coverage-check 0.7.0 → 0.8.0

package/dist/src/commands/check.mjs

@@ -1,9 +1,10 @@
+// oxlint-disable max-lines -- check evaluation and CLI rendering share one pipeline
 import { readFileSync, writeFileSync } from "node:fs";
 import { parseLcov } from "../lcov-parser.mjs";
 import { mergeLcov } from "../lcov-merge.mjs";
 import { getChangedLines } from "../diff-parser.mjs";
 import { getChangedLineContent } from "../diff-parser-content.mjs";
-import { loadRules, buildChangedRules } from "../rules.mjs";
+import { loadRules, buildChangedRules, withIgnoredPaths } from "../rules.mjs";
 import { computePatchCoverage } from "../patch-coverage.mjs";
 import { computeCoverageDrop } from "../coverage-drop.mjs";
 import { collapseRanges, renderFailureComment } from "../report.mjs";
@@ -11,10 +12,16 @@ import { upsertComment } from "../github-comment.mjs";
 import { collectLcovFiles, buildStripPrefixes } from "../load-artifacts.mjs";
 import { writeSummary } from "../step-summary.mjs";
 import { parseCheckArgs } from "./check-args.mjs";
-import { warnNonContributing, printDropOutput, checkRequiredArtifacts } from "./check-output.mjs";
+import { checkHelp } from "./check-render.mjs";
+import { emptyResult, toJsonPayload } from "./check-result.mjs";
+import { missingRequiredArtifacts, nonContributingWarnings, printDropOutput, checkRequiredArtifacts, } from "./check-output.mjs";
 const stdout = (msg) => process.stdout.write(`${msg}\n`);
 const stderr = (msg) => process.stderr.write(`${msg}\n`);
 export async function main(argv) {
+    if (argv.length === 1 && (argv[0] === "--help" || argv[0] === "-h")) {
+        stdout(checkHelp());
+        return 0;
+    }
     let args;
     try {
         args = parseCheckArgs(argv);
@@ -25,18 +32,50 @@ export async function main(argv) {
     }
     return runCheck(args);
 }
-export async function runCheck(args) {
+export async function checkCoverage(args) {
+    return toCheckRunResult(args, await evaluateCheck(args));
+}
+function toCheckRunResult(args, evaluated) {
+    const skippedReason = evaluated.skippedReason ?? null;
+    const skipped = evaluated.result === null &&
+        skippedReason !== null &&
+        skippedReason.startsWith("no coverage data found") &&
+        !(args.failOnEmpty ?? false);
+    return {
+        result: evaluated.result ?? (skipped ? emptyResult(true) : null),
+        exitCode: evaluated.exitCode,
+        advisory: args.advisory ?? false,
+        skipped,
+        error: skipped ? null : skippedReason,
+        warnings: skipped ? [`coverage-check: ${skippedReason}`] : evaluated.warnings,
+    };
+}
+export async function evaluateCheck(args) {
+    const branch = args.branch ?? "main";
+    const runUrl = process.env["GITHUB_SERVER_URL"] && process.env["GITHUB_RUN_ID"]
+        ? `${process.env["GITHUB_SERVER_URL"]}/${args.repo}/actions/runs/${process.env["GITHUB_RUN_ID"]}`
+        : "N/A";
+    const emptyEvaluation = (exitCode, skippedReason) => ({
+        exitCode,
+        result: null,
+        suiteSources: [],
+        runUrl,
+        branch,
+        diffContent: null,
+        skippedReason,
+        parsedSources: [],
+        warnings: [],
+    });
     let rules;
     try {
-        rules = loadRules(args.rules);
+        rules = withIgnoredPaths(loadRules(args.rules), args.ignorePaths);
     }
     catch (err) {
-        stderr(`coverage-check: failed to load rules: ${err}`);
-        return 2;
+        return emptyEvaluation(2, `failed to load rules: ${err}`);
+    }
+    if (missingRequiredArtifacts(args.artifacts, args.requireArtifacts ?? []).length > 0) {
+        return emptyEvaluation(2, "missing required coverage artifact");
     }
-    if (!checkRequiredArtifacts(args.artifacts, args.requireArtifacts ?? []))
-        return 2;
