@kirrosh/apitool 0.4.3

package/docs/ci.md

@@ -0,0 +1,274 @@
+# CI/CD Integration
+
+Run apitool API tests automatically in your CI/CD pipeline.
+
+## Quick Start
+
+```bash
+# Generate CI workflow for your project
+apitool ci init            # auto-detect platform
+apitool ci init --github   # GitHub Actions
+apitool ci init --gitlab   # GitLab CI
+```
+
+## GitHub Actions
+
+```yaml
+name: API Tests
+on:
+  push:
+    branches: [main]
+  pull_request:
+  schedule:
+    - cron: "0 */6 * * *"
+  workflow_dispatch:
+
+permissions:
+  contents: read
+  checks: write
+  pull-requests: write
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Install apitool
+        run: curl -fsSL https://raw.githubusercontent.com/kirrosh/apitool/master/install.sh | sh
+
+      - name: Run tests
+        run: |
+          mkdir -p test-results
+          apitool run apis/ --report junit --no-db > test-results/junit.xml
+        continue-on-error: true
+
+      - name: Publish test results
+        uses: EnricoMi/publish-unit-test-result-action@v2
+        if: always()
+        with:
+          files: test-results/junit.xml
+
+      - uses: actions/upload-artifact@v4
+        if: always()
+        with:
+          name: test-results
+          path: test-results/junit.xml
+```
+
+> **Note:** `continue-on-error: true` ensures junit.xml is always written and published, even when tests fail (exit code 1). The `publish-unit-test-result-action` will set the check status based on test results.
+
+## GitLab CI
+
+```yaml
+api-tests:
+  image: ubuntu:latest
+  before_script:
+    - apt-get update -qq && apt-get install -y -qq curl
+    - curl -fsSL https://raw.githubusercontent.com/kirrosh/apitool/master/install.sh | sh
+  script:
+    - mkdir -p test-results
+    - apitool run apis/ --report junit --no-db > test-results/junit.xml
+  allow_failure:
+    exit_codes: 1
+  artifacts:
+    when: always
+    reports:
+      junit: test-results/junit.xml
+```
+
+## Jenkins
+
+```groovy
+pipeline {
+    agent any
+
+    stages {
+        stage('Install') {
+            steps {
+                sh 'curl -fsSL https://raw.githubusercontent.com/kirrosh/apitool/master/install.sh | sh'
+            }
+        }
+        stage('Test') {
+            steps {
+                sh 'mkdir -p test-results'
+                sh 'apitool run apis/ --report junit --no-db > test-results/junit.xml || true'
+            }
+            post {
+                always {
+                    junit 'test-results/junit.xml'
+                }
+            }
+        }
+    }
+}
+```
+
+## Generic Shell Script
+
+Works with any CI system (CircleCI, Travis, Drone, etc.):
+
+```bash
+#!/bin/bash
+set -uo pipefail
+
+# Install apitool
+curl -fsSL https://raw.githubusercontent.com/kirrosh/apitool/master/install.sh | sh
+
+# Run tests with JUnit output
+mkdir -p test-results
+apitool run apis/ --report junit --no-db > test-results/junit.xml
+EXIT_CODE=$?
+
+# Exit code: 0 = all passed, 1 = failures, 2 = error
+exit $EXIT_CODE
+```
+
+## Environment Variables
+
+`--env <name>` loads `.env.<name>.yaml` from the **test path directory** (`dirname` of the path passed to `apitool run`).
+
+For example:
+- `apitool run apis/petstore/tests/ --env ci` → looks for `apis/petstore/tests/.env.ci.yaml`
+- `apitool run apis/ --env ci` → looks for `.env.ci.yaml` in current directory (parent of `apis/`)
+
+If your env files live next to test files in subdirectories, run each API separately:
+
+```bash
+apitool run apis/petstore/tests/ --env default --report junit --no-db
+```
+
