qa360 1.2.2 → 1.3.1

package/README.md

@@ -32,33 +32,110 @@ npx qa360@latest doctor
 
 **Note**: On first run, Playwright browsers will be automatically downloaded (~100MB). This happens only once.
 
+## Quick Start
+
+### 1. Generate a test pack
+
+```bash
+# Option 1: Interactive mode (recommended for first-time users)
+qa360 init
+
+# Option 2: Use a template directly
+qa360 init --template api-basic --yes
+
+# Option 3: Copy an example
+qa360 examples copy api-basic
+qa360 examples list              # See all available examples
+```
+
+### 2. Run tests
+
+```bash
+qa360 run
+```
+
+### 3. Verify proof
+
+```bash
+qa360 verify .qa360/runs/
+```
+
 ## Usage
 
 ```bash
+# Generate test pack (interactive)
+qa360 init
+
+# Generate with template
+qa360 init --template api-basic
+qa360 init --template fullstack
+qa360 init --template security
+qa360 init --template complete
+
+# Examples commands
+qa360 examples list              # List all examples
+qa360 examples copy api-basic    # Copy example to qa360.yml
+qa360 examples show fullstack    # Preview example content
+
 # System health check
 qa360 doctor
 
 # Run test pack
-qa360 run test.yml
+qa360 run                    # Auto-detects qa360.yml
+qa360 run custom-pack.yml    # Use specific file
 
 # Verify proof bundle
+qa360 verify .qa360/runs/
 qa360 verify proof.json
 
+# View run history
+qa360 history list
+qa360 history show <run-id>
+
 # With JSON output (CI-friendly)
 qa360 doctor --json
 qa360 verify proof.json --json
 ```
 
+## Available Templates
+
+| Template | Description | Gates |
+|----------|-------------|-------|
+| **api-basic** | Simple API smoke tests | api_smoke |
+| **ui-basic** | Basic UI/E2E tests | ui |
+| **fullstack** | API + UI + Performance | api_smoke, ui, perf |
+| **security** | Security testing suite | sast, dast, secrets, deps |
+| **accessibility** | Accessibility testing | ui, a11y |
+| **complete** | All quality gates | All (8 gates) |
+
+## Example Files
+
+Pre-made examples are included in the package:
+
+```bash
+# List examples
+ls examples/
+
+# Copy an example
+cp examples/api-basic.yml qa360.yml
+
+# Run example directly
+qa360 run examples/api-basic.yml
+```
+
 ## Commands
 
 | Command | Description |
 |---------|-------------|
-| `doctor` | Check system health, auto-fix issues |
-| `verify` | Verify cryptographic proof bundles |
+| `init` | Generate test pack interactively |
+| `examples` | Manage example templates (list, copy, show) |
 | `run` | Execute test pack |
-| `serve` | Start observability server |
+| `verify` | Verify cryptographic proof bundles |
+| `doctor` | Check system health, auto-fix issues |
+| `history` | View run history and results |
 | `report` | Generate reports |
 | `secrets` | Manage encrypted secrets |
+| `pack` | Pack validation and linting |
 
 ## Exit Codes
 

package/dist/commands/examples.d.ts

@@ -0,0 +1,34 @@
+/**
+ * QA360 Examples Command - Manage example templates
+ *
+ * Usage:
+ *   qa360 examples list
+ *   qa360 examples copy api-basic
+ *   qa360 examples show fullstack
+ */
+/**
+ * CLI options for examples command
+ */
+export interface ExamplesOptions {
+    output?: string;
+    force?: boolean;
+}
+/**
+ * List available examples
+ */
+export declare function examplesListCommand(): Promise<void>;
+/**
+ * Show example content
+ */
+export declare function examplesShowCommand(templateName: string): Promise<void>;
+/**
+ * Copy example to current directory
+ */
+export declare function examplesCopyCommand(templateName: string, options?: ExamplesOptions): Promise<void>;
+declare const _default: {
+    list: typeof examplesListCommand;
+    show: typeof examplesShowCommand;
+    copy: typeof examplesCopyCommand;
+};
+export default _default;
+//# sourceMappingURL=examples.d.ts.map

package/dist/commands/examples.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"examples.d.ts","sourceRoot":"","sources":["../../src/commands/examples.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAWH;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AA8DD;;GAEG;AACH,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,IAAI,CAAC,CAkCzD;AAED;;GAEG;AACH,wBAAsB,mBAAmB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAwC7E;AAED;;GAEG;AACH,wBAAsB,mBAAmB,CACvC,YAAY,EAAE,MAAM,EACpB,OAAO,GAAE,eAAoB,GAC5B,OAAO,CAAC,IAAI,CAAC,CA6Df;;;;;;AAED,wBAIE"}

