qaas-python 0.0.1__py3-none-any.whl

qaas_python-0.0.1.dist-info/METADATA

@@ -0,0 +1,429 @@
+Metadata-Version: 2.5
+Name: qaas-python
+Version: 0.0.1
+Summary: A multi-agent QA system: finds real defects, reproduces them, files tickets, fixes them, and proves the fix
+Project-URL: Homepage, https://github.com/allaabdella2-us/qa-multi-agent-system
+Project-URL: Repository, https://github.com/allaabdella2-us/qa-multi-agent-system
+Project-URL: Issues, https://github.com/allaabdella2-us/qa-multi-agent-system/issues
+Project-URL: Changelog, https://github.com/allaabdella2-us/qa-multi-agent-system/blob/main/CHANGELOG.md
+Author: Alla Abdella
+License-Expression: MIT
+License-File: LICENSE
+Keywords: agents,bug-finding,claude,llm,multi-agent,qa,testing
+Classifier: Development Status :: 4 - Beta
+Classifier: Intended Audience :: Developers
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Topic :: Software Development :: Quality Assurance
+Classifier: Topic :: Software Development :: Testing
+Requires-Python: >=3.12
+Requires-Dist: claude-agent-sdk>=0.2.127
+Requires-Dist: pydantic>=2.9
+Requires-Dist: pyyaml>=6.0
+Requires-Dist: rich>=13.9
+Requires-Dist: typer>=0.16
+Provides-Extra: dev
+Requires-Dist: pytest-asyncio>=0.24; extra == 'dev'
+Requires-Dist: pytest>=8.3; extra == 'dev'
+Description-Content-Type: text/markdown
+
+<div align="center">
+
+# 🐦‍⬛ qaas
+
+### A multi-agent QA system that finds real defects — and proves it
+
+**Reads your application → finds defects → reproduces each with a failing test → files the ticket → fixes it → reviews the fix → verifies it.**
+
+[![PyPI](https://img.shields.io/pypi/v/qaas-python?color=3775A9&logo=pypi&logoColor=white)](https://pypi.org/project/qaas-python/)
+[![Python](https://img.shields.io/pypi/pyversions/qaas-python?color=3776AB&logo=python&logoColor=white)](https://pypi.org/project/qaas-python/)
+[![License](https://img.shields.io/badge/License-MIT-green.svg)](LICENSE)
+[![CI](https://github.com/allaabdella2-us/qa-multi-agent-system/actions/workflows/ci.yml/badge.svg)](https://github.com/allaabdella2-us/qa-multi-agent-system/actions/workflows/ci.yml)
+[![Tests](https://img.shields.io/badge/tests-686%20offline-success)](#-contributing)
+[![Built on](https://img.shields.io/badge/built%20on-Claude%20Agent%20SDK-D97757)](https://docs.claude.com/en/api/agent-sdk/overview)
+
+[Quickstart](#-quickstart-in-60-seconds) · [Your repo](#-point-it-at-your-repository) · [Jira](#-file-into-jira) · [Architecture](ARCHITECTURE.md)
+
+</div>
+
+---
+
+Most "AI QA" tools generate tests. **This one behaves like a QA team.**
+
+Fifteen agents, each with its own context, tool allowlist and budget, coordinated by
+a state machine that is ordinary Python — because a model cannot enforce a budget
+it is itself spending.
+
+```
+      DISCOVERY LOOP                                   REMEDIATION LOOP
+ ┌──────────────────────────────────────┐        ┌───────────────────────────┐
+ │  MAPPER ─▶ API ─┐          │        │   FIXER ─▶ REVIEWER       │
+ │   (system map)   BROWSER ─┴─▶ REPRODUCER ─┼─▶ TRIAGE│    (fix)     (review)     │
+ │                 (discover)   (repro) │  (file)│                           │
+ └──────────────────────────────┬───────┘        └──────────┬────────────────┘
+                                │                           │
+                                ▼                           ▼
+                           [ TICKET ] ◀──────────────  VERIFIER (verify)
+```
+
+Nothing crosses between the loops except a ticket — which is also the audit trail.
