fix(jq): -C null color and NaN's number-then-null wrap match jq 1.7.1 by newhoggy · Pull Request #3433 · rust-works/succinctly

newhoggy · 2026-09-28T19:17:10Z

Summary

jq 1.7.1's default null color is 0;90 (bright black) — confirmed live against both the macOS system build (jq-1.7.1-apple) and the official Linux release binary (downloaded fresh from jqlang/jq's GitHub releases), so this is not an Apple-specific default as the issue's own caveat worried it might be. This codebase's default_colors::NULL had 1;30.
A NaN's null spelling (JSON has no NaN) also gets different treatment from a real null in jq: it's wrapped in the number color first, then the null color (\e[0;39m\e[0;90mnull\e[0m\e[0m), distinguishing it from a real null even though the printed word is identical. This applies whether the NaN is computed (nan) or read from input ("NaN" | tonumber).
colorize_json operates on already-rendered JSON text with no access to the originating value, so it can't otherwise tell a NaN's "null" apart from a real one. format_json's two NaN branches now emit an internal marker text instead of a bare null when a new JsonFormatOpts::mark_nan_for_color flag is set (only jq_runner.rs's colorizing call site sets it — the marker is not valid JSON on its own, so every other caller keeps emitting plain null), and colorize_json recognizes the marker to apply jq's double wrap before stripping it back to the literal null text.
Fixes jq: -C colors null and NaN differently from jq 1.7.1 (null SGR, NaN number-color wrapper) #3413.

Scope note

yq mode's own colorized JSON output (-o=json -C) shares this same colorizer (confirmed by an existing test's own comment), so it inherits the corrected null color for free, but keeps mark_nan_for_color: false — real yq's own NaN color convention (if it has one at all) hasn't been checked against the yq oracle, and this issue is scoped to jq mode.

Test plan

cargo build --features cli
cargo test --features cli,simd,regex,serde (full suite, 66/66 binaries green)
cargo clippy --all-targets --all-features -- -D warnings
cargo clippy --all-targets --features std,simd,serde,cli,regex,bench-runner,large-tests,mmap-tests -- -D warnings
Diffed output against /usr/bin/jq 1.7.1 (macOS) and the official jqlang/jq Linux release binary directly, for null, computed nan, "NaN" | tonumber, and a mixed array ([null, nan, 1]) to confirm the two are distinguished positionally, not just in isolation
Updated two pre-existing tests that pinned the old 1;30 default (tests/jq_cli_tests.rs, tests/yq_cli_tests.rs)
omni-dev coverage diff patch coverage: 100% (61/61 new lines)

…#3413) jq 1.7.1's default null color is 0;90 (bright black), not the 1;30 this codebase's default-colors table assumed -- confirmed live against both the macOS system build and the Linux release binary, so this isn't an Apple-specific default. A NaN's "null" spelling (JSON has no NaN) also gets a second, distinct treatment: jq wraps it in the number color, then the null color, rather than the plain null color a real null gets. format_json's NaN branches now emit an internal marker text instead of a bare "null" when colorizing (gated by the new JsonFormatOpts::mark_nan_for_color, false everywhere else since the marker isn't valid JSON on its own), and colorize_json recognizes the marker to apply jq's double wrap before stripping it back to the literal "null" text. yq mode's own colorized JSON output (which shares this colorizer) keeps mark_nan_for_color: false -- real yq's own NaN color convention, if any, hasn't been checked against its oracle, so extending this is out of this issue's scope.

…heme choice Code review found the colorize_json NaN-vs-null disambiguation buffered a whole word into a String just to compare it, where a single-character peek (second letter 'a' vs 'u') suffices -- `format_json_impl` never emits any other bare n-leading token. Also cross-references jq::value::NAN_SENTINEL in the marker's own doc comment, since both solve the same smuggle-a-NaN-through-text problem in different pipelines. Separately, verifying #3413's shared default_colors::NULL constant against real yq (not just jq, since succinctly yq's own -o=json -C output shares this colorizer) surfaced a pre-existing, previously unrecorded divergence: real yq v4.53.3 doesn't color null in its own JSON output at all, and uses an entirely different scheme from jq's. Recorded in docs/compliance/yq/limitations.md per ADR-0018 -- this predates #3413 and isn't part of its scope to fix, only to write down now that it's been noticed.

github-actions · 2026-09-28T19:35:09Z

Coverage

Total: 94.33% ⚪ 0 pp vs main

Comparing e648b40..f40b71e (merge-base → PR head)

No per-file coverage changes vs main.

🔇 0 ignored region(s), 276 tolerated region(s)

ignore removes the lines from both reports; tolerate keeps them in the reported percentage but scores them against the baseline, so a cross-run flip cannot move a delta. Regions are read from each revision's own source.

