supercov 1.0.1 → 1.1.1

package/README.md

@@ -7,13 +7,15 @@
 Paste this to your coding agent to start:
 
 ```text supercov-prompt
-Measure code quality with npx supercov and show me the weakest files.
+Measure code quality with npx supercov.
 ```
 
 Scoring needs a [TypeSafe AI](https://typesafe.ai) API key, and your coding agent will usually ask you for it. It costs about a cent per megabyte of source. Coverage needs no account, config file, import, custom reporter, or hosted service. Supercov is local, free, open source, and MIT licensed.
 
 [Website](https://supercov.com) · [Documentation](https://supercov.com/docs) · [npm](https://www.npmjs.com/package/supercov) · [GitHub](https://github.com/supercorp-ai/supercov)
 
+Supported languages: [JavaScript](https://supercov.com/docs/javascript) · [TypeScript](https://supercov.com/docs/javascript) · [Rust](https://supercov.com/docs/rust) · [Python](https://supercov.com/docs/python) · [Ruby](https://supercov.com/docs/ruby) · [Go](https://supercov.com/docs/go) · [Java](https://supercov.com/docs/java) · [Kotlin](https://supercov.com/docs/kotlin).
+
 Supported by [Supercorp](https://supercorp.ai).
 
 [Agent workflow](https://supercov.com/docs/agent-loop): ask your coding agent
@@ -217,21 +219,21 @@ Java and Kotlin have no registry of their own here, so a JVM project takes the b
 
 ## Supported languages
 
-| Language | Status | Start with |
-| --- | --- | --- |
-| JavaScript | Available | `npx supercov -- npm test` |
-| TypeScript | Available | `npx supercov -- npm test` |
-| Rust | Available | `npx supercov -- cargo test` |
-| Python | Available | `npx supercov -- pytest` |
-| Ruby | Available | `npx supercov -- rspec` |
-| Go | Available | `go run github.com/supercorp-ai/supercov/cmd/supercov@latest -- go test ./...` |
-| Java | Available | `npx supercov -- mvn test` |
-| Kotlin | Available | `npx supercov -- ./gradlew test` |
-| Zig | Coming soon | — |
-| PHP | Coming soon | — |
-| C | Coming soon | — |
-
-Supercov requires Node.js 22 or newer. Rust support currently uses Rust 1.95; cargo-nextest 0.9.138 and 0.9.140 are supported. Python support requires CPython 3.12 or newer and measures pytest and unittest runs. Ruby support requires Ruby 3.3 or newer (3.4 or newer for full measurement) and measures RSpec, Minitest, test-unit and Cucumber runs. Go support requires Go 1.22 or newer and measures `go test`. Java and Kotlin support requires a JDK 17 or newer with Maven or Gradle, and measures every JUnit Platform engine -- JUnit 5, JUnit 4 through Vintage, Kotest and Spock -- as well as TestNG.
+| Language | Status | Install | Start with |
+| --- | --- | --- | --- |
+| [JavaScript](https://supercov.com/docs/javascript) | Available | nothing, `npx` fetches it | `npx supercov -- npm test` |
+| [TypeScript](https://supercov.com/docs/javascript) | Available | nothing, `npx` fetches it | `npx supercov -- npm test` |
+| [Rust](https://supercov.com/docs/rust) | Available | `cargo install supercov` | `supercov -- cargo test` |
+| [Python](https://supercov.com/docs/python) | Available | `python -m pip install supercov-cli` | `supercov -- python -m pytest` |
+| [Ruby](https://supercov.com/docs/ruby) | Available | `gem install supercov` | `supercov -- bundle exec rspec` |
+| [Go](https://supercov.com/docs/go) | Available | nothing, `go run` fetches it | `go run github.com/supercorp-ai/supercov/cmd/supercov@latest -- go test ./...` |
+| [Java](https://supercov.com/docs/java) | Available | `brew install supercorp-ai/tap/supercov` | `supercov -- mvn test` |
+| [Kotlin](https://supercov.com/docs/kotlin) | Available | `brew install supercorp-ai/tap/supercov` | `supercov -- ./gradlew test` |
+| Zig | Coming soon | — | — |
+| PHP | Coming soon | — | — |
+| C | Coming soon | — | — |
+
+The `npx` path requires Node.js 22 or newer; the other installs need no Node. Rust support currently uses Rust 1.95; cargo-nextest 0.9.138 and 0.9.140 are supported. Python support requires CPython 3.12 or newer and measures pytest and unittest runs. Ruby support requires Ruby 3.3 or newer (3.4 or newer for full measurement) and measures RSpec, Minitest, test-unit and Cucumber runs. Go support requires Go 1.22 or newer and measures `go test`. Java and Kotlin support requires a JDK 17 or newer with Maven or Gradle, and measures every JUnit Platform engine -- JUnit 5, JUnit 4 through Vintage, Kotest and Spock -- as well as TestNG.
 