+Or place a `.env.yaml` (no name) in the repo root for shared variables.
+
+### Secrets in CI
+
+Pass secrets as environment variables and reference them in `.env.ci.yaml`:
+
+```yaml
+# .env.ci.yaml (in repo root or test directory)
+base_url: https://api.staging.example.com
+api_key: ${{ API_KEY }}
+auth_token: ${{ AUTH_TOKEN }}
+```
+
+#### GitHub Actions
+
+```yaml
+- name: Run tests
+  env:
+    API_KEY: ${{ secrets.API_KEY }}
+    AUTH_TOKEN: ${{ secrets.AUTH_TOKEN }}
+  run: apitool run apis/ --env ci --report junit --no-db > test-results/junit.xml
+```
+
+#### GitLab CI
+
+```yaml
+api-tests:
+  variables:
+    API_KEY: $API_KEY  # Set in GitLab CI/CD settings
+  script:
+    - apitool run apis/ --env ci --report junit --no-db > test-results/junit.xml
+```
+
+### Auth token shortcut
+
+For simple bearer token auth, use `--auth-token` instead of an env file:
+
+```bash
+apitool run apis/ --auth-token "$AUTH_TOKEN" --report junit --no-db
+```
+
+## Triggers
+
+The generated workflow runs on push, PR, schedule, and manual dispatch by default. You can also trigger tests from external events.
+
+### Schedule (cron)
+
+Already included in the template. Adjust the cron expression:
+
+```yaml
+schedule:
+  - cron: "0 */6 * * *"   # every 6 hours
+  - cron: "0 9 * * 1-5"   # weekdays at 9am UTC
+  - cron: "*/30 * * * *"  # every 30 minutes
+```
+
+### Trigger from another repo (GitHub)
+
+Use `repository_dispatch` to trigger API tests when your backend repo deploys:
+
+**In the test repo workflow** (already included in template):
+```yaml
+on:
+  repository_dispatch:
+    types: [api-updated]
+```
+
+**In the backend repo** — add a step after deploy:
+```yaml
+# .github/workflows/deploy.yml (backend repo)
+- name: Trigger API tests
+  run: |
+    curl -X POST \
+      -H "Authorization: token ${{ secrets.TEST_REPO_PAT }}" \
+      -H "Accept: application/vnd.github.v3+json" \
+      https://api.github.com/repos/OWNER/apitool-tests/dispatches \
+      -d '{"event_type": "api-updated", "client_payload": {"env": "staging"}}'
+```
+
+Or with `gh` CLI:
+```bash
+gh api repos/OWNER/apitool-tests/dispatches \
+  -f event_type=api-updated \
+  -f 'client_payload[env]=staging'
+```
+
+> **Note:** Requires a Personal Access Token (PAT) with `repo` scope stored as a secret in the backend repo.
+
+### Trigger from another repo (GitLab)
+
+Use GitLab pipeline triggers:
+
+```bash
+curl -X POST \
+  --form "ref=main" \
+  --form "token=$TRIGGER_TOKEN" \
+  "https://gitlab.com/api/v4/projects/PROJECT_ID/trigger/pipeline"
+```
+
+Add the trigger token in GitLab: Settings → CI/CD → Pipeline triggers.
+
+### Webhook from external service
+
+Any service that can send HTTP POST requests can trigger tests:
+
+**GitHub:** Use `repository_dispatch` (see above)
+
+**GitLab:** Use pipeline trigger tokens
+
+**Generic (any CI):** Use the CI platform's API to trigger a build. Example with GitHub CLI:
+
+```bash
+gh workflow run api-tests.yml --repo OWNER/apitool-tests
+```
+
+## Exit Codes
+
+| Code | Meaning |
+|------|---------|
+| 0    | All tests passed |
+| 1    | One or more tests failed |
+| 2    | Configuration or runtime error |
+
+## Key Flags for CI
+
+| Flag | Description |
+|------|-------------|
+| `--report junit` | Output JUnit XML for CI integration |
+| `--no-db` | Skip writing to local SQLite database |
+| `--env <name>` | Load `.env.<name>.yaml` from test path directory |
+| `--bail` | Stop on first suite failure |
+| `--safe` | Run only GET tests (read-only mode) |
+| `--tag <tag>` | Filter suites by tag |
+| `--auth-token <token>` | Inject bearer token as `{{auth_token}}` |

