Merge pull request #29 from KostasCherv/codex/coverage-gate

ci: enforce measured test coverage baselines

Author: KostasCherv

.github/workflows/ci.yml

@@ -31,7 +31,19 @@ jobs:
           SUPABASE_URL: https://example.com
           SUPABASE_SECRET_KEY: dummy-secret-key-for-ci
           SUPABASE_JWKS_URL: https://example.com/auth/v1/.well-known/jwks.json
-        run: uv run python -m pytest tests/ -q
+        run: >-
+          uv run python -m pytest tests/ -q
+          --cov=src
+          --cov-fail-under=73
+          --cov-report=term-missing
+          --cov-report=xml:coverage.xml
+      - name: Upload backend coverage
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: backend-coverage
+          path: coverage.xml
+          if-no-files-found: warn
       - name: AI regression gate
         if: always()
         run: uv run python -m src.evals.regression_gate --output reports/ai-regression-${{ github.sha }}.json
@@ -62,8 +74,15 @@ jobs:
         run: npx eslint src --max-warnings=0
       - name: Typecheck
         run: npx tsc --noEmit -p tsconfig.app.json
-      - name: Test
-        run: npx vitest run
+      - name: Test with coverage
+        run: npm run test:coverage
+      - name: Upload UI coverage
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: ui-coverage
+          path: ui/coverage/
+          if-no-files-found: warn
       - name: Install Playwright browser
         run: npx playwright install --with-deps chromium
       - name: Browser smoke test

.gitignore

@@ -10,6 +10,10 @@ __pycache__
 cortex.egg-info
 .ruff_cache
 .pytest_cache
+.coverage
+coverage.json
+coverage.xml
+ui/coverage
 .mypy_cache
 chroma_db
 reports

README.md

@@ -414,16 +414,23 @@ Used for generation-level observability, user scoring, and evaluation datasets.
 
 ```bash
 uv run pytest -v
+uv run pytest --cov=src --cov-fail-under=73 --cov-report=term-missing
 uv run ruff check src
 uv run mypy src
 
 cd ui
 npm run lint
-npm test
+npm run test:coverage
 npx playwright install chromium  # first run only
 npm run test:e2e
 ```
 
+CI enforces the measured coverage baseline rather than an aspirational target:
+backend coverage must remain at least 73%, while UI statements, branches,
+functions, and lines must remain at least 19%, 19%, 12%, and 20%. Coverage
+reports are uploaded as workflow artifacts for each run. Raise these floors as
+the test suite improves.
+
 The Playwright smoke journey uses local fixtures—no Google, Supabase, or model
 credentials are required. It restores an authenticated browser session, creates a
 research session, consumes paced SSE progress/report events, and verifies the