@copilotkit/aimock 1.43.0 → 1.45.0

package/dist/cli.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"cli.cjs","names":["CHAOS_FIELDS","Logger","parseChaosField","readProviderKeysFromEnv","AGUIMock","resolveFixturesValue","loadFixturesFromDir","loadFixtureFile","validateFixtures","createServer","resolveInboundAuth","selectInboundAuthSource","watchFixtures"],"sources":["../src/cli.ts"],"sourcesContent":["#!/usr/bin/env node\nimport { parseArgs } from \"node:util\";\nimport { statSync } from \"node:fs\";\nimport { resolve } from \"node:path\";\nimport { createServer } from \"./server.js\";\nimport { loadFixtureFile, loadFixturesFromDir, validateFixtures } from \"./fixture-loader.js\";\nimport { Logger, type LogLevel } from \"./logger.js\";\nimport { watchFixtures } from \"./watcher.js\";\nimport { AGUIMock } from \"./agui-mock.js\";\nimport { parseChaosField, CHAOS_FIELDS, type ChaosField } from \"./chaos.js\";\nimport { resolveFixturesValue } from \"./fixtures-remote.js\";\nimport { readProviderKeysFromEnv } from \"./provider-auth.js\";\nimport { resolveInboundAuth, selectInboundAuthSource } from \"./api-key-auth.js\";\nimport type { Fixture, ChaosConfig, RecordConfig } from \"./types.js\";\n\nconst HELP = `\nUsage: aimock [options]\n\nOptions:\n  -p, --port <number>       Port to listen on (default: 4010)\n  -h, --host <string>       Host to bind to (default: 127.0.0.1)\n  -f, --fixtures <value>    Fixture source (repeatable). Accepts:\n                              - filesystem path to a directory or .json file (default: ./fixtures)\n                              - https:// or http:// URL to a .json fixture file\n  -l, --latency <ms>        Latency in ms between SSE chunks (default: 0)\n  -c, --chunk-size <chars>  Chunk size in characters (default: 20)\n  -w, --watch               Watch fixture path for changes and reload\n      --log-level <level>   Log verbosity: silent, warn, info, debug (default: info)\n      --validate-on-load    Validate fixture schemas at startup\n      --metrics             Enable Prometheus metrics at GET /metrics\n      --record              Record mode: proxy unmatched requests and save fixtures\n      --record-full-model-version  Record exact model version without date stripping (default: false)\n      --proxy-only          Proxy mode: forward unmatched requests without saving\n      --strict              Strict mode: fail on unmatched requests (overridable per-request via X-AIMock-Strict header)\n      --journal-max <n>     Max request entries retained in memory (default: 1000, 0 = unbounded)\n      --fixture-counts-max <n>  Max unique testIds retained in fixture match-count map (default: 500, 0 = unbounded)\n      --provider-openai <url>     Upstream URL for OpenAI (used with --record)\n      --provider-anthropic <url>  Upstream URL for Anthropic\n      --provider-gemini <url>     Upstream URL for Gemini\n      --provider-vertexai <url>   Upstream URL for Vertex AI\n      --provider-bedrock <url>    Upstream URL for Bedrock\n      --provider-azure <url>      Upstream URL for Azure OpenAI\n      --provider-ollama <url>     Upstream URL for Ollama\n      --provider-cohere <url>     Upstream URL for Cohere\n      --provider-openrouter <url> Upstream URL for OpenRouter (video record proxy)\n      --provider-byteplus <url>   Upstream ORIGIN for BytePlus Ark (e.g. https://ark.ap-southeast.bytepluses.com — origin only, no /api/v3)\n      --upstream-timeout-ms <ms>  Idle timeout (ms) on upstream socket before response (default: 30000)\n      --body-timeout-ms <ms>      Idle timeout (ms) on upstream response body between chunks (default: 30000)\n      --max-proxy-buffer-bytes <n> Cap (bytes) on in-memory proxy-path buffer; full body still relayed (default: 67108864)\n      --max-proxy-buffer-frames <n> Cap (frames) on in-memory proxy-path per-frame state; full body still relayed (default: 5000000)\n      --agui-record              Enable AG-UI recording (proxy unmatched AG-UI requests)\n      --agui-upstream <url>      Upstream AG-UI agent URL (used with --agui-record)\n      --agui-proxy-only          AG-UI proxy mode: forward without saving\n      --replay-speed <n>    Replay speed multiplier (default: 1.0, 2.0 = 2x faster)\n      --chaos-drop <rate>   Probability (0-1) of dropping requests with 500\n      --chaos-malformed <rate>  Probability (0-1) of returning malformed JSON\n      --chaos-disconnect <rate> Probability (0-1) of destroying connection\n      --chaos-ratelimit <rate> Probability (0-1) of 429 with Retry-After\n      --chaos-latency <ms> Delay (0-${CHAOS_FIELDS.latencyMs.max}ms) injected before handling\n      AIMOCK_API_KEYS  Comma-separated inbound test API keys (environment only)\n      --help                Show this help message\n`.trim();\n\nconst { values } = parseArgs({\n  options: {\n    port: { type: \"string\", short: \"p\", default: \"4010\" },\n    host: { type: \"string\", short: \"h\", default: \"127.0.0.1\" },\n    fixtures: { type: \"string\", short: \"f\", multiple: true },\n    latency: { type: \"string\", short: \"l\", default: \"0\" },\n    \"chunk-size\": { type: \"string\", short: \"c\", default: \"20\" },\n    watch: { type: \"boolean\", short: \"w\", default: false },\n    \"log-level\": { type: \"string\", default: \"info\" },\n    \"validate-on-load\": { type: \"boolean\", default: false },\n    metrics: { type: \"boolean\", default: false },\n    record: { type: \"boolean\", default: false },\n    \"record-full-model-version\": { type: \"boolean\", default: false },\n    \"proxy-only\": { type: \"boolean\", default: false },\n    strict: { type: \"boolean\", default: false },\n    \"provider-openai\": { type: \"string\" },\n    \"provider-anthropic\": { type: \"string\" },\n    \"provider-gemini\": { type: \"string\" },\n    \"provider-vertexai\": { type: \"string\" },\n    \"provider-bedrock\": { type: \"string\" },\n    \"provider-azure\": { type: \"string\" },\n    \"provider-ollama\": { type: \"string\" },\n    \"provider-cohere\": { type: \"string\" },\n    \"provider-openrouter\": { type: \"string\" },\n    \"provider-byteplus\": { type: \"string\" },\n    \"upstream-timeout-ms\": { type: \"string\" },\n    \"body-timeout-ms\": { type: \"string\" },\n    \"max-proxy-buffer-bytes\": { type: \"string\" },\n    \"max-proxy-buffer-frames\": { type: \"string\" },\n    \"agui-record\": { type: \"boolean\", default: false },\n    \"agui-upstream\": { type: \"string\" },\n    \"agui-proxy-only\": { type: \"boolean\", default: false },\n    \"replay-speed\": { type: \"string\", default: \"1.0\" },\n    \"chaos-drop\": { type: \"string\" },\n    \"chaos-malformed\": { type: \"string\" },\n    \"chaos-disconnect\": { type: \"string\" },\n    \"chaos-ratelimit\": { type: \"string\" },\n    \"chaos-latency\": { type: \"string\" },\n    \"journal-max\": { type: \"string\", default: \"1000\" },\n    \"fixture-counts-max\": { type: \"string\", default: \"500\" },\n    help: { type: \"boolean\", default: false },\n  },\n  strict: true,\n});\n\nif (values.help) {\n  console.log(HELP);\n  process.exit(0);\n}\n\nconst port = Number(values.port);\nconst host = values.host!;\nconst latency = Number(values.latency);\nconst chunkSize = Number(values[\"chunk-size\"]);\nconst fixtureValues: string[] =\n  values.fixtures && values.fixtures.length > 0 ? values.fixtures : [\"./fixtures\"];\nconst watchMode = values.watch!;\nconst validateOnLoad = values[\"validate-on-load\"]!;\nconst logLevelStr = values[\"log-level\"]!;\n\nif (![\"silent\", \"warn\", \"info\", \"debug\"].includes(logLevelStr)) {\n  console.error(`Invalid log-level: ${logLevelStr} (must be silent, warn, info, or debug)`);\n  process.exit(1);\n}\nconst logLevel = logLevelStr as LogLevel;\n\nif (Number.isNaN(port) || port < 0 || port > 65535) {\n  console.error(`Invalid port: ${values.port}`);\n  process.exit(1);\n}\n\nif (Number.isNaN(latency) || latency < 0) {\n  console.error(`Invalid latency: ${values.latency}`);\n  process.exit(1);\n}\n\nif (Number.isNaN(chunkSize) || chunkSize < 1) {\n  console.error(`Invalid chunk-size: ${values[\"chunk-size\"]}`);\n  process.exit(1);\n}\n\nconst replaySpeed = Number(values[\"replay-speed\"]);\nif (Number.isNaN(replaySpeed) || replaySpeed <= 0) {\n  console.error(\"--replay-speed must be a positive number\");\n  process.exit(1);\n}\n\nconst journalMax = Number(values[\"journal-max\"]);\nif (Number.isNaN(journalMax) || !Number.isInteger(journalMax) || journalMax < 0) {\n  console.error(\n    `Invalid journal-max: ${values[\"journal-max\"]} (must be a non-negative integer; 0 = unbounded)`,\n  );\n  process.exit(1);\n}\n\nconst fixtureCountsMaxStr = values[\"fixture-counts-max\"];\nconst fixtureCountsMax = Number(fixtureCountsMaxStr);\nif (Number.isNaN(fixtureCountsMax) || !Number.isInteger(fixtureCountsMax) || fixtureCountsMax < 0) {\n  console.error(\n    `Invalid fixture-counts-max: ${fixtureCountsMaxStr} (must be a non-negative integer; 0 = unbounded)`,\n  );\n  process.exit(1);\n}\n\nconst upstreamTimeoutMsStr = values[\"upstream-timeout-ms\"];\nlet upstreamTimeoutMs: number | undefined;\nif (upstreamTimeoutMsStr !