@qulib/core 0.7.0 → 0.8.2

package/dist/__tests__/fixtures/api-fixture-repo/app/api/orders/route.d.ts

@@ -0,0 +1,7 @@
+export declare function DELETE(request: {
+    url: string;
+}): Promise<{
+    deleted: boolean;
+    id: string | null;
+}>;
+//# sourceMappingURL=route.d.ts.map

package/dist/__tests__/fixtures/api-fixture-repo/app/api/orders/route.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../../src/__tests__/fixtures/api-fixture-repo/app/api/orders/route.ts"],"names":[],"mappings":"AAGA,wBAAsB,MAAM,CAAC,OAAO,EAAE;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE;;;GAIpD"}

package/dist/__tests__/fixtures/api-fixture-repo/app/api/orders/route.js

@@ -0,0 +1,7 @@
+// Fixture: Next.js App Router API route for orders (DELETE only — high severity untested)
+// This file is a static analysis fixture only — not compiled.
+export async function DELETE(request) {
+    const url = new URL(request.url);
+    const id = url.searchParams.get('id');
+    return { deleted: true, id };
+}

package/dist/__tests__/fixtures/api-fixture-repo/app/api/users/route.d.ts

@@ -0,0 +1,10 @@
+export declare function GET(): Promise<{
+    users: never[];
+}>;
+export declare function POST(request: {
+    json: () => Promise<unknown>;
+}): Promise<{
+    created: boolean;
+    user: unknown;
+}>;
+//# sourceMappingURL=route.d.ts.map

package/dist/__tests__/fixtures/api-fixture-repo/app/api/users/route.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../../src/__tests__/fixtures/api-fixture-repo/app/api/users/route.ts"],"names":[],"mappings":"AAGA,wBAAsB,GAAG;;GAExB;AAED,wBAAsB,IAAI,CAAC,OAAO,EAAE;IAAE,IAAI,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAA;CAAE;;;GAGnE"}

package/dist/__tests__/fixtures/api-fixture-repo/app/api/users/route.js

@@ -0,0 +1,9 @@
+// Fixture: Next.js App Router API route for users
+// This file is a static analysis fixture only — not compiled.
+export async function GET() {
+    return { users: [] };
+}
+export async function POST(request) {
+    const body = await request.json();
+    return { created: true, user: body };
+}

package/dist/__tests__/fixtures/api-fixture-repo/pages/api/health.d.ts

@@ -0,0 +1,9 @@
+export default function handler(req: {
+    method?: string;
+}, res: {
+    status: (code: number) => {
+        json: (data: unknown) => void;
+        end: () => void;
+    };
+}): void;
+//# sourceMappingURL=health.d.ts.map

package/dist/__tests__/fixtures/api-fixture-repo/pages/api/health.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.d.ts","sourceRoot":"","sources":["../../../../../../src/__tests__/fixtures/api-fixture-repo/pages/api/health.ts"],"names":[],"mappings":"AAGA,MAAM,CAAC,OAAO,UAAU,OAAO,CAC7B,GAAG,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,EACxB,GAAG,EAAE;IAAE,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK;QAAE,IAAI,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,IAAI,CAAC;QAAC,GAAG,EAAE,MAAM,IAAI,CAAA;KAAE,CAAA;CAAE,QAOtF"}

package/dist/__tests__/fixtures/api-fixture-repo/pages/api/health.js

@@ -0,0 +1,10 @@
+// Fixture: Next.js Pages API route
+// This file is a static analysis fixture only — not compiled.
+export default function handler(req, res) {
+    if (req.method === 'GET') {
+        res.status(200).json({ status: 'ok' });
+    }
+    else {
+        res.status(405).end();
+    }
+}

package/dist/adapters/api-adapter.d.ts

@@ -1,8 +1,34 @@
 import type { TestAdapter } from './adapter.interface.js';
 import type { NeutralScenario, GeneratedTest } from '../schemas/gap-analysis.schema.js';
+import type { ApiSurface } from '../tools/repo/api-surface.js';
+/**
+ * TestAdapter implementation for API testing via supertest.
+ *
+ * `render` / `renderAll`: convert gap-analysis NeutralScenarios that carry
+ *   `api-call` steps into supertest specs. Used by the standard adapter pipeline.
+ *
+ * `scaffoldApiTests`: separate entry point for the repo-first API toolshed flow.
+ *   Accepts discovered endpoints (ApiSurface) and generates a ready-to-run
+ *   supertest test file — NOT URL-based.
+ */
 export declare class ApiAdapter implements TestAdapter {
     readonly adapterType = "api";
     render(scenario: NeutralScenario): GeneratedTest;
     renderAll(scenarios: NeutralScenario[]): GeneratedTest[];
+    /**
+     * Generate a supertest-based test file from discovered API endpoints.
+     * This is the repo-first entry point — does NOT require a running URL.
+     *
+     * Endpoints are grouped into a single test file. Each endpoint gets one
+     * `it` block that:
+     *   - Makes the correct HTTP method call
+     *   - Asserts status < 500 (smoke-level assertion, safely runnable against a live app)
+     *   - POST/PUT/PATCH endpoints include a TODO for request body
+     *
+     * The file is NOT associated with a NeutralScenario; it uses a fixed scenarioId.
+     */
+    scaffoldApiTests(apiSurface: ApiSurface, options?: {
+        appImportPath?: string;
+    }): GeneratedTest;
 }
 //# sourceMappingURL=api-adapter.d.ts.map

