qa360 2.2.1 → 2.2.7

package/docs/archive/BRANCH_PROTECTION.md

@@ -1,183 +0,0 @@
-# QA360 Branch Protection & Release Guidelines
-
-## Branch Protection Rules
-
-### Protected Branches: `develop` and `main`
-
-#### Required Status Checks
-- **QA360 CI (unified)** - Must pass before merge
-  - Matrix: Ubuntu/macOS/Windows × Node 18/20/22 (9 jobs)
-  - All invariants must pass
-  - Packaging smoke test must succeed
-
-#### Required Reviews
-- **Minimum 1 approval** required for:
-  - Changes to `/cli/src/commands/doctor.ts`
-  - Changes to `/core/src/proof/**`
-  - Changes to `/.github/workflows/**`
-  - Changes to package manifests (`package.json`, `pnpm-lock.yaml`)
-  - Changes to `/scripts/ci/**`
-
-See `.github/CODEOWNERS` for automatic reviewer assignment.
-
-#### Additional Protections
-- **No force-push** allowed on `develop` and `main`
-- **Require signed commits** (recommended)
-- **Require signed tags** for releases
-- **Dismiss stale reviews** when new commits are pushed
-- **Require branches to be up to date** before merging
-
-## Release Process
-
-### Version Tagging
-All release tags must be:
-1. **Signed**: `git tag -s v1.1.1 -m "Release v1.1.1"`
-2. **Follow semver**: `vMAJOR.MINOR.PATCH` (e.g., `v1.1.1`)
-3. **Pushed explicitly**: `git push origin v1.1.1`
-
-### Pre-Release Checklist
-Before creating a release tag:
-
-```bash
-# 1. Ensure all tests pass locally
-pnpm -r build
-pnpm -r test
-
-# 2. Run invariants locally
-bash scripts/ci/invariants.sh
-
-# 3. Verify doctor is idempotent
-export QA360_HOME=/tmp/qa360-release-test
-export QA360_SKIP_CHECKS=connectivity_network,playwright,puppeteer
-node cli/dist/cli-minimal.js doctor --fix --json > doctor_fix.json
-node cli/dist/cli-minimal.js doctor --strict --json > doctor_strict.json
-
-# 4. Check JSON output
-jq -e '.ok==true and (.summary.errors==0)' doctor_fix.json
-jq -e '.ok==true and (.summary.errors==0) and (.summary.warnings==0)' doctor_strict.json
-
-# 5. Verify proof roundtrip
-node cli/dist/cli-minimal.js verify examples/proofs/httpbin-proof.json
-```
-
-### Publishing Workflow
-
-1. **Create signed tag**:
-   ```bash
-   git tag -s v1.1.1 -m "Release v1.1.1"
-   git push origin v1.1.1
-   ```
-
-2. **CI will automatically**:
-   - Run full test matrix (9 jobs)
-   - Execute all invariants
-   - Run packaging smoke test
-   - Generate artifacts
-
-3. **Manual publish** (after CI green):
-   ```bash
-   cd cli
-   pnpm pack
-   npm publish ./qa360-*.tgz --provenance
-   ```
-
-4. **Post-publish smoke test**:
-   ```bash
-   npm install -g qa360@latest
-   qa360 --version
-   qa360 doctor --strict
-   qa360 verify examples/proofs/httpbin-proof.json
-   ```
-
-## CI/CD Invariants
-
-The following invariants are enforced on every CI run:
-
-1. **AJV 2020-12 Schema Validation** - `pnpm -C core test:schema`
-2. **Workspace Build Idempotent** - `pnpm -r build`
-3. **Doctor --fix** - Errors must be 0 after fixes
-4. **Doctor --strict** - Errors and warnings must be 0 (with skip list)
-5. **Proof Roundtrip** - Verify must succeed on example proofs
-
-See `scripts/ci/invariants.sh` for implementation details.
-
-## Lockfile & Dependencies
-
-### Frozen Lockfile Policy
-- **Always use**: `pnpm install --frozen-lockfile --ignore-scripts`
-- **Never commit** lockfile drift
-- **Rebuild natives** after install: `pnpm -r rebuild`
-
-### Version Constraints
-- **Node.js**: `>=18 <=22` (enforced by `engines` in package.json)
-- **pnpm**: `9.12.2` (frozen via `packageManager` field)
-- **engine-strict**: `true` (enforced by `.npmrc`)
-
-### Dependency Overrides
-The following dependencies are frozen to ensure AJV 2020-12 compatibility:
-```json
-{
-  "pnpm": {
-    "overrides": {
-      "ajv": "8.17.1",
-      "ajv-formats": "2.1.1",
-      "ajv-draft-04": "1.0.0"
-    }
-  }
-}
-```
-
-**Never modify these overrides** without updating schema validation tests.
