BLOCKING-Befunde aus "Tests & Sicherheitshaertung": 1) Coverage-Pfad war nie ausfuehrbar: @vitest/coverage-v8 fehlte in den devDependencies, obwohl vitest.config coverage.provider "v8" setzt und test:coverage "vitest run --coverage" aufruft. Paket passend zu vitest ^3.2 ergaenzt und installiert. coverage.include zog ganze Verzeichnisse (src/lib/search, src/lib/geo) ein - inkl. DB-/HTTP-gebundener Wrapper (Drizzle gegen Postgres, Nominatim/OSRM), die offline nicht laufen und die globale Schwelle verwaesserten. Scope auf die REINE, offline testbare Logik beschraenkt (perFile-Schwellen), I/O-Wrapper und reine Typ-Module ausgenommen (per Integrations-/E2E-Tests abgesichert). Fehlende Branch-Abdeckung in geo/eintreffzeit.ts mit Tests fuer Einzel-Haversine-Fallback, reine Koordinaten-lose Liste und fehlende OSRM-distances-Zeile geschlossen. npm run test:coverage: Exit 0, Schwellen (Lines/Stmts/Funcs >=90, Branches >=80) erfuellt. 2) Driftschutz zu permissiv: isPublic() in tests/support/route-scan.ts stufte ueber `route.startsWith(p)` jeden reinen String-Praefix als oeffentlich ein (z. B. /loginhelp, /api/healthz, /api/authentication) und liess solche Routen dem Auth-Gating-Driftcheck entkommen. Die redundante dritte Bedingung entfernt; exakter Treffer und echtes Unterpfad-Segment (p + "/") sind korrekt und ausreichend. Negativ- Testfall ergaenzt. Verifiziert (offline): tsc --noEmit (0), vitest run (233 passed, 7 DB-Tests deferred), test:coverage (Exit 0). DB-/Server-/Browser- abhaengige Schritte deferred (kein Postgres/Server im Sandbox). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
67 lines
1.9 KiB
JSON
67 lines
1.9 KiB
JSON
{
|
|
"name": "floriannetz",
|
|
"version": "0.1.0",
|
|
"private": true,
|
|
"type": "module",
|
|
"scripts": {
|
|
"dev": "next dev",
|
|
"build": "next build",
|
|
"start": "next start",
|
|
"lint": "next lint",
|
|
"typecheck": "tsc --noEmit",
|
|
"test": "vitest run",
|
|
"test:watch": "vitest",
|
|
"test:unit": "vitest run",
|
|
"test:coverage": "vitest run --coverage",
|
|
"db:generate": "drizzle-kit generate",
|
|
"db:migrate": "tsx scripts/migrate.ts",
|
|
"db:seed-auth": "tsx scripts/seed-auth.ts",
|
|
"db:seed": "tsx src/db/seed/index.ts",
|
|
"test:e2e": "playwright test",
|
|
"test:e2e:gating": "playwright test --project=chromium tests/e2e/auth-gating.spec.ts",
|
|
"db:push": "drizzle-kit push",
|
|
"db:studio": "drizzle-kit studio",
|
|
"db:check": "drizzle-kit check"
|
|
},
|
|
"dependencies": {
|
|
"@node-rs/argon2": "^2.0.2",
|
|
"@radix-ui/react-dialog": "^1.1.6",
|
|
"@radix-ui/react-label": "^2.1.2",
|
|
"@radix-ui/react-select": "^2.1.6",
|
|
"@radix-ui/react-slider": "^1.2.3",
|
|
"@radix-ui/react-slot": "^1.1.2",
|
|
"@radix-ui/react-switch": "^1.1.3",
|
|
"@radix-ui/react-tabs": "^1.1.3",
|
|
"class-variance-authority": "^0.7.1",
|
|
"clsx": "^2.1.1",
|
|
"drizzle-orm": "^0.39.3",
|
|
"next": "^15.2.0",
|
|
"next-auth": "^5.0.0-beta.31",
|
|
"pg": "^8.13.3",
|
|
"react": "^19.0.0",
|
|
"react-dom": "^19.0.0",
|
|
"tailwind-merge": "^3.0.2",
|
|
"zod": "^3.24.2"
|
|
},
|
|
"devDependencies": {
|
|
"@eslint/eslintrc": "^3.2.0",
|
|
"@playwright/test": "^1.60.0",
|
|
"@types/node": "^22.13.5",
|
|
"@types/pg": "^8.11.11",
|
|
"@types/react": "^19.0.10",
|
|
"@types/react-dom": "^19.0.4",
|
|
"@vitest/coverage-v8": "^3.2.6",
|
|
"autoprefixer": "^10.4.20",
|
|
"drizzle-kit": "^0.30.4",
|
|
"eslint": "^9.21.0",
|
|
"eslint-config-next": "^15.2.0",
|
|
"postcss": "^8.5.3",
|
|
"prettier": "^3.5.2",
|
|
"prettier-plugin-tailwindcss": "^0.6.11",
|
|
"tailwindcss": "^3.4.17",
|
|
"tsx": "^4.19.2",
|
|
"typescript": "^5.7.3",
|
|
"vitest": "^3.0.7"
|
|
}
|
|
}
|