package/dist/adapters/api-adapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api-adapter.d.ts","sourceRoot":"","sources":["../../src/adapters/api-adapter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,KAAK,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAExF,qBAAa,UAAW,YAAW,WAAW;IAC5C,QAAQ,CAAC,WAAW,SAAS;IAE7B,MAAM,CAAC,QAAQ,EAAE,eAAe,GAAG,aAAa;IAIhD,SAAS,CAAC,SAAS,EAAE,eAAe,EAAE,GAAG,aAAa,EAAE;CAGzD"}
+{"version":3,"file":"api-adapter.d.ts","sourceRoot":"","sources":["../../src/adapters/api-adapter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,KAAK,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AACxF,OAAO,KAAK,EAAsB,UAAU,EAAE,MAAM,8BAA8B,CAAC;AASnF;;;;;;;;;GASG;AACH,qBAAa,UAAW,YAAW,WAAW;IAC5C,QAAQ,CAAC,WAAW,SAAS;IAE7B,MAAM,CAAC,QAAQ,EAAE,eAAe,GAAG,aAAa;IAuDhD,SAAS,CAAC,SAAS,EAAE,eAAe,EAAE,GAAG,aAAa,EAAE;IAIxD;;;;;;;;;;;OAWG;IACH,gBAAgB,CACd,UAAU,EAAE,UAAU,EACtB,OAAO,GAAE;QAAE,aAAa,CAAC,EAAE,MAAM,CAAA;KAAO,GACvC,aAAa;CAoDjB"}