 ## Supported operating systems and architectures
 
@@ -243,7 +245,7 @@ The CLI is a single native binary. `npx supercov` selects the build for the mach
 | Linux | arm64, x64 | glibc 2.28 or newer (Debian 10, Ubuntu 18.10, RHEL 8 and later), or musl (Alpine); chosen automatically |
 | Windows | arm64, x64 | Windows 10 or newer |
 
-JavaScript, TypeScript, Python, Ruby, Rust, Go, Java and Kotlin suites are verified on Linux, macOS and Windows -- CPython 3.12, 3.13 and 3.14, Ruby 3.3, 3.4 and 4.0, and Go 1.22 and 1.25 on every one, and JDK 17 and 21 on every one that has them (Temurin publishes no 17 for arm64 Windows, so that pairing is 21 alone). Containers, VMs, and remote executors run the same Linux builds. Every release publishes the same binaries to npm, PyPI (`supercov-cli`, a wheel per platform) and RubyGems (`supercov`, a gem per platform except arm64 Windows, which Ruby has no platform for), and the source to crates.io (`supercov`).
+JavaScript, TypeScript, Python, Ruby, Rust, Go, Java and Kotlin suites are verified on Linux, macOS and Windows -- CPython 3.12, 3.13 and 3.14, Ruby 3.3, 3.4 and 4.0, and Go 1.22, 1.25, 1.26 and 1.27 on every one, and JDK 17 and 21 on every one that has them (Temurin publishes no 17 for arm64 Windows, so that pairing is 21 alone). Containers, VMs, and remote executors run the same Linux builds. Every release publishes the same binaries to npm, PyPI (`supercov-cli`, a wheel per platform) and RubyGems (`supercov`, a gem per platform except arm64 Windows, which Ruby has no platform for), and the source to crates.io (`supercov`).
 
 ## Supported test suites
 
@@ -320,3 +322,7 @@ npx supercov clean             # remove all runs and the build cache
 ## Free and open source
 
 [MIT licensed](LICENSE). Inspect, extend, and run it anywhere.
+
+## Contributors
+
+- [@DaVinciTachyon](https://github.com/DaVinciTachyon)

package/docs/cli.md

@@ -410,7 +410,7 @@ terminal or offline environment after the package has been downloaded.
 
 | Variable | Use |
 | --- | --- |
-| `SUPERCOV_SOURCE_ROOTS` | Set comma-separated first-party source roots when automatic discovery is ambiguous |
+| `SUPERCOV_SOURCE_ROOTS` | Comma-separated directories or files that hold your own code, in any language; everything else is left out |
 | `SUPERCOV_TEST_KIND` | Label the wrapped command as a test level such as `unit` or `e2e` |
 
 Examples:

package/docs/getting-started.md

@@ -16,7 +16,7 @@ To score the code itself rather than its tests, set a [Jev](https://typesafe.ai)
 key and ask:
 
 ```text supercov-prompt
-Measure code quality with npx supercov and show me the weakest files.
+Measure code quality with npx supercov.
 ```
 
 See [Understanding quality](https://supercov.com/docs/quality).

package/docs/performance.md

@@ -95,6 +95,6 @@ flow, `--view nodes` or `--view edges` pages the details; `--compact` omits repe
 source text while keeping locations and credit reasons. See
 [Investigating assertion evidence](assertion-evidence.md#read-a-large-flow).
 