package/dist/commands/examples.js

@@ -0,0 +1,190 @@
+/**
+ * QA360 Examples Command - Manage example templates
+ *
+ * Usage:
+ *   qa360 examples list
+ *   qa360 examples copy api-basic
+ *   qa360 examples show fullstack
+ */
+import { existsSync, readFileSync, writeFileSync, readdirSync } from 'fs';
+import { join, dirname } from 'path';
+import { fileURLToPath } from 'url';
+import chalk from 'chalk';
+import inquirer from 'inquirer';
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = dirname(__filename);
+/**
+ * Get path to examples directory
+ */
+function getExamplesDir() {
+    // In development: /Users/.../QA360/cli/src/commands -> ../../examples
+    // In production: /usr/local/lib/node_modules/qa360/dist/commands -> ../../examples
+    const examplesDir = join(__dirname, '../../examples');
+    if (!existsSync(examplesDir)) {
+        throw new Error(`Examples directory not found at: ${examplesDir}`);
+    }
+    return examplesDir;
+}
+/**
+ * Parse example file for metadata
+ */
+function parseExampleMetadata(filePath) {
+    try {
+        const content = readFileSync(filePath, 'utf-8');
+        const lines = content.split('\n');
+        // Extract description from first comment line
+        const descLine = lines.find(l => l.startsWith('# QA360 Example:'));
+        const description = descLine
+            ? descLine.replace('# QA360 Example:', '').trim()
+            : 'No description';
+        // Extract gates from content
+        const gatesMatch = content.match(/gates:\s*\n((?:\s*-\s*.+\n)*)/);
+        const gates = [];
+        if (gatesMatch) {
+            const gatesBlock = gatesMatch[1];
+            const gateLines = gatesBlock.match(/- (.+)/g);
+            if (gateLines) {
+                gates.push(...gateLines.map(line => line.replace('- ', '').trim()));
+            }
+        }
+        return {
+            name: filePath.split('/').pop()?.replace('.yml', '') || '',
+            description,
+            gates,
+        };
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * List available examples
+ */
+export async function examplesListCommand() {
+    try {
+        console.log(chalk.bold.cyan('\n📚 Available QA360 Examples\n'));
+        const examplesDir = getExamplesDir();
+        const files = readdirSync(examplesDir)
+            .filter(f => f.endsWith('.yml') && f !== 'README.md')
+            .sort();
+        if (files.length === 0) {
+            console.log(chalk.yellow('No examples found.'));
+            return;
+        }
+        files.forEach(file => {
+            const filePath = join(examplesDir, file);
+            const metadata = parseExampleMetadata(filePath);
+            if (metadata) {
+                const templateName = file.replace('.yml', '');
+                console.log(chalk.bold.green(`📄 ${templateName}`));
+                console.log(chalk.gray(`   ${metadata.description}`));
+                console.log(chalk.blue(`   Gates: ${metadata.gates.join(', ')}`));
+                console.log(chalk.gray(`   Copy: qa360 examples copy ${templateName}\n`));
+            }
+        });
+        console.log(chalk.cyan('💡 Tip: Use "qa360 examples copy <name>" to copy an example\n'));
+    }
+    catch (error) {
+        console.error(chalk.red('\n❌ Failed to list examples:'));
+        console.error(chalk.red(`   ${error instanceof Error ? error.message : 'Unknown error'}`));
+        process.exit(1);
+    }
+}
+/**
+ * Show example content
+ */
+export async function examplesShowCommand(templateName) {
+    try {
+        if (!templateName) {
+            console.error(chalk.red('\n❌ Example name required'));
+            console.log(chalk.gray('   Usage: qa360 examples show <name>'));
+            console.log(chalk.gray('   Run "qa360 examples list" to see available examples\n'));
+            process.exit(1);
+        }
+        const examplesDir = getExamplesDir();
+        const fileName = templateName.endsWith('.yml') ? templateName : `${templateName}.yml`;
+        const filePath = join(examplesDir, fileName);
+        if (!existsSync(filePath)) {
+            console.error(chalk.red(`\n❌ Example not found: ${templateName}`));
+            console.log(chalk.gray('   Run "qa360 examples list" to see available examples\n'));
+            process.exit(1);
+        }
+        const content = readFileSync(filePath, 'utf-8');
+        const metadata = parseExampleMetadata(filePath);
+        console.log(chalk.bold.cyan(`\n📄 Example: ${templateName}\n`));
+        if (metadata) {
+            console.log(chalk.gray(`Description: ${metadata.description}`));
+            console.log(chalk.gray(`Gates: ${metadata.gates.join(', ')}\n`));
+        }
+        console.log(chalk.dim('─'.repeat(60)));
+        console.log(content);
+        console.log(chalk.dim('─'.repeat(60)));
+        console.log(chalk.cyan(`\n💡 Copy this example: qa360 examples copy ${templateName}\n`));
+    }
+    catch (error) {
+        console.error(chalk.red('\n❌ Failed to show example:'));
+        console.error(chalk.red(`   ${error instanceof Error ? error.message : 'Unknown error'}`));
+        process.exit(1);
+    }
+}
+/**
+ * Copy example to current directory
+ */
+export async function examplesCopyCommand(templateName, options = {}) {
+    try {
+        if (!templateName) {
+            console.error(chalk.red('\n❌ Example name required'));
+            console.log(chalk.gray('   Usage: qa360 examples copy <name>'));
+            console.log(chalk.gray('   Run "qa360 examples list" to see available examples\n'));
+            process.exit(1);
+        }
+        const examplesDir = getExamplesDir();
+        const fileName = templateName.endsWith('.yml') ? templateName : `${templateName}.yml`;
+        const sourcePath = join(examplesDir, fileName);
+        if (!existsSync(sourcePath)) {
+            console.error(chalk.red(`\n❌ Example not found: ${templateName}`));
+            console.log(chalk.gray('   Run "qa360 examples list" to see available examples\n'));
+            process.exit(1);
+        }
+        // Determine output path
+        const outputFile = options.output || join(process.cwd(), 'qa360.yml');
+        // Check if file exists
+        if (existsSync(outputFile) && !options.force) {
+            const overwrite = await inquirer.prompt([
+                {
+                    type: 'confirm',
+                    name: 'overwrite',
+                    message: `File ${outputFile} already exists. Overwrite?`,
+                    default: false,
+                },
+            ]);
+            if (!overwrite.overwrite) {
+                console.log(chalk.yellow('\n⚠️  Aborted. Use --force to overwrite.\n'));
+                return;
+            }
+        }
+        // Copy file
+        const content = readFileSync(sourcePath, 'utf-8');
+        writeFileSync(outputFile, content, 'utf-8');
+        console.log(chalk.green.bold('\n✅ Example copied successfully!'));
+        console.log(chalk.gray(`\n📄 File: ${outputFile}`));
+        const metadata = parseExampleMetadata(sourcePath);
+        if (metadata) {
+            console.log(chalk.gray(`📋 Gates: ${metadata.gates.join(', ')}`));
+        }
+        console.log(chalk.cyan('\n📚 Next steps:'));
+        console.log(chalk.gray('   1. Edit qa360.yml to customize for your project'));
+        console.log(chalk.gray('   2. Run: qa360 run'));
+        console.log(chalk.gray('   3. Verify: qa360 verify .qa360/runs/\n'));
+    }
+    catch (error) {
+        console.error(chalk.red('\n❌ Failed to copy example:'));
+        console.error(chalk.red(`   ${error instanceof Error ? error.message : 'Unknown error'}`));
+        process.exit(1);
+    }
+}
+export default {
+    list: examplesListCommand,
+    show: examplesShowCommand,
+    copy: examplesCopyCommand,
+};