-    const branch = args.branch ?? "main";
     const stripPrefixes = buildStripPrefixes(args.stripPrefixes);
     const reports = [];
     const suiteSources = [];
@@ -59,20 +98,31 @@ export async function runCheck(args) {
     const freshLcovs = [];
     for (const f of lcovFiles) {
         const lcov = parseLcov(readFileSync(f, "utf8"), stripPrefixes);
-        reports.push(lcov);
         freshLcovs.push(lcov);
-        parsedSources.push({ name: `file '${f}'`, lcov });
+        if (!(args.aggregateArtifacts ?? false)) {
+            reports.push(lcov);
+            parsedSources.push({ name: `file '${f}'`, lcov });
+        }
     }
     if (freshLcovs.length > 0) {
+        const freshMerged = mergeLcov(freshLcovs);
+        if (args.aggregateArtifacts ?? false) {
+            reports.push(freshMerged);
+            parsedSources.push({
+                name: `aggregated artifacts under '${args.artifacts}'`,
+                lcov: freshMerged,
+            });
+        }
         suiteSources.push({
             suite: args.suite ?? "(current)",
             source: "fresh",
-            lcov: mergeLcov(freshLcovs),
+            lcov: freshMerged,
         });
     }
     if (reports.length === 0) {
-        stderr(`coverage-check: no coverage data found — skipping`);
-        return 0;
+        return emptyEvaluation(args.failOnEmpty ? 1 : 0, args.failOnEmpty
+            ? `no coverage data found under ${args.artifacts}`
+            : "no coverage data found — skipping");
     }
     const lcov = mergeLcov(reports);
     let diff;
@@ -87,10 +137,19 @@ export async function runCheck(args) {
         }
     }
     catch (err) {
-        stderr(`coverage-check: git diff failed: ${err}`);
-        return 2;
+        return {
+            exitCode: 2,
+            result: null,
+            suiteSources,
+            runUrl,
+            branch,
+            diffContent: null,
+            skippedReason: `git diff failed: ${err}`,
+            parsedSources,
+            warnings: [],
+        };
     }
-    warnNonContributing(parsedSources, diff);
+    const warnings = nonContributingWarnings(parsedSources, diff);
     let baseline = null;
     if (args.store !== null) {
         try {
@@ -104,7 +163,7 @@ export async function runCheck(args) {
             }
         }
         catch (err) {
-            stderr(`coverage-check: warning: failed to load baseline from store: ${String(err)}`);
+            warnings.push(`coverage-check: warning: failed to load baseline from store: ${String(err)}`);
         }
     }
     const { buckets, informational } = computePatchCoverage(diff, lcov, rules);
@@ -112,15 +171,79 @@ export async function runCheck(args) {
     const drops = computeCoverageDrop(lcov, baseline, rules, changedRules);
     const passed = buckets.every((b) => b.passed) && drops.every((d) => d.passed || d.skipped);
     const result = { buckets, drops, informational, passed };
-    if (args.json) {
-        writeFileSync(args.json, JSON.stringify(result, null, 2));
+    return {
+        exitCode: (args.advisory ?? false) || passed ? 0 : 1,
+        result,
+        suiteSources,
+        runUrl,
+        branch,
+        diffContent,
+        parsedSources,
+        warnings,
+    };
+}
+export async function runCheck(args) {
+    const evaluated = await evaluateCheck(args);
+    const check = toCheckRunResult(args, evaluated);
+    const jsonToStdout = args.json === "-";
+    if (evaluated.result === null) {
+        if (evaluated.skippedReason === "missing required coverage artifact") {
+            if (args.json)
+                writeJson(args.json, check);
+            checkRequiredArtifacts(args.artifacts, args.requireArtifacts);
+            return evaluated.exitCode;
+        }
+        if (args.json)
