qa360 2.2.20 → 2.3.1

package/QUICK_START.md

@@ -1,191 +0,0 @@
-# 🚀 QA360 - Guide de Démarrage Simple
-
-Transformez vos tests en preuves vérifiables en 5 minutes.
-
-> **🚀 Beta Testing (15 Jan - 26 Fév 2025)** - Rejoignez le programme ! [Voir le plan beta](./docs/BETA_TESTING.md)
-
----
-
-## ⚡ Installation (2 minutes)
-
-### Windows
-
-1. Ouvrez **PowerShell** en administrateur
-2. Installez QA360 :
-
-```powershell
-npm install -g xyqotech/qa360#develop
-```
-
-### Mac / Linux
-
-1. Ouvrez le **Terminal**
-2. Installez QA360 :
-
-```bash
-npm install -g xyqotech/qa360#develop
-```
-
-### Vérifier l'installation
-
-```bash
-qa360 --version
-```
-
-Vous devriez voir : `v1.4.5` ou plus.
-
-> **Problème ?** Lancez `qa360 doctor --fix` pour un diagnostic automatique
-
----
-
-## 🧪 Votre Premier Test (3 minutes)
-
-### Étape 1 : Créer un dossier
-
-```bash
-mkdir mon-test
-cd mon-test
-```
-
-### Étape 2 : Créer votre fichier de test
-
-Créez un fichier `test.yml` :
-
-```yaml
-name: "Mon Premier Test"
-description: "Test simple d'API"
-
-gates:
-  - api_health
-
-targets:
-  api:
-    baseUrl: "https://httpbin.org"
-    smoke:
-      - "GET /status/200 -> 200"
-      - "GET /get -> 200"
-```
-
-### Étape 3 : Lancer le test
-
-```bash
-qa360 run test.yml
-```
-
-### Résultat attendu
-
-```
-✅ API Health : PASSED (2/2)
-✅ Preuve générée : .qa360/runs/xxxxx-proof.json
-```
-
----
-
-## 🎓 Ce que vous venez de faire
-
-1. **Tester une API** - Vous avez vérifié que httpbin.org fonctionne
-2. **Générer une preuve** - QA360 a signé cryptographiquement les résultats
-3. **Sauvegarder l'historique** - Les résultats sont stockés localement
-
----
-
-## 🔐 Vérifier la Preuve
-
-```bash
-qa360 verify .qa360/runs/<dernier>-proof.json
-```
-
-Résultat :
-
-```
-✅ Preuve VALIDE
-✅ Signature : Ed25519
-✅ Date : 2025-01-03
-```
-
----
-
-## 📋 Commandes Utiles
-
-| Commande | Ce que ça fait |
-|----------|---------------|
-| `qa360 run <fichier.yml>` | Lance les tests |
-| `qa360 verify <preuve.json>` | Vérifie une preuve |
-| `qa360 history list` | Voir les tests passés |
-| `qa360 doctor` | Diagnostic système |
-| `qa360 examples list` | Voir les exemples |
-| `qa360 init --beginner` | Créer un test facilement |
-
----
-
-## 📁 Exemples Disponibles
-
-```bash
-# Voir tous les exemples
-qa360 examples list
-
-# Copier un exemple
-qa360 examples copy api-basic
-qa360 examples copy fullstack
-qa360 examples copy perf-test
-
-# Lancer un exemple
-qa360 run api-basic/qa360.yml
-```
-
----
-
-## 🎯 Prochaines Étapes
-
-1. **Tester votre propre API** : Modifiez `baseUrl` dans le fichier `test.yml`
-2. **Explorer les exemples** : `qa360 examples list`
-3. **Créer des tests complexes** : Consultez le [Guide Utilisateur](./docs/USER_GUIDE.md)
-
----
-
-## 🐛 Un Problème ?
-
-### Erreur : `command not found: qa360`
-
-```bash
-# Vérifiez que npm est dans le PATH
-npm config get prefix
-
-# Si besoin, ajoutez à votre PATH :
-# Windows : $env:Path += ";C:\Users\<votre-user>\AppData\Roaming\npm"
-# Mac/Linux : export PATH="$PATH:$(npm config get prefix)/bin"
-```
-
-### Erreur : `EACCES` (permission refusée)
-
-```bash
-# Mac/Linux : utilisez sudo
-sudo npm install -g xyqotech/qa360#develop
-
-# Ou corrigez les permissions npm
-mkdir ~/.npm-global
-npm config set prefix '~/.npm-global'
-export PATH=~/.npm-global/bin:$PATH
-```
-
-### Autre erreur
-
-```bash
-qa360 doctor --fix > diagnostic.txt
-```
-
-Envoyez `diagnostic.txt` sur :
-- Discord : https://discord.gg/qa360
-- GitHub : https://github.com/xyqotech/qa360/issues
-
----
-
-## 📚 En Savoir Plus
-
-- [Programme Beta Test](./docs/BETA_TESTING.md) - Participez au beta !
-- [Guide Utilisateur Complet](./docs/USER_GUIDE.md) - Toutes les fonctionnalités
-- [Documentation Technique](./docs/ARCHITECTURE.md) - Comment ça marche
-
----
-
-**C'est tout !** Vous savez utiliser QA360 en 5 minutes 🚀