== undefined) {\n  upstreamTimeoutMs = Number(upstreamTimeoutMsStr);\n  if (!Number.isFinite(upstreamTimeoutMs) || upstreamTimeoutMs <= 0) {\n    console.error(\n      `Invalid upstream-timeout-ms: ${upstreamTimeoutMsStr} (must be a positive finite number)`,\n    );\n    process.exit(1);\n  }\n}\n\nconst bodyTimeoutMsStr = values[\"body-timeout-ms\"];\nlet bodyTimeoutMs: number | undefined;\nif (bodyTimeoutMsStr !== undefined) {\n  bodyTimeoutMs = Number(bodyTimeoutMsStr);\n  if (!Number.isFinite(bodyTimeoutMs) || bodyTimeoutMs <= 0) {\n    console.error(\n      `Invalid body-timeout-ms: ${bodyTimeoutMsStr} (must be a positive finite number)`,\n    );\n    process.exit(1);\n  }\n}\n\nconst maxProxyBufferBytesStr = values[\"max-proxy-buffer-bytes\"];\nlet maxProxyBufferBytes: number | undefined;\nif (maxProxyBufferBytesStr !== undefined) {\n  maxProxyBufferBytes = Number(maxProxyBufferBytesStr);\n  if (!Number.isFinite(maxProxyBufferBytes) || maxProxyBufferBytes <= 0) {\n    console.error(\n      `Invalid max-proxy-buffer-bytes: ${maxProxyBufferBytesStr} (must be a positive finite number)`,\n    );\n    process.exit(1);\n  }\n}\n\nconst maxProxyBufferFramesStr = values[\"max-proxy-buffer-frames\"];\nlet maxProxyBufferFrames: number | undefined;\nif (maxProxyBufferFramesStr !== undefined) {\n  maxProxyBufferFrames = Number(maxProxyBufferFramesStr);\n  if (!Number.isFinite(maxProxyBufferFrames) || maxProxyBufferFrames <= 0) {\n    console.error(\n      `Invalid max-proxy-buffer-frames: ${maxProxyBufferFramesStr} (must be a positive finite number)`,\n    );\n    process.exit(1);\n  }\n}\n\nconst logger = new Logger(logLevel);\n\n// Parse chaos config from CLI flags\nlet chaos: ChaosConfig | undefined;\n{\n  const dropStr = values[\"chaos-drop\"];\n  const malformedStr = values[\"chaos-malformed\"];\n  const disconnectStr = values[\"chaos-disconnect\"];\n  const ratelimitStr = values[\"chaos-ratelimit\"];\n  const latencyStr = values[\"chaos-latency\"];\n\n  if (\n    dropStr !== undefined ||\n    malformedStr !== undefined ||\n    disconnectStr !== undefined ||\n    ratelimitStr !== undefined ||\n    latencyStr !== undefined\n  ) {\n    // Same parser, same TABLE, same reject-never-clamp policy as every other\n    // chaos input (headers, fixture, server default, control API) — see\n    // `ChaosConfig`. The bounds and the integer-vs-rate grammar are read out of\n    // `CHAOS_FIELDS`, never re-typed here, so raising a cap in that one table\n    // moves the flag with it instead of leaving `--chaos-latency` on the old\n    // limit with no compile error.\n    chaos = {};\n    const flagFields: Array<{ flag: string; field: ChaosField; raw: string | undefined }> = [\n      { flag: \"chaos-drop\", field: \"dropRate\", raw: dropStr },\n      { flag: \"chaos-malformed\", field: \"malformedRate\", raw: malformedStr },\n      { flag: \"chaos-disconnect\", field: \"disconnectRate\", raw: disconnectStr },\n      { flag: \"chaos-ratelimit\", field: \"rateLimitRate\", raw: ratelimitStr },\n      { flag: \"chaos-latency\", field: \"latencyMs\", raw: latencyStr },\n    ];\n    for (const { flag, field, raw } of flagFields) {\n      if (raw === undefined) continue;\n      const val = parseChaosField(field, raw);\n      if (val === undefined) {\n        console.error(`Invalid ${flag}: ${raw} (must be 0-${CHAOS_FIELDS[field].max})`);\n        process.exit(1);\n      }\n      chaos[field] = val;\n    }\n  }\n}\n\n// Parse record/proxy config from CLI flags\nlet record: RecordConfig | undefined;\nif (values.record || values[\"proxy-only\"]) {\n  const providers: RecordConfig[\"providers\"] = {};\n  if (values[\"provider-openai\"]) providers.openai = values[\"provider-openai\"];\n  if (values[\"provider-anthropic\"]) providers.anthropic = values[\"provider-anthropic\"];\n  if (values[\"provider-gemini\"]) providers.gemini = values[\"provider-gemini\"];\n  if (values[\"provider-vertexai\"]) providers.vertexai = values[\"provider-vertexai\"];\n  if (values[\"provider-bedrock\"]) providers.bedrock = values[\"provider-bedrock\"];\n  if (values[\"provider-azure\"]) providers.azure = values[\"provider-azure\"];\n  if (values[\"provider-ollama\"]) providers.ollama = values[\"provider-ollama\"];\n  if (values[\"provider-cohere\"]) providers.cohere = values[\"provider-cohere\"];\n  if (values[\"provider-openrouter\"]) providers.openrouter = values[\"provider-openrouter\"];\n  if (values[\"provider-byteplus\"]) providers.byteplus = values[\"provider-byteplus\"];\n\n  if (Object.keys(providers).length === 0) {\n    console.error(\n      `Error: --${values[\"proxy-only\"] ? \"proxy-only\" : \"record\"} requires at least one --provider-* flag`,\n    );\n    process.exit(1);\n  }\n\n  // For --record, the first --fixtures value is the base path for the recording\n  // destination and must be a local filesystem path — writing to a URL is not supported.\n  // For --proxy-only, unmatched requests are forwarded without saving, so no writable\n  // destination is required; URL-only --fixtures is valid in that mode.\n  const recordBase = fixtureValues[0];\n  const recordBaseIsUrl = /^https?:\\/\\//i.test(recordBase);\n  if (values.record && recordBaseIsUrl) {\n    console.error(\n      `Error: --record requires a local --fixtures path for the recording destination; got URL ${recordBase}`,\n    );\n    process.exit(1);\n  }\n  record = {\n    providers,\n    // aimock's own upstream keys, sourced from AIMOCK_PROVIDER_*_KEY env vars\n    // (not CLI flags — secrets must not appear in `ps`). Injected on a\n    // fixture-miss passthrough when the caller sent no/dummy credential.\n    providerKeys: readProviderKeysFromEnv(),\n    // In proxy-only mode with only URL sources, fixturePath is never consumed\n    // (recorder.ts skips disk writes when proxyOnly is set). Leave it undefined\n    // rather than resolving a URL string as a filesystem path.\n    fixturePath: recordBaseIsUrl ? undefined : resolve(recordBase, \"recorded\"),\n    proxyOnly: values[\"proxy-only\"],\n    recordFullModelVersion: values[\"record-full-model-version\"],\n    upstreamTimeoutMs,\n    bodyTimeoutMs,\n    maxProxyBufferBytes,\n    maxProxyBufferFrames,\n  };\n} else {\n  // These flags configure upstream proxying — without --record or\n  // --proxy-only they would be parsed and then silently dropped. Routed\n  // through the constructed logger so --log-level is respected.\n  const droppedProviderFlags = (\n    [\n      \"provider-openai\",\n      \"provider-anthropic\",\n      \"provider-gemini\",\n      \"provider-vertexai\",\n      \"provider-bedrock\",\n      \"provider-azure\",\n      \"provider-ollama\",\n      \"provider-cohere\",\n      \"provider-openrouter\",\n      \"provider-byteplus\",\n    ] as const\n  ).filter((flag) => values[flag] !== undefined);\n  if (droppedProviderFlags.length > 0) {\n    logger.warn(\n      `--${droppedProviderFlags.join(\"/--\")} only apply to --record/--proxy-only upstream proxying — ignored without one of those flags.`,\n    );\n  }\n  if (\n    upstreamTimeoutMs !== undefined ||\n    bodyTimeoutMs !== undefined ||\n    maxProxyBufferBytes !== undefined ||\n    maxProxyBufferFrames !== undefined\n  ) {\n    logger.warn(\n      \"--upstream-timeout-ms/--body-timeout-ms/--max-proxy-buffer-bytes/--max-proxy-buffer-frames only apply to --record/--proxy-only upstream proxying — ignored without one of those flags.\",\n    );\n  }\n}\n\n// Parse AG-UI record/proxy config from CLI flags\nlet aguiMount: { path: string; handler: AGUIMock } | undefined;\nif (values[\"agui-record\"] || values[\"agui-proxy-only\"]) {\n  if (!values[\"agui-upstream\"]) {\n    console.error(\"Error: --agui-record/--agui-proxy-only requires --agui-upstream\");\n    process.exit(1);\n  }\n  // --agui-record writes recorded AG-UI fixtures to disk, so a URL source is unsupported.