-The disposable `assertions.report.cache.json` file lives beside the map. A missing
-or damaged cache is rebuilt. Removing it affects the next query's speed, not
+The disposable `assertions.report.cache.json` and `assertions.summary.cache.json`
+files live beside the map. A missing or damaged cache is rebuilt. Removing it affects the next query's speed, not
 your saved explanations.

package/docs/supported-suites.md

@@ -218,12 +218,24 @@ npx supercov -- python -m unittest
 | Runner | Attribution | Current requirement |
 | --- | --- | --- |
 | RSpec | Exact example and before/example/after phase identity | Ruby 3.4 or newer for full measurement; run with `npx supercov -- rspec` or `bundle exec rspec` |
-| Minitest (including Minitest::Spec and ActiveSupport::TestCase) | Exact test and setup/test/teardown identity; skips recorded | `ruby -Itest ...`, `rake test`, `rails test` |
+| Minitest (including Minitest::Spec and ActiveSupport::TestCase) | Exact test and setup/test/teardown identity; a test's coverage is a lower bound (see below); skips recorded | `ruby -Itest ...`, `rake test`, `rails test` |
 | test-unit | Exact test and setup/test/teardown identity; omissions and pendings recorded | `ruby -Itest ...`, `rake test` |
 | parallel_tests, Rails process workers | Exact per worker process | Workers inherit the run through `RUBYOPT`; verified on a Rails app with bootsnap, Zeitwerk and two forked workers |
 | Thread-parallel Minitest (`parallelize_me!`, `parallelize(with: :threads)`) | Probe observations exact per test; line, method and simple-branch observations made while phases overlapped go to the run, declared | |
 | Cucumber | Exact scenario identity (`features/x.feature:LINE`), hook steps as setup/teardown | `cucumber`, `bundle exec cucumber` |
 