File	Kind	Lines	Rev	Reason
`src/bin/succinctly/jq_runner.rs`	`tolerate`	1094	both	unreachable: widening the shadow-candidate set never rejects a program the first parse accepted, for the identical reason run_jq's own analogous fallback (#2395) is tolerated -- see that line's own comment (#2950)
`src/bin/succinctly/jq_runner.rs`	`tolerate`	2148-2160	both	unreachable: `try_parse_meta_op` only fires under `ParserMode::Yq` (src/jq/parser.rs), and `rewrite_namespaced_calls` is only reached via `ModuleProcessor::process_program`, which jq_runner's own jq-mode `run` is the sole caller of -- so a `MetaAssign` node can never reach this function (#798)
`src/bin/succinctly/jq_runner.rs`	`tolerate`	2747	both	unreachable by construction: every error this wrapper receives today is a decode or nesting-depth failure the evaluator raised itself, never error(v); kept so a future one is rendered rather than dropped (#2999)
`src/bin/succinctly/jq_runner.rs`	`tolerate`	2748	both	see the arm above (#2999)
`src/bin/succinctly/jq_runner.rs`	`tolerate`	3164	both	unreachable in practice today: `def` is only `None` when `occurrences.module_def()` is `None`, which (given `origin` is `Some`) would require an open run whose innermost frame has no def set at a `check` point that isn't itself inside a module-level def body -- but every module run is a strict chain of `def` nodes (the loader's own defs, each wrapping its dependency stubs INSIDE its own body via `wrap_defs`/`dep_stubs_for`) terminated by the run's own end marker, so a diagnosable call/var/break site is always reached either inside a module-level def's body (module_def Some) or outside every run (origin None) -- and even when `def` is `Some`, `self.defs` is always `ModuleSource::read`'s own re-parse of the exact same file `run_id_for` interned this origin's id from, so `collect_def_sites` always finds the matching (name, arity, ordinal) span. Kept as a defensive fallback rather than a panic/unwrap in case that invariant is ever violated (#3085)
`src/bin/succinctly/jq_runner.rs`	`tolerate`	3413-3416	both	unreachable in a single-process run by construction: `run_id_for` (the sole source of an `origin` id) always inserts a `run_origins` entry for the id it hands back -- from a real load's canonical path, or its own literal-path fallback on a resolve failure -- and a def body only ever gets stamped with an `origin` after its module loaded successfully, so `at` always names a file that existed and was readable moments earlier. Reaching this arm needs that same file to vanish (or become unreadable) in the narrow window between that load and this re-read, entirely outside this process's control (#2964)
`src/bin/succinctly/jq_runner.rs`	`tolerate`	3680	both	unreachable: widening the shadow-candidate set never rejects a program the first parse accepted -- a newly covered name only wraps an already-successful dedicated parse, and a failing one would have propagated its error in the first parse too, so the retry budget is charged at the identical sites in both (#2395)
`src/bin/succinctly/jq_runner.rs`	`tolerate`	9419	both	unreachable: this test builds only ResolveError::Call values (#3313)
`src/bin/succinctly/jq_runner.rs`	`tolerate`	11370	both	unreachable in a passing suite by design -- the fixed b\
`src/bin/succinctly/main.rs`	`tolerate`	1356	both	unreachable given clap 4.6's own unknown_argument() error constructor: every ErrorKind::UnknownArgument it builds sets ContextKind::InvalidArg to ContextValue::String(arg) in the same call, so this arm only guards a future clap release changing that invariant
`src/bin/succinctly/main.rs`	`tolerate`	1397	both	llvm-cov line-attribution artifact, not unreachable: test_negative_filter_accepted_via_sjq_multicall_alias_3389's '-x' row demonstrably reaches the e.exit() two lines below (exit code 2, confirmed by that test passing), which this if-let's own closing brace sits directly above -- the brace itself is never credited a hit, the same class of artifact eval.rs's own tolerate list documents for other closing braces (#3389)
`src/bin/succinctly/main.rs`	`tolerate`	1559	both	llvm-cov line-attribution artifact, not unreachable: test_negative_filter_boundary_characters_3389's '-x'/'-n1'/'--bogus' rows demonstrably reach the e.exit() two lines below (exit code 2, confirmed by that test passing), which this if-let's own closing brace sits directly above -- the brace itself is never credited a hit, the same class of artifact eval.rs's own tolerate list documents for other closing braces (#3389)
`src/bin/succinctly/main.rs`	`tolerate`	1581	both	the CLI suites drive yq through the `syq` multi-call arm above; this arm is the same call reached only when spelled `succinctly yq` (#2999)
`src/bin/succinctly/yq_runner.rs`	`tolerate`	1652	both	unreachable: bytes already parsed successfully by every caller (#1350)
`src/bin/succinctly/yq_runner.rs`	`tolerate`	1741	both	unreachable: see the block comment above this arm
`src/bin/succinctly/yq_runner.rs`	`tolerate`	1742	both	unreachable: see the block comment above this arm
`src/bin/succinctly/yq_runner.rs`	`tolerate`	1743	both	unreachable: see the block comment above this arm
`src/bin/succinctly/yq_runner.rs`	`tolerate`	3330	both	unreachable: `path` is always the raw output of the `path(TARGET)` builtin evaluated a few lines up in `resolve_one_meta_assign` -- `path/1` is a jq/yq language invariant that always answers an array of path components (see `Expr::Builtin(Builtin::PathNoArg) => Ok(Some(OwnedValue::Array(..)))` in eval_generic.rs), never any other shape (#798)
`src/bin/succinctly/yq_runner.rs`	`tolerate`	3430	both	unreachable: `resolve_meta_assign_writes` runs `expr` through this before any evaluation begins (see its own doc comment), and `Expr::Shared` is never constructed by the parser -- only at eval time, by function-call argument substitution (`substitute_func_param` in eval.rs) -- so a pre-evaluation AST can never contain one here (#798)
`src/bin/succinctly/yq_runner.rs`	`tolerate`	4062	both	unreachable: every arm of the `match result { .. }` above that assigns `docs` (L3492-3622) constructs `Ok(..)` -- none ever produces `Err`, so this `if let`'s implicit else can't be taken; symmetric to L1625's `?` (#798)
`src/bin/succinctly/yq_runner.rs`	`tolerate`	6746-6748	both	unreachable: this whole `_ =>` arm is dead code -- `root.value()` always reports the virtual document sequence, so single-document YAML never falls through here (documented above, verified in `d4c03a6`); only the formatting changed when `is_falsy()` dropped its `JsonConvention` parameter (#3222)
`src/bin/succinctly/yq_runner.rs`	`tolerate`	6937-6942	both	unreachable: this whole `_ =>` arm is dead code -- `root.value()` always reports the virtual document sequence, so single-document YAML never falls through here (documented above, verified in `d4c03a6`); only the formatting changed when `is_falsy()` dropped its `JsonConvention` parameter (#3222)
`src/bin/succinctly/yq_runner.rs`	`tolerate`	7695-7700	both	unreachable: this whole `_ =>` arm is dead code -- `root.value()` always reports the virtual document sequence, so single-document YAML never falls through here (documented above, verified in `d4c03a6`); only the formatting changed when `is_falsy()` dropped its `JsonConvention` parameter (#3222)
`src/jq/document.rs`	`tolerate`	383	both	unreachable: the only caller, eval_generic::embed_at_or_within, is gated on jq semantics, and the YAML cursor (the one implementor without an override) is only ever evaluated under yq semantics (#3179)
`src/jq/document.rs`	`tolerate`	978-982	both	unreachable: both implementors (JsonCursor, YamlCursor) override this; the default exists as the conservative-`false` contract a future implementor inherits (#3222)
`src/jq/document.rs`	`tolerate`	1157-1164	both	unreachable: both implementors (StandardJson, YamlValue) override this to decode once; the default exists as the contract a future implementor inherits, and is deliberately the two-call sequence it replaces (#965)
`src/jq/eval.rs`	`tolerate`	1163	both	unreachable: def is always a collect_alias_groups anchor path, which step_to_expr never fails on (#1351)
`src/jq/eval.rs`	`tolerate`	1184	both	unreachable: redirect_paths with Redirect::SINGLE always contributes exactly one output per input, so a 1-element paths always pops Some (#1351)
`src/jq/eval.rs`	`tolerate`	1193	both	unreachable: a concrete setpath/delpaths path's components are always Field/Index -- step_to_expr never produces another shape (#1351)
`src/jq/eval.rs`	`tolerate`	1197	both	unreachable: the map above never yields None, since it only ever matches Field/Index (#1351)
`src/jq/eval.rs`	`tolerate`	1731	both	unreachable: key_or_parent_root_construct's identical structural match already refused any expr shape that would reach this arm
`src/jq/eval.rs`	`tolerate`	4677	both	unreachable: `is_escape()` is exactly `Error
`src/jq/eval.rs`	`tolerate`	4678	both	unreachable: see the `if let` above -- `push_owned_values` never answers `None` for an `is_escape()` result (#2180)
`src/jq/eval.rs`	`tolerate`	5861	both	unreachable today: to_owned's only failures are is_decode_failure()-tagged, and suppresses() answers false for those whatever `optional` is -- the same defensive-but-dead arm eval_generic's own Builtin::Path materialization documents under #2280 (#2908)
`src/jq/eval.rs`	`tolerate`	6627	both	unreachable: every Demand::Stop the sink answers is preceded by `outcome = Some(..)`, handled just above (#2872)
`src/jq/eval.rs`	`tolerate`	7897	both	unreachable: `optional` is never `true` here. `eval_each` is entered with a forced `true` at exactly one site (`Expr::Optional` over an `IndexExpr`/`SliceExpr`), and both of those evaluate their target (`eval_index_expr`) and their key (`eval_each(key, .., false)`) with a hardcoded `false`, so only the final index/slice step ever sees it -- nothing carries it down to an `Expr::Object` (#2180)
`src/jq/eval.rs`	`tolerate`	8999	both	unreachable: owned_write_door calls this only on a clone of a head write_target already matched, and the two list the same five variants (#3188)
`src/jq/eval.rs`	`tolerate`	9013	both	unreachable: every value path_over_owned hands back is a path() output, which is always an array (#3188)
`src/jq/eval.rs`	`tolerate`	9292	both	unreachable: any_child_witnessed is false for every non-container, checked just above (#3178)
`src/jq/eval.rs`	`tolerate`	9534	both	reachable only on a genuine allocation failure: owned_assign_step's single-step arms map every non-allocation error to unreachable_owned_assign_write (provably impossible, see its own doc comment), and its Chain arm's set_path call walks exactly the steps owned_assign_step_child already validated as Field-into-Object/Null or Index-in-[0,len]-into-Array/Null with no mutation in between, so the only way set_path/set_field/set_index/pad_with_nulls can still fail is the same try_reserve-fails-under-OOM branch the codebase already tolerates elsewhere (#2267) (#3138)
`src/jq/eval.rs`	`tolerate`	9659	both	unreachable: owned_assign_shape's only caller (owned_step_shape) gates the call on is_owned_assign(expr), which recognizes exactly Assign/Update/CompoundAssign/AlternativeAssign -- the same four variants this match already has explicit arms for, so `expr` can never be anything else here (#3138)
`src/jq/eval.rs`	`tolerate`	9852	both	unreachable: both call sites (try_eval_owned_step, gated on is_owned_assign; eval_owned_reindex_free's own Assign
`src/jq/eval.rs`	`tolerate`	9926	both	unreachable: this function's own doc comment states why -- the borrow on `state` between owned_assign_step_child's check and the single write makes the container changing shape impossible, so debug_assert!(false, ..) can never fire (#3138)
`src/jq/eval.rs`	`tolerate`	9927	both	unreachable: same invariant as the `false` above -- this message is only ever formatted if that assert fires (#3138)
`src/jq/eval.rs`	`tolerate`	9929	both	unreachable: this function is only called from owned_assign_step's single-step arms, both of which the invariant above already rules out ever calling it for real (#3138)
`src/jq/eval.rs`	`tolerate`	9930	both	unreachable: the whole function body above is provably dead by the same borrow-checker invariant its doc comment states (#3138)
`src/jq/eval.rs`	`tolerate`	9967	both	unreachable: Expr::pipe() (the parser's sole Pipe constructor) collapses a one-element list to the bare inner expr instead of wrapping it, and substitute_vars's substitute_var walk preserves a Pipe's stage count rather than dropping stages -- no other site builds an Expr::Pipe for a parsed assignment path, so a path's top-level Pipe here is never single-element (#3138)
`src/jq/eval.rs`	`tolerate`	13017	both	unreachable: every entry point supplies path context, so `path` never evaluates without one; pre-existing zero-hit line; #2999 changed only how its array payload is constructed
`src/jq/eval.rs`	`tolerate`	13150	both	unreachable: only ever constructed by builtin_sort_keys's own eval_update_no_vivify call, whose enclosing eval_update_impl already runs to_owned on the whole document up front (#2855) -- a decode failure anywhere raises there, before this filter ever sees a value to re-decode; confirmed live, `sort_keys(.a)`/`sort_keys(..)` on a document with a decode-failure subtree both raise from the outer to_owned
`src/jq/eval.rs`	`tolerate`	13293-13295	both	unreachable: builtin_length's sole caller is eval_builtin's `Builtin::Length` dispatch, and `Length` is in `builtin_operand_is_input`, so eval_builtin's own top-of-function guard already returns the identical decode_failure for an Error value before this match ever runs; kept as this function's own contract in case a future caller reaches it directly (#3222)
`src/jq/eval.rs`	`tolerate`	13516-13518	both	unreachable: has_one_key's sole caller is builtin_has (via eval_builtin's `Builtin::Has` dispatch), and `Has` is in `builtin_operand_is_input`, so eval_builtin's own top-of-function guard already returns the identical decode_failure for an Error value before builtin_has ever runs; kept as this function's own contract in case a future caller reaches it directly (#3222)
`src/jq/eval.rs`	`tolerate`	16681	both	unreachable: entry is one of to_entries's already-materialized {key,value} pairs, so its depth here is provably no deeper than whatever earlier check let it exist -- a document-decoded entry is already <256 deep (MAX_NESTING_DEPTH, stricter than this 384 guard), and a filter-constructed one already survived becoming a cursor via its own whole-object reindex, which is strictly deeper than any single field extracted from it could be (unwrapping only reduces depth); confirmed live, {a: (reduce range(400) as $i (0; [.]))}
`src/jq/eval.rs`	`tolerate`	24403	both	unreachable: escape_with_prefix! sets `terminal` before Demand::Stop; already returned above (#2138)
`src/jq/eval.rs`	`tolerate`	24772	both	unreachable: escape! sets `terminal` before Demand::Stop; already returned above (#2546)
`src/jq/eval.rs`	`tolerate`	26242	both	unreachable via --eval-all: every document here comes straight from parse_input, whose own MAX_NESTING_DEPTH (256) guard already rejects anything deep enough to reach MAX_VALUE_TREE_DEPTH (384) here -- confirmed live, a 300-level document fails parse_input's guard before ever reaching this reindex (#3261)
`src/jq/eval.rs`	`tolerate`	29459	both	unreachable: descriptor_path_component builds a Verbatim key only from an object (#3300)
`src/jq/eval.rs`	`tolerate`	33773	both	reachable only on a genuine allocation failure: `Vec::try_reserve(1)` on a vector that has spare capacity, or can grow, cannot fail -- this is the whole purpose of the branch, converting an OOM into a catchable error rather than an abort (ADR-0018's 'would take the host process down' exception). The pre-#2267 form of the same guard, `out.try_reserve(branches.len())` in `resolve_index_expr`/`resolve_slice_expr`, was 0-hit for the identical reason (#2267)
`src/jq/eval.rs`	`tolerate`	33774	both	see the line above -- the `Demand::Stop` half of the same allocation-failure-only branch (#2267)
`src/jq/eval.rs`	`tolerate`	33780	both	reachable only when the `try_reserve` above failed, i.e. only on a genuine allocation failure (#2267)
`src/jq/eval.rs`	`tolerate`	36258	both	unreachable: owned_value_jq_length's own match only ever constructs OwnedValue::Int or OwnedValue::Float, checked just above this arm (#2744)
`src/jq/eval.rs`	`tolerate`	36793	both	unreachable: `is_primitive` admits only Identity/Field/Index/Slice, and of those only a Slice's computed bounds can halt -- all four have their own arm in `resolve_node_sink`/`resolve_node_eager`, so none reaches this function. Pre-existing; #2694 only wrapped the return in `Some` (#2694)
`src/jq/eval.rs`	`tolerate`	36827	both	unreachable, as this arm's own comment above says: indexing or slicing a value yields zero or one result, so `is_primitive` never produces more than one -- kept as a named error rather than a panic. Pre-existing; #2694 only wrapped the enclosing return in `Some` (#2694)
`src/jq/eval.rs`	`tolerate`	39686	both	unreachable: every Demand::Stop the sink answers is preceded by `outcome = Some(..)`, handled just above (#2872)
`src/jq/eval.rs`	`tolerate`	40682	both	unreachable: every Demand::Stop the sink answers is preceded by `outcome = Some(..)`, returned just above (#2872)
`src/jq/eval.rs`	`tolerate`	41054	both	unreachable: every arm of the loop's last iteration returns -- a walk refusal, an exhausted walk, and a step outcome that never retries on the last alternative (#2979, #2872)
`src/jq/eval.rs`	`tolerate`	41592	both	unreachable: every path through the loop's last iteration returns -- a walk refusal, an exhausted walk, and a step outcome that never retries on the last alternative (#2979, #2872)
`src/jq/eval.rs`	`tolerate`	44318	both	unreachable in a passing suite by design -- a panic-message format argument for the #682 single-valued-tail pin, evaluated only if that assert's own condition is false (#2190)
`src/jq/eval.rs`	`tolerate`	44395	both	unreachable: the only caller reaches this after classify_static_component answered Field for this same value, which it does only for an object (#2190)
`src/jq/eval.rs`	`tolerate`	44439	both	unreachable: both callers establish the container first -- navigate_static_component_ref via classify_static_component's Index arm, and walk_path's Expr::Iterate arm by matching on the container itself (#2190)
`src/jq/eval.rs`	`tolerate`	47200	both	unreachable: every Demand::Stop the sink answers is preceded by `outcome = Some(..)`, handled just above (#2872)
`src/jq/eval.rs`	`tolerate`	48856	both	unreachable: stop_with_escape's only write is `slot.set(Some(control))` with the control it was handed, which is always the `Control::Error` built one line above (#2180)