+
+---
+
+## ✨ Why this one is different
+
+| | |
+|---|---|
+| 🧠 **The orchestrator is code, not a prompt** | A model cannot enforce a budget it is spending. Phase ordering, concurrency, retries and the loop breakers live in `router.py`. That is also why **686 tests run offline, free, with no API key.** |
+| 🧱 **Every agent is its own `query()`** | Not subagents of a shared parent. Each gets a real context boundary, an enforceable tool allowlist, and its own cost number. |
+| 🔬 **Evidence or it did not happen** | `has_evidence()` and `is_fileable()` are methods on the envelope model, not requests in a prompt. An agent cannot talk its way past them. |
+| 📊 **Measured, not asserted** | A deliberately buggy demo app ships with a golden ledger of **16 seeded defects + 4 planted non-defects**. `qaas score` reports recall *and* precision, so a prompt change has a number attached. |
+| 🔒 **Merge is impossible by construction** | No merge method exists anywhere. `gh pr merge` is refused. Pull requests open as drafts. Shipping stays a human decision. |
+| 🔍 **Every action is on the record** | 28 kinds of ledger event — every tool call, denial, verdict and escalation. `qaas trace` reads it back as a timeline. |
+
+---
+
+## 🤖 The roster
+
+| agent | layer | what it does |
+|---|---|---|
+| 🗺️ MAPPER | map | services, routes, schema, ownership → the system map everything reads |
+| 🏛️ ARCHITECT | discovery | circular deps, layering violations, god modules, dead code |
+| 🔌 API | discovery | API contract drift, authz gaps, error-shape inconsistency |
+| 🖱️ BROWSER | discovery | drives the UI through real journeys |
+| 🗄️ DBA | discovery | schema constraints the code assumes and the database does not enforce |
+| 🔒 AUDITOR | discovery | missing authorization, secrets, vulnerable dependencies, leaks |
+| 📡 SOCKET | discovery | WebSocket auth, reconnect, ordering, backpressure |
+| 🧭 GUIDE | discovery | whether a person can *find* a feature, not just whether it works |
+| ⏱️ LOAD | discovery | N+1 queries, unindexed hot paths, unbounded results, bundle outliers |
+| 🔨 REPRODUCER | triage | reproduces, minimises, measures flake, commits a failing test |
+| 📝 TRIAGE | triage | dedupes, scores severity, routes, files — the only tracker writer |
+| 🔧 FIXER | remediation | the minimal fix, on a branch |
+| ⚖️ REVIEWER | remediation | adversarial review: APPROVE / REQUEST_CHANGES / ESCALATE |
+| ✅ VERIFIER | verify | re-runs the original test → VERIFIED / NOT_FIXED / REGRESSED |
+| 📊 REPORTER | reporting | what the run found, what recurred, and what it could not reach |
+
+**ROUTER** is the sixteenth. It is the Python state machine rather than an
+agent — a model cannot enforce a budget it is itself spending.
+
+---
+
+## 🚀 Quickstart in 60 seconds
+
+```bash
+pip install qaas-python
+```
+
+```bash
+cd ~/code/your-app
+qaas init .                          # inspects the repo, writes + activates a target profile
+qaas validate                        # config, prompts, allowlists      ← no API call
+qaas run --mode pr-check --dry-run   # every agent's exact options      ← no API call
+```
+
+Or point it straight at a URL:
+
+```bash
+qaas run --repo https://github.com/you/your-app --dry-run
+```
+
+> [!TIP]
+> Nothing above contacts an API. `--dry-run` prints exactly what each agent would
+> receive — model, budget, turn cap, tool allowlist, prompt size.
+
+**Auth:** the Claude Code CLI if you are signed in, otherwise `ANTHROPIC_API_KEY`.
+
+---
+
+## 🎯 Point it at your repository
+
+```bash
+qaas init https://github.com/you/your-app     # clones, inspects, writes a profile
+qaas init ~/code/your-app --name your-app     # or a local path
+```
+
+`init` writes `.qaas/config/targets/<name>.yaml` **and activates it**. Every value
+in it is a **guess you are expected to correct** — it reports what it detected and
+what it could not find.
+
+The load-bearing field is `environment.mode`:
+
+| mode | meaning | what agents may do |
+|---|---|---|
+| 🔵 `none` | no running instance | read code, schema and spec only |
+| 🟡 `external` | already running (staging, dev server) | read and exercise, **never** reset |
+| 🟢 `compose` | qaas owns the lifecycle | seed, reset, tear down |
+
+> [!NOTE]
+> `none` is a perfectly good place to start, and where most first runs against a
+> real repository begin. Findings stay honest about it: an agent that could not
+> observe a behaviour says so and lowers its confidence.
