codecov added

Author: MarketDataDev03

.github/scripts/check-coverage-delta.py

@@ -2,7 +2,8 @@ name: Main
 
 # Runs only on push to main (i.e. when a PR is merged or someone pushes
 # directly). This is where the full forward-compat JDK matrix runs and
-# where we record the coverage baseline that PR runs compare against.
+# where we publish the canonical coverage snapshot that Codecov uses as
+# the base for PR diffs.
 on:
   push:
     branches: ['main']
@@ -60,30 +61,16 @@ jobs:
             build/test-results/
           retention-days: 14
 
-      # The JDK 17 entry of the matrix is the canonical run for coverage
-      # baseline purposes — its JaCoCo XML is what PR runs compare against.
-      - name: Extract coverage baseline (JDK 17 only)
+      # The JDK 17 entry of the matrix is the canonical run for coverage:
+      # its JaCoCo XML is uploaded to Codecov and becomes the base that
+      # subsequent PR runs compare against (see codecov.yml).
+      - name: Upload coverage to Codecov (JDK 17 only)
         if: success() && matrix.java == '17'
-        run: |
-          python3 .github/scripts/extract-coverage.py > coverage-baseline.txt
-          echo "Baseline coverage: $(cat coverage-baseline.txt)"
-
-      - name: Save coverage baseline to cache (JDK 17 only)
-        if: success() && matrix.java == '17'
-        uses: actions/cache/save@v4
+        uses: codecov/codecov-action@v5
         with:
-          path: coverage-baseline.txt
-          # Unique per commit so each main run produces a fresh entry;
-          # PR workflow restores via prefix-match on `coverage-baseline-main-`.
-          key: coverage-baseline-main-${{ github.sha }}
-
-      - name: Upload coverage report (JDK 17 only)
-        if: success() && matrix.java == '17'
-        uses: actions/upload-artifact@v4
-        with:
-          name: jacoco-report
-          path: build/reports/jacoco/test/
-          retention-days: 14
+          token: ${{ secrets.CODECOV_TOKEN }}
+          files: build/reports/jacoco/test/jacocoTestReport.xml
+          fail_ci_if_error: true
 
   # Integration-tests job is intentionally not wired up yet:
   # SDK requirements §13 says they run on PRs and release pipelines, but

.github/scripts/extract-coverage.py

@@ -54,19 +54,12 @@ jobs:
             build/test-results/
           retention-days: 14
 
-      # Coverage ratchet: PR's line coverage cannot drop more than 5 pp
-      # below main's last recorded value. The baseline is restored from
-      # the cache populated by main.yml; if no baseline is available
-      # (first ever main run hasn't completed, or cache expired), the
-      # check passes with a warning instead of blocking the PR.
-      - name: Restore coverage baseline from main
-        uses: actions/cache/restore@v4
+      # Coverage ratchet lives in Codecov: codecov.yml at the repo root
+      # configures `threshold: 5%` so a PR fails the Codecov status check
+      # if line coverage drops more than 5 pp vs the base branch.
+      - name: Upload coverage to Codecov
+        uses: codecov/codecov-action@v5
         with:
-          path: coverage-baseline.txt
-          # Unique key that won't match — forces fall-through to restore-keys.
-          key: coverage-baseline-pr-${{ github.run_id }}
-          restore-keys: |
-            coverage-baseline-main-
-
-      - name: Check coverage delta vs main
-        run: python3 .github/scripts/check-coverage-delta.py
+          token: ${{ secrets.CODECOV_TOKEN }}
+          files: build/reports/jacoco/test/jacocoTestReport.xml
+          fail_ci_if_error: true

.github/workflows/main.yml

@@ -69,9 +69,9 @@ The Java SDK must also satisfy the canonical, cross-language [SDK Requirements](
 - §15 packaging: SemVer, MIT `LICENSE`, `CHANGELOG.md` in Keep a Changelog format, version auto-detected via JAR manifest (`Implementation-Version`).
 - §16 security: tokens never logged verbatim (use `Tokens.redact`); TLS validated by default (`HttpClient` does not expose a skip-verify option).
 - ADR-002 CI: split into two workflows.
-  - `.github/workflows/pull-request.yml` — runs on PR `opened`/`synchronize`/`reopened` (no pre-PR push trigger by design). JDK 17 only. Runs `./gradlew build` + a coverage-delta check that compares the PR's line coverage against main's last recorded value, failing if it drops more than 5 pp. Baseline is restored via `actions/cache/restore@v4` with `restore-keys: coverage-baseline-main-` (prefix match against the latest main run's cache); if no baseline exists, the check passes with a `::warning::` rather than blocking the PR.
-  - `.github/workflows/main.yml` — runs only on `push` to `main`. Full forward-compat matrix `{17, 21, 25}` via `-PtestJdk=N` (wired into `tasks.test.javaLauncher` in `build.gradle.kts`). The JDK 17 matrix entry also extracts the coverage baseline and saves it to cache key `coverage-baseline-main-${sha}` for the next PR run.
-  - Helper scripts live in `.github/scripts/` (`extract-coverage.py`, `check-coverage-delta.py`). Both parse `build/reports/jacoco/test/jacocoTestReport.xml` directly. Tolerance constant lives in the script (`TOLERANCE_PP = 0.05`).
+  - `.github/workflows/pull-request.yml` — runs on PR `opened`/`synchronize`/`reopened` (no pre-PR push trigger by design). JDK 17 only. Runs `./gradlew build` and uploads `build/reports/jacoco/test/jacocoTestReport.xml` to Codecov.
+  - `.github/workflows/main.yml` — runs only on `push` to `main`. Full forward-compat matrix `{17, 21, 25}` via `-PtestJdk=N` (wired into `tasks.test.javaLauncher` in `build.gradle.kts`). The JDK 17 matrix entry also uploads coverage to Codecov, establishing the base coverage that PRs compare against.
+  - Coverage ratchet lives in `codecov.yml`: project status with `target: auto, threshold: 5%` (cannot drop >5 pp vs base branch) plus a patch-coverage requirement of 70 % on new code. Requires a `CODECOV_TOKEN` repo secret — without it the upload step fails because workflows pass `fail_ci_if_error: true`.
 
