qa360 1.0.1 → 1.0.3

package/dist/commands/run.d.ts

@@ -1,55 +1,36 @@
 /**
- * QA360 Run Command - Test execution engine
+ * QA360 Run Command - Execute quality gates
+ *
+ * Usage:
+ *   qa360 run [pack.yaml]
+ *   qa360 run --output ./results
+ *   qa360 run --verbose
  */
-import { PackConfig } from './ask';
-export interface RunResult {
-    pack: PackConfig;
-    results: TestResult[];
-    summary: RunSummary;
-    timestamp: string;
-    duration: number;
-}
-export interface TestResult {
-    name: string;
-    adapter: string;
-    status: 'passed' | 'failed' | 'skipped';
-    duration: number;
+import { type Phase3RunResult, type PackConfigV1 } from 'qa360-core';
+/**
+ * CLI options for run command
+ */
+export interface RunOptions {
     output?: string;
-    error?: string;
-    artifacts?: string[];
-}
-export interface RunSummary {
-    total: number;
-    passed: number;
-    failed: number;
-    skipped: number;
-    successRate: number;
+    verbose?: boolean;
+    dryRun?: boolean;
+    strict?: boolean;
 }
-export declare class QA360Runner {
-    private qa360Dir;
-    private toolsDir;
-    private runsDir;
-    private currentRunDir;
-    run(packPath?: string, options?: {
-        mode?: 'soft' | 'strict';
-        retries?: number;
-        timeout?: number;
-        docker?: boolean;
-    }): Promise<RunResult>;
-    private loadPack;
-    private executeHooks;
-    private executeTests;
-    private executeTest;
-    private executePlaywrightTest;
-    private executeK6Test;
-    private executeLighthouseTest;
-    private executeSemgrepTest;
-    private executeZapTest;
-    private executeInDocker;
-    private isToolAvailable;
-    private generateSummary;
-    private saveRunResults;
-    private displayResults;
-}
-export declare function runCommand(packPath?: string, options?: any): Promise<void>;
+/**
+ * Load and validate pack configuration
+ */
+export declare function loadPack(packPath: string): Promise<PackConfigV1>;
+/**
+ * Find pack file (search order: argument, .qa360/pack.yml, pack.yaml, pack.yml)
+ */
+export declare function findPackFile(packArg?: string): string;
+/**
+ * Display run results summary
+ */
+export declare function displayResults(result: Phase3RunResult): void;
+/**
+ * Main run command
+ */
+export declare function runCommand(packArg?: string, options?: RunOptions): Promise<void>;
+export default runCommand;
 //# sourceMappingURL=run.d.ts.map

package/dist/commands/run.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../src/commands/run.ts"],"names":[],"mappings":"AAAA;;GAEG;AAQH,OAAO,EAAE,UAAU,EAAY,MAAM,OAAO,CAAC;AAE7C,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,UAAU,CAAC;IACjB,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,OAAO,EAAE,UAAU,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAiC;IACjD,OAAO,CAAC,QAAQ,CAAgC;IAChD,OAAO,CAAC,OAAO,CAA+B;IAC9C,OAAO,CAAC,aAAa,CAAM;IAErB,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,OAAO,GAAE;QACpC,IAAI,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAC;QACzB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,MAAM,CAAC,EAAE,OAAO,CAAC;KACb,GAAG,OAAO,CAAC,SAAS,CAAC;YAkDb,QAAQ;YAuBR,YAAY;YAqBZ,YAAY;YA+CZ,WAAW;YAyBX,qBAAqB;YAmDrB,aAAa;YAgCb,qBAAqB;YAMrB,kBAAkB;YAMlB,cAAc;YAMd,eAAe;IAM7B,OAAO,CAAC,eAAe;IASvB,OAAO,CAAC,eAAe;YAUT,cAAc;IAO5B,OAAO,CAAC,cAAc;CAoBvB;AAED,wBAAsB,UAAU,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,OAAO,GAAE,GAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CASpF"}
+{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../src/commands/run.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAMH,OAAO,EAAgB,KAAK,eAAe,EAAkC,KAAK,YAAY,EAAE,MAAM,YAAY,CAAC;AAEnH;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED;;GAEG;AACH,wBAAsB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAwBtE;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CA0BrD;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,eAAe,GAAG,IAAI,CA8B5D;AAED;;GAEG;AACH,wBAAsB,UAAU,CAC9B,OAAO,CAAC,EAAE,MAAM,EAChB,OAAO,GAAE,UAAe,GACvB,OAAO,CAAC,IAAI,CAAC,CAiDf;AAGD,eAAe,UAAU,CAAC"}

