supercov 4.23.0 → 4.24.1

package/docs/cli.md

@@ -742,15 +742,18 @@ Merge creates a new run. The inputs must describe the same source,
 configuration, toolchain, schema, and coverage denominator. Supercov rejects an
 incompatible merge rather than publishing a misleading aggregate.
 
-With no run named, `merge` takes the runs recorded on the source as it is now:
-the newest of each command, leaving out runs that are themselves a merge. It
-prints the runs it took. This is what a script uses after measuring its
-suites, one after another or side by side, without knowing what each run was
-called. Asked again with nothing new, it names the merge already made.
+With no run named, `merge` takes the runs recorded on the source as it is now,
+leaving out runs that are themselves a merge. It prints the runs it took. This
+is what a script uses after measuring its suites, one after another or side by
+side, without knowing what each run was called. Asked again with nothing new,
+it names the merge already made.
 
 A test that is in two of the runs is one test in the merge. If it failed in
-either, it is failed, which is why a command run again replaces its earlier
-run and is not merged with it.
+either, it is failed, which is why a command measured again in the same
+project replaces its earlier runs there and is not merged with them. Runs of
+one command measured on different machines and copied into one
+`.supercov/runs` replace none of each other: each is a share of the suite, and
+all are merged.
 
 The runs may differ in their tests, the helpers beside them, and the test
 runners' settings, as long as nothing that changed reaches what an earlier

package/docs/supported-suites.md

@@ -710,6 +710,40 @@ copy before its container starts, so an image left over from an earlier run
 is never used. An image built from an earlier copy, by a command outside the
 run, is left as it is, and the run says to build it in the test command.
 
+A container the project is mounted into runs the copy's code whatever its
+image, as `.:/workspace` in a compose file does: Supercov runs the command
+in the copy, so the mount is of the copy. It gets the run's settings with
+each path into the copy moved to where the container sees it, and the
+project's `node_modules`, which the copy's packages link to, mounted
+read-only at its own path. The copy's `.supercov`, where the run's evidence
+is written, is mounted writable where the container sees it, so a copy
+mounted read-only (`.:/workspace:ro`) is measured as well. A mount of one
+directory of the project (`./src:/app/src`) is not the copy, and is left
+alone.
+
+The tests can run in such a container too. A command `docker exec` (or
+`docker compose exec`) starts in it, `npx playwright test` say, gets the
+test command's settings, moved the same way, with `NODE_OPTIONS` added to
+the container's own. Playwright then runs under Supercov's preload and
+generated configuration, as it does beside Supercov, and each test is
+credited with what it ran:
+
+```yaml
+services:
+  tests:
+    image: mcr.microsoft.com/playwright:v1.56.0-noble
+    volumes: [".:/workspace"]
+    working_dir: /workspace
+    command: sleep infinity
+```
+
+```sh
+npx supercov -- sh -c "docker compose up -d && docker compose exec tests npx playwright test"
+```
+
+When containers were given the run's settings and no test or coverage came
+back from them, the run says so: what ran there is missing, not zero.
+
 - Images pulled from a registry (`image:` with no `build:`, `postgres:16`)
   run code nobody instrumented, and are left as they are.
 - testcontainers' reaper, Ryuk, is pointed at the daemon's own socket