package/docs/generation-issues.md

@@ -0,0 +1,67 @@
+# Проблемы при первичной генерации тестов
+
+## 1. `writeSuites` возвращал пустой массив при incremental generation
+
+**Проблема:** Функция `writeSuites` возвращала только новые файлы. При повторной генерации (incremental mode) существующие файлы пропускались и не попадали в результат — MCP-инструмент `generate_tests` возвращал `files: []`, хотя файлы на диске есть.
+
+**Исправление:** `writeSuites` теперь возвращает `{ written: string[], skipped: string[] }`. MCP и CLI используют оба списка для полного отчёта.
+
+**Файлы:** `src/core/generator/serializer.ts` (ранее skeleton.ts)
+
+---
+
+## 2. `getDb()` не восстанавливался после удаления файла БД
+
+**Проблема:** Синглтон `_db` кешировал соединение. Если файл `apitool.db` удалялся (при пересоздании проекта), последующие вызовы `getDb()` возвращали "disk I/O error" — соединение было протухшим.
+
+**Исправление:** `getDb()` теперь проверяет `existsSync(path)` перед возвратом кешированного соединения. Если файл удалён — соединение пересоздаётся.
+
+**Файлы:** `src/db/schema.ts`
+
+---
+
+## 3. MCP `generate_tests` не создавал коллекцию и окружение в БД
+
+**Проблема:** Блок создания коллекции/окружения падал в `catch` из-за проблемы #2 (протухшее DB-соединение). Ошибка тихо проглатывалась.
+
+**Исправление:** Исправлен `getDb()` (проблема #2). Добавлено логирование ошибок в `catch` вместо тихого игнорирования.
+
+**Примечание:** MCP tool `generate_tests` удалён в M21. AI-генерация доступна через `apitool ai-generate` и WebUI.
+
+**Файлы:** `src/db/schema.ts`
+
+---
+
+## 4. Относительный `base_url` из спецификации ломал Explorer и тесты
+
+**Проблема:** Swagger-спецификация содержит `servers[0].url = "/docgen2/docgen-ui-service/"` — относительный URL. При Try it в Explorer этот URL конкатенировался с path, давая невалидный URL для `fetch()`. В тестах (runner) аналогично — URL без хоста невалиден.
+
+**Исправление:**
+- Explorer: если `base_url` относительный — поле остаётся пустым с placeholder `https://your-host/...`
+- Explorer: если в окружении БД есть абсолютный `base_url` — подставляется автоматически
+- `/api/try`: добавлена валидация — возвращает понятную ошибку, если URL не абсолютный
+
+**Файлы:** `src/web/routes/explorer.ts`, `src/web/routes/api.ts`, `src/web/server.ts`
+
+---
+
+## 5. HTMX загружался с CDN (unpkg.com)
+
+**Проблема:** HTMX подгружался с `https://unpkg.com/htmx.org@2.0.4`. В корпоративных сетях CDN может быть заблокирован → кнопка "Try it" и все HTMX-элементы не работают (JS не загрузился).
+
+**Исправление:** HTMX скачан локально в `src/web/static/htmx.min.js` и сервируется с `/static/htmx.min.js`.
+
+**Файлы:** `src/web/static/htmx.min.js`, `src/web/server.ts`, `src/web/views/layout.ts`
+
+---
+
+## 6. Self-signed сертификаты блокировали запросы
+
+**Проблема:** Внутренние API используют self-signed сертификаты. `fetch()` в Bun по умолчанию отклоняет такие соединения с ошибкой `self signed certificate in certificate chain`.
+
+**Исправление:** Добавлен `tls: { rejectUnauthorized: false }` во все `fetch()`:
+- Explorer Try it (`/api/try`)
+- Explorer authorize proxy (`/api/authorize`)
+- Test runner (`http-client.ts`)
+
+**Файлы:** `src/web/routes/api.ts`, `src/core/runner/http-client.ts`

package/generated/.env.yaml

@@ -0,0 +1,3 @@
+base_url: "http://localhost:3000"
+auth_username: admin
+auth_password: admin