+
+**Credentials never live in the profile.** It names environment variables:
+
+```yaml
+auth:
+  mode: login
+  login_endpoint: POST /api/v1/session
+  roles:
+    admin:  { username: qa-admin@example.com,  password_env: APP_ADMIN_PASSWORD }
+    viewer: { username: qa-viewer@example.com, password_env: APP_VIEWER_PASSWORD }
+```
+
+---
+
+## 🎫 File into Jira
+
+```bash
+export JIRA_BASE_URL=https://you.atlassian.net
+export JIRA_EMAIL=you@example.com
+export JIRA_API_TOKEN=...            # an API token, not a password
+export JIRA_PROJECT_KEY=QA
+
+QAAS_TRACKER=jira qaas tracker-check  # auth, project, permissions, workflow — creates nothing
+QAAS_TRACKER=jira qaas run --mode nightly
+```
+
+`tracker-check` validates credentials, confirms the project and issue type exist,
+maps your workflow statuses, and prints the exact JSON it *would* POST. **It
+creates nothing.**
+
+Tired of four exports in every new shell? Put them in a `.env` — `.qaas/.env` is
+already gitignored — and every command reads it. **Anything you export wins over
+the file**, so a stale `.env` can never redirect a run.
+
+- 🔁 **Dedupe across runs** — tickets carry a `qaas-fp-<fingerprint>` label, so the next run recognises an already-filed defect and increments its occurrence count instead of filing again.
+- 🔐 **Security findings are refused** unless `JIRA_SECURITY_PROJECT_KEY` is set. A vulnerability in a project the whole company can read is a disclosure with no undo.
+
+> [!TIP]
+> Keep the committed backend `local` — it writes tickets as JSON under
+> `.qaas/tickets/` so you can read what *would* be filed. Switch per shell with
+> `QAAS_TRACKER=jira`.
+
+### 📌 A view per repository, made for you
+
+Point it at a new repository and it provisions that repository's own Jira view
+before the first agent starts — so there is something to watch *during* the run,
+not a report afterwards.
+
+```console
+$ QAAS_TRACKER=jira qaas run --repo https://github.com/acme/checkout.git --mode nightly
+target: checkout (none)
+filter created — https://you.atlassian.net/issues/?filter=10001
+every ticket from this run carries the label repo-checkout
+```
+
+Every ticket the system files carries `repo-<target>`, stamped in code rather
+than asked of an agent. A **saved filter** over exactly that label is the
+per-repository view, and on a company-managed project a **board** is built over
+the filter too.
+
+```bash
+qaas board                  # find or create this target's view
+qaas board --no-create      # show the label and JQL, touch nothing
+```
+
+> [!NOTE]
+> **Not a project per repository.** Creating a Jira project needs administrator
+> rights a bot account rarely has, and a project per repository is unmanageable
+> by the tenth one. A filter needs no special grant.
+>
+> **Not always a board, either.** Team-managed (next-gen) projects own their own
+> board and cannot have a second one built over a filter — Jira's API will
+> happily create one and give it no page in the UI. So the project's style is
+> checked first, and on a team-managed project you get the filter alone. You are
+> told which you got, and the link always opens. Point `JIRA_PROJECT_KEY` at a
+> **company-managed** project and you get a real board per repository, with
+> To Do / In Progress / Done.
+
+Run it twice on the same repository and it **reuses** what is there. A run is
+never failed over this: a run that found nine defects and could not make a view
+has still done its job.
+
+---
+
+## 🔌 Bring your own MCP servers
+
+Declare them in `system.yaml`. No Python to edit.
+
+```yaml
+mcp_servers:
+  house-lint:
+    type: stdio
+    command: ./tools/lint-mcp
+    args: ["--strict"]
+    env: { LINT_TOKEN: "${ACME_LINT_TOKEN}" }   # from the environment, never a literal
+  remote-docs:
+    type: http
+    url: https://mcp.example/v1
+```
+
+Then add the name to any agent's `mcp_servers:` list. **Declaring a server grants
+nothing** — an agent receives it only by naming it.
+
+```console
+$ qaas validate
+                       Declared MCP servers
+┃ name        ┃ kind  ┃ what it runs              ┃ used by      ┃
+│ house-lint  │ stdio │ ./tools/lint-mcp --strict │ MAPPER │
+│ remote-docs │ http  │ https://mcp.example/v1    │ nobody       │
+```
+
+> [!WARNING]
+> A server's tools are allowed **wholesale** once an agent names it. qaas checks
+> that the agent declared the server; it cannot inspect what a third-party
+> server's tools actually do. **A server you declare is a server you trust.**
+
+There is deliberately **no in-process Python server type** — a module path from a
+config file would mean importing arbitrary code into the process holding your
+Anthropic, Jira and GitHub credentials. Wrap it in a stdio entry point instead.