package/dist/adapters/api-adapter.js

@@ -1,9 +1,163 @@
+function slugify(title) {
+    return title
+        .toLowerCase()
+        .replace(/[^a-z0-9]+/g, '-')
+        .replace(/^-|-$/g, '');
+}
+/**
+ * TestAdapter implementation for API testing via supertest.
+ *
+ * `render` / `renderAll`: convert gap-analysis NeutralScenarios that carry
+ *   `api-call` steps into supertest specs. Used by the standard adapter pipeline.
+ *
+ * `scaffoldApiTests`: separate entry point for the repo-first API toolshed flow.
+ *   Accepts discovered endpoints (ApiSurface) and generates a ready-to-run
+ *   supertest test file — NOT URL-based.
+ */
 export class ApiAdapter {
     adapterType = 'api';
     render(scenario) {
-        throw new Error('Not implemented');
+        const slug = slugify(scenario.title);
+        const filename = `${slug}.api.test.ts`;
+        const stepLines = scenario.steps
+            .map((step) => {
+            if (step.action === 'api-call') {
+                const path = step.target ?? step.value ?? '/';
+                return [
+                    `    // ${step.description}`,
+                    `    const res = await request(app).get(${JSON.stringify(path)});`,
+                    `    expect(res.status).toBe(200);`,
+                ].join('\n');
+            }
+            if (step.action === 'navigate') {
+                const path = step.target ?? step.value ?? '/';
+                return [
+                    `    // ${step.description}`,
+                    `    const res = await request(app).get(${JSON.stringify(path)});`,
+                    `    expect(res.status).toBeLessThan(500);`,
+                ].join('\n');
+            }
+            return `    // TODO (${step.action}): ${step.description}`;
+        })
+            .join('\n');
+        const code = [
+            `// ${scenario.description}`,
+            `// qulib-generated — scenario: ${scenario.id}`,
+            ``,
+            `import request from 'supertest';`,
+            `import { describe, it, expect } from 'vitest';`,
+            ``,
+            `// TODO: import or create your Express/Fastify/Hono app here`,
+            `// import { app } from '../src/app.js';`,
+            `declare const app: unknown;`,
+            ``,
+            `describe(${JSON.stringify(scenario.title)}, () => {`,
+            `  it(${JSON.stringify(scenario.description)}, async () => {`,
+            stepLines || `    // no api-call steps — add assertions for: ${scenario.targetPath}`,
+            `  });`,
+            `});`,
+            ``,
+        ].join('\n');
+        return {
+            scenarioId: scenario.id,
+            adapter: 'api',
+            filename,
+            code,
+            source: 'template',
+            outputPath: `tests/api/${filename}`,
+        };
     }
     renderAll(scenarios) {
-        throw new Error('Not implemented');
+        return scenarios.map((s) => this.render(s));
+    }
+    /**
+     * Generate a supertest-based test file from discovered API endpoints.
+     * This is the repo-first entry point — does NOT require a running URL.
+     *
+     * Endpoints are grouped into a single test file. Each endpoint gets one
+     * `it` block that:
+     *   - Makes the correct HTTP method call
+     *   - Asserts status < 500 (smoke-level assertion, safely runnable against a live app)
+     *   - POST/PUT/PATCH endpoints include a TODO for request body
+     *
+     * The file is NOT associated with a NeutralScenario; it uses a fixed scenarioId.
+     */
+    scaffoldApiTests(apiSurface, options = {}) {
+        const appImport = options.appImportPath ?? '../src/app.js';
+        const endpoints = apiSurface.endpoints;
+        if (endpoints.length === 0) {
+            const code = [
+                `// qulib-generated API scaffold — no endpoints discovered`,
+                `// qulib-generated — repo: ${apiSurface.repoPath}`,
+                ``,
+                `// No API endpoints were discovered in this repository.`,
+                `// If your app has REST endpoints, ensure they are declared in a supported`,
+                `// framework (Next.js route.ts, Express, Fastify, NestJS) or an OpenAPI spec.`,
+                ``,
+            ].join('\n');
+            return {
+                scenarioId: 'qulib-api-scaffold',
+                adapter: 'api',
+                filename: 'api-scaffold.test.ts',
+                code,
+                source: 'template',
+                outputPath: 'tests/api/api-scaffold.test.ts',
+            };
+        }
+        const itBlocks = endpoints.map((ep) => renderEndpointTest(ep)).join('\n\n');
+        const code = [
+            `// qulib-generated API scaffold — ${endpoints.length} endpoint(s) discovered`,
+            `// qulib-generated — repo: ${apiSurface.repoPath}`,
+            `// Discovery tier breakdown: ${describeDiscoveryTiers(endpoints)}`,
+            ``,
+            `import request from 'supertest';`,
+            `import { describe, it, expect, beforeAll, afterAll } from 'vitest';`,
+            ``,
+            `// TODO: replace with your actual app export`,
+            `import { app } from ${JSON.stringify(appImport)};`,
+            ``,
+            `describe('API surface smoke tests (qulib-generated)', () => {`,
+            itBlocks,
+            `});`,
+            ``,
+        ].join('\n');
+        return {
+            scenarioId: 'qulib-api-scaffold',
+            adapter: 'api',
+            filename: 'api-scaffold.test.ts',
+            code,
+            source: 'template',
+            outputPath: 'tests/api/api-scaffold.test.ts',
+        };
     }
 }
+// ---------------------------------------------------------------------------
+// Internal helpers
+// ---------------------------------------------------------------------------
+function renderEndpointTest(ep) {
+    const method = ep.method === 'unknown' ? 'GET' : ep.method;
+    const methodLower = method.toLowerCase();
+    const hasBody = method === 'POST' || method === 'PUT' || method === 'PATCH';
+    const sourceLine = `  // Source: ${ep.sourceFile} (${ep.sourceTier}, confidence: ${ep.confidence})`;
+    const itTitle = `${method} ${ep.path}`;
+    const requestLine = hasBody
+        ? `      const res = await request(app).${methodLower}(${JSON.stringify(ep.path)});\n      // TODO: add request body — e.g. .send({ ... })`
+        : `      const res = await request(app).${methodLower}(${JSON.stringify(ep.path)});`;
+    const summaryLine = ep.summary ? `  // ${ep.summary}\n` : '';
+    return [
+        summaryLine + sourceLine,
+        `  it(${JSON.stringify(itTitle)}, async () => {`,
+        requestLine,
+        `      expect(res.status).toBeLessThan(500);`,
+        `  });`,
+    ].join('\n');
+}
+function describeDiscoveryTiers(endpoints) {
+    const counts = { openapi: 0, framework: 0, heuristic: 0 };
+    for (const ep of endpoints)
+        counts[ep.sourceTier]++;
+    return Object.entries(counts)
+        .filter(([, v]) => v > 0)
+        .map(([k, v]) => `${v} ${k}`)
+        .join(', ');
+}

