
+
+| Flag                 | Default                | Description                                                   |
+| -------------------- | ---------------------- | ------------------------------------------------------------- |
+| `--artifacts`        | `./coverage-artifacts` | Directory to scan for `lcov.info` files                       |
+| `--output`           | required               | Path to write the merged `lcov.info`                          |
+| `--strip-prefix`     | —                      | Extra path prefix to strip from LCOV `SF:` lines (repeatable) |
+| `--require-artifact` | —                      | Fail (exit `2`) if this relative path is absent (repeatable)  |
+
+Hit counts are summed across all inputs. Function (`FN`/`FNDA`) and branch (`BRDA`) records are preserved; summary counters (`LF/LH/FNF/FNH/BRF/BRH`) are recomputed from the merged data.
 
 ### `coverage-check store-put`
 
@@ -176,7 +271,17 @@ When `--sha` and `--branch` are both provided, `store-put` writes a SHA-addresse
 ## Programmatic API
 
 ```ts
-import { runCheck, runStorePut, FileSystemSuiteStore, S3SuiteStore } from "coverage-check";
+import {
+  runCheck,
+  runMerge,
+  runStorePut,
+  collapseRanges,
+  parseLcovFull,
+  mergeLcovFull,
+  toLcovFull,
+  FileSystemSuiteStore,
+  S3SuiteStore,
+} from "coverage-check";
 
 // FileSystem store
 const fsStore = new FileSystemSuiteStore("/path/to/store");
@@ -196,6 +301,16 @@ await runCheck({
   store: s3Store,
   suite: "backend",
   branch: "main",
+  advisory: false,
+  dropOnlyChangedAreas: false,
+  requireArtifacts: [],
+});
+
+await runMerge({
+  artifacts: "./coverage-artifacts",
+  output: "./coverage-merged/lcov.info",
+  stripPrefixes: [],
+  requireArtifacts: [],
 });
 
 await runStorePut({
@@ -206,6 +321,15 @@ await runStorePut({
   sha: "abc123",
   branch: "main",
 });
+
+// Collapse a sorted line list into a compact range string
+collapseRanges([1, 2, 3, 7, 8]); // → "L1-3, L7-8"
+collapseRanges([1, 2, 3, 7, 8], ""); // → "1-3, 7-8"
+
+// Full-fidelity LCOV (functions + branches + lines)
+const full = parseLcovFull(lcovText, ["/home/runner/work/repo/repo/"]);
+const merged = mergeLcovFull([full1, full2]); // hits are summed
+const output = toLcovFull(merged); // includes FN/FNDA/BRDA and LF/LH/FNF/FNH/BRF/BRH
 ```
 
 You can also implement your own `SuiteStore`:

package/dist/src/cli.mjs

@@ -1,6 +1,7 @@
 import { main as checkMain } from "./commands/check.mjs";
 import { main as storePutMain } from "./commands/store-put.mjs";
 import { main as htmlMain } from "./commands/html.mjs";
+import { main as mergeMain } from "./commands/merge.mjs";
 import { main as summaryMain } from "./commands/summary.mjs";
 const stderr = (msg) => process.stderr.write(`${msg}\n`);
 export async function main(argv) {
@@ -11,6 +12,8 @@ export async function main(argv) {
         return checkMain(argv.slice(1));
     if (sub === "store-put")
         return storePutMain(argv.slice(1));
+    if (sub === "merge")
+        return mergeMain(argv.slice(1));
     if (sub === "html")
         return htmlMain(argv.slice(1));
     if (sub === "summary")

package/dist/src/commands/check-args.d.mts

@@ -18,5 +18,11 @@ export type CheckArgs = {
     summaryFile?: string | null;
     /** Annotate each uncovered line with its trimmed source text in stdout. Default: false. */
     annotateSource?: boolean;
+    /** Exit 0 even on coverage shortfall — compute and print, but never block. Default: false. */
+    advisory?: boolean;
+    /** Apply no_coverage_drop only to rules whose area has changed files in the diff. Default: false. */
+    dropOnlyChangedAreas?: boolean;
+    /** Relative paths under --artifacts that must exist before the check runs (repeatable). */
+    requireArtifacts?: string[];
 };
 export declare function parseCheckArgs(argv: string[]): CheckArgs;

package/dist/src/commands/check-args.mjs

@@ -17,6 +17,9 @@ export function parseCheckArgs(argv) {
         branch: "main",
         summaryFile: process.env["GITHUB_STEP_SUMMARY"] ?? null,
         annotateSource: false,
+        advisory: false,
+        dropOnlyChangedAreas: false,
+        requireArtifacts: [],
     };
     for (let i = 0; i < argv.length; i++) {
         const flag = argv[i];
@@ -80,6 +83,15 @@ export function parseCheckArgs(argv) {
             case "--annotate-source":
                 args.annotateSource = true;
                 break;
+            case "--advisory":
+                args.advisory = true;
+                break;
+            case "--drop-only-changed-areas":
+                args.dropOnlyChangedAreas = true;
+                break;
+            case "--require-artifact":
+                args.requireArtifacts.push(val());
+                break;
             default:
                 throw new Error(`unknown flag: ${flag}`);
         }

package/dist/src/commands/check-output.d.mts

@@ -0,0 +1,11 @@
+import type { DropResult, DiffLines, LcovData } from "../types.mts";
+/**
+ * Verifies that each required artifact path exists under artifactsDir.
+ * Prints `::error::` to stderr for each missing file and returns false if any are absent.
+ */
+export declare function checkRequiredArtifacts(artifactsDir: string, requireArtifacts: string[]): boolean;
+export declare function warnNonContributing(parsedSources: {
+    name: string;
+    lcov: LcovData;
+}[], diff: DiffLines): void;
+export declare function printDropOutput(drops: DropResult[]): void;