+
+Two limits worth knowing: **6 MCP servers per agent** (tool-selection accuracy
+falls off past ~7), and **FIXER is already at the cap** — the agent people most
+want to extend.
+
+---
+
+## ✏️ Make the prompts yours
+
+Agents are **a prompt plus a YAML file**. Both are yours to change.
+
+```bash
+qaas prompts list              # which prompt is in force, and where it came from
+qaas prompts eject API     # copy it to .qaas/prompts/ and edit freely
+qaas prompts diff              # what you changed vs. what shipped
+```
+
+Prefer **adding** to replacing — drop a `API.append.md` beside it:
+
+```markdown
+## Our conventions
+- Never file a finding without a curl reproduction.
+- Treat any 500 on a write path as blocker severity.
+```
+
+That block is inserted between the agent's prompt and the shared house rules, so
+you keep receiving improvements to the base prompt instead of forking it forever.
+
+---
+
+## 🔍 Full traceability
+
+Every tool call, denial, verdict and escalation is on the record.
+
+```console
+$ qaas trace run-20260908T182034-c6ed26
+    t+  agent         kind            detail
+    0s  -             run_started     mode=nightly  agents=[7]
+    0s  MAPPER  agent_started   model=claude-sonnet-5
+    4s  MAPPER  tool_call ×34   Read×25, Glob×6, ToolSearch×2
+    6s  MAPPER  denial          tool=Bash  reason=Bash is not in MAPPER's
+                                      tool allowlist (Read, Grep, Glob).
+  146s  MAPPER  system_map      version=20260907T233530  sections=[12]
+  156s  MAPPER  agent_finished  subtype=success  num_turns=45
+```
+
+```bash
+qaas trace <run-id> --follow                       # watch a run as it happens
+qaas trace <run-id> --quiet                        # decisions only, no file reads
+qaas trace <run-id> --agent verifier --kind verdict   # filter
+qaas trace <run-id> --json                         # export
+qaas show <run-id>                                 # mode, commit, tickets, escalations
+qaas runs                                          # everything that ever ran
+```
+
+**Watch a run live.** `--follow` tails the ledger of a run in progress — start it
+in a second terminal the moment a run begins, or even before, and it waits.
+
+```console
+$ qaas trace run-20260909T163240-83b11c --follow --quiet
+following run-20260909T163240-83b11c — ctrl-c to stop
+16:32:40 -            run_started      mode=pr-check  agents=[8]  target_sha=da19f406
+16:32:40 MAPPER agent_started    model=claude-sonnet-5
+16:32:46 MAPPER denial           tool=Bash  reason=Bash is not in MAPPER's
+                                       tool allowlist (Read, Grep, Glob).
+16:36:11 ARCHITECT     envelope         severity=major  domain=architecture
+16:41:03 TRIAGE        ticket           action=created  key=QA-118  severity=major
+```
+
+Drop `--quiet` to see every file the agents read, one line each. Combine with
+`--agent` and `--kind` to watch one agent, or only the verdicts.
+
+Runs are pinned to the **commit of the target** they examined, so a finding can
+be replayed against the tree that produced it.
+
+---
+
+## 🛡️ Safety rails
+
+Enforced in code, not requested in a prompt:
+
+| rail | what it does |
+|---|---|
+| 📁 **Path scoping** | Writes checked against that agent's `write_paths`. Most agents cannot write at all. |
+| 🌿 **Branch scoping** | Git writes must match the agent's patterns (`qa/repro/*`, `fix/*`). `main` and force-push refused outright. |
+| ⛔ **Forbidden classes** | Migrations, auth, payment, secrets, infrastructure, CI — stop at a human however small the change looks. |
+| 🎟️ **Ticket rate limit** | Over the per-run cap the call is denied and the router escalates rather than filing. |
+| 🧪 **Immutable test** | The agent fixing a defect may not edit the test that defines it. |
+| 🚫 **No filesystem settings** | `setting_sources=[]` — a repository qaas is inspecting cannot inject settings, hooks or MCP servers into the process running it. |
+
+Denials return a reason and are logged; they never kill the turn. The agent reads
+the refusal and adapts.
+
+---
+
+## 📈 How you know it works
+
+`qaas` ships with a **deliberately buggy demo app** and a golden ledger recording
+every defect seeded into it — plus **planted non-defects**: correct-but-suspicious
+code that a careless reader would report.
+
+```bash
+cd target-app && docker compose up -d
+qaas run --mode nightly && qaas score
+```
+
+`qaas score` reports recall, precision and severity agreement against that
+ledger. That matters more than any number this page could print: it means a
+change to a prompt, a threshold or a model has **a measurement attached** rather
+than an opinion.