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "supercov",
-  "version": "4.23.0",
+  "version": "4.24.1",
   "description": "Coverage, security and code quality for coding agents",
   "keywords": [
     "coverage",
@@ -82,7 +82,7 @@
     "eval:skill": "claude plugin eval plugins/supercov --scaffold --trust-plugin --no-publish --model claude-sonnet-5 --judge-model claude-haiku-4-5 --threshold 0.66 --tag behavior trigger --allow-tools Bash Edit Write --max-cost-usd 15",
     "eval:skill-triggers": "claude plugin eval plugins/supercov --scaffold --trust-plugin --no-publish --model claude-sonnet-5 --judge-model claude-haiku-4-5 --threshold 0.66 --tag trigger --ablation none --max-cost-usd 5",
     "test:engine": "cargo fmt --all -- --check && cargo clippy --workspace --all-targets -- -D warnings && cargo test --workspace && npm run test:runtime && npm run test:rust-assets && npm run test:engine-integrations",
-    "test:engine-integrations": "cargo build -p supercov && node scripts/html-report-integration.mjs && node scripts/rust-process-supervision.mjs && node scripts/rust-direct-node-integration.mjs && node scripts/rust-public-run-integration.mjs && node scripts/rust-embedded-runtime-integration.mjs && node scripts/rust-direct-vitest-integration.mjs && node scripts/rust-direct-jest-integration.mjs && node scripts/mocha-failure-output.mjs && node scripts/failure-output.mjs node ava tap && node scripts/side-by-side.mjs node && node scripts/merge-across.mjs && node scripts/import-line-evidence.mjs && node scripts/mock-reach.mjs && node scripts/rust-direct-playwright-integration.mjs && node scripts/rust-custom-browser-playwright-integration.mjs && node scripts/cross-origin-requests.mjs && node scripts/leaving-page.mjs && node scripts/shared-page.mjs && node scripts/context-headers.mjs && node scripts/context-cookies.mjs && node scripts/hidden-request-emit.mjs && node scripts/js-syntax-zoo.mjs && node scripts/ruby-syntax-zoo.mjs && node scripts/rust-syntax-zoo.mjs && node scripts/python-syntax-zoo.mjs && node scripts/go-syntax-zoo.mjs && node scripts/java-syntax-zoo.mjs && node scripts/background-by-time.mjs && node scripts/python-server-playwright.mjs && node scripts/ruby-server-playwright.mjs && node scripts/go-server-playwright.mjs && node scripts/jvm-server-playwright.mjs && node scripts/docker-server-playwright.mjs && node scripts/docker-clients-playwright.mjs && node scripts/rust-classic-browser-integration.mjs && node scripts/exec-handover.mjs && node scripts/rust-region-container.mjs && node scripts/rust-top-packages-integration.mjs && node scripts/rust-generic-esbuild-integration.mjs && node scripts/rust-generic-tsc-integration.mjs && node scripts/rust-generic-build-matrix.mjs && node scripts/rust-vite-playwright-integration.mjs && node scripts/workspace-crash-integration.mjs",
+    "test:engine-integrations": "cargo build -p supercov && node scripts/html-report-integration.mjs && node scripts/rust-process-supervision.mjs && node scripts/rust-direct-node-integration.mjs && node scripts/rust-public-run-integration.mjs && node scripts/rust-embedded-runtime-integration.mjs && node scripts/rust-direct-vitest-integration.mjs && node scripts/rust-direct-jest-integration.mjs && node scripts/mocha-failure-output.mjs && node scripts/failure-output.mjs node ava tap && node scripts/side-by-side.mjs node && node scripts/merge-across.mjs && node scripts/import-line-evidence.mjs && node scripts/mock-reach.mjs && node scripts/rust-direct-playwright-integration.mjs && node scripts/rust-custom-browser-playwright-integration.mjs && node scripts/cross-origin-requests.mjs && node scripts/leaving-page.mjs && node scripts/shared-page.mjs && node scripts/context-headers.mjs && node scripts/context-cookies.mjs && node scripts/hidden-request-emit.mjs && node scripts/js-syntax-zoo.mjs && node scripts/ruby-syntax-zoo.mjs && node scripts/rust-syntax-zoo.mjs && node scripts/python-syntax-zoo.mjs && node scripts/go-syntax-zoo.mjs && node scripts/java-syntax-zoo.mjs && node scripts/background-by-time.mjs && node scripts/python-server-playwright.mjs && node scripts/ruby-server-playwright.mjs && node scripts/go-server-playwright.mjs && node scripts/jvm-server-playwright.mjs && node scripts/docker-server-playwright.mjs && node scripts/docker-clients-playwright.mjs && node scripts/docker-exec-playwright.mjs && node scripts/rust-classic-browser-integration.mjs && node scripts/exec-handover.mjs && node scripts/rust-region-container.mjs && node scripts/rust-top-packages-integration.mjs && node scripts/rust-generic-esbuild-integration.mjs && node scripts/rust-generic-tsc-integration.mjs && node scripts/rust-generic-build-matrix.mjs && node scripts/rust-vite-playwright-integration.mjs && node scripts/workspace-crash-integration.mjs",
     "test:platform": "cargo test --workspace && cargo build -p supercov && node scripts/rust-process-supervision.mjs && node scripts/workspace-crash-integration.mjs",
     "test:native-package": "cargo build --release -p supercov && node scripts/native-package-integration.mjs && node scripts/native-release-set-integration.mjs",
     "test:pypi-wheel": "node scripts/pypi-wheel-integration.mjs",
@@ -122,14 +122,14 @@
     "test:windows-tls": "node scripts/windows-tls-test.mjs"
   },
   "optionalDependencies": {
-    "@supercov/cli-darwin-arm64": "4.23.0",
-    "@supercov/cli-darwin-x64": "4.23.0",
-    "@supercov/cli-linux-arm64-gnu": "4.23.0",
-    "@supercov/cli-linux-arm64-musl": "4.23.0",
-    "@supercov/cli-linux-x64-gnu": "4.23.0",
-    "@supercov/cli-linux-x64-musl": "4.23.0",
-    "@supercov/cli-win32-arm64": "4.23.0",
-    "@supercov/cli-win32-x64": "4.23.0"
+    "@supercov/cli-darwin-arm64": "4.24.1",
+    "@supercov/cli-darwin-x64": "4.24.1",
+    "@supercov/cli-linux-arm64-gnu": "4.24.1",
+    "@supercov/cli-linux-arm64-musl": "4.24.1",
+    "@supercov/cli-linux-x64-gnu": "4.24.1",
+    "@supercov/cli-linux-x64-musl": "4.24.1",
+    "@supercov/cli-win32-arm64": "4.24.1",
+    "@supercov/cli-win32-x64": "4.24.1"
   },
   "peerDependencies": {
     "@playwright/test": ">=1.55.0",