`src/jq/eval.rs`	`tolerate`	49356	both	unreachable: on_update records a `step_outcome` before every Demand::Stop it answers, and the fallback match runs only when it recorded none (#2872)
`src/jq/eval.rs`	`tolerate`	49379	both	unreachable: every Demand::Stop the sink answers is preceded by `outcome = Some(..)`, handled just above (#2872)
`src/jq/eval.rs`	`tolerate`	49908	both	unreachable by construction: the per-fork match only ever hands stop_with_downstream a non-Exhausted flow, so `terminal` can never hold Exhausted. `foreach_forks`' identical arm is 0-hit for the same reason and is only unflagged because it predates this diff (#2899)
`src/jq/eval.rs`	`tolerate`	51826	both	llvm-cov line-attribution artifact, not unreachable: the new gate test above (`Builtin::Length` as `first`) demonstrably takes `key_or_parent_root_construct(first) == false` and falls through to the reindex-bridge route below, passing -- but this closing brace, like the one at #56920 for the same reason, is never itself credited a hit
`src/jq/eval.rs`	`tolerate`	51840	both	unreachable in the current test suite: eval_path_context_pipe_owned itself has zero total call-site coverage today (not just this arm), confirmed by a full-suite eprintln probe across every test binary -- reaching its error arm needs first solving how to reach the function at all, out of scope for #3261's reindex-bridge fix
`src/jq/eval.rs`	`tolerate`	52880	both	pre-existing zero-hit line; #2999 changed only how its array payload is constructed
`src/jq/eval.rs`	`tolerate`	54966	both	pre-existing zero-hit line; #2999 changed only which null constant it names
`src/jq/eval.rs`	`tolerate`	57451	both	`?` suppresses mktime's error outside builtin dispatch, so the optional flag is false even for an invalid date (#3083)
`src/jq/eval.rs`	`tolerate`	57454	both	unreachable for mktime's C-int-clamped fields: checked civil-date arithmetic stays within i64; the guard protects other callers of the shared helpers (#3083)
`src/jq/eval.rs`	`tolerate`	57675	both	defensive, unreachable via ordinary JSON parsing (#3068)
`src/jq/eval.rs`	`tolerate`	57678	both	defensive, unreachable via ordinary JSON parsing (#3068)
`src/jq/eval.rs`	`tolerate`	57719	both	`optional` is never true through either caller of this function -- confirmed live (`eprintln!` probe): `[1,2,3]
`src/jq/eval.rs`	`tolerate`	57728	both	every array literal written in filter source, and every array-element JSON parses, decodes to NumberLiteral (#1035), not a bare Int -- Int is for internally-synthesized values spliced post-parse; probed a computed element ([1970,(0+0),..]) and it still decoded as NumberLiteral here, so this arm has no known real producer (#3068)
`src/jq/eval.rs`	`tolerate`	57749	both	`optional` is never true through either caller of this function, same as the array-length check above (#3068)
`src/jq/eval.rs`	`tolerate`	57812	both	unreachable for strftime's C-int-clamped fields and bounded zone offset; shared checked date helpers retain overflow guards for other callers (#3083)
`src/jq/eval.rs`	`tolerate`	57968	both	llvm-cov line-attribution artifact, not unreachable: the call's own argument lines (immediately above) show 3 hits under the #3055 test's three E/O pass-through rows, but this closing-token line is never itself credited -- verified via the raw lcov DA: records
`src/jq/eval.rs`	`tolerate`	59583	both	unreachable from `combinations`, whose own empty-input return runs first; pre-existing zero-hit line; #2999 changed only how its array payload is constructed
`src/jq/eval.rs`	`tolerate`	60683	both	confirmed live (eprintln! probe): optional is always false in builtin_abs regardless of whether the filter writes abs?, since that suppression happens entirely outside builtin dispatch here -- the same 'optional is never true here' shape eval.rs already documents elsewhere (#2180) (#3041)
`src/jq/eval.rs`	`tolerate`	62739	both	unreachable: the sink is a plain collector that always answers Demand::Continue (#2872)
`src/jq/eval.rs`	`tolerate`	62849	both	unreachable: `optional: false` makes index_one_owned answer Ok(Some)/Err only (#2872)
`src/jq/eval.rs`	`tolerate`	63000	both	unreachable: `pattern_has_computed_key` is false for `Pattern::Var`, so the loop walker above always takes it (#2872)
`src/jq/eval.rs`	`tolerate`	63047	both	unreachable: every caller gates on `pattern_has_computed_key` being false (#2872)
`src/jq/eval.rs`	`tolerate`	64286	both	unreachable: bind_def_call only calls this for a non-empty params, install_def_calls only builds a DefCall whose args.len() equals params.len(), and the last parameter is never shadowed, so at least one entry is always built (#2560)
`src/jq/eval.rs`	`tolerate`	65698	both	unreachable in a passing suite by design -- this panic only fires if eval_owned_reindex_free declined a shape this loop's own `handled` table asserts is always answered (#3138)
`src/jq/eval.rs`	`tolerate`	65707	both	unreachable in a passing suite by design -- this panic only fires if try_eval_owned_step declined or errored on a shape this loop's own `handled` table asserts is always answered Ok (#3138)
`src/jq/eval.rs`	`tolerate`	65746	both	unreachable in a passing suite by design -- this panic only fires if try_eval_owned_step handled a shape this loop's own `declined` table asserts is always declined (#3138)
`src/jq/eval.rs`	`tolerate`	65767	both	unreachable in a passing suite by design -- this panic only fires if try_eval_owned_step declined or errored on a yq shape this loop's own table asserts is always answered Ok (#3138)
`src/jq/eval.rs`	`tolerate`	65866	both	unreachable in a passing suite by design -- this panic only fires if the tracked \
`src/jq/eval.rs`	`tolerate`	65868	both	unreachable in a passing suite by design -- this panic only fires if `state` stopped being an Object, which every owned_assign_step write in the loop below preserves (#3138)
`src/jq/eval.rs`	`tolerate`	65876	both	unreachable in a passing suite by design -- this panic only fires if try_eval_owned_step declined or errored on the single-step shape this loop drives every iteration (#3138)
`src/jq/eval.rs`	`tolerate`	65881	both	unreachable in a passing suite by design -- this arm only fires if `state` stopped being an Object, which every write in the loop above preserves (#3138)
`src/jq/eval.rs`	`tolerate`	66068	both	substitute_var_impl's FuncDef arm always returns FuncDef (#2283)
`src/jq/eval.rs`	`tolerate`	66090	both	substitute_var_impl's FuncDef arm always returns FuncDef (#2283)
`src/jq/eval.rs`	`tolerate`	66108	both	substitute_var_impl's FuncDef arm always returns FuncDef (#2283)
`src/jq/eval.rs`	`tolerate`	66178	both	substitute_var_impl's FuncDef arm always returns FuncDef (#2283)
`src/jq/eval.rs`	`tolerate`	66196	both	substitute_func_param_impl's FuncDef arm always returns FuncDef (#2555)
`src/jq/eval.rs`	`tolerate`	73707	both	unreachable in a passing suite by design -- this is the failure message for the assertion this test exists to make (#3261)
`src/jq/eval.rs`	`tolerate`	73858	both	unreachable in a passing suite by design -- this is the failure message for the assertion the test exists to make (#2190)
`src/jq/eval.rs`	`tolerate`	74828	both	unreachable in a passing suite: every source this helper parses starts with `def f(n): ...;` (#3296)
`src/jq/eval.rs`	`tolerate`	74885	both	unreachable in a passing suite: `f(1)` under `def f(n)` always installs as a DefCall, which the assert above has just settled (#3296)
`src/jq/eval.rs`	`tolerate`	86122	both	unreachable in a passing suite by design -- this test's own diagnostic (#3071)
`src/jq/eval.rs`	`tolerate`	86174	both	unreachable in a passing suite by design -- this test's own diagnostic (#3102)
`src/jq/eval.rs`	`tolerate`	86964-86975	both	the closure is asserted never called below (on_update_calls stays 0) -- Err(_) with optional=true short-circuits fold_step_each before this sink runs (#3122)
`src/jq/eval.rs`	`tolerate`	91802	both	unreachable in a passing suite by design -- this test's own diagnostic (#3071)
`src/jq/eval.rs`	`tolerate`	96837	both	unreachable in a passing suite by design -- this is the failure message for the assertion this test exists to make
`src/jq/eval.rs`	`tolerate`	96848	both	unreachable in a passing suite by design -- this is the failure message for the assertion this test exists to make
`src/jq/eval.rs`	`tolerate`	96865	both	unreachable in a passing suite by design -- this is the failure message for the assertion this test exists to make
`src/jq/eval.rs`	`tolerate`	96885	both	unreachable in a passing suite by design -- this is the failure message for the assertion this test exists to make
`src/jq/eval.rs`	`tolerate`	96893	both	unreachable in a passing suite by design -- this is the failure message for the assertion this test exists to make
`src/jq/eval.rs`	`tolerate`	98044	both	unreachable in a passing suite by design -- this test's own diagnostic (#3071)
`src/jq/eval.rs`	`tolerate`	99941	both	unreachable in a passing suite by design -- check_value_tree_depth's only Err variant is EvalError, and From for EvalEscape always produces EvalEscape::Error (#3275)
`src/jq/eval.rs`	`tolerate`	105605	both	unreachable in a passing suite by design -- every filter this helper is called with parses to an AsPattern (#2649)
`src/jq/eval.rs`	`tolerate`	105649	both	unreachable in a passing suite by design -- a literal-key pattern's walk either completes or refuses with an error (#2872)
`src/jq/eval.rs`	`tolerate`	105658	both	unreachable in a passing suite by design -- every call site passes the origin of a binding this same test already proved carries a marker (#2649)
`src/jq/eval.rs`	`tolerate`	105986	both	unreachable in a passing suite by design -- the assertion above is the test (#2872)
`src/jq/eval.rs`	`tolerate`	106639	both	unreachable in a passing suite by design -- every row here is a shape jq accepts, confirmed live (#2649)
`src/jq/eval.rs`	`tolerate`	106707	both	unreachable in a passing suite by design -- every row here is a shape jq refuses, confirmed live (#2649)
`src/jq/eval.rs`	`tolerate`	107092	both	unreachable in a passing suite by design -- this is the panic message for the #2072 pin itself, only formatted if the let-else pattern fails to match (#2072)
`src/jq/eval.rs`	`tolerate`	107108	both	unreachable in a passing suite by design -- this is the panic message for the #2072 pin itself, only formatted if the let-else pattern fails to match (#2072)
`src/jq/eval.rs`	`tolerate`	107135	both	unreachable in a passing suite by design -- this is the panic message for the #2072 pin itself, only formatted if the match doesn't hit the expected arm above (#2072)
`src/jq/eval.rs`	`tolerate`	107151	both	unreachable in a passing suite by design -- this is the panic message for the #2072 pin itself, only formatted if the match doesn't hit the expected arm above (#2072)
`src/jq/eval.rs`	`tolerate`	107236	both	unreachable in a passing suite by design -- every expression this closure receives is built by `marker` above (#3037)
`src/jq/eval.rs`	`tolerate`	107314	both	unreachable in a passing suite by design -- `rewrite_markers` rebuilds the same node kind it was given (#3037)
`src/jq/eval.rs`	`tolerate`	107643	both	unreachable in a passing suite by design -- every expression this closure receives is built by `marker` above (#3135)
`src/jq/eval.rs`	`tolerate`	107749	both	unreachable in a passing suite by design -- every expression this closure receives is built by `marker` above (#3122)
`src/jq/eval.rs`	`tolerate`	107767	both	unreachable in a passing suite by design -- `rewrite_markers` rebuilds the same node kind it was given (#3122)
`src/jq/eval.rs`	`tolerate`	107835	both	unreachable in a passing suite by design -- fires only if demote_for_reentry's own let-else assertion condition is false (#3122)
`src/jq/eval.rs`	`tolerate`	107839	both	unreachable in a passing suite by design -- fires only if demote_for_reentry's own let-else assertion condition is false (#3122)
`src/jq/eval.rs`	`tolerate`	107879	both	unreachable in a passing suite by design -- fires only if reroot's own let-else assertion condition is false (#3122)
`src/jq/eval.rs`	`tolerate`	107883	both	unreachable in a passing suite by design -- fires only if reroot's own let-else assertion condition is false (#3122)
`src/jq/eval.rs`	`tolerate`	109503	both	unreachable in a passing suite by design -- this is the panic message for the assertion above, only formatted if the match doesn't hit the Error arm (#3119)
`src/jq/eval.rs`	`tolerate`	109558	both	unreachable in a passing suite by design -- this is the panic message for the assertion above, only formatted if the match doesn't hit the Error arm (#3127)
`src/jq/eval.rs`	`tolerate`	112069	both	unreachable in a passing suite by design -- this is the failure message for the assertion this test exists to make (#2937)
`src/jq/eval.rs`	`tolerate`	112155	both	unreachable in a passing suite by design -- every READERS filter raises a decode failure on every malformed json in this sweep, so this fallback never fires (#3222)
`src/jq/eval.rs`	`tolerate`	112161	both	unreachable in a passing suite by design -- see the `concrete` match above, same sweep (#3222)
`src/jq/eval.rs`	`tolerate`	112165-112167	both	unreachable in a passing suite by design -- this is the failure-recording line for the assertion below, only reached if a READERS filter fails to raise (#3222)
`src/jq/eval.rs`	`tolerate`	112223-112225	both	unreachable in a passing suite by design -- this is the failure-recording line for the assertion below, only reached if a NON_READERS filter disagrees between the malformed and well-formed document (#3222)
`src/jq/eval.rs`	`tolerate`	112233	both	unreachable in a passing suite by design -- none of NON_READERS ever raises through eval_with_cursor_using, on the malformed document or the well-formed one; kept so a filter that starts erroring is still comparable rather than panicking (#3222)
`src/jq/eval.rs`	`tolerate`	112239-112241	both	unreachable in a passing suite by design -- see the `eval` failure-recording line above, same assertion (#3222)
`src/jq/eval.rs`	`tolerate`	112414	both	every pinned filter below yields an owned value; kept so a cursor answer still renders rather than panics (#2999)
`src/jq/eval.rs`	`tolerate`	112415	both	unreachable in a passing suite by design -- the failure message for the assertions this helper serves (#2999)
`src/jq/eval_generic.rs`	`tolerate`	877	both	unreachable: validate_cursor, CheckOnly's only instantiation, passes no nested nodes, so the walk never asks (#3179)
`src/jq/eval_generic.rs`	`tolerate`	3902	both	unreachable: the sole remaining caller (`retain_truthy_generic`'s `Many` arm) runs `to_owned` on an item before keeping it, so re-converting a kept item here cannot fail; the `ManyCursor` caller that made this reachable went with the truthiness walk (#2692, re-establishing #2661's premise)
`src/jq/eval_generic.rs`	`tolerate`	5577	both	unreachable: hi is find_close of a container's own open paren, which a built index always matches (#3179)
`src/jq/eval_generic.rs`	`tolerate`	7914	both	unreachable in a passing suite by design -- this is the panic message for the #2368 pin itself, only formatted if the assert's own condition is false (#2368)
`src/jq/eval_generic.rs`	`tolerate`	7975	both	unreachable: this arm's own match guard already evaluated `value.as_array().is_some_and(..)` as true to be here at all, and `as_array()` is a pure read of `value` -- the second call inside the body can never answer `None` where the guard's own call just answered `Some`
`src/jq/eval_generic.rs`	`tolerate`	9869	both	the CLI evaluates every program that uses input/inputs on the eager route (jq_runner's can_use_lazy_path excludes them), so this guard never fires today -- #2968's identical guards on the arms above are equally unfired; kept for the day the lazy path admits such a program (#1309)
`src/jq/eval_generic.rs`	`tolerate`	9886	both	the CLI evaluates every program that uses input/inputs on the eager route (jq_runner's can_use_lazy_path excludes them), so this guard never fires today -- #2968's identical guards on the arms above are equally unfired; kept for the day the lazy path admits such a program (#1309)
`src/jq/eval_generic.rs`	`tolerate`	11102	both	unreachable: every Demand::Stop the sink answers is preceded by `outcome = Some(..)`, handled just above (#2872)
`src/jq/eval_generic.rs`	`tolerate`	12630	both	unreachable: every producer that reaches this empty-`exprs` tail (`each_lazy_keys_iterate_sink`'s `sorted`/`!sorted` arms, `each_lazy_index_range_iterate_sink`, `each_lazy_seq_iterate_sink`) yields `OneCursorValue`/`OneCursor`/`Owned`, never a cursorless `GenericItem::One` -- so `cursor` is always `Some` here; kept for exhaustiveness/symmetry with the `Some` arm (#2103)
`src/jq/eval_generic.rs`	`tolerate`	14332	both	unreachable: each_negate_generic pushes only GenericItem::Owned (arith_negate's result), which converts infallibly (#3410)
`src/jq/eval_generic.rs`	`tolerate`	15968	both	unreachable: escape_generic!/ensure_owned! set `terminal` before Demand::Stop; already returned above (#2138)
`src/jq/eval_generic.rs`	`tolerate`	16322	both	unreachable: escape! sets `terminal` before Demand::Stop; already returned above (#2546)
`src/jq/eval_generic.rs`	`tolerate`	16469-16473	both	unreachable: this function's sole caller, slice_one_generic_computed, already runs the identical unreadable_value_error(&target) check on the same target and returns before ever calling here; kept as this function's own contract in case a future literal-bounds caller reaches it directly (#3222)
`src/jq/eval_generic.rs`	`tolerate`	16926	both	unreachable by construction: key_elements_generic builds every key of a run from the same Option<&Expr> (#2999)
`src/jq/eval_generic.rs`	`tolerate`	16936	both	unreachable by construction: key_elements_generic builds every key of a run from the same Option<&Expr> (#2999)
`src/jq/eval_generic.rs`	`tolerate`	17611	both	pre-existing zero-hit line; #2999 changed only how its array payload is constructed
`src/jq/eval_generic.rs`	`tolerate`	17644	both	unreachable: both step dispatchers route owned nodes to path_step_owned before calling this cursor helper (#3022)
`src/jq/eval_generic.rs`	`tolerate`	17692	both	unreachable: both step dispatchers route owned nodes to path_step_owned before calling this cursor helper (#3022)
`src/jq/eval_generic.rs`	`tolerate`	17760	both	unreachable: both step dispatchers route owned nodes to path_step_owned before calling this cursor helper (#3022)
`src/jq/eval_generic.rs`	`tolerate`	17776	both	unreachable: effective_fields_checked already rejects key_is_malformed, the same decoded_key_str Ok(None) that makes key_display_string return None (#3022)
`src/jq/eval_generic.rs`	`tolerate`	17899	both	unreachable: both callers match Field, Index or Iterate before dispatching here (#3022)