package/dist/commands/run.js

@@ -1,293 +1,137 @@
 /**
- * QA360 Run Command - Test execution engine
+ * QA360 Run Command - Execute quality gates
+ *
+ * Usage:
+ *   qa360 run [pack.yaml]
+ *   qa360 run --output ./results
+ *   qa360 run --verbose
  */
-import { readFileSync, existsSync, mkdirSync, writeFileSync } from 'fs';
-import { join } from 'path';
-import { execSync } from 'child_process';
+import { existsSync, readFileSync } from 'fs';
+import { join, resolve } from 'path';
 import chalk from 'chalk';
-import ora from 'ora';
 import { load } from 'js-yaml';
-export class QA360Runner {
-    qa360Dir = join(process.cwd(), '.qa360');
-    toolsDir = join(this.qa360Dir, 'tools');
-    runsDir = join(this.qa360Dir, 'runs');
-    currentRunDir = '';
-    async run(packPath, options = {}) {
-        const startTime = Date.now();
-        const timestamp = new Date().toISOString();
-        // Setup run directory
-        this.currentRunDir = join(this.runsDir, timestamp.replace(/[:.]/g, '-'));
-        mkdirSync(this.currentRunDir, { recursive: true });
-        console.log(chalk.blue('🚀 QA360 Run - Exécution des tests\n'));
-        try {
-            // 1. Load pack configuration
-            const pack = await this.loadPack(packPath);
-            console.log(chalk.green(`📦 Pack chargé: ${pack.name} v${pack.version}`));
-            // 2. Execute hooks: beforeAll
-            await this.executeHooks(pack.hooks?.beforeAll, 'beforeAll');
-            // 3. Execute tests
-            const results = await this.executeTests(pack.tests, options);
-            // 4. Execute hooks: afterAll
-            await this.executeHooks(pack.hooks?.afterAll, 'afterAll');
-            // 5. Generate summary
-            const summary = this.generateSummary(results);
-            const duration = Date.now() - startTime;
-            const runResult = {
-                pack,
-                results,
-                summary,
-                timestamp,
-                duration
-            };
-            // 6. Save run results
-            await this.saveRunResults(runResult);
-            // 7. Display results
-            this.displayResults(runResult);
-            return runResult;
-        }
-        catch (error) {
-            console.error(chalk.red('❌ Erreur lors de l\'exécution:'), error);
-            throw error;
-        }
-    }
-    async loadPack(packPath) {
-        const defaultPath = join(this.qa360Dir, 'pack.yml');
-        const targetPath = packPath || defaultPath;
-        if (!existsSync(targetPath)) {
-            throw new Error(`Pack non trouvé: ${targetPath}\n💡 Utilisez 'qa360 ask' pour générer un pack`);
-        }
-        try {
-            const content = readFileSync(targetPath, 'utf8');
-            const pack = load(content);
-            // Validation basique
-            if (!pack.name || !pack.adapters || !pack.tests) {
-                throw new Error('Pack invalide: champs requis manquants (name, adapters, tests)');
-            }
-            return pack;
-        }
-        catch (error) {
-            throw new Error(`Erreur de parsing du pack: ${error}`);
-        }
-    }
-    async executeHooks(hooks, phase) {
-        if (!hooks || hooks.length === 0)
-            return;
-        console.log(chalk.yellow(`🔗 Exécution hooks ${phase}:`));
-        for (const hook of hooks) {
-            const spinner = ora(`Hook: ${hook}`).start();
-            try {
-                execSync(hook, {
-                    stdio: 'pipe',
-                    cwd: process.cwd(),
-                    timeout: 30000
-                });
-                spinner.succeed();
-            }
-            catch (error) {
-                spinner.fail(`Hook échoué: ${error}`);
-                throw error;
-            }
-        }
-    }
-    async executeTests(tests, options) {
-        const results = [];
-        console.log(chalk.blue(`\n🧪 Exécution de ${tests.length} test(s):\n`));
-        for (let i = 0; i < tests.length; i++) {
-            const test = tests[i];
-            const spinner = ora(`[${i + 1}/${tests.length}] ${test.name}`).start();
-            const startTime = Date.now();
-            try {
-                const result = await this.executeTest(test, options);
-                result.duration = Date.now() - startTime;
-                if (result.status === 'passed') {
-                    spinner.succeed(chalk.green(`${test.name} (${result.duration}ms)`));
-                }
-                else if (result.status === 'skipped') {
-                    spinner.warn(chalk.yellow(`${test.name} - Ignoré`));
-                }
-                else {
-                    spinner.fail(chalk.red(`${test.name} - ${result.error}`));
-                }
-                results.push(result);
-            }
-            catch (error) {
-                const result = {
-                    name: test.name,
-                    adapter: test.adapter,
-                    status: 'failed',
-                    duration: Date.now() - startTime,
-                    error: error instanceof Error ? error.message : String(error)
-                };
-                spinner.fail(chalk.red(`${test.name} - Erreur: ${result.error}`));
-                results.push(result);
-                // En mode strict, arrêter à la première erreur
-                if (options.mode === 'strict') {
-                    throw new Error(`Test échoué en mode strict: ${test.name}`);
-                }
-            }
-        }
-        return results;
-    }
-    async executeTest(test, options) {
-        const baseResult = {
-            name: test.name,
-            adapter: test.adapter,
