Test coverage pass: wire the suites that ran nowhere into CI, close the sharpest unit gaps, gate coverage

[mianaz]

Three rounds of the coverage pass that came out of the test-coverage analysis: first make every existing-but-orphaned suite actually execute, then close the highest-value unit gaps, then instrument coverage so regressions stay visible.

1. Suites that silently ran nowhere now gate CI

• tauri-plugin-os-speech Rust crate: an iOS-target-only dependency with no cargo workspace, so the app crate's cargo test never even compiled it. CI now runs cargo test --manifest-path for it (its desktop.rs stub exists precisely so a host build type-checks), with the rust-cache extended to cover it.
• The iOS plugin's 43 Swift tests (ios/Tests/OsSpeechCoreTests): blocked from any host run by two independent issues — SwiftPM's aggregate test bundle builds the Tauri-dependent glue target (Tauri imports UIKit unconditionally, so it can't compile for macOS), and the manifest's ../.tauri/tauri-api path dependency is gitignored, so fresh checkouts fail at dependency resolution. New scripts/test-ios-core.mjs stages OsSpeechCore + its tests into a scratch Tauri-free manifest and runs swift test there — the automated form of the manual workaround ios/Package.swift documented. Wired into the macOS CI job; the Package.swift host-testing note now records both blockers.
• scripts/ joins the root vitest projects glob (a test there could never execute before). check-versions.mjs exports its extraction/comparison logic behind an is-main guard and gets the first scripts suite (14 tests pinning the regexes and the exact-vs-startsWith site rules).

2. Unit gaps closed

• core: sourceSentence (the shared sentence→clause→word-safe-window narrowing rule with three consumers across two workspaces) and glossaryLookup (mocked away in every suite that touched it — the personal-glossary shadowing logic was never asserted).
• web: define/translate task modules (truncation ceilings, per-kind defaults, hallucinated-id postFilter, prompt wiring — the only two untested llm/tasks modules), the proxyUrl validator shared with the backup-restore boundary, and DemoEngine — the default engine and first-run experience, whose timer/teardown lifecycle ran in zero tests (every useMeeting suite mocks @/lib/stt away).
• extension: the mic first-grant page — pins that every track stops before the success copy renders (the hot-mic guard), both zh outcome strings verbatim, and the no-auto-request-on-load contract. permission.ts gains an export {} module marker for tsc.
• rust: models.rs wire-contract tests — the Rust half of what OsSpeechWireTests.swift already pinned from Swift (explicit-null reason, camelCase vs deliberately-not, Swift envelope unwraps).
• sidecar: test_agent_prompts.py — tripwires for the zh→en .replace() chains that silently no-op when the zh source drifts; plus the two largest untested blocks in the repo, the HTTP dispatch layers: test_agent_http.py (54 checks — gate ordering: origin/token 403s fire before the body is ever read, asserted via rfile position; the provider stub records zero calls on every rejected path) and test_job_http.py (48 checks — routing, download single-flight 409, terminal-cancel zh string, upload body bytes down to the tmp file, CORS).

3. Coverage becomes a CI gate

@vitest/coverage-v8 as a real devDependency, npm run test:coverage, and the CI web job now runs the instrumented suite. Thresholds (77/72/73/79) sit a couple of points under measured baselines (81.1 stmts / 77.6 branches / 77.1 functions / 82.3 lines) with include-all denominators — never-imported files count against the floor, closing the blind spot where 14 files (page.tsx, the whole extension side panel…) were invisible to a "85% overall" number.

Verification

• 286 vitest files / 5,146 tests green under the instrumented run; typecheck green; check:versions green; 13/13 sidecar files green; models.rs suite verified in a scratch crate. Test badges restamped 5073 → 5146.
• First-time-in-CI steps to watch on this PR: the plugin cargo test step and the Swift scratch-runner (no mac toolchain in the dev environment — this PR's macOS job is their first real execution).

🤖 Generated with Claude Code

https://claude.ai/code/session_01KvWjVGboyurjEUYBKx3a38

---

Generated by Claude Code