`src/jq/eval_generic.rs`	`tolerate`	19346	both	unreachable: `len_checked` and `SliceBounds::resolve` already bound every index in `range` to `[0, len)`, so `get_cursor` cannot miss (#2168)
`src/jq/eval_generic.rs`	`tolerate`	22254	both	unreachable by construction: path_context_resolvable admits an any(cond) read only through admits.prefetch, so the rewriter always has one -- the AnyCond arm above carries the identical assertion (#3079)
`src/jq/eval_generic.rs`	`tolerate`	22258	both	unreachable by construction, see above
`src/jq/eval_generic.rs`	`tolerate`	22259	both	unreachable by construction, see above
`src/jq/eval_generic.rs`	`tolerate`	22582	both	unreachable: the callback records downstream_flow before every Demand::Stop, and that flow is returned above (#3022)
`src/jq/eval_generic.rs`	`tolerate`	23067	both	pre-existing zero-hit line; #2999 changed only how its array payload is constructed
`src/jq/eval_generic.rs`	`tolerate`	23088	both	pre-existing zero-hit line; #2999 changed only how its array payload is constructed
`src/jq/eval_generic.rs`	`tolerate`	23447	both	unreachable: `malformed_object_member` above already proved every key stringifies (the `None` half), and `to_owned_cursor` on an untagged key `decoded_key_str` decoded cannot fail (the `Err` half) (#2785)
`src/jq/eval_generic.rs`	`tolerate`	23528	both	unreachable: `map(f)` over an array emits exactly one array; kept so a future `map` shape produces no output rather than a panic (#2785)
`src/jq/eval_generic.rs`	`tolerate`	23833	both	unreachable by design -- eval_single's #2368 debug_assert forbids optional=true on Builtin::Reverse, so length never answers None here (#2730)
`src/jq/eval_generic.rs`	`tolerate`	24460	both	the CLI evaluates every program that uses input/inputs on the eager route (jq_runner's can_use_lazy_path excludes them), so this guard never fires today -- #2968's identical guards on the arms above are equally unfired; kept for the day the lazy path admits such a program (#1309)
`src/jq/eval_generic.rs`	`tolerate`	24466	both	see above: the input-queue deferral never fires from the CLI
`src/jq/eval_generic.rs`	`tolerate`	25911	both	unreachable by construction: every shape either guard admits now has an arm above (#2771), and expr_dispatch_catchall_guards_default_conservatively_2549 pins both guards' `_ => false` defaults directly
`src/jq/eval_generic.rs`	`tolerate`	26459	both	unreachable in a passing suite by design -- `owned_identity_rule` maps a bare `Expr::Var` to `Bound` too (for the static gate, which sees a body before its `as` substitution runs), but every runtime dispatch that reaches this rule (`owned_identity_after_stage`/`owned_identity_placed_by`, from `owned_identity_leaving_cursor`'s `Bound` arm) only ever sees a stage after `eval_owned_identity_as`'s unconditional `substitute_bound_var_from` call, which always turns `$x` into `Expr::TrackedVar` before recursing -- confirmed by running the full suite with this arm replaced by a hard `panic!()`, which never fired (#2072)
`src/jq/eval_generic.rs`	`tolerate`	26477	both	unreachable: this `Slice` rule's own two execution paths both exclude `Expr::Slice` before ever reaching `owned_identity_placed_by` -- `eval_owned_identity_stages`'s catch-all only runs a stage `owned_identity_nav_supported` refused, and `owned_identity_leaving_cursor` (`identity_from_first`, eval_generic.rs:10724) only runs a stage `path_context_is_navigational` refused -- and both predicates admit `Expr::Slice` (`owned_identity_nav_supported`/`path_context_is_navigational_at` each list `Expr::Slice { .. } => true`), so a bare slice is always resolved by `owned_identity_step`'s own arm first. Kept in `owned_identity_rule`'s match for exhaustiveness/symmetry with the rule table's other entries, the same reason #2072's `Bound` arm above is kept unreachable-by-construction (#2966's review of #2834)
`src/jq/eval_generic.rs`	`tolerate`	27971	both	optional is never true through this pipe: `?` is eval_owned_identity_try, which catches the escape instead, and after #693 only the IndexExpr/SliceExpr special case ever sets it -- kept as any_all_f's scalar_fallback mirror
`src/jq/eval_generic.rs`	`tolerate`	27972	both	optional is never true here, see above
`src/jq/eval_generic.rs`	`tolerate`	28386	both	unreachable in a passing suite by design -- the failure message for the assertion the tests below make (#2999)
`src/jq/eval_generic.rs`	`tolerate`	28598	both	unreachable in a passing suite by design -- the fixture's map(.+1) is always a LazySeq; this arm is the test's own diagnostic (#2666)
`src/jq/eval_generic.rs`	`tolerate`	28626	both	unreachable in a passing suite by design -- the fixture's only escape is Control::Error; this arm is the test's own diagnostic (#2666)
`src/jq/eval_generic.rs`	`tolerate`	28928	both	unreachable in a passing suite by design -- this is the failure message for the assertion this test exists to make (#3261)
`src/jq/eval_generic.rs`	`tolerate`	33892	both	failure message for the assertion this #3222 test exists to make
`src/jq/eval_generic.rs`	`tolerate`	39529	both	unreachable in a passing suite: this panic reports a failed test invariant (#3022)
`src/jq/eval_generic.rs`	`tolerate`	39533	both	unreachable in a passing suite: this panic reports a failed test invariant (#3022)
`src/jq/eval_generic.rs`	`tolerate`	39536	both	unreachable in a passing suite: this panic reports a failed test invariant (#3022)
`src/jq/eval_generic.rs`	`tolerate`	39592	both	unreachable in a passing suite: this panic reports a failed test invariant (#3022)
`src/jq/eval_generic.rs`	`tolerate`	39672	both	unreachable in a passing suite: this panic reports a failed test invariant (#3022)
`src/jq/eval_generic.rs`	`tolerate`	39687	both	unreachable in a passing suite: this panic reports a failed test invariant (#3022)
`src/jq/eval_generic.rs`	`tolerate`	39710	both	unreachable in a passing suite: this panic reports a failed test invariant (#3022)
`src/jq/eval_generic.rs`	`tolerate`	39731	both	unreachable in a passing suite: this panic reports a failed test invariant (#3022)
`src/jq/eval_generic.rs`	`tolerate`	40143	both	unreachable in a passing suite: this panic reports a failed test invariant (#3022)
`src/jq/eval_generic.rs`	`tolerate`	40165	both	unreachable in a passing suite: this panic reports a failed test invariant (#3022)
`src/jq/eval_generic.rs`	`tolerate`	40172	both	unreachable in a passing suite: this panic reports a failed test invariant (#3022)
`src/jq/eval_generic.rs`	`tolerate`	40250	both	unreachable in a passing suite: this panic reports a failed test invariant (#3022)
`src/jq/eval_generic.rs`	`tolerate`	40301	both	unreachable in a passing suite: this panic reports a failed test invariant (#3022)
`src/jq/eval_generic.rs`	`tolerate`	40362	both	unreachable in a passing suite: this panic reports a failed test invariant (#3022)
`src/jq/eval_generic.rs`	`tolerate`	40398	both	unreachable in a passing suite: this panic reports a failed test invariant (#3022)
`src/jq/eval_generic.rs`	`tolerate`	40407	both	unreachable in a passing suite: yq rolls back every position before this sink, as the zero-count assertion verifies (#3022)
`src/jq/eval_generic.rs`	`tolerate`	40408	both	unreachable in a passing suite: yq rolls back every position before this sink, as the zero-count assertion verifies (#3022)
`src/jq/eval_generic.rs`	`tolerate`	40409	both	unreachable in a passing suite: yq rolls back every position before this sink, as the zero-count assertion verifies (#3022)
`src/jq/lazy.rs`	`tolerate`	1474	both	failure message for the shape the test asserts
`src/jq/parser.rs`	`tolerate`	231	both	unreachable: parse_join_expr only calls join_expr with two to four arguments (#3046)
`src/jq/parser.rs`	`tolerate`	253	both	unreachable: join_expr builds only this shape, and only join_expr names JOIN_IDX_VAR, which no program can spell (#3046)
`src/jq/parser.rs`	`tolerate`	255	both	unreachable: join_expr builds only this shape, and only join_expr names JOIN_IDX_VAR, which no program can spell (#3046)
`src/jq/parser.rs`	`tolerate`	257	both	unreachable: join_expr builds only this shape, and only join_expr names JOIN_IDX_VAR, which no program can spell (#3046)
`src/jq/parser.rs`	`tolerate`	264	both	unreachable: join_expr builds only this shape, and only join_expr names JOIN_IDX_VAR, which no program can spell (#3046)
`src/jq/parser.rs`	`tolerate`	268	both	unreachable: join_expr builds only this shape, and only join_expr names JOIN_IDX_VAR, which no program can spell (#3046)
`src/jq/parser.rs`	`tolerate`	284	both	unreachable: join_expr builds only this shape, and only join_expr names JOIN_IDX_VAR, which no program can spell (#3046)
`src/jq/parser.rs`	`tolerate`	9765	both	unreachable in a passing suite by design -- this is the panic message for the #3044 pin itself, only formatted if the let-else pattern fails to match (#3044)
`src/jq/resolve.rs`	`tolerate`	2230	both	unreachable by construction: this match is only entered when is_marker (marker.is_some()) is true, and RunMarker has only Begin/End variants -- the None arm exists solely for exhaustiveness against Option's type
`src/jq/resolve.rs`	`tolerate`	2462	both	unreachable in practice today: this arm needs builtin_fallback==None (the name was never a shadow candidate) yet is_jq_builtin==true (a real jq builtin at this arity) -- every implemented builtin's own dedicated parse already lowers that shape to Expr::Builtin before resolve.rs ever runs, and #3042/#3046 closed the once-real 'unimplemented builtin' gap this existed for (see JQ_BUILTIN_ROSTER's own doc comment)
`src/jq/resolve.rs`	`tolerate`	2464	both	unreachable with the current roster: every `JQ_BUILTIN_ROSTER` entry of arity >= 1 already has a dedicated parser form (a `matches_keyword` special case or a `Libm1`/`Libm2`/`Libm3::ALL` entry -- confirmed by cross-referencing the full roster against both), so it is parsed straight to `Expr::Builtin` and never reaches here as a bare `FuncCall`. This arm exists for a roster name with no dedicated parse yet and a nonzero arity -- there is none today, so the loop body is reached with an empty `args` on every pinned-suite run (355 hits on the arm's own condition, 0 in the loop) and would only start executing if such a name were added (#2964)
`src/jq/share_stats.rs`	`tolerate`	97	both	process-global env var; exercised by the CLI audit run, not by an in-process test (#2999)
`src/jq/value.rs`	`tolerate`	365	both	unreachable by construction: the slow path is entered only after `significant_digit_count` found 18+ digits over the same mantissa bytes this loop walks (#2936)
`src/jq/value.rs`	`tolerate`	389	both	unreachable by construction: 18+ significant digits were counted, so at least one nonzero digit was kept (#2936)
`src/jq/value.rs`	`tolerate`	2800	both	unreachable: `format_float_with_fraction` of a finite double is always RFC 8259 number text, which `parse_i64_or_f64` reads (#2936)
`src/jq/value.rs`	`tolerate`	4861	both	unreachable in a passing suite by design -- every caller built the value as an array (#2999)
`src/jq/value.rs`	`tolerate`	5104	both	unreachable in a passing suite by design -- the value was built as this container a few lines above (#2999)
`src/jq/value.rs`	`tolerate`	5923	both	unreachable in a passing suite by design -- the failure message for a malformed oracle table (#2936)
`src/jq/value.rs`	`tolerate`	6271	both	failure message for the assertion the calling test makes
`src/jq/value.rs`	`tolerate`	6495	both	failure message for the assertion this #3034 test exists to make
`src/jq/value.rs`	`tolerate`	6501	both	failure message for the assertion this #3034 test exists to make
`src/jq/value.rs`	`tolerate`	6613	both	unreachable in a passing suite by design -- this is a panic-message format argument for the #3222 sweep's own assertion, only evaluated if the assert's own condition is false (#3222)
`src/jq/value.rs`	`tolerate`	7729	both	unreachable in a passing suite by design -- this is the failure message for the assertion this test exists to make (#3281)
`src/jq/value.rs`	`tolerate`	7747	both	unreachable in a passing suite by design -- this is the failure message for the assertion this test exists to make (#3281)
`src/json/light.rs`	`tolerate`	2663-2669	both	unreachable in practice: UNMEASURED_SPAN only arises when `end - text_pos` in `number_at` overflows u32 -- a single number span >= 4 GiB -- which no realistic (or practically constructible) test document approaches (#3222)
`src/json/light.rs`	`tolerate`	3442	both	reachable only through a bare 64-bit hash collision between keys the pairwise scan already proved distinct
`src/json/light.rs`	`tolerate`	9087	both	unreachable in a passing suite by design -- the failure message for the assertion this #2877 test exists to make
`src/json/light.rs`	`tolerate`	9169	both	unreachable in a passing suite by design -- the failure message for the assertion this #2877 test exists to make
`src/json/light.rs`	`tolerate`	9258	both	unreachable in a passing suite by design -- the failure message for the assertion this #2877 test exists to make
`src/json/light.rs`	`tolerate`	9291	both	failure message for the assertion this #3034 test exists to make
`src/json/light.rs`	`tolerate`	9320	both	failure message for the assertion this #3034 test exists to make
`src/json/light.rs`	`tolerate`	9408	both	unreachable in a passing suite by design -- this is a panic-message format argument for the #3222 sweep's own assertion, only evaluated if the assert's own condition is false (#3222)
`src/json/light.rs`	`tolerate`	9413	both	unreachable in a passing suite by design -- see the assert_eq! format argument above, same sweep (#3222)
`src/json/light.rs`	`tolerate`	9439	both	unreachable in a passing suite by design -- this is a panic-message format argument for the #2072 pin itself, only evaluated if the assert's own condition is false (#2072)
`src/json/light.rs`	`tolerate`	9450	both	unreachable in a passing suite by design -- this is a panic-message format argument for the #2072 pin itself, only evaluated if the assert's own condition is false (#2072)
`src/json/light.rs`	`tolerate`	9531	both	unreachable in a passing suite by design -- this is a panic-message format argument for the #2072 pin itself, only evaluated if the assert's own condition is false (#2072)
`src/util/simd/x86.rs`	`tolerate`	208-258	both	CPU-gated: the avx512f early-return only executes on Zen 4+ / Skylake-X runners, and its absence changes which AMD/Intel branch below executes too (#2449)
`src/yaml/index.rs`	`tolerate`	1268	both	unreachable: YamlIndex::build always wraps the parsed document(s) in a virtual root Sequence, at TY index 0 (#798)
`src/yaml/index.rs`	`tolerate`	1272	both	unreachable: every fixture field_key_head_foot is called with in this test module is a top-level mapping (#798)
`src/yaml/index.rs`	`tolerate`	1283	both	unreachable: a mapping key is always emitted as YamlValue::String -- it is never type-inferred like a value (#222), so this if-let's pattern can never fail to match (#798)
`src/yaml/index.rs`	`tolerate`	1285	both	unreachable: every call to field_key_head_foot in this test module passes a key that the fixture's mapping actually has (#798)
`src/yaml/index.rs`	`tolerate`	1295	both	unreachable: YamlIndex::build always wraps the parsed document(s) in a virtual root Sequence, at TY index 0 (#798)
`src/yaml/index.rs`	`tolerate`	1299	both	unreachable: every fixture seq_item_head_foot is called with in this test module is a top-level sequence (#798)
`src/yaml/index.rs`	`tolerate`	1322	both	unreachable: YamlIndex::build always wraps the parsed document(s) in a virtual root Sequence, at TY index 0 (#798)
`src/yaml/index.rs`	`tolerate`	1341	both	unreachable: YamlIndex::build always wraps the parsed document(s) in a virtual root Sequence, at TY index 0 (#798)
`src/yaml/index.rs`	`tolerate`	1364	both	unreachable: YamlIndex::build always wraps the parsed document(s) in a virtual root Sequence, at TY index 0 (#798)
`src/yaml/index.rs`	`tolerate`	1373	both	unreachable: every fixture field_key_head_foot_in_doc is called with in this test module is a top-level mapping (#798)
`src/yaml/index.rs`	`tolerate`	1384	both	unreachable: a mapping key is always emitted as YamlValue::String -- it is never type-inferred like a value (#222), so this if-let's pattern can never fail to match (#798)
`src/yaml/index.rs`	`tolerate`	1386	both	unreachable: every call to field_key_head_foot_in_doc in this test module passes a key that the fixture's document actually has (#798)
`src/yaml/index.rs`	`tolerate`	1397	both	unreachable: YamlIndex::build always wraps the parsed document(s) in a virtual root Sequence, at TY index 0 (#798)
`src/yaml/index.rs`	`tolerate`	1401	both	unreachable: every fixture nested_key_head_foot is called with in this test module is a top-level mapping (#798)
`src/yaml/index.rs`	`tolerate`	1405	both	unreachable: a mapping key is always emitted as YamlValue::String -- it is never type-inferred like a value (#222), so this let-else's pattern can never fail to match (#798)
`src/yaml/index.rs`	`tolerate`	1411	both	unreachable: every fixture nested_key_head_foot is called with has a nested mapping under `outer` (#798)
`src/yaml/index.rs`	`tolerate`	1422	both	unreachable: a mapping key is always emitted as YamlValue::String -- it is never type-inferred like a value (#222), so this if-let's pattern can never fail to match (#798)
`src/yaml/index.rs`	`tolerate`	1425	both	unreachable: every call to nested_key_head_foot in this test module passes an outer.inner pair that the fixture actually has (#798)
`src/yaml/light.rs`	`tolerate`	3365	both	unreachable: an alias target is never None for a built index (#1374)
`src/yaml/light.rs`	`tolerate`	15669	both	unreachable in a passing suite by design -- this is a panic-message format argument for the #2072 pin itself, only evaluated if the assert's own condition is false (#2072)
`src/yaml/light.rs`	`tolerate`	15680	both	unreachable in a passing suite by design -- this is a panic-message format argument for the #2072 pin itself, only evaluated if the assert's own condition is false (#2072)
`src/yaml/light.rs`	`tolerate`	15837	both	unreachable in a passing suite by design -- this is a panic-message format argument for the #2072 pin itself, only evaluated if the assert's own condition is false (#2072)
`src/yaml/parser.rs`	`tolerate`	1583	both	unreachable: every block-sequence open registers a frame at its own depth before any item of it can be parsed (#1079)
`src/yaml/parser.rs`	`tolerate`	1613	both	unreachable: this function's sole caller (record_standalone_comment) only invokes it from inside a match on `pending_head_lines.last()`, so pending_head_lines is already known non-empty here (#798)
`src/yaml/parser.rs`	`tolerate`	7999	both	unreachable: every byte here already passed the `[0-9.eE+-]` charset check above, a strict subset of ASCII, so `str::from_utf8` can never fail (#2778)