-            status: 'failed',
-            duration: 0,
-            artifacts: []
-        };
-        switch (test.adapter) {
-            case 'playwright':
-                return await this.executePlaywrightTest(test, baseResult, options);
-            case 'k6':
-                return await this.executeK6Test(test, baseResult, options);
-            case 'lighthouse':
-                return await this.executeLighthouseTest(test, baseResult, options);
-            case 'semgrep':
-                return await this.executeSemgrepTest(test, baseResult, options);
-            case 'zap':
-                return await this.executeZapTest(test, baseResult, options);
-            default:
-                throw new Error(`Adapter non supporté: ${test.adapter}`);
-        }
-    }
-    async executePlaywrightTest(test, result, options) {
-        try {
-            // Check if Playwright is available
-            if (!this.isToolAvailable('playwright')) {
-                if (options.docker) {
-                    return await this.executeInDocker(test, result);
-                }
-                throw new Error('Playwright non disponible. Utilisez --docker ou installez Playwright');
-            }
-            const config = test.config;
-            // Simple HTTP test for API endpoints
-            if (config.url && config.method) {
-                // Use native fetch (Node 18+)
-                const response = await fetch(config.url, {
-                    method: config.method || 'GET',
-                    signal: AbortSignal.timeout(test.timeout || 10000)
-                });
-                // Check expectations
-                if (config.expect?.status && response.status !== config.expect.status) {
-                    throw new Error(`Status attendu: ${config.expect.status}, reçu: ${response.status}`);
-                }
-                if (config.expect?.responseTime) {
-                    const maxTime = parseInt(config.expect.responseTime.replace(/[^\d]/g, ''));
-                    if (result.duration > maxTime) {
-                        throw new Error(`Temps de réponse trop élevé: ${result.duration}ms > ${maxTime}ms`);
-                    }
-                }
-                result.status = 'passed';
-                result.output = `HTTP ${response.status} - ${config.url}`;
-            }
-            else if (config.actions) {
-                // Browser automation test (simplified)
-                result.status = 'skipped';
-                result.output = 'Test browser ignoré (implémentation Phase 2)';
-            }
-            else {
-                throw new Error('Configuration Playwright invalide');
-            }
-            return result;
-        }
-        catch (error) {
-            result.error = error instanceof Error ? error.message : String(error);
-            return result;
-        }
-    }
-    async executeK6Test(test, result, options) {
-        try {
-            if (!this.isToolAvailable('k6')) {
-                result.status = 'skipped';
-                result.output = 'k6 non disponible - test ignoré';
-                return result;
-            }
-            // Simplified k6 test execution
-            const config = test.config;
-            // Basic load test simulation (using native fetch for Node 18+)
-            const vus = config.scenarios?.load_test?.vus || 1;
-            const duration = config.scenarios?.load_test?.duration || '10s';
-            const promises = [];
-            for (let i = 0; i < vus; i++) {
-                promises.push(fetch(config.url));
-            }
-            await Promise.all(promises);
-            result.status = 'passed';
-            result.output = `Load test: ${vus} VUs pendant ${duration}`;
-        }
-        catch (error) {
-            result.error = error instanceof Error ? error.message : String(error);
-        }
-        return result;
-    }
-    async executeLighthouseTest(test, result, options) {
-        result.status = 'skipped';
-        result.output = 'Lighthouse test ignoré (implémentation Phase 2)';
-        return result;
-    }
-    async executeSemgrepTest(test, result, options) {
-        result.status = 'skipped';
-        result.output = 'Semgrep test ignoré (implémentation Phase 2)';
-        return result;
-    }
-    async executeZapTest(test, result, options) {
-        result.status = 'skipped';
-        result.output = 'ZAP test ignoré (implémentation Phase 2)';
-        return result;
-    }
-    async executeInDocker(test, result) {
-        result.status = 'skipped';
-        result.output = 'Exécution Docker ignorée (implémentation Phase 2)';
-        return result;
-    }
-    isToolAvailable(tool) {
-        try {
-            execSync(`which ${tool}`, { stdio: 'pipe' });
-            return true;
-        }
-        catch {
-            return false;
+import { Phase3Runner, PackValidator } from 'qa360-core';
+/**
+ * Load and validate pack configuration
+ */
+export async function loadPack(packPath) {
+    if (!existsSync(packPath)) {
+        throw new Error(`Pack file not found: ${packPath}`);
+    }
+    const content = readFileSync(packPath, 'utf-8');
+    const pack = load(content);
+    // Validate pack schema
+    const validator = new PackValidator();
+    const validation = await validator.validate(pack);
+    if (!validation.valid) {
+        const errors = validation.errors?.map(e => `  • ${e}`).join('\n');
+        throw new Error(`Invalid pack configuration:\n${errors}`);
+    }
+    // Show warnings if any
+    if (validation.warnings && validation.warnings.length > 0) {
+        console.log(chalk.yellow('\n⚠️  Pack warnings:'));