package/dist/commands/init.d.ts

@@ -0,0 +1,66 @@
+/**
+ * QA360 Init Command - Interactive pack generator
+ *
+ * Usage:
+ *   qa360 init
+ *   qa360 init --template api-basic
+ *   qa360 init --output custom-pack.yml
+ */
+/**
+ * CLI options for init command
+ */
+export interface InitOptions {
+    template?: string;
+    output?: string;
+    force?: boolean;
+    yes?: boolean;
+}
+/**
+ * Available templates
+ */
+export declare const TEMPLATES: {
+    'api-basic': {
+        name: string;
+        description: string;
+        gates: string[];
+    };
+    'ui-basic': {
+        name: string;
+        description: string;
+        gates: string[];
+    };
+    fullstack: {
+        name: string;
+        description: string;
+        gates: string[];
+    };
+    security: {
+        name: string;
+        description: string;
+        gates: string[];
+    };
+    complete: {
+        name: string;
+        description: string;
+        gates: string[];
+    };
+};
+/**
+ * Gate descriptions
+ */
+export declare const GATE_DESCRIPTIONS: {
+    api_smoke: string;
+    ui: string;
+    a11y: string;
+    perf: string;
+    sast: string;
+    dast: string;
+    secrets: string;
+    deps: string;
+};
+/**
+ * Main init command
+ */
+export declare function initCommand(options?: InitOptions): Promise<void>;
+export default initCommand;
+//# sourceMappingURL=init.d.ts.map

package/dist/commands/init.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AASH;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,GAAG,CAAC,EAAE,OAAO,CAAC;CACf;AAED;;GAEG;AACH,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;CA0BrB,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;CAS7B,CAAC;AAkNF;;GAEG;AACH,wBAAsB,WAAW,CAAC,OAAO,GAAE,WAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAwE1E;AAED,eAAe,WAAW,CAAC"}