package/dist/adapters/playwright-adapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"playwright-adapter.d.ts","sourceRoot":"","sources":["../../src/adapters/playwright-adapter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,KAAK,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAExF,qBAAa,iBAAkB,YAAW,WAAW;IACnD,QAAQ,CAAC,WAAW,gBAAgB;IAEpC,MAAM,CAAC,QAAQ,EAAE,eAAe,GAAG,aAAa;IAIhD,SAAS,CAAC,SAAS,EAAE,eAAe,EAAE,GAAG,aAAa,EAAE;CAGzD"}
+{"version":3,"file":"playwright-adapter.d.ts","sourceRoot":"","sources":["../../src/adapters/playwright-adapter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,KAAK,EAAE,eAAe,EAAE,aAAa,EAAY,MAAM,mCAAmC,CAAC;AAiDlG,qBAAa,iBAAkB,YAAW,WAAW;IACnD,QAAQ,CAAC,WAAW,gBAAgB;IAEpC,MAAM,CAAC,QAAQ,EAAE,eAAe,GAAG,aAAa;IA8BhD,SAAS,CAAC,SAAS,EAAE,eAAe,EAAE,GAAG,aAAa,EAAE;CAGzD"}

package/dist/adapters/playwright-adapter.js

@@ -1,9 +1,78 @@
+function slugify(title) {
+    return title
+        .toLowerCase()
+        .replace(/[^a-z0-9]+/g, '-')
+        .replace(/^-|-$/g, '');
+}
+function renderStep(step) {
+    const t = step.target != null ? JSON.stringify(step.target) : null;
+    const v = step.value != null ? JSON.stringify(step.value) : null;
+    switch (step.action) {
+        case 'navigate':
+            return `    await page.goto(${JSON.stringify(step.target ?? step.value ?? '/')});`;
+        case 'click':
+            return t ? `    await page.locator(${t}).click();` : `    // click: ${step.description}`;
+        case 'type':
+            return t && v ? `    await page.locator(${t}).fill(${v});` : `    // type: ${step.description}`;
+        case 'assert-visible':
+            return t
+                ? `    await expect(page.locator(${t})).toBeVisible();`
+                : `    await expect(page.locator('body')).toBeVisible();`;
+        case 'assert-hidden':
+            return t
+                ? `    await expect(page.locator(${t})).toBeHidden();`
+                : `    // assert-hidden: ${step.description}`;
+        case 'assert-text':
+            if (t && v)
+                return `    await expect(page.locator(${t})).toContainText(${v});`;
+            if (t)
+                return `    await expect(page.locator(${t})).not.toBeEmpty();`;
+            return `    // assert-text: ${step.description}`;
+        case 'assert-disabled':
+            return t
+                ? `    await expect(page.locator(${t})).toBeDisabled();`
+                : `    // assert-disabled: ${step.description}`;
+        case 'assert-count':
+            return t
+                ? `    expect(await page.locator(${t}).count()).toBeGreaterThanOrEqual(${parseInt(step.value ?? '1', 10)});`
+                : `    // assert-count: ${step.description}`;
+        case 'wait':
+            return `    await page.waitForTimeout(${parseInt(step.value ?? '1000', 10)});`;
+        case 'api-call':
+            return `    expect((await page.request.get(${JSON.stringify(step.target ?? step.value ?? '/')})).status()).toBe(200);`;
+        default:
+            return `    // TODO: ${step.description}`;
+    }
+}
 export class PlaywrightAdapter {
     adapterType = 'playwright';
     render(scenario) {
-        throw new Error('Not implemented');
+        const slug = slugify(scenario.title);
+        const filename = `${slug}.spec.ts`;
+        const stepLines = scenario.steps.map(renderStep).join('\n');
+        const code = [
+            `// ${scenario.description}`,
+            `// qulib-generated — scenario: ${scenario.id}`,
+            ``,
+            `import { test, expect } from '@playwright/test';`,
+            ``,
+            `test.describe(${JSON.stringify(scenario.title)}, () => {`,
+            `  test(${JSON.stringify(scenario.description)}, async ({ page }) => {`,
+            stepLines || `    // no steps — add assertions for: ${scenario.targetPath}`,
+            `  });`,
+            `});`,
+            ``,
+        ].join('\n');
+        return {
+            scenarioId: scenario.id,
+            adapter: 'playwright',
+            filename,
+            code,
+            source: 'template',
+            outputPath: `tests/${filename}`,
+        };
     }
     renderAll(scenarios) {
-        throw new Error('Not implemented');
+        return scenarios.map((s) => this.render(s));
     }
 }

