coverage-check 0.7.0 → 0.8.0

package/dist/src/s3-suite-store-reads.mjs

@@ -0,0 +1,57 @@
+import { GetObjectCommand } from "@aws-sdk/client-s3";
+import { encodeBranchName, isNewerTimestamp } from "./suite-store.mjs";
+import { bodyToBuffer, isNotFound } from "./s3-utils.mjs";
+export async function getLegacy(ctx, suite) {
+    const key = ctx.key(suite, "lcov.info");
+    try {
+        const resp = (await ctx.sendS3("get legacy coverage payload", key, new GetObjectCommand({
+            Bucket: ctx.bucket,
+            Key: key,
+        })));
+        return bodyToBuffer(resp.Body);
+    }
+    catch (err) {
+        if (isNotFound(err))
+            return null;
+        throw err;
+    }
+}
+export async function shouldWritePointer(ctx, suite, encodedBranch, incomingTimestamp) {
+    const key = ctx.key(suite, "branch", encodedBranch, "latest.json");
+    try {
+        const resp = (await ctx.sendS3("get branch pointer for compare", key, new GetObjectCommand({
+            Bucket: ctx.bucket,
+            Key: key,
+        })));
+        if (resp.Body === undefined)
+            return true;
+        const body = await bodyToBuffer(resp.Body);
+        const current = JSON.parse(body.toString("utf8"));
+        return !isNewerTimestamp(current.timestamp, incomingTimestamp);
+    }
+    catch (err) {
+        if (isNotFound(err))
+            return true;
+        throw err;
+    }
+}
+export async function readPointer(ctx, suite, branch) {
+    const keys = [
+        ctx.key(suite, "branch", encodeBranchName(branch), "latest.json"),
+        ctx.key(suite, "branch", branch, "latest.json"),
+    ];
+    let lastNotFound;
+    for (const key of keys) {
+        try {
+            const resp = (await ctx.sendS3("get branch pointer", key, new GetObjectCommand({ Bucket: ctx.bucket, Key: key })));
+            const body = await bodyToBuffer(resp.Body);
+            return JSON.parse(body.toString("utf8"));
+        }
+        catch (err) {
+            if (!isNotFound(err))
+                throw err;
+            lastNotFound = err;
+        }
+    }
+    throw lastNotFound;
+}

package/dist/src/s3-suite-store.d.mts

@@ -1,28 +1,25 @@
+import type { ClientLike, S3OperationDetails } from "./s3-diagnostics.mts";
 import type { SuitePutMeta, SuiteStore } from "./suite-store.mts";
-type ClientLike = {
-    send(cmd: object): Promise<unknown>;
-};
 export type S3SuiteStoreOptions = {
     bucket: string;
     prefix?: string;
     region?: string;
-    /** Inject a custom S3 client (e.g. for testing). */
     client?: ClientLike;
 };
 export declare class S3SuiteStore implements SuiteStore {
-    private readonly bucket;
+    readonly bucket: string;
     private readonly prefix;
     private readonly client;
     constructor({ bucket, prefix, region, client }: S3SuiteStoreOptions);
-    private key;
+    key(...parts: string[]): string;
     list(): Promise<string[]>;
     get(suite: string, opts?: {
         sha?: string;
         branch?: string;
     }): Promise<Buffer | null>;
     put(suite: string, lcov: Buffer, meta?: SuitePutMeta): Promise<void>;
-    private getLegacy;
-    private shouldWritePointer;
-    private readPointer;
+    sendS3(operation: string, key: string, command: object, details?: S3OperationDetails): Promise<unknown>;
+    private getVersionedPayload;
+    private putLegacyPayload;
+    private putPointer;
 }
-export {};

