Created TEST_COVERAGE_GAPS.md documenting areas needing test coverage.
Organized by priority with specific test suggestions for each gap.
High Priority Gaps:
- E2E test for complete analysis flow (form → celery → status → result → PDF)
- AI agent testing (SWOT generation, tool use, error handling)
- Input validation/sanitization (SQL injection, XSS, SSRF)
- PDF cache memory limits (no eviction policy currently)
- Dependency security scanning (4 high-severity vulnerabilities)
Medium Priority Gaps:
- Database operations (persistence, migrations, transactions)
- HTMX OOB swap DOM validation (verify correct structure)
- Load testing (concurrency, memory leaks, queue saturation)
- PDF security (size limits, timeouts, content sanitization)
- Deployment validation (Docker build, env vars, health checks)
Low Priority Gaps:
- Frontend Jinjax component testing
- Cross-browser compatibility
- Accessibility (WCAG 2.1 AA compliance)
- Logging and error tracking
- Test data fixtures
For each gap, document includes:
- Description of the gap
- Current coverage status
- Specific test suggestions
- Priority and effort estimates
Ready to convert to GitHub issues using provided template.
Current Coverage: ~15%
Target Coverage: 80%
Critical Path Target: 95%
Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