package/dist/index.d.ts

@@ -6,7 +6,11 @@ export type { StorageStateInvalidReason, StorageStateValidationResult, } from '.
 export { exploreAuth } from './tools/auth/explore.js';
 export { addUserProvider, removeUserProvider, listUserProviders } from './tools/auth/custom-providers.js';
 export { scanRepo } from './tools/repo/scan.js';
+export { discoverApiSurface, discoverApiSurfaceWithRepo } from './tools/repo/api-surface.js';
+export type { ApiSurface, DiscoveredEndpoint, DiscoverApiSurfaceOptions } from './tools/repo/api-surface.js';
 export { computeAutomationMaturity } from './tools/scoring/automation-maturity.js';
+export { computeApiCoverage } from './tools/scoring/api-coverage.js';
+export type { ApiCoverageResult, ApiEndpointCoverage } from './tools/scoring/api-coverage.js';
 export { scaffoldTests } from './scaffold-tests.js';
 export type { ScaffoldOptions, ScaffoldResult, ProjectConfig } from './scaffold-tests.js';
 export { createProvider } from './llm/provider-registry.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,YAAY,EACV,YAAY,EACZ,kBAAkB,EAClB,SAAS,EACT,cAAc,EACd,uBAAuB,GACxB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,UAAU,EACV,oBAAoB,EACpB,4BAA4B,EAC5B,yBAAyB,EACzB,qBAAqB,GACtB,MAAM,wBAAwB,CAAC;AAChC,YAAY,EACV,yBAAyB,EACzB,4BAA4B,GAC7B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAC1G,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,yBAAyB,EAAE,MAAM,wCAAwC,CAAC;AACnF,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,YAAY,EAAE,eAAe,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAC1F,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,gCAAgC,EAAE,MAAM,4BAA4B,CAAC;AAC9E,OAAO,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AACvF,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AACjF,YAAY,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AACrE,YAAY,EACV,aAAa,EACb,cAAc,EACd,kBAAkB,GACnB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAC9E,YAAY,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,YAAY,EACV,aAAa,EACb,UAAU,EACV,cAAc,EACd,WAAW,EACX,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,QAAQ,EACR,oBAAoB,EACpB,gBAAgB,EAChB,cAAc,EACd,iBAAiB,EACjB,qBAAqB,EACrB,aAAa,EACb,kBAAkB,EAClB,2BAA2B,EAC3B,wBAAwB,EACxB,wBAAwB,GACzB,MAAM,oBAAoB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,YAAY,EACV,YAAY,EACZ,kBAAkB,EAClB,SAAS,EACT,cAAc,EACd,uBAAuB,GACxB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,UAAU,EACV,oBAAoB,EACpB,4BAA4B,EAC5B,yBAAyB,EACzB,qBAAqB,GACtB,MAAM,wBAAwB,CAAC;AAChC,YAAY,EACV,yBAAyB,EACzB,4BAA4B,GAC7B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAC1G,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAC;AAC7F,YAAY,EAAE,UAAU,EAAE,kBAAkB,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AAC7G,OAAO,EAAE,yBAAyB,EAAE,MAAM,wCAAwC,CAAC;AACnF,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,YAAY,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAC9F,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,YAAY,EAAE,eAAe,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAC1F,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,gCAAgC,EAAE,MAAM,4BAA4B,CAAC;AAC9E,OAAO,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AACvF,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AACjF,YAAY,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AACrE,YAAY,EACV,aAAa,EACb,cAAc,EACd,kBAAkB,GACnB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAC9E,YAAY,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,YAAY,EACV,aAAa,EACb,UAAU,EACV,cAAc,EACd,WAAW,EACX,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,QAAQ,EACR,oBAAoB,EACpB,gBAAgB,EAChB,cAAc,EACd,iBAAiB,EACjB,qBAAqB,EACrB,aAAa,EACb,kBAAkB,EAClB,2BAA2B,EAC3B,wBAAwB,EACxB,wBAAwB,GACzB,MAAM,oBAAoB,CAAC"}

package/dist/index.js

@@ -4,7 +4,9 @@ export { detectAuth, validateStorageState, evaluateStorageStateValidity, preflig
 export { exploreAuth } from './tools/auth/explore.js';
 export { addUserProvider, removeUserProvider, listUserProviders } from './tools/auth/custom-providers.js';
 export { scanRepo } from './tools/repo/scan.js';
+export { discoverApiSurface, discoverApiSurfaceWithRepo } from './tools/repo/api-surface.js';
 export { computeAutomationMaturity } from './tools/scoring/automation-maturity.js';
+export { computeApiCoverage } from './tools/scoring/api-coverage.js';
 export { scaffoldTests } from './scaffold-tests.js';
 export { createProvider } from './llm/provider-registry.js';
 export { resolveMaxOutputTokensPerLlmCall } from './schemas/config.schema.js';

