From eb8164d41adaf5da29b8e82ff5dd085af70a795f Mon Sep 17 00:00:00 2001
From: Minsu Lee <minsu.lee@pleaseai.dev>
Date: Sat, 27 Jun 2026 16:24:19 +0900
Subject: [PATCH 1/2] ci(codecov): add codecov.yml config and Socket badge
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- add codecov.yml (validated) — project (auto/1%) + patch (80%) targets,
  ignore test/dist/declaration files
- add Socket.dev package-health badge to README
- fix CI badge that pointed at the wrong repo (gh-please -> cli-toolkit)
---
 README.md   |  3 ++-
 codecov.yml | 26 ++++++++++++++++++++++++++
 2 files changed, 28 insertions(+), 1 deletion(-)
 create mode 100644 codecov.yml

diff --git a/README.md b/README.md
index 2d25cbb..1068271 100644
--- a/README.md
+++ b/README.md
@@ -1,8 +1,9 @@
 # @pleaseai/cli-toolkit
 
 [![npm version](https://badge.fury.io/js/@pleaseai%2Fcli-toolkit.svg)](https://badge.fury.io/js/@pleaseai%2Fcli-toolkit)
-[![CI](https://github.com/pleaseai/gh-please/actions/workflows/ci.yml/badge.svg)](https://github.com/pleaseai/cli-toolkit/actions/workflows/ci.yml)
+[![CI](https://github.com/pleaseai/cli-toolkit/actions/workflows/ci.yml/badge.svg)](https://github.com/pleaseai/cli-toolkit/actions/workflows/ci.yml)
 [![codecov](https://codecov.io/gh/pleaseai/cli-toolkit/graph/badge.svg?token=lAPii2Uj1a)](https://codecov.io/gh/pleaseai/cli-toolkit)
+[![Socket Badge](https://socket.dev/api/badge/npm/package/@pleaseai/cli-toolkit)](https://socket.dev/npm/package/@pleaseai/cli-toolkit)
 [![code style](https://antfu.me/badge-code-style.svg)](https://github.com/antfu/eslint-config)
 
 Shared CLI utilities for LLM-focused command-line tools.
diff --git a/codecov.yml b/codecov.yml
new file mode 100644
index 0000000..2c8c38a
--- /dev/null
+++ b/codecov.yml
@@ -0,0 +1,26 @@
+# Codecov configuration
+# Docs: https://docs.codecov.com/docs/codecov-yaml
+coverage:
+  status:
+    project:
+      default:
+        # Compare against the base commit; allow a small dip to avoid flaky failures.
+        target: auto
+        threshold: 1%
+    patch:
+      default:
+        # New/changed lines in a PR should be well covered.
+        target: 80%
+        threshold: 0%
+
+comment:
+  layout: "reach, diff, flags, files"
+  behavior: default
+  require_changes: false
+
+# Source-only coverage: tests, build output, and type-only files add noise.
+ignore:
+  - "test"
+  - "dist"
+  - "**/*.test.ts"
+  - "**/*.d.ts"

From 739d78e95555302b0568c3ea1a570f3fa75d68d5 Mon Sep 17 00:00:00 2001
From: Minsu Lee <minsu.lee@pleaseai.dev>
Date: Sat, 27 Jun 2026 16:51:38 +0900
Subject: [PATCH 2/2] chore: apply AI code review suggestions

Fix codecov.yml YAML scalar style to satisfy the repo's yaml/quotes and
yaml/plain-scalar ESLint rules (single quotes / plain scalars), which were
failing CI lint.
---
 codecov.yml | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/codecov.yml b/codecov.yml
index 2c8c38a..7afc8d0 100644
--- a/codecov.yml
+++ b/codecov.yml
@@ -14,13 +14,13 @@ coverage:
         threshold: 0%
 
 comment:
-  layout: "reach, diff, flags, files"
+  layout: 'reach, diff, flags, files'
   behavior: default
   require_changes: false
 
 # Source-only coverage: tests, build output, and type-only files add noise.
 ignore:
-  - "test"
-  - "dist"
-  - "**/*.test.ts"
-  - "**/*.d.ts"
+  - test
+  - dist
+  - '**/*.test.ts'
+  - '**/*.d.ts'