+            writeJson(args.json, check);
+        if (check.error !== null)
+            stderr(`coverage-check: ${check.error}`);
+        for (const warning of check.warnings)
+            stderr(warning);
+        return evaluated.exitCode;
     }
-    const runUrl = process.env["GITHUB_SERVER_URL"] && process.env["GITHUB_RUN_ID"]
-        ? `${process.env["GITHUB_SERVER_URL"]}/${args.repo}/actions/runs/${process.env["GITHUB_RUN_ID"]}`
-        : "N/A";
-    if (!passed) {
+    for (const warning of evaluated.warnings)
+        stderr(warning);
+    const result = evaluated.result;
+    const diffContent = evaluated.diffContent;
+    const passed = result.passed;
+    if (args.json)
+        writeJson(args.json, check);
+    if (!jsonToStdout)
+        printHumanResult(result, diffContent);
+    const summaryFile = args.summaryFile !== undefined
+        ? args.summaryFile
+        : (process.env["GITHUB_STEP_SUMMARY"] ?? null);
+    if (summaryFile) {
+        try {
+            writeSummary(summaryFile, evaluated.suiteSources, result, evaluated.runUrl, evaluated.branch);
+        }
+        catch (err) {
+            stderr(`coverage-check: failed to write step summary: ${err}`);
+            return 2;
+        }
+    }
+    if (args.pr !== null && args.repo) {
+        const body = passed ? "" : renderFailureComment(result, evaluated.runUrl);
+        try {
+            await upsertComment(body, args.repo, args.pr, passed, args.gh);
+        }
+        catch (err) {
+            stderr(`coverage-check: failed to post PR comment: ${err}`);
+        }
+    }
+    return evaluated.exitCode;
+}
+function writeJson(path, check) {
+    const json = `${JSON.stringify(toJsonPayload(check), null, 2)}\n`;
+    if (path === "-")
+        process.stdout.write(json);
+    else
+        writeFileSync(path, json);
+}
+function printHumanResult(result, diffContent) {
+    if (!result.passed) {
         stdout("\ncoverage-check: FAILED\n");
-        for (const bucket of buckets.filter((b) => !b.passed)) {
+        for (const bucket of result.buckets.filter((b) => !b.passed)) {
             /* c8 ignore next -- bucket.coverable is always > 0 by patch-coverage.mts L36 guard */
             const pct = bucket.coverable > 0 ? `${((bucket.hit / bucket.coverable) * 100).toFixed(1)}%` : "—";
             stdout(`  ${bucket.rule}: ${pct} (${bucket.hit}/${bucket.coverable}) — threshold ${bucket.threshold}%`);
@@ -141,33 +264,11 @@ export async function runCheck(args) {
     }
     else {
         stdout("\ncoverage-check: PASSED\n");
-        for (const bucket of buckets) {
+        for (const bucket of result.buckets) {
             /* c8 ignore next -- bucket.coverable is always > 0 by patch-coverage.mts L36 guard */
             const pct = bucket.coverable > 0 ? `${((bucket.hit / bucket.coverable) * 100).toFixed(1)}%` : "—";
             stdout(`  ${bucket.rule}: ${pct} ✓`);
         }
     }
-    printDropOutput(drops);
-    const summaryFile = args.summaryFile !== undefined
-        ? args.summaryFile
-        : (process.env["GITHUB_STEP_SUMMARY"] ?? null);
-    if (summaryFile) {
-        try {
-            writeSummary(summaryFile, suiteSources, result, runUrl, branch);
-        }
-        catch (err) {
-            stderr(`coverage-check: failed to write step summary: ${err}`);
-            return 2;
-        }
-    }
-    if (args.pr !== null && args.repo) {
-        const body = passed ? "" : renderFailureComment(result, runUrl);
-        try {
-            await upsertComment(body, args.repo, args.pr, passed, args.gh);
-        }
-        catch (err) {
-            stderr(`coverage-check: failed to post PR comment: ${err}`);
-        }
-    }
-    return (args.advisory ?? false) || passed ? 0 : 1;
+    printDropOutput(result.drops);
 }