Patch coverage

Patch: 100% (65/65 new lines covered)

File	Patch	Uncovered new lines
`src/bin/succinctly/jq_runner.rs`	100% (1/1)	—
`src/bin/succinctly/output.rs`	100% (64/64)	—

_{📦 Full per-file coverage summary · run summary}

github-actions · 2026-09-28T19:35:40Z

Coverage

Total: 94.42% ⚪ 0 pp vs main

Comparing e648b40..f40b71e (merge-base → PR head)

No per-file coverage changes vs main.

🔇 0 ignored region(s), 275 tolerated region(s)

ignore removes the lines from both reports; tolerate keeps them in the reported percentage but scores them against the baseline, so a cross-run flip cannot move a delta. Regions are read from each revision's own source.

File	Kind	Lines	Rev	Reason
`src/bin/succinctly/jq_runner.rs`	`tolerate`	1094	both	unreachable: widening the shadow-candidate set never rejects a program the first parse accepted, for the identical reason run_jq's own analogous fallback (#2395) is tolerated -- see that line's own comment (#2950)
`src/bin/succinctly/jq_runner.rs`	`tolerate`	2148-2160	both	unreachable: `try_parse_meta_op` only fires under `ParserMode::Yq` (src/jq/parser.rs), and `rewrite_namespaced_calls` is only reached via `ModuleProcessor::process_program`, which jq_runner's own jq-mode `run` is the sole caller of -- so a `MetaAssign` node can never reach this function (#798)
`src/bin/succinctly/jq_runner.rs`	`tolerate`	2747	both	unreachable by construction: every error this wrapper receives today is a decode or nesting-depth failure the evaluator raised itself, never error(v); kept so a future one is rendered rather than dropped (#2999)
`src/bin/succinctly/jq_runner.rs`	`tolerate`	2748	both	see the arm above (#2999)
`src/bin/succinctly/jq_runner.rs`	`tolerate`	3164	both	unreachable in practice today: `def` is only `None` when `occurrences.module_def()` is `None`, which (given `origin` is `Some`) would require an open run whose innermost frame has no def set at a `check` point that isn't itself inside a module-level def body -- but every module run is a strict chain of `def` nodes (the loader's own defs, each wrapping its dependency stubs INSIDE its own body via `wrap_defs`/`dep_stubs_for`) terminated by the run's own end marker, so a diagnosable call/var/break site is always reached either inside a module-level def's body (module_def Some) or outside every run (origin None) -- and even when `def` is `Some`, `self.defs` is always `ModuleSource::read`'s own re-parse of the exact same file `run_id_for` interned this origin's id from, so `collect_def_sites` always finds the matching (name, arity, ordinal) span. Kept as a defensive fallback rather than a panic/unwrap in case that invariant is ever violated (#3085)
`src/bin/succinctly/jq_runner.rs`	`tolerate`	3413-3416	both	unreachable in a single-process run by construction: `run_id_for` (the sole source of an `origin` id) always inserts a `run_origins` entry for the id it hands back -- from a real load's canonical path, or its own literal-path fallback on a resolve failure -- and a def body only ever gets stamped with an `origin` after its module loaded successfully, so `at` always names a file that existed and was readable moments earlier. Reaching this arm needs that same file to vanish (or become unreadable) in the narrow window between that load and this re-read, entirely outside this process's control (#2964)
`src/bin/succinctly/jq_runner.rs`	`tolerate`	3680	both	unreachable: widening the shadow-candidate set never rejects a program the first parse accepted -- a newly covered name only wraps an already-successful dedicated parse, and a failing one would have propagated its error in the first parse too, so the retry budget is charged at the identical sites in both (#2395)
`src/bin/succinctly/jq_runner.rs`	`tolerate`	9419	both	unreachable: this test builds only ResolveError::Call values (#3313)
`src/bin/succinctly/jq_runner.rs`	`tolerate`	11370	both	unreachable in a passing suite by design -- the fixed b\
`src/bin/succinctly/main.rs`	`tolerate`	1356	both	unreachable given clap 4.6's own unknown_argument() error constructor: every ErrorKind::UnknownArgument it builds sets ContextKind::InvalidArg to ContextValue::String(arg) in the same call, so this arm only guards a future clap release changing that invariant
`src/bin/succinctly/main.rs`	`tolerate`	1397	both	llvm-cov line-attribution artifact, not unreachable: test_negative_filter_accepted_via_sjq_multicall_alias_3389's '-x' row demonstrably reaches the e.exit() two lines below (exit code 2, confirmed by that test passing), which this if-let's own closing brace sits directly above -- the brace itself is never credited a hit, the same class of artifact eval.rs's own tolerate list documents for other closing braces (#3389)
`src/bin/succinctly/main.rs`	`tolerate`	1559	both	llvm-cov line-attribution artifact, not unreachable: test_negative_filter_boundary_characters_3389's '-x'/'-n1'/'--bogus' rows demonstrably reach the e.exit() two lines below (exit code 2, confirmed by that test passing), which this if-let's own closing brace sits directly above -- the brace itself is never credited a hit, the same class of artifact eval.rs's own tolerate list documents for other closing braces (#3389)
`src/bin/succinctly/main.rs`	`tolerate`	1581	both	the CLI suites drive yq through the `syq` multi-call arm above; this arm is the same call reached only when spelled `succinctly yq` (#2999)
`src/bin/succinctly/yq_runner.rs`	`tolerate`	1652	both	unreachable: bytes already parsed successfully by every caller (#1350)
`src/bin/succinctly/yq_runner.rs`	`tolerate`	1741	both	unreachable: see the block comment above this arm
`src/bin/succinctly/yq_runner.rs`	`tolerate`	1742	both	unreachable: see the block comment above this arm
`src/bin/succinctly/yq_runner.rs`	`tolerate`	1743	both	unreachable: see the block comment above this arm
`src/bin/succinctly/yq_runner.rs`	`tolerate`	3330	both	unreachable: `path` is always the raw output of the `path(TARGET)` builtin evaluated a few lines up in `resolve_one_meta_assign` -- `path/1` is a jq/yq language invariant that always answers an array of path components (see `Expr::Builtin(Builtin::PathNoArg) => Ok(Some(OwnedValue::Array(..)))` in eval_generic.rs), never any other shape (#798)
`src/bin/succinctly/yq_runner.rs`	`tolerate`	3430	both	unreachable: `resolve_meta_assign_writes` runs `expr` through this before any evaluation begins (see its own doc comment), and `Expr::Shared` is never constructed by the parser -- only at eval time, by function-call argument substitution (`substitute_func_param` in eval.rs) -- so a pre-evaluation AST can never contain one here (#798)
`src/bin/succinctly/yq_runner.rs`	`tolerate`	4062	both	unreachable: every arm of the `match result { .. }` above that assigns `docs` (L3492-3622) constructs `Ok(..)` -- none ever produces `Err`, so this `if let`'s implicit else can't be taken; symmetric to L1625's `?` (#798)
`src/bin/succinctly/yq_runner.rs`	`tolerate`	6746-6748	both	unreachable: this whole `_ =>` arm is dead code -- `root.value()` always reports the virtual document sequence, so single-document YAML never falls through here (documented above, verified in `d4c03a6`); only the formatting changed when `is_falsy()` dropped its `JsonConvention` parameter (#3222)
`src/bin/succinctly/yq_runner.rs`	`tolerate`	6937-6942	both	unreachable: this whole `_ =>` arm is dead code -- `root.value()` always reports the virtual document sequence, so single-document YAML never falls through here (documented above, verified in `d4c03a6`); only the formatting changed when `is_falsy()` dropped its `JsonConvention` parameter (#3222)
`src/bin/succinctly/yq_runner.rs`	`tolerate`	7695-7700	both	unreachable: this whole `_ =>` arm is dead code -- `root.value()` always reports the virtual document sequence, so single-document YAML never falls through here (documented above, verified in `d4c03a6`); only the formatting changed when `is_falsy()` dropped its `JsonConvention` parameter (#3222)
`src/jq/document.rs`	`tolerate`	383	both	unreachable: the only caller, eval_generic::embed_at_or_within, is gated on jq semantics, and the YAML cursor (the one implementor without an override) is only ever evaluated under yq semantics (#3179)
`src/jq/document.rs`	`tolerate`	978-982	both	unreachable: both implementors (JsonCursor, YamlCursor) override this; the default exists as the conservative-`false` contract a future implementor inherits (#3222)
`src/jq/document.rs`	`tolerate`	1157-1164	both	unreachable: both implementors (StandardJson, YamlValue) override this to decode once; the default exists as the contract a future implementor inherits, and is deliberately the two-call sequence it replaces (#965)
`src/jq/eval.rs`	`tolerate`	1163	both	unreachable: def is always a collect_alias_groups anchor path, which step_to_expr never fails on (#1351)
`src/jq/eval.rs`	`tolerate`	1184	both	unreachable: redirect_paths with Redirect::SINGLE always contributes exactly one output per input, so a 1-element paths always pops Some (#1351)
`src/jq/eval.rs`	`tolerate`	1193	both	unreachable: a concrete setpath/delpaths path's components are always Field/Index -- step_to_expr never produces another shape (#1351)
`src/jq/eval.rs`	`tolerate`	1197	both	unreachable: the map above never yields None, since it only ever matches Field/Index (#1351)
`src/jq/eval.rs`	`tolerate`	1731	both	unreachable: key_or_parent_root_construct's identical structural match already refused any expr shape that would reach this arm
`src/jq/eval.rs`	`tolerate`	4677	both	unreachable: `is_escape()` is exactly `Error
`src/jq/eval.rs`	`tolerate`	4678	both	unreachable: see the `if let` above -- `push_owned_values` never answers `None` for an `is_escape()` result (#2180)
`src/jq/eval.rs`	`tolerate`	5861	both	unreachable today: to_owned's only failures are is_decode_failure()-tagged, and suppresses() answers false for those whatever `optional` is -- the same defensive-but-dead arm eval_generic's own Builtin::Path materialization documents under #2280 (#2908)
`src/jq/eval.rs`	`tolerate`	6627	both	unreachable: every Demand::Stop the sink answers is preceded by `outcome = Some(..)`, handled just above (#2872)
`src/jq/eval.rs`	`tolerate`	7897	both	unreachable: `optional` is never `true` here. `eval_each` is entered with a forced `true` at exactly one site (`Expr::Optional` over an `IndexExpr`/`SliceExpr`), and both of those evaluate their target (`eval_index_expr`) and their key (`eval_each(key, .., false)`) with a hardcoded `false`, so only the final index/slice step ever sees it -- nothing carries it down to an `Expr::Object` (#2180)
`src/jq/eval.rs`	`tolerate`	8999	both	unreachable: owned_write_door calls this only on a clone of a head write_target already matched, and the two list the same five variants (#3188)
`src/jq/eval.rs`	`tolerate`	9013	both	unreachable: every value path_over_owned hands back is a path() output, which is always an array (#3188)
`src/jq/eval.rs`	`tolerate`	9292	both	unreachable: any_child_witnessed is false for every non-container, checked just above (#3178)
`src/jq/eval.rs`	`tolerate`	9534	both	reachable only on a genuine allocation failure: owned_assign_step's single-step arms map every non-allocation error to unreachable_owned_assign_write (provably impossible, see its own doc comment), and its Chain arm's set_path call walks exactly the steps owned_assign_step_child already validated as Field-into-Object/Null or Index-in-[0,len]-into-Array/Null with no mutation in between, so the only way set_path/set_field/set_index/pad_with_nulls can still fail is the same try_reserve-fails-under-OOM branch the codebase already tolerates elsewhere (#2267) (#3138)
`src/jq/eval.rs`	`tolerate`	9659	both	unreachable: owned_assign_shape's only caller (owned_step_shape) gates the call on is_owned_assign(expr), which recognizes exactly Assign/Update/CompoundAssign/AlternativeAssign -- the same four variants this match already has explicit arms for, so `expr` can never be anything else here (#3138)
`src/jq/eval.rs`	`tolerate`	9852	both	unreachable: both call sites (try_eval_owned_step, gated on is_owned_assign; eval_owned_reindex_free's own Assign
`src/jq/eval.rs`	`tolerate`	9926	both	unreachable: this function's own doc comment states why -- the borrow on `state` between owned_assign_step_child's check and the single write makes the container changing shape impossible, so debug_assert!(false, ..) can never fire (#3138)
`src/jq/eval.rs`	`tolerate`	9927	both	unreachable: same invariant as the `false` above -- this message is only ever formatted if that assert fires (#3138)
`src/jq/eval.rs`	`tolerate`	9929	both	unreachable: this function is only called from owned_assign_step's single-step arms, both of which the invariant above already rules out ever calling it for real (#3138)
`src/jq/eval.rs`	`tolerate`	9930	both	unreachable: the whole function body above is provably dead by the same borrow-checker invariant its doc comment states (#3138)
`src/jq/eval.rs`	`tolerate`	9967	both	unreachable: Expr::pipe() (the parser's sole Pipe constructor) collapses a one-element list to the bare inner expr instead of wrapping it, and substitute_vars's substitute_var walk preserves a Pipe's stage count rather than dropping stages -- no other site builds an Expr::Pipe for a parsed assignment path, so a path's top-level Pipe here is never single-element (#3138)
`src/jq/eval.rs`	`tolerate`	13017	both	unreachable: every entry point supplies path context, so `path` never evaluates without one; pre-existing zero-hit line; #2999 changed only how its array payload is constructed
`src/jq/eval.rs`	`tolerate`	13150	both	unreachable: only ever constructed by builtin_sort_keys's own eval_update_no_vivify call, whose enclosing eval_update_impl already runs to_owned on the whole document up front (#2855) -- a decode failure anywhere raises there, before this filter ever sees a value to re-decode; confirmed live, `sort_keys(.a)`/`sort_keys(..)` on a document with a decode-failure subtree both raise from the outer to_owned
`src/jq/eval.rs`	`tolerate`	13293-13295	both	unreachable: builtin_length's sole caller is eval_builtin's `Builtin::Length` dispatch, and `Length` is in `builtin_operand_is_input`, so eval_builtin's own top-of-function guard already returns the identical decode_failure for an Error value before this match ever runs; kept as this function's own contract in case a future caller reaches it directly (#3222)
`src/jq/eval.rs`	`tolerate`	13516-13518	both	unreachable: has_one_key's sole caller is builtin_has (via eval_builtin's `Builtin::Has` dispatch), and `Has` is in `builtin_operand_is_input`, so eval_builtin's own top-of-function guard already returns the identical decode_failure for an Error value before builtin_has ever runs; kept as this function's own contract in case a future caller reaches it directly (#3222)
`src/jq/eval.rs`	`tolerate`	16681	both	unreachable: entry is one of to_entries's already-materialized {key,value} pairs, so its depth here is provably no deeper than whatever earlier check let it exist -- a document-decoded entry is already <256 deep (MAX_NESTING_DEPTH, stricter than this 384 guard), and a filter-constructed one already survived becoming a cursor via its own whole-object reindex, which is strictly deeper than any single field extracted from it could be (unwrapping only reduces depth); confirmed live, {a: (reduce range(400) as $i (0; [.]))}
`src/jq/eval.rs`	`tolerate`	24403	both	unreachable: escape_with_prefix! sets `terminal` before Demand::Stop; already returned above (#2138)
`src/jq/eval.rs`	`tolerate`	24772	both	unreachable: escape! sets `terminal` before Demand::Stop; already returned above (#2546)
`src/jq/eval.rs`	`tolerate`	26242	both	unreachable via --eval-all: every document here comes straight from parse_input, whose own MAX_NESTING_DEPTH (256) guard already rejects anything deep enough to reach MAX_VALUE_TREE_DEPTH (384) here -- confirmed live, a 300-level document fails parse_input's guard before ever reaching this reindex (#3261)
`src/jq/eval.rs`	`tolerate`	29459	both	unreachable: descriptor_path_component builds a Verbatim key only from an object (#3300)
`src/jq/eval.rs`	`tolerate`	33773	both	reachable only on a genuine allocation failure: `Vec::try_reserve(1)` on a vector that has spare capacity, or can grow, cannot fail -- this is the whole purpose of the branch, converting an OOM into a catchable error rather than an abort (ADR-0018's 'would take the host process down' exception). The pre-#2267 form of the same guard, `out.try_reserve(branches.len())` in `resolve_index_expr`/`resolve_slice_expr`, was 0-hit for the identical reason (#2267)
`src/jq/eval.rs`	`tolerate`	33774	both	see the line above -- the `Demand::Stop` half of the same allocation-failure-only branch (#2267)
`src/jq/eval.rs`	`tolerate`	33780	both	reachable only when the `try_reserve` above failed, i.e. only on a genuine allocation failure (#2267)
`src/jq/eval.rs`	`tolerate`	36258	both	unreachable: owned_value_jq_length's own match only ever constructs OwnedValue::Int or OwnedValue::Float, checked just above this arm (#2744)
`src/jq/eval.rs`	`tolerate`	36793	both	unreachable: `is_primitive` admits only Identity/Field/Index/Slice, and of those only a Slice's computed bounds can halt -- all four have their own arm in `resolve_node_sink`/`resolve_node_eager`, so none reaches this function. Pre-existing; #2694 only wrapped the return in `Some` (#2694)
`src/jq/eval.rs`	`tolerate`	36827	both	unreachable, as this arm's own comment above says: indexing or slicing a value yields zero or one result, so `is_primitive` never produces more than one -- kept as a named error rather than a panic. Pre-existing; #2694 only wrapped the enclosing return in `Some` (#2694)
`src/jq/eval.rs`	`tolerate`	39686	both	unreachable: every Demand::Stop the sink answers is preceded by `outcome = Some(..)`, handled just above (#2872)
`src/jq/eval.rs`	`tolerate`	40682	both	unreachable: every Demand::Stop the sink answers is preceded by `outcome = Some(..)`, returned just above (#2872)
`src/jq/eval.rs`	`tolerate`	41054	both	unreachable: every arm of the loop's last iteration returns -- a walk refusal, an exhausted walk, and a step outcome that never retries on the last alternative (#2979, #2872)
`src/jq/eval.rs`	`tolerate`	41592	both	unreachable: every path through the loop's last iteration returns -- a walk refusal, an exhausted walk, and a step outcome that never retries on the last alternative (#2979, #2872)
`src/jq/eval.rs`	`tolerate`	44318	both	unreachable in a passing suite by design -- a panic-message format argument for the #682 single-valued-tail pin, evaluated only if that assert's own condition is false (#2190)
`src/jq/eval.rs`	`tolerate`	44395	both	unreachable: the only caller reaches this after classify_static_component answered Field for this same value, which it does only for an object (#2190)
