v0.51.0 — Test Coverage Expansion

Testing:
- internal/skills/llm_enhance_test.go — 17 new tests: parseLLMSuggestion (8 cases),
  GenerateSkillWithLLM (6 cases), EnhanceCurationWithLLM (5 cases)
- internal/skills/scored_matcher_test.go — 20 new tests: NewScoredMatcher defaults,
  MatchSkills edge cases, scoreSkill, ExplainMatch, config defaults
- internal/skills/notifier_test.go — 9 tests: NoopNotifier, MultiNotifier fan-out
- internal/danger/approver_test.go — +7 tests: SetTrustAll, non-interactive deny
- internal/telegram/health_test.go — 6 tests: SetLogger, SetReady, Start/shutdown

Infrastructure:
- health.go: store actual bound address after net.Listen for :0 port tests

Coverage gains: GenerateSkillWithLLM 5%→92%, NewScoredMatcher 64%→100%,
health/loggers 0%→100%, notifier 0%→100%, SetTrustAll 0%→100%

Author: molty3000

docs/CHANGELOG.md

@@ -1,5 +1,23 @@
 # Changelog
 
+## v0.51.0 (2026-05-25) — Test Coverage Expansion
+
+### Testing
+- **`internal/skills/llm_enhance_test.go`** — 17 new tests covering `parseLLMSuggestion` (8 cases: valid, missing name/body, empty input, whitespace, multiline), `GenerateSkillWithLLM` (6 cases: nil LLM, LLM error, empty response, success, tool calls, truncation), and `EnhanceCurationWithLLM` (5 cases: nil LLM, nil report, empty report, LLM failure, success)
+- **`internal/skills/scored_matcher_test.go`** — 20 new tests covering `NewScoredMatcher` config defaults, `MatchSkills` (nil receiver, empty, exact, action, description, sorting, capping, no match, deterministic order), `scoreSkill` (topic, action, no match), `ExplainMatch` format, and config default validation
+- **`internal/skills/notifier_test.go`** — 9 new tests covering `NoopNotifier`, `NewMultiNotifier` (zero/one/multiple), fan-out dispatch and event independence
+- **`internal/danger/approver_test.go`** — 7 new tests covering `SetTrustAll` (enable/disable), `PromptCommand` non-interactive deny, trusted class bypass
+- **`internal/telegram/health_test.go`** — 6 new tests covering `NewHealthServer`, `SetLogger`, `SetReady`, `Start`/shutdown with live HTTP check, `ServeHTTP`
+- **Coverage improved**: `GenerateSkillWithLLM` 5%→92%, `NewScoredMatcher` 64%→100%, health `SetLogger`/`SetReady` 0%→100%, notifier `Notify` 0%→100%, `SetTrustAll` 0%→100%
+
+### Infrastructure
+- **`internal/telegram/health.go`** — store actual bound address after `net.Listen` so tests using `:0` can discover the port
+
+## v0.50.0 (2026-05-25) — Module Rename: kode → odek
+
+### Breaking Changes
+- **Module path renamed** from `github.com/BackendStack21/kode` to `github.com/BackendStack21/odek` — all imports updated
+
 ## v0.49.2 (2026-05-25) — Prompt Trimming & Web UI Context
 