package/dist/src/commands/prepare-artifacts.d.mts

@@ -0,0 +1,18 @@
+export type ExpectedSuite = {
+    job: string;
+    suite: string;
+};
+export type PrepareArtifactsArgs = {
+    artifacts: string;
+    expectedSuites: ExpectedSuite[];
+};
+export type PrepareArtifactsResult = {
+    message: string;
+    missing: string[];
+};
+export declare function parsePrepareArtifactsArgs(argv: string[]): PrepareArtifactsArgs;
+export declare function missingCoverageArtifacts(artifactsDir: string, expectedSuites: ExpectedSuite[]): string[];
+export declare function normalizeCoverageArtifacts(artifactsDir: string, expectedSuites: ExpectedSuite[]): string;
+export declare function prepareCoverageArtifacts(args: PrepareArtifactsArgs): PrepareArtifactsResult;
+export declare function runPrepareArtifacts(args: PrepareArtifactsArgs): number;
+export declare function main(argv: string[]): number;

package/dist/src/commands/prepare-artifacts.mjs

@@ -0,0 +1,105 @@
+import { existsSync, mkdirSync, renameSync, unlinkSync } from "node:fs";
+import { join } from "node:path";
+const stdout = (msg) => process.stdout.write(`${msg}\n`);
+const stderr = (msg) => process.stderr.write(`${msg}\n`);
+export function parsePrepareArtifactsArgs(argv) {
+    const args = {
+        artifacts: "./coverage-artifacts",
+        expectedSuites: [],
+    };
+    for (let i = 0; i < argv.length; i++) {
+        const flag = argv[i];
+        const next = argv[i + 1];
+        const val = () => {
+            if (next === undefined || next.startsWith("--")) {
+                throw new Error(`${flag} requires a value`);
+            }
+            i++;
+            return next;
+        };
+        switch (flag) {
+            case "--artifacts":
+                args.artifacts = val();
+                break;
+            case "--expect-suite": {
+                const raw = val();
+                const eq = raw.indexOf("=");
+                if (eq <= 0 || eq === raw.length - 1) {
+                    throw new Error(`--expect-suite must be formatted as <job>=<suite>, got ${JSON.stringify(raw)}`);
+                }
+                args.expectedSuites.push({ job: raw.slice(0, eq), suite: raw.slice(eq + 1) });
+                break;
+            }
+            default:
+                throw new Error(`unknown flag: ${flag}`);
+        }
+    }
+    return args;
+}
+function expectedLcovPath(artifactsDir, suite) {
+    return join(artifactsDir, `coverage-${suite}`, "lcov.info");
+}
+export function missingCoverageArtifacts(artifactsDir, expectedSuites) {
+    const errors = [];
+    for (const { job, suite } of expectedSuites) {
+        if (!existsSync(expectedLcovPath(artifactsDir, suite))) {
+            errors.push(`Missing coverage artifact for ${job}: coverage-${suite}/lcov.info`);
+        }
+    }
+    return errors;
+}
+export function normalizeCoverageArtifacts(artifactsDir, expectedSuites) {
+    const rootLcovPath = join(artifactsDir, "lcov.info");
+    if (!existsSync(rootLcovPath))
+        return "Coverage artifact layout already uses named directories.";
+    if (expectedSuites.length === 0) {
+        return "No expected coverage suites configured; leaving root-level lcov.info unchanged.";
+    }
+    if (expectedSuites.length !== 1) {
+        const missingNamedSuites = missingCoverageArtifacts(artifactsDir, expectedSuites);
+        if (missingNamedSuites.length === 0) {
+            unlinkSync(rootLcovPath);
+            return "Removed duplicate root-level lcov.info (all expected named coverage artifacts already exist).";
+        }
+        throw new Error(`Root-level lcov.info is only valid for exactly one expected coverage suite; got ${expectedSuites.length}.`);
+    }
+    const suite = expectedSuites[0].suite;
+    const targetDir = join(artifactsDir, `coverage-${suite}`);
+    const targetPath = join(targetDir, "lcov.info");
+    if (existsSync(targetPath)) {
+        unlinkSync(rootLcovPath);
+        return `Removed duplicate root-level lcov.info (coverage-${suite}/lcov.info already present).`;
+    }
+    mkdirSync(targetDir, { recursive: true });
+    renameSync(rootLcovPath, targetPath);
+    return `Normalized root-level lcov.info to coverage-${suite}/lcov.info.`;
+}
+export function prepareCoverageArtifacts(args) {
+    const message = normalizeCoverageArtifacts(args.artifacts, args.expectedSuites);
+    return {
+        message,
+        missing: missingCoverageArtifacts(args.artifacts, args.expectedSuites),
+    };
+}
+export function runPrepareArtifacts(args) {
+    const result = prepareCoverageArtifacts(args);
+    stdout(result.message);
+    if (result.missing.length === 0) {
+        stdout("Coverage artifacts are complete.");
+        return 0;
+    }
+    for (const error of result.missing)
+        stderr(`::error::${error}`);
+    return 1;
+}
+export function main(argv) {
+    try {
+        return runPrepareArtifacts(parsePrepareArtifactsArgs(argv));
+    }
+    catch (error) {
+        /* c8 ignore next -- defensive fallback; local command errors throw Error instances */
+        const message = error instanceof Error ? error.message : String(error);
+        stderr(`coverage-check prepare-artifacts: ${message}`);
+        return 2;
+    }
+}

