supercov 4.10.1 → 4.11.1

package/docs/supported-suites.md

@@ -452,6 +452,33 @@ is not the one Supercov instruments.
 npx supercov -- npx playwright test
 ```
 
+### A server Docker Compose builds
+
+A Playwright suite whose server `docker compose up` builds (`build:` in the
+compose file) measures it in any of these languages: Node, Python, Ruby, Go,
+Java or Kotlin. The image is built from Supercov's copy, so it holds the
+copy's code. Supercov's `docker` on the suite's PATH gives each service
+built from the copy the run's settings, and mounts the project's `.supercov`
+into it at the same path, so the server writes its coverage where the run
+reads it. Each request or window is credited to its test as for a server
+started directly. Supercov builds those services before starting them, so
+an image left over from an earlier run is never used. When the command ends
+it stops the containers it started; it never removes them.
+
+- Services that pull an image (`image:` with no `build:`) run code nobody
+  instrumented, and are left as they are.
+- A Python or Ruby image may keep the code at a path of its own
+  (`COPY backend/ /srv/`): the runtime matches the image's files to the
+  copy's by their paths' common ending, and only when several of them match.
+- A Go image needs Supercov's runtime package, `_supercov_runtime/` at the
+  module root: copy the whole module (`COPY . .`), not chosen directories.
+- `docker run` and a `docker build` the command makes itself are not
+  covered; neither is Windows.
+
+```sh
+npx supercov -- npx playwright test
+```
+
 ## Java and Kotlin
 
 | Runner | Attribution | Current requirement |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "supercov",
-  "version": "4.10.1",
+  "version": "4.11.1",
   "description": "Coverage, security and code quality for coding agents",
   "keywords": [
     "coverage",
@@ -83,7 +83,7 @@
     "eval:skill": "claude plugin eval plugins/supercov --scaffold --trust-plugin --no-publish --model claude-sonnet-5 --judge-model claude-haiku-4-5 --threshold 0.66 --tag behavior trigger --allow-tools Bash Edit Write --max-cost-usd 15",
     "eval:skill-triggers": "claude plugin eval plugins/supercov --scaffold --trust-plugin --no-publish --model claude-sonnet-5 --judge-model claude-haiku-4-5 --threshold 0.66 --tag trigger --ablation none --max-cost-usd 5",
     "test:engine": "cargo fmt --all -- --check && cargo clippy --workspace --all-targets -- -D warnings && cargo test --workspace && npm run test:runtime && npm run test:rust-assets && npm run test:engine-integrations",
-    "test:engine-integrations": "cargo build -p supercov && node scripts/html-report-integration.mjs && node scripts/rust-process-supervision.mjs && node scripts/rust-direct-node-integration.mjs && node scripts/rust-public-run-integration.mjs && node scripts/rust-embedded-runtime-integration.mjs && node scripts/rust-direct-vitest-integration.mjs && node scripts/rust-direct-jest-integration.mjs && node scripts/mocha-failure-output.mjs && node scripts/failure-output.mjs node ava tap && node scripts/side-by-side.mjs node && node scripts/merge-across.mjs && node scripts/rust-direct-playwright-integration.mjs && node scripts/rust-custom-browser-playwright-integration.mjs && node scripts/cross-origin-requests.mjs && node scripts/leaving-page.mjs && node scripts/background-by-time.mjs && node scripts/python-server-playwright.mjs && node scripts/ruby-server-playwright.mjs && node scripts/go-server-playwright.mjs && node scripts/jvm-server-playwright.mjs && node scripts/rust-classic-browser-integration.mjs && node scripts/rust-top-packages-integration.mjs && node scripts/rust-generic-esbuild-integration.mjs && node scripts/rust-generic-tsc-integration.mjs && node scripts/rust-generic-build-matrix.mjs && node scripts/rust-vite-playwright-integration.mjs",