+Ruby reports a line the first time it executes and never again, which is what
+makes collecting coverage cheap enough to leave on. So a test is credited with
+the lines it was first to reach, and a later test running the same lines is
+credited with none of them: what a test is credited with is really its own, and
+what it is not credited with is not evidence it did not run the code.
+
+Totals are unaffected — every line is credited to exactly one test. What this
+changes is per-test reporting: `supercov runs <id> test <name>` gives its
+numbers as "at least", and `tests affected` reports a test whose own record
+cannot settle the question as **undetermined** rather than unaffected, so
+`--names` includes it in the set to run.
+
 Your project runs in place with its own interpreter and bundle. Supercov loads
 through `RUBYOPT`; application files on disk and their backtrace line numbers
 stay unchanged. RSpec, Minitest and test-unit assertions can identify execution
@@ -261,6 +273,31 @@ npx supercov -- ruby -Itest test/shapes_test.rb
 npx supercov -- bin/rails test
 ```
 
+## Crediting a test with what it reached
+
+Most runners attribute exactly at no cost: Supercov runs each Rust test in its
+own process, Python's workers are processes, and JavaScript keeps a coverage
+map per test. Two cases cannot, because probes are a store into one array the
+whole process shares and two tests running at once cannot both be credited
+with what they reached:
+
+| | Left as written | `--exact-attribution` |
+| --- | --- | --- |
+| A Go test calling `t.Parallel()` | counted run-wide | announced after it resumes, with `-parallel=1` |
+| A JUnit suite with parallel execution enabled | counted run-wide | run in order |
+
+```sh supercov
+npx supercov --exact-attribution -- go test ./...
+```
+
+By default your command runs as you wrote it, and the run says what it could
+not credit. `--exact-attribution` buys that back by running the suite in order,
+which costs whatever its parallelism was worth — on sixteen I/O-bound JUnit
+tests across fifteen cores, 3.6x. Either way the coverage totals are the same;
+what changes is whether a line can be traced to the test that ran it.
+
+`supercov runs latest` reports which you got, under `Attribution`.
+
 ## Go
 
 | Runner | Attribution | Current requirement |
@@ -287,8 +324,19 @@ coverage never counts — a failed run cannot say which of it came from the test
 that failed.
 
 An `Example` with an `Output` comment and a `Fuzz` target's seed corpus are
-measured the same way. `go test` runs both, so what they reach is real
-coverage, but neither takes a `*testing.T` for a result to be named by.
+measured the same way: `go test` runs both, and what they reach is real
+coverage no test can claim.
+
+Such a test is still recorded as having run, with its outcome, and credited
+with no coverage. `supercov runs <id> test <name>` says that rather than
+reporting zeroes, coverage percentages leave it out, and `tests affected` lists
+it as **undetermined**: nothing can say a change missed it, so `--names`
+includes it in the set to run. A package where every test calls `t.Parallel()`
+is published like any other.
+
+A file Supercov cannot parse is a hole, not the end of the run. It is named on
+the line that reports the result and recorded in the run, and a run is refused
+only when nothing is left to measure.
 
 Supercov also writes evidence as the suite runs, not only at the end. Go offers
 no way to run code on `os.Exit`, and a `TestMain` need not reach the `m.Run()`

package/docs/troubleshooting.md

@@ -41,6 +41,20 @@ npx supercov runs latest scope
 Do not broaden the roots to dependencies or generated output merely to remove a
 warning. The goal is an honest boundary around code the repository owns.
 
+## Too much is measured
+
+Vendored or generated code beside your own is measured like the rest of the
+repository. Name the directories or files that hold your own code; this works
+for every language:
+
+```sh supercov
+SUPERCOV_SOURCE_ROOTS=src npx supercov -- pytest
+SUPERCOV_SOURCE_ROOTS=app.py,core.py npx supercov -- python -m unittest
+```
+
+Everything outside the roots is left out, and `npx supercov runs latest scope`
+lists what was.
+
 ## The tests pass but coverage is missing
 
 First check runner and source scope:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "supercov",
-  "version": "1.0.1",
+  "version": "1.1.1",
   "description": "Code quality and coverage for coding agents",
   "license": "MIT",
   "repository": {
@@ -56,6 +56,7 @@
     "test:rust-compiler-spikes": "cargo build -p supercov && node scripts/rust-libtest-companion-spike.mjs && node scripts/rust-async-attribution-spike.mjs && node scripts/rust-subprocess-attribution-spike.mjs && node scripts/rust-custom-harness-spike.mjs && node scripts/rust-libtest-builder-lifecycle-spike.mjs",
     "test": "cargo test --workspace",
     "test:react": "cargo build -p supercov && node scripts/rust-vitest-projects-integration.mjs && npm --prefix examples/react-verification ci && npm --prefix examples/react-verification run demo && node scripts/react-hydration-compatibility.mjs",
+    "test:release-tooling": "node --test tests/release/*.test.mjs",
     "test:runtime": "node --test tests/runtime/*.test.mjs",
     "test:fixture": "cargo build -p supercov && node scripts/rust-fixture-matrix.mjs",
     "test:packed-npx": "cargo build --release -p supercov && node scripts/packed-npx-integration.mjs",
@@ -64,7 +65,8 @@