\n  // --agui-proxy-only forwards without saving, so URL-only --fixtures is valid.\n  const aguiBase = fixtureValues[0];\n  const aguiBaseIsUrl = /^https?:\\/\\//i.test(aguiBase);\n  if (values[\"agui-record\"] && aguiBaseIsUrl) {\n    console.error(\n      `Error: --agui-record requires a local --fixtures path for the recording destination; got URL ${aguiBase}`,\n    );\n    process.exit(1);\n  }\n  const agui = new AGUIMock();\n  agui.enableRecording({\n    upstream: values[\"agui-upstream\"],\n    // In proxy-only mode with a URL-only --fixtures, the AG-UI recorder never\n    // writes to disk (see agui-recorder.ts). Leave fixturePath undefined rather\n    // than resolving a URL as a filesystem path.\n    fixturePath: aguiBaseIsUrl ? undefined : resolve(aguiBase, \"agui-recorded\"),\n    proxyOnly: values[\"agui-proxy-only\"],\n  });\n  aguiMount = { path: \"/agui\", handler: agui };\n}\n\ninterface ResolvedFixtureSource {\n  source: string;\n  path: string;\n  isDir: boolean;\n}\n\nasync function resolveAllFixtureSources(): Promise<ResolvedFixtureSource[]> {\n  const resolved: ResolvedFixtureSource[] = [];\n  for (const value of fixtureValues) {\n    let local;\n    try {\n      local = await resolveFixturesValue(value, {\n        validateOnLoad,\n        logger,\n      });\n    } catch (err) {\n      const msg = err instanceof Error ? err.message : String(err);\n      console.error(`Failed to resolve --fixtures value \"${value}\": ${msg}`);\n      process.exit(1);\n    }\n    if (!local.path) {\n      // Remote fetch failed without validate-on-load and no cache — already warned; skip.\n      continue;\n    }\n    try {\n      const stat = statSync(local.path);\n      resolved.push({ source: local.source, path: local.path, isDir: stat.isDirectory() });\n    } catch (err) {\n      if ((err as NodeJS.ErrnoException).code === \"ENOENT\") {\n        console.error(`Fixtures path not found: ${local.path}`);\n      } else {\n        const msg = err instanceof Error ? err.message : String(err);\n        console.error(`Failed to load fixtures from ${local.path}: ${msg}`);\n      }\n      process.exit(1);\n    }\n  }\n  return resolved;\n}\n\nfunction loadSource(source: ResolvedFixtureSource): Fixture[] {\n  return source.isDir\n    ? loadFixturesFromDir(source.path, logger)\n    : loadFixtureFile(source.path, logger);\n}\n\nasync function main() {\n  const sources = await resolveAllFixtureSources();\n\n  const fixtures: Fixture[] = [];\n  for (const src of sources) {\n    fixtures.push(...loadSource(src));\n  }\n\n  if (fixtures.length === 0) {\n    if (validateOnLoad || values.strict) {\n      console.error(\"Error: No fixtures loaded and validation/strict mode is enabled — aborting.\");\n      process.exit(1);\n    }\n    console.warn(\"Warning: No fixtures loaded. The server will return 404 for all requests.\");\n  }\n\n  const sourceLabel = sources.map((s) => s.source).join(\", \") || \"<none>\";\n  logger.info(`Loaded ${fixtures.length} fixture(s) from ${sourceLabel}`);\n\n  // Validate fixtures if requested\n  if (validateOnLoad) {\n    const results = validateFixtures(fixtures);\n    const errors = results.filter((r) => r.severity === \"error\");\n    const warnings = results.filter((r) => r.severity === \"warning\");\n\n    for (const w of warnings) {\n      logger.warn(`Fixture ${w.fixtureIndex}: ${w.message}`);\n    }\n    for (const e of errors) {\n      logger.error(`Fixture ${e.fixtureIndex}: ${e.message}`);\n    }\n\n    if (errors.length > 0) {\n      console.error(`Validation failed: ${errors.length} error(s), ${warnings.length} warning(s)`);\n      process.exit(1);\n    }\n  }\n\n  const mounts = aguiMount ? [aguiMount] : undefined;\n\n  const instance = await createServer(\n    fixtures,\n    {\n      port,\n      host,\n      latency,\n      chunkSize,\n      replaySpeed,\n      logLevel,\n      chaos,\n      metrics: values.metrics,\n      record,\n      strict: values.strict,\n      journalMaxEntries: journalMax,\n      fixtureCountsMaxTestIds: fixtureCountsMax,\n      auth: resolveInboundAuth(selectInboundAuthSource(undefined)).publicConfig,\n    },\n    mounts,\n  );\n\n  // Only the first local source is watched — remote URL sources are fetched once\n  // at boot and are not monitored. Declared before the readiness announcement so\n  // shutdown can close it whenever the signal arrives.\n  let watcher: { close: () => void } | null = null;\n\n  function shutdown() {\n    logger.info(\"Shutting down...\");\n    if (watcher) watcher.close();\n    instance.server.close(() => {\n      process.exit(0);\n    });\n  }\n\n  // Register BEFORE announcing readiness. Writes to a pipe are synchronous on Linux\n  // (and to a file on every POSIX platform), so a supervisor that reacts to the line\n  // below can deliver SIGTERM while this process is still mid-statement. Announcing\n  // first left a window in which SIGTERM hit Node's default disposition, which\n  // re-raises: the process died with a null exit code instead of shutting down.\n  process.on(\"SIGINT\", shutdown);\n  process.on(\"SIGTERM\", shutdown);\n\n  logger.info(`aimock server listening on ${instance.url}`);\n\n  // Start file watcher if requested.\n  if (watchMode) {\n    const primary = sources[0];\n    if (!primary) {\n      logger.warn(\"--watch requested but no resolvable fixture sources; skipping watcher\");\n    } else {\n      const loadFn = (): Fixture[] => loadSource(primary);\n      watcher = watchFixtures(primary.path, fixtures, loadFn, {\n        logger,\n        validate: validateOnLoad,\n        validateFn: validateFixtures,\n      });\n      logger.info(`Watching ${primary.path} for changes`);\n    }\n  }\n}\n\nmain().catch((err) => {\n  console.error(err);\n  process.exit(1);\n});\n"],"mappings":";;;;;;;;;;;;;;;;AAeA,MAAM,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;sCA2CyBA,2BAAa,UAAU,IAAI;;;EAG/D,MAAM;AAER,MAAM,EAAE,oCAAqB;CAC3B,SAAS;EACP,MAAM;GAAE,MAAM;GAAU,OAAO;GAAK,SAAS;GAAQ;EACrD,MAAM;GAAE,MAAM;GAAU,OAAO;GAAK,SAAS;GAAa;EAC1D,UAAU;GAAE,MAAM;GAAU,OAAO;GAAK,UAAU;GAAM;EACxD,SAAS;GAAE,MAAM;GAAU,OAAO;GAAK,SAAS;GAAK;EACrD,cAAc;GAAE,MAAM;GAAU,OAAO;GAAK,SAAS;GAAM;EAC3D,OAAO;GAAE,MAAM;GAAW,OAAO;GAAK,SAAS;GAAO;EACtD,aAAa;GAAE,MAAM;GAAU,SAAS;GAAQ;EAChD,oBAAoB;GAAE,MAAM;GAAW,SAAS;GAAO;EACvD,SAAS;GAAE,MAAM;GAAW,SAAS;GAAO;EAC5C,QAAQ;GAAE,MAAM;GAAW,SAAS;GAAO;EAC3C,6BAA6B;GAAE,MAAM;GAAW,SAAS;GAAO;EAChE,cAAc;GAAE,MAAM;GAAW,SAAS;GAAO;EACjD,QAAQ;GAAE,MAAM;GAAW,SAAS;GAAO;EAC3C,mBAAmB,EAAE,MAAM,UAAU;EACrC,sBAAsB,EAAE,MAAM,UAAU;EACxC,mBAAmB,EAAE,MAAM,UAAU;EACrC,qBAAqB,EAAE,MAAM,UAAU;EACvC,oBAAoB,EAAE,MAAM,UAAU;EACtC,kBAAkB,EAAE,MAAM,UAAU;EACpC,mBAAmB,EAAE,MAAM,UAAU;EACrC,mBAAmB,EAAE,MAAM,UAAU;EACrC,uBAAuB,EAAE,MAAM,UAAU;EACzC,qBAAqB,EAAE,MAAM,UAAU;EACvC,uBAAuB,EAAE,MAAM,UAAU;EACzC,mBAAmB,EAAE,MAAM,UAAU;EACrC,0BAA0B,EAAE,MAAM,UAAU;EAC5C,2BAA2B,EAAE,MAAM,UAAU;EAC7C,eAAe;GAAE,MAAM;GAAW,SAAS;GAAO;EAClD,iBAAiB,EAAE,MAAM,UAAU;EACnC,mBAAmB;GAAE,MAAM;GAAW,SAAS;GAAO;EACtD,gBAAgB;GAAE,MAAM;GAAU,SAAS;GAAO;EAClD,cAAc,EAAE,MAAM,UAAU;EAChC,mBAAmB,EAAE,MAAM,UAAU;EACrC,oBAAoB,EAAE,MAAM,UAAU;EACtC,mBAAmB,EAAE,MAAM,UAAU;EACrC,iBAAiB,EAAE,MAAM,UAAU;EACnC,eAAe;GAAE,MAAM;GAAU,SAAS;GAAQ;EAClD,sBAAsB;GAAE,MAAM;GAAU,SAAS;GAAO;EACxD,MAAM;GAAE,MAAM;GAAW,SAAS;GAAO;EAC1C;CACD,QAAQ;CACT,CAAC;AAEF,IAAI,OAAO,MAAM;AACf,SAAQ,IAAI,KAAK;AACjB,SAAQ,KAAK,EAAE;;AAGjB,MAAM,OAAO,OAAO,OAAO,KAAK;AAChC,MAAM,OAAO,OAAO;AACpB,MAAM,UAAU,OAAO,OAAO,QAAQ;AACtC,MAAM,YAAY,OAAO,OAAO,cAAc;AAC9C,MAAM,gBACJ,OAAO,YAAY,OAAO,SAAS,SAAS,IAAI,OAAO,WAAW,CAAC,aAAa;AAClF,MAAM,YAAY,OAAO;AACzB,MAAM,iBAAiB,OAAO;AAC9B,MAAM,cAAc,OAAO;AAE3B,IAAI,CAAC;CAAC;CAAU;CAAQ;CAAQ;CAAQ,CAAC,SAAS,YAAY,EAAE;AAC9D,SAAQ,MAAM,sBAAsB,YAAY,yCAAyC;AACzF,SAAQ,KAAK,EAAE;;AAEjB,MAAM,WAAW;AAEjB,IAAI,OAAO,MAAM,KAAK,IAAI,OAAO,KAAK,OAAO,OAAO;AAClD,SAAQ,MAAM,iBAAiB,OAAO,OAAO;AAC7C,SAAQ,KAAK,EAAE;;AAGjB,IAAI,OAAO,MAAM,QAAQ,IAAI,UAAU,GAAG;AACxC,SAAQ,MAAM,oBAAoB,OAAO,UAAU;AACnD,SAAQ,KAAK,EAAE;;AAGjB,IAAI,OAAO,MAAM,UAAU,IAAI,YAAY,GAAG;AAC5C,SAAQ,MAAM,uBAAuB,OAAO,gBAAgB;AAC5D,SAAQ,KAAK,EAAE;;AAGjB,MAAM,cAAc,OAAO,OAAO,gBAAgB;AAClD,IAAI,OAAO,MAAM,YAAY,IAAI,eAAe,GAAG;AACjD,SAAQ,MAAM,2CAA2C;AACzD,SAAQ,KAAK,EAAE;;AAGjB,MAAM,aAAa,OAAO,OAAO,eAAe;AAChD,IAAI,OAAO,MAAM,WAAW,IAAI,CAAC,OAAO,UAAU,WAAW,IAAI,aAAa,GAAG;AAC/E,SAAQ,MACN,wBAAwB,OAAO,eAAe,kDAC/C;AACD,SAAQ,KAAK,EAAE;;AAGjB,MAAM,sBAAsB,OAAO;AACnC,MAAM,mBAAmB,OAAO,oBAAoB;AACpD,IAAI,OAAO,MAAM,iBAAiB,IAAI,CAAC,OAAO,UAAU,iBAAiB,IAAI,mBAAmB,GAAG;AACjG,SAAQ,MACN,+BAA+B,oBAAoB,kDACpD;AACD,SAAQ,KAAK,EAAE;;AAGjB,MAAM,uBAAuB,OAAO;AACpC,IAAI;AACJ,IAAI,yBAAyB