qa360 2.1.2 → 2.1.4

package/tests/run-pack.spec.ts

@@ -0,0 +1,58 @@
+// tests/run-pack.spec.ts
+import { test, expect } from '@playwright/test';
+
+test('Run httpbin → success via proxy', async ({ page }) => {
+  await page.goto('https://qa360-cloud-preview.vercel.app');
+  
+  // Wait for packs to load
+  await page.waitForSelector('.run-btn', { timeout: 10000 });
+  
+  // Click the first run button (should be httpbin)
+  await page.locator('.run-btn').first().click();
+  await expect(page.getByText(/Tests executed successfully|Tests failed/i)).toBeVisible({ timeout: 15000 });
+});
+
+test('Missing key never visible in client bundle', async ({ page }) => {
+  await page.goto('https://qa360-cloud-preview.vercel.app');
+  const html = await page.content();
+  expect(html).not.toContain('x-qa360-api-key');
+  expect(html).not.toContain('176402b75ec5a56176fc99a1139f3bd16268cd4b1e71798d5dd55c76f33b69de');
+});
+
+test('Rate limit handling', async ({ page }) => {
+  await page.goto('https://qa360-cloud-preview.vercel.app');
+  
+  // Wait for packs to load
+  await page.waitForSelector('.run-btn', { timeout: 10000 });
+  
+  // Run first pack
+  await page.locator('.run-btn').first().click();
+  await page.waitForTimeout(1000);
+  
+  // Should handle any rate limit gracefully
+  const status = page.locator('#status');
+  await expect(status).toBeVisible();
+  
+  // Check for either success or rate limit message
+  await expect(status).toHaveText(/Tests executed successfully|Rate limited|Tests failed/);
+});
+
+test('Button loading state', async ({ page }) => {
+  await page.goto('https://qa360-cloud-preview.vercel.app');
+  
+  // Wait for packs to load
+  await page.waitForSelector('.run-btn', { timeout: 10000 });
+  
+  const firstBtn = page.locator('.run-btn').first();
+  await firstBtn.click();
+  
+  // Button should show loading state
+  await expect(firstBtn).toHaveText('Running…');
+  await expect(firstBtn).toBeDisabled();
+  
+  // Wait for completion
+  await expect(page.getByText(/Tests executed successfully|Tests failed/i)).toBeVisible({ timeout: 15000 });
+  
+  // Button should be re-enabled
+  await expect(firstBtn).toBeEnabled();
+});

package/tsconfig.base.json

@@ -0,0 +1,15 @@
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "module": "ESNext",
+    "moduleResolution": "Bundler",
+    "strict": true,
+    "skipLibCheck": true,
+    "declaration": true,
+    "declarationMap": true,
+    "composite": true,
+    "esModuleInterop": true,
+    "allowSyntheticDefaultImports": true,
+    "resolveJsonModule": true
+  }
+}

package/tsconfig.build.json

@@ -0,0 +1,8 @@
+{
+  "files": [],
+  "references": [
+    { "path": "./core" },
+    { "path": "./cli" },
+    { "path": "./packages/mcp" }
+  ]
+}

package/tsconfig.json

@@ -0,0 +1,37 @@
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "module": "ESNext",
+    "lib": ["ES2022"],
+    "outDir": "./dist",
+    "strict": true,
+    "esModuleInterop": true,
+    "skipLibCheck": true,
+    "forceConsistentCasingInFileNames": true,
+    "declaration": true,
+    "sourceMap": true,
+    "resolveJsonModule": true,
+    "allowSyntheticDefaultImports": true,
+    "moduleResolution": "Bundler",
+    "types": ["node"],
+    "baseUrl": ".",
+    "paths": {
+      "@qa360/cli": ["./cli/src"],
+      "@qa360/core": ["./core/src"],
+      "@qa360/mcp": ["./packages/mcp/src"]
+    }
+  },
+  "include": [
+    "cli/src/**/*",
+    "core/src/**/*",
+    "packages/mcp/src/**/*"
+  ],
+  "exclude": [
+    "node_modules",
+    "dist",
+    "coverage",
+    "**/__tests__",
+    "**/*.test.ts",
+    "**/*.spec.ts"
+  ]
+}