package/dist/src/commands/check-output.mjs

@@ -0,0 +1,70 @@
+import { existsSync } from "node:fs";
+import { join } from "node:path";
+const stdout = (msg) => process.stdout.write(`${msg}\n`);
+const stderr = (msg) => process.stderr.write(`${msg}\n`);
+function fmtPct(n) {
+    return n === null ? "—" : `${n.toFixed(2)}%`;
+}
+function fmtDrop(n) {
+    /* c8 ignore next -- failing drops always have non-null drop (drop===null implies passed===true) */
+    return n === null ? "—" : `${n.toFixed(2)}pp`;
+}
+function lcovContributesToDiff(sourceLcov, diff) {
+    for (const [file, changedLines] of diff) {
+        const fileLines = sourceLcov.get(file);
+        if (fileLines) {
+            for (const lineNo of changedLines) {
+                if (fileLines.has(lineNo))
+                    return true;
+            }
+        }
+    }
+    return false;
+}
+/**
+ * Verifies that each required artifact path exists under artifactsDir.
+ * Prints `::error::` to stderr for each missing file and returns false if any are absent.
+ */
+export function checkRequiredArtifacts(artifactsDir, requireArtifacts) {
+    let ok = true;
+    for (const rel of requireArtifacts) {
+        if (!existsSync(join(artifactsDir, rel))) {
+            stderr(`::error:: missing expected coverage artifact: ${rel}`);
+            ok = false;
+        }
+    }
+    return ok;
+}
+export function warnNonContributing(parsedSources, diff) {
+    if (diff.size === 0)
+        return;
+    for (const { name, lcov: sourceLcov } of parsedSources) {
+        if (!lcovContributesToDiff(sourceLcov, diff)) {
+            stderr(`coverage-check: warning: coverage from ${name} contributed 0 coverable lines to the patch result. This may indicate a path prefix mismatch.`);
+        }
+    }
+}
+export function printDropOutput(drops) {
+    if (drops.length === 0)
+        return;
+    const skippedDrops = drops.filter((d) => d.skipped);
+    const failingDrops = drops.filter((d) => !d.passed && !d.skipped);
+    const passingDrops = drops.filter((d) => d.passed && !d.skipped);
+    if (skippedDrops.length > 0) {
+        stdout("\ncoverage-check: coverage drop check skipped (no baseline)\n");
+        for (const d of skippedDrops) {
+            stdout(`  ${d.rule}: no baseline available`);
+        }
+    }
+    if (failingDrops.length > 0) {
+        stdout("\ncoverage-check: COVERAGE REGRESSION\n");
+        for (const d of failingDrops) {
+            stdout(`  ${d.rule}: ${fmtPct(d.currentPct)} (was ${fmtPct(d.baselinePct)}, dropped ${fmtDrop(d.drop)}, max allowed ${d.maxDrop}pp)`);
+        }
+    }
+    if (passingDrops.length > 0) {
+        for (const d of passingDrops) {
+            stdout(`  ${d.rule}: ${fmtPct(d.currentPct)} (baseline ${fmtPct(d.baselinePct)}) ✓`);
+        }
+    }
+}