,QAAW;AACtC,qBAAoB,OAAO,qBAAqB;AAChD,KAAI,CAAC,OAAO,SAAS,kBAAkB,IAAI,qBAAqB,GAAG;AACjE,UAAQ,MACN,gCAAgC,qBAAqB,qCACtD;AACD,UAAQ,KAAK,EAAE;;;AAInB,MAAM,mBAAmB,OAAO;AAChC,IAAI;AACJ,IAAI,qBAAqB,QAAW;AAClC,iBAAgB,OAAO,iBAAiB;AACxC,KAAI,CAAC,OAAO,SAAS,cAAc,IAAI,iBAAiB,GAAG;AACzD,UAAQ,MACN,4BAA4B,iBAAiB,qCAC9C;AACD,UAAQ,KAAK,EAAE;;;AAInB,MAAM,yBAAyB,OAAO;AACtC,IAAI;AACJ,IAAI,2BAA2B,QAAW;AACxC,uBAAsB,OAAO,uBAAuB;AACpD,KAAI,CAAC,OAAO,SAAS,oBAAoB,IAAI,uBAAuB,GAAG;AACrE,UAAQ,MACN,mCAAmC,uBAAuB,qCAC3D;AACD,UAAQ,KAAK,EAAE;;;AAInB,MAAM,0BAA0B,OAAO;AACvC,IAAI;AACJ,IAAI,4BAA4B,QAAW;AACzC,wBAAuB,OAAO,wBAAwB;AACtD,KAAI,CAAC,OAAO,SAAS,qBAAqB,IAAI,wBAAwB,GAAG;AACvE,UAAQ,MACN,oCAAoC,wBAAwB,qCAC7D;AACD,UAAQ,KAAK,EAAE;;;AAInB,MAAM,SAAS,IAAIC,sBAAO,SAAS;AAGnC,IAAI;AACJ;CACE,MAAM,UAAU,OAAO;CACvB,MAAM,eAAe,OAAO;CAC5B,MAAM,gBAAgB,OAAO;CAC7B,MAAM,eAAe,OAAO;CAC5B,MAAM,aAAa,OAAO;AAE1B,KACE,YAAY,UACZ,iBAAiB,UACjB,kBAAkB,UAClB,iBAAiB,UACjB,eAAe,QACf;AAOA,UAAQ,EAAE;EACV,MAAM,aAAkF;GACtF;IAAE,MAAM;IAAc,OAAO;IAAY,KAAK;IAAS;GACvD;IAAE,MAAM;IAAmB,OAAO;IAAiB,KAAK;IAAc;GACtE;IAAE,MAAM;IAAoB,OAAO;IAAkB,KAAK;IAAe;GACzE;IAAE,MAAM;IAAmB,OAAO;IAAiB,KAAK;IAAc;GACtE;IAAE,MAAM;IAAiB,OAAO;IAAa,KAAK;IAAY;GAC/D;AACD,OAAK,MAAM,EAAE,MAAM,OAAO,SAAS,YAAY;AAC7C,OAAI,QAAQ,OAAW;GACvB,MAAM,MAAMC,8BAAgB,OAAO,IAAI;AACvC,OAAI,QAAQ,QAAW;AACrB,YAAQ,MAAM,WAAW,KAAK,IAAI,IAAI,cAAcF,2BAAa,OAAO,IAAI,GAAG;AAC/E,YAAQ,KAAK,EAAE;;AAEjB,SAAM,SAAS;;;;AAMrB,IAAI;AACJ,IAAI,OAAO,UAAU,OAAO,eAAe;CACzC,MAAM,YAAuC,EAAE;AAC/C,KAAI,OAAO,mBAAoB,WAAU,SAAS,OAAO;AACzD,KAAI,OAAO,sBAAuB,WAAU,YAAY,OAAO;AAC/D,KAAI,OAAO,mBAAoB,WAAU,SAAS,OAAO;AACzD,KAAI,OAAO,qBAAsB,WAAU,WAAW,OAAO;AAC7D,KAAI,OAAO,oBAAqB,WAAU,UAAU,OAAO;AAC3D,KAAI,OAAO,kBAAmB,WAAU,QAAQ,OAAO;AACvD,KAAI,OAAO,mBAAoB,WAAU,SAAS,OAAO;AACzD,KAAI,OAAO,mBAAoB,WAAU,SAAS,OAAO;AACzD,KAAI,OAAO,uBAAwB,WAAU,aAAa,OAAO;AACjE,KAAI,OAAO,qBAAsB,WAAU,WAAW,OAAO;AAE7D,KAAI,OAAO,KAAK,UAAU,CAAC,WAAW,GAAG;AACvC,UAAQ,MACN,YAAY,OAAO,gBAAgB,eAAe,SAAS,0CAC5D;AACD,UAAQ,KAAK,EAAE;;CAOjB,MAAM,aAAa,cAAc;CACjC,MAAM,kBAAkB,gBAAgB,KAAK,WAAW;AACxD,KAAI,OAAO,UAAU,iBAAiB;AACpC,UAAQ,MACN,2FAA2F,aAC5F;AACD,UAAQ,KAAK,EAAE;;AAEjB,UAAS;EACP;EAIA,cAAcG,+CAAyB;EAIvC,aAAa,kBAAkB,gCAAoB,YAAY,WAAW;EAC1E,WAAW,OAAO;EAClB,wBAAwB,OAAO;EAC/B;EACA;EACA;EACA;EACD;OACI;CAIL,MAAM,uBACJ;EACE;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CACD,QAAQ,SAAS,OAAO,UAAU,OAAU;AAC9C,KAAI,qBAAqB,SAAS,EAChC,QAAO,KACL,KAAK,qBAAqB,KAAK,MAAM,CAAC,8FACvC;AAEH,KACE,sBAAsB,UACtB,kBAAkB,UAClB,wBAAwB,UACxB,yBAAyB,OAEzB,QAAO,KACL,yLACD;;AAKL,IAAI;AACJ,IAAI,OAAO,kBAAkB,OAAO,oBAAoB;AACtD,KAAI,CAAC,OAAO,kBAAkB;AAC5B,UAAQ,MAAM,kEAAkE;AAChF,UAAQ,KAAK,EAAE;;CAIjB,MAAM,WAAW,cAAc;CAC/B,MAAM,gBAAgB,gBAAgB,KAAK,SAAS;AACpD,KAAI,OAAO,kBAAkB,eAAe;AAC1C,UAAQ,MACN,gGAAgG,WACjG;AACD,UAAQ,KAAK,EAAE;;CAEjB,MAAM,OAAO,IAAIC,4BAAU;AAC3B,MAAK,gBAAgB;EACnB,UAAU,OAAO;EAIjB,aAAa,gBAAgB,gCAAoB,UAAU,gBAAgB;EAC3E,WAAW,OAAO;EACnB,CAAC;AACF,aAAY;EAAE,MAAM;EAAS,SAAS;EAAM;;AAS9C,eAAe,2BAA6D;CAC1E,MAAM,WAAoC,EAAE;AAC5C,MAAK,MAAM,SAAS,eAAe;EACjC,IAAI;AACJ,MAAI;AACF,WAAQ,MAAMC,6CAAqB,OAAO;IACxC;IACA;IACD,CAAC;WACK,KAAK;GACZ,MAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC5D,WAAQ,MAAM,uCAAuC,MAAM,KAAK,MAAM;AACtE,WAAQ,KAAK,EAAE;;AAEjB,MAAI,CAAC,MAAM,KAET;AAEF,MAAI;GACF,MAAM,6BAAgB,MAAM,KAAK;AACjC,YAAS,KAAK;IAAE,QAAQ,MAAM;IAAQ,MAAM,MAAM;IAAM,OAAO,KAAK,aAAa;IAAE,CAAC;WAC7E,KAAK;AACZ,OAAK,IAA8B,SAAS,SAC1C,SAAQ,MAAM,4BAA4B,MAAM,OAAO;QAClD;IACL,MAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC5D,YAAQ,MAAM,gCAAgC,MAAM,KAAK,IAAI,MAAM;;AAErE,WAAQ,KAAK,EAAE;;;AAGnB,QAAO;;AAGT,SAAS,WAAW,QAA0C;AAC5D,QAAO,OAAO,QACVC,2CAAoB,OAAO,MAAM,OAAO,GACxCC,uCAAgB,OAAO,MAAM,OAAO;;AAG1C,eAAe,OAAO;CACpB,MAAM,UAAU,MAAM,0BAA0B;CAEhD,MAAM,WAAsB,EAAE;AAC9B,MAAK,MAAM,OAAO,QAChB,UAAS,KAAK,GAAG,WAAW,IAAI,CAAC;AAGnC,KAAI,SAAS,WAAW,GAAG;AACzB,MAAI,kBAAkB,OAAO,QAAQ;AACnC,WAAQ,MAAM,8EAA8E;AAC5F,WAAQ,KAAK,EAAE;;AAEjB,UAAQ,KAAK,4EAA4E;;CAG3F,MAAM,cAAc,QAAQ,KAAK,MAAM,EAAE,OAAO,CAAC,KAAK,KAAK,IAAI;AAC/D,QAAO,KAAK,UAAU,SAAS,OAAO,mBAAmB,cAAc;AAGvE,KAAI,gBAAgB;EAClB,MAAM,UAAUC,wCAAiB,SAAS;EAC1C,MAAM,SAAS,QAAQ,QAAQ,MAAM,EAAE,aAAa,QAAQ;EAC5D,MAAM,WAAW,QAAQ,QAAQ,MAAM,EAAE,aAAa,UAAU;AAEhE,OAAK,MAAM,KAAK,SACd,QAAO,KAAK,WAAW,EAAE,aAAa,IAAI,EAAE,UAAU;AAExD,OAAK,MAAM,KAAK,OACd,QAAO,MAAM,WAAW,EAAE,aAAa,IAAI,EAAE,UAAU;AAGzD,MAAI,OAAO,SAAS,GAAG;AACrB,WAAQ,MAAM,sBAAsB,OAAO,OAAO,aAAa,SAAS,OAAO,aAAa;AAC5F,WAAQ,KAAK,EAAE;;;CAInB,MAAM,SAAS,YAAY,CAAC,UAAU,GAAG;CAEzC,MAAM,WAAW,MAAMC,4BACrB,UACA;EACE;EACA;EACA;EACA;EACA;EACA;EACA;EACA,SAAS,OAAO;EAChB;EACA,QAAQ,OAAO;EACf,mBAAmB;EACnB,yBAAyB;EACzB,MAAMC,wCAAmBC,6CAAwB,OAAU,CAAC,CAAC;EAC9D,EACD,OACD;CAKD,IAAI,UAAwC;CAE5C,SAAS,WAAW;AAClB,SAAO,KAAK,mBAAmB;AAC/B,MAAI,QAAS,SAAQ,OAAO;AAC5B,WAAS,OAAO,YAAY;AAC1B,WAAQ,KAAK,EAAE;IACf;;AAQJ,SAAQ,GAAG,UAAU,SAAS;AAC9B,SAAQ,GAAG,WAAW,SAAS;AAE/B,QAAO,KAAK,8BAA8B,SAAS,MAAM;AAGzD,KAAI,WAAW;EACb,MAAM,UAAU,QAAQ;AACxB,MAAI,CAAC,QACH,QAAO,KAAK,wEAAwE;OAC/E;GACL,MAAM,eAA0B,WAAW,QAAQ;AACnD,aAAUC,8BAAc,QAAQ,MAAM,UAAU,QAAQ;IACtD;IACA,UAAU;IACV,YAAYJ;IACb,CAAC;AACF,UAAO,KAAK,YAAY,QAAQ,KAAK,cAAc;;;;AAKzD,MAAM,CAAC,OAAO,QAAQ;AACpB,SAAQ,MAAM,IAAI;AAClB,SAAQ,KAAK,EAAE;EACf"}
+{"version":3,"file":"cli.cjs","names":["CHAOS_FIELDS","Logger","parseChaosField","readProviderKeysFromEnv","AGUIMock","mcpRecordEnv","parseMcpRecordFlag","MCPMock","resolveFixturesValue","loadFixturesFromDirWithServices","loadFixtureFileWithServices","enableHeldFixtureMisbehavior","McpFakesAddError","sep","build","markFixtureResponsesToolsExtended","validateFixtures","createServer","resolveInboundAuth","selectInboundAuthSource","FixtureLoadError","MisbehaviorConfigError","watchFixtures"],"sources":["../src/cli.ts"],"sourcesContent":["#!/usr/bin/env node\nimport { isDeepStrictEqual, parseArgs } from \"node:util\";\nimport { createHash } from \"node:crypto\";\nimport { readFileSync, statSync, type Stats } from \"node:fs\";\nimport { relative, resolve, sep } from \"node:path\";\nimport { createServer } from \"./server.js\";\nimport type { ResponsesToolsMode } from \"./types.js\";\nimport {\n  FixtureLoadError,\n  MisbehaviorConfigError,\n  enableHeldFixtureMisbehavior,\n  markFixtureResponsesToolsExtended,\n  validateFixtures,\n} from \"./fixture-loader.js\";\nimport {\n  loadFixtureFileWithServices,\n  loadFixturesFromDirWithServices,\n  type FixturesWithServices,\n} from \"./fixture-loader-services.js\";\nimport { McpFakesAddError } from \"./mcp-fakes.js\";\nimport { build, msg } from \"./message-text.js\";\nimport { Logger, type LogLevel } from \"./logger.js\";\nimport { watchFixtures } from \"./watcher.js\";\nimport { AGUIMock } from \"./agui-mock.js\";\nimport { MCPMock } from \"./mcp-mock.js\";\nimport { mcpRecordEnv, parseMcpRecordFlag } from \"./mcp-recorder.js\";\nimport { parseChaosField, CHAOS_FIELDS, type ChaosField } from \"./chaos.js\";\nimport { resolveFixturesValue } from \"./fixtures-remote.js\";\nimport { readProviderKeysFromEnv } from \"./provider-auth.js\";\nimport { resolveInboundAuth, selectInboundAuthSource } from \"./api-key-auth.js\";\nimport type { Fixture, ChaosConfig, RecordConfig, McpFakeSource, Mountable } from \"./types.js\";\n\nconst HELP = `\nUsage: aimock [options]\n\nOptions:\n  -p, --port <number>       Port to listen on (default: 4010)\n  -h, --host <string>       Host to bind to (default: 127.0.0.1)\n  -f, --fixtures <value>    Fixture source (repeatable). Accepts:\n                              - filesystem path to a directory or .json file (default: ./fixtures)\n                              - https:// or http:// URL to a .json fixture file\n  -l, --latency <ms>        Latency in ms between SSE chunks (default: 0)\n  -c, --chunk-size <chars>  Chunk size in characters (default: 20)\n  -w, --watch               Watch fixture path for changes and reload\n      --log-level <level>   Log verbosity: silent, warn, info, debug (default: info)\n      --validate-on-load    Validate fixture schemas at startup\n      --misbehavior         Enable model misbehavior: fixture misbehavior keys and the\n                            X-AIMock-Misbehavior header (ignored without this flag)\n      --metrics             Enable Prometheus metrics at GET /metrics\n      --record              Record mode: proxy unmatched requests and save fixtures\n      --record-full-model-version  Record exact model version without date stripping (default: false)\n      --proxy-only          Proxy mode: forward unmatched requests without saving\n      --strict              Strict mode: fail on unmatched requests (overridable per-request via X-AIMock-Strict header)\n      --strict-tool-arguments  Reject