qa360 2.1.7 → 2.2.1

package/packages/mcp/tsconfig.json

@@ -0,0 +1,16 @@
+{
+  "extends": "../../tsconfig.base.json",
+  "compilerOptions": {
+    "outDir": "dist",
+    "rootDir": "src",
+    "composite": true,
+    "declaration": true,
+    "declarationMap": true,
+    "noImplicitAny": false
+  },
+  "include": ["src/**/*"],
+  "exclude": ["src/**/__tests__/**", "src/**/*.test.ts", "src/**/*.spec.ts"],
+  "references": [
+    { "path": "../../core" }
+  ]
+}

package/playwright.config.ts

@@ -0,0 +1,20 @@
+import { defineConfig, devices } from '@playwright/test';
+
+export default defineConfig({
+  testDir: './tests',
+  fullyParallel: true,
+  forbidOnly: !!process.env.CI,
+  retries: process.env.CI ? 2 : 0,
+  workers: process.env.CI ? 1 : undefined,
+  reporter: 'html',
+  use: {
+    baseURL: 'https://qa360-cloud-preview.vercel.app',
+    trace: 'on-first-retry',
+  },
+  projects: [
+    {
+      name: 'chromium',
+      use: { ...devices['Desktop Chrome'] },
+    },
+  ],
+});

package/pnpm-workspace.yaml

@@ -0,0 +1,4 @@
+packages:
+  - core
+  - cli
+  - packages/*

package/run-test-and-push.sh

@@ -0,0 +1,20 @@
+#!/bin/bash
+# Script pour tester et pousser les changements
+
+cd /Users/bassiroudiop/QA360
+
+echo "🧪 Running tests..."
+pnpm test
+
+if [ $? -eq 0 ]; then
+    echo ""
+    echo "✅ Tests passed! Committing and pushing..."
+    git add -A
+    git commit -m "fix: mock playwright in Jest to avoid ESM dynamic import errors on Node 18"
+    git push
+    echo ""
+    echo "🚀 Done! Check CI at: https://github.com/xyqotech/qa360/actions"
+else
+    echo ""
+    echo "❌ Tests failed. Please check the output above."
+fi

package/scripts/build-proof-cli.sh

@@ -0,0 +1,110 @@
+#!/bin/bash
+#
+# Build script for QA360 Proof CLI
+# Compiles core proof modules then CLI
+#
+
+set -e
+
+echo "🔨 Building QA360 Proof CLI..."
+echo ""
+
+# Step 1: Clean
+echo "1️⃣  Cleaning dist directories..."
+rm -rf core/dist cli/dist
+echo "✅ Clean complete"
+echo ""
+
+# Step 2: Build core proof modules
+echo "2️⃣  Building core proof modules..."
+cd core
+npx tsc src/proof/schema.ts src/proof/signer.ts src/proof/verifier.ts src/proof/bundle.ts src/proof/canonicalize.ts src/proof/index.ts \
+  --outDir dist \
+  --module ESNext \
+  --target ES2022 \
+  --moduleResolution Bundler \
+  --skipLibCheck \
+  --esModuleInterop \
+  --resolveJsonModule \
+  --declaration
+
+# Wait for file to be created
+sleep 1
+
+# Fix AJV 2020 import (TypeScript strips .js extension)
+# Check both possible locations (dist/schema.js and dist/proof/schema.js)
+if [ -f "dist/schema.js" ]; then
+  # macOS sed syntax
+  if [[ "$OSTYPE" == "darwin"* ]]; then
+    sed -i '' "s|from 'ajv/dist/2020'|from 'ajv/dist/2020.js'|g" dist/schema.js
+  else
+    # Linux/Windows Git Bash sed syntax
+    sed -i "s|from 'ajv/dist/2020'|from 'ajv/dist/2020.js'|g" dist/schema.js
+  fi
+  echo "✅ Fixed AJV 2020 import in dist/schema.js"
+elif [ -f "dist/proof/schema.js" ]; then
+  if [[ "$OSTYPE" == "darwin"* ]]; then
+    sed -i '' "s|from 'ajv/dist/2020'|from 'ajv/dist/2020.js'|g" dist/proof/schema.js
+  else
+    sed -i "s|from 'ajv/dist/2020'|from 'ajv/dist/2020.js'|g" dist/proof/schema.js
+  fi
+  echo "✅ Fixed AJV 2020 import in dist/proof/schema.js"
+else
+  echo "⚠️  Warning: schema.js not found in expected locations"
+fi
+
+# Create/update index.js to export all proof modules
+# Note: TypeScript compiles src/proof/*.ts to dist/*.js (flat structure)
+cat > dist/index.js << 'EOF'
+/**
+ * QA360 Core - Minimal exports for Proof CLI
+ */
+
+// Re-export from proof modules (compiled flat in dist/)
+export * from './schema.js';
+export * from './signer.js';
+export * from './verifier.js';
+export * from './bundle.js';
+export * from './canonicalize.js';
+EOF
+echo "✅ Created/updated dist/index.js"
+
+echo "✅ Core proof modules compiled"
+echo ""
+
+# Step 3: Build CLI
+echo "3️⃣  Building CLI..."
+cd ../cli
+npx tsc src/cli-minimal.ts src/commands/doctor.ts src/commands/verify.ts \
+  --outDir dist \
+  --module ESNext \
+  --target ES2022 \
+  --moduleResolution Bundler \
+  --skipLibCheck \
+  --esModuleInterop \
+  --resolveJsonModule
+
+echo "✅ CLI compiled"
+echo ""
+
+# Step 4: Verify
+echo "4️⃣  Verifying build..."
+if [ ! -f "dist/cli-minimal.js" ]; then
+  echo "❌ Build failed: dist/cli-minimal.js not found"
+  exit 1
+fi
+
+# Check for schema.js in either location
+if [ ! -f "../core/dist/schema.js" ] && [ ! -f "../core/dist/proof/schema.js" ]; then
+  echo "❌ Build failed: core/dist/schema.js not found"
+  exit 1
+fi
+
+echo "✅ Build verified"
+echo ""
+
+echo "🎉 Build complete!"
+echo ""
+echo "Test with:"
+echo "  node cli/dist/cli-minimal.js doctor"
+echo "  node cli/dist/cli-minimal.js verify examples/proofs/httpbin-proof.json"