package/runtime/javascript/playwright.mjs

@@ -973,7 +973,7 @@ function mergeSnapshots(snapshots) {
         for (const event of snapshot?.events ?? [])
             events.set(JSON.stringify(event), event);
         for (const decision of snapshot?.decisions ?? []) {
-            const entry = vectorsOf(decisions, decision.meta?.id, { meta: decision.meta });
+            const entry = vectorsOf(decisions, decision.id, { id: decision.id });
             for (const vector of decision.vectors ?? [])
                 entry.seen.set(JSON.stringify(vector), vector);
         }
@@ -984,7 +984,7 @@ function mergeSnapshots(snapshots) {
         }
     }
     return {
-        decisions: [...decisions.values()].map(({ seen, meta }) => ({ meta, vectors: [...seen.values()] })),
+        decisions: [...decisions.values()].map(({ seen, id }) => ({ id, vectors: [...seen.values()] })),
         hits: [...hits],
         events: [...events.values()],
         logicals: [...logicals.values()].map(({ seen, id }) => ({ id, vectors: [...seen.values()] })),

package/runtime/javascript/runtime.mjs

@@ -185,8 +185,8 @@ function createState() {
   try {
     const stored = JSON.parse((_a8 = localStorage.getItem(storageKey)) != null ? _a8 : "{}");
     for (const snapshot of (_b = stored.decisions) != null ? _b : []) {
-      state2.decisions.set(snapshot.meta.id, {
-        meta: snapshot.meta,
+      state2.decisions.set(snapshot.id, {
+        id: snapshot.id,
         vectors: new Map(snapshot.vectors.map((vector) => [vectorKey(vector), vector]))
       });
     }
@@ -304,7 +304,7 @@ runtimeGlobal.__SUPERCOV_ACTIVATE_PROBE_CONTEXT__ = (browserTestId, browserPhase
 };
 function decisionSnapshot() {
   return [...state.decisions.values()].map((decision) => ({
-    meta: decision.meta,
+    id: decision.id,
     vectors: [...decision.vectors.values()]
   }));
 }
@@ -470,7 +470,7 @@ function attemptKey(scope) {
 }
 function serverRecordKey(record) {
   var _a8;
-  const suffix = record.type === "decision" ? `${record.meta.id}:${vectorKey(record.vector)}` : record.id;
+  const suffix = record.type === "decision" ? `${record.id}:${vectorKey(record.vector)}` : record.id;
   // Each request that names no test keeps its own first hits: the report
   // credits them to the test running when it came, and a later request's
   // work belongs to whichever test was running then.
@@ -625,6 +625,7 @@ function flushBackgroundAppends(fs) {
 // all.
 function makeEvidenceDirectory(fs, directory) {
   const first = fs.mkdirSync(directory, { recursive: true });
+  markContainerWriting(fs);
   if (!first || typeof process === "undefined" || !process.env || process.env.SUPERCOV_CONTAINER !== "1")
     return;
   let current = first;
@@ -640,6 +641,20 @@ function makeEvidenceDirectory(fs, directory) {
     }
   }
 }
+// A container Supercov's relay measured says, once, that its evidence could
+// be written: one that never does -- a server stopped at its first probe, a
+// directory it may not write -- is named when the run ends.
+function markContainerWriting(fs) {
+  const mark = typeof process !== "undefined" && process.env ? process.env.SUPERCOV_CONTAINER_MARK : void 0;
+  if (!mark || state.containerMarked)
+    return;
+  state.containerMarked = true;
+  try {
+    fs.mkdirSync(mark.slice(0, mark.lastIndexOf("/")), { recursive: true });
+    fs.writeFileSync(mark, "");
+  } catch (e) {
+  }
+}
 function writeBackgroundLines(fs, runId, payload) {
   var _a8;
   const directory = backgroundEvidenceDirectory(runId);
@@ -982,7 +997,7 @@ function appendServer(record) {
     if (record.type === "decision") {
       recordBrowserEvent(__spreadProps(__spreadValues({
         type: "decision",
-        id: record.meta.id,
+        id: record.id,
         vector: record.vector,
         timestampMs