+
+> [!CAUTION]
+> **Seeded defects are easier than real ones**, and this system was calibrated
+> against them. A benchmark shows the loop works end to end and does not spray
+> false positives. It does not show that it will find the hard bug in your
+> codebase. Run it on something you know well and judge it on what it finds
+> there.
+
+---
+
+## 🤝 Contributing
+
+```bash
+git clone https://github.com/allaabdella2-us/qa-multi-agent-system
+cd qa-multi-agent-system
+uv venv && uv pip install -e ".[dev]"
+
+pytest                 # 686 tests, offline, free — keep it that way
+pytest -m docker       # needs: cd target-app && docker compose up -d
+qaas validate
+```
+
+The `llm`, `docker`, `github` and `jira` markers are deselected by default.
+**A CI run that costs money is a CI run people switch off.**
+
+> [!IMPORTANT]
+> If you change a seeded defect in `target-app/`, retire its ledger entry with
+> `fixed_in:` in the same commit — a stale ledger silently corrupts every score.
+
+New to the codebase? [`ARCHITECTURE.md`](ARCHITECTURE.md) explains the entry
+point, the five phases, what moves between agents, and what the guardrails stop.
+
+---
+
+<div align="center">
+
+**MIT licensed** · [LICENSE](LICENSE) 
+
+</div>

qaas_python-0.0.1.dist-info/RECORD

@@ -0,0 +1,96 @@
+qaas/cli.py,sha256=Zga6KkYUUzRYtq1GAvLl3CkEIrj7gzKzwYuDGVAKUDc,74066
+qaas/config.py,sha256=1DvhwGJuA5Ute8rRKHYBBmYy82wmXrdTl1GxeZpW4To,17576
+qaas/discover.py,sha256=0bfpIfgRlvcxVb2mAvcrcOK4MW5Q5RnbjspNMk-42rE,9311
+qaas/envelope.py,sha256=Dh6h7MqktwOFlKswBqmQUOfCvwQCFNOJ4k8ACbCUtY8,10771
+qaas/envfile.py,sha256=f3RD7UxACxJS_-NExExBCbvAe7v8QnD3EgvLaNl1zD4,4443
+qaas/guardrails.py,sha256=RIupEr6VuH32DD6SpDAM-cIza1HgbUn0di6D2YI-QXU,26277
+qaas/paths.py,sha256=98GZkN6KzAa-sTpbMcIpyMUM8Bh3H4JbI3tZLks7juc,12718
+qaas/registry.py,sha256=qMmvAor0ARE-UkRWS6EJrN_XdZVdpfzQFDDNmCOMyJo,21275
+qaas/router.py,sha256=roxGZXyb5TjBfnU24OozHZkJqb9NpU0Hawsg0zrNjOs,25893
+qaas/runner.py,sha256=vZ1oJpfNN9L7DQhw8p8GzL8rYSM3uDnym-NM2gG2FV0,8496
+qaas/scorecard.py,sha256=_IeG1iTIIk3M4o8ZT8eSY4BxbZPCSX_AmG3-22UxqFY,17065
+qaas/sdk_compat.py,sha256=ftE6PK0jZY85zkYqS7UJTGYwRkYDlH4NspiKbKVfVXQ,1678
+qaas/store.py,sha256=U998R3C8rZJSSFZmOxcMeEzAYseT5Du6AhJtYUKn5nY,12943
+qaas/target.py,sha256=RGFRAKFl5Nqtnj5IwLl5delDIBaeUYjps4WmadbAlQ8,11770
+qaas/tasks.py,sha256=YcGGZqoSrhXkxwXR8VVH7VMJ_TThsnPViIdIM3TJk98,18662
+qaas/trace.py,sha256=xVN8OkXXgBpY1mQxHBmPS_89hCcFQX3dVjhkDeEpZ1o,14402
+qaas/adapters/__init__.py,sha256=bw2pqtDqhZGP730gwV28BJ-8TF-rhanwCEjdIizjP6A,882
