feat(coverage): add c8 ignore comments for external API calls

Add coverage ignore comments to sections of code that make external
API calls, process spawns, or network requests that are difficult to
test comprehensively:

- GitHub API calls in src/github.ts (fetchGitHub, fetchGhsaDetails,
  getGitHubTokenFromGitConfig)
- HTTP/HTTPS requests in src/http-request.ts (httpRequestAttempt,
  httpDownloadAttempt)
- Package registry operations in src/packages/operations.ts
  (extractPackage, packPackage, resolveGitHubTgzUrl)

These external calls require actual network access or process
spawning, making them unsuitable for standard unit testing. The
ignore comments ensure these integration-heavy sections don't
artificially reduce coverage metrics while maintaining test
coverage for the testable logic paths.

Author: jdalton

scripts/filter-coverage.mjs

@@ -83,23 +83,26 @@ function filterCoverageFile(filePath) {
 logger.info('Filtering coverage data...\n')
 
 const finalStats = filterCoverageFile(coverageFinalPath)
-logger.info(`coverage-final.json:`)
+logger.info('coverage-final.json:')
 logger.success(`  Kept ${finalStats.kept} src/ TypeScript files`)
 if (finalStats.filtered > 0) {
   logger.info(`  Filtered ${finalStats.filtered} files:`)
-  if (finalStats.details.distCount)
+  if (finalStats.details.distCount) {
     logger.info(`    - ${finalStats.details.distCount} dist/ compiled files`)
-  if (finalStats.details.externalCount)
+  }
+  if (finalStats.details.externalCount) {
     logger.info(
       `    - ${finalStats.details.externalCount} external dependencies`,
     )
-  if (finalStats.details.testCount)
+  }
+  if (finalStats.details.testCount) {
     logger.info(`    - ${finalStats.details.testCount} test files`)
+  }
 }
 logger.info(`  Total: ${finalStats.total} files\n`)
 
 const summaryStats = filterCoverageFile(coverageSummaryPath)
-logger.info(`coverage-summary.json:`)
+logger.info('coverage-summary.json:')
 logger.success(`  Kept ${summaryStats.kept} src/ files`)
 if (summaryStats.filtered > 0) {
   logger.info(`  Filtered ${summaryStats.filtered} files`)

src/github.ts

@@ -185,7 +185,9 @@ export async function fetchGitHub<T = unknown>(
     headers['Authorization'] = `Bearer ${token}`
   }
 
+  /* c8 ignore start - External GitHub API call */
   const response = await httpRequest(url, { headers })
+  /* c8 ignore stop */
 
   if (!response.ok) {
     if (response.status === 403) {
@@ -503,6 +505,7 @@ export async function clearRefCache(): Promise<void> {
 export async function getGitHubTokenFromGitConfig(
   options?: SpawnOptions | undefined,
 ): Promise<string | undefined> {
+  /* c8 ignore start - External git process call */
   try {
     const result = await spawn('git', ['config', 'github.token'], {
       ...options,
@@ -515,6 +518,7 @@ export async function getGitHubTokenFromGitConfig(
     // Ignore errors - git config may not have token.
   }
   return undefined
+  /* c8 ignore stop */
 }
 
 /**
@@ -662,6 +666,7 @@ export async function fetchGhsaDetails(
   ghsaId: string,
   options?: GitHubFetchOptions | undefined,
 ): Promise<GhsaDetails> {
+  /* c8 ignore start - External GitHub API call */
   const url = `https://api.github.com/advisories/${ghsaId}`
   const data = await fetchGitHub<{
     aliases?: string[]
@@ -681,6 +686,7 @@ export async function fetchGhsaDetails(
     }>
     withdrawn_at: string
   }>(url, options)
+  /* c8 ignore stop */
 
   return {
     ghsaId: data.ghsa_id,

src/http-request.ts

@@ -521,6 +521,7 @@ async function httpRequestAttempt(
       timeout,
     }
 
+    /* c8 ignore start - External HTTP/HTTPS request */
     const request = httpModule.request(
       requestOptions,
       (res: IncomingMessage) => {
@@ -635,6 +636,7 @@ async function httpRequestAttempt(
     }
 
     request.end()
+    /* c8 ignore stop */
   })
 }
 
@@ -768,6 +770,7 @@ async function httpDownloadAttempt(
       }
     }
 
+    /* c8 ignore start - External HTTP/HTTPS download request */
     const request = httpModule.request(
       requestOptions,
       (res: IncomingMessage) => {
@@ -858,6 +861,7 @@ async function httpDownloadAttempt(
     })
 
     request.end()
+    /* c8 ignore stop */
   })
 }
 

src/packages/operations.ts

@@ -185,6 +185,7 @@ export async function extractPackage(
     preferOffline: true,
     ...extractOptions_,
   }
+  /* c8 ignore start - External package registry extraction */
   const pacote = getPacote()
   if (typeof dest === 'string') {
     await pacote.extract(pkgNameOrId, dest, extractOptions)
@@ -206,6 +207,7 @@ export async function extractPackage(
       },
     )
   }
+  /* c8 ignore stop */
 }
 
 /**
@@ -269,6 +271,7 @@ export async function packPackage(
   spec: string,
   options?: PacoteOptions,
 ): Promise<unknown> {
+  /* c8 ignore start - External package registry packing */
   const pack = getPack()
   return await pack(spec, {
     __proto__: null,
@@ -277,6 +280,7 @@ export async function packPackage(
     packumentCache,
     preferOffline: true,
   } as PacoteOptions)
+  /* c8 ignore stop */
 }
 
 /**
@@ -372,6 +376,7 @@ export async function resolveGitHubTgzUrl(
     ? parsedSpec.hosted
     : getRepoUrlDetails(repository?.url)) || { project: '', user: '' }
 
+  /* c8 ignore start - External GitHub API calls */
   if (user && project) {
     let apiUrl = ''
     if (isGitHubUrl) {
@@ -399,6 +404,7 @@ export async function resolveGitHubTgzUrl(
       }
     }
   }
+  /* c8 ignore stop */
   return ''
 }