specproof 0.2.0 → 0.3.0

package/eslint.config.mjs

@@ -1,43 +0,0 @@
-import js from "@eslint/js";
-import globals from "globals";
-import tseslint from "typescript-eslint";
-import pluginReact from "eslint-plugin-react";
-import pluginReactHooks from "eslint-plugin-react-hooks";
-
-export default [
-  {
-    ignores: ["**/.next/**", "**/node_modules/**", "**/dist/**", "**/build/**", "**/coverage/**", "example/**"],
-  },
-  {
-    files: ["**/*.{js,mjs,cjs,ts,mts,cts,jsx,tsx}"],
-    languageOptions: {
-      globals: {
-        ...globals.browser,
-        ...globals.node,
-      },
-    },
-  },
-  js.configs.recommended,
-  ...tseslint.configs.recommended,
-  {
-    plugins: {
-      react: pluginReact,
-      "react-hooks": pluginReactHooks,
-    },
-    rules: {
-      ...pluginReact.configs.recommended.rules,
-      ...pluginReactHooks.configs.recommended.rules,
-      // Disable React JSX scope requirement for Next.js
-      "react/react-in-jsx-scope": "off",
-      // Disable prop-types for TypeScript projects
-      "react/prop-types": "off",
-      // Allow unused variables that start with underscore
-      "@typescript-eslint/no-unused-vars": ["error", { "argsIgnorePattern": "^_" }],
-    },
-    settings: {
-      react: {
-        version: "detect",
-      },
-    },
-  },
-];

package/example/api/openapi.json

@@ -1,88 +0,0 @@
-{
-  "openapi": "3.0.3",
-  "info": {
-    "title": "TaskFlow API",
-    "version": "1.0.0",
-    "description": "Example API used to demo SpecProof and validate its analyzer. The spec and the tests in example/tests are deliberately out of step in places, so the audit shows every verdict state: proven coverage, gaps, untested operations, and an undocumented status."
-  },
-  "tags": [
-    { "name": "Auth", "description": "Session and token management" },
-    { "name": "Tasks", "description": "Create and manage tasks" },
-    { "name": "Projects", "description": "Group tasks into projects" }
-  ],
-  "paths": {
-    "/auth/login": {
-      "post": {
-        "operationId": "login",
-        "summary": "Exchange credentials for a session token",
-        "tags": ["Auth"],
-        "responses": {
-          "200": { "description": "Session token issued" },
-          "401": { "description": "Invalid credentials" }
-        }
-      }
-    },
-    "/tasks": {
-      "get": {
-        "operationId": "listTasks",
-        "summary": "List tasks for the authenticated user",
-        "tags": ["Tasks"],
-        "responses": {
-          "200": { "description": "Task list" },
-          "401": { "description": "Missing or invalid bearer token" }
-        }
-      },
-      "post": {
-        "operationId": "createTask",
-        "summary": "Create a task",
-        "tags": ["Tasks"],
-        "responses": {
-          "201": { "description": "Task created" },
-          "400": { "description": "Malformed request body" },
-          "401": { "description": "Missing or invalid bearer token" }
-        }
-      }
-    },
-    "/tasks/{taskId}": {
-      "get": {
-        "operationId": "getTask",
-        "summary": "Fetch a single task",
-        "tags": ["Tasks"],
-        "responses": {
-          "200": { "description": "The task" },
-          "404": { "description": "No task with this id" }
-        }
-      },
-      "patch": {
-        "operationId": "updateTask",
-        "summary": "Update a task's fields",
-        "tags": ["Tasks"],
-        "responses": {
-          "200": { "description": "Updated task" },
-          "404": { "description": "No task with this id" },
-          "409": { "description": "Task was modified concurrently" }
-        }
-      },
-      "delete": {
-        "operationId": "deleteTask",
-        "summary": "Delete a task",
-        "tags": ["Tasks"],
-        "responses": {
-          "204": { "description": "Task deleted" },
-          "404": { "description": "No task with this id" }
-        }
-      }
-    },
-    "/projects": {
-      "get": {
-        "operationId": "listProjects",
-        "summary": "List projects",
-        "tags": ["Projects"],
-        "responses": {
-          "200": { "description": "Project list" },
-          "401": { "description": "Missing or invalid bearer token" }
-        }
-      }
-    }
-  }
-}

package/example/tests/auth.test.ts

@@ -1,25 +0,0 @@
-import { describe, expect, it } from "vitest";
-
-import { api } from "./client";
-
-describe("POST /auth/login", () => {
-  it("returns a session token for valid credentials", async () => {
-    const res = await api.post("/auth/login", {
-      email: "ada@example.com",
-      password: "correct horse battery staple",
-    });
-
-    expect(res.status).toBe(200);
-    expect(res.body.token).toMatch(/^tk_/);
-  });
-
-  it("rejects invalid credentials", async () => {
-    const res = await api.post("/auth/login", {
-      email: "ada@example.com",
-      password: "not-the-password",
-    });
-
-    expect(res.status).toBe(401);
-    expect(res.body.token).toBeUndefined();
-  });
-});