-
-## Troubleshooting
-
-### CI Failure: Lockfile Drift
-```bash
-# Fix locally
-pnpm install --frozen-lockfile
-git add pnpm-lock.yaml
-git commit -m "fix: resolve lockfile drift"
-```
-
-### CI Failure: Invariants
-```bash
-# Run invariants locally to debug
-bash scripts/ci/invariants.sh
-
-# Check specific failure
-export QA360_HOME=$PWD/.qa360
-node cli/dist/cli-minimal.js doctor --fix --json | jq .
-```
-
-### CI Failure: Packaging
-```bash
-# Test packaging locally
-cd cli
-pnpm pack
-npm install -g ./qa360-*.tgz
-qa360 doctor --strict
-```
-
-## GitHub Settings Configuration
-
-To configure branch protection in GitHub UI:
-
-1. Go to **Settings** → **Branches**
-2. Add rule for `develop`:
-   - Branch name pattern: `develop`
-   - ✅ Require a pull request before merging
-   - ✅ Require approvals: 1
-   - ✅ Require status checks to pass before merging
-     - Add: `QA360 CI (unified)`
-   - ✅ Require branches to be up to date before merging
-   - ✅ Do not allow bypassing the above settings
-
-3. Repeat for `main` branch
-
-4. Enable **Require signed commits** (optional but recommended)
-
-## Contact
-
-For questions about branch protection or release process:
-- **Team**: @xyqotech/qa360-core-team
-- **Issues**: https://github.com/xyqotech/qa360/issues

package/docs/archive/CI_LOCKDOWN_CHECKLIST.md

@@ -1,222 +0,0 @@
-# 🔒 CI Lockdown Checklist - Proof Schema & Verify
-
-**Date**: 2025-10-26  
-**Status**: ✅ **IMPLEMENTED**  
-**Purpose**: Lock down proof schema validation across all platforms
-
----
-
-## ✅ Micro-Checklist de Close-Out
-
-### 1. Workflow CI ✅
-- [x] Job "Proof Schema & Verify" créé
-- [x] Matrice 3×3 (Ubuntu, macOS, Windows × Node 18, 20, 22)
-- [x] Workflow: `.github/workflows/proof-schema-ci.yml`
-- [x] Triggers: push/PR sur core/proof, cli, package.json, pnpm-lock.yaml
-
-### 2. Build Monorepo ✅
-- [x] Build via `scripts/build-proof-cli.sh`
-- [x] Support cross-platform (macOS, Linux, Windows Git Bash)
-- [x] Fix AJV import automatique (sed avec détection OS)
-- [x] Création automatique de `dist/index.js`
-- [x] Vérification des artefacts de build
-
-### 3. Tests AJV ✅
-- [x] Tests unitaires: 11/11 PASS
-- [x] Script: `pnpm -C core test:schema`
-- [x] Exécution dans CI sur toutes plateformes
-- [x] Validation Draft 2020-12
-
-### 4. Smoke Tests ✅
-- [x] `doctor --strict --json` (doit passer)
-- [x] `verify` sur proof valide (doit passer)
-- [x] `verify` sur proof corrompu (doit échouer)
-- [x] Vérification exit codes
-
-### 5. Overrides pnpm ✅
-- [x] `ajv: 8.17.1` gelé
-- [x] `ajv-formats: 2.1.1` gelé
-- [x] `ajv-draft-04: 1.0.0` gelé
-- [x] Configuration dans `core/package.json`
-
-### 6. Artefacts & Debug ✅
-- [x] Upload artefacts en cas d'échec
-- [x] Rétention: 7 jours
-- [x] Contenu: core/dist, cli/dist, outputs JSON
-- [x] Nommage: `proof-build-{os}-node{version}`
-
-### 7. Packaging Test ✅
-- [x] `pnpm pack --dry-run` dans CLI
-- [x] Vérification des fichiers inclus
-- [x] Validation structure package
-
----
-
-## 📊 Matrice de Validation
-
-| OS | Node 18 | Node 20 | Node 22 |
-|----|---------|---------|---------|
-| **Ubuntu** | ⏳ Pending | ⏳ Pending | ⏳ Pending |
-| **macOS** | ⏳ Pending | ⏳ Pending | ⏳ Pending |
-| **Windows** | ⏳ Pending | ⏳ Pending | ⏳ Pending |
-
-**Status**: Workflow créé, en attente de premier run CI
-
----
-
-## 🧪 Tests Validés
-
-### Unit Tests - AJV Schema
-```bash
-cd core
-node src/proof/__tests__/schema-validation-manual.mjs
-
-# Expected:
-✅ Passed: 11
-❌ Failed: 0
-📊 Total: 11
-```
-
-### Smoke Test - Doctor
-```bash