+qaas/adapters/tracker.py,sha256=4qvDFKkFU-ICzmn10MIKjAr9XUAWUwGg9S2RrFt8-PE,74803
+qaas/adapters/vcs.py,sha256=n-jVvugcH4uZ90ZwXllLmDRF7CmLe-gI1Y_fszI8NJU,23055
+qaas/defaults/config/system.yaml,sha256=OnAIOmHOAYwd6vjjPgmPB-dRJLZaRtkC7dxjw1mncz8,2739
+qaas/defaults/config/agents/api.yaml,sha256=GK_O3sffZoIWkL86kMXT9B0tGhTOYrTSjNtp2vyfrYE,700
+qaas/defaults/config/agents/architect.yaml,sha256=L8oUF4kzUxEE63k0wJ7ieZnqZhw6bLMf3lJzdMl0Cww,968
+qaas/defaults/config/agents/auditor.yaml,sha256=quprfnaC_QsxwTCl_fAEoRaWSdcL3RZQkWPqDOl5aqs,763
+qaas/defaults/config/agents/browser.yaml,sha256=OQOo1mN9LBiKsH7d78Kon3J5fw7OwAz7UjodU8XtuiA,512
+qaas/defaults/config/agents/dba.yaml,sha256=-VczoaI2TjfGaP2HP-rw9sX2aDpegftMGyFjikvkon0,771
+qaas/defaults/config/agents/fixer.yaml,sha256=vRXawC3lVWDpyz6WiPjcT2tYn_BoitROE7jec-hDgaI,2164
+qaas/defaults/config/agents/guide.yaml,sha256=pydlc5uNwPG8zSGUSc-vqDhMI0zY6easdLmvDXMBDSM,1022
+qaas/defaults/config/agents/load.yaml,sha256=ralEW-NQhZtxid03Q03_eSMzPyN9kTQK8dgKSfM6uBI,1105
+qaas/defaults/config/agents/mapper.yaml,sha256=tDXOd4xJogK6U8qRsOeMs1C-2hiiUYfurNmRj5d1P_8,740
+qaas/defaults/config/agents/reporter.yaml,sha256=RqicXSQv19UuRLL5pAnJ_WBDNV7QHBdh8nlOBI1FbLM,672
+qaas/defaults/config/agents/reproducer.yaml,sha256=aoW2oajiRJ_s2kiV2fhEslMmV-bK7Avjfq5CltQ6MwI,874
+qaas/defaults/config/agents/reviewer.yaml,sha256=qOKIOXn64Gq5x3bV9bKYigSqMQx8pmRMAMYTN1iTJDI,719
+qaas/defaults/config/agents/socket.yaml,sha256=GGGVx2_DPq7cnPwz4ta1-AhlThWCAtk4GHv2uUEdiTY,1051
+qaas/defaults/config/agents/triage.yaml,sha256=jLjljOHG564-fLZzmYq1wSz10vW9AVmgdys_rSLgo3M,750
+qaas/defaults/config/agents/verifier.yaml,sha256=urRQ2cGjUx99YFkKNg6wjGrlEGiFlliHLy0_qL3mkAU,839
+qaas/mcp/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+qaas/mcp/context.py,sha256=UtrJdG3USVbfzFzQVK9ZIdxz3CL0bHV9n8uH_IU6Juo,2951
+qaas/mcp/contract_diff.py,sha256=HcSB991oRSh9Z9Aii1yQdx7ZRfv13zkb1tlnFsT_Zjc,47843
+qaas/mcp/defect_memory.py,sha256=IFs6s0zYjUv6KvCaaXNgnQn9HAl8y-zDFVCxeWkEwuM,19829
+qaas/mcp/env_control.py,sha256=prpmsseF9aHr8n9kI3f9ujLO4m9hUACR5uNz6Bcm4uY,39709
+qaas/mcp/envelope_server.py,sha256=Ov_Srkr1GVYWfb9WSzuW5b4dYwyVF0cpO6yMm0wPZhE,20403
+qaas/mcp/test_runner.py,sha256=b3sJft_JZ2nmnGjKvWSO-FNLykrC98T_M7C7csxlnzY,33875
+qaas/mcp/tracker.py,sha256=W90TrlRTD7T7t9SDv0fCFRIe_hPfL8IZr5UGQtGoelM,18645
+qaas/mcp/vcs.py,sha256=taQWXfT7k72SLeRmAETGb4z3t63uAn46CPib_ZALGVo,20945
+qaas/plugin/.claude-plugin/plugin.json,sha256=XbzYID6aMD3dVPvJxOP9X_0iJR5isqIfKgGkZmn38BU,263
+qaas/plugin/skills/a11y-audit/SKILL.md,sha256=hTpKJkKTYqxkl2kQRqHrsKU1YfhntilzCykkToBnWyY,2634