package/dist/src/commands/check.mjs

@@ -3,13 +3,15 @@ import { parseLcov } from "../lcov-parser.mjs";
 import { mergeLcov } from "../lcov-merge.mjs";
 import { getChangedLines } from "../diff-parser.mjs";
 import { getChangedLineContent } from "../diff-parser-content.mjs";
-import { loadRules } from "../rules.mjs";
+import { loadRules, buildChangedRules } from "../rules.mjs";
 import { computePatchCoverage } from "../patch-coverage.mjs";
+import { computeCoverageDrop } from "../coverage-drop.mjs";
 import { collapseRanges, renderFailureComment } from "../report.mjs";
 import { upsertComment } from "../github-comment.mjs";
 import { collectLcovFiles, buildStripPrefixes } from "../load-artifacts.mjs";
 import { writeSummary } from "../step-summary.mjs";
 import { parseCheckArgs } from "./check-args.mjs";
+import { warnNonContributing, printDropOutput, checkRequiredArtifacts } from "./check-output.mjs";
 const stdout = (msg) => process.stdout.write(`${msg}\n`);
 const stderr = (msg) => process.stderr.write(`${msg}\n`);
 export async function main(argv) {
@@ -32,6 +34,8 @@ export async function runCheck(args) {
         stderr(`coverage-check: failed to load rules: ${err}`);
         return 2;
     }
+    if (!checkRequiredArtifacts(args.artifacts, args.requireArtifacts ?? []))
+        return 2;
     const branch = args.branch ?? "main";
     const stripPrefixes = buildStripPrefixes(args.stripPrefixes);
     const reports = [];
@@ -86,30 +90,28 @@ export async function runCheck(args) {
         stderr(`coverage-check: git diff failed: ${err}`);
         return 2;
     }
-    if (diff.size > 0) {
-        for (const { name, lcov: sourceLcov } of parsedSources) {
-            let contributes = false;
-            for (const [file, changedLines] of diff) {
-                const fileLines = sourceLcov.get(file);
-                if (fileLines) {
-                    for (const lineNo of changedLines) {
-                        if (fileLines.has(lineNo)) {
-                            contributes = true;
-                            break;
-                        }
-                    }
-                }
-                if (contributes)
-                    break;
-            }
-            if (!contributes) {
-                stderr(`coverage-check: warning: coverage from ${name} contributed 0 coverable lines to the patch result. This may indicate a path prefix mismatch.`);
+    warnNonContributing(parsedSources, diff);
+    let baseline = null;
+    if (args.store !== null) {
+        try {
+            const suites = await args.store.list();
+            const baselineReports = (await Promise.all(suites.map(async (suite) => {
+                const buf = await args.store.get(suite, { branch });
+                return buf === null ? null : parseLcov(buf.toString("utf8"), stripPrefixes);
+            }))).filter((report) => report !== null);
+            if (baselineReports.length > 0) {
+                baseline = mergeLcov(baselineReports);
             }
         }
+        catch (err) {
+            stderr(`coverage-check: warning: failed to load baseline from store: ${String(err)}`);
+        }
     }
     const { buckets, informational } = computePatchCoverage(diff, lcov, rules);
-    const passed = buckets.every((b) => b.passed);
-    const result = { buckets, informational, passed };
+    const changedRules = (args.dropOnlyChangedAreas ?? false) ? buildChangedRules(diff, rules) : undefined;
+    const drops = computeCoverageDrop(lcov, baseline, rules, changedRules);
+    const passed = buckets.every((b) => b.passed) && drops.every((d) => d.passed || d.skipped);
+    const result = { buckets, drops, informational, passed };
     if (args.json) {
         writeFileSync(args.json, JSON.stringify(result, null, 2));
     }
@@ -145,6 +147,7 @@ export async function runCheck(args) {
             stdout(`  ${bucket.rule}: ${pct} ✓`);
         }
     }
+    printDropOutput(drops);
     const summaryFile = args.summaryFile !== undefined
         ? args.summaryFile
         : (process.env["GITHUB_STEP_SUMMARY"] ?? null);
@@ -166,5 +169,5 @@ export async function runCheck(args) {
             stderr(`coverage-check: failed to post PR comment: ${err}`);
         }
     }
-    return passed ? 0 : 1;
+    return (args.advisory ?? false) || passed ? 0 : 1;
 }

package/dist/src/commands/merge-args.d.mts

@@ -0,0 +1,7 @@
+export type MergeArgs = {
+    artifacts: string;
+    output: string;
+    stripPrefixes: string[];
+    requireArtifacts: string[];
+};
+export declare function parseMergeArgs(argv: string[]): MergeArgs;

package/dist/src/commands/merge-args.mjs

@@ -0,0 +1,38 @@
+export function parseMergeArgs(argv) {
+    const args = {
+        artifacts: "./coverage-artifacts",
+        output: "",
+        stripPrefixes: [],
+        requireArtifacts: [],
+    };
+    for (let i = 0; i < argv.length; i++) {
+        const flag = argv[i];
+        const next = argv[i + 1];
+        const val = () => {
+            if (next === undefined || next.startsWith("--")) {
+                throw new Error(`${flag} requires a value`);
+            }
+            i++;
+            return next;
+        };
+        switch (flag) {
+            case "--artifacts":
+                args.artifacts = val();
+                break;
+            case "--output":
+                args.output = val();
+                break;
+            case "--strip-prefix":
+                args.stripPrefixes.push(val());
+                break;
+            case "--require-artifact":
+                args.requireArtifacts.push(val());
+                break;
+            default:
+                throw new Error(`unknown flag: ${flag}`);
+        }
+    }
+    if (!args.output)
+        throw new Error("--output is required");
+    return args;
+}

package/dist/src/commands/merge.d.mts

@@ -0,0 +1,9 @@
+import type { MergeArgs } from "./merge-args.mts";
+export type { MergeArgs } from "./merge-args.mts";
+export declare function main(argv: string[]): Promise<number>;
+/**
+ * Merges all lcov.info files found under args.artifacts into a single full-fidelity LCOV file.
+ * Preserves FN/FNDA/BRDA records and recomputes summary counters (FNF/FNH/BRF/BRH/LF/LH).
+ * Hit counts are summed across reports (lines, function hits, branch hits).
+ */
+export declare function runMerge(args: MergeArgs): number;

package/dist/src/commands/merge.mjs

@@ -0,0 +1,41 @@
+import { mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { dirname } from "node:path";
+import { collectLcovFiles, buildStripPrefixes } from "../load-artifacts.mjs";
+import { parseLcovFull, mergeLcovFull, toLcovFull } from "../lcov-records.mjs";
+import { checkRequiredArtifacts } from "./check-output.mjs";
+import { parseMergeArgs } from "./merge-args.mjs";
+const stdout = (msg) => process.stdout.write(`${msg}\n`);
+const stderr = (msg) => process.stderr.write(`${msg}\n`);
+export async function main(argv) {
+    let args;
+    try {
+        args = parseMergeArgs(argv);
+    }
+    catch (err) {
+        stderr(`coverage-check merge: ${String(err)}`);
+        return 2;
+    }
+    return runMerge(args);
+}
+/**
+ * Merges all lcov.info files found under args.artifacts into a single full-fidelity LCOV file.
+ * Preserves FN/FNDA/BRDA records and recomputes summary counters (FNF/FNH/BRF/BRH/LF/LH).
+ * Hit counts are summed across reports (lines, function hits, branch hits).
+ */
+export function runMerge(args) {
+    if (!checkRequiredArtifacts(args.artifacts, args.requireArtifacts))
+        return 2;
+    const lcovFiles = collectLcovFiles(args.artifacts);
+    if (lcovFiles.length === 0) {
+        stderr(`coverage-check merge: no lcov.info files found under ${args.artifacts}`);
+        return 1;
+    }
+    const stripPrefixes = buildStripPrefixes(args.stripPrefixes);
+    const reports = lcovFiles.map((f) => parseLcovFull(readFileSync(f, "utf8"), stripPrefixes));
+    const merged = mergeLcovFull(reports);
+    const lcovText = toLcovFull(merged);
+    mkdirSync(dirname(args.output), { recursive: true });
+    writeFileSync(args.output, lcovText, "utf8");
+    stdout(`coverage-check merge: merged ${lcovFiles.length} file(s) → ${args.output}`);
+    return 0;
+}