package/tsconfig.test.json

@@ -0,0 +1,18 @@
+{
+  "extends": "./tsconfig.json",
+  "compilerOptions": {
+    "strict": false,
+    "noImplicitAny": false,
+    "noUnusedLocals": false,
+    "noUnusedParameters": false,
+    "skipLibCheck": true,
+    "types": ["node", "jest", "@types/jest"]
+  },
+  "include": [
+    "**/__tests__/**/*.ts",
+    "**/*.test.ts",
+    "**/*.spec.ts",
+    "jest.setup.js"
+  ],
+  "exclude": ["node_modules", "dist"]
+}

package/typedoc.json

@@ -0,0 +1,37 @@
+{
+  "$schema": "https://typedoc.org/schema.json",
+  "entryPoints": [
+    "core/src/index.ts",
+    "cli/src/index.ts"
+  ],
+  "out": "docs/api",
+  "name": "QA360 API Documentation",
+  "readme": "README.md",
+  "tsconfig": "tsconfig.json",
+  "exclude": [
+    "**/node_modules/**",
+    "**/dist/**",
+    "**/*.test.ts",
+    "**/__tests__/**",
+    "**/test/**",
+    "**/examples/**"
+  ],
+  "excludePrivate": true,
+  "excludeProtected": false,
+  "excludeInternal": true,
+  "categorizeByGroup": true,
+  "defaultCategory": "Other",
+  "categoryOrder": [
+    "Core",
+    "Adapters",
+    "AI",
+    "Auth",
+    "Flakiness",
+    "Retry",
+    "Vault",
+    "Proof",
+    "Security",
+    "CLI",
+    "*"
+  ]
+}

package/ui/README.md

@@ -0,0 +1,51 @@
+# QA360 UI Components
+
+> **⚠️ PLANNED - Phase 3**
+>
+> This directory is a placeholder for future UI development.
+> The components described below are planned but not yet implemented.
+> See [docs/ARCHITECTURE.md](../docs/ARCHITECTURE.md) for the overall roadmap.
+
+User interfaces for QA360 Core - both terminal and web-based.
+
+## Components
+
+### Terminal UI (TUI)
+- **tui/** - Rich terminal interface using blessed/ink
+- Interactive test execution and monitoring
+- Real-time progress visualization
+- Keyboard shortcuts for power users
+
+### Mini UI
+- **mini-ui/** - Lightweight local web interface
+- Browser-based test management
+- Visual proof verification
+- Embedded in CLI for `qa360 serve`
+
+## Design Principles
+
+- **Accessibility first**: Screen reader compatible
+- **Keyboard navigation**: Full functionality without mouse
+- **Responsive design**: Works on all screen sizes
+- **Offline capable**: No external dependencies
+
+## Development
+
+```bash
+# Terminal UI
+cd ui/tui/
+npm install
+npm run dev
+
+# Mini UI  
+cd ui/mini-ui/
+npm install
+npm run dev
+```
+
+## Technology Stack
+
+- **TUI**: blessed, blessed-contrib, ink
+- **Mini UI**: Vanilla JS, CSS Grid, Web Components
+- **Icons**: Lucide (self-hosted)
+- **Styling**: CSS custom properties