-node cli/dist/cli-minimal.js doctor --strict --json
-
-# Expected:
-- Exit code: 0
-- Valid JSON output
-- All checks passed
-```
-
-### Smoke Test - Verify Valid
-```bash
-node cli/dist/cli-minimal.js verify examples/proofs/test-proof.json --json
-
-# Expected:
-- Exit code: 0 (or specific verification code)
-- Valid JSON output
-- Proof validation result
-```
-
-### Smoke Test - Verify Invalid
-```bash
-# Create corrupted proof
-jq '.signature = "INVALID"' proof.json > corrupted.json
-node cli/dist/cli-minimal.js verify corrupted.json --json
-
-# Expected:
-- Exit code: non-zero (failure)
-- Error message about invalid signature
-```
-
----
-
-## 🔧 Configuration Files
-
-### 1. Workflow CI
-**File**: `.github/workflows/proof-schema-ci.yml`
-
-**Key Features**:
-- Matrix strategy: 3 OS × 3 Node versions
-- Fail-fast: false (run all combinations)
-- Cache pnpm store
-- Build via script
-- Upload artifacts on failure
-- Summary job with GO/NO-GO
-
-### 2. Core Package
-**File**: `core/package.json`
-
-**Changes**:
-```json
-{
-  "scripts": {
-    "test:schema": "node src/proof/__tests__/schema-validation-manual.mjs"
-  },
-  "pnpm": {
-    "overrides": {
-      "ajv": "8.17.1",
-      "ajv-formats": "2.1.1",
-      "ajv-draft-04": "1.0.0"
-    }
-  }
-}
-```
-
-### 3. Build Script
-**File**: `scripts/build-proof-cli.sh`
-
-**Improvements**:
-- Cross-platform sed (macOS vs Linux/Windows)
-- Check multiple schema.js locations
-- Auto-create dist/index.js
-- Verify build artifacts
-
----
-
-## 🎯 Objectifs Atteints
-
-### Robustesse
-✅ **Validation locale = CI**: Même script de build partout  
-✅ **Anti-régression**: Versions AJV gelées  
-✅ **Cross-platform**: Ubuntu, macOS, Windows supportés  
-✅ **Multi-Node**: Node 18, 20, 22 validés
-
-### Qualité
-✅ **Tests complets**: 11 tests unitaires + 3 smoke tests  
-✅ **Exit codes**: Vérification succès/échec  
-✅ **Artefacts**: Debug rapide en cas d'échec  
-✅ **Documentation**: Checklist et guides complets
-
-### Sécurité
-✅ **Schema validation**: Draft 2020-12 RFC-compliant  
-✅ **Signature verification**: Détection proof corrompus  
-✅ **Dependency lock**: Pas d'upgrade implicite  
-✅ **CI gates**: Blocage automatique si échec
-
----
-
-## 🚀 Prochaines Étapes
-
-### Immédiat
-1. **Push workflow**: Déclencher premier run CI
-2. **Valider matrice**: Vérifier 9/9 jobs passent
-3. **Fix si nécessaire**: Ajuster selon résultats CI
-
-### Court Terme
-1. **Badge CI**: Ajouter badge status dans README
-2. **Documentation**: Mettre à jour guides avec CI
-3. **Monitoring**: Configurer notifications échecs
-
-### Long Terme
-1. **Performance**: Optimiser temps de build
-2. **Coverage**: Ajouter code coverage reports
-3. **Integration**: Lier avec autres workflows
-
----
-
-## 📚 Références
-
-- **Workflow**: `.github/workflows/proof-schema-ci.yml`
-- **Build Script**: `scripts/build-proof-cli.sh`
-- **Tests**: `core/src/proof/__tests__/schema-validation-manual.mjs`
-- **Package Config**: `core/package.json`
-- **Documentation**: `docs/rfc/SCHEMA_AJV_2020_FIX.md`
-
----
-
-## ✅ Validation Finale
-
-**Local Build**: ✅ PASS  
-**Unit Tests**: ✅ 11/11 PASS  
-**Smoke Tests**: ✅ PASS  
-**CI Workflow**: ✅ CREATED  
-**Dependencies**: ✅ LOCKED  
-**Documentation**: ✅ COMPLETE
-
-**Status**: 🟢 **READY FOR CI VALIDATION**
-
----
-
-**La propriété la plus sensible du produit — la validation canonique des preuves — est maintenant verrouillée côté local et CI, sans coût d'infra ni dépendances réseau.**
-
-**Next**: Push et valider premier run CI (9/9 jobs)