`src/jq/eval.rs`	`tolerate`	44439	both	unreachable: both callers establish the container first -- navigate_static_component_ref via classify_static_component's Index arm, and walk_path's Expr::Iterate arm by matching on the container itself (#2190)
`src/jq/eval.rs`	`tolerate`	47200	both	unreachable: every Demand::Stop the sink answers is preceded by `outcome = Some(..)`, handled just above (#2872)
`src/jq/eval.rs`	`tolerate`	48856	both	unreachable: stop_with_escape's only write is `slot.set(Some(control))` with the control it was handed, which is always the `Control::Error` built one line above (#2180)
`src/jq/eval.rs`	`tolerate`	49356	both	unreachable: on_update records a `step_outcome` before every Demand::Stop it answers, and the fallback match runs only when it recorded none (#2872)
`src/jq/eval.rs`	`tolerate`	49379	both	unreachable: every Demand::Stop the sink answers is preceded by `outcome = Some(..)`, handled just above (#2872)
`src/jq/eval.rs`	`tolerate`	49908	both	unreachable by construction: the per-fork match only ever hands stop_with_downstream a non-Exhausted flow, so `terminal` can never hold Exhausted. `foreach_forks`' identical arm is 0-hit for the same reason and is only unflagged because it predates this diff (#2899)
`src/jq/eval.rs`	`tolerate`	51826	both	llvm-cov line-attribution artifact, not unreachable: the new gate test above (`Builtin::Length` as `first`) demonstrably takes `key_or_parent_root_construct(first) == false` and falls through to the reindex-bridge route below, passing -- but this closing brace, like the one at #56920 for the same reason, is never itself credited a hit
`src/jq/eval.rs`	`tolerate`	51840	both	unreachable in the current test suite: eval_path_context_pipe_owned itself has zero total call-site coverage today (not just this arm), confirmed by a full-suite eprintln probe across every test binary -- reaching its error arm needs first solving how to reach the function at all, out of scope for #3261's reindex-bridge fix
`src/jq/eval.rs`	`tolerate`	52880	both	pre-existing zero-hit line; #2999 changed only how its array payload is constructed
`src/jq/eval.rs`	`tolerate`	54966	both	pre-existing zero-hit line; #2999 changed only which null constant it names
`src/jq/eval.rs`	`tolerate`	57451	both	`?` suppresses mktime's error outside builtin dispatch, so the optional flag is false even for an invalid date (#3083)
`src/jq/eval.rs`	`tolerate`	57454	both	unreachable for mktime's C-int-clamped fields: checked civil-date arithmetic stays within i64; the guard protects other callers of the shared helpers (#3083)
`src/jq/eval.rs`	`tolerate`	57675	both	defensive, unreachable via ordinary JSON parsing (#3068)
`src/jq/eval.rs`	`tolerate`	57678	both	defensive, unreachable via ordinary JSON parsing (#3068)
`src/jq/eval.rs`	`tolerate`	57719	both	`optional` is never true through either caller of this function -- confirmed live (`eprintln!` probe): `[1,2,3]
`src/jq/eval.rs`	`tolerate`	57728	both	every array literal written in filter source, and every array-element JSON parses, decodes to NumberLiteral (#1035), not a bare Int -- Int is for internally-synthesized values spliced post-parse; probed a computed element ([1970,(0+0),..]) and it still decoded as NumberLiteral here, so this arm has no known real producer (#3068)
`src/jq/eval.rs`	`tolerate`	57749	both	`optional` is never true through either caller of this function, same as the array-length check above (#3068)
`src/jq/eval.rs`	`tolerate`	57812	both	unreachable for strftime's C-int-clamped fields and bounded zone offset; shared checked date helpers retain overflow guards for other callers (#3083)
`src/jq/eval.rs`	`tolerate`	57968	both	llvm-cov line-attribution artifact, not unreachable: the call's own argument lines (immediately above) show 3 hits under the #3055 test's three E/O pass-through rows, but this closing-token line is never itself credited -- verified via the raw lcov DA: records
`src/jq/eval.rs`	`tolerate`	59583	both	unreachable from `combinations`, whose own empty-input return runs first; pre-existing zero-hit line; #2999 changed only how its array payload is constructed
`src/jq/eval.rs`	`tolerate`	60683	both	confirmed live (eprintln! probe): optional is always false in builtin_abs regardless of whether the filter writes abs?, since that suppression happens entirely outside builtin dispatch here -- the same 'optional is never true here' shape eval.rs already documents elsewhere (#2180) (#3041)
`src/jq/eval.rs`	`tolerate`	62739	both	unreachable: the sink is a plain collector that always answers Demand::Continue (#2872)
`src/jq/eval.rs`	`tolerate`	62849	both	unreachable: `optional: false` makes index_one_owned answer Ok(Some)/Err only (#2872)
`src/jq/eval.rs`	`tolerate`	63000	both	unreachable: `pattern_has_computed_key` is false for `Pattern::Var`, so the loop walker above always takes it (#2872)
`src/jq/eval.rs`	`tolerate`	63047	both	unreachable: every caller gates on `pattern_has_computed_key` being false (#2872)
`src/jq/eval.rs`	`tolerate`	64286	both	unreachable: bind_def_call only calls this for a non-empty params, install_def_calls only builds a DefCall whose args.len() equals params.len(), and the last parameter is never shadowed, so at least one entry is always built (#2560)
`src/jq/eval.rs`	`tolerate`	65698	both	unreachable in a passing suite by design -- this panic only fires if eval_owned_reindex_free declined a shape this loop's own `handled` table asserts is always answered (#3138)
`src/jq/eval.rs`	`tolerate`	65707	both	unreachable in a passing suite by design -- this panic only fires if try_eval_owned_step declined or errored on a shape this loop's own `handled` table asserts is always answered Ok (#3138)
`src/jq/eval.rs`	`tolerate`	65746	both	unreachable in a passing suite by design -- this panic only fires if try_eval_owned_step handled a shape this loop's own `declined` table asserts is always declined (#3138)
`src/jq/eval.rs`	`tolerate`	65767	both	unreachable in a passing suite by design -- this panic only fires if try_eval_owned_step declined or errored on a yq shape this loop's own table asserts is always answered Ok (#3138)
`src/jq/eval.rs`	`tolerate`	65866	both	unreachable in a passing suite by design -- this panic only fires if the tracked \
`src/jq/eval.rs`	`tolerate`	65868	both	unreachable in a passing suite by design -- this panic only fires if `state` stopped being an Object, which every owned_assign_step write in the loop below preserves (#3138)
`src/jq/eval.rs`	`tolerate`	65876	both	unreachable in a passing suite by design -- this panic only fires if try_eval_owned_step declined or errored on the single-step shape this loop drives every iteration (#3138)
`src/jq/eval.rs`	`tolerate`	65881	both	unreachable in a passing suite by design -- this arm only fires if `state` stopped being an Object, which every write in the loop above preserves (#3138)
`src/jq/eval.rs`	`tolerate`	66068	both	substitute_var_impl's FuncDef arm always returns FuncDef (#2283)
`src/jq/eval.rs`	`tolerate`	66090	both	substitute_var_impl's FuncDef arm always returns FuncDef (#2283)
`src/jq/eval.rs`	`tolerate`	66108	both	substitute_var_impl's FuncDef arm always returns FuncDef (#2283)
`src/jq/eval.rs`	`tolerate`	66178	both	substitute_var_impl's FuncDef arm always returns FuncDef (#2283)
`src/jq/eval.rs`	`tolerate`	66196	both	substitute_func_param_impl's FuncDef arm always returns FuncDef (#2555)
`src/jq/eval.rs`	`tolerate`	73707	both	unreachable in a passing suite by design -- this is the failure message for the assertion this test exists to make (#3261)
`src/jq/eval.rs`	`tolerate`	73858	both	unreachable in a passing suite by design -- this is the failure message for the assertion the test exists to make (#2190)
`src/jq/eval.rs`	`tolerate`	74828	both	unreachable in a passing suite: every source this helper parses starts with `def f(n): ...;` (#3296)
`src/jq/eval.rs`	`tolerate`	74885	both	unreachable in a passing suite: `f(1)` under `def f(n)` always installs as a DefCall, which the assert above has just settled (#3296)
`src/jq/eval.rs`	`tolerate`	86122	both	unreachable in a passing suite by design -- this test's own diagnostic (#3071)
`src/jq/eval.rs`	`tolerate`	86174	both	unreachable in a passing suite by design -- this test's own diagnostic (#3102)
`src/jq/eval.rs`	`tolerate`	86964-86975	both	the closure is asserted never called below (on_update_calls stays 0) -- Err(_) with optional=true short-circuits fold_step_each before this sink runs (#3122)
`src/jq/eval.rs`	`tolerate`	91802	both	unreachable in a passing suite by design -- this test's own diagnostic (#3071)
`src/jq/eval.rs`	`tolerate`	96837	both	unreachable in a passing suite by design -- this is the failure message for the assertion this test exists to make
`src/jq/eval.rs`	`tolerate`	96848	both	unreachable in a passing suite by design -- this is the failure message for the assertion this test exists to make
`src/jq/eval.rs`	`tolerate`	96865	both	unreachable in a passing suite by design -- this is the failure message for the assertion this test exists to make
`src/jq/eval.rs`	`tolerate`	96885	both	unreachable in a passing suite by design -- this is the failure message for the assertion this test exists to make
`src/jq/eval.rs`	`tolerate`	96893	both	unreachable in a passing suite by design -- this is the failure message for the assertion this test exists to make
`src/jq/eval.rs`	`tolerate`	98044	both	unreachable in a passing suite by design -- this test's own diagnostic (#3071)
`src/jq/eval.rs`	`tolerate`	99941	both	unreachable in a passing suite by design -- check_value_tree_depth's only Err variant is EvalError, and From for EvalEscape always produces EvalEscape::Error (#3275)
`src/jq/eval.rs`	`tolerate`	105605	both	unreachable in a passing suite by design -- every filter this helper is called with parses to an AsPattern (#2649)
`src/jq/eval.rs`	`tolerate`	105649	both	unreachable in a passing suite by design -- a literal-key pattern's walk either completes or refuses with an error (#2872)
`src/jq/eval.rs`	`tolerate`	105658	both	unreachable in a passing suite by design -- every call site passes the origin of a binding this same test already proved carries a marker (#2649)
`src/jq/eval.rs`	`tolerate`	105986	both	unreachable in a passing suite by design -- the assertion above is the test (#2872)
`src/jq/eval.rs`	`tolerate`	106639	both	unreachable in a passing suite by design -- every row here is a shape jq accepts, confirmed live (#2649)
`src/jq/eval.rs`	`tolerate`	106707	both	unreachable in a passing suite by design -- every row here is a shape jq refuses, confirmed live (#2649)
`src/jq/eval.rs`	`tolerate`	107092	both	unreachable in a passing suite by design -- this is the panic message for the #2072 pin itself, only formatted if the let-else pattern fails to match (#2072)
`src/jq/eval.rs`	`tolerate`	107108	both	unreachable in a passing suite by design -- this is the panic message for the #2072 pin itself, only formatted if the let-else pattern fails to match (#2072)
`src/jq/eval.rs`	`tolerate`	107135	both	unreachable in a passing suite by design -- this is the panic message for the #2072 pin itself, only formatted if the match doesn't hit the expected arm above (#2072)
`src/jq/eval.rs`	`tolerate`	107151	both	unreachable in a passing suite by design -- this is the panic message for the #2072 pin itself, only formatted if the match doesn't hit the expected arm above (#2072)
`src/jq/eval.rs`	`tolerate`	107236	both	unreachable in a passing suite by design -- every expression this closure receives is built by `marker` above (#3037)
`src/jq/eval.rs`	`tolerate`	107314	both	unreachable in a passing suite by design -- `rewrite_markers` rebuilds the same node kind it was given (#3037)
`src/jq/eval.rs`	`tolerate`	107643	both	unreachable in a passing suite by design -- every expression this closure receives is built by `marker` above (#3135)
`src/jq/eval.rs`	`tolerate`	107749	both	unreachable in a passing suite by design -- every expression this closure receives is built by `marker` above (#3122)
`src/jq/eval.rs`	`tolerate`	107767	both	unreachable in a passing suite by design -- `rewrite_markers` rebuilds the same node kind it was given (#3122)
`src/jq/eval.rs`	`tolerate`	107835	both	unreachable in a passing suite by design -- fires only if demote_for_reentry's own let-else assertion condition is false (#3122)
`src/jq/eval.rs`	`tolerate`	107839	both	unreachable in a passing suite by design -- fires only if demote_for_reentry's own let-else assertion condition is false (#3122)
`src/jq/eval.rs`	`tolerate`	107879	both	unreachable in a passing suite by design -- fires only if reroot's own let-else assertion condition is false (#3122)
`src/jq/eval.rs`	`tolerate`	107883	both	unreachable in a passing suite by design -- fires only if reroot's own let-else assertion condition is false (#3122)
`src/jq/eval.rs`	`tolerate`	109503	both	unreachable in a passing suite by design -- this is the panic message for the assertion above, only formatted if the match doesn't hit the Error arm (#3119)
`src/jq/eval.rs`	`tolerate`	109558	both	unreachable in a passing suite by design -- this is the panic message for the assertion above, only formatted if the match doesn't hit the Error arm (#3127)
`src/jq/eval.rs`	`tolerate`	112069	both	unreachable in a passing suite by design -- this is the failure message for the assertion this test exists to make (#2937)
`src/jq/eval.rs`	`tolerate`	112155	both	unreachable in a passing suite by design -- every READERS filter raises a decode failure on every malformed json in this sweep, so this fallback never fires (#3222)
`src/jq/eval.rs`	`tolerate`	112161	both	unreachable in a passing suite by design -- see the `concrete` match above, same sweep (#3222)
`src/jq/eval.rs`	`tolerate`	112165-112167	both	unreachable in a passing suite by design -- this is the failure-recording line for the assertion below, only reached if a READERS filter fails to raise (#3222)
`src/jq/eval.rs`	`tolerate`	112223-112225	both	unreachable in a passing suite by design -- this is the failure-recording line for the assertion below, only reached if a NON_READERS filter disagrees between the malformed and well-formed document (#3222)
`src/jq/eval.rs`	`tolerate`	112233	both	unreachable in a passing suite by design -- none of NON_READERS ever raises through eval_with_cursor_using, on the malformed document or the well-formed one; kept so a filter that starts erroring is still comparable rather than panicking (#3222)
`src/jq/eval.rs`	`tolerate`	112239-112241	both	unreachable in a passing suite by design -- see the `eval` failure-recording line above, same assertion (#3222)
`src/jq/eval.rs`	`tolerate`	112414	both	every pinned filter below yields an owned value; kept so a cursor answer still renders rather than panics (#2999)
`src/jq/eval.rs`	`tolerate`	112415	both	unreachable in a passing suite by design -- the failure message for the assertions this helper serves (#2999)
`src/jq/eval_generic.rs`	`tolerate`	877	both	unreachable: validate_cursor, CheckOnly's only instantiation, passes no nested nodes, so the walk never asks (#3179)
`src/jq/eval_generic.rs`	`tolerate`	3902	both	unreachable: the sole remaining caller (`retain_truthy_generic`'s `Many` arm) runs `to_owned` on an item before keeping it, so re-converting a kept item here cannot fail; the `ManyCursor` caller that made this reachable went with the truthiness walk (#2692, re-establishing #2661's premise)
`src/jq/eval_generic.rs`	`tolerate`	5577	both	unreachable: hi is find_close of a container's own open paren, which a built index always matches (#3179)
`src/jq/eval_generic.rs`	`tolerate`	7914	both	unreachable in a passing suite by design -- this is the panic message for the #2368 pin itself, only formatted if the assert's own condition is false (#2368)
`src/jq/eval_generic.rs`	`tolerate`	7975	both	unreachable: this arm's own match guard already evaluated `value.as_array().is_some_and(..)` as true to be here at all, and `as_array()` is a pure read of `value` -- the second call inside the body can never answer `None` where the guard's own call just answered `Some`
`src/jq/eval_generic.rs`	`tolerate`	9869	both	the CLI evaluates every program that uses input/inputs on the eager route (jq_runner's can_use_lazy_path excludes them), so this guard never fires today -- #2968's identical guards on the arms above are equally unfired; kept for the day the lazy path admits such a program (#1309)
`src/jq/eval_generic.rs`	`tolerate`	9886	both	the CLI evaluates every program that uses input/inputs on the eager route (jq_runner's can_use_lazy_path excludes them), so this guard never fires today -- #2968's identical guards on the arms above are equally unfired; kept for the day the lazy path admits such a program (#1309)
`src/jq/eval_generic.rs`	`tolerate`	11102	both	unreachable: every Demand::Stop the sink answers is preceded by `outcome = Some(..)`, handled just above (#2872)
`src/jq/eval_generic.rs`	`tolerate`	12630	both	unreachable: every producer that reaches this empty-`exprs` tail (`each_lazy_keys_iterate_sink`'s `sorted`/`!sorted` arms, `each_lazy_index_range_iterate_sink`, `each_lazy_seq_iterate_sink`) yields `OneCursorValue`/`OneCursor`/`Owned`, never a cursorless `GenericItem::One` -- so `cursor` is always `Some` here; kept for exhaustiveness/symmetry with the `Some` arm (#2103)
`src/jq/eval_generic.rs`	`tolerate`	14332	both	unreachable: each_negate_generic pushes only GenericItem::Owned (arith_negate's result), which converts infallibly (#3410)
`src/jq/eval_generic.rs`	`tolerate`	15968	both	unreachable: escape_generic!/ensure_owned! set `terminal` before Demand::Stop; already returned above (#2138)
`src/jq/eval_generic.rs`	`tolerate`	16322	both	unreachable: escape! sets `terminal` before Demand::Stop; already returned above (#2546)
`src/jq/eval_generic.rs`	`tolerate`	16469-16473	both	unreachable: this function's sole caller, slice_one_generic_computed, already runs the identical unreadable_value_error(&target) check on the same target and returns before ever calling here; kept as this function's own contract in case a future literal-bounds caller reaches it directly (#3222)
`src/jq/eval_generic.rs`	`tolerate`	16926	both	unreachable by construction: key_elements_generic builds every key of a run from the same Option<&Expr> (#2999)
`src/jq/eval_generic.rs`	`tolerate`	16936	both	unreachable by construction: key_elements_generic builds every key of a run from the same Option<&Expr> (#2999)
`src/jq/eval_generic.rs`	`tolerate`	17611	both	pre-existing zero-hit line; #2999 changed only how its array payload is constructed
`src/jq/eval_generic.rs`	`tolerate`	17644	both	unreachable: both step dispatchers route owned nodes to path_step_owned before calling this cursor helper (#3022)
`src/jq/eval_generic.rs`	`tolerate`	17692	both	unreachable: both step dispatchers route owned nodes to path_step_owned before calling this cursor helper (#3022)
`src/jq/eval_generic.rs`	`tolerate`	17760	both	unreachable: both step dispatchers route owned nodes to path_step_owned before calling this cursor helper (#3022)