package/dist/src/coverage-check.d.mts

@@ -1,10 +1,16 @@
 export { runCheck } from "./commands/check.mts";
 export { runStorePut } from "./commands/store-put.mts";
+export { runMerge } from "./commands/merge.mts";
 export { FileSystemSuiteStore } from "./suite-store.mts";
 export { S3SuiteStore } from "./s3-suite-store.mts";
 export { parseDiffWithContent, getChangedLineContent } from "./diff-parser-content.mts";
+export { collapseRanges } from "./report.mts";
+export { parseLcovFull, mergeLcovFull, toLcovFull } from "./lcov-records.mts";
 export type { CheckArgs } from "./commands/check.mts";
 export type { StorePutArgs } from "./commands/store-put.mts";
+export type { MergeArgs } from "./commands/merge.mts";
 export type { SuiteStore, SuiteMeta } from "./suite-store.mts";
 export type { S3SuiteStoreOptions } from "./s3-suite-store.mts";
-export type { CoverageCheckResult, BucketResult, FileCoverageResult, LcovData, DiffLines, DiffLineContent, CoverageRule, } from "./types.mts";
+export { computeCoverageDrop } from "./coverage-drop.mts";
+export type { FullLcovData, FullFileCoverage } from "./lcov-records.mts";
+export type { CoverageCheckResult, BucketResult, DropResult, FileCoverageResult, LcovData, DiffLines, DiffLineContent, CoverageRule, } from "./types.mts";

package/dist/src/coverage-check.mjs

@@ -1,5 +1,9 @@
 export { runCheck } from "./commands/check.mjs";
 export { runStorePut } from "./commands/store-put.mjs";
+export { runMerge } from "./commands/merge.mjs";
 export { FileSystemSuiteStore } from "./suite-store.mjs";
 export { S3SuiteStore } from "./s3-suite-store.mjs";
 export { parseDiffWithContent, getChangedLineContent } from "./diff-parser-content.mjs";
+export { collapseRanges } from "./report.mjs";
+export { parseLcovFull, mergeLcovFull, toLcovFull } from "./lcov-records.mjs";
+export { computeCoverageDrop } from "./coverage-drop.mjs";

package/dist/src/coverage-drop.d.mts

@@ -0,0 +1,2 @@
+import type { CoverageRule, DropResult, LcovData } from "./types.mts";
+export declare function computeCoverageDrop(current: LcovData, baseline: LcovData | null, rules: CoverageRule[], changedRules?: Set<CoverageRule>): DropResult[];

package/dist/src/coverage-drop.mjs

@@ -0,0 +1,39 @@
+import { matchRule } from "./rules.mjs";
+function fileTotals(lcov, targetRule, allRules) {
+    let hit = 0;
+    let total = 0;
+    for (const [file, lines] of lcov) {
+        if (matchRule(file, allRules) !== targetRule)
+            continue;
+        for (const count of lines.values()) {
+            total++;
+            if (count > 0)
+                hit++;
+        }
+    }
+    return { hit, total };
+}
+export function computeCoverageDrop(current, baseline, rules, changedRules) {
+    const dropRules = rules.filter((r) => r.no_coverage_drop);
+    return dropRules.map((rule) => {
+        const maxDrop = rule.max_coverage_drop ?? 0;
+        if (baseline === null || (changedRules !== undefined && !changedRules.has(rule))) {
+            return {
+                rule: rule.paths,
+                currentPct: null,
+                baselinePct: null,
+                drop: null,
+                maxDrop,
+                passed: true,
+                skipped: true,
+            };
+        }
+        const cur = fileTotals(current, rule, rules);
+        const base = fileTotals(baseline, rule, rules);
+        const currentPct = cur.total === 0 ? null : (cur.hit / cur.total) * 100;
+        const baselinePct = base.total === 0 ? null : (base.hit / base.total) * 100;
+        const drop = currentPct !== null && baselinePct !== null ? baselinePct - currentPct : null;
+        const passed = drop === null || drop <= maxDrop + 1e-9;
+        return { rule: rule.paths, currentPct, baselinePct, drop, maxDrop, passed, skipped: false };
+    });
+}

package/dist/src/diff-parser.mjs

@@ -114,6 +114,9 @@ export function parseDiff(text) {
 }
 /** Runs git merge-base + git diff and returns the raw diff text. Internal shared helper. */
 export async function runGitDiff(baseRef, headRef) {
+    if (baseRef.startsWith("-") || headRef.startsWith("-")) {
+        throw new Error("Git reference cannot start with a hyphen (prevents argument injection)");
+    }
     const { spawn } = await import("node:child_process");
     const spawnProcess = (cmd, args) => new Promise((resolve, reject) => {
         const chunks = [];