package/dist/schemas/automation-maturity.schema.d.ts

@@ -20,7 +20,7 @@ export declare const AutomationMaturityApplicabilitySchema: z.ZodEnum<["applicab
  * Existing consumers that don't read them keep working; honest reports populate them.
  */
 export declare const AutomationMaturityDimensionSchema: z.ZodObject<{
-    dimension: z.ZodEnum<["test-coverage-breadth", "framework-adoption", "test-id-hygiene", "ci-integration", "auth-test-coverage", "component-test-ratio"]>;
+    dimension: z.ZodEnum<["test-coverage-breadth", "framework-adoption", "test-id-hygiene", "ci-integration", "auth-test-coverage", "component-test-ratio", "api-test-coverage"]>;
     score: z.ZodNumber;
     weight: z.ZodNumber;
     evidence: z.ZodArray<z.ZodString, "many">;
@@ -30,7 +30,7 @@ export declare const AutomationMaturityDimensionSchema: z.ZodObject<{
     guidance: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
     recommendations: string[];
-    dimension: "test-coverage-breadth" | "framework-adoption" | "test-id-hygiene" | "ci-integration" | "auth-test-coverage" | "component-test-ratio";
+    dimension: "test-coverage-breadth" | "framework-adoption" | "test-id-hygiene" | "ci-integration" | "auth-test-coverage" | "component-test-ratio" | "api-test-coverage";
     score: number;
     weight: number;
     evidence: string[];
@@ -39,7 +39,7 @@ export declare const AutomationMaturityDimensionSchema: z.ZodObject<{
     guidance?: string | undefined;
 }, {
     recommendations: string[];
-    dimension: "test-coverage-breadth" | "framework-adoption" | "test-id-hygiene" | "ci-integration" | "auth-test-coverage" | "component-test-ratio";
+    dimension: "test-coverage-breadth" | "framework-adoption" | "test-id-hygiene" | "ci-integration" | "auth-test-coverage" | "component-test-ratio" | "api-test-coverage";
     score: number;
     weight: number;
     evidence: string[];
@@ -54,7 +54,7 @@ export declare const AutomationMaturitySchema: z.ZodObject<{
     level: z.ZodNumber;
     label: z.ZodString;
     dimensions: z.ZodArray<z.ZodObject<{
-        dimension: z.ZodEnum<["test-coverage-breadth", "framework-adoption", "test-id-hygiene", "ci-integration", "auth-test-coverage", "component-test-ratio"]>;
+        dimension: z.ZodEnum<["test-coverage-breadth", "framework-adoption", "test-id-hygiene", "ci-integration", "auth-test-coverage", "component-test-ratio", "api-test-coverage"]>;
         score: z.ZodNumber;
         weight: z.ZodNumber;
         evidence: z.ZodArray<z.ZodString, "many">;
@@ -64,7 +64,7 @@ export declare const AutomationMaturitySchema: z.ZodObject<{
         guidance: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
         recommendations: string[];
-        dimension: "test-coverage-breadth" | "framework-adoption" | "test-id-hygiene" | "ci-integration" | "auth-test-coverage" | "component-test-ratio";
+        dimension: "test-coverage-breadth" | "framework-adoption" | "test-id-hygiene" | "ci-integration" | "auth-test-coverage" | "component-test-ratio" | "api-test-coverage";
         score: number;
         weight: number;
         evidence: string[];
@@ -73,7 +73,7 @@ export declare const AutomationMaturitySchema: z.ZodObject<{
         guidance?: string | undefined;
     }, {
         recommendations: string[];
-        dimension: "test-coverage-breadth" | "framework-adoption" | "test-id-hygiene" | "ci-integration" | "auth-test-coverage" | "component-test-ratio";
+        dimension: "test-coverage-breadth" | "framework-adoption" | "test-id-hygiene" | "ci-integration" | "auth-test-coverage" | "component-test-ratio" | "api-test-coverage";
         score: number;
         weight: number;
         evidence: string[];
@@ -91,7 +91,7 @@ export declare const AutomationMaturitySchema: z.ZodObject<{
     overallScore: number;
     dimensions: {
         recommendations: string[];
-        dimension: "test-coverage-breadth" | "framework-adoption" | "test-id-hygiene" | "ci-integration" | "auth-test-coverage" | "component-test-ratio";
+        dimension: "test-coverage-breadth" | "framework-adoption" | "test-id-hygiene" | "ci-integration" | "auth-test-coverage" | "component-test-ratio" | "api-test-coverage";
         score: number;
         weight: number;
         evidence: string[];
@@ -109,7 +109,7 @@ export declare const AutomationMaturitySchema: z.ZodObject<{
     overallScore: number;
     dimensions: {
         recommendations: string[];
-        dimension: "test-coverage-breadth" | "framework-adoption" | "test-id-hygiene" | "ci-integration" | "auth-test-coverage" | "component-test-ratio";
+        dimension: "test-coverage-breadth" | "framework-adoption" | "test-id-hygiene" | "ci-integration" | "auth-test-coverage" | "component-test-ratio" | "api-test-coverage";
         score: number;
         weight: number;
         evidence: string[];