package/dist/commands/init.js

@@ -0,0 +1,307 @@
+/**
+ * QA360 Init Command - Interactive pack generator
+ *
+ * Usage:
+ *   qa360 init
+ *   qa360 init --template api-basic
+ *   qa360 init --output custom-pack.yml
+ */
+import { existsSync, writeFileSync, mkdirSync } from 'fs';
+import { join, resolve } from 'path';
+import chalk from 'chalk';
+import inquirer from 'inquirer';
+import { dump } from 'js-yaml';
+/**
+ * Available templates
+ */
+export const TEMPLATES = {
+    'api-basic': {
+        name: 'API Basic',
+        description: 'Simple API smoke tests (REST/GraphQL)',
+        gates: ['api_smoke'],
+    },
+    'ui-basic': {
+        name: 'UI Basic',
+        description: 'Basic UI/E2E browser tests',
+        gates: ['ui'],
+    },
+    'fullstack': {
+        name: 'Full Stack',
+        description: 'API + UI + Performance tests',
+        gates: ['api_smoke', 'ui', 'perf'],
+    },
+    'security': {
+        name: 'Security',
+        description: 'SAST, DAST, secrets scanning, dependency checks',
+        gates: ['sast', 'dast', 'secrets', 'deps'],
+    },
+    'complete': {
+        name: 'Complete',
+        description: 'All quality gates (API, UI, Performance, Security, Accessibility)',
+        gates: ['api_smoke', 'ui', 'a11y', 'perf', 'sast', 'dast', 'secrets', 'deps'],
+    },
+};
+/**
+ * Gate descriptions
+ */
+export const GATE_DESCRIPTIONS = {
+    api_smoke: 'API smoke tests (REST/GraphQL health checks)',
+    ui: 'UI/E2E tests (browser automation)',
+    a11y: 'Accessibility tests (WCAG compliance)',
+    perf: 'Performance tests (load/stress testing)',
+    sast: 'Static security analysis (code scanning)',
+    dast: 'Dynamic security testing (runtime scanning)',
+    secrets: 'Secrets detection (credential scanning)',
+    deps: 'Dependency vulnerability checks',
+};
+/**
+ * Interactive prompts
+ */
+async function promptForConfig() {
+    const answers = await inquirer.prompt([
+        {
+            type: 'input',
+            name: 'name',
+            message: 'Pack name:',
+            default: 'my-qa360-tests',
+            validate: (input) => input.length > 0 || 'Name is required',
+        },
+        {
+            type: 'list',
+            name: 'template',
+            message: 'Choose a template:',
+            choices: Object.entries(TEMPLATES).map(([key, value]) => ({
+                name: `${value.name} - ${value.description}`,
+                value: key,
+            })),
+        },
+        {
+            type: 'confirm',
+            name: 'customizeGates',
+            message: 'Customize quality gates?',
+            default: false,
+        },
+    ]);
+    let gates = TEMPLATES[answers.template].gates;
+    if (answers.customizeGates) {
+        const gateAnswers = await inquirer.prompt([
+            {
+                type: 'checkbox',
+                name: 'gates',
+                message: 'Select quality gates to enable:',
+                choices: Object.entries(GATE_DESCRIPTIONS).map(([key, desc]) => ({
+                    name: `${key} - ${desc}`,
+                    value: key,
+                    checked: gates.includes(key),
+                })),
+                validate: (input) => input.length > 0 || 'Select at least one gate',
+            },
+        ]);
+        gates = gateAnswers.gates;
+    }
+    // Prompt for target URLs based on selected gates
+    const targets = {};
+    if (gates.includes('api_smoke')) {
+        const apiAnswers = await inquirer.prompt([
+            {
+                type: 'input',
+                name: 'apiUrl',
+                message: 'API base URL:',
+                default: 'https://api.example.com',
+                validate: (input) => input.startsWith('http') || 'Must be a valid URL',
+            },
+            {
+                type: 'input',
+                name: 'smokeTests',
+                message: 'Smoke test endpoints (comma-separated):',
+                default: 'GET /health -> 200, GET /status -> 200',
+            },
+        ]);
+        targets.api = {
+            baseUrl: apiAnswers.apiUrl,
+            smoke: apiAnswers.smokeTests.split(',').map((s) => s.trim()),
+        };
+    }
+    if (gates.includes('ui') || gates.includes('a11y')) {
+        const uiAnswers = await inquirer.prompt([
+            {
+                type: 'input',
+                name: 'webUrl',
+                message: 'Web application URL:',
+                default: 'https://example.com',
+                validate: (input) => input.startsWith('http') || 'Must be a valid URL',
+            },
+            {
+                type: 'input',
+                name: 'pages',
+                message: 'Pages to test (comma-separated):',
+                default: 'https://example.com, https://example.com/about',
+            },
+        ]);
+        targets.web = {
+            baseUrl: uiAnswers.webUrl,
+            pages: uiAnswers.pages.split(',').map((s) => s.trim()),
+        };
+    }
+    // Build pack config
+    const pack = {
+        version: 1,
+        name: answers.name,
+        gates: gates,
+        targets,
+    };
+    // Add budgets if perf/a11y gates enabled
+    if (gates.includes('perf') || gates.includes('a11y')) {
+        pack.budgets = {};
+        if (gates.includes('perf')) {
+            pack.budgets.perf_p95_ms = 2000;
+        }
+        if (gates.includes('a11y')) {
+            pack.budgets.a11y_min = 90;
+        }
+    }
+    // Add security config if security gates enabled
+    if (gates.some((g) => ['sast', 'dast', 'secrets', 'deps'].includes(g))) {
+        pack.security = {};
+        if (gates.includes('sast')) {
+            pack.security.sast = {
+                max_critical: 0,
+                max_high: 3,
+            };
+        }
+        if (gates.includes('dast')) {
+            pack.security.dast = {
+                max_high: 5,
+            };
+        }
+    }
+    return pack;
+}
+/**
+ * Generate pack from template
+ */
+function generateFromTemplate(templateKey, name) {
+    const template = TEMPLATES[templateKey];
+    if (!template) {
+        throw new Error(`Unknown template: ${templateKey}`);
+    }
+    const pack = {
+        version: 1,
+        name: name || `${templateKey}-tests`,
+        gates: template.gates,
+        targets: {},
+    };
+    // Add default targets based on gates
+    if (template.gates.includes('api_smoke')) {
+        pack.targets.api = {
+            baseUrl: 'https://api.example.com',
+            smoke: [
+                'GET /health -> 200',
+                'GET /status -> 200',
+            ],
+        };
+    }
+    if (template.gates.includes('ui') || template.gates.includes('a11y')) {
+        pack.targets.web = {
+            baseUrl: 'https://example.com',
+            pages: [
+                'https://example.com',
+            ],
+        };
+    }
+    // Add budgets
+    if (template.gates.includes('perf') || template.gates.includes('a11y')) {
+        pack.budgets = {};
+        if (template.gates.includes('perf')) {
+            pack.budgets.perf_p95_ms = 2000;
+        }
+        if (template.gates.includes('a11y')) {
+            pack.budgets.a11y_min = 90;
+        }
+    }
+    // Add security config
+    if (template.gates.some((g) => ['sast', 'dast', 'secrets', 'deps'].includes(g))) {
+        pack.security = {};
+        if (template.gates.includes('sast')) {
+            pack.security.sast = {
+                max_critical: 0,
+                max_high: 3,
+            };
+        }
+        if (template.gates.includes('dast')) {
+            pack.security.dast = {
+                max_high: 5,
+            };
+        }
+    }
+    return pack;
+}
+/**
+ * Main init command
+ */
+export async function initCommand(options = {}) {
+    try {
+        console.log(chalk.bold.cyan('\n🚀 QA360 Pack Generator\n'));
+        // Determine output file
+        const outputFile = options.output
+            ? resolve(options.output)
+            : join(process.cwd(), 'qa360.yml');
+        // Check if file exists
+        if (existsSync(outputFile) && !options.force) {
+            const overwrite = await inquirer.prompt([
+                {
+                    type: 'confirm',
+                    name: 'overwrite',
+                    message: `File ${outputFile} already exists. Overwrite?`,
+                    default: false,
+                },
+            ]);
+            if (!overwrite.overwrite) {
+                console.log(chalk.yellow('\n⚠️  Aborted. Use --force to overwrite.'));
+                return;
+            }
+        }
+        // Generate pack config
+        let pack;
+        if (options.template) {
+            // Use template directly
+            pack = generateFromTemplate(options.template);
+            console.log(chalk.green(`✅ Using template: ${TEMPLATES[options.template]?.name || options.template}`));
+        }
+        else if (options.yes) {
+            // Use default template (api-basic)
+            pack = generateFromTemplate('api-basic');
+            console.log(chalk.green('✅ Using default template: API Basic'));
+        }
+        else {
+            // Interactive mode
+            pack = await promptForConfig();
+        }
+        // Convert to YAML
+        const yaml = dump(pack, {
+            indent: 2,
+            lineWidth: 120,
+            noRefs: true,
+        });
+        // Ensure directory exists
+        const dir = resolve(outputFile, '..');
+        if (!existsSync(dir)) {
+            mkdirSync(dir, { recursive: true });
+        }
+        // Write file
+        writeFileSync(outputFile, yaml, 'utf-8');
+        console.log(chalk.green.bold('\n✅ Pack created successfully!'));
+        console.log(chalk.gray(`\n📄 File: ${outputFile}`));
+        console.log(chalk.gray(`📋 Gates: ${pack.gates?.join(', ')}`));
+        console.log(chalk.cyan('\n📚 Next steps:'));
+        console.log(chalk.gray('   1. Edit the pack file to customize your tests'));
+        console.log(chalk.gray('   2. Run: qa360 run'));
+        console.log(chalk.gray('   3. View results: qa360 verify .qa360/runs/\n'));
+    }
+    catch (error) {
+        console.error(chalk.red('\n❌ Init failed:'));
+        console.error(chalk.red(`   ${error instanceof Error ? error.message : 'Unknown error'}`));
+        process.exit(1);
+    }
+}
+export default initCommand;

