chore: Upload nightly and frontend coverage to Codecov (#1658)

- Nightly: add -coverprofile to full test suite (no -short flag),
  filter proto files, upload with 'integration' flag
- Frontend: upload Vitest coverage-final.json with 'frontend' flag
- Codecov config: add integration and frontend flags, stop ignoring
  all of frontend/ (only ignore generated api/gen/)

Co-authored-by: Ben Coombs <bjcoombs@users.noreply.github.com>

Author: bjcoombs

.github/workflows/frontend.yml

@@ -56,11 +56,22 @@ jobs:
         if: always()
         uses: actions/upload-artifact@v7
         with:
-          name: coverage-report
+          name: frontend-coverage-report
           path: frontend/coverage/
           retention-days: 7
           if-no-files-found: ignore
 
+      - name: Upload coverage to Codecov
+        if: always()
+        uses: codecov/codecov-action@v5
+        with:
+          files: ./frontend/coverage/coverage-final.json
+          flags: frontend
+          name: frontend-vitest
+          fail_ci_if_error: false
+        env:
+          CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
+
       - name: Check 80% line coverage threshold
         run: |
           node -e "

.github/workflows/nightly.yml

@@ -125,11 +125,30 @@ jobs:
       run: |
         # Run WITHOUT -short flag to include all timing-sensitive tests
         # Regular CI runs with -short, but nightly runs the full suite
+        mkdir -p coverage
         echo "Running full test suite including timing-sensitive tests..."
         gotestsum --format testdox \
           --junitfile test-results.xml \
           --jsonfile test-results.json \
-          -- -race -timeout 15m ./...
+          -- -race -coverprofile=coverage/coverage.out -covermode=atomic -timeout 15m ./...
+
+    - name: Filter generated files from coverage
+      if: always()
+      run: |
+        if [ -f coverage/coverage.out ]; then
+          grep -v -E '\.pb\.go|\.pb\.validate\.go|_grpc\.pb\.go' coverage/coverage.out > coverage/coverage-filtered.out || true
+        fi
+
+    - name: Upload coverage to Codecov
+      if: always()
+      uses: codecov/codecov-action@v5
+      with:
+        files: ./coverage/coverage-filtered.out
+        flags: integration
+        name: nightly-full-suite
+        fail_ci_if_error: false
+      env:
+        CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
 
     - name: Upload test results
       uses: actions/upload-artifact@v7

codecov.yml

@@ -14,7 +14,7 @@ ignore:
   - "**/*_grpc.pb.go"
   - "**/mocks/**"
   - "utilities/**"
-  - "frontend/**"
+  - "frontend/src/api/gen/**"
 
 comment:
   layout: "condensed_header, condensed_files, condensed_footer"
@@ -27,3 +27,12 @@ flags:
       - "services/"
       - "shared/"
     carryforward: true
+  integration:
+    paths:
+      - "services/"
+      - "shared/"
+    carryforward: true
+  frontend:
+    paths:
+      - "frontend/src/"
+    carryforward: true