package/dist/src/s3-suite-store.mjs

@@ -1,5 +1,8 @@
-import { GetObjectCommand, ListObjectsV2Command, PutObjectCommand, S3Client, } from "@aws-sdk/client-s3";
-import { assertSafePathComponent, assertValidTimestamp, encodeBranchName, isNewerTimestamp, } from "./suite-store.mjs";
+import { GetObjectCommand, ListObjectsV2Command, PutObjectCommand } from "@aws-sdk/client-s3";
+import { gunzipSync, gzipSync } from "node:zlib";
+import { assertSafePathComponent, assertValidTimestamp, encodeBranchName } from "./suite-store.mjs";
+import { createS3Client, sendS3 } from "./s3-diagnostics.mjs";
+import { getLegacy, readPointer, shouldWritePointer } from "./s3-suite-store-reads.mjs";
 import { bodyToBuffer, isNotFound } from "./s3-utils.mjs";
 export class S3SuiteStore {
     bucket;
@@ -8,7 +11,7 @@ export class S3SuiteStore {
     constructor({ bucket, prefix, region, client }) {
         this.bucket = bucket;
         this.prefix = prefix ? prefix.replace(/\/+$/, "") : "";
-        this.client = client ?? new S3Client({ region });
+        this.client = client ?? createS3Client(region);
     }
     key(...parts) {
         return this.prefix ? [this.prefix, ...parts].join("/") : parts.join("/");
@@ -18,7 +21,7 @@ export class S3SuiteStore {
         const suites = [];
         let continuationToken;
         do {
-            const resp = (await this.client.send(new ListObjectsV2Command({
+            const resp = (await this.sendS3("list suites", this.key(), new ListObjectsV2Command({
                 Bucket: this.bucket,
                 Prefix: pfx,
                 Delimiter: "/",
@@ -36,112 +39,102 @@ export class S3SuiteStore {
         if (opts?.sha !== undefined)
             assertSafePathComponent(opts.sha, "sha");
         let sha = opts?.sha;
+        let pointer = null;
         if (!sha) {
             const branch = opts?.branch ?? "main";
             try {
-                const pointer = await this.readPointer(suite, branch);
+                pointer = await readPointer(this, suite, branch);
                 assertSafePathComponent(pointer.sha, "sha");
                 sha = pointer.sha;
             }
             catch (err) {
                 if (isNotFound(err))
-                    return this.getLegacy(suite);
+                    return getLegacy(this, suite);
                 throw err;
             }
         }
-        try {
-            const resp = (await this.client.send(new GetObjectCommand({
-                Bucket: this.bucket,
-                Key: this.key(suite, "sha", sha, "lcov.info"),
-            })));
-            return bodyToBuffer(resp.Body);
-        }
-        catch (err) {
-            if (isNotFound(err))
-                return null;
-            throw err;
-        }
+        return this.getVersionedPayload(suite, sha, pointer, opts?.sha !== undefined);
     }
     async put(suite, lcov, meta) {
         assertSafePathComponent(suite, "suite");
         if (meta === undefined) {
-            await this.client.send(new PutObjectCommand({
-                Bucket: this.bucket,
-                Key: this.key(suite, "lcov.info"),
-                Body: lcov,
-                ContentType: "text/plain",
-            }));
+            await this.putLegacyPayload(suite, lcov);
             return;
         }
         const { sha, branch } = meta;
         assertSafePathComponent(sha, "sha");
+        const encodedBranch = encodeBranchName(branch);
         const ts = meta.timestamp ?? new Date().toISOString();
         assertValidTimestamp(ts);
-        await this.client.send(new PutObjectCommand({
+        const payload = gzipSync(lcov);
+        const payloadKey = this.key(suite, "sha", sha, "lcov.info.gz");
+        await this.sendS3("put coverage payload", payloadKey, new PutObjectCommand({
             Bucket: this.bucket,
-            Key: this.key(suite, "sha", sha, "lcov.info"),
-            Body: lcov,
+            Key: payloadKey,
+            Body: payload,
+            ContentEncoding: "gzip",
             ContentType: "text/plain",
-        }));
-        if (!(await this.shouldWritePointer(suite, branch, ts)))
+        }), { rawBytes: lcov.byteLength, storedBytes: payload.byteLength });
+        if (!(await shouldWritePointer(this, suite, encodedBranch, ts)))
             return;
-        await this.client.send(new PutObjectCommand({