+    "test:engine-integrations": "cargo build -p supercov && node scripts/html-report-integration.mjs && node scripts/rust-process-supervision.mjs && node scripts/rust-direct-node-integration.mjs && node scripts/rust-public-run-integration.mjs && node scripts/rust-embedded-runtime-integration.mjs && node scripts/rust-direct-vitest-integration.mjs && node scripts/rust-direct-jest-integration.mjs && node scripts/mocha-failure-output.mjs && node scripts/failure-output.mjs node ava tap && node scripts/side-by-side.mjs node && node scripts/merge-across.mjs && node scripts/rust-direct-playwright-integration.mjs && node scripts/rust-custom-browser-playwright-integration.mjs && node scripts/cross-origin-requests.mjs && node scripts/leaving-page.mjs && node scripts/background-by-time.mjs && node scripts/python-server-playwright.mjs && node scripts/ruby-server-playwright.mjs && node scripts/go-server-playwright.mjs && node scripts/jvm-server-playwright.mjs && node scripts/docker-server-playwright.mjs && node scripts/rust-classic-browser-integration.mjs && node scripts/rust-top-packages-integration.mjs && node scripts/rust-generic-esbuild-integration.mjs && node scripts/rust-generic-tsc-integration.mjs && node scripts/rust-generic-build-matrix.mjs && node scripts/rust-vite-playwright-integration.mjs",
     "test:platform": "cargo test --workspace && cargo build -p supercov && node scripts/rust-process-supervision.mjs && node scripts/workspace-crash-integration.mjs",
     "test:native-package": "cargo build --release -p supercov && node scripts/native-package-integration.mjs && node scripts/native-release-set-integration.mjs",
     "test:pypi-wheel": "node scripts/pypi-wheel-integration.mjs",
@@ -120,14 +120,14 @@
     "test:windows-tls": "node scripts/windows-tls-test.mjs"
   },
   "optionalDependencies": {
-    "@supercov/cli-darwin-arm64": "4.10.1",
-    "@supercov/cli-darwin-x64": "4.10.1",
-    "@supercov/cli-linux-arm64-gnu": "4.10.1",
-    "@supercov/cli-linux-arm64-musl": "4.10.1",
-    "@supercov/cli-linux-x64-gnu": "4.10.1",
-    "@supercov/cli-linux-x64-musl": "4.10.1",
-    "@supercov/cli-win32-arm64": "4.10.1",
-    "@supercov/cli-win32-x64": "4.10.1"
+    "@supercov/cli-darwin-arm64": "4.11.1",
+    "@supercov/cli-darwin-x64": "4.11.1",
+    "@supercov/cli-linux-arm64-gnu": "4.11.1",
+    "@supercov/cli-linux-arm64-musl": "4.11.1",
+    "@supercov/cli-linux-x64-gnu": "4.11.1",
+    "@supercov/cli-linux-x64-musl": "4.11.1",
+    "@supercov/cli-win32-arm64": "4.11.1",
+    "@supercov/cli-win32-x64": "4.11.1"
   },
   "peerDependencies": {
     "@playwright/test": ">=1.55.0",

package/runtime/javascript/atomic.mjs

@@ -2,6 +2,22 @@ import { appendFileSync, existsSync, mkdirSync, openSync, closeSync, fsyncSync,
 import { randomUUID } from "node:crypto";
 import { dirname, resolve } from "node:path";
 import { Buffer } from "node:buffer";
+
+// In a container Supercov's `docker` launcher mounts the run's directory
+// into, its user (root) owns what it creates there; a directory made with
+// the usual mask would keep the run, outside, from removing what goes in it.