`src/jq/eval_generic.rs`	`tolerate`	17776	both	unreachable: effective_fields_checked already rejects key_is_malformed, the same decoded_key_str Ok(None) that makes key_display_string return None (#3022)
`src/jq/eval_generic.rs`	`tolerate`	17899	both	unreachable: both callers match Field, Index or Iterate before dispatching here (#3022)
`src/jq/eval_generic.rs`	`tolerate`	19346	both	unreachable: `len_checked` and `SliceBounds::resolve` already bound every index in `range` to `[0, len)`, so `get_cursor` cannot miss (#2168)
`src/jq/eval_generic.rs`	`tolerate`	22254	both	unreachable by construction: path_context_resolvable admits an any(cond) read only through admits.prefetch, so the rewriter always has one -- the AnyCond arm above carries the identical assertion (#3079)
`src/jq/eval_generic.rs`	`tolerate`	22258	both	unreachable by construction, see above
`src/jq/eval_generic.rs`	`tolerate`	22259	both	unreachable by construction, see above
`src/jq/eval_generic.rs`	`tolerate`	22582	both	unreachable: the callback records downstream_flow before every Demand::Stop, and that flow is returned above (#3022)
`src/jq/eval_generic.rs`	`tolerate`	23067	both	pre-existing zero-hit line; #2999 changed only how its array payload is constructed
`src/jq/eval_generic.rs`	`tolerate`	23088	both	pre-existing zero-hit line; #2999 changed only how its array payload is constructed
`src/jq/eval_generic.rs`	`tolerate`	23447	both	unreachable: `malformed_object_member` above already proved every key stringifies (the `None` half), and `to_owned_cursor` on an untagged key `decoded_key_str` decoded cannot fail (the `Err` half) (#2785)
`src/jq/eval_generic.rs`	`tolerate`	23528	both	unreachable: `map(f)` over an array emits exactly one array; kept so a future `map` shape produces no output rather than a panic (#2785)
`src/jq/eval_generic.rs`	`tolerate`	23833	both	unreachable by design -- eval_single's #2368 debug_assert forbids optional=true on Builtin::Reverse, so length never answers None here (#2730)
`src/jq/eval_generic.rs`	`tolerate`	24460	both	the CLI evaluates every program that uses input/inputs on the eager route (jq_runner's can_use_lazy_path excludes them), so this guard never fires today -- #2968's identical guards on the arms above are equally unfired; kept for the day the lazy path admits such a program (#1309)
`src/jq/eval_generic.rs`	`tolerate`	24466	both	see above: the input-queue deferral never fires from the CLI
`src/jq/eval_generic.rs`	`tolerate`	25911	both	unreachable by construction: every shape either guard admits now has an arm above (#2771), and expr_dispatch_catchall_guards_default_conservatively_2549 pins both guards' `_ => false` defaults directly
`src/jq/eval_generic.rs`	`tolerate`	26459	both	unreachable in a passing suite by design -- `owned_identity_rule` maps a bare `Expr::Var` to `Bound` too (for the static gate, which sees a body before its `as` substitution runs), but every runtime dispatch that reaches this rule (`owned_identity_after_stage`/`owned_identity_placed_by`, from `owned_identity_leaving_cursor`'s `Bound` arm) only ever sees a stage after `eval_owned_identity_as`'s unconditional `substitute_bound_var_from` call, which always turns `$x` into `Expr::TrackedVar` before recursing -- confirmed by running the full suite with this arm replaced by a hard `panic!()`, which never fired (#2072)
`src/jq/eval_generic.rs`	`tolerate`	26477	both	unreachable: this `Slice` rule's own two execution paths both exclude `Expr::Slice` before ever reaching `owned_identity_placed_by` -- `eval_owned_identity_stages`'s catch-all only runs a stage `owned_identity_nav_supported` refused, and `owned_identity_leaving_cursor` (`identity_from_first`, eval_generic.rs:10724) only runs a stage `path_context_is_navigational` refused -- and both predicates admit `Expr::Slice` (`owned_identity_nav_supported`/`path_context_is_navigational_at` each list `Expr::Slice { .. } => true`), so a bare slice is always resolved by `owned_identity_step`'s own arm first. Kept in `owned_identity_rule`'s match for exhaustiveness/symmetry with the rule table's other entries, the same reason #2072's `Bound` arm above is kept unreachable-by-construction (#2966's review of #2834)
`src/jq/eval_generic.rs`	`tolerate`	27971	both	optional is never true through this pipe: `?` is eval_owned_identity_try, which catches the escape instead, and after #693 only the IndexExpr/SliceExpr special case ever sets it -- kept as any_all_f's scalar_fallback mirror
`src/jq/eval_generic.rs`	`tolerate`	27972	both	optional is never true here, see above
`src/jq/eval_generic.rs`	`tolerate`	28386	both	unreachable in a passing suite by design -- the failure message for the assertion the tests below make (#2999)
`src/jq/eval_generic.rs`	`tolerate`	28598	both	unreachable in a passing suite by design -- the fixture's map(.+1) is always a LazySeq; this arm is the test's own diagnostic (#2666)
`src/jq/eval_generic.rs`	`tolerate`	28626	both	unreachable in a passing suite by design -- the fixture's only escape is Control::Error; this arm is the test's own diagnostic (#2666)
`src/jq/eval_generic.rs`	`tolerate`	28928	both	unreachable in a passing suite by design -- this is the failure message for the assertion this test exists to make (#3261)
`src/jq/eval_generic.rs`	`tolerate`	33892	both	failure message for the assertion this #3222 test exists to make
`src/jq/eval_generic.rs`	`tolerate`	39529	both	unreachable in a passing suite: this panic reports a failed test invariant (#3022)
`src/jq/eval_generic.rs`	`tolerate`	39533	both	unreachable in a passing suite: this panic reports a failed test invariant (#3022)
`src/jq/eval_generic.rs`	`tolerate`	39536	both	unreachable in a passing suite: this panic reports a failed test invariant (#3022)
`src/jq/eval_generic.rs`	`tolerate`	39592	both	unreachable in a passing suite: this panic reports a failed test invariant (#3022)
`src/jq/eval_generic.rs`	`tolerate`	39672	both	unreachable in a passing suite: this panic reports a failed test invariant (#3022)
`src/jq/eval_generic.rs`	`tolerate`	39687	both	unreachable in a passing suite: this panic reports a failed test invariant (#3022)
`src/jq/eval_generic.rs`	`tolerate`	39710	both	unreachable in a passing suite: this panic reports a failed test invariant (#3022)
`src/jq/eval_generic.rs`	`tolerate`	39731	both	unreachable in a passing suite: this panic reports a failed test invariant (#3022)
`src/jq/eval_generic.rs`	`tolerate`	40143	both	unreachable in a passing suite: this panic reports a failed test invariant (#3022)
`src/jq/eval_generic.rs`	`tolerate`	40165	both	unreachable in a passing suite: this panic reports a failed test invariant (#3022)
`src/jq/eval_generic.rs`	`tolerate`	40172	both	unreachable in a passing suite: this panic reports a failed test invariant (#3022)
`src/jq/eval_generic.rs`	`tolerate`	40250	both	unreachable in a passing suite: this panic reports a failed test invariant (#3022)
`src/jq/eval_generic.rs`	`tolerate`	40301	both	unreachable in a passing suite: this panic reports a failed test invariant (#3022)
`src/jq/eval_generic.rs`	`tolerate`	40362	both	unreachable in a passing suite: this panic reports a failed test invariant (#3022)
`src/jq/eval_generic.rs`	`tolerate`	40398	both	unreachable in a passing suite: this panic reports a failed test invariant (#3022)
`src/jq/eval_generic.rs`	`tolerate`	40407	both	unreachable in a passing suite: yq rolls back every position before this sink, as the zero-count assertion verifies (#3022)
`src/jq/eval_generic.rs`	`tolerate`	40408	both	unreachable in a passing suite: yq rolls back every position before this sink, as the zero-count assertion verifies (#3022)
`src/jq/eval_generic.rs`	`tolerate`	40409	both	unreachable in a passing suite: yq rolls back every position before this sink, as the zero-count assertion verifies (#3022)
`src/jq/lazy.rs`	`tolerate`	1474	both	failure message for the shape the test asserts
`src/jq/parser.rs`	`tolerate`	231	both	unreachable: parse_join_expr only calls join_expr with two to four arguments (#3046)
`src/jq/parser.rs`	`tolerate`	253	both	unreachable: join_expr builds only this shape, and only join_expr names JOIN_IDX_VAR, which no program can spell (#3046)
`src/jq/parser.rs`	`tolerate`	255	both	unreachable: join_expr builds only this shape, and only join_expr names JOIN_IDX_VAR, which no program can spell (#3046)
`src/jq/parser.rs`	`tolerate`	257	both	unreachable: join_expr builds only this shape, and only join_expr names JOIN_IDX_VAR, which no program can spell (#3046)
`src/jq/parser.rs`	`tolerate`	264	both	unreachable: join_expr builds only this shape, and only join_expr names JOIN_IDX_VAR, which no program can spell (#3046)
`src/jq/parser.rs`	`tolerate`	268	both	unreachable: join_expr builds only this shape, and only join_expr names JOIN_IDX_VAR, which no program can spell (#3046)
`src/jq/parser.rs`	`tolerate`	284	both	unreachable: join_expr builds only this shape, and only join_expr names JOIN_IDX_VAR, which no program can spell (#3046)
`src/jq/parser.rs`	`tolerate`	9765	both	unreachable in a passing suite by design -- this is the panic message for the #3044 pin itself, only formatted if the let-else pattern fails to match (#3044)
`src/jq/resolve.rs`	`tolerate`	2230	both	unreachable by construction: this match is only entered when is_marker (marker.is_some()) is true, and RunMarker has only Begin/End variants -- the None arm exists solely for exhaustiveness against Option's type
`src/jq/resolve.rs`	`tolerate`	2462	both	unreachable in practice today: this arm needs builtin_fallback==None (the name was never a shadow candidate) yet is_jq_builtin==true (a real jq builtin at this arity) -- every implemented builtin's own dedicated parse already lowers that shape to Expr::Builtin before resolve.rs ever runs, and #3042/#3046 closed the once-real 'unimplemented builtin' gap this existed for (see JQ_BUILTIN_ROSTER's own doc comment)
`src/jq/resolve.rs`	`tolerate`	2464	both	unreachable with the current roster: every `JQ_BUILTIN_ROSTER` entry of arity >= 1 already has a dedicated parser form (a `matches_keyword` special case or a `Libm1`/`Libm2`/`Libm3::ALL` entry -- confirmed by cross-referencing the full roster against both), so it is parsed straight to `Expr::Builtin` and never reaches here as a bare `FuncCall`. This arm exists for a roster name with no dedicated parse yet and a nonzero arity -- there is none today, so the loop body is reached with an empty `args` on every pinned-suite run (355 hits on the arm's own condition, 0 in the loop) and would only start executing if such a name were added (#2964)
`src/jq/share_stats.rs`	`tolerate`	97	both	process-global env var; exercised by the CLI audit run, not by an in-process test (#2999)
`src/jq/value.rs`	`tolerate`	365	both	unreachable by construction: the slow path is entered only after `significant_digit_count` found 18+ digits over the same mantissa bytes this loop walks (#2936)
`src/jq/value.rs`	`tolerate`	389	both	unreachable by construction: 18+ significant digits were counted, so at least one nonzero digit was kept (#2936)
`src/jq/value.rs`	`tolerate`	2800	both	unreachable: `format_float_with_fraction` of a finite double is always RFC 8259 number text, which `parse_i64_or_f64` reads (#2936)
`src/jq/value.rs`	`tolerate`	4861	both	unreachable in a passing suite by design -- every caller built the value as an array (#2999)
`src/jq/value.rs`	`tolerate`	5104	both	unreachable in a passing suite by design -- the value was built as this container a few lines above (#2999)
`src/jq/value.rs`	`tolerate`	5923	both	unreachable in a passing suite by design -- the failure message for a malformed oracle table (#2936)
`src/jq/value.rs`	`tolerate`	6271	both	failure message for the assertion the calling test makes
`src/jq/value.rs`	`tolerate`	6495	both	failure message for the assertion this #3034 test exists to make
`src/jq/value.rs`	`tolerate`	6501	both	failure message for the assertion this #3034 test exists to make
`src/jq/value.rs`	`tolerate`	6613	both	unreachable in a passing suite by design -- this is a panic-message format argument for the #3222 sweep's own assertion, only evaluated if the assert's own condition is false (#3222)
`src/jq/value.rs`	`tolerate`	7729	both	unreachable in a passing suite by design -- this is the failure message for the assertion this test exists to make (#3281)
`src/jq/value.rs`	`tolerate`	7747	both	unreachable in a passing suite by design -- this is the failure message for the assertion this test exists to make (#3281)
`src/json/light.rs`	`tolerate`	2663-2669	both	unreachable in practice: UNMEASURED_SPAN only arises when `end - text_pos` in `number_at` overflows u32 -- a single number span >= 4 GiB -- which no realistic (or practically constructible) test document approaches (#3222)
`src/json/light.rs`	`tolerate`	3442	both	reachable only through a bare 64-bit hash collision between keys the pairwise scan already proved distinct
`src/json/light.rs`	`tolerate`	9087	both	unreachable in a passing suite by design -- the failure message for the assertion this #2877 test exists to make
`src/json/light.rs`	`tolerate`	9169	both	unreachable in a passing suite by design -- the failure message for the assertion this #2877 test exists to make
`src/json/light.rs`	`tolerate`	9258	both	unreachable in a passing suite by design -- the failure message for the assertion this #2877 test exists to make
`src/json/light.rs`	`tolerate`	9291	both	failure message for the assertion this #3034 test exists to make
`src/json/light.rs`	`tolerate`	9320	both	failure message for the assertion this #3034 test exists to make
`src/json/light.rs`	`tolerate`	9408	both	unreachable in a passing suite by design -- this is a panic-message format argument for the #3222 sweep's own assertion, only evaluated if the assert's own condition is false (#3222)
`src/json/light.rs`	`tolerate`	9413	both	unreachable in a passing suite by design -- see the assert_eq! format argument above, same sweep (#3222)
`src/json/light.rs`	`tolerate`	9439	both	unreachable in a passing suite by design -- this is a panic-message format argument for the #2072 pin itself, only evaluated if the assert's own condition is false (#2072)
`src/json/light.rs`	`tolerate`	9450	both	unreachable in a passing suite by design -- this is a panic-message format argument for the #2072 pin itself, only evaluated if the assert's own condition is false (#2072)
`src/json/light.rs`	`tolerate`	9531	both	unreachable in a passing suite by design -- this is a panic-message format argument for the #2072 pin itself, only evaluated if the assert's own condition is false (#2072)
`src/yaml/index.rs`	`tolerate`	1268	both	unreachable: YamlIndex::build always wraps the parsed document(s) in a virtual root Sequence, at TY index 0 (#798)
`src/yaml/index.rs`	`tolerate`	1272	both	unreachable: every fixture field_key_head_foot is called with in this test module is a top-level mapping (#798)
`src/yaml/index.rs`	`tolerate`	1283	both	unreachable: a mapping key is always emitted as YamlValue::String -- it is never type-inferred like a value (#222), so this if-let's pattern can never fail to match (#798)
`src/yaml/index.rs`	`tolerate`	1285	both	unreachable: every call to field_key_head_foot in this test module passes a key that the fixture's mapping actually has (#798)
`src/yaml/index.rs`	`tolerate`	1295	both	unreachable: YamlIndex::build always wraps the parsed document(s) in a virtual root Sequence, at TY index 0 (#798)
`src/yaml/index.rs`	`tolerate`	1299	both	unreachable: every fixture seq_item_head_foot is called with in this test module is a top-level sequence (#798)
`src/yaml/index.rs`	`tolerate`	1322	both	unreachable: YamlIndex::build always wraps the parsed document(s) in a virtual root Sequence, at TY index 0 (#798)
`src/yaml/index.rs`	`tolerate`	1341	both	unreachable: YamlIndex::build always wraps the parsed document(s) in a virtual root Sequence, at TY index 0 (#798)
`src/yaml/index.rs`	`tolerate`	1364	both	unreachable: YamlIndex::build always wraps the parsed document(s) in a virtual root Sequence, at TY index 0 (#798)
`src/yaml/index.rs`	`tolerate`	1373	both	unreachable: every fixture field_key_head_foot_in_doc is called with in this test module is a top-level mapping (#798)
`src/yaml/index.rs`	`tolerate`	1384	both	unreachable: a mapping key is always emitted as YamlValue::String -- it is never type-inferred like a value (#222), so this if-let's pattern can never fail to match (#798)
`src/yaml/index.rs`	`tolerate`	1386	both	unreachable: every call to field_key_head_foot_in_doc in this test module passes a key that the fixture's document actually has (#798)
`src/yaml/index.rs`	`tolerate`	1397	both	unreachable: YamlIndex::build always wraps the parsed document(s) in a virtual root Sequence, at TY index 0 (#798)
`src/yaml/index.rs`	`tolerate`	1401	both	unreachable: every fixture nested_key_head_foot is called with in this test module is a top-level mapping (#798)
`src/yaml/index.rs`	`tolerate`	1405	both	unreachable: a mapping key is always emitted as YamlValue::String -- it is never type-inferred like a value (#222), so this let-else's pattern can never fail to match (#798)
`src/yaml/index.rs`	`tolerate`	1411	both	unreachable: every fixture nested_key_head_foot is called with has a nested mapping under `outer` (#798)
`src/yaml/index.rs`	`tolerate`	1422	both	unreachable: a mapping key is always emitted as YamlValue::String -- it is never type-inferred like a value (#222), so this if-let's pattern can never fail to match (#798)
`src/yaml/index.rs`	`tolerate`	1425	both	unreachable: every call to nested_key_head_foot in this test module passes an outer.inner pair that the fixture actually has (#798)
`src/yaml/light.rs`	`tolerate`	3365	both	unreachable: an alias target is never None for a built index (#1374)
`src/yaml/light.rs`	`tolerate`	15669	both	unreachable in a passing suite by design -- this is a panic-message format argument for the #2072 pin itself, only evaluated if the assert's own condition is false (#2072)
`src/yaml/light.rs`	`tolerate`	15680	both	unreachable in a passing suite by design -- this is a panic-message format argument for the #2072 pin itself, only evaluated if the assert's own condition is false (#2072)
`src/yaml/light.rs`	`tolerate`	15837	both	unreachable in a passing suite by design -- this is a panic-message format argument for the #2072 pin itself, only evaluated if the assert's own condition is false (#2072)
`src/yaml/parser.rs`	`tolerate`	1583	both	unreachable: every block-sequence open registers a frame at its own depth before any item of it can be parsed (#1079)
`src/yaml/parser.rs`	`tolerate`	1613	both	unreachable: this function's sole caller (record_standalone_comment) only invokes it from inside a match on `pending_head_lines.last()`, so pending_head_lines is already known non-empty here (#798)
`src/yaml/parser.rs`	`tolerate`	7999	both	unreachable: every byte here already passed the `[0-9.eE+-]` charset check above, a strict subset of ASCII, so `str::from_utf8` can never fail (#2778)