       }, record.phaseId ? { phaseId: record.phaseId } : {}), {
@@ -1801,11 +1816,14 @@ function recordCoverageHit(id) {
 function registerProbeV2(definition) {
   var _a8, _b;
   const file = {
+    // Each decision's id and its number of conditions: the module carries
+    // no source text, which the manifest holds.
     decisions: definition.decisions,
+    decisionWidths: definition.decisionWidths,
     pointIds: definition.pointIds,
     clock: state.probeV2Clock,
     hitEpochs: new Uint32Array(definition.pointIds.length),
-    decisionEpochs: definition.decisions.map((meta) => meta.conditions.length <= 6 ? new Uint32Array(2 * 3 ** meta.conditions.length) : /* @__PURE__ */ new Map()),
+    decisionEpochs: definition.decisionWidths.map((width) => width <= 6 ? new Uint32Array(2 * 3 ** width) : /* @__PURE__ */ new Map()),
     decisionVectorCounts: definition.decisions.map((_, index) => {
       var _a9, _b2;
       return (_b2 = (_a9 = definition.decisionVectorCounts) == null ? void 0 : _a9[index]) != null ? _b2 : 0;
@@ -1898,8 +1916,8 @@ function mcdcEndV2(file, decisionIndex, encoded, value) {
 }
 function recordMcdcEndV2(file, decisionIndex, encoded, value) {
   var _a8, _b;
-  const meta = file.decisions[decisionIndex];
-  if (!meta || !Number.isSafeInteger(encoded) || encoded < 0)
+  const id = file.decisions[decisionIndex];
+  if (!id || !Number.isSafeInteger(encoded) || encoded < 0)
     return value;
   const outcome = Boolean(value);
   const vectorIndex = encoded * 2 + (outcome ? 1 : 0);
@@ -1934,10 +1952,10 @@ function recordMcdcEndV2(file, decisionIndex, encoded, value) {
       if (observedCount >= expectedCount)
         file.decisionCompleteEpochs[decisionIndex] = epoch;
     }
-    if (!state.decisions.has(meta.id))
-      state.decisions.set(meta.id, { meta, vectors: /* @__PURE__ */ new Map() });
-    const vector = decodeProbeV2Vector(meta.conditions.length, encoded, outcome);
-    return vector ? mcdcEnd({ meta, values: vector.values }, value) : value;
+    if (!state.decisions.has(id))
+      state.decisions.set(id, { id, vectors: /* @__PURE__ */ new Map() });
+    const vector = decodeProbeV2Vector(file.decisionWidths[decisionIndex], encoded, outcome);
+    return vector ? mcdcEnd({ id, values: vector.values }, value) : value;
   } finally {
     if (fallbackEpoch)
       file.clock.epoch = previousEpoch;
@@ -2224,13 +2242,13 @@ function loopEntered(frame) {
 function loopEnd(frame) {
   if (!frame.entered) coverageHit(frame.zeroId);
 }
-function mcdcBegin(id, meta) {
+function mcdcBegin(id, width) {
   if (!state.decisions.has(id)) {
-    state.decisions.set(id, { meta, vectors: /* @__PURE__ */ new Map() });
+    state.decisions.set(id, { id, vectors: /* @__PURE__ */ new Map() });
   }
   return {
-    meta,
-    values: Array.from({ length: meta.conditions.length }, () => null)
+    id,
+    values: Array.from({ length: width }, () => null)
   };
 }
 function mcdcCondition(frame, index, value) {
@@ -2238,7 +2256,7 @@ function mcdcCondition(frame, index, value) {
   return value;
 }
 function mcdcEnd(frame, value) {
-  const decision = state.decisions.get(frame.meta.id);
+  const decision = state.decisions.get(frame.id);
   if (!decision)
     return value;
   const vector = { values: frame.values, outcome: Boolean(value) };
@@ -2249,7 +2267,7 @@ function mcdcEnd(frame, value) {
   if (isBrowser) {
     if (recordBrowserEvent(__spreadProps(__spreadValues({
       type: "decision",
-      id: decision.meta.id,
+      id: decision.id,
       vector,
       timestampMs
     }, phaseId ? { phaseId } : {}), {
@@ -2259,7 +2277,7 @@ function mcdcEnd(frame, value) {
   } else {
     appendServer(__spreadValues({
       type: "decision",
-      meta: decision.meta,
+      id: decision.id,
       vector,
       timestampMs
     }, phaseId ? { phaseId } : {}));