package/dist/src/coverage-check.d.mts

@@ -1,14 +1,18 @@
-export { runCheck } from "./commands/check.mts";
+export { checkCoverage, evaluateCheck, runCheck } from "./commands/check.mts";
 export { runStorePut } from "./commands/store-put.mts";
 export { runMerge } from "./commands/merge.mts";
+export { missingCoverageArtifacts, normalizeCoverageArtifacts, prepareCoverageArtifacts, runPrepareArtifacts, } from "./commands/prepare-artifacts.mts";
 export { FileSystemSuiteStore } from "./suite-store.mts";
 export { S3SuiteStore } from "./s3-suite-store.mts";
 export { parseDiffWithContent, getChangedLineContent } from "./diff-parser-content.mts";
 export { collapseRanges } from "./report.mts";
 export { parseLcovFull, mergeLcovFull, toLcovFull } from "./lcov-records.mts";
-export type { CheckArgs } from "./commands/check.mts";
+export { collectLcovFiles } from "./load-artifacts.mts";
+export { loadRules, zeroThresholdGlobs } from "./rules.mts";
+export type { CheckArgs, CheckRunResult, EvaluatedCheck } from "./commands/check.mts";
 export type { StorePutArgs } from "./commands/store-put.mts";
 export type { MergeArgs } from "./commands/merge.mts";
+export type { ExpectedSuite, PrepareArtifactsArgs, PrepareArtifactsResult, } from "./commands/prepare-artifacts.mts";
 export type { SuiteStore, SuiteMeta } from "./suite-store.mts";
 export type { S3SuiteStoreOptions } from "./s3-suite-store.mts";
 export { computeCoverageDrop } from "./coverage-drop.mts";

package/dist/src/coverage-check.mjs

@@ -1,9 +1,12 @@
-export { runCheck } from "./commands/check.mjs";
+export { checkCoverage, evaluateCheck, runCheck } from "./commands/check.mjs";
 export { runStorePut } from "./commands/store-put.mjs";
 export { runMerge } from "./commands/merge.mjs";
+export { missingCoverageArtifacts, normalizeCoverageArtifacts, prepareCoverageArtifacts, runPrepareArtifacts, } from "./commands/prepare-artifacts.mjs";
 export { FileSystemSuiteStore } from "./suite-store.mjs";
 export { S3SuiteStore } from "./s3-suite-store.mjs";
 export { parseDiffWithContent, getChangedLineContent } from "./diff-parser-content.mjs";
 export { collapseRanges } from "./report.mjs";
 export { parseLcovFull, mergeLcovFull, toLcovFull } from "./lcov-records.mjs";
+export { collectLcovFiles } from "./load-artifacts.mjs";
+export { loadRules, zeroThresholdGlobs } from "./rules.mjs";
 export { computeCoverageDrop } from "./coverage-drop.mjs";