Patch coverage

Patch: 100% (65/65 new lines covered)

File	Patch	Uncovered new lines
`src/bin/succinctly/jq_runner.rs`	100% (1/1)	—
`src/bin/succinctly/output.rs`	100% (64/64)	—

_{📦 Full per-file coverage summary · run summary}

newhoggy added 2 commits September 29, 2026 05:12

newhoggy added this pull request to the merge queue Sep 28, 2026

Merged via the queue into main with commit 9985935 Sep 28, 2026
64 checks passed

Navigation Menu

fix(jq): -C null color and NaN's number-then-null wrap match jq 1.7.1 - #3433

fix(jq): -C null color and NaN's number-then-null wrap match jq 1.7.1#3433
newhoggy merged 2 commits into
mainfrom
issue-3413-color-null-nan

newhoggy commented Sep 28, 2026

Uh oh!

github-actions Bot commented Sep 28, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Sep 28, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

newhoggy commented Sep 28, 2026

Summary

Scope note

Test plan

Uh oh!

github-actions Bot commented Sep 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Coverage

Patch coverage

Uh oh!

github-actions Bot commented Sep 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Coverage

Patch coverage

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

github-actions Bot commented Sep 28, 2026 •

edited

Loading

github-actions Bot commented Sep 28, 2026 •

edited

Loading