package/dist/src/lcov-records.d.mts

@@ -0,0 +1,29 @@
+/**
+ * Full-fidelity LCOV data for one source file.
+ * Preserves function, branch, and line coverage records.
+ */
+export type FullFileCoverage = {
+    /** FN: definitions keyed by function name. */
+    functions: Map<string, {
+        line: number;
+        name: string;
+    }>;
+    /** FNDA: hit counts keyed by function name. */
+    functionHits: Map<string, number>;
+    /** BRDA: hit counts keyed by "lineNo,blockNo,branchNo". */
+    branches: Map<string, number>;
+    /** DA: hit counts keyed by line number. */
+    lines: Map<number, number>;
+};
+/** Map from normalized file path → full LCOV coverage data. */
+export type FullLcovData = Map<string, FullFileCoverage>;
+/**
+ * Parses full-fidelity LCOV, preserving FN/FNDA/BRDA/DA records.
+ * Hits from repeated records for the same line/function/branch are summed.
+ * Summary records (TN/LF/LH/FNF/FNH/BRF/BRH) are skipped and recomputed by toLcovFull.
+ */
+export declare function parseLcovFull(text: string, stripPrefixes?: string[]): FullLcovData;
+/** Merges multiple FullLcovData maps by summing all hit counts per file/line/function/branch. */
+export declare function mergeLcovFull(reports: FullLcovData[]): FullLcovData;
+/** Serializes FullLcovData to LCOV text with recomputed FNF/FNH/BRF/BRH/LF/LH summaries. */
+export declare function toLcovFull(lcov: FullLcovData): string;

package/dist/src/lcov-records.mjs

@@ -0,0 +1,155 @@
+function normalizeSfPath(rawPath, stripPrefixes) {
+    let path = rawPath.replace(/\\/g, "/").replace(/^\.\//, "");
+    for (const prefix of stripPrefixes) {
+        if (path.startsWith(prefix))
+            return path.slice(prefix.length);
+    }
+    if (path.startsWith("/") || /^[A-Z]:\//i.test(path)) {
+        const match = path.match(/^.*?\/_?work\/([^/]+)\/\1\//);
+        if (match)
+            return path.slice(match[0].length);
+    }
+    return path;
+}
+function getOrCreate(data, file) {
+    let cov = data.get(file);
+    if (cov === undefined) {
+        cov = { branches: new Map(), functionHits: new Map(), functions: new Map(), lines: new Map() };
+        data.set(file, cov);
+    }
+    return cov;
+}
+function applyRecord(line, cov) {
+    if (line.startsWith("FN:")) {
+        const comma = line.indexOf(",", 3);
+        if (comma === -1)
+            return;
+        const lineNum = parseInt(line.slice(3, comma), 10);
+        const name = line.slice(comma + 1);
+        if (Number.isFinite(lineNum) && name)
+            cov.functions.set(name, { line: lineNum, name });
+    }
+    else if (line.startsWith("FNDA:")) {
+        const comma = line.indexOf(",", 5);
+        if (comma === -1)
+            return;
+        const hits = parseInt(line.slice(5, comma), 10);
+        const name = line.slice(comma + 1);
+        if (Number.isFinite(hits) && name)
+            cov.functionHits.set(name, (cov.functionHits.get(name) ?? 0) + hits);
+    }
+    else if (line.startsWith("BRDA:")) {
+        const parts = line.slice(5).split(",");
+        if (parts.length !== 4)
+            return;
+        const key = `${parts[0]},${parts[1]},${parts[2]}`;
+        const raw = parts[3];
+        const hits = raw === "-" ? 0 : parseInt(raw, 10);
+        if (Number.isFinite(hits))
+            cov.branches.set(key, (cov.branches.get(key) ?? 0) + hits);
+    }
+    else if (line.startsWith("DA:")) {
+        const comma = line.indexOf(",", 3);
+        if (comma === -1)
+            return;
+        const lineNum = parseInt(line.slice(3, comma), 10);
+        const hits = parseInt(line.slice(comma + 1), 10);
+        if (Number.isFinite(lineNum) && Number.isFinite(hits))
+            cov.lines.set(lineNum, (cov.lines.get(lineNum) ?? 0) + hits);
+    }
+    // TN:, LF:, LH:, FNF:, FNH:, BRF:, BRH: are summary lines — recomputed by toLcovFull
+}
+/**
+ * Parses full-fidelity LCOV, preserving FN/FNDA/BRDA/DA records.
+ * Hits from repeated records for the same line/function/branch are summed.
+ * Summary records (TN/LF/LH/FNF/FNH/BRF/BRH) are skipped and recomputed by toLcovFull.
+ */
+export function parseLcovFull(text, stripPrefixes = []) {
+    const result = new Map();
+    let current = null;
+    let start = 0;
+    while (start < text.length) {
+        let end = text.indexOf("\n", start);
+        if (end === -1)
+            end = text.length;
+        let lineEnd = end;
+        while (lineEnd > start) {
+            const c = text.charCodeAt(lineEnd - 1);
+            if (c === 32 || c === 9 || c === 13) {
+                lineEnd--;
+                continue;
+            }
+            break;
+        }
+        if (text.startsWith("SF:", start)) {
+            current = getOrCreate(result, normalizeSfPath(text.slice(start + 3, lineEnd), stripPrefixes));
+        }
+        else if (lineEnd - start === 13 && text.startsWith("end_of_record", start)) {
+            current = null;
+        }
+        else if (current !== null) {
+            applyRecord(text.slice(start, lineEnd), current);
+        }
+        start = end + 1;
+    }
+    return result;
+}
+/** Merges multiple FullLcovData maps by summing all hit counts per file/line/function/branch. */
+export function mergeLcovFull(reports) {
+    const merged = new Map();
+    for (const report of reports) {
+        for (const [file, cov] of report) {
+            const target = merged.get(file);
+            if (target === undefined) {
+                merged.set(file, {
+                    functions: new Map(cov.functions),
+                    functionHits: new Map(cov.functionHits),
+                    branches: new Map(cov.branches),
+                    lines: new Map(cov.lines),
+                });
+            }
+            else {
+                for (const [name, def] of cov.functions) {
+                    if (!target.functions.has(name))
+                        target.functions.set(name, def);
+                }
+                for (const [name, hits] of cov.functionHits)
+                    target.functionHits.set(name, (target.functionHits.get(name) ?? 0) + hits);
+                for (const [key, hits] of cov.branches)
+                    target.branches.set(key, (target.branches.get(key) ?? 0) + hits);
+                for (const [lineNum, hits] of cov.lines)
+                    target.lines.set(lineNum, (target.lines.get(lineNum) ?? 0) + hits);
+            }
+        }
+    }
+    return merged;
+}
+/** Serializes FullLcovData to LCOV text with recomputed FNF/FNH/BRF/BRH/LF/LH summaries. */
+export function toLcovFull(lcov) {
+    if (lcov.size === 0)
+        return "";
+    const out = [];
+    for (const [file, cov] of [...lcov.entries()].sort(([a], [b]) => a.localeCompare(b))) {
+        out.push("TN:", `SF:${file}`);
+        const fns = [...cov.functions.values()].sort((a, b) => a.line - b.line || a.name.localeCompare(b.name));
+        for (const fn of fns)
+            out.push(`FN:${fn.line},${fn.name}`);
+        const fnHits = [...cov.functionHits.entries()].sort(([a], [b]) => a.localeCompare(b));
+        for (const [name, hits] of fnHits)
+            out.push(`FNDA:${hits},${name}`);
+        out.push(`FNF:${cov.functions.size}`);
+        out.push(`FNH:${[...cov.functionHits.values()].filter((h) => h > 0).length}`);
+        const brs = [...cov.branches.entries()].sort(([a], [b]) => a.localeCompare(b));
+        for (const [key, hits] of brs)
+            out.push(`BRDA:${key},${hits}`);
+        out.push(`BRF:${cov.branches.size}`);
+        out.push(`BRH:${[...cov.branches.values()].filter((h) => h > 0).length}`);
+        const lines = [...cov.lines.entries()].sort(([a], [b]) => a - b);
+        for (const [lineNum, hits] of lines)
+            out.push(`DA:${lineNum},${hits}`);
+        out.push(`LF:${cov.lines.size}`);
+        out.push(`LH:${[...cov.lines.values()].filter((h) => h > 0).length}`);
+        out.push("end_of_record");
+    }
+    return `${out.join("\n")}\n`;
+}