package/dist/src/github-comment.mjs

@@ -1,4 +1,5 @@
 import { COMMENT_MARKER } from "./report.mjs";
+import { assertValidRepo } from "./suite-store.mjs";
 /* c8 ignore start */
 async function defaultGhRunner(args) {
     const { spawn } = await import("node:child_process");
@@ -43,17 +44,18 @@ async function findExistingComment(repo, pr, gh) {
  * - On pass with no prior comment: stays silent.
  */
 export async function upsertComment(body, repo, pr, passed, gh = defaultGhRunner) {
-    const existingId = await findExistingComment(repo, pr, gh);
+    const normalizedRepo = assertValidRepo(repo);
+    const existingId = await findExistingComment(normalizedRepo, pr, gh);
     if (passed && existingId === null)
         return;
     if (passed && existingId !== null) {
-        await gh(["api", `repos/${repo}/issues/comments/${existingId}`, "-X", "DELETE"]);
+        await gh(["api", `repos/${normalizedRepo}/issues/comments/${existingId}`, "-X", "DELETE"]);
         return;
     }
     if (existingId !== null) {
         await gh([
             "api",
-            `repos/${repo}/issues/comments/${existingId}`,
+            `repos/${normalizedRepo}/issues/comments/${existingId}`,
             "-X",
             "PATCH",
             "-f",
@@ -61,6 +63,6 @@ export async function upsertComment(body, repo, pr, passed, gh = defaultGhRunner
         ]);
     }
     else {
-        await gh(["api", `repos/${repo}/issues/${pr}/comments`, "-f", `body=${body}`]);
+        await gh(["api", `repos/${normalizedRepo}/issues/${pr}/comments`, "-f", `body=${body}`]);
     }
 }

package/dist/src/lcov-records.mjs

@@ -39,11 +39,20 @@ function applyRecord(line, cov) {
             cov.functionHits.set(name, (cov.functionHits.get(name) ?? 0) + hits);
     }
     else if (line.startsWith("BRDA:")) {
-        const parts = line.slice(5).split(",");
-        if (parts.length !== 4)
+        // Optimization: Instead of using `split(",")` which allocates an array, manually find commas
+        const c1 = line.indexOf(",", 5);
+        if (c1 === -1)
             return;
-        const key = `${parts[0]},${parts[1]},${parts[2]}`;
-        const raw = parts[3];
+        const c2 = line.indexOf(",", c1 + 1);
+        if (c2 === -1)
+            return;
+        const c3 = line.indexOf(",", c2 + 1);
+        if (c3 === -1)
+            return;
+        if (line.indexOf(",", c3 + 1) !== -1)
+            return;
+        const key = line.slice(5, c3);
+        const raw = line.slice(c3 + 1);
         const hits = raw === "-" ? 0 : parseInt(raw, 10);
         if (Number.isFinite(hits))
             cov.branches.set(key, (cov.branches.get(key) ?? 0) + hits);

package/dist/src/rules.d.mts

@@ -1,5 +1,9 @@
 import type { CoverageRule, DiffLines } from "./types.mts";
 export declare function loadRules(rulesPath: string): CoverageRule[];
+/** Returns path globs whose patch coverage threshold is exactly zero. */
+export declare function zeroThresholdGlobs(rulesPath: string): string[];
+/** Prepends zero-threshold rules for paths that should be ignored by this run. */
+export declare function withIgnoredPaths(rules: CoverageRule[], ignorePaths?: string[]): CoverageRule[];
 /** Returns the first matching rule for a repo-root-relative file path, or null. */
 export declare function matchRule(file: string, rules: CoverageRule[]): CoverageRule | null;
 /**

package/dist/src/rules.mjs

@@ -36,6 +36,16 @@ export function loadRules(rulesPath) {
     }
     return parsed.rules;
 }
+/** Returns path globs whose patch coverage threshold is exactly zero. */
+export function zeroThresholdGlobs(rulesPath) {
+    return loadRules(rulesPath).flatMap((rule) => rule.patch_coverage_min === 0 ? [rule.paths] : []);
+}
+/** Prepends zero-threshold rules for paths that should be ignored by this run. */
+export function withIgnoredPaths(rules, ignorePaths = []) {
+    if (ignorePaths.length === 0)
+        return rules;
+    return [...ignorePaths.map((paths) => ({ paths, patch_coverage_min: 0 })), ...rules];
+}
 /** Returns the first matching rule for a repo-root-relative file path, or null. */
 export function matchRule(file, rules) {
     for (const rule of rules) {