+function makeDirectory(directory) {
+    if (process.env.SUPERCOV_CONTAINER !== "1")
+        return mkdirSync(directory, { recursive: true });
+    const previous = process.umask(0);
+    try {
+        return mkdirSync(directory, { recursive: true, mode: 0o777 });
+    }
+    finally {
+        process.umask(previous);
+    }
+}
+
 function fsyncDirectory(path) {
     try {
         const directory = openSync(path, "r");
@@ -18,7 +34,7 @@ function fsyncDirectory(path) {
 }
 /** Write a complete sibling file and atomically replace the destination. */
 export function atomicWriteFileSync(path, data, options) {
-    mkdirSync(dirname(path), { recursive: true });
+    makeDirectory(dirname(path));
     const temporary = `${path}.${process.pid}.${randomUUID()}.tmp`;
     let descriptor;
     try {
@@ -41,7 +57,7 @@ export function atomicWriteFileSync(path, data, options) {
 }
 /** Append one recoverable JSONL record and make the completed line durable. */
 export function appendJsonLineDurableSync(path, data) {
-    mkdirSync(dirname(path), { recursive: true });
+    makeDirectory(dirname(path));
     const existed = existsSync(path);
     const descriptor = openSync(path, "a", 0o600);
     try {
@@ -56,12 +72,12 @@ export function appendJsonLineDurableSync(path, data) {
 }
 /** Append a complete local record; process exit closes it before publication. */
 export function appendJsonLineSync(path, data) {
-    mkdirSync(dirname(path), { recursive: true });
+    makeDirectory(dirname(path));
     appendFileSync(path, data.endsWith("\n") ? data : `${data}\n`, { mode: 0o600 });
 }
 /** Atomically publish a fully prepared file or directory and persist its entry. */
 export function atomicRenameSync(source, destination) {
-    mkdirSync(dirname(destination), { recursive: true });
+    makeDirectory(dirname(destination));
     renameSync(source, destination);
     fsyncDirectory(dirname(destination));
 }

package/runtime/javascript/bootstrap.cjs

@@ -19,21 +19,28 @@ else {
         // <workspace>/.supercov/node_modules/bootstrap.cjs
         const root = path.resolve(__dirname, "..", "..");
         const settings = JSON.parse(fs.readFileSync(path.join(__dirname, "run.json"), "utf8"));
-        const moved = (value) => typeof value === "string" && settings.root !== root
-            ? value.split(settings.root).join(root)
+        // An image built from the workspace holds a copy of it, but its
+        // evidence belongs where the run reads it: when the run's own
+        // directory is mounted here at its path (Supercov's `docker` launcher
+        // mounts it), the host's paths are kept, and a copy that goes away
+        // with its container is not written to.
+        const hostVisible = settings.root !== root && fs.existsSync(path.join(settings.root, ".supercov"));
+        const here = hostVisible ? settings.root : root;
+        const moved = (value) => typeof value === "string" && settings.root !== here
+            ? value.split(settings.root).join(here)
             : value;
         // Settings carried over from the host name the host's paths, which do
         // not exist here; replace them all rather than keep a mixture.
-        const foreign = process.env.SUPERCOV_PROJECT_ROOT !== root;
+        const foreign = process.env.SUPERCOV_PROJECT_ROOT !== here;
         for (const [name, value] of Object.entries(settings.environment)) {
             if (foreign || process.env[name] === undefined)
                 process.env[name] = moved(value);
         }
-        process.env.SUPERCOV_PROJECT_ROOT = root;
+        process.env.SUPERCOV_PROJECT_ROOT = here;
         process.env.SUPERCOV_EXECUTION_LOG_SHARD ??= `bootstrap-${process.pid}-${Date.now()}`;
         require("./runtime.mjs");
         // Counted in the run's summary: coverage from here belongs to no test.
-        require("./launchSupervisor.mjs").recordExecution({ event: "guest-process", guestRoot: root });
+        require("./launchSupervisor.mjs").recordExecution({ event: "guest-process", guestRoot: here });
     }
     catch {
         // Without its settings or its runtime nothing can be recorded here,

package/runtime/javascript/launchSupervisor.mjs

@@ -4,6 +4,22 @@ import { appendFileSync, mkdirSync, statSync } from "node:fs";
 import Module, { syncBuiltinESMExports } from "node:module";
 import { dirname, isAbsolute, relative, resolve } from "node:path";
 import { pathToFileURL } from "node:url";
+
+// In a container Supercov's `docker` launcher mounts the run's directory
+// into, its user (root) owns what it creates there; a directory made with
+// the usual mask would keep the run, outside, from removing what goes in it.