package/install.ps1

@@ -0,0 +1,80 @@
+# apitool installer for Windows - downloads the latest release binary
+# Usage: iwr https://raw.githubusercontent.com/kirrosh/apitool/master/install.ps1 | iex
+
+$ErrorActionPreference = "Stop"
+
+$REPO = "kirrosh/apitool"
+$TARGET = "win-x64"
+$ARTIFACT = "apitool-$TARGET.zip"
+
+Write-Host "Detected platform: $TARGET" -ForegroundColor Cyan
+
+# Get latest release tag
+Write-Host "Fetching latest release..." -ForegroundColor Yellow
+$RELEASE_URL = "https://api.github.com/repos/$REPO/releases/latest"
+$TAG = (Invoke-RestMethod $RELEASE_URL).tag_name
+
+if (-not $TAG) {
+    Write-Host "Error: Could not determine latest release tag" -ForegroundColor Red
+    exit 1
+}
+Write-Host "Latest release: $TAG" -ForegroundColor Green
+
+# Download binary
+$DOWNLOAD_URL = "https://github.com/$REPO/releases/download/$TAG/$ARTIFACT"
+Write-Host "Downloading $DOWNLOAD_URL ..." -ForegroundColor Yellow
+
+$TEMP_DIR = [System.IO.Path]::GetTempPath()
+$DOWNLOAD_PATH = Join-Path $TEMP_DIR $ARTIFACT
+
+try {
+    Invoke-WebRequest -Uri $DOWNLOAD_URL -OutFile $DOWNLOAD_PATH -UseBasicParsing
+} catch {
+    Write-Host "Error: Could not download release" -ForegroundColor Red
+    Write-Host $_.Exception.Message
+    exit 1
+}
+
+# Extract
+$EXTRACT_DIR = Join-Path $TEMP_DIR "apitool-install"
+if (Test-Path $EXTRACT_DIR) {
+    Remove-Item $EXTRACT_DIR -Recurse -Force
+}
+New-Item -ItemType Directory -Path $EXTRACT_DIR | Out-Null
+
+Write-Host "Extracting..." -ForegroundColor Yellow
+Expand-Archive -Path $DOWNLOAD_PATH -DestinationPath $EXTRACT_DIR -Force
+
+$BINARY = Join-Path $EXTRACT_DIR "apitool.exe"
+if (-not (Test-Path $BINARY)) {
+    Write-Host "Error: Binary not found in archive" -ForegroundColor Red
+    exit 1
+}
+
+# Install binary
+$INSTALL_DIR = "$env:LOCALAPPDATA\apitool"
+if (-not (Test-Path $INSTALL_DIR)) {
+    New-Item -ItemType Directory -Path $INSTALL_DIR -Force | Out-Null
+}
+
+Copy-Item $BINARY $INSTALL_DIR -Force
+$FINAL_PATH = Join-Path $INSTALL_DIR "apitool.exe"
+
+Write-Host "Installed to $FINAL_PATH" -ForegroundColor Green
+
+# Add to PATH if not already there
+$PATH_ENTRY = $INSTALL_DIR
+$currentPath = [System.Environment]::GetEnvironmentVariable("Path", "User")
+
+if ($currentPath -notlike "*$PATH_ENTRY*") {
+    [System.Environment]::SetEnvironmentVariable("Path", "$currentPath;$PATH_ENTRY", "User")
+    Write-Host "Added $PATH_ENTRY to User PATH" -ForegroundColor Green
+    Write-Host "Note: You may need to restart your terminal for changes to take effect" -ForegroundColor Yellow
+} else {
+    Write-Host "$PATH_ENTRY already in PATH" -ForegroundColor Cyan
+}
+
+# Verify
+& $FINAL_PATH --version
+Write-Host "Done!" -ForegroundColor Green
+Write-Host "Run 'apitool init' to set up a new project." -ForegroundColor Cyan