package/dist/src/lcov-to-istanbul.mjs

@@ -64,9 +64,16 @@ export function lcovBufferToIstanbul(lcov, stripPrefixes) {
             continue;
         const fileCov = coverage[filePath]; // filePath was validated against coverage when SF: was processed
         if (line.startsWith("DA:")) {
-            const [lineNo, hits] = line.slice(3).split(",", 2);
-            const l = Number.parseInt(lineNo, 10);
-            const h = Number.parseInt(hits ?? "", 10);
+            // Optimization: Instead of using `split(",")`, we use `indexOf` and `slice`
+            // to avoid allocating intermediate arrays, reducing garbage collection pauses.
+            const rest = line.slice(3);
+            const commaIdx = rest.indexOf(",");
+            if (commaIdx === -1)
+                continue;
+            const lineNoStr = rest.slice(0, commaIdx);
+            const hitsStr = rest.slice(commaIdx + 1);
+            const l = Number.parseInt(lineNoStr, 10);
+            const h = Number.parseInt(hitsStr, 10);
             if (!Number.isInteger(l) || !Number.isInteger(h))
                 continue;
             const key = String(l);
@@ -112,11 +119,25 @@ export function lcovBufferToIstanbul(lcov, stripPrefixes) {
             }
         }
         else if (line.startsWith("BRDA:")) {
-            const parts = line.slice(5).split(",", 4);
-            const lineNo = Number.parseInt(parts[0], 10);
-            const blockId = parts[1] ?? "";
-            const branchId = parts[2] ?? "";
-            const taken = parts[3] === "-" ? 0 : Number.parseInt(parts[3] ?? "", 10);
+            // Optimization: Instead of using `split(",")`, we use `indexOf` and `slice`
+            // to avoid allocating intermediate arrays, reducing garbage collection pauses.
+            const rest = line.slice(5);
+            let comma1 = rest.indexOf(",");
+            if (comma1 === -1)
+                continue;
+            let comma2 = rest.indexOf(",", comma1 + 1);
+            if (comma2 === -1)
+                continue;
+            let comma3 = rest.indexOf(",", comma2 + 1);
+            if (comma3 === -1)
+                continue;
+            const lineNoStr = rest.slice(0, comma1);
+            const blockId = rest.slice(comma1 + 1, comma2);
+            const branchId = rest.slice(comma2 + 1, comma3);
+            const comma4 = rest.indexOf(",", comma3 + 1);
+            const takenStr = comma4 === -1 ? rest.slice(comma3 + 1) : rest.slice(comma3 + 1, comma4);
+            const lineNo = Number.parseInt(lineNoStr, 10);
+            const taken = takenStr === "-" ? 0 : Number.parseInt(takenStr, 10);
             if (!Number.isInteger(lineNo) || !blockId || !branchId || !Number.isInteger(taken))
                 continue;
             const blockKey = `${lineNo}-${blockId}`;
@@ -140,7 +161,10 @@ export function lcovBufferToIstanbul(lcov, stripPrefixes) {
     for (const [fp, blocks] of fileBranches) {
         const fileCov = coverage[fp]; // fp was validated against coverage when added to fileBranches
         for (const [blockKey, branches] of blocks) {
-            const lineNo = Number.parseInt(blockKey.split("-")[0], 10); // blockKey is always "N-blockId"
+            // blockKey is always "N-blockId". Optimization: avoid split("-")
+            const dashIdx = blockKey.indexOf("-");
+            const lineNoStr = blockKey.slice(0, dashIdx);
+            const lineNo = Number.parseInt(lineNoStr, 10);
             const branchLoc = loc(lineNo);
             const sorted = [...branches.entries()].sort(([a], [b]) => a.localeCompare(b, undefined, { numeric: true }));
             fileCov.branchMap[blockKey] = {