+function makeDirectory(directory) {
+    if (process.env.SUPERCOV_CONTAINER !== "1")
+        return mkdirSync(directory, { recursive: true });
+    const previous = process.umask(0);
+    try {
+        return mkdirSync(directory, { recursive: true, mode: 0o777 });
+    }
+    finally {
+        process.umask(previous);
+    }
+}
+
 const HOST_PATH_KEYS = ["hostPath", "source", "src", "localPath"];
 const GUEST_PATH_KEYS = [
     "guestPath",
@@ -83,7 +99,7 @@ function record(value) {
             ppid: process.ppid,
             ...value,
         })}\n`;
-        mkdirSync(dirname(path), { recursive: true });
+        makeDirectory(dirname(path));
         appendFileSync(path, line);
         executionLog = { token: executionLog.token, path, size: executionLog.size + Buffer.byteLength(line) };
     }

package/runtime/javascript/playwright.mjs

@@ -719,6 +719,16 @@ class CoveragePhaseController {
             ArrayBuffer.isView(result))
             return result;
         const candidate = result;
+        // A native dialog is Playwright's own object, returned as it is. Its
+        // `type()` was taken for a locator's action: it returned a promise
+        // where Playwright returns a string, and started a phase whose
+        // activation waits on the page, which runs nothing while the dialog
+        // is open, so the dialog could never be answered and the page never
+        // closed. Nothing a dialog's methods do is the application's work.
+        if (typeof candidate["accept"] === "function" &&
+            typeof candidate["dismiss"] === "function" &&
+            typeof candidate["defaultValue"] === "function")
+            return result;
         if (typeof candidate["contexts"] === "function" &&
             typeof candidate["newContext"] === "function")
             trackBrowser(result);

package/runtime/javascript/runtime.mjs

@@ -450,12 +450,7 @@ function persistBrowser() {
     return;
   persistBrowserListenersInstalled = true;
   try {
-    // `beforeunload` fires inside the assignment that starts the navigation,
-    // and the rest of that handler runs after it, before the document goes.
-    addEventListener("beforeunload", () => {
-      handOverBrowser();
-      Promise.resolve().then(handOverBrowser);
-    });
+    addEventListener("beforeunload", handOverBrowser);
     addEventListener("pagehide", persistBrowserNow);
     addEventListener("visibilitychange", () => {
       if (typeof document !== "undefined" && document.visibilityState === "hidden")
@@ -526,7 +521,7 @@ function flushBufferedServerEvidence(scope) {
   if (!fs || buffered.records.size === 0)
     return void 0;
   try {
-    fs.mkdirSync(buffered.directory, { recursive: true });
+    makeEvidenceDirectory(fs, buffered.directory);
     fs.appendFileSync(buffered.path, [...buffered.records.values()].map((record) => JSON.stringify(record)).join("\n") + "\n");
     return buffered.path;
   } catch (e) {
@@ -616,11 +611,32 @@ function flushBackgroundAppends(fs) {
     }
   }
 }
+// In a container Supercov's `docker` launcher mounts the run's directory
+// into, its user (root) owns what it creates there, and the run, outside,
+// could not remove what went in it. There each directory made is opened to
+// all.
+function makeEvidenceDirectory(fs, directory) {
+  const first = fs.mkdirSync(directory, { recursive: true });
+  if (!first || typeof process === "undefined" || !process.env || process.env.SUPERCOV_CONTAINER !== "1")
+    return;
+  let current = first;
+  const opened = [current];
+  for (const part of directory.slice(first.length).split(/[\\/]/).filter(Boolean)) {
+    current = `${current}/${part}`;
+    opened.push(current);
+  }
+  for (const made of opened) {
+    try {
+      fs.chmodSync(made, 0o777);
+    } catch (e) {
+    }
+  }
+}
 function writeBackgroundLines(fs, runId, payload) {
   var _a8;
   const directory = backgroundEvidenceDirectory(runId);
   if (!state.createdEvidenceDirectories.has(directory)) {
-    fs.mkdirSync(directory, { recursive: true });
+    makeEvidenceDirectory(fs, directory);
     state.createdEvidenceDirectories.add(directory);
   }
   let path = state.backgroundWriters.get(runId);
@@ -750,7 +766,7 @@ function flushServerAppends() {
       if (!fs)
         throw new Error("node:fs is unavailable");
       if (!state.createdEvidenceDirectories.has(entry.directory)) {
-        fs.mkdirSync(entry.directory, { recursive: true });
+        makeEvidenceDirectory(fs, entry.directory);
         state.createdEvidenceDirectories.add(entry.directory);
       }
       fs.appendFileSync(path, entry.lines.join(""));