+        validation.warnings.forEach(w => console.log(chalk.yellow(`  • ${w}`)));
+    }
+    return pack;
+}
+/**
+ * Find pack file (search order: argument, .qa360/pack.yml, pack.yaml, pack.yml)
+ */
+export function findPackFile(packArg) {
+    if (packArg) {
+        return resolve(packArg);
+    }
+    const searchPaths = [
+        join(process.cwd(), '.qa360', 'pack.yml'),
+        join(process.cwd(), '.qa360', 'pack.yaml'),
+        join(process.cwd(), 'pack.yml'),
+        join(process.cwd(), 'pack.yaml'),
+        join(process.cwd(), 'qa360.yml'),
+        join(process.cwd(), 'qa360.yaml'),
+    ];
+    for (const path of searchPaths) {
+        if (existsSync(path)) {
+            return path;
         }
     }
-    generateSummary(results) {
-        const total = results.length;
-        const passed = results.filter(r => r.status === 'passed').length;
-        const failed = results.filter(r => r.status === 'failed').length;
-        const skipped = results.filter(r => r.status === 'skipped').length;
-        const successRate = total > 0 ? Math.round((passed / total) * 100) : 0;
-        return { total, passed, failed, skipped, successRate };
-    }
-    async saveRunResults(runResult) {
-        const resultsPath = join(this.currentRunDir, 'results.json');
-        writeFileSync(resultsPath, JSON.stringify(runResult, null, 2));
-        console.log(chalk.gray(`\n💾 Résultats sauvegardés: ${resultsPath}`));
-    }
-    displayResults(runResult) {
-        const { summary, duration } = runResult;
-        console.log(chalk.bold('\n📊 Résumé de l\'exécution:\n'));
-        console.log(`⏱️  Durée: ${duration}ms`);
-        console.log(`📈 Taux de succès: ${summary.successRate}%`);
-        console.log(chalk.green(`✅ Passés: ${summary.passed}`));
-        console.log(chalk.red(`❌ Échoués: ${summary.failed}`));
-        console.log(chalk.yellow(`⏭️  Ignorés: ${summary.skipped}`));
-        console.log(`📊 Total: ${summary.total}`);
-        if (summary.failed > 0) {
-            console.log(chalk.red('\n❌ Tests échoués:'));
-            runResult.results
-                .filter(r => r.status === 'failed')
-                .forEach(r => console.log(chalk.red(`  • ${r.name}: ${r.error}`)));
+    throw new Error('No pack file found. Create one with:\n' +
+        '  qa360 ask "test my API at https://api.example.com"\n' +
+        'Or specify a path:\n' +
+        '  qa360 run path/to/pack.yaml');
+}
+/**
+ * Display run results summary
+ */
+export function displayResults(result) {
+    console.log(chalk.bold('\n' + '═'.repeat(50)));
+    console.log(chalk.bold('📊 EXECUTION SUMMARY'));
+    console.log('═'.repeat(50));
+    console.log(`\n⏱️  Duration: ${result.duration}ms`);
+    console.log(`🎯 Trust Score: ${result.summary.trustScore}%`);
+    console.log(`📋 Gates: ${result.summary.passed}/${result.summary.total} passed`);
+    if (result.proofPath) {
+        console.log(`\n📄 Proof: ${result.proofPath}`);
+        console.log(chalk.gray('   Verify with: qa360 verify ' + result.proofPath));
+    }
+    if (result.success) {
+        console.log(chalk.green.bold('\n✅ All quality gates passed!'));
+    }
+    else {
+        console.log(chalk.red.bold(`\n❌ ${result.summary.failed} gate(s) failed`));
+        // Show failed gates
+        const failed = result.gates.filter((g) => !g.success);
+        if (failed.length > 0) {
+            console.log(chalk.red('\nFailed gates:'));
+            failed.forEach((g) => {
+                console.log(chalk.red(`  • ${g.gate}: ${g.error || 'Unknown error'}`));
+            });
         }
-        console.log(chalk.blue('\n💡 Prochaine étape: qa360 report --sign'));
     }
+    console.log('═'.repeat(50) + '\n');
 }
-export async function runCommand(packPath, options = {}) {
-    const runner = new QA360Runner();
+/**
+ * Main run command
+ */
+export async function runCommand(packArg, options = {}) {
     try {
-        await runner.run(packPath, options);
+        // Step 1: Find pack file
+        const packPath = findPackFile(packArg);
+        console.log(chalk.blue(`\n📦 Loading pack: ${packPath}`));
+        // Step 2: Load and validate pack
+        const pack = await loadPack(packPath);
+        console.log(chalk.green(`   ✅ Pack loaded: ${pack.name} v${pack.version}`));
+        console.log(chalk.gray(`   Gates: ${pack.gates.join(', ')}`));
+        // Step 3: Dry run check
+        if (options.dryRun) {
+            console.log(chalk.yellow('\n🔍 Dry run mode - no tests executed'));
+            console.log(chalk.gray('   Remove --dry-run to execute tests'));
+            return;
+        }
+        // Step 4: Create and run Phase3Runner
+        const workingDir = process.cwd();
+        const outputDir = options.output
+            ? resolve(options.output)
+            : join(workingDir, '.qa360', 'runs');
+        const runner = new Phase3Runner({
+            workingDir,
+            pack,
+            outputDir,
+        });
+        const result = await runner.run();
+        // Step 5: Display results
+        displayResults(result);
+        // Step 6: Exit with appropriate code
+        process.exit(result.success ? 0 : 1);
     }
     catch (error) {
-        console.error(chalk.red('❌ Échec de l\'exécution:'), error);
+        console.error(chalk.red('\n❌ Execution failed:'));
+        console.error(chalk.red(`   ${error instanceof Error ? error.message : 'Unknown error'}`));
+        if (options.verbose && error instanceof Error && error.stack) {
+            console.error(chalk.gray('\nStack trace:'));
+            console.error(chalk.gray(error.stack));
+        }
         process.exit(1);
     }
 }
+// Export for CLI integration
+export default runCommand;