+qaas/plugin/skills/adversarial-review/SKILL.md,sha256=uUnKy6xvNfse5EMlU072ycYN6c2rHA-LNXOOJW73PRI,8582
+qaas/plugin/skills/api-surface-extraction/SKILL.md,sha256=5RHGdz4uh0Qez-pcGvCIeSwRAcNDo0KhITqg22pRawA,2349
+qaas/plugin/skills/authz-matrix-check/SKILL.md,sha256=eObh1VTxGrASneSVBKVavIw7uRzWtnAluJRJyT0s8cY,2822
+qaas/plugin/skills/console-error-triage/SKILL.md,sha256=mh5B7tEtLh--2XDdYZWsERE0ojBv8O0greZvr_RzBiI,2221
+qaas/plugin/skills/contract-test-generation/SKILL.md,sha256=n31bPqI88LzOoGvNtyKA20r6qHRUwT69qAoP-LfA19U,2180
+qaas/plugin/skills/dedupe-strategy/SKILL.md,sha256=mMJ1rcQJ88orWwscNQUFI4i3c830n2-d05C4AKF3y7U,2644
+qaas/plugin/skills/environment-pinning/SKILL.md,sha256=NT0nrWiU6TCcmhP4RMre5UhSSP9bmWuTnfyJM03suEI,1890
+qaas/plugin/skills/error-taxonomy/SKILL.md,sha256=ixnkavgU-br48vQwBhC8elc8nN4lNBQ7mtKzcveg3qY,2574
+qaas/plugin/skills/exploratory-ui-walk/SKILL.md,sha256=NDJn3MQ1E-JgLd09PKhUkCxHo8amFtmEJ2YLYpgDzBI,2454
+qaas/plugin/skills/failing-test-authoring/SKILL.md,sha256=QGPZGDrRR1yvhFk2rokegtDdWtnCTkouFhuMaktwQF8,2158
+qaas/plugin/skills/flake-detection/SKILL.md,sha256=2iDjsfc4xHpgpBfOYx9zbubDoX6XdBJAB0U1W8budOg,2333
+qaas/plugin/skills/form-state-probe/SKILL.md,sha256=IocxBbUr0ATjwWbmTQVN8LU5oBelLJLlLJaGsBRDDQ8,2124
+qaas/plugin/skills/minimal-diff-discipline/SKILL.md,sha256=_e-mhkhBv5j2_FY3XjwtO5dP-aVsWtU-sGcua907gt8,5896
+qaas/plugin/skills/openapi-diff/SKILL.md,sha256=aaJmSGxbLlPy8JI9w09P67p0AzlQbM3lAjYNh3gFi4I,2641
+qaas/plugin/skills/ownership-resolution/SKILL.md,sha256=s1gFLr3ItSKqlN6pN01QaxaXduXxWx5BXdr1CqMRlRY,1897
+qaas/plugin/skills/product-task-graph/SKILL.md,sha256=7Q_3fdx4FCKG9qcFLaukOT6QWzs95OTe5ESFZBCXp7g,2349
+qaas/plugin/skills/regression-risk-scoring/SKILL.md,sha256=ILhCKakqcJym_EtZWC3bFMnmnrEpLRVZk-MJfyh4dfc,6149
+qaas/plugin/skills/regression-suite-selection/SKILL.md,sha256=c23I-9DZiP5zRozPitSJe_ekBSkfwL-krbTbnPoUs_U,2241
+qaas/plugin/skills/repo-cartography/SKILL.md,sha256=CIK0Vr9rCuW74og-X8Tsc9bJYW_zOgQS4rGqFP3OMnI,2343
+qaas/plugin/skills/repro-minimisation/SKILL.md,sha256=U-I380BAaiQ-qfXjPUy0j0zTEcNr5WI1iVgj8t7UF4Q,2418
+qaas/plugin/skills/rollback-plan-authoring/SKILL.md,sha256=6kJ2i2ujSQBiu1IR7yKK2gkBV5JyTvSbRIrzOZfHkDM,5640
+qaas/plugin/skills/root-cause-vs-symptom/SKILL.md,sha256=BcEwV9295gWmX0XIeJFL3lxy7ME1tLXQlW24wJxmbwA,7319
+qaas/plugin/skills/routing-rules/SKILL.md,sha256=8v8pJZLGPyM8rXIWpfXpSb5JDCdDNLk5TxLtIt0KSqI,2306
+qaas/plugin/skills/severity-rubric/SKILL.md,sha256=xR9UuClh8tDY9mEGapP6Uagnn-PqQuRX3YsCSZRaki4,3399
+qaas/plugin/skills/test-first-fix/SKILL.md,sha256=7dfTBNJfi9qCGxhGVtsUCMVgAp8MiNWMn1xGHj4-2uM,5748