package/dist/commands/run.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../src/commands/run.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAMH,OAAO,EAAgB,KAAK,eAAe,EAAkC,KAAK,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAEzH;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED;;GAEG;AACH,wBAAsB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAwBtE;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CA0BrD;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,eAAe,GAAG,IAAI,CA8B5D;AAED;;GAEG;AACH,wBAAsB,UAAU,CAC9B,OAAO,CAAC,EAAE,MAAM,EAChB,OAAO,GAAE,UAAe,GACvB,OAAO,CAAC,IAAI,CAAC,CAiDf;AAGD,eAAe,UAAU,CAAC"}
+{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../src/commands/run.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAMH,OAAO,EAAgB,KAAK,eAAe,EAAkC,KAAK,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAEzH;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED;;GAEG;AACH,wBAAsB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAsCtE;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CA0BrD;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,eAAe,GAAG,IAAI,CA+B5D;AAED;;GAEG;AACH,wBAAsB,UAAU,CAC9B,OAAO,CAAC,EAAE,MAAM,EAChB,OAAO,GAAE,UAAe,GACvB,OAAO,CAAC,IAAI,CAAC,CAiDf;AAGD,eAAe,UAAU,CAAC"}

package/dist/commands/run.js

@@ -24,7 +24,23 @@ export async function loadPack(packPath) {
     const validator = new PackValidator();
     const validation = await validator.validate(pack);
     if (!validation.valid) {
-        const errors = validation.errors?.map(e => `  • ${e}`).join('\n');
+        const errors = validation.errors?.map(e => {
+            // Handle both string and object errors
+            if (typeof e === 'string') {
+                return `  • ${e}`;
+            }
+            else if (e && typeof e === 'object') {
+                // Extract meaningful info from error objects
+                const errObj = e;
+                if (errObj.message)
+                    return `  • ${errObj.message}`;
+                if (errObj.instancePath && errObj.message) {
+                    return `  • ${errObj.instancePath}: ${errObj.message}`;
+                }
+                return `  • ${JSON.stringify(e)}`;
+            }
+            return `  • ${String(e)}`;
+        }).join('\n') || '  • Unknown validation error';
         throw new Error(`Invalid pack configuration:\n${errors}`);
     }
     // Show warnings if any
@@ -83,7 +99,8 @@ export function displayResults(result) {
         if (failed.length > 0) {
             console.log(chalk.red('\nFailed gates:'));
             failed.forEach((g) => {
-                console.log(chalk.red(`  • ${g.gate}: ${g.error || 'Unknown error'}`));
+                const errorMessage = g.error || 'Test failed - check logs above for details';
+                console.log(chalk.red(`  • ${g.gate}: ${errorMessage}`));
             });
         }
     }