package/verify-proof.mjs

@@ -0,0 +1,60 @@
+#!/usr/bin/env node
+/**
+ * QA360 Proof Verification Script
+ * Usage: node verify-proof.mjs <proof.json>
+ */
+
+import { readFileSync } from 'fs';
+import { verify } from './core/dist/proof/signer.js';
+import { canonicalize } from './core/dist/proof/canonicalize.js';
+
+const proofPath = process.argv[2];
+
+if (!proofPath) {
+  console.log('Usage: node verify-proof.mjs <proof.json>');
+  console.log('Example: node verify-proof.mjs .qa360/test-runs/run-xxx-proof.json');
+  process.exit(1);
+}
+
+// Load the proof
+const proof = JSON.parse(readFileSync(proofPath, 'utf-8'));
+
+console.log('\n🔍 QA360 Proof Verification');
+console.log('='.repeat(50));
+console.log(`📄 File: ${proofPath}`);
+console.log(`🆔 Run ID: ${proof.runId}`);
+console.log(`📅 Timestamp: ${proof.timestamp}`);
+console.log(`🔐 Algorithm: ${proof.signature.algorithm}`);
+console.log(`🔑 Public Key: ${proof.signature.publicKey.substring(0, 20)}...`);
+console.log(`✍️  Signature: ${proof.signature.value.substring(0, 20)}...`);
+console.log('='.repeat(50));
+
+// Extract payload (without signature)
+const { signature, ...payload } = proof;
+
+// Canonicalize the payload for verification
+const canonicalPayload = canonicalize(payload);
+
+// Decode the public key from base64
+const publicKey = new Uint8Array(Buffer.from(signature.publicKey, 'base64'));
+
+// Verify the signature
+console.log('\n⏳ Verifying Ed25519 signature...\n');
+
+const isValid = verify(canonicalPayload, signature.value, publicKey);
+
+console.log('='.repeat(50));
+if (isValid) {
+  console.log('✅ SIGNATURE VALID');
+  console.log('');
+  console.log('   The proof is authentic and has not been tampered with.');
+  console.log(`   Trust Score: ${proof.execution.trustScore}%`);
+  console.log(`   Gates: ${proof.gates.length} (${proof.gates.filter(g => g.success).length} passed)`);
+} else {
+  console.log('❌ SIGNATURE INVALID');
+  console.log('');
+  console.log('   The proof has been modified or the signature is corrupted.');
+}
+console.log('='.repeat(50) + '\n');
+
+process.exit(isValid ? 0 : 1);

package/dist/cli-minimal.d.ts

@@ -1,6 +0,0 @@
-#!/usr/bin/env node
-/**
- * QA360 CLI - Minimal version for E2E tests
- * Only includes doctor and verify commands
- */
-export {};

package/dist/cli-minimal.js

@@ -1,36 +0,0 @@
-#!/usr/bin/env node
-/**
- * QA360 CLI - Minimal version for E2E tests
- * Only includes doctor and verify commands
- */
-import { Command } from 'commander';
-import { doctorCommand } from './commands/doctor.js';
-import { verifyCommand } from './commands/verify.js';
-const program = new Command();
-program
-    .name('qa360')
-    .description('QA360 Proof Bundle CLI')
-    .version('1.0.1');
-program
-    .command('doctor')
-    .description('Health check and auto-fix issues')
-    .option('--fix', 'Automatically fix detected issues')
-    .option('--json', 'Output results as JSON')
-    .option('--strict', 'Exit with code 1 on any error')
-    .action(async (options) => {
-    await doctorCommand(options);
-});
-program
-    .command('verify [proof]')
-    .description('Verify proof authenticity and integrity')
-    .option('--json', 'Output results as JSON')
-    .option('--verbose', 'Show detailed verification information')
-    .action(async (proof, options) => {
-    await verifyCommand(proof, options);
-});
-// Parse arguments (no banner for clean JSON output)
-program.parse();
-// Show help if no command provided
-if (!process.argv.slice(2).length) {
-    program.outputHelp();
-}

package/dist/commands/ai.d.ts

@@ -1,41 +0,0 @@
-/**
- * QA360 AI Command
- *
- * Manage AI provider integration for test generation.
- * Supports DeepSeek, Ollama, OpenAI, Anthropic with automatic selection.
- *
- * DeepSeek is recommended for best value (GPT-4 level at 95% lower cost).
- */
-import { Command } from 'commander';
-/**
- * List all available AI providers
- */
-export declare function aiListCommand(): Promise<void>;
-/**
- * Use a specific AI provider
- */
-export declare function aiUseCommand(provider: string, options?: {
-    verify?: boolean;
-}): Promise<void>;
-/**
- * Benchmark all available providers
- */
-export declare function aiBenchmarkCommand(options?: {
-    prompt?: string;
-}): Promise<void>;
-/**
- * Generate tests using the best available provider
- */
-export declare function aiGenerateCommand(prompt: string, options?: {
-    provider?: string;
-    type?: string;
-    json?: boolean;
-}): Promise<void>;
-/**
- * Show AI configuration
- */
-export declare function aiConfigCommand(): Promise<void>;
-/**
- * Create AI commands
- */
-export declare function createAICommands(): Command;