+qaas/plugin/skills/test-quality-audit/SKILL.md,sha256=hbmzFq57j8g2qa4I4Vp8RHxwQv-BZMYsBRIjPg-fu7k,6434
+qaas/plugin/skills/ticket-writer/SKILL.md,sha256=Ira6tvQDgdQ5rY-ggauE03DZFwhFkaNp1xMHXJ541a4,2414
+qaas/plugin/skills/verdict-reporting/SKILL.md,sha256=y3un7-yns_dojK1YYpGaQhXyid44M8Zb8vCwgGSH9gA,1998
+qaas/plugin/skills/verification-protocol/SKILL.md,sha256=6ixQO7GBbyA_fK8CCeyUmPr2Tu_b3avoSG8WfzIyGFs,2455
+qaas/prompts/API.md,sha256=JiucVPX48qNtzXaIPXD3l7e6S5l01vO5I-WuNXbEjlQ,2245
+qaas/prompts/ARCHITECT.md,sha256=vbIt6M375EBiS8vvXWyccccVzDaWsfhFaJluoyDJB5c,4308
+qaas/prompts/AUDITOR.md,sha256=L2zxAf83l0yemmJMWyaRkU1H3kKwfCFPsLHKkS1HQ_E,2945
+qaas/prompts/BROWSER.md,sha256=0LY0KhKNSbL29ytSgtEgFDIn5Ga8exB1jTyfom-BJDY,2220
+qaas/prompts/DBA.md,sha256=DD9R6xaGRNdXMmzSd3yCAzPm01avdHLnV78IvmgfACw,2906
+qaas/prompts/FIXER.md,sha256=6LtaKV2ub9II2eb-V9zsvOU_JIZYlblvS3x-FLotHyM,2920
+qaas/prompts/GUIDE.md,sha256=4g59-7Oq0mutM7UTSpJ-N3pskka5xQ8fmkLVunTj7fk,5137
+qaas/prompts/LOAD.md,sha256=C2GwDHHqGAqQqDe23IGpIjGn6qsZh_2bP7Tw98omgLA,5888
+qaas/prompts/MAPPER.md,sha256=Lae1zNa9Hqpmqa2N1mO3VGOqi9rX9HN4DP-h15aqmcA,2220
+qaas/prompts/REPORTER.md,sha256=HaPSHxIC89-lLjMtWfUhekhLdyb8tlLuXe8gNtnVIgY,3067
+qaas/prompts/REPRODUCER.md,sha256=w9vDg6MH8-D1FQr46NpjSK7ejL1G8UTJVNW2WdLcpEc,2274
+qaas/prompts/REVIEWER.md,sha256=A3MjFE7VQgDoc0TqjIQUgHAdKy5HBH9za3gU1wLAGpk,2523
+qaas/prompts/SOCKET.md,sha256=3Wr7mt6t0zpj546ZCFXd4iC61SYh9Dlgi9St1bM4-n4,5488
+qaas/prompts/TRIAGE.md,sha256=VSL7jc89wTrSY8SiX0zmRy9d9gunCBT4c2cE8Aoei_c,2112
+qaas/prompts/VERIFIER.md,sha256=AwvggnzNbb3DiVjoaWNWzV593LY5_qYApENQpXGS938,2034
+qaas/prompts/_shared.md,sha256=lN_s_rAmakhGuyRuWItC--iyy-Er6ohT_dzGeE_g-fo,2620
+qaas_python-0.0.1.dist-info/METADATA,sha256=gTGbEtVxkE-nAnFD_6b0_J9ovsKCplW_o50gNAoDO0I,18909
+qaas_python-0.0.1.dist-info/WHEEL,sha256=zOwg4jB6zX2kU910N-cMawjivD6tO8NEWvE12je1bVk,87
+qaas_python-0.0.1.dist-info/entry_points.txt,sha256=6UScfruyhP9N_xGx3tXJGkaoAiB36dkINuKyOH6OkK4,38
+qaas_python-0.0.1.dist-info/licenses/LICENSE,sha256=pHWke5oMtv7PLjIQbN6hRa31J0AKj51VCd5TCTUbbX0,1069
+qaas_python-0.0.1.dist-info/RECORD,,

qaas_python-0.0.1.dist-info/WHEEL

@@ -0,0 +1,4 @@
+Wheel-Version: 1.0
+Generator: hatchling 1.32.0
+Root-Is-Purelib: true
+Tag: py3-none-any

qaas_python-0.0.1.dist-info/entry_points.txt

@@ -0,0 +1,2 @@
+[console_scripts]
+qaas = qaas.cli:app

qaas_python-0.0.1.dist-info/licenses/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Alla Abdella
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.