package/dist/schemas/automation-maturity.schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"automation-maturity.schema.d.ts","sourceRoot":"","sources":["../../src/schemas/automation-maturity.schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,qCAAqC,wDAIhD,CAAC;AAEH;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,iCAAiC;;;;;;;;;;;;;;;;;;;;;;;;;;;EAgB5C,CAAC;AAEH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EASnC,CAAC;AAEH,MAAM,MAAM,+BAA+B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qCAAqC,CAAC,CAAC;AACpG,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAC5F,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC"}
+{"version":3,"file":"automation-maturity.schema.d.ts","sourceRoot":"","sources":["../../src/schemas/automation-maturity.schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,qCAAqC,wDAIhD,CAAC;AAEH;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,iCAAiC;;;;;;;;;;;;;;;;;;;;;;;;;;;EAiB5C,CAAC;AAEH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EASnC,CAAC;AAEH,MAAM,MAAM,+BAA+B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qCAAqC,CAAC,CAAC;AACpG,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAC5F,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC"}

package/dist/schemas/automation-maturity.schema.js

@@ -31,6 +31,7 @@ export const AutomationMaturityDimensionSchema = z.object({
         'ci-integration',
         'auth-test-coverage',
         'component-test-ratio',
+        'api-test-coverage',
     ]),
     score: z.number().min(0).max(100),
     weight: z.number().min(0).max(1),

package/dist/schemas/gap-analysis.schema.d.ts

@@ -4,7 +4,7 @@ export declare const GapSchema: z.ZodObject<{
     path: z.ZodString;
     severity: z.ZodEnum<["critical", "high", "medium", "low"]>;
     reason: z.ZodString;
-    category: z.ZodEnum<["untested-route", "a11y", "console-error", "broken-link", "auth-surface", "coverage"]>;
+    category: z.ZodEnum<["untested-route", "a11y", "console-error", "broken-link", "auth-surface", "coverage", "untested-api-endpoint"]>;
     description: z.ZodOptional<z.ZodString>;
     recommendation: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
@@ -12,7 +12,7 @@ export declare const GapSchema: z.ZodObject<{
     id: string;
     severity: "critical" | "high" | "medium" | "low";
     reason: string;
-    category: "untested-route" | "a11y" | "console-error" | "broken-link" | "auth-surface" | "coverage";
+    category: "untested-route" | "a11y" | "console-error" | "broken-link" | "auth-surface" | "coverage" | "untested-api-endpoint";
     recommendation?: string | undefined;
     description?: string | undefined;
 }, {
@@ -20,7 +20,7 @@ export declare const GapSchema: z.ZodObject<{
     id: string;
     severity: "critical" | "high" | "medium" | "low";
     reason: string;
-    category: "untested-route" | "a11y" | "console-error" | "broken-link" | "auth-surface" | "coverage";
+    category: "untested-route" | "a11y" | "console-error" | "broken-link" | "auth-surface" | "coverage" | "untested-api-endpoint";
     recommendation?: string | undefined;
     description?: string | undefined;
 }>;
@@ -163,7 +163,7 @@ export declare const GapAnalysisSchema: z.ZodObject<{
         path: z.ZodString;
         severity: z.ZodEnum<["critical", "high", "medium", "low"]>;
         reason: z.ZodString;
-        category: z.ZodEnum<["untested-route", "a11y", "console-error", "broken-link", "auth-surface", "coverage"]>;
+        category: z.ZodEnum<["untested-route", "a11y", "console-error", "broken-link", "auth-surface", "coverage", "untested-api-endpoint"]>;
         description: z.ZodOptional<z.ZodString>;
         recommendation: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
@@ -171,7 +171,7 @@ export declare const GapAnalysisSchema: z.ZodObject<{
         id: string;
         severity: "critical" | "high" | "medium" | "low";
         reason: string;
-        category: "untested-route" | "a11y" | "console-error" | "broken-link" | "auth-surface" | "coverage";
+        category: "untested-route" | "a11y" | "console-error" | "broken-link" | "auth-surface" | "coverage" | "untested-api-endpoint";
         recommendation?: string | undefined;
         description?: string | undefined;
     }, {
@@ -179,7 +179,7 @@ export declare const GapAnalysisSchema: z.ZodObject<{
         id: string;
         severity: "critical" | "high" | "medium" | "low";
         reason: string;
-        category: "untested-route" | "a11y" | "console-error" | "broken-link" | "auth-surface" | "coverage";
+        category: "untested-route" | "a11y" | "console-error" | "broken-link" | "auth-surface" | "coverage" | "untested-api-endpoint";
         recommendation?: string | undefined;
         description?: string | undefined;
     }>, "many">;
@@ -445,7 +445,7 @@ export declare const GapAnalysisSchema: z.ZodObject<{
         id: string;
         severity: "critical" | "high" | "medium" | "low";
         reason: string;
-        category: "untested-route" | "a11y" | "console-error" | "broken-link" | "auth-surface" | "coverage";
+        category: "untested-route" | "a11y" | "console-error" | "broken-link" | "auth-surface" | "coverage" | "untested-api-endpoint";
         recommendation?: string | undefined;
         description?: string | undefined;
     }[];
@@ -524,7 +524,7 @@ export declare const GapAnalysisSchema: z.ZodObject<{
         id: string;
         severity: "critical" | "high" | "medium" | "low";
         reason: string;
-        category: "untested-route" | "a11y" | "console-error" | "broken-link" | "auth-surface" | "coverage";
+        category: "untested-route" | "a11y" | "console-error" | "broken-link" | "auth-surface" | "coverage" | "untested-api-endpoint";
         recommendation?: string | undefined;
         description?: string | undefined;
     }[];