-            Bucket: this.bucket,
-            Key: this.key(suite, "branch", encodeBranchName(branch), "latest.json"),
-            Body: Buffer.from(JSON.stringify({ sha, timestamp: ts }), "utf8"),
-            ContentType: "application/json",
-        }));
+        await this.putPointer(suite, branch, sha, ts, payloadKey, lcov.byteLength, payload.byteLength);
     }
-    async getLegacy(suite) {
-        try {
-            const resp = (await this.client.send(new GetObjectCommand({
-                Bucket: this.bucket,
-                Key: this.key(suite, "lcov.info"),
-            })));
-            return bodyToBuffer(resp.Body);
-        }
-        catch (err) {
-            if (isNotFound(err))
-                return null;
-            throw err;
-        }
+    sendS3(operation, key, command, details = {}) {
+        return sendS3(this.client, this.bucket, operation, key, command, details);
     }
-    async shouldWritePointer(suite, branch, incomingTimestamp) {
-        try {
-            const resp = (await this.client.send(new GetObjectCommand({
-                Bucket: this.bucket,
-                Key: this.key(suite, "branch", encodeBranchName(branch), "latest.json"),
-            })));
-            if (resp.Body === undefined)
-                return true;
-            const body = await bodyToBuffer(resp.Body);
-            const current = JSON.parse(body.toString("utf8"));
-            return !isNewerTimestamp(current.timestamp, incomingTimestamp);
+    async getVersionedPayload(suite, sha, pointer, explicitSha) {
+        let candidates;
+        if (pointer?.payloadKey !== undefined) {
+            candidates = [{ key: pointer.payloadKey, encoding: pointer.encoding }];
         }
-        catch (err) {
-            if (isNotFound(err))
-                return true;
-            throw err;
+        else if (explicitSha) {
+            candidates = [
+                { key: this.key(suite, "sha", sha, "lcov.info.gz"), encoding: "gzip" },
+                { key: this.key(suite, "sha", sha, "lcov.info"), encoding: undefined },
+            ];
         }
-    }
-    async readPointer(suite, branch) {
-        const keys = [
-            this.key(suite, "branch", encodeBranchName(branch), "latest.json"),
-            this.key(suite, "branch", branch, "latest.json"),
-        ];
-        let lastNotFound;
-        for (const key of keys) {
+        else {
+            candidates = [{ key: this.key(suite, "sha", sha, "lcov.info"), encoding: undefined }];
+        }
+        for (const candidate of candidates) {
             try {
-                const resp = (await this.client.send(new GetObjectCommand({ Bucket: this.bucket, Key: key })));
+                const resp = (await this.sendS3("get coverage payload", candidate.key, new GetObjectCommand({
+                    Bucket: this.bucket,
+                    Key: candidate.key,
+                })));
                 const body = await bodyToBuffer(resp.Body);
-                return JSON.parse(body.toString("utf8"));
+                return candidate.encoding === "gzip" ? gunzipSync(body) : body;
             }
             catch (err) {
                 if (!isNotFound(err))
                     throw err;
-                lastNotFound = err;
             }
         }
-        throw lastNotFound;
+        return null;
+    }
+    async putLegacyPayload(suite, lcov) {
+        const key = this.key(suite, "lcov.info");
+        await this.sendS3("put legacy coverage payload", key, new PutObjectCommand({
+            Bucket: this.bucket,
+            Key: key,
+            Body: lcov,
+            ContentType: "text/plain",
+        }));
+    }
+    async putPointer(suite, branch, sha, timestamp, payloadKey, rawBytes, storedBytes) {
+        const pointerKey = this.key(suite, "branch", encodeBranchName(branch), "latest.json");
+        await this.sendS3("put branch pointer", pointerKey, new PutObjectCommand({
+            Bucket: this.bucket,
+            Key: pointerKey,
+            Body: Buffer.from(JSON.stringify({
+                sha,
+                timestamp,
+                payloadKey,
+                encoding: "gzip",
+                rawBytes,
+                storedBytes,
+            }), "utf8"),
+            ContentType: "application/json",
+        }));
     }
 }