fixture tool calls with invalid JSON arguments instead of serving {} (default: false)\n      --responses-tools <mode>  OpenAI Responses tool handling: legacy (default) or extended (namespaced and\n                            custom tools visible to matching, custom tool rounds counted, namespaces emitted and recorded)\n      --journal-max <n>     Max request entries retained in memory (default: 1000, 0 = unbounded)\n      --fixture-counts-max <n>  Max unique testIds retained in fixture match-count map (default: 500, 0 = unbounded)\n      --provider-openai <url>     Upstream URL for OpenAI (used with --record)\n      --provider-anthropic <url>  Upstream URL for Anthropic\n      --provider-gemini <url>     Upstream URL for Gemini\n      --provider-vertexai <url>   Upstream URL for Vertex AI\n      --provider-bedrock <url>    Upstream URL for Bedrock\n      --provider-azure <url>      Upstream URL for Azure OpenAI\n      --provider-ollama <url>     Upstream URL for Ollama\n      --provider-cohere <url>     Upstream URL for Cohere\n      --provider-openrouter <url> Upstream URL for OpenRouter (video record proxy)\n      --provider-byteplus <url>   Upstream ORIGIN for BytePlus Ark (e.g. https://ark.ap-southeast.bytepluses.com — origin only, no /api/v3)\n      --upstream-timeout-ms <ms>  Idle timeout (ms) on upstream socket before response (default: 30000)\n      --body-timeout-ms <ms>      Idle timeout (ms) on upstream response body between chunks (default: 30000)\n      --max-proxy-buffer-bytes <n> Cap (bytes) on in-memory proxy-path buffer; full body still relayed (default: 67108864)\n      --max-proxy-buffer-frames <n> Cap (frames) on in-memory proxy-path per-frame state; full body still relayed (default: 5000000)\n      --agui-record              Enable AG-UI recording (proxy unmatched AG-UI requests)\n      --agui-upstream <url>      Upstream AG-UI agent URL (used with --agui-record)\n      --agui-proxy-only          AG-UI proxy mode: forward without saving\n      --mcp-record <mount>=<url>   Record an upstream MCP server into mcpFakes (repeatable)\n      --mcp-proxy-only <mount>=<url>  Proxy an upstream MCP server without saving\n      --replay-speed <n>    Replay speed multiplier (default: 1.0, 2.0 = 2x faster)\n      --chaos-drop <rate>   Probability (0-1) of dropping requests with 500\n      --chaos-malformed <rate>  Probability (0-1) of returning malformed JSON\n      --chaos-disconnect <rate> Probability (0-1) of destroying connection\n      --chaos-ratelimit <rate> Probability (0-1) of 429 with Retry-After\n      --chaos-latency <ms> Delay (0-${CHAOS_FIELDS.latencyMs.max}ms) injected before handling\n      AIMOCK_API_KEYS  Comma-separated inbound test API keys (environment only)\n      --help                Show this help message\n`.trim();\n\nconst { values } = parseArgs({\n  options: {\n    port: { type: \"string\", short: \"p\", default: \"4010\" },\n    host: { type: \"string\", short: \"h\", default: \"127.0.0.1\" },\n    fixtures: { type: \"string\", short: \"f\", multiple: true },\n    latency: { type: \"string\", short: \"l\", default: \"0\" },\n    \"chunk-size\": { type: \"string\", short: \"c\", default: \"20\" },\n    watch: { type: \"boolean\", short: \"w\", default: false },\n    \"log-level\": { type: \"string\", default: \"info\" },\n    \"validate-on-load\": { type: \"boolean\", default: false },\n    misbehavior: { type: \"boolean\", default: false },\n    metrics: { type: \"boolean\", default: false },\n    record: { type: \"boolean\", default: false },\n    \"record-full-model-version\": { type: \"boolean\", default: false },\n    \"proxy-only\": { type: \"boolean\", default: false },\n    strict: { type: \"boolean\", default: false },\n    \"strict-tool-arguments\": { type: \"boolean\", default: false },\n    \"responses-tools\": { type: \"string\" },\n    \"provider-openai\": { type: \"string\" },\n    \"provider-anthropic\": { type: \"string\" },\n    \"provider-gemini\": { type: \"string\" },\n    \"provider-vertexai\": { type: \"string\" },\n    \"provider-bedrock\": { type: \"string\" },\n    \"provider-azure\": { type: \"string\" },\n    \"provider-ollama\": { type: \"string\" },\n    \"provider-cohere\": { type: \"string\" },\n    \"provider-openrouter\": { type: \"string\" },\n    \"provider-byteplus\": { type: \"string\" },\n    \"upstream-timeout-ms\": { type: \"string\" },\n    \"body-timeout-ms\": { type: \"string\" },\n    \"max-proxy-buffer-bytes\": { type: \"string\" },\n    \"max-proxy-buffer-frames\": { type: \"string\" },\n    \"agui-record\": { type: \"boolean\", default: false },\n    \"agui-upstream\": { type: \"string\" },\n    \"agui-proxy-only\": { type: \"boolean\", default: false },\n    \"mcp-record\": { type: \"string\", multiple: true },\n    \"mcp-proxy-only\": { type: \"string\", multiple: true },\n    \"replay-speed\": { type: \"string\", default: \"1.0\" },\n    \"chaos-drop\": { type: \"string\" },\n    \"chaos-malformed\": { type: \"string\" },\n    \"chaos-disconnect\": { type: \"string\" },\n    \"chaos-ratelimit\": { type: \"string\" },\n    \"chaos-latency\": { type: \"string\" },\n    \"journal-max\": { type: \"string\", default: \"1000\" },\n    \"fixture-counts-max\": { type: \"string\", default: \"500\" },\n    help: { type: \"boolean\", default: false },\n  },\n  strict: true,\n});\n\nif (values.help) {\n  console.log(HELP);\n  process.exit(0);\n}\n\nconst port = Number(values.port);\nconst host = values.host!;\nconst latency = Number(values.latency);\nconst chunkSize = Number(values[\"chunk-size\"]);\nconst fixtureValues: string[] =\n  values.fixtures && values.fixtures.length > 0 ? values.fixtures : [\"./fixtures\"];\nconst watchMode = values.watch!;\nconst validateOnLoad = values[\"validate-on-load\"]!;\nconst logLevelStr = values[\"log-level\"]!;\n\nif (![\"silent\", \"warn\", \"info\", \"debug\"].includes(logLevelStr)) {\n  console.error(`Invalid log-level: ${logLevelStr} (must be silent, warn, info, or debug)`);\n  process.exit(1);\n}\nconst logLevel = logLevelStr as LogLevel;\n\nif (Number.isNaN(port) || port < 0 || port > 65535) {\n  console.error(`Invalid port: ${values.port}`);\n  process.exit(1);\n}\n\nif (Number.isNaN(latency) || latency < 0) {\n  console.error(`Invalid latency: ${values.latency}`);\n  process.exit(1);\n}\n\nif (Number.isNaN(chunkSize) || chunkSize < 1) {\n  console.error(`Invalid chunk-size: ${values[\"chunk-size\"]}`);\n  process.exit(1);\n}\n\nconst replaySpeed = Number(values[\"replay-speed\"]);\nif (Number.isNaN(replaySpeed) || replaySpeed <= 0) {\n  console.error(\"--replay-speed must be a positive number\");\n  process.exit(1);\n}\n\nconst responsesToolsFlag = values[\"responses-tools\"];\nif (\n  responsesToolsFlag !== undefined &&\n  responsesToolsFlag !== \"legacy\" &&\n  responsesToolsFlag !== \"extended\"\n) {\n  console.error(\n    `Invalid --responses-tools: ${responsesToolsFlag} (expected \"legacy\" or \"extended\")`,\n  );\n  process.exit(1);\n}\nconst responsesTools: ResponsesToolsMode | undefined = responsesToolsFlag;\n\nconst journalMax = Number(values[\"journal-max\"]);\nif (Number.isNaN(journalMax) || !Number.isInteger(journalMax) || journalMax < 0) {\n  console.error(\n    `Invalid journal-max: ${values[\"journal-max\"]} (must be a non-negative integer; 0 = unbounded)`,\n  );\n  process.exit(1);\n}\n\nconst fixtureCountsMaxStr = values[\"fixture-counts-max\"];\nconst fixtureCountsMax = Number(fixtureCountsMaxStr);\nif (Number.isNaN(fixtureCountsMax) || !Number.isInteger(fixtureCountsMax) || fixtureCountsMax < 0) {\n  console.error(\n    `Invalid fixture-counts-max: ${fixtureCountsMaxStr} (must be a non-negative integer; 0 = unbounded)`,\n  );\n  process.exit(1);\n}\n\nconst upstreamTimeoutMsStr = values[\"upstream-timeout-ms\"];\nlet upstreamTimeoutMs: number | undefined;\nif (upstreamTimeoutMsStr !== undefined) {\n  upstreamTimeoutMs = Number(upstreamTimeoutMsStr);\n  if (!Number.isFinite(upstreamTimeoutMs) || upstreamTimeoutMs <= 0) {\n    console.error(\n      `Invalid upstream-timeout-ms: ${upstreamTimeoutMsStr} (must be a positive finite number)`,\n    );\n    process.exit(1);\n  }\n}\n\nconst bodyTimeoutMsStr = values[\"body-timeout-ms\"];\nlet bodyTimeoutMs: number | undefined;\nif (bodyTimeoutMsStr !== undefined) {\n  bodyTimeoutMs = Number(bodyTimeoutMsStr);\n  if (!Number.isFinite(bodyTimeoutMs) || bodyTimeoutMs <= 0) {\n    console.error(\n      `Invalid body-timeout-ms: ${bodyTimeoutMsStr} (must be a positive finite number)`,\n    );\n    process.exit(1);\n  }\n}\n\nconst maxProxyBufferBytesStr = values[\"max-proxy-buffer-bytes\"];\nlet maxProxyBufferBytes: number | undefined;\nif (maxProxyBufferBytesStr !