package/dist/schemas/gap-analysis.schema.js

@@ -5,7 +5,7 @@ export const GapSchema = z.object({
     path: z.string(),
     severity: z.enum(['critical', 'high', 'medium', 'low']),
     reason: z.string(),
-    category: z.enum(['untested-route', 'a11y', 'console-error', 'broken-link', 'auth-surface', 'coverage']),
+    category: z.enum(['untested-route', 'a11y', 'console-error', 'broken-link', 'auth-surface', 'coverage', 'untested-api-endpoint']),
     description: z.string().optional(),
     recommendation: z.string().optional(),
 });

package/dist/schemas/public-surface.schema.d.ts

@@ -118,7 +118,7 @@ export declare const PublicSurfaceSchema: z.ZodObject<{
         path: z.ZodString;
         severity: z.ZodEnum<["critical", "high", "medium", "low"]>;
         reason: z.ZodString;
-        category: z.ZodEnum<["untested-route", "a11y", "console-error", "broken-link", "auth-surface", "coverage"]>;
+        category: z.ZodEnum<["untested-route", "a11y", "console-error", "broken-link", "auth-surface", "coverage", "untested-api-endpoint"]>;
         description: z.ZodOptional<z.ZodString>;
         recommendation: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
@@ -126,7 +126,7 @@ export declare const PublicSurfaceSchema: z.ZodObject<{
         id: string;
         severity: "critical" | "high" | "medium" | "low";
         reason: string;
-        category: "untested-route" | "a11y" | "console-error" | "broken-link" | "auth-surface" | "coverage";
+        category: "untested-route" | "a11y" | "console-error" | "broken-link" | "auth-surface" | "coverage" | "untested-api-endpoint";
         recommendation?: string | undefined;
         description?: string | undefined;
     }, {
@@ -134,7 +134,7 @@ export declare const PublicSurfaceSchema: z.ZodObject<{
         id: string;
         severity: "critical" | "high" | "medium" | "low";
         reason: string;
-        category: "untested-route" | "a11y" | "console-error" | "broken-link" | "auth-surface" | "coverage";
+        category: "untested-route" | "a11y" | "console-error" | "broken-link" | "auth-surface" | "coverage" | "untested-api-endpoint";
         recommendation?: string | undefined;
         description?: string | undefined;
     }>, "many">;
@@ -181,7 +181,7 @@ export declare const PublicSurfaceSchema: z.ZodObject<{
         id: string;
         severity: "critical" | "high" | "medium" | "low";
         reason: string;
-        category: "untested-route" | "a11y" | "console-error" | "broken-link" | "auth-surface" | "coverage";
+        category: "untested-route" | "a11y" | "console-error" | "broken-link" | "auth-surface" | "coverage" | "untested-api-endpoint";
         recommendation?: string | undefined;
         description?: string | undefined;
     }[];
@@ -224,7 +224,7 @@ export declare const PublicSurfaceSchema: z.ZodObject<{
         id: string;
         severity: "critical" | "high" | "medium" | "low";
         reason: string;
-        category: "untested-route" | "a11y" | "console-error" | "broken-link" | "auth-surface" | "coverage";
+        category: "untested-route" | "a11y" | "console-error" | "broken-link" | "auth-surface" | "coverage" | "untested-api-endpoint";
         recommendation?: string | undefined;
         description?: string | undefined;
     }[];