package/dist/src/s3-diagnostics.d.mts

@@ -0,0 +1,9 @@
+export type ClientLike = {
+    send(cmd: object): Promise<unknown>;
+};
+export type S3OperationDetails = {
+    rawBytes?: number;
+    storedBytes?: number;
+};
+export declare function createS3Client(region?: string): ClientLike;
+export declare function sendS3(client: ClientLike, bucket: string, operation: string, key: string, command: object, details?: S3OperationDetails): Promise<unknown>;

package/dist/src/s3-diagnostics.mjs

@@ -0,0 +1,60 @@
+import { S3Client } from "@aws-sdk/client-s3";
+import { NodeHttpHandler } from "@smithy/node-http-handler";
+export function createS3Client(region) {
+    return new S3Client({
+        maxAttempts: readPositiveIntEnv("COVERAGE_CHECK_S3_MAX_ATTEMPTS", 2),
+        region,
+        requestHandler: new NodeHttpHandler({
+            connectionTimeout: readPositiveIntEnv("COVERAGE_CHECK_S3_CONNECTION_TIMEOUT_MS", 5000),
+            requestTimeout: readPositiveIntEnv("COVERAGE_CHECK_S3_REQUEST_TIMEOUT_MS", 30000),
+        }),
+    });
+}
+export async function sendS3(client, bucket, operation, key, command, details = {}) {
+    const start = performance.now();
+    try {
+        const result = await client.send(command);
+        logS3(bucket, operation, key, "ok", performance.now() - start, details);
+        return result;
+    }
+    catch (err) {
+        logS3(bucket, operation, key, "failed", performance.now() - start, {
+            ...details,
+            error: formatError(err),
+        });
+        throw err;
+    }
+}
+function logS3(bucket, operation, key, status, elapsedMs, details) {
+    const parts = [
+        "coverage-check s3",
+        `operation=${JSON.stringify(operation)}`,
+        `status=${status}`,
+        `bucket=${JSON.stringify(bucket)}`,
+        `key=${JSON.stringify(key)}`,
+        `elapsed_ms=${Math.round(elapsedMs)}`,
+    ];
+    if (details.rawBytes !== undefined)
+        parts.push(`raw_bytes=${details.rawBytes}`);
+    if (details.storedBytes !== undefined)
+        parts.push(`stored_bytes=${details.storedBytes}`);
+    if (details.error !== undefined)
+        parts.push(`error=${JSON.stringify(details.error)}`);
+    process.stderr.write(`${parts.join(" ")}\n`);
+}
+function readPositiveIntEnv(name, fallback) {
+    const raw = process.env[name];
+    if (raw === undefined || raw === "")
+        return fallback;
+    const value = Number(raw);
+    if (!Number.isInteger(value) || value <= 0) {
+        process.stderr.write(`coverage-check s3 invalid ${name}=${JSON.stringify(raw)}; using ${fallback}\n`);
+        return fallback;
+    }
+    return value;
+}
+function formatError(err) {
+    if (err instanceof Error)
+        return `${err.name}: ${err.message}`;
+    return String(err);
+}

package/dist/src/s3-suite-store-reads.d.mts

@@ -0,0 +1,17 @@
+export type StoredPointer = {
+    sha: string;
+    timestamp?: string;
+    payloadKey?: string;
+    encoding?: "gzip";
+    rawBytes?: number;
+    storedBytes?: number;
+};
+type ReadContext = {
+    bucket: string;
+    key(...parts: string[]): string;
+    sendS3(operation: string, key: string, command: object): Promise<unknown>;
+};
+export declare function getLegacy(ctx: ReadContext, suite: string): Promise<Buffer | null>;
+export declare function shouldWritePointer(ctx: ReadContext, suite: string, encodedBranch: string, incomingTimestamp: string): Promise<boolean>;
+export declare function readPointer(ctx: ReadContext, suite: string, branch: string): Promise<StoredPointer>;
+export {};