package/dist/core/adapters/playwright-api.d.ts

@@ -29,6 +29,7 @@ export interface ApiSmokeResult {
         avgResponseTime: number;
     };
     junit?: string;
+    error?: string;
 }
 export declare class PlaywrightApiAdapter {
     private browser?;

package/dist/core/adapters/playwright-api.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"playwright-api.d.ts","sourceRoot":"","sources":["../../../src/core/adapters/playwright-api.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAG7D,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,SAAS,CAAC;IAClB,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,IAAI,CAAC,EAAE,GAAG,CAAC;CACZ;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,aAAa,EAAE,CAAC;IACzB,OAAO,EAAE;QACP,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,MAAM,CAAC;QACf,eAAe,EAAE,MAAM,CAAC;KACzB,CAAC;IACF,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,OAAO,CAAC,CAAU;IAC1B,OAAO,CAAC,OAAO,CAAC,CAAiB;IACjC,OAAO,CAAC,QAAQ,CAAmB;;IAMnC;;OAEG;IACG,aAAa,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC;IAmCnE;;OAEG;YACW,cAAc;IA0E5B;;OAEG;IACH,OAAO,CAAC,aAAa;IA4BrB;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAexB;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAexB;;OAEG;IACH,OAAO,CAAC,aAAa;IA6BrB;;OAEG;IACH,OAAO,CAAC,SAAS;IASjB;;OAEG;YACW,YAAY;IAc1B;;OAEG;YACW,OAAO;IASrB;;OAEG;IACH,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,SAAS,GAAG;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,EAAE,CAAA;KAAE;CA0B/E"}
+{"version":3,"file":"playwright-api.d.ts","sourceRoot":"","sources":["../../../src/core/adapters/playwright-api.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAG7D,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,SAAS,CAAC;IAClB,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,IAAI,CAAC,EAAE,GAAG,CAAC;CACZ;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,aAAa,EAAE,CAAC;IACzB,OAAO,EAAE;QACP,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,MAAM,CAAC;QACf,eAAe,EAAE,MAAM,CAAC;KACzB,CAAC;IACF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,OAAO,CAAC,CAAU;IAC1B,OAAO,CAAC,OAAO,CAAC,CAAiB;IACjC,OAAO,CAAC,QAAQ,CAAmB;;IAMnC;;OAEG;IACG,aAAa,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC;IAgDnE;;OAEG;YACW,cAAc;IA0E5B;;OAEG;IACH,OAAO,CAAC,aAAa;IA4BrB;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAexB;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAexB;;OAEG;IACH,OAAO,CAAC,aAAa;IA6BrB;;OAEG;IACH,OAAO,CAAC,SAAS;IASjB;;OAEG;YACW,YAAY;IAc1B;;OAEG;YACW,OAAO;IASrB;;OAEG;IACH,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,SAAS,GAAG;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,EAAE,CAAA;KAAE;CA0B/E"}

package/dist/core/adapters/playwright-api.js

@@ -27,16 +27,28 @@ export class PlaywrightApiAdapter {
                     console.log(`  ✅ ${testResult.method} ${testResult.endpoint} -> ${testResult.status} (${testResult.responseTime}ms)`);
                 }
                 else {
-                    console.log(`  ❌ ${testResult.method} ${testResult.endpoint} -> ${testResult.error}`);
+                    // Show clear error message with actual vs expected
+                    const errorMsg = testResult.error || 'Request failed';
+                    console.log(`  ❌ ${testResult.method} ${testResult.endpoint} -> ${errorMsg}`);
                 }
             }
             const summary = this.calculateSummary(results);
             const junit = this.generateJUnit(results);
+            // Generate error message from failed tests
+            let error;
+            if (summary.failed > 0) {
+                const failedTests = results.filter(r => !r.success);
+                const errorMessages = failedTests.map(t => t.error).filter(Boolean);
+                error = errorMessages.length > 0
+                    ? `${summary.failed} endpoint(s) failed: ${errorMessages[0]}${errorMessages.length > 1 ? ` (and ${errorMessages.length - 1} more)` : ''}`
+                    : `${summary.failed} endpoint(s) failed`;
+            }
             return {
                 success: summary.failed === 0,
                 results,
                 summary,
-                junit
+                junit,
+                error
             };
         }
         finally {

