Address PR #86 review: tighten coverage gates and test hygiene

Raise vitest thresholds to lines 80 / functions 70 / branches 50 so
the ~85% gain is actually protected. Stub URL blob methods without
replacing the constructor, restore navigator.clipboard after copyAll
tests, assert new_string HTML escaping in edit.test.js, and document
that CI test:coverage runs the full vitest suite.

Author: clean6378-max-it

.github/workflows/ci.yml

@@ -203,6 +203,7 @@ jobs:
             *) echo "Unsupported Node platform: $(node -p "process.platform + '-' + process.arch")"; exit 1 ;;
           esac
           npm install --no-save "${PKG}@${ROLLUP_VERSION}"
+      # Same vitest suite as npm test; --coverage enforces thresholds in vitest.config.js
       - run: npm run test:coverage
 
   benchmarks:

static/js/export.test.js

@@ -112,7 +112,10 @@ describe('export', () => {
         vi.stubGlobal('showSaveFilePicker', undefined);
         const createObjectURL = vi.fn(() => 'blob:fake-url');
         const revokeObjectURL = vi.fn();
-        vi.stubGlobal('URL', { createObjectURL, revokeObjectURL });
+        const origCreate = URL.createObjectURL;
+        const origRevoke = URL.revokeObjectURL;
+        URL.createObjectURL = createObjectURL;
+        URL.revokeObjectURL = revokeObjectURL;
         const click = vi.fn();
         const anchor = document.createElement('a');
         anchor.click = click;
@@ -127,10 +130,17 @@ describe('export', () => {
             blob: () => Promise.resolve(new Blob(['content'], { type: 'text/markdown' })),
         });
 
-        await downloadSession('alpha', 'sess-abcdef12');
-
-        expect(createObjectURL).toHaveBeenCalled();
-        expect(anchor.download).toBe('session-sess-abc.md');
-        expect(click).toHaveBeenCalled();
+        try {
+            await downloadSession('alpha', 'sess-abcdef12');
+
+            expect(createObjectURL).toHaveBeenCalled();
+            expect(anchor.download).toBe('session-sess-abc.md');
+            expect(click).toHaveBeenCalled();
+        } finally {
+            if (origCreate) URL.createObjectURL = origCreate;
+            else delete URL.createObjectURL;
+            if (origRevoke) URL.revokeObjectURL = origRevoke;
+            else delete URL.revokeObjectURL;
+        }
     });
 });

static/js/render/tool_use/edit.test.js

@@ -28,5 +28,7 @@ describe('renderEditUse', () => {
         });
         expect(html).not.toContain('<bad>');
         expect(html).toContain('&lt;bad&gt;');
+        expect(html).not.toContain('<worse>');
+        expect(html).toContain('&lt;worse&gt;');
     });
 });

static/js/sessions.test.js

@@ -78,6 +78,8 @@ function mockWorkspaceFetch() {
 }
 
 describe('sessions workspace', () => {
+    let clipboardRestore;
+
     beforeEach(() => {
         document.body.innerHTML = '<div id="content"></div>';
         state.currentProject = null;
@@ -88,6 +90,14 @@ describe('sessions workspace', () => {
     });
 
     afterEach(() => {
+        if (clipboardRestore) {
+            Object.defineProperty(navigator, 'clipboard', {
+                value: clipboardRestore,
+                configurable: true,
+                writable: true,
+            });
+            clipboardRestore = null;
+        }
         vi.unstubAllGlobals();
     });
 
@@ -146,7 +156,12 @@ describe('sessions workspace', () => {
 
     it('copyAll writes session text to the clipboard', async () => {
         const writeText = vi.fn(() => Promise.resolve());
-        Object.assign(navigator, { clipboard: { writeText } });
+        clipboardRestore = navigator.clipboard;
+        Object.defineProperty(navigator, 'clipboard', {
+            value: { writeText },
+            configurable: true,
+            writable: true,
+        });
         const el = document.createElement('div');
         el.className = 'session-content-inner';
         el.textContent = 'Line one\nLine two';

vitest.config.js

@@ -10,7 +10,9 @@ export default defineConfig({
             include: ['static/js/**/*.js'],
             exclude: ['static/js/**/*.test.js'],
             thresholds: {
-                lines: 50,
+                lines: 80,
+                functions: 70,
+                branches: 50,
             },
         },
     },