 **Deliberately deferred (require the request/endpoint layer to land first):**
 - §1.2 resource groupings (`client.stocks`, `client.options`, `client.funds`, `client.markets`, `client.utilities`).

.github/workflows/pull-request.yml

@@ -0,0 +1,24 @@
+# feat: initial Market Data Java SDK scaffold + CI
+
+> Branch `00_base_setup` → `main` · 2 commits · 39 files
+
+Initial scaffold for the Java SDK. **No endpoints are implemented in this PR** — it lays the foundation that endpoints will land on. Subsequent PRs will add endpoints one by one, each shipping with its corresponding integration tests against the live API (gated by `MARKETDATA_RUN_INTEGRATION_TESTS=true`).
+
+## What's included
+
+- **Build**: Gradle 8.12 (Kotlin DSL), JDK 17 toolchain (`--release 17`), Spotless (Google Java Format), JaCoCo, Vanniktech Maven Publish, separate source set for integration tests.
+- **Public API**: `MarketDataClient` with builder, shared HTTP/2 `HttpClient`, 50-permit concurrency semaphore, rate-limit accessor. `RateLimits` record. JSpecify `@NullMarked` across the entire public surface.
+- **Exceptions**: sealed `MarketDataException` hierarchy with the 7 canonical subtypes (`AuthenticationError`, `BadRequestError`, `NotFoundError`, `RateLimitError`, `ServerError`, `NetworkError`, `ParseError`), each carrying support context (`requestId`, `requestUrl`, `statusCode`, `timestamp`) and a `getSupportInfo()` helper.
+- **Configuration**: cascade `explicit → MARKETDATA_* env var → .env → default`. Defaults: `https://api.marketdata.app`, `v1`. Tokens are never logged verbatim (`Tokens.redact`).
+- **CI** (two workflows):
+  - `pull-request.yml`: PRs run on JDK 17 + coverage ratchet (cannot drop more than 5 pp below main).
+  - `main.yml`: full matrix `{17, 21, 25}` and saves the coverage baseline that PRs compare against.
+- **Docs**: `README.md`, `CLAUDE.md`, `CHANGELOG.md`, `LICENSE` (MIT).
+
+## Tests & coverage
+
+16 tests, all passing. Coverage: **83.1 % lines**, **98 % methods**, 100 % on the `exception` package.
+
+## Architectural decisions
+
+Follows ADRs 001–006 (already on `main`) and the foundational rules in the [cross-language SDK Requirements doc](https://www.marketdata.app/docs/sdk/sdk-requirements/) (§1, §4–§7, §10, §12, §15–§16). Request-flow specifics (retry, rate-limit header parsing, wire-format decoding, endpoints, integration tests) are intentionally deferred and listed explicitly in `CLAUDE.md`. They will land in the follow-up PRs alongside each endpoint.

CLAUDE.md

@@ -0,0 +1,29 @@
+# Codecov configuration.
+# Docs: https://docs.codecov.com/docs/codecov-yaml
+
+coverage:
+  status:
+    project:
+      default:
+        # Compare against the base branch's coverage automatically.
+        target: auto
+        # Allow up to 5 percentage points of drop before failing the
+        # status check. Mirrors the project's "no >5pp regression vs main"
+        # rule that previously lived in .github/scripts/check-coverage-delta.py.
+        threshold: 5%
+        # Don't run on draft commits / forks of forks.
+        if_ci_failed: error
+    patch:
+      default:
+        # Patch coverage = coverage of the lines this PR added/changed.
+        # Require at least 70% coverage on new code to nudge contributors
+        # toward writing tests for new logic, while leaving room for
+        # mechanical / boilerplate diffs.
+        target: 70%
+        threshold: 5%
+
+# Pull request comment from the Codecov bot.
+comment:
+  layout: "header, diff, files, footer"
+  behavior: default
+  require_changes: false