From 1c7c2c346d50dfed159b61057a81206e8ed1692d Mon Sep 17 00:00:00 2001
From: Osvaldo Andrade <osvaldo@codecompany.com.br>
Date: Sun, 28 Jun 2026 17:10:55 -0300
Subject: [PATCH] chore(test): add coverage thresholds config

Introduce .testcoverage.yml consumed by go-test-coverage in CI.

Overall floor starts at 70% (permissive). Per-package overrides:
- internal/core: 95% (domain layer, epic #646)
- internal/application: 85%
- internal/storage: 80%
- internal/server: 85%
- pkg/{producer,worker}client: 80%

Generated *.pb.go and cmd/*/main.go are excluded. Thresholds are
promoted to required gates once epic #654 fills test gaps.

Refs #645 #658
---
 .testcoverage.yml | 43 +++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 43 insertions(+)
 create mode 100644 .testcoverage.yml

diff --git a/.testcoverage.yml b/.testcoverage.yml
new file mode 100644
index 0000000..bbfa4ea
--- /dev/null
+++ b/.testcoverage.yml
@@ -0,0 +1,43 @@
+# Coverage thresholds enforced by go-test-coverage in CI.
+# See https://github.com/vladopajic/go-test-coverage
+#
+# Thresholds are tightened after the refactor epics complete; they start
+# permissive and become binding as test gaps are filled (epic #654).
+
+profile: coverage.out
+local-prefix: github.com/osvaldoandrade/codeq
+
+# Files and packages excluded from coverage computation entirely.
+exclude:
+  paths:
+    - \.pb\.go$
+    - \.pb\.gw\.go$
+    - cmd/.*/main\.go$
+    - ^internal/bench/
+
+# Overall + per-package thresholds. Promoted to required in CI once
+# epic #654 (test infrastructure) fills the existing gaps.
+threshold:
+  file: 0
+  package: 0
+  total: 70
+
+override:
+  # Domain layer: stricter once internal/core exists (epic #646).
+  - threshold: 95
+    path: ^internal/core
+  # Application / use-case layer.
+  - threshold: 85
+    path: ^internal/application
+  # Storage adapters.
+  - threshold: 80
+    path: ^internal/storage
+  # HTTP and gRPC handlers.
+  - threshold: 85
+    path: ^internal/server
+  # Public SDK clients.
+  - threshold: 80
+    path: ^pkg/(producerclient|workerclient)
+  # Public types/contracts are trivially covered by consumer tests.
+  - threshold: 0
+    path: ^pkg/(types|plugin|auth)$