 ### Intelligence Improvements

internal/danger/approver_test.go

@@ -152,3 +152,128 @@ func TestPromptOperation_NoTTY_Allow(t *testing.T) {
 		t.Errorf("expected nil for non-interactive allow, got: %v", err)
 	}
 }
+
+func TestSetTrustAll_ApprovesAll(t *testing.T) {
+	a := NewTTYApprover(&DangerousConfig{NonInteractive: strPtr("deny")})
+	a.TTYPath = "/nonexistent/tty-for-test"
+
+	// Enable blanket trust
+	a.SetTrustAll(true)
+
+	// Destructive class should auto-approve despite NonInteractive=deny
+	if err := a.PromptCommand(Destructive, "rm -rf /", "dangerous command"); err != nil {
+		t.Errorf("expected nil with trustAll=true, got: %v", err)
+	}
+
+	// Blocked class should also auto-approve
+	if err := a.PromptCommand(Blocked, "some blocked cmd", ""); err != nil {
+		t.Errorf("expected nil with trustAll=true, got: %v", err)
+	}
+}
+
+func TestSetTrustAll_ThenDisable(t *testing.T) {
+	a := NewTTYApprover(&DangerousConfig{NonInteractive: strPtr("deny")})
+	a.TTYPath = "/nonexistent/tty-for-test"
+
+	// Enable blanket trust
+	a.SetTrustAll(true)
+
+	// Should be approved
+	if err := a.PromptCommand(Destructive, "rm -rf /", ""); err != nil {
+		t.Errorf("expected nil with trustAll=true, got: %v", err)
+	}
+
+	// Disable blanket trust
+	a.SetTrustAll(false)
+
+	// Should now be denied (no TTY, NonInteractive=deny)
+	err := a.PromptCommand(Destructive, "rm -rf /", "")
+	if err == nil {
+		t.Fatal("expected error after disabling trustAll")
+	}
+	if !strings.Contains(err.Error(), "denied") {
+		t.Errorf("expected 'denied' in error message, got: %v", err)
+	}
+}
+
+func TestPromptCommand_NoTTY_NilConfigDefaultAllow(t *testing.T) {
+	a := NewTTYApprover(nil)
+	a.TTYPath = "/nonexistent/tty-for-test"
+
+	// Nil config with no TTY → NonInteractive defaults to Allow → returns nil
+	err := a.PromptCommand(SystemWrite, "some command", "")
+	if err != nil {
+		t.Errorf("expected nil for nil config + no TTY, got: %v", err)
+	}
+}
+
+func TestPromptCommand_NoTTY_NonInteractiveDeny_Untrusted(t *testing.T) {
+	a := NewTTYApprover(&DangerousConfig{NonInteractive: strPtr("deny")})
+	a.TTYPath = "/nonexistent/tty-for-test"
+
+	// No trusted classes configure, non-interactive deny → should error
+	err := a.PromptCommand(SystemWrite, "touch /etc/config", "write system file")
+	if err == nil {
+		t.Fatal("expected error for non-interactive deny with no TTY")
+	}
+	if !strings.Contains(err.Error(), "denied") {
+		t.Errorf("expected 'denied' in error message, got: %v", err)
+	}
+}
+
+func TestPromptCommand_TrustedClassSkipsTTY(t *testing.T) {
+	a := NewTTYApprover(&DangerousConfig{NonInteractive: strPtr("deny")})
+	a.TTYPath = "/nonexistent/tty-for-test"
+
+	// Trust Destructive class
+	a.SetTrustedClasses(map[RiskClass]bool{Destructive: true})
+
+	// Trusted class is checked before TTY → should succeed even with NonInteractive=deny
+	err := a.PromptCommand(Destructive, "rm -rf /tmp/data", "")
+	if err != nil {
+		t.Errorf("expected nil for trusted class, got: %v", err)
+	}
+
+	// SystemWrite is NOT trusted → should be denied
+	err = a.PromptCommand(SystemWrite, "touch /etc/config", "")
+	if err == nil {
+		t.Fatal("expected error for untrusted class with NonInteractive=deny")
+	}
+	if !strings.Contains(err.Error(), "denied") {
+		t.Errorf("expected 'denied' in error message, got: %v", err)
+	}
+}
+
+func TestPromptOperation_NoTTY_NonInteractiveDeny(t *testing.T) {
+	a := NewTTYApprover(&DangerousConfig{NonInteractive: strPtr("deny")})
+	a.TTYPath = "/nonexistent/tty-for-test"
+
+	op := ToolOperation{
+		Name:     "write_file",
+		Resource: "/etc/system/config",
+		Risk:     SystemWrite,
+	}
+	err := a.PromptOperation(op)
+	if err == nil {
+		t.Fatal("expected error for non-interactive deny with no TTY")
+	}
+	if !strings.Contains(err.Error(), "denied") {
+		t.Errorf("expected 'denied' in error message, got: %v", err)
+	}
+}
+
+func TestPromptCommand_NoTTY_NonInteractiveDeny_SafeClass(t *testing.T) {
+	a := NewTTYApprover(&DangerousConfig{NonInteractive: strPtr("deny")})
+	a.TTYPath = "/nonexistent/tty-for-test"
+
+	// Safe class is not in trusted classes but no trusted classes configured at all
+	// so TrustedClasses map exists but is empty → Safe is not trusted
+	// NonInteractive=deny + no TTY → should error
+	err := a.PromptCommand(Safe, "ls", "")
+	if err == nil {
+		t.Fatal("expected error for non-interactive deny with no TTY")
+	}
+	if !strings.Contains(err.Error(), "denied") {
+		t.Errorf("expected 'denied' in error message, got: %v", err)
+	}
+}