test: enforce 90 percent SDK coverage

.github/workflows/ci-expo-iap.yml

@@ -88,6 +88,9 @@ jobs:
       - name: Test
         run: bun run test:coverage
 
+      - name: Enforce line coverage
+        run: node ../../scripts/assert-lcov-coverage.mjs coverage/lcov.info 90
+
       - name: Upload coverage
         uses: codecov/codecov-action@v7
         with:

.github/workflows/ci-flutter-inapp-purchase.yml

@@ -69,6 +69,9 @@ jobs:
       - name: Filter generated coverage
         run: dart run tool/filter_coverage.dart
 
+      - name: Enforce line coverage
+        run: node ../../scripts/assert-lcov-coverage.mjs coverage/lcov.info 90
+
       - name: Upload coverage
         uses: codecov/codecov-action@v7
         with:

.github/workflows/ci-react-native-iap.yml

@@ -93,6 +93,9 @@ jobs:
       - name: Test
         run: yarn test:ci
 
+      - name: Enforce line coverage
+        run: node ../../scripts/assert-lcov-coverage.mjs coverage/lcov.info 90
+
       - name: Upload coverage
         uses: codecov/codecov-action@v7
         with:

.github/workflows/deploy-kit.yml

@@ -20,6 +20,7 @@ on:
     paths:
       - "packages/kit/**"
       - "packages/mcp-server/**"
+      - "codecov.yml"
       - ".github/workflows/deploy-kit.yml"
       - "bun.lock"
       - "package.json"
@@ -29,11 +30,17 @@ jobs:
   verify:
     name: Typecheck + Build (kit)
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write
     defaults:
       run:
         working-directory: packages/kit
     steps:
       - uses: actions/checkout@v7
+        with:
+          fetch-depth: 0
+          persist-credentials: false
 
       - name: Setup Bun
         uses: oven-sh/setup-bun@v2
@@ -59,7 +66,22 @@ jobs:
         run: bunx prettier --check "src/**/*.{ts,tsx,css,json}" "server/**/*.ts" "convex/**/*.ts"
 
       - name: Run tests (convex + server unit tests)
-        run: bun run test
+        run: bun run test:coverage
+
+      - name: Enforce server line coverage
+        run: node ../../scripts/assert-lcov-coverage.mjs coverage/lcov.info 90
+
+      - name: Upload server coverage
+        uses: codecov/codecov-action@v7
+        with:
+          use_oidc: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
+          fail_ci_if_error: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
+          disable_search: true
+          files: coverage/lcov.info
+          flags: iapkit-server
+          name: iapkit-server
+          network_prefix: packages/kit/
+          working-directory: packages/kit
 
       - name: Lint + test MCP server (served by kit's /mcp route)
         # kit's Fly binary imports @hyodotdev/openiap-mcp-server/web from

codecov.yml

@@ -8,11 +8,59 @@ coverage:
         target: auto
         threshold: 1%
         informational: true
+      react-native-iap:
+        target: 90%
+        threshold: 0%
+        informational: false
+        flags:
+          - react-native-iap
+      expo-iap:
+        target: 90%
+        threshold: 0%
+        informational: false
+        flags:
+          - expo-iap
+      flutter-inapp-purchase:
+        target: 90%
+        threshold: 0%
+        informational: false
+        flags:
+          - flutter-inapp-purchase
+      iapkit-server:
+        target: 90%
+        threshold: 0%
+        informational: false
+        flags:
+          - iapkit-server
     patch:
       default:
         target: auto
         threshold: 1%
         informational: true
+      react-native-iap:
+        target: 90%
+        threshold: 0%
+        informational: false
+        flags:
+          - react-native-iap
+      expo-iap:
+        target: 90%
+        threshold: 0%
+        informational: false
+        flags:
+          - expo-iap
+      flutter-inapp-purchase:
+        target: 90%
+        threshold: 0%
+        informational: false
+        flags:
+          - flutter-inapp-purchase
+      iapkit-server:
+        target: 90%
+        threshold: 0%
+        informational: false
+        flags:
+          - iapkit-server
 
 flags:
   react-native-iap:
@@ -27,6 +75,10 @@ flags:
     paths:
       - "libraries/flutter_inapp_purchase/lib/**"
     carryforward: true
+  iapkit-server:
+    paths:
+      - "packages/kit/server/**"
+    carryforward: true
 
 component_management:
   individual_components:
@@ -48,6 +100,12 @@ component_management:
         - "libraries/flutter_inapp_purchase/lib/**"
       flag_regexes:
         - "^flutter-inapp-purchase$"
+    - component_id: iapkit-server
+      name: IAPKit Server
+      paths:
+        - "packages/kit/server/**"
+      flag_regexes:
+        - "^iapkit-server$"
 
 comment:
   layout: "reach,diff,flags,components,files"