package/dist/commands/secrets.js

@@ -130,7 +130,7 @@ export class QA360Secrets {
                         type: 'list',
                         name: 'secretName',
                         message: 'Secret à supprimer:',
-                        choices: secrets.map((s) => s.name)
+                        choices: secrets.map(s => s.name)
                     }]);
                 name = selectAnswer.secretName;
             }

package/dist/commands/verify.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../../src/commands/verify.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAcH;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAiGD;;GAEG;AACH,wBAAsB,YAAY,CAChC,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,aAAkB,GAC1B,OAAO,CAAC,MAAM,CAAC,CA8BjB;AAED;;GAEG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,aAAkB,GAC1B,OAAO,CAAC,MAAM,CAAC,CA6EjB;AAED;;GAEG;AACH,wBAAsB,aAAa,CACjC,OAAO,CAAC,EAAE,MAAM,EAChB,OAAO,GAAE,aAAkB,GAC1B,OAAO,CAAC,IAAI,CAAC,CA2Bf"}
+{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../../src/commands/verify.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAeH;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAqGD;;GAEG;AACH,wBAAsB,YAAY,CAChC,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,aAAkB,GAC1B,OAAO,CAAC,MAAM,CAAC,CAgDjB;AAED;;GAEG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,aAAkB,GAC1B,OAAO,CAAC,MAAM,CAAC,CA6EjB;AAED;;GAEG;AACH,wBAAsB,aAAa,CACjC,OAAO,CAAC,EAAE,MAAM,EAChB,OAAO,GAAE,aAAkB,GAC1B,OAAO,CAAC,IAAI,CAAC,CA2Bf"}