== undefined) {\n  maxProxyBufferBytes = Number(maxProxyBufferBytesStr);\n  if (!Number.isFinite(maxProxyBufferBytes) || maxProxyBufferBytes <= 0) {\n    console.error(\n      `Invalid max-proxy-buffer-bytes: ${maxProxyBufferBytesStr} (must be a positive finite number)`,\n    );\n    process.exit(1);\n  }\n}\n\nconst maxProxyBufferFramesStr = values[\"max-proxy-buffer-frames\"];\nlet maxProxyBufferFrames: number | undefined;\nif (maxProxyBufferFramesStr !== undefined) {\n  maxProxyBufferFrames = Number(maxProxyBufferFramesStr);\n  if (!Number.isFinite(maxProxyBufferFrames) || maxProxyBufferFrames <= 0) {\n    console.error(\n      `Invalid max-proxy-buffer-frames: ${maxProxyBufferFramesStr} (must be a positive finite number)`,\n    );\n    process.exit(1);\n  }\n}\n\nconst logger = new Logger(logLevel);\n\n// Parse chaos config from CLI flags\nlet chaos: ChaosConfig | undefined;\n{\n  const dropStr = values[\"chaos-drop\"];\n  const malformedStr = values[\"chaos-malformed\"];\n  const disconnectStr = values[\"chaos-disconnect\"];\n  const ratelimitStr = values[\"chaos-ratelimit\"];\n  const latencyStr = values[\"chaos-latency\"];\n\n  if (\n    dropStr !== undefined ||\n    malformedStr !== undefined ||\n    disconnectStr !== undefined ||\n    ratelimitStr !== undefined ||\n    latencyStr !== undefined\n  ) {\n    // Same parser, same TABLE, same reject-never-clamp policy as every other\n    // chaos input (headers, fixture, server default, control API) — see\n    // `ChaosConfig`. The bounds and the integer-vs-rate grammar are read out of\n    // `CHAOS_FIELDS`, never re-typed here, so raising a cap in that one table\n    // moves the flag with it instead of leaving `--chaos-latency` on the old\n    // limit with no compile error.\n    chaos = {};\n    const flagFields: Array<{ flag: string; field: ChaosField; raw: string | undefined }> = [\n      { flag: \"chaos-drop\", field: \"dropRate\", raw: dropStr },\n      { flag: \"chaos-malformed\", field: \"malformedRate\", raw: malformedStr },\n      { flag: \"chaos-disconnect\", field: \"disconnectRate\", raw: disconnectStr },\n      { flag: \"chaos-ratelimit\", field: \"rateLimitRate\", raw: ratelimitStr },\n      { flag: \"chaos-latency\", field: \"latencyMs\", raw: latencyStr },\n    ];\n    for (const { flag, field, raw } of flagFields) {\n      if (raw === undefined) continue;\n      const val = parseChaosField(field, raw);\n      if (val === undefined) {\n        console.error(`Invalid ${flag}: ${raw} (must be 0-${CHAOS_FIELDS[field].max})`);\n        process.exit(1);\n      }\n      chaos[field] = val;\n    }\n  }\n}\n\n// Parse record/proxy config from CLI flags\nlet record: RecordConfig | undefined;\nif (values.record || values[\"proxy-only\"]) {\n  const providers: RecordConfig[\"providers\"] = {};\n  if (values[\"provider-openai\"]) providers.openai = values[\"provider-openai\"];\n  if (values[\"provider-anthropic\"]) providers.anthropic = values[\"provider-anthropic\"];\n  if (values[\"provider-gemini\"]) providers.gemini = values[\"provider-gemini\"];\n  if (values[\"provider-vertexai\"]) providers.vertexai = values[\"provider-vertexai\"];\n  if (values[\"provider-bedrock\"]) providers.bedrock = values[\"provider-bedrock\"];\n  if (values[\"provider-azure\"]) providers.azure = values[\"provider-azure\"];\n  if (values[\"provider-ollama\"]) providers.ollama = values[\"provider-ollama\"];\n  if (values[\"provider-cohere\"]) providers.cohere = values[\"provider-cohere\"];\n  if (values[\"provider-openrouter\"]) providers.openrouter = values[\"provider-openrouter\"];\n  if (values[\"provider-byteplus\"]) providers.byteplus = values[\"provider-byteplus\"];\n\n  if (Object.keys(providers).length === 0) {\n    console.error(\n      `Error: --${values[\"proxy-only\"] ? \"proxy-only\" : \"record\"} requires at least one --provider-* flag`,\n    );\n    process.exit(1);\n  }\n\n  // For --record, the first --fixtures value is the base path for the recording\n  // destination and must be a local filesystem path — writing to a URL is not supported.\n  // For --proxy-only, unmatched requests are forwarded without saving, so no writable\n  // destination is required; URL-only --fixtures is valid in that mode.\n  const recordBase = fixtureValues[0];\n  const recordBaseIsUrl = /^https?:\\/\\//i.test(recordBase);\n  if (values.record && recordBaseIsUrl) {\n    console.error(\n      `Error: --record requires a local --fixtures path for the recording destination; got URL ${recordBase}`,\n    );\n    process.exit(1);\n  }\n  record = {\n    providers,\n    // aimock's own upstream keys, sourced from AIMOCK_PROVIDER_*_KEY env vars\n    // (not CLI flags — secrets must not appear in `ps`). Injected on a\n    // fixture-miss passthrough when the caller sent no/dummy credential.\n    providerKeys: readProviderKeysFromEnv(),\n    // In proxy-only mode with only URL sources, fixturePath is never consumed\n    // (recorder.ts skips disk writes when proxyOnly is set). Leave it undefined\n    // rather than resolving a URL string as a filesystem path.\n    fixturePath: recordBaseIsUrl ? undefined : resolve(recordBase, \"recorded\"),\n    proxyOnly: values[\"proxy-only\"],\n    recordFullModelVersion: values[\"record-full-model-version\"],\n    upstreamTimeoutMs,\n    bodyTimeoutMs,\n    maxProxyBufferBytes,\n    maxProxyBufferFrames,\n  };\n} else {\n  // These flags configure upstream proxying — without --record or\n  // --proxy-only they would be parsed and then silently dropped. Routed\n  // through the constructed logger so --log-level is respected.\n  const droppedProviderFlags = (\n    [\n      \"provider-openai\",\n      \"provider-anthropic\",\n      \"provider-gemini\",\n      \"provider-vertexai\",\n      \"provider-bedrock\",\n      \"provider-azure\",\n      \"provider-ollama\",\n      \"provider-cohere\",\n      \"provider-openrouter\",\n      \"provider-byteplus\",\n    ] as const\n  ).filter((flag) => values[flag] !== undefined);\n  if (droppedProviderFlags.length > 0) {\n    logger.warn(\n      `--${droppedProviderFlags.join(\"/--\")} only apply to --record/--proxy-only upstream proxying — ignored without one of those flags.`,\n    );\n  }\n  if (\n    upstreamTimeoutMs !== undefined ||\n    bodyTimeoutMs !== undefined ||\n    maxProxyBufferBytes !== undefined ||\n    maxProxyBufferFrames !== undefined\n  ) {\n    logger.warn(\n      \"--upstream-timeout-ms/--body-timeout-ms/--max-proxy-buffer-bytes/--max-proxy-buffer-frames only apply to --record/--proxy-only upstream proxying — ignored without one of those flags.\",\n    );\n  }\n}\n\n// Parse AG-UI record/proxy config from CLI flags\nlet aguiMount: { path: string; handler: AGUIMock } | undefined;\nif (values[\"agui-record\"] || values[\"agui-proxy-only\"]) {\n  if (!values[\"agui-upstream\"]) {\n    console.error(\"Error: --agui-record/--agui-proxy-only requires --agui-upstream\");\n    process.exit(1);\n  }\n  // --agui-record writes recorded AG-UI fixtures to disk, so a URL source is unsupported.\n  // --agui-proxy-only forwards without saving, so URL-only --fixtures is valid.\n  const aguiBase = fixtureValues[0];\n  const aguiBaseIsUrl = /^https?:\\/\\//i.test(aguiBase);\n  if (values[\"agui-record\"] && aguiBaseIsUrl) {\n    console.error(\n      `Error: --agui-record requires a local --fixtures path for the recording destination; got URL ${aguiBase}`,\n    );\n    process.exit(1);\n  }\n  const agui = new AGUIMock();\n  agui.enableRecording({\n    upstream: values[\"agui-upstream\"],\n    // In proxy-only mode with a URL-only --fixtures, the AG-UI recorder never\n    // writes to disk (see agui-recorder.ts). Leave fixturePath undefined rather\n    // than resolving a URL as a filesystem path.\n    fixturePath: aguiBaseIsUrl ? undefined : resolve(aguiBase, \"agui-recorded\"),\n    proxyOnly: values[\"agui-proxy-only\"],\n  });\n  aguiMount = { path: \"/agui\", handler: agui };\n}\n\n// Parse MCP record/proxy mounts (MR1, AM6): --mcp-record / --mcp-proxy-only <mount>=<url>\nconst mcpRecordMounts: { path: string; handler: MCPMock }[] = [];\n{\n  const recordValues = values[\"mcp-record\"] ?? [];\n  const proxyValues = values[\"mcp-proxy-only\"] ?? [];\n  if (recordValues.length > 0) {\n    // C11: check the flag itself; fixtureValues defaults to ./fixtures.\n    if (!