package/dist/src/report.d.mts

@@ -1,4 +1,4 @@
 import type { CoverageCheckResult } from "./types.mts";
 export declare const COMMENT_MARKER = "<!-- coverage-check -->";
-export declare function collapseRanges(lines: number[]): string;
+export declare function collapseRanges(lines: number[], prefix?: string): string;
 export declare function renderFailureComment(result: CoverageCheckResult, runUrl: string, now?: string): string;

package/dist/src/report.mjs

@@ -1,5 +1,5 @@
 export const COMMENT_MARKER = "<!-- coverage-check -->";
-export function collapseRanges(lines) {
+export function collapseRanges(lines, prefix = "L") {
     if (lines.length === 0)
         return "";
     const sorted = [...lines].sort((a, b) => a - b);
@@ -12,12 +12,12 @@ export function collapseRanges(lines) {
             end = n;
         }
         else {
-            ranges.push(start === end ? `L${start}` : `L${start}-${end}`);
+            ranges.push(start === end ? `${prefix}${start}` : `${prefix}${start}-${end}`);
             start = n;
             end = n;
         }
     }
-    ranges.push(start === end ? `L${start}` : `L${start}-${end}`);
+    ranges.push(start === end ? `${prefix}${start}` : `${prefix}${start}-${end}`);
     return ranges.join(", ");
 }
 function pct(bucket) {
@@ -31,6 +31,29 @@ function renderFileList(files) {
         .map((f) => `- \`${f.file}\`: ${collapseRanges(f.uncoveredLines)}`)
         .join("\n");
 }
+function pctOrDash(n) {
+    /* c8 ignore next -- failing drops always have non-null currentPct/baselinePct */
+    return n === null ? "—" : `${n.toFixed(2)}%`;
+}
+function dropOrDash(n) {
+    /* c8 ignore next -- failing drops always have non-null drop */
+    return n === null ? "—" : `${n.toFixed(2)}pp`;
+}
+function renderRegressionSection(drops) {
+    const failingDrops = drops.filter((d) => !d.passed && !d.skipped);
+    if (failingDrops.length === 0)
+        return "";
+    const rows = failingDrops.map((d) => {
+        const safeRule = d.rule.replaceAll("|", "\\|").replaceAll("`", "\\`");
+        return `| \`${safeRule}\` | ${pctOrDash(d.currentPct)} | ${pctOrDash(d.baselinePct)} | ${dropOrDash(d.drop)} | ${d.maxDrop}pp |`;
+    });
+    const table = [
+        "| Rule | Current | Baseline | Drop | Max allowed |",
+        "|---|---|---|---|---|",
+        ...rows,
+    ].join("\n");
+    return `\n### Coverage regression\n\n${table}`;
+}
 export function renderFailureComment(result, runUrl, now = new Date().toISOString()) {
     const failingBuckets = result.buckets.filter((b) => !b.passed);
     const table = [
@@ -51,6 +74,7 @@ export function renderFailureComment(result, runUrl, now = new Date().toISOStrin
     const informationalSection = informationalLines.length > 0
         ? `\n<details><summary>Informational (no rule)</summary>\n\n${informationalLines}\n</details>`
         : "";
+    const regressionSection = renderRegressionSection(result.drops);
     return `${COMMENT_MARKER}
 ## Patch coverage gate failed
 
@@ -59,7 +83,7 @@ ${table}
 ### Uncovered lines
 
 ${sections}
-${informationalSection}
+${informationalSection}${regressionSection}
 