package/cli/CHANGELOG.md

@@ -1,84 +0,0 @@
-# Changelog
-
-All notable changes to QA360 Proof CLI will be documented in this file.
-
-The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
-and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
-
-## [1.1.0] - 2025-10-26
-
-### Added
-- **AJV 2020-12 Support**: Full JSON Schema Draft 2020-12 validation (RFC-compliant)
-- **CI Matrix**: 9-job validation matrix (3 OS × 3 Node versions)
-- **Comprehensive Tests**: 11 unit tests + 3 smoke tests
-- **Cross-platform Build**: Automated build script with OS detection
-- **Dependency Lock**: Frozen AJV versions (anti-regression)
-- **CI Badges**: Status badges in README
-
-### Changed
-- **Schema Validation**: Migrated from draft-07 to draft-2020-12
-- **Build System**: Idempotent cross-platform build script
-- **prepublishOnly**: Added doctor --strict validation before publish
-
-### Fixed
-- **ESM Imports**: Fixed AJV 2020 import for Node.js ESM compatibility
-- **Schema Path**: Corrected import paths in test files
-
-### Security
-- **Provenance**: Added npm provenance for supply chain security
-- **Dependency Freeze**: Locked ajv@8.17.1, ajv-formats@2.1.1, ajv-draft-04@1.0.0
-
-## [1.1.0-rc] - 2025-10-25
-
-### Added
-- **Initial Release Candidate**: First public release
-- **Commands**: `doctor`, `verify`
-- **Flags**: `--json`, `--strict`, `--verbose`
-- **Documentation**: Complete guides and examples
-
-### Features
-- 🔒 **Local-first**: 100% offline, no network dependencies
-- 🔐 **Cryptographic trust**: Ed25519 signatures, SHA-256 hashing
-- 🌍 **Cross-OS**: Windows, macOS, Linux validated
-- ⚡ **Zero friction**: Auto-generates keys
-- 
-
-## [Unreleased]
-
-### Planned
-- RFC 3161 TSA timestamp support (Phase 6)
-- W3C DID / Sigstore identity (Phase 6)
-- Revocation mechanism (Phase 6)
-- Compliance metadata (Phase 6)
-
----
-
-## Version History
-
-- **1.1.0** (2025-10-26): Stable release with AJV 2020-12 + CI lockdown
-- **1.1.0-rc** (2025-10-25): Release candidate
-- **0.9.0-core** (2025-10-24): Internal development version
-
----
-
-## Quick Validation
-
-```bash
-# Install
-npm i -g @qa360/cli@1.1.0
-
-# Verify version
-qa360 --version
-
-# System check
-qa360 doctor --strict
-
-# Verify proof
-qa360 verify examples/proofs/httpbin-proof.json --json
-```
-
-**Expected**: All commands succeed, proof validates correctly.
-
----
-
-For detailed changes, see [GitHub Releases](https://github.com/qa360/qa360/releases).