package/scripts/ci/check-windows-paths.js

@@ -0,0 +1,92 @@
+#!/usr/bin/env node
+/**
+ * Windows Path Compatibility Guard
+ * Scans git tree for filenames incompatible with Windows/NTFS
+ * Prevents CI failures on Windows checkout
+ */
+
+const { execSync } = require('child_process');
+
+// Characters forbidden in Windows filenames
+const FORBIDDEN_CHARS = /[<>:"|?*\x00-\x1F]/;
+
+// Reserved names in Windows (case-insensitive)
+const RESERVED_NAMES = new Set([
+  'CON', 'PRN', 'AUX', 'NUL',
+  'COM1', 'COM2', 'COM3', 'COM4', 'COM5', 'COM6', 'COM7', 'COM8', 'COM9',
+  'LPT1', 'LPT2', 'LPT3', 'LPT4', 'LPT5', 'LPT6', 'LPT7', 'LPT8', 'LPT9'
+]);
+
+function checkWindowsPaths() {
+  console.log('🔍 Checking for Windows-incompatible filenames...');
+  
+  let hasErrors = false;
+  const errors = [];
+  
+  try {
+    // Get all tracked files in git
+    const files = execSync('git ls-files', { encoding: 'utf8' })
+      .split('\n')
+      .filter(Boolean);
+    
+    // Track case-insensitive collisions
+    const caseMap = new Map();
+    
+    for (const file of files) {
+      const parts = file.split('/');
+      const filename = parts[parts.length - 1];
+      const basename = filename.split('.')[0];
+      
+      // Check 1: Forbidden characters
+      if (FORBIDDEN_CHARS.test(file)) {
+        errors.push(`❌ Forbidden character in: ${file}`);
+        hasErrors = true;
+      }
+      
+      // Check 2: Trailing space or dot
+      if (filename.endsWith(' ') || filename.endsWith('.')) {
+        errors.push(`❌ Trailing space/dot in: ${file}`);
+        hasErrors = true;
+      }
+      
+      // Check 3: Reserved Windows names
+      if (RESERVED_NAMES.has(basename.toUpperCase())) {
+        errors.push(`❌ Reserved Windows name: ${file}`);
+        hasErrors = true;
+      }
+      
+      // Check 4: Case-insensitive collisions in same directory
+      const dir = parts.slice(0, -1).join('/') || '.';
+      const lowerFilename = filename.toLowerCase();
+      const key = `${dir}/${lowerFilename}`;
+      
+      if (caseMap.has(key)) {
+        errors.push(`❌ Case collision: ${file} vs ${caseMap.get(key)}`);
+        hasErrors = true;
+      } else {
+        caseMap.set(key, file);
+      }
+      
+      // Check 5: Backslash in path (should use forward slash)
+      if (file.includes('\\')) {
+        errors.push(`❌ Backslash in path: ${file}`);
+        hasErrors = true;
+      }
+    }
+    
+    if (hasErrors) {
+      console.error('\n❌ Windows path compatibility issues found:\n');
+      errors.forEach(err => console.error(err));
+      console.error('\n💡 Fix these filenames before committing.');
+      process.exit(1);
+    } else {
+      console.log(`✅ Windows filename guard: OK (${files.length} files checked)`);
+      process.exit(0);
+    }
+  } catch (error) {
+    console.error('❌ Error checking paths:', error.message);
+    process.exit(1);
+  }
+}
+
+checkWindowsPaths();