(values.fixtures && values.fixtures.length > 0)) {\n      console.error(\n        \"Error: --mcp-record requires --fixtures <local path> for the recording destination\",\n      );\n      process.exit(1);\n    }\n    if (/^https?:\\/\\//i.test(values.fixtures[0])) {\n      console.error(\n        `Error: --mcp-record requires a local --fixtures path for the recording destination; got URL ${values.fixtures[0]}`,\n      );\n      process.exit(1);\n    }\n  }\n  const flags = [\n    ...recordValues.map((value) => ({ flag: \"--mcp-record\", value, proxyOnly: false })),\n    ...proxyValues.map((value) => ({ flag: \"--mcp-proxy-only\", value, proxyOnly: true })),\n  ];\n  if (flags.length > 0) {\n    let env: ReturnType<typeof mcpRecordEnv>;\n    try {\n      env = mcpRecordEnv(process.env);\n    } catch (err) {\n      console.error(`Error: ${err instanceof Error ? err.message : String(err)}`);\n      process.exit(1);\n    }\n    for (const { flag, value, proxyOnly } of flags) {\n      try {\n        const { mount, upstream } = parseMcpRecordFlag(value, flag);\n        if (aguiMount && mount === aguiMount.path) {\n          throw new Error(`${flag} mount ${mount} is held by a mount that is not an MCP mock`);\n        }\n        if (mcpRecordMounts.some((m) => m.path === mount)) {\n          throw new Error(`${flag} mount ${mount} is given more than once`);\n        }\n        const mcp = new MCPMock().enableRecording({\n          upstream,\n          fixturePath: proxyOnly ? undefined : resolve(values.fixtures![0], \"recorded\"),\n          proxyOnly,\n          secretValues: env.secretValues,\n          upstreamAuth: env.upstreamAuth,\n          strict: values.strict,\n        });\n        mcpRecordMounts.push({ path: mount, handler: mcp });\n      } catch (err) {\n        console.error(`Error: ${err instanceof Error ? err.message : String(err)}`);\n        process.exit(1);\n      }\n    }\n  }\n}\n\ninterface ResolvedFixtureSource {\n  source: string;\n  path: string;\n  isDir: boolean;\n}\n\nasync function resolveAllFixtureSources(): Promise<ResolvedFixtureSource[]> {\n  const resolved: ResolvedFixtureSource[] = [];\n  for (const value of fixtureValues) {\n    let local;\n    try {\n      local = await resolveFixturesValue(value, {\n        validateOnLoad,\n        logger,\n      });\n    } catch (err) {\n      const msg = err instanceof Error ? err.message : String(err);\n      console.error(`Failed to resolve --fixtures value \"${value}\": ${msg}`);\n      process.exit(1);\n    }\n    if (!local.path) {\n      // Remote fetch failed without validate-on-load and no cache — already warned; skip.\n      continue;\n    }\n    try {\n      const stat = statSync(local.path);\n      resolved.push({ source: local.source, path: local.path, isDir: stat.isDirectory() });\n    } catch (err) {\n      if ((err as NodeJS.ErrnoException).code === \"ENOENT\") {\n        console.error(`Fixtures path not found: ${local.path}`);\n      } else {\n        const msg = err instanceof Error ? err.message : String(err);\n        console.error(`Failed to load fixtures from ${local.path}: ${msg}`);\n      }\n      process.exit(1);\n    }\n  }\n  return resolved;\n}\n\n// F3: the loaders that carry `mcpFakes`. A file's entry-id source (I6) is the\n// --fixtures value as given: the path, or the URL of a remote file (whose\n// `path` is the on-disk cache).\nfunction loadSource(source: ResolvedFixtureSource): FixturesWithServices {\n  const loaded = source.isDir\n    ? loadFixturesFromDirWithServices(source.path, logger)\n    : loadFixtureFileWithServices(source.path, logger, undefined, source.source);\n  // --misbehavior: a bad fixture `misbehavior` key fails the load; without it the key is ignored.\n  if (values.misbehavior) loaded.fixtures.forEach(enableHeldFixtureMisbehavior);\n  return loaded;\n}\n\n/** Each source's `mcpFakes` blocks, in load order, for the --watch comparison. */\nfunction fakesBySource(blocks: McpFakeSource[]): Map<string, unknown[]> {\n  const bySource = new Map<string, unknown[]>();\n  for (const block of blocks) {\n    const list = bySource.get(block.source) ?? [];\n    list.push([block.blockIndex, block.raw]);\n    bySource.set(block.source, list);\n  }\n  return bySource;\n}\n\n/**\n * R9/F11: fakes are not reloaded by --watch, so a reload whose `mcpFakes`\n * differ from the boot set is rejected. Returns the first changed source.\n * A source in `unreadable` could not be read or parsed: it is not compared,\n * because its blocks are unknown, not removed.\n */\nfunction changedFakesSource(\n  boot: McpFakeSource[],\n  reload: McpFakeSource[],\n  unreadable: ReadonlySet<string>,\n): string | null {\n  const before = fakesBySource(boot);\n  const after = fakesBySource(reload);\n  for (const source of new Set([...before.keys(), ...after.keys()])) {\n    if (unreadable.has(source)) continue;\n    if (!isDeepStrictEqual(before.get(source), after.get(source))) return source;\n  }\n  return null;\n}\n\n/**\n * L3: a load error on stderr, whatever the log level: every error of a\n * `McpFakesAddError`, one per line, then its L8 warnings.\n */\nfunction printLoadError(err: FixtureLoadError | MisbehaviorConfigError): void {\n  const errors = err instanceof McpFakesAddError ? err.errors : [err];\n  for (const e of errors) console.error(e.message);\n  if (err instanceof McpFakesAddError) {\n    for (const w of err.warnings) console.warn(w.message);\n  }\n}\n\n/** A --watch reload that `loadFn` rejected and already printed (L3, L7). */\nclass ReloadRejected extends Error {}\n\n/**\n * The --watch logger: as `Logger`, except that the watcher's own report of a\n * {@link ReloadRejected} reload is dropped, so the error is printed once.\n */\nclass WatchLogger extends Logger {\n  override error(...args: unknown[]): void {\n    if (args.some((a) => a instanceof ReloadRejected)) return;\n    super.error(...args);\n  }\n}\n\n/**\n * MR13: --watch with record mounts. (a) An event for a recorder temp file, or\n * for a file whose bytes are exactly what a recorder last wrote there, does\n * not reload; everything else (a delete, a directory, a user edit) reloads as\n * on main. (b) Each recorder write moves the --watch baseline of that file,\n * so the next reload does not reject the recording as a changed `mcpFakes`.\n * Without record mounts (or for a file source), --watch is exactly as on main.\n */\nfunction recorderWatch(\n  primary: ResolvedFixtureSource,\n  moveBaseline: (moved: (boot: McpFakeSource[]) => McpFakeSource[]) => void,\n): { ignore?: (absPath: string) => boolean } {\n  const events = mcpRecordMounts.map((m) => m.handler.recorderEvents()).filter((ev) => ev !== null);\n  if (events.length === 0 || !primary.isDir) return {};\n  for (const ev of events) {\n    ev.onWrite((file, written) => {\n      const source = relative(primary.path, file).split(sep).join(\"/\");\n      const blocks: McpFakeSource[] = Array.isArray(written)\n        ? written.map((raw, blockIndex) => ({ source, blockIndex, raw }))\n        : [{ source, blockIndex: null, raw: written }];\n      moveBaseline((boot) => {\n        // Replace this source's blocks in place; a new source goes last.\n        const others = boot.filter((b) => b.source !== source);\n        const at = boot.findIndex((b) => b.source === source);\n        const pos = at === -1 ? others.length : at;\n        return [...others.slice(0, pos), ...blocks, ...others.slice(pos)];\n      });\n    });\n  }\n  return {\n    ignore: (absPath: string): boolean => {\n      // Recorder temp files only (persistServiceFakes writes `<file>.tmp.<uuid>`, then renames it).\n      if (/\\.tmp\\.[0-9a-f-]+$/i.test(absPath)) return true;\n      let st: Stats;\n      try {\n        st = statSync(absPath);\n      } catch {\n        return false; // gone: a user deleted a fixture — this MUST reload (r2 N2)\n      }\n      if (st.isDirectory()) return false; // directory events behave as on main\n      let data: Buffer;\n      try {\n        data = readFileSync(absPath);\n      } catch {\n        return false;\n      }\n      const hash = createHash(\"sha256\").update(data).digest(\"hex\");\n      return events.some((ev) => ev.lastWrittenHash(absPath) === hash);\n    },\n  };\n}\n\nasync function main() {\n  const sources = await resolveAllFixtureSources();\n\n  const fixtures: Fixture[] = [];\n  const mcpFakes: McpFakeSource[] = [];\n  // The primary source's blocks: what a --watch reload of it is compared with.