package/cli/LICENSE

@@ -1,24 +0,0 @@
-Business Source License 1.1
-
-Licensor: XyqoTech
-Licensed Work: QA360 Cloud Preview
-Change Date: 2027-10-01
-Change License: MIT
-
-Terms
-
-The Licensor hereby grants you the right to copy, modify, create derivative works, redistribute, and make non-production use of the Licensed Work. The Licensor may make an Additional Use Grant, above, permitting limited production use.
-
-Effective on the Change Date, or the fourth anniversary of the first publicly available distribution of a specific version of the Licensed Work under this License, whichever comes first, the Licensor hereby grants you rights under the terms of the Change License, and the rights granted in the paragraph above terminate.
-
-If your use of the Licensed Work does not comply with the requirements currently in effect as described in this License, you must purchase a commercial license from the Licensor, its affiliated entities, or authorized resellers, or you must refrain from using the Licensed Work.
-
-All copies of the original and modified Licensed Work, and derivative works of the Licensed Work, are subject to this License. This License applies separately for each version of the Licensed Work and the Change Date may vary for each version of the Licensed Work released by Licensor.
-
-You must conspicuously display this License on each original or modified copy of the Licensed Work. If you receive the Licensed Work in original or modified form from a third party, the terms and conditions set forth in this License apply to your use of that work.
-
-Any use of the Licensed Work in violation of this License will automatically terminate your rights under this License for the current and all other versions of the Licensed Work.
-
-This License does not grant you any right in any trademark or logo of Licensor or its affiliates (provided that you may use a trademark or logo of Licensor as expressly required by this License).
-
-TO THE EXTENT PERMITTED BY APPLICABLE LAW, THE LICENSED WORK IS PROVIDED ON AN "AS IS" BASIS. LICENSOR HEREBY DISCLAIMS ALL WARRANTIES AND CONDITIONS, EXPRESS OR IMPLIED, INCLUDING (WITHOUT LIMITATION) WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND TITLE.

