pr Release Workflow

I have audited the /auth module. The analysis shows 84% line coverage but significant gaps in branch coverage for the OAuth2 callback logic. Mutation testing revealed that two assertions in the login flow are effectively no-ops.

Coverage Audit: /auth Module

Identified Gaps

• Missing Branch: src/auth/oauth.py lines 42-48 (Token expiration handling).
• Untested Edge Case: src/auth/service.py - No test for DatabaseTimeout during user lookup.

Weak Test: tests/test_login.py::test_successful_login - Mutation of the return token does not trigger a failure.

Enforcement Configuration

To enforce the 90% threshold for this specific module in your CI pipeline, use the following command:

python3 scripts/coverage_auditor.py enforce \
  --src-dir src/auth \
  --test-dir tests/auth \
  --threshold 90 \
  --fail-under 85

Next steps

1. Add a test case for DatabaseTimeout in tests/test_login.py to cover the identified gap.
2. Update the test_successful_login assertion to verify the specific structure of the JWT token.
3. Run mutation_runner.py on oauth.py to identify why the token expiration logic is surviving mutations.