     "test:watchdog": "cargo build -p supercov && node scripts/watchdog-integration.mjs",
     "test:engine-contract": "cargo build -p supercov && node scripts/engine-contract.mjs",
     "test:agent": "cargo build -p supercov && node scripts/agent-query-eval.mjs",
-    "test:engine": "cargo fmt --all -- --check && cargo clippy --workspace --all-targets -- -D warnings && cargo test --workspace && cargo build -p supercov && npm run test:runtime && npm run test:rust-assets && node scripts/rust-process-supervision.mjs && node scripts/rust-direct-node-integration.mjs && node scripts/rust-public-run-integration.mjs && node scripts/rust-embedded-runtime-integration.mjs && node scripts/rust-direct-vitest-integration.mjs && node scripts/rust-direct-jest-integration.mjs && node scripts/rust-direct-playwright-integration.mjs && node scripts/rust-custom-browser-playwright-integration.mjs && node scripts/rust-generic-esbuild-integration.mjs && node scripts/rust-generic-tsc-integration.mjs && node scripts/rust-generic-build-matrix.mjs && node scripts/rust-vite-playwright-integration.mjs",
+    "test:engine": "cargo fmt --all -- --check && cargo clippy --workspace --all-targets -- -D warnings && cargo test --workspace && npm run test:runtime && npm run test:rust-assets && npm run test:engine-integrations",
+    "test:engine-integrations": "cargo build -p supercov && node scripts/rust-process-supervision.mjs && node scripts/rust-direct-node-integration.mjs && node scripts/rust-public-run-integration.mjs && node scripts/rust-embedded-runtime-integration.mjs && node scripts/rust-direct-vitest-integration.mjs && node scripts/rust-direct-jest-integration.mjs && node scripts/rust-direct-playwright-integration.mjs && node scripts/rust-custom-browser-playwright-integration.mjs && node scripts/rust-generic-esbuild-integration.mjs && node scripts/rust-generic-tsc-integration.mjs && node scripts/rust-generic-build-matrix.mjs && node scripts/rust-vite-playwright-integration.mjs",
     "test:platform": "cargo test --workspace && cargo build -p supercov && node scripts/rust-process-supervision.mjs && node scripts/workspace-crash-integration.mjs",
     "test:native-package": "cargo build --release -p supercov && node scripts/native-package-integration.mjs && node scripts/native-release-set-integration.mjs",
     "test:pypi-wheel": "node scripts/pypi-wheel-integration.mjs",
@@ -77,7 +79,7 @@
     "test:test262": "cargo build --release -p supercov && node scripts/test262-equivalence.mjs",
     "benchmark:check": "cargo build --release -p supercov && node scripts/rust-transform-benchmark.mjs",
     "benchmark:python-monitoring": "cargo build -p supercov && node scripts/python-monitoring-benchmark.mjs",
-    "check": "cargo fmt --all -- --check && cargo clippy --workspace --all-targets -- -D warnings && npm run test && npm run test:runtime && npm run test:rust-assets && npm run test:assertion-maps && node scripts/package-preflight.mjs && node scripts/verify-binstall-metadata.mjs --offline",
+    "check": "cargo fmt --all -- --check && cargo clippy --workspace --all-targets -- -D warnings && npm run test && npm run test:release-tooling && npm run test:runtime && npm run test:rust-assets && npm run test:assertion-maps && npm run test:sweep-target && npm run test:skip-guard && npm run test:windows-tls && node scripts/package-preflight.mjs && node scripts/verify-binstall-metadata.mjs --offline",
     "release:check": "cargo clean && node scripts/sweep-target.mjs && npm run check && npm run test:engine && npm run test:go && npm run test:jvm && npm run test:launcher && npm run test:fixture && npm run test:watchdog && npm run test:engine-contract && npm run test:agent && npm run test:child-attribution && npm run test:host-loader && npm run test:python-monitoring && npm run test:ruby-coverage && npm run test:rust-public-cargo && npm run test:packed-npx && npm run test:clang-mcdc && npm run benchmark:check",
     "release:bump": "node scripts/bump-version.mjs",
     "sweep": "node scripts/sweep-target.mjs",
@@ -96,17 +98,21 @@
     "sync:assertion-schema": "cargo build -p supercov && node scripts/assertion-map-schema.mjs",
     "docs:sync": "node scripts/sync-docs.mjs",
     "docs:check": "node scripts/sync-docs.mjs --check",
-    "test:launcher": "go vet ./cmd/... && go test ./cmd/..."
+    "test:launcher": "go vet ./cmd/... && go test ./cmd/...",
+    "test:sweep-target": "node scripts/sweep-target-test.mjs",
+    "test:go-versions": "cargo build -p supercov-engine --tests && node scripts/go-version-matrix.mjs",
+    "test:skip-guard": "node scripts/skip-guard-test.mjs",
+    "test:windows-tls": "node scripts/windows-tls-test.mjs"
   },
   "optionalDependencies": {
-    "@supercov/cli-darwin-arm64": "1.0.1",
-    "@supercov/cli-darwin-x64": "1.0.1",
-    "@supercov/cli-linux-arm64-gnu": "1.0.1",
-    "@supercov/cli-linux-arm64-musl": "1.0.1",
-    "@supercov/cli-linux-x64-gnu": "1.0.1",
-    "@supercov/cli-linux-x64-musl": "1.0.1",
-    "@supercov/cli-win32-arm64": "1.0.1",
-    "@supercov/cli-win32-x64": "1.0.1"
+    "@supercov/cli-darwin-arm64": "1.1.1",
+    "@supercov/cli-darwin-x64": "1.1.1",
+    "@supercov/cli-linux-arm64-gnu": "1.1.1",
+    "@supercov/cli-linux-arm64-musl": "1.1.1",
+    "@supercov/cli-linux-x64-gnu": "1.1.1",
+    "@supercov/cli-linux-x64-musl": "1.1.1",
+    "@supercov/cli-win32-arm64": "1.1.1",
+    "@supercov/cli-win32-x64": "1.1.1"
   },
   "peerDependencies": {
     "@playwright/test": ">=1.55.0",