package/cli/README.md

@@ -1,222 +0,0 @@
-# qa360
-
-**QA360 Proof CLI** - Quality as Cryptographic Proof
-
-[![Version](https://img.shields.io/npm/v/qa360.svg)](https://www.npmjs.com/package/qa360)
-[![License](https://img.shields.io/npm/l/qa360.svg)](https://github.com/xyqotech/qa360/blob/main/LICENSE)
-[![Tests](https://img.shields.io/badge/tests-282%20passing-success)](https://github.com/xyqotech/qa360)
-[![Coverage](https://img.shields.io/badge/coverage-55%25-brightgreen)](https://github.com/xyqotech/qa360)
-
-> **Official package** published by [xyqotech](https://github.com/xyqotech) with npm provenance signatures
-
-## Installation
-
-### Option 1: Global installation (recommended for regular use)
-
-```bash
-# macOS: use sudo if you get EACCES permission errors
-sudo npm install -g qa360
-
-# Or configure npm prefix (one-time setup)
-mkdir -p ~/.npm-global
-npm config set prefix '~/.npm-global'
-echo 'export PATH=~/.npm-global/bin:$PATH' >> ~/.zshrc
-source ~/.zshrc
-npm install -g qa360
-```
-
-### Option 2: Direct usage with npx (no installation needed)
-
-```bash
-# Run directly without installing
-npx qa360@latest run test.yml
-npx qa360@latest verify proof.json
-npx qa360@latest doctor
-```
-
-**Note**: On first run, Playwright browsers will be automatically downloaded (~100MB). This happens only once.
-
-## Quick Start
-
-### 1. Generate a test pack
-
-```bash
-# Option 1: Interactive mode (recommended for first-time users)
-qa360 init
-
-# Option 2: Use a template directly
-qa360 init --template api-basic --yes
-
-# Option 3: Copy an example
-qa360 examples copy api-basic
-qa360 examples list              # See all available examples
-```
-
-### 2. Run tests
-
-```bash
-qa360 run
-```
-
-### 3. Verify proof
-
-```bash
-qa360 verify .qa360/runs/
-```
-
-## Usage
-
-```bash
-# Generate test pack (interactive)
-qa360 init
-
-# Generate with template
-qa360 init --template api-basic
-qa360 init --template fullstack
-qa360 init --template security
-qa360 init --template complete
-
-# Examples commands
-qa360 examples list              # List all examples
-qa360 examples copy api-basic    # Copy example to qa360.yml
-qa360 examples show fullstack    # Preview example content
-
-# System health check
-qa360 doctor
-
-# Run test pack
-qa360 run                    # Auto-detects qa360.yml
-qa360 run custom-pack.yml    # Use specific file
-
-# Verify proof bundle
-qa360 verify .qa360/runs/
-qa360 verify proof.json
-
-# View run history
-qa360 history list
-qa360 history show <run-id>
-
-# Export proof bundle
-qa360 history export <run-id> --bundle proof-bundle.zip
-
-# Clean up old runs (garbage collection)
-qa360 history gc                    # Default: keep last 10 runs
-qa360 history gc --keep-last 20     # Keep last 20 runs
-qa360 history gc --dry-run          # Preview what would be deleted
-
-# Pin/unpin runs (pinned runs are never deleted by gc)
-qa360 history pin <run-id>
-qa360 history unpin <run-id>
-
-# With JSON output (CI-friendly)
-qa360 doctor --json
-qa360 verify proof.json --json
-qa360 history list --json
-```
-
-## Available Templates
-
-| Template | Description | Gates |
-|----------|-------------|-------|
-| **api-basic** | Simple API smoke tests | api_smoke |
-| **ui-basic** | Basic UI/E2E tests | ui |
-| **fullstack** | API + UI + Performance | api_smoke, ui, perf |
-| **security** | Security testing suite | sast, dast, secrets, deps |
-| **accessibility** | Accessibility testing | ui, a11y |
-| **complete** | All quality gates | All (8 gates) |
-
-## Example Files
-
-Pre-made examples are included in the package:
-
-```bash
-# List examples
-ls examples/
-
-# Copy an example
-cp examples/api-basic.yml qa360.yml
-
-# Run example directly
-qa360 run examples/api-basic.yml
-```
-
-## Commands
-
-| Command | Description |
-|---------|-------------|
-| `init` | Generate test pack interactively |
-| `examples` | Manage example templates (list, copy, show) |
-| `run` | Execute test pack |
-| `verify` | Verify cryptographic proof bundles |
-| `doctor` | Check system health, auto-fix issues |
-| `history` | View run history and results |
-| `report` | Generate reports |
-| `secrets` | Manage encrypted secrets |
-| `pack` | Pack validation and linting |
-
-### History Commands
-
-The `history` command provides comprehensive management of test run history stored in the Evidence Vault:
-
-| Subcommand | Description | Example |
-|------------|-------------|---------|
-| `list` | List recent test runs | `qa360 history list --limit 20` |
-| `show <run-id>` | Show detailed run information | `qa360 history show abc123` |
-| `diff <id1> <id2>` | Compare two test runs | `qa360 history diff abc123 def456` |
-| `trend` | Show trust score trends | `qa360 history trend --window 30` |
-| `export <run-id>` | Export run as ZIP bundle | `qa360 history export abc123 --bundle proof.zip` |
-| `gc` | Garbage collect old runs | `qa360 history gc --keep-last 10` |
-| `pin <run-id>` | Pin run (protect from gc) | `qa360 history pin abc123` |
-| `unpin <run-id>` | Unpin run | `qa360 history unpin abc123` |
-
-#### Export Bundle Contents
-
-When exporting a run with `qa360 history export <run-id> --bundle proof.zip`, the ZIP contains:
-
-- `proof.json` - Cryptographically signed proof document
-- `report.pdf` - Human-readable PDF report (if generated)
-- `run.json` - Complete run details (gates, findings, artifacts)
-- `artifacts/` - All test artifacts (screenshots, logs, etc.)
-- `VERIFICATION.json` - Verification instructions and metadata
-
-#### Garbage Collection
-
-The `gc` command removes old test runs and orphaned artifacts to free disk space:
-
-```bash
-# Preview what would be deleted (dry-run)
-qa360 history gc --dry-run
-
-# Keep last 20 runs, delete older ones
-qa360 history gc --keep-last 20
-
-# Default behavior (keeps last 10 unpinned runs)
-qa360 history gc
-```
-
-**Important**: Pinned runs are NEVER deleted by garbage collection. Use `qa360 history pin <run-id>` to protect important runs.
-
-## Exit Codes
-
-| Code | Meaning |
-|------|---------|
-| 0 | Success |
-| 1 | Verification failed |
-| 2 | File not found |
-| 3 | Invalid schema |
-| 4 | Missing key |
-| 5 | Internal error |
-
-## Requirements
-
-- Node.js >= 18.0.0
-- npm or pnpm
-
-## Documentation
-
-- [Quick Start](https://github.com/xyqotech/qa360/blob/main/docs/quickstart-5min.md)
-- [Full Documentation](https://github.com/xyqotech/qa360/blob/main/docs/README.md)
-
-## License
-
-MIT