package/example/tests/client.ts

@@ -1,53 +0,0 @@
-// Minimal HTTP client the example tests are written against.
-//
-// The example suite is fixture data for SpecProof's analyzer — it is excluded
-// from this repo's typecheck, lint, and vitest runs and never executes here.
-// It exists so the tests read like a real integration suite.
-
-const BASE_URL = process.env.API_URL ?? "http://localhost:4010";
-
-export interface ApiResponse {
-  status: number;
-  body: Record<string, unknown> & { id?: string; token?: string };
-}
-
-interface RequestOptions {
-  /** Set to false to send the request without a bearer token */
-  auth?: boolean;
-}
-
-let sessionToken: string | null = null;
-
-export function authenticate(token: string | null) {
-  sessionToken = token;
-}
-
-async function request(
-  method: string,
-  path: string,
-  payload?: unknown,
-  options: RequestOptions = {},
-): Promise<ApiResponse> {
-  const withAuth = options.auth !== false && sessionToken !== null;
-  const res = await fetch(`${BASE_URL}${path}`, {
-    method,
-    headers: {
-      "content-type": "application/json",
-      ...(withAuth ? { authorization: `Bearer ${sessionToken}` } : {}),
-    },
-    body: payload === undefined ? undefined : JSON.stringify(payload),
-  });
-  const text = await res.text();
-  return { status: res.status, body: text ? JSON.parse(text) : {} };
-}
-
-export const api = {
-  get: (path: string, options?: RequestOptions) =>
-    request("GET", path, undefined, options),
-  post: (path: string, payload?: unknown, options?: RequestOptions) =>
-    request("POST", path, payload, options),
-  patch: (path: string, payload?: unknown, options?: RequestOptions) =>
-    request("PATCH", path, payload, options),
-  delete: (path: string, options?: RequestOptions) =>
-    request("DELETE", path, undefined, options),
-};

package/example/tests/tasks.test.ts

@@ -1,83 +0,0 @@
-import { beforeAll, describe, expect, it } from "vitest";
-
-import { api, authenticate } from "./client";
-
-beforeAll(async () => {
-  const login = await api.post("/auth/login", {
-    email: "ada@example.com",
-    password: "correct horse battery staple",
-  });
-  authenticate(login.body.token ?? null);
-});
-
-describe("GET /tasks", () => {
-  it("lists tasks for the authenticated user", async () => {
-    const res = await api.get("/tasks");
-
-    expect(res.status).toBe(200);
-    expect(Array.isArray(res.body.tasks)).toBe(true);
-  });
-
-  it("rejects requests without a bearer token", async () => {
-    const res = await api.get("/tasks", { auth: false });
-
-    expect(res.status).toBe(401);
-  });
-});
-
-describe("POST /tasks", () => {
-  it("creates a task and returns it", async () => {
-    const res = await api.post("/tasks", {
-      title: "Ship the Q3 roadmap",
-      projectId: "proj_1",
-    });
-
-    expect(res.status).toBe(201);
-    expect(res.body.id).toBeDefined();
-    expect(res.body.title).toBe("Ship the Q3 roadmap");
-  });
-
-  it("rejects a task without a title", async () => {
-    const res = await api.post("/tasks", { projectId: "proj_1" });
-
-    expect(res.status).toBe(400);
-    expect(res.body.error).toBe("title is required");
-  });
-
-  it("rejects a due date in the past", async () => {
-    const res = await api.post("/tasks", {
-      title: "Time travel",
-      dueDate: "1999-12-31",
-    });
-
-    expect(res.status).toBe(422);
-  });
-});
-
-describe("GET /tasks/{taskId}", () => {
-  it("returns a task by id", async () => {
-    const created = await api.post("/tasks", { title: "Write release notes" });
-    const res = await api.get(`/tasks/${created.body.id}`);
-
-    expect(res.status).toBe(200);
-    expect(res.body.id).toBe(created.body.id);
-  });
-
-  it("returns 404 for an unknown task id", async () => {
-    const res = await api.get("/tasks/task_does_not_exist");
-
-    expect(res.status).toBe(404);
-  });
-});
-
-describe("PATCH /tasks/{taskId}", () => {
-  it("updates the fields of a task", async () => {
-    const created = await api.post("/tasks", { title: "Refine the backlog" });
-    const res = await api.patch(`/tasks/${created.body.id}`, {
-      title: "Refine and prioritize the backlog",
-    });
-
-    expect(res.status).toBe(200);
-    expect(res.body.title).toBe("Refine and prioritize the backlog");
-  });
-});