package/dist/commands/verify.js

@@ -14,7 +14,7 @@ import { readFileSync, existsSync, readdirSync, statSync } from 'fs';
 import { join, resolve, basename } from 'path';
 import chalk from 'chalk';
 // Import from core
-import { verifyProofFile, VerificationCode, } from 'qa360-core';
+import { verifyProofFile, verifyPhase3Proof, VerificationCode, } from 'qa360-core';
 /**
  * Format verification result for human-readable output
  */
@@ -83,12 +83,17 @@ function findProofFiles(dirPath) {
         for (const entry of entries) {
             const fullPath = join(dirPath, entry);
             const stat = statSync(fullPath);
-            if (stat.isFile() && entry.endsWith('.json')) {
-                // Check if it looks like a proof bundle
+            if (stat.isFile() && entry.endsWith('-proof.json')) {
+                files.push(fullPath);
+            }
+            else if (stat.isFile() && entry.endsWith('.json')) {
+                // Check if it looks like a proof bundle (either format)
                 try {
                     const content = readFileSync(fullPath, 'utf-8');
                     const json = JSON.parse(content);
-                    if (json.spec === 'qa360.proof.v1') {
+                    // Support both RFC format (spec) and Phase3 format (version + signature)
+                    if (json.spec === 'qa360.proof.v1' ||
+                        (json.version && json.signature && json.runId)) {
                         files.push(fullPath);
                     }
                 }
@@ -113,14 +118,32 @@ export async function verifySingle(filePath, options = {}) {
         return 1;
     }
     try {
-        const result = await verifyProofFile(absolutePath);
+        // Detect proof format
+        const content = readFileSync(absolutePath, 'utf-8');
+        const json = JSON.parse(content);
+        let result;
+        if (json.spec === 'qa360.proof.v1') {
+            // RFC format
+            result = await verifyProofFile(absolutePath);
+        }
+        else if (json.version && json.signature && json.runId) {
+            // Phase3 format
+            result = await verifyPhase3Proof(absolutePath);
+        }
+        else {
+            result = {
+                valid: false,
+                code: VerificationCode.PROOF_MALFORMED,
+                message: 'Unknown proof format',
+            };
+        }
         if (options.json) {
             formatJSON(result);
         }
         else {
             formatResult(result, filePath);
         }
-        return result.code;
+        return result.valid ? 0 : result.code;
     }
     catch (error) {
         if (options.json) {

package/dist/index.js

@@ -7,14 +7,21 @@
  */
 import { Command } from 'commander';
 import chalk from 'chalk';
-import { version } from '../package.json';
-import { doctorCommand } from './commands/doctor';
-import { askCommand } from './commands/ask';
-import { runCommand } from './commands/run';
-import { reportCommand } from './commands/report';
-import { verifyCommand } from './commands/verify';
-import { packValidateCommand, packLintCommand, packMigrateCommand } from './commands/pack';
-import { secretsAddCommand, secretsListCommand, secretsRemoveCommand, secretsDoctorCommand, secretsExportCommand } from './commands/secrets';
+import { readFileSync } from 'fs';
+import { join, dirname } from 'path';
+import { fileURLToPath } from 'url';
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = dirname(__filename);
+const packageJson = JSON.parse(readFileSync(join(__dirname, '../package.json'), 'utf8'));
+const version = packageJson.version;
+import { doctorCommand } from './commands/doctor.js';
+import { askCommand } from './commands/ask.js';
+import { runCommand } from './commands/run.js';
+import { reportCommand } from './commands/report.js';
+import { verifyCommand } from './commands/verify.js';
+import { packValidateCommand, packLintCommand, packMigrateCommand } from './commands/pack.js';
+import { secretsAddCommand, secretsListCommand, secretsRemoveCommand, secretsDoctorCommand, secretsExportCommand } from './commands/secrets.js';
+import { createHistoryCommands } from './commands/history.js';
 const program = new Command();
 program
     .name('qa360')
@@ -187,6 +194,8 @@ program
     console.log(chalk.blue('📦 QA360 Proof Bundle'));
     console.log(chalk.yellow('⚠️  Phase 3 implementation coming soon...'));
 });
+// History commands (Evidence Vault)
+program.addCommand(createHistoryCommands());
 // Show banner
 console.log(chalk.bold.blue('QA360 Core v' + version));
 console.log(chalk.gray('Transform software testing into verifiable, signed, and traceable proofs\n'));