package/install.sh

@@ -0,0 +1,113 @@
+#!/bin/sh
+# apitool installer — downloads the latest release binary for your platform
+# Usage: curl -fsSL https://raw.githubusercontent.com/kirrosh/apitool/master/install.sh | sh
+
+set -e
+
+REPO="kirrosh/apitool"
+
+# Detect OS
+OS=$(uname -s)
+case "$OS" in
+  Linux)  PLATFORM="linux" ;;
+  Darwin) PLATFORM="darwin" ;;
+  *)
+    echo "Error: Unsupported OS: $OS"
+    echo "For Windows, download the zip from https://github.com/$REPO/releases/latest"
+    exit 1
+    ;;
+esac
+
+# Detect architecture
+ARCH=$(uname -m)
+case "$ARCH" in
+  x86_64|amd64)  ARCH_SUFFIX="x64" ;;
+  arm64|aarch64)  ARCH_SUFFIX="arm64" ;;
+  *)
+    echo "Error: Unsupported architecture: $ARCH"
+    exit 1
+    ;;
+esac
+
+TARGET="${PLATFORM}-${ARCH_SUFFIX}"
+echo "Detected platform: $TARGET"
+
+# Get latest release tag
+echo "Fetching latest release..."
+RELEASE_URL="https://api.github.com/repos/$REPO/releases/latest"
+TAG=$(curl -fsSL "$RELEASE_URL" | grep '"tag_name"' | head -1 | sed 's/.*"tag_name": *"//;s/".*//')
+
+if [ -z "$TAG" ]; then
+  echo "Error: Could not determine latest release tag"
+  exit 1
+fi
+echo "Latest release: $TAG"
+
+# Download binary
+ARTIFACT="apitool-${TARGET}.tar.gz"
+DOWNLOAD_URL="https://github.com/$REPO/releases/download/$TAG/$ARTIFACT"
+echo "Downloading $DOWNLOAD_URL ..."
+
+TMPDIR=$(mktemp -d)
+trap 'rm -rf "$TMPDIR"' EXIT
+
+curl -fsSL "$DOWNLOAD_URL" -o "$TMPDIR/$ARTIFACT"
+tar -xzf "$TMPDIR/$ARTIFACT" -C "$TMPDIR"
+
+# Install binary
+BINARY="$TMPDIR/apitool"
+if [ ! -f "$BINARY" ]; then
+  echo "Error: Binary not found in archive"
+  exit 1
+fi
+chmod +x "$BINARY"
+
+# Choose install directory
+INSTALL_DIR="/usr/local/bin"
+if [ ! -w "$INSTALL_DIR" ]; then
+  # Try with sudo first
+  if command -v sudo >/dev/null 2>&1; then
+    echo "Need sudo to install to $INSTALL_DIR"
+    sudo cp "$BINARY" "$INSTALL_DIR/apitool"
+    sudo chmod +x "$INSTALL_DIR/apitool"
+  else
+    INSTALL_DIR="$HOME/.local/bin"
+    mkdir -p "$INSTALL_DIR"
+    cp "$BINARY" "$INSTALL_DIR/apitool"
+    echo "Installed to $INSTALL_DIR"
+
+    # Add to PATH in shell profile if not already there
+    case ":$PATH:" in
+      *":$INSTALL_DIR:"*) ;;
+      *)
+        PROFILE=""
+        if [ -f "$HOME/.zshrc" ]; then
+          PROFILE="$HOME/.zshrc"
+        elif [ -f "$HOME/.bashrc" ]; then
+          PROFILE="$HOME/.bashrc"
+        elif [ -f "$HOME/.profile" ]; then
+          PROFILE="$HOME/.profile"
+        fi
+
+        if [ -n "$PROFILE" ]; then
+          echo "" >> "$PROFILE"
+          echo "# apitool" >> "$PROFILE"
+          echo "export PATH=\"\$HOME/.local/bin:\$PATH\"" >> "$PROFILE"
+          echo "Added $INSTALL_DIR to PATH in $PROFILE"
+          echo "Run: source $PROFILE   (or open a new terminal)"
+        else
+          echo "Warning: $INSTALL_DIR is not in your PATH. Add it with:"
+          echo "  export PATH=\"\$HOME/.local/bin:\$PATH\""
+        fi
+        ;;
+    esac
+  fi
+else
+  cp "$BINARY" "$INSTALL_DIR/apitool"
+fi
+
+echo "Installed to $INSTALL_DIR/apitool"
+
+# Verify
+"$INSTALL_DIR/apitool" --version
+echo "Done! Run 'apitool init' to set up a new project."

package/package.json

@@ -0,0 +1,46 @@
+{
+  "name": "@kirrosh/apitool",
+  "version": "0.4.3",
+  "description": "API testing platform — define tests in YAML, run from CLI or WebUI, generate from OpenAPI specs",
+  "license": "MIT",
+  "module": "index.ts",
+  "type": "module",
+  "keywords": [
+    "api",
+    "testing",
+    "openapi",
+    "yaml",
+    "cli",
+    "rest",
+    "http"
+  ],
+  "bin": {
+    "apitool": "src/cli/index.ts"
+  },
+  "scripts": {
+    "apitool": "bun run src/cli/index.ts",
+    "test": "bun run test:unit && bun run test:mocked",
+    "test:unit": "bun test tests/db/ tests/parser/ tests/runner/ tests/generator/ tests/cli/args.test.ts tests/cli/chat.test.ts tests/cli/commands.test.ts tests/cli/doctor.test.ts tests/cli/envs.test.ts tests/cli/generate-env.test.ts tests/cli/init.test.ts tests/cli/runs.test.ts tests/cli/safe-run.test.ts tests/cli/update.test.ts tests/integration/ tests/web/",
+    "test:mocked": "bun run scripts/run-mocked-tests.ts",
+    "test:ai": "bun test tests/ai/",
+    "check": "tsc --noEmit --project tsconfig.json",
+    "build": "bun build --compile src/cli/index.ts --outfile apitool"
+  },
+  "devDependencies": {
+    "@types/bun": "latest"
+  },
+  "peerDependencies": {
+    "typescript": "^5"
+  },
+  "dependencies": {
+    "@ai-sdk/anthropic": "^2",
+    "@ai-sdk/openai": "^2",
+    "@hono/zod-openapi": "^1.2.2",
+    "@modelcontextprotocol/sdk": "^1.27.1",
+    "@readme/openapi-parser": "^5.5.0",
+    "ai": "^6",
+    "hono": "^4.12.2",
+    "openapi-types": "^12.1.3",
+    "zod": "^4.3.6"
+  }
+}