package/dist/index.js

@@ -16,6 +16,8 @@ const packageJson = JSON.parse(readFileSync(join(__dirname, '../package.json'),
 const version = packageJson.version;
 import { doctorCommand } from './commands/doctor.js';
 import { askCommand } from './commands/ask.js';
+import { initCommand } from './commands/init.js';
+import { examplesListCommand, examplesCopyCommand, examplesShowCommand } from './commands/examples.js';
 import { runCommand } from './commands/run.js';
 import { reportCommand } from './commands/report.js';
 import { verifyCommand } from './commands/verify.js';
@@ -37,6 +39,40 @@ program
     .action(async (options) => {
     await doctorCommand(options);
 });
+program
+    .command('init')
+    .description('Generate pack.yml interactively')
+    .option('--template <name>', 'Use template: api-basic, ui-basic, fullstack, security, complete')
+    .option('--output <file>', 'Output file path', 'qa360.yml')
+    .option('--force', 'Overwrite existing file')
+    .option('-y, --yes', 'Skip prompts and use defaults')
+    .action(async (options) => {
+    await initCommand(options);
+});
+// Examples commands
+const examplesCommand = program
+    .command('examples')
+    .description('Manage example templates');
+examplesCommand
+    .command('list')
+    .description('List all available example templates')
+    .action(async () => {
+    await examplesListCommand();
+});
+examplesCommand
+    .command('copy <template>')
+    .description('Copy example template to current directory')
+    .option('--output <file>', 'Output file path', 'qa360.yml')
+    .option('--force', 'Overwrite existing file')
+    .action(async (template, options) => {
+    await examplesCopyCommand(template, options);
+});
+examplesCommand
+    .command('show <template>')
+    .description('Show example template content')
+    .action(async (template) => {
+    await examplesShowCommand(template);
+});
 program
     .command('ask [query]')
     .description('Natural language test requests - generates pack.yml')

package/examples/README.md

@@ -0,0 +1,122 @@
+# QA360 Examples
+
+This directory contains example pack files for different testing scenarios.
+
+## Quick Start
+
+Copy an example to your project:
+
+```bash
+# Copy API basic example
+cp examples/api-basic.yml qa360.yml
+
+# Edit and customize
+vim qa360.yml
+
+# Run tests
+qa360 run
+```
+
+## Available Examples
+
+### 1. **api-basic.yml** - API Smoke Tests
+Simple REST/GraphQL health checks.
+
+**Gates**: `api_smoke`
+
+**Use case**: Verify API endpoints are responding correctly
+
+```bash
+qa360 run examples/api-basic.yml
+```
+
+---
+
+### 2. **ui-basic.yml** - UI/E2E Tests
+Basic browser automation tests.
+
+**Gates**: `ui`
+
+**Use case**: Test web pages load correctly
+
+```bash
+qa360 run examples/ui-basic.yml
+```
+
+---
+
+### 3. **fullstack.yml** - Full Stack Tests
+API + UI + Performance testing.
+
+**Gates**: `api_smoke`, `ui`, `perf`
+
+**Use case**: Complete application testing with Docker Compose integration
+
+```bash
+qa360 run examples/fullstack.yml
+```
+
+---
+
+### 4. **security.yml** - Security Suite
+Comprehensive security scanning.
+
+**Gates**: `sast`, `dast`, `secrets`, `deps`
+
+**Use case**: Security audit with vulnerability scanning
+
+```bash
+qa360 run examples/security.yml
+```
+
+---
+
+### 5. **accessibility.yml** - Accessibility Tests
+WCAG compliance testing.
+
+**Gates**: `ui`, `a11y`
+
+**Use case**: Ensure website meets accessibility standards
+
+```bash
+qa360 run examples/accessibility.yml
+```
+
+---
+
+### 6. **complete.yml** - Complete Test Suite
+All quality gates enabled.
+
+**Gates**: All (8 gates)
+
+**Use case**: Comprehensive quality assurance for production-ready applications
+
+```bash
+qa360 run examples/complete.yml
+```
+
+---
+
+## Interactive Generator
+
+Generate a custom pack with:
+
+```bash
+qa360 init
+```
+
+This will walk you through creating a pack file tailored to your needs.
+
+## Customization
+
+All examples use placeholder URLs. Replace with your actual endpoints:
+
+- `https://api.example.com` → Your API URL
+- `https://example.com` → Your web application URL
+- `http://localhost:3000` → Your local dev server
+
+## Learn More
+
+- [Pack Schema Documentation](https://github.com/xyqotech/qa360/blob/main/docs/pack-schema.md)
+- [Quality Gates Reference](https://github.com/xyqotech/qa360/blob/main/docs/gates.md)
+- [Full Documentation](https://github.com/xyqotech/qa360/blob/main/docs/README.md)

package/examples/accessibility.yml

@@ -0,0 +1,25 @@
+# QA360 Example: Accessibility Tests
+# WCAG compliance and accessibility testing
+
+version: 1
+name: "Accessibility Tests"
+
+gates:
+  - ui
+  - a11y
+
+targets:
+  web:
+    baseUrl: "https://example.com"
+    pages:
+      - "https://example.com"
+      - "https://example.com/about"
+      - "https://example.com/contact"
+
+# Accessibility budget
+budgets:
+  a11y_min: 90  # Minimum accessibility score (0-100)
+
+execution:
+  timeout: 60000
+  max_retries: 1

package/examples/api-basic.yml

@@ -0,0 +1,23 @@
+# QA360 Example: API Basic
+# Simple API smoke tests for REST/GraphQL endpoints
+
+version: 1
+name: "API Health Check"
+
+gates:
+  - api_smoke
+
+targets:
+  api:
+    baseUrl: "https://httpbin.org"
+    smoke:
+      - "GET /status/200 -> 200"
+      - "GET /json -> 200"
+      - "GET /uuid -> 200"
+      - "POST /post -> 200"
+
+# Optional: Execution settings
+execution:
+  timeout: 30000        # 30 seconds
+  max_retries: 2
+  on_failure: continue  # or 'stop'