package/scripts/ci/invariants.sh

@@ -0,0 +1,124 @@
+#!/usr/bin/env bash
+# QA360 CI Invariants - Garde-fous exécutés partout (local & CI)
+# Objectif: garantir reproductibilité et idempotence sans changer les fonctionnalités
+
+set -euo pipefail
+
+echo "🔒 QA360 CI Invariants - Validation complète"
+echo "=============================================="
+
+# 1) AJV 2020-12 Schema Validation
+echo ""
+echo "1️⃣  AJV 2020-12 Schema Validation..."
+pnpm -C core test:schema
+echo "✅ Schema validation passed"
+
+# 2) Workspace Build Idempotent
+echo ""
+echo "2️⃣  Workspace Build Idempotent..."
+pnpm -r build
+echo "✅ Build completed"
+
+# 3) QA360_HOME respecté + doctor --fix
+echo ""
+echo "3️⃣  Doctor --fix (prime proof system)..."
+export QA360_HOME="${QA360_HOME:-$PWD/.qa360}"
+mkdir -p "$QA360_HOME"
+echo "QA360_HOME=$QA360_HOME"
+
+node cli/dist/cli-minimal.js doctor --fix --json > doctor_fix.json 2>doctor_fix.stderr || {
+  echo "❌ doctor --fix failed"
+  cat doctor_fix.json
+  cat doctor_fix.stderr
+  exit 1
+}
+
+# Après corrections : ok=true, errors=0
+if command -v jq >/dev/null 2>&1; then
+  jq -e '.ok==true and (.summary.errors==0)' doctor_fix.json > /dev/null || {
+    echo "❌ doctor --fix validation failed"
+    jq -r '{ok, errors: .summary.errors, warnings: .summary.warnings}' doctor_fix.json
+    exit 1
+  }
+  echo "✅ Doctor --fix passed: $(jq -r '{ok, errors: .summary.errors, fixed: .summary.fixed}' doctor_fix.json)"
+else
+  # Fallback sans jq
+  if ! grep -q '"ok": true' doctor_fix.json; then
+    echo "❌ doctor --fix failed"
+    cat doctor_fix.json
+    exit 1
+  fi
+  echo "✅ Doctor --fix passed"
+fi
+
+# 4) Idempotence stricte (aucune correction au 2e passage)
+echo ""
+echo "4️⃣  Doctor --strict (idempotence check)..."
+export QA360_SKIP_CHECKS="connectivity_network,playwright,puppeteer"
+
+node cli/dist/cli-minimal.js doctor --strict --json > doctor_strict.json 2>doctor_strict.stderr || {
+  echo "❌ doctor --strict failed"
+  cat doctor_strict.json
+  cat doctor_strict.stderr
+  exit 1
+}
+
+if command -v jq >/dev/null 2>&1; then
+  jq -e '.ok==true and (.summary.errors==0) and (.summary.warnings==0)' doctor_strict.json > /dev/null || {
+    echo "❌ doctor --strict validation failed"
+    jq -r '{ok, errors: .summary.errors, warnings: .summary.warnings, decision}' doctor_strict.json
+    exit 1
+  }
+  
+  # Vérifier que QA360_HOME est bien respecté
+  REPORTED_HOME=$(jq -r '.qa360Home' doctor_strict.json)
+  if [ "$REPORTED_HOME" != "$QA360_HOME" ]; then
+    echo "❌ QA360_HOME mismatch: expected=$QA360_HOME, got=$REPORTED_HOME"
+    exit 1
+  fi
+  
+  echo "✅ Doctor --strict passed: $(jq -r '{ok, errors: .summary.errors, warnings: .summary.warnings, qa360Home}' doctor_strict.json)"
+else
+  # Fallback sans jq
+  if ! grep -q '"ok": true' doctor_strict.json; then
+    echo "❌ doctor --strict failed"
+    cat doctor_strict.json
+    exit 1
+  fi
+  echo "✅ Doctor --strict passed"
+fi
+
+# 5) Roundtrip Proof Verification
+echo ""
+echo "5️⃣  Proof Roundtrip Verification..."
+if [ ! -f "examples/proofs/httpbin-proof.json" ]; then
+  echo "⚠️  httpbin-proof.json not found, skipping verify test"
+else
+  node cli/dist/cli-minimal.js verify examples/proofs/httpbin-proof.json --json > verify_result.json 2>verify_result.stderr || {
+    echo "❌ verify failed"
+    cat verify_result.json
+    cat verify_result.stderr
+    exit 1
+  }
+  
+  if command -v jq >/dev/null 2>&1; then
+    jq -e '.valid==true' verify_result.json > /dev/null || {
+      echo "❌ verify validation failed"
+      jq -r '{valid, signature, schema}' verify_result.json
+      exit 1
+    }
+    echo "✅ Verify passed: $(jq -r '{valid, signature, schema}' verify_result.json)"
+  else
+    if ! grep -q '"valid": true' verify_result.json; then
+      echo "❌ verify failed"
+      cat verify_result.json
+      exit 1
+    fi
+    echo "✅ Verify passed"
+  fi
+fi
+
+echo ""
+echo "=============================================="
+echo "🎉 All invariants passed successfully!"
+echo "=============================================="