package/scripts/run-mocked-tests.ts

@@ -0,0 +1,45 @@
+/**
+ * Runs each mock.module() test file in a separate Bun subprocess
+ * to avoid Bun's module cache pollution bug (bun#7823, bun#12823).
+ */
+
+const MOCKED_FILES = [
+  "tests/agent/tools/diagnose-failure.test.ts",
+  "tests/agent/tools/explore-api.test.ts",
+  "tests/agent/tools/generate-tests.test.ts",
+  "tests/agent/tools/manage-environment.test.ts",
+  "tests/agent/tools/query-results.test.ts",
+  "tests/agent/tools/run-tests.test.ts",
+  "tests/agent/tools/send-request.test.ts",
+  "tests/agent/tools/validate-tests.test.ts",
+  "tests/mcp/coverage-analysis.test.ts",
+  "tests/mcp/explore-api.test.ts",
+  "tests/mcp/send-request.test.ts",
+  "tests/cli/request.test.ts",
+  "tests/cli/coverage.test.ts",
+];
+
+const CONCURRENCY = 4;
+let failed = 0;
+
+async function runFile(file: string): Promise<boolean> {
+  const proc = Bun.spawn(["bun", "test", file], {
+    stdout: "inherit",
+    stderr: "inherit",
+    env: { ...process.env, FORCE_COLOR: "1" },
+  });
+  const code = await proc.exited;
+  return code === 0;
+}
+
+// Run in batches of CONCURRENCY
+for (let i = 0; i < MOCKED_FILES.length; i += CONCURRENCY) {
+  const batch = MOCKED_FILES.slice(i, i + CONCURRENCY);
+  const results = await Promise.all(batch.map(runFile));
+  failed += results.filter((ok) => !ok).length;
+}
+
+if (failed > 0) {
+  console.error(`\n${failed} mocked test file(s) failed.`);
+  process.exit(1);
+}

package/seed-demo.ts

@@ -0,0 +1,53 @@
+import { getDb } from "./src/db/schema.ts";
+import { createRun, finalizeRun, saveResults } from "./src/db/queries.ts";
+import type { TestRunResult } from "./src/core/runner/types.ts";
+
+getDb();
+
+function makeRun(dayOffset: number, passRate: number): TestRunResult[] {
+  const d = new Date();
+  d.setDate(d.getDate() - dayOffset);
+  const total = 10;
+  const passed = Math.round(total * passRate);
+  const failed = total - passed;
+
+  const steps = [];
+  for (let i = 0; i < total; i++) {
+    const status = i < passed ? "pass" : "fail";
+    steps.push({
+      name: `Test step ${i + 1}`,
+      status: status as any,
+      duration_ms: 50 + Math.round(Math.random() * 500),
+      request: { method: "GET", url: `http://api.example.com/endpoint-${i}`, headers: {} },
+      response: { status: status === "pass" ? 200 : 500, headers: {}, body: "{}", duration_ms: 50 + Math.round(Math.random() * 500) },
+      assertions: [{ field: "status", rule: `equals ${status === "pass" ? 200 : 204}`, passed: status === "pass", actual: status === "pass" ? 200 : 500, expected: status === "pass" ? 200 : 204 }],
+      captures: {},
+    });
+  }
+
+  return [{
+    suite_name: dayOffset % 2 === 0 ? "Users API" : "Payments API",
+    started_at: d.toISOString(),
+    finished_at: new Date(d.getTime() + 1500).toISOString(),
+    total,
+    passed,
+    failed,
+    skipped: 0,
+    steps,
+  }];
+}
+
+// Create 8 runs with varying pass rates
+const rates = [1.0, 0.9, 0.8, 1.0, 0.7, 1.0, 0.9, 0.6];
+for (let i = 0; i < rates.length; i++) {
+  const results = makeRun(rates.length - i, rates[i]!);
+  const runId = createRun({
+    started_at: results[0]!.started_at,
+    environment: i % 2 === 0 ? "staging" : "production",
+    trigger: "manual",
+  });
+  finalizeRun(runId, results);
+  saveResults(runId, results);
+}
+
+console.log("Seeded 8 demo runs into apitool.db");