\n  let primaryFakes: McpFakeSource[] = [];\n  for (const src of sources) {\n    const loaded = loadSource(src);\n    fixtures.push(...loaded.fixtures);\n    mcpFakes.push(...loaded.mcpFakes);\n    if (src === sources[0]) primaryFakes = loaded.mcpFakes;\n  }\n\n  if (fixtures.length === 0 && mcpFakes.length > 0) {\n    // F5/L9: fake blocks count as loaded; only LLM requests have nothing to match.\n    console.warn(build(msg`Warning: No LLM fixtures loaded; LLM requests will return 404`));\n  } else if (fixtures.length === 0) {\n    if (validateOnLoad || values.strict) {\n      console.error(\"Error: No fixtures loaded and validation/strict mode is enabled — aborting.\");\n      process.exit(1);\n    }\n    console.warn(\"Warning: No fixtures loaded. The server will return 404 for all requests.\");\n  }\n\n  const sourceLabel = sources.map((s) => s.source).join(\", \") || \"<none>\";\n  logger.info(`Loaded ${fixtures.length} fixture(s) from ${sourceLabel}`);\n\n  // Validate fixtures if requested\n  if (validateOnLoad) {\n    if (responsesTools === \"extended\") fixtures.forEach(markFixtureResponsesToolsExtended);\n    const results = validateFixtures(fixtures);\n    const errors = results.filter((r) => r.severity === \"error\");\n    const warnings = results.filter((r) => r.severity === \"warning\");\n\n    for (const w of warnings) {\n      logger.warn(`Fixture ${w.fixtureIndex}: ${w.message}`);\n    }\n    // L8 (shadowed mcpFakes entries) is not printed here: the hand-off in\n    // createServer prints it on every start.\n    for (const e of errors) {\n      logger.error(`Fixture ${e.fixtureIndex}: ${e.message}`);\n    }\n\n    if (errors.length > 0) {\n      console.error(`Validation failed: ${errors.length} error(s), ${warnings.length} warning(s)`);\n      process.exit(1);\n    }\n  }\n\n  const allMounts: { path: string; handler: Mountable }[] = [\n    ...(aguiMount ? [aguiMount] : []),\n    ...mcpRecordMounts,\n  ];\n  const mounts = allMounts.length > 0 ? allMounts : undefined;\n\n  const instance = await createServer(\n    fixtures,\n    {\n      port,\n      host,\n      latency,\n      chunkSize,\n      replaySpeed,\n      logLevel,\n      chaos,\n      metrics: values.metrics,\n      record,\n      strict: values.strict,\n      strictToolArguments: values[\"strict-tool-arguments\"],\n      enableMisbehavior: values.misbehavior,\n      ...(responsesTools !== undefined ? { responsesTools } : {}),\n      journalMaxEntries: journalMax,\n      fixtureCountsMaxTestIds: fixtureCountsMax,\n      auth: resolveInboundAuth(selectInboundAuthSource(undefined)).publicConfig,\n    },\n    mounts,\n    { search: [], rerank: [], moderation: [], mcpFakes },\n  );\n\n  // Only the first local source is watched — remote URL sources are fetched once\n  // at boot and are not monitored. Declared before the readiness announcement so\n  // shutdown can close it whenever the signal arrives.\n  let watcher: { close: () => void } | null = null;\n\n  function shutdown() {\n    logger.info(\"Shutting down...\");\n    if (watcher) watcher.close();\n    instance.server.close(() => {\n      process.exit(0);\n    });\n  }\n\n  // Register BEFORE announcing readiness. Writes to a pipe are synchronous on Linux\n  // (and to a file on every POSIX platform), so a supervisor that reacts to the line\n  // below can deliver SIGTERM while this process is still mid-statement. Announcing\n  // first left a window in which SIGTERM hit Node's default disposition, which\n  // re-raises: the process died with a null exit code instead of shutting down.\n  process.on(\"SIGINT\", shutdown);\n  process.on(\"SIGTERM\", shutdown);\n\n  logger.info(`aimock server listening on ${instance.url}`);\n\n  // Start file watcher if requested.\n  if (watchMode) {\n    const primary = sources[0];\n    if (!primary) {\n      logger.warn(\"--watch requested but no resolvable fixture sources; skipping watcher\");\n    } else {\n      // A rejected reload is printed here, whatever the log level, then\n      // thrown as ReloadRejected: watchFixtures keeps the previous fixtures,\n      // and its WatchLogger does not print the error a second time.\n      const reject = (err: FixtureLoadError | MisbehaviorConfigError): never => {\n        printLoadError(err);\n        throw new ReloadRejected(build(msg`--watch reload rejected`));\n      };\n      const loadFn = (): Fixture[] => {\n        let loaded: FixturesWithServices;\n        try {\n          loaded = loadSource(primary);\n        } catch (err) {\n          // L3: a bad block in the reloaded file.\n          if (err instanceof FixtureLoadError || err instanceof MisbehaviorConfigError) {\n            return reject(err);\n          }\n          throw err;\n        }\n        const changed = changedFakesSource(\n          primaryFakes,\n          loaded.mcpFakes,\n          new Set(loaded.unreadable),\n        );\n        if (changed !== null) {\n          // L7.\n          return reject(\n            new FixtureLoadError({\n              rule: \"mcp-fakes/watch-reload-changed\",\n              file: changed,\n              detail: msg`mcpFakes changed on --watch reload; MCP fakes are not reloaded, so the whole reload is rejected and the previous fixtures stay loaded. Restart aimock to load the new fakes`,\n            }),\n          );\n        }\n        if (responsesTools === \"extended\") {\n          loaded.fixtures.forEach(markFixtureResponsesToolsExtended);\n        }\n        return loaded.fixtures;\n      };\n      watcher = watchFixtures(primary.path, fixtures, loadFn, {\n        logger: new WatchLogger(logLevel),\n        validate: validateOnLoad,\n        validateFn: validateFixtures,\n        ...recorderWatch(primary, (moved) => (primaryFakes = moved(primaryFakes))),\n      });\n      logger.info(`Watching ${primary.path} for changes`);\n    }\n  }\n}\n\nmain().catch((err) => {\n  if (err instanceof FixtureLoadError || err instanceof MisbehaviorConfigError) {\n    printLoadError(err);\n  } else {\n    console.error(err);\n  }\n  process.exit(1);\n});\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAgCA,MAAM,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;sCAkDyBA,2BAAa,UAAU,IAAI;;;EAG/D,MAAM;AAER,MAAM,EAAE,oCAAqB;CAC3B,SAAS;EACP,MAAM;GAAE,MAAM;GAAU,OAAO;GAAK,SAAS;GAAQ;EACrD,MAAM;GAAE,MAAM;GAAU,OAAO;GAAK,SAAS;GAAa;EAC1D,UAAU;GAAE,MAAM;GAAU,OAAO;GAAK,UAAU;GAAM;EACxD,SAAS;GAAE,MAAM;GAAU,OAAO;GAAK,SAAS;GAAK;EACrD,cAAc;GAAE,MAAM;GAAU,OAAO;GAAK,SAAS;GAAM;EAC3D,OAAO;GAAE,MAAM;GAAW,OAAO;GAAK,SAAS;GAAO;EACtD,aAAa;GAAE,MAAM;GAAU,SAAS;GAAQ;EAChD,oBAAoB;GAAE,MAAM;GAAW,SAAS;GAAO;EACvD,aAAa;GAAE,MAAM;GAAW,SAAS;GAAO;EAChD,SAAS;GAAE,MAAM;GAAW,SAAS;GAAO;EAC5C,QAAQ;GAAE,MAAM;GAAW,SAAS;GAAO;EAC3C,6BAA6B;GAAE,MAAM;GAAW,SAAS;GAAO;EAChE,cAAc;GAAE,MAAM;GAAW,SAAS;GAAO;EACjD,QAAQ;GAAE,MAAM;GAAW,SAAS;GAAO;EAC3C,yBAAyB;GAAE,MAAM;GAAW,SAAS;GAAO;EAC5D,mBAAmB,EAAE,MAAM,UAAU;EACrC,mBAAmB,EAAE,MAAM,UAAU;EACrC,sBAAsB,EAAE,MAAM,UAAU;EACxC,mBAAmB,EAAE,MAAM,UAAU;EACrC,qBAAqB,EAAE,MAAM,UAAU;EACvC,oBAAoB,EAAE,MAAM,UAAU;EACtC,kBAAkB,EAAE,MAAM,UAAU;EACpC,mBAAmB,EAAE,MAAM,UAAU;EACrC,mBAAmB,EAAE,MAAM,UAAU;EACrC,uBAAuB,EAAE,MAAM,UAAU;EACzC,qBAAqB,EAAE,MAAM,UAAU;EACvC,uBAAuB,EAAE,MAAM,UAAU;EACzC,mBAAmB,EAAE,MAAM,UAAU;EACrC,0BAA0B,EAAE,MAAM,UAAU;EAC5C,2BAA2B,EAAE,MAAM,UAAU;EAC7C,eAAe;GAAE,MAAM;GAAW,SAAS;GAAO;EAClD,iBAAiB,EAAE,MAAM,UAAU;EACnC,mBAAmB;GAAE,MAAM;GAAW,SAAS;GAAO;EACtD,cAAc;GAAE,MAAM;GAAU,UAAU;GAAM;EAChD,kBAAkB;GAAE,MAAM;GAAU,UAAU;GAAM;EACpD,gBAAgB;GAAE,MAAM;GAAU,SAAS;GAAO;EAClD,cAAc,EAAE,MAAM,UAAU;EAChC,mBAAmB,EAAE,MAAM,UAAU;EACrC,oBAAoB,EAAE,MAAM,UAAU;EACtC,mBAAmB,EAAE,MAAM,UAAU;EACrC,iBAAiB,EAAE,MAAM,UAAU;EACnC,eAAe;GAAE,MAAM;GAAU,SAAS;GAAQ;EAClD,sBAAsB;GAAE,MAAM;GAAU,SAAS;GAAO;EACxD,MAAM;GAAE,MAAM;GAAW,SAAS;GAAO;EAC1C;CACD,QAAQ;CACT,CAAC;AAEF,IAAI,OAAO,MAAM;AACf,SAAQ,IAAI,KAAK;AACjB,SAAQ,KAAK,EAAE;;AAGjB,MAAM,OAAO,OAAO,OAAO,KAAK;AAChC,MAAM,OAAO,OAAO;AACpB,MAAM,UAAU,OAAO,OAAO,QAAQ;AACtC,MAAM,YAAY,OAAO,OAAO,cAAc;AAC9C,MAAM,gBACJ,OAAO,YAAY,OAAO,SAAS,SAAS,IAAI,OAAO,WAAW,CAAC,aAAa;AAClF,MAAM,YAAY,OAAO;AACzB,MAAM,iBAAiB,OAAO;AAC9B,MAAM,cAAc,OAAO;AAE3B,IAAI,CAAC;CAAC;CAAU;CAAQ;CAAQ;CAAQ,CAAC,SAAS,YAAY,EAAE;AAC9D,SAAQ,MAAM,sBAAsB,YAAY,yCAAyC;AACzF,SAAQ,KAAK,EAAE;;AAEjB,MAAM,WAAW;AAEjB,IAAI,OAAO,MAAM,KAAK,IAAI,OAAO,KAAK,OAAO,OAAO;AAClD,SAAQ,MAAM,iBAAiB,OAAO,OAAO;AAC7C,SAAQ,KAAK,EAAE;;AAGjB,IAAI,OAAO,MAAM,QAAQ,IAAI,UAAU,GAAG;AACxC,SAAQ,MAAM,oBAAoB,OAAO,UAAU;AACnD,SAAQ,KAAK,EAAE;;AAGjB,IAAI,OAAO,MAAM,UAAU,IAAI,YAAY,GAAG;AAC5C,SAAQ,MAAM,uBAAuB,OAAO,gBAAgB;AAC5D,SAAQ,KAAK,EAAE;;AAGjB,MAAM,cAAc,OAAO,OAAO,gBAAgB;AAClD