package/scripts/ci/make-final-bundle.js

@@ -0,0 +1,106 @@
+#!/usr/bin/env node
+/**
+ * QA360 Phase 7 - Final Bundle Generator
+ * Creates comprehensive Phase 7 certification bundle with all artifacts and checksums
+ */
+
+const fs = require('fs');
+const path = require('path');
+const crypto = require('crypto');
+const { execSync } = require('child_process');
+
+const args = process.argv.slice(2);
+const outFile = args[args.indexOf('--out') + 1] || 'artifacts/final/phase7-bundle.zip';
+
+console.log('\n📦 QA360 Phase 7 - Final Bundle Generator\n');
+
+fs.mkdirSync(path.dirname(outFile), { recursive: true });
+
+const bundle = {
+  metadata: {
+    version: 'Phase 7-Final',
+    timestamp: new Date().toISOString(),
+    certification: 'QA360 Universal Pack Compatible',
+    git_commit: null,
+    git_branch: null
+  },
+  sections: {},
+  checksums: {},
+  decision: 'PENDING'
+};
+
+// Get Git info
+try {
+  bundle.metadata.git_commit = execSync('git rev-parse HEAD').toString().trim();
+  bundle.metadata.git_branch = execSync('git branch --show-current').toString().trim();
+} catch (e) {
+  console.warn('⚠️ Git info unavailable');
+}
+
+// Collect artifacts
+const artifactDirs = [
+  'artifacts/conformance',
+  'artifacts/mcp',
+  'artifacts/security',
+  'artifacts/faults',
+  'artifacts/env',
+  'artifacts/observability',
+  'artifacts/proofs'
+];
+
+let totalFiles = 0;
+let totalSize = 0;
+
+artifactDirs.forEach(dir => {
+  const fullPath = path.join(process.cwd(), dir);
+  if (fs.existsSync(fullPath)) {
+    const files = fs.readdirSync(fullPath, { recursive: true });
+    files.forEach(file => {
+      const filePath = path.join(fullPath, file);
+      if (fs.statSync(filePath).isFile()) {
+        totalFiles++;
+        totalSize += fs.statSync(filePath).size;
+        
+        // Calculate checksum
+        const content = fs.readFileSync(filePath);
+        const hash = crypto.createHash('sha256').update(content).digest('hex');
+        bundle.checksums[path.relative(process.cwd(), filePath)] = hash;
+      }
+    });
+  }
+});
+
+// Generate final report
+const reportPath = 'artifacts/final/PHASE7_FINAL_REPORT.md';
+const report = `# QA360 Phase 7-Final - Certification Report
+
+**Date**: ${bundle.metadata.timestamp}
+**Git Commit**: ${bundle.metadata.git_commit || 'N/A'}
+**Git Branch**: ${bundle.metadata.git_branch || 'N/A'}
+
+## Bundle Contents
+
+- **Total Files**: ${totalFiles}
+- **Total Size**: ${(totalSize / 1024 / 1024).toFixed(2)} MB
+- **Checksums**: ${Object.keys(bundle.checksums).length}
+
+## Certification Status
+
+${bundle.decision === 'GO' ? '✅ **GO** - QA360 Universal Pack Compatible Certified' : '⏳ **PENDING** - Awaiting validation'}
+
+---
+Generated: ${new Date().toISOString()}
+`;
+
+fs.writeFileSync(reportPath, report);
+
+// Save bundle metadata
+const bundlePath = outFile.replace('.zip', '.json');
+fs.writeFileSync(bundlePath, JSON.stringify(bundle, null, 2));
+
+console.log(`✅ Bundle metadata: ${bundlePath}`);
+console.log(`✅ Final report: ${reportPath}`);
+console.log(`📊 Total files: ${totalFiles}`);
+console.log(`📦 Total size: ${(totalSize / 1024 / 1024).toFixed(2)} MB\n`);
+
+process.exit(0);