package/dist/src/suite-store.d.mts

@@ -1,5 +1,6 @@
 import type { SuiteMeta } from "./types.mts";
 export declare function assertSafePathComponent(value: string, label: string): void;
+export declare function assertValidRepo(repo: string): string;
 export type { SuiteMeta };
 export type SuitePutMeta = {
     sha: string;

package/dist/src/suite-store.mjs

@@ -10,8 +10,27 @@ export function assertSafePathComponent(value, label) {
         throw new Error(`invalid ${label}: ${JSON.stringify(value)}`);
     }
 }
+export function assertValidRepo(repo) {
+    const trimmed = typeof repo === "string" ? repo.trim() : "";
+    if (trimmed.length === 0) {
+        throw new Error(`Invalid repository format: ${repo}. Expected owner/repo.`);
+    }
+    const parts = trimmed.split("/");
+    if (parts.length !== 2 ||
+        !/^[A-Za-z0-9_][A-Za-z0-9_.-]*$/.test(parts[0]) ||
+        !/^[A-Za-z0-9_.-]+$/.test(parts[1]) ||
+        parts[1] === "." ||
+        parts[1] === "..") {
+        throw new Error(`Invalid repository format: ${repo}. Expected owner/repo.`);
+    }
+    return trimmed;
+}
 export function encodeBranchName(branch) {
-    if (typeof branch !== "string" || branch.length === 0) {
+    if (typeof branch !== "string" ||
+        branch.length === 0 ||
+        branch === "." ||
+        branch.includes("..") ||
+        branch.includes("\\")) {
         throw new Error(`invalid branch: ${JSON.stringify(branch)}`);
     }
     return Buffer.from(branch, "utf8").toString("base64url");
@@ -91,10 +110,11 @@ export class FileSystemSuiteStore {
         }
         const { sha, branch } = meta;
         assertSafePathComponent(sha, "sha");
+        const encodedBranch = encodeBranchName(branch);
         const shaDir = join(this.root, suite, "sha", sha);
         mkdirSync(shaDir, { recursive: true });
         writeFileSync(join(shaDir, "lcov.info"), lcov);
-        const branchDir = join(this.root, suite, "branch", encodeBranchName(branch));
+        const branchDir = join(this.root, suite, "branch", encodedBranch);
         mkdirSync(branchDir, { recursive: true });
         const pointerPath = join(branchDir, "latest.json");
         const timestamp = meta.timestamp ?? new Date().toISOString();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "coverage-check",
-  "version": "0.7.0",
+  "version": "0.8.0",
   "description": "Patch-coverage gate: checks that newly added lines meet per-path coverage thresholds. Supports per-suite LCOV accumulation for conditional CI.",
   "license": "MIT",
   "author": "Jonathan Ong",
@@ -31,7 +31,8 @@
     "node": ">=22.0.0"
   },
   "dependencies": {
-    "@aws-sdk/client-s3": "^3.1048.0",
+    "@aws-sdk/client-s3": "3.1075.0",
+    "@smithy/node-http-handler": "^4.7.7",
     "js-yaml": "^4.1.1",
     "monocart-coverage-reports": "^2.12.11"
   },
@@ -40,7 +41,7 @@
     "@types/node": "^25.8.0",
     "@vitest/coverage-v8": "^4.1.6",
     "husky": "^9.1.7",
-    "oxfmt": "^0.52.0",
+    "oxfmt": "^0.53.0",
     "oxlint": "^1.65.0",
     "typescript": "^6.0.3",
     "vitest": "^4.1.6"