 _Last updated: ${now} · [Workflow run](${runUrl})_`;
 }

package/dist/src/rules.d.mts

@@ -1,4 +1,9 @@
-import type { CoverageRule } from "./types.mts";
+import type { CoverageRule, DiffLines } from "./types.mts";
 export declare function loadRules(rulesPath: string): CoverageRule[];
 /** Returns the first matching rule for a repo-root-relative file path, or null. */
 export declare function matchRule(file: string, rules: CoverageRule[]): CoverageRule | null;
+/**
+ * Returns the set of rules that have at least one changed file in the diff.
+ * Used by `--drop-only-changed-areas` to scope the coverage-drop gate.
+ */
+export declare function buildChangedRules(diff: DiffLines, rules: CoverageRule[]): Set<CoverageRule>;

package/dist/src/rules.mjs

@@ -2,6 +2,21 @@
 import { readFileSync } from "node:fs";
 import { matchesGlob } from "node:path";
 import yaml from "js-yaml";
+function validateDropRuleFields(rule, i, rulesPath) {
+    const noDrop = rule.no_coverage_drop;
+    if (noDrop !== undefined && typeof noDrop !== "boolean") {
+        throw new Error(`${rulesPath}: rule[${i}].no_coverage_drop must be a boolean`);
+    }
+    const maxDrop = rule.max_coverage_drop;
+    if (maxDrop !== undefined) {
+        if (!Number.isFinite(maxDrop) || maxDrop < 0) {
+            throw new Error(`${rulesPath}: rule[${i}].max_coverage_drop must be a non-negative number`);
+        }
+        if (!noDrop) {
+            throw new Error(`${rulesPath}: rule[${i}].max_coverage_drop requires no_coverage_drop: true`);
+        }
+    }
+}
 export function loadRules(rulesPath) {
     const text = readFileSync(rulesPath, "utf8");
     const parsed = yaml.load(text);
@@ -17,6 +32,7 @@ export function loadRules(rulesPath) {
         if (!Number.isFinite(min) || min < 0 || min > 100) {
             throw new Error(`${rulesPath}: rule[${i}].patch_coverage_min must be a number between 0 and 100`);
         }
+        validateDropRuleFields(rule, i, rulesPath);
     }
     return parsed.rules;
 }
@@ -28,3 +44,10 @@ export function matchRule(file, rules) {
     }
     return null;
 }
+/**
+ * Returns the set of rules that have at least one changed file in the diff.
+ * Used by `--drop-only-changed-areas` to scope the coverage-drop gate.
+ */
+export function buildChangedRules(diff, rules) {
+    return new Set([...diff.keys()].map((f) => matchRule(f, rules)).filter((r) => r !== null));
+}

package/dist/src/step-summary.mjs

@@ -52,18 +52,33 @@ export function buildSummaryMarkdown(suiteSources, result, runUrl, branch = "mai
         "|---|---|---|---|",
         ruleRows || "| — | — | — | — |",
     ].join("\n");
+    let dropSection = "";
+    if (result.drops.length > 0) {
+        const dropRows = result.drops
+            .map((d) => {
+            let status;
+            if (d.skipped)
+                status = "⏭️";
+            else if (d.passed)
+                status = "✅";
+            else
+                status = "❌";
+            const baselinePct = d.baselinePct === null ? "—" : `${d.baselinePct.toFixed(2)}%`;
+            const currentPct = d.currentPct === null ? "—" : `${d.currentPct.toFixed(2)}%`;
+            const drop = d.drop === null ? "—" : `${d.drop.toFixed(2)}pp`;
+            return `| ${codeSpan(d.rule)} | ${d.maxDrop}pp | ${baselinePct} | ${currentPct} | ${drop} | ${status} |`;
+        })
+            .join("\n");
+        const dropTable = [
+            "| Rule | Max drop | Baseline | Current | Drop | Status |",
+            "|---|---|---|---|---|---|",
+            dropRows,
+        ].join("\n");
+        dropSection = `\n### Coverage drop\n\n${dropTable}\n`;
+    }
     const overall = result.passed ? "✅ passed" : "❌ failed";
     const runLink = runUrl !== "N/A" ? `\n\n_[View run](${runUrl})_` : "";
-    return `## Coverage summary — ${overall}
-
-### Suite totals
-
-${suiteTable}
-
-### Patch coverage
-
-${ruleTable}${runLink}
-`;
+    return `## Coverage summary — ${overall}\n\n### Suite totals\n\n${suiteTable}\n\n### Patch coverage\n\n${ruleTable}${dropSection}${runLink}\n`;
 }
 export function writeSummary(summaryFile, suiteSources, result, runUrl, branch) {
     appendFileSync(summaryFile, buildSummaryMarkdown(suiteSources, result, runUrl, branch), "utf8");

package/dist/src/types.d.mts

@@ -1,6 +1,8 @@
 export type CoverageRule = {
     paths: string;
     patch_coverage_min: number;
+    no_coverage_drop?: boolean;
+    max_coverage_drop?: number;
 };
 /** Map from repo-root-relative file path to map of added line number → trimmed source text. */
 export type DiffLineContent = Map<string, Map<number, string>>;
@@ -26,8 +28,18 @@ export type BucketResult = {
     files: FileCoverageResult[];
     passed: boolean;
 };
+export type DropResult = {
+    rule: string;
+    currentPct: number | null;
+    baselinePct: number | null;
+    drop: number | null;
+    maxDrop: number;
+    passed: boolean;
+    skipped: boolean;
+};
 export type CoverageCheckResult = {
     buckets: BucketResult[];
+    drops: DropResult[];
     informational: FileCoverageResult[];
     passed: boolean;
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "coverage-check",
-  "version": "0.5.0",
+  "version": "0.7.0",
   "description": "Patch-coverage gate: checks that newly added lines meet per-path coverage thresholds. Supports per-suite LCOV accumulation for conditional CI.",
   "license": "MIT",
   "author": "Jonathan Ong",
@@ -40,7 +40,7 @@
     "@types/node": "^25.8.0",
     "@vitest/coverage-v8": "^4.1.6",
     "husky": "^9.1.7",
-    "oxfmt": "^0.50.0",
+    "oxfmt": "^0.52.0",
     "oxlint": "^1.65.0",
     "typescript": "^6.0.3",
     "vitest": "^4.1.6"