package/examples/complete.yml

@@ -0,0 +1,59 @@
+# QA360 Example: Complete Test Suite
+# All quality gates enabled - comprehensive quality assurance
+
+version: 1
+name: "Complete QA Suite"
+
+gates:
+  - api_smoke  # API health checks
+  - ui         # Browser E2E tests
+  - a11y       # Accessibility (WCAG)
+  - perf       # Performance testing
+  - sast       # Static security analysis
+  - dast       # Dynamic security testing
+  - secrets    # Credentials scanning
+  - deps       # Dependency vulnerabilities
+
+targets:
+  api:
+    baseUrl: "https://api.example.com"
+    smoke:
+      - "GET /health -> 200"
+      - "GET /status -> 200"
+      - "POST /login -> 200"
+
+  web:
+    baseUrl: "https://example.com"
+    pages:
+      - "https://example.com"
+      - "https://example.com/dashboard"
+
+# Quality budgets
+budgets:
+  perf_p95_ms: 2000  # P95 latency budget
+  a11y_min: 90       # Minimum accessibility score
+
+# Security thresholds
+security:
+  sast:
+    max_critical: 0
+    max_high: 3
+
+  dast:
+    max_high: 5
+
+# Docker Compose integration
+hooks:
+  beforeAll:
+    - compose: up
+      timeout: 30000
+    - wait_on: http://localhost:3000
+
+  afterAll:
+    - compose: down
+
+# Execution settings
+execution:
+  timeout: 120000     # 2 minutes
+  max_retries: 2
+  on_failure: continue

package/examples/fullstack.yml

@@ -0,0 +1,42 @@
+# QA360 Example: Full Stack
+# Complete testing suite with API, UI, and Performance
+
+version: 1
+name: "Full Stack Tests"
+
+gates:
+  - api_smoke
+  - ui
+  - perf
+
+targets:
+  api:
+    baseUrl: "https://httpbin.org"
+    smoke:
+      - "GET /status/200 -> 200"
+      - "GET /json -> 200"
+      - "POST /post -> 200"
+
+  web:
+    baseUrl: "https://example.com"
+    pages:
+      - "https://example.com"
+
+# Performance budgets
+budgets:
+  perf_p95_ms: 2000  # P95 latency must be < 2000ms
+
+# Hooks for local development
+hooks:
+  beforeAll:
+    - compose: up
+      timeout: 30000
+    - wait_on: http://localhost:3000
+
+  afterAll:
+    - compose: down
+
+execution:
+  timeout: 60000
+  max_retries: 2
+  on_failure: continue

package/examples/security.yml

@@ -0,0 +1,32 @@
+# QA360 Example: Security Suite
+# Comprehensive security testing (SAST, DAST, secrets, dependencies)
+
+version: 1
+name: "Security Test Suite"
+
+gates:
+  - sast     # Static Application Security Testing
+  - dast     # Dynamic Application Security Testing
+  - secrets  # Secrets detection
+  - deps     # Dependency vulnerability scanning
+
+targets:
+  api:
+    baseUrl: "https://api.example.com"
+
+  web:
+    baseUrl: "https://example.com"
+
+# Security thresholds
+security:
+  sast:
+    max_critical: 0  # Zero critical vulnerabilities allowed
+    max_high: 3      # Maximum 3 high-severity issues
+
+  dast:
+    max_high: 5      # Maximum 5 high-severity runtime issues
+
+# Execution settings
+execution:
+  timeout: 120000  # Security scans can take longer
+  on_failure: stop # Stop on first critical finding

package/examples/ui-basic.yml

@@ -0,0 +1,20 @@
+# QA360 Example: UI Basic
+# Basic UI/E2E browser tests
+
+version: 1
+name: "UI Browser Tests"
+
+gates:
+  - ui
+
+targets:
+  web:
+    baseUrl: "https://example.com"
+    pages:
+      - "https://example.com"
+      - "https://example.com/about"
+
+# Optional: Browser configuration
+execution:
+  timeout: 60000
+  max_retries: 1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "qa360",
-  "version": "1.2.2",
+  "version": "1.3.1",
   "description": "QA360 Proof CLI - Quality as Cryptographic Proof",
   "type": "module",
   "main": "dist/index.js",
@@ -27,8 +27,7 @@
     "prepublishOnly": "npm run build:bundle && sed -i.bak 's/\"qa360-core\": \"workspace:\\*\",//g' package.json && rm -f package.json.bak",
     "postpublish": "git checkout package.json 2>/dev/null || true",
     "publish:dry": "npm run build:bundle && sed -i.bak 's/\"qa360-core\": \"workspace:\\*\",//g' package.json && npm publish --dry-run; git checkout package.json",
-    "publish:real": "npm run build:bundle && npm publish --access public",
-    "postinstall": "npx playwright install chromium --with-deps 2>/dev/null || echo 'Playwright browsers will be installed on first run'"
+    "publish:real": "npm run build:bundle && npm publish --access public --provenance"
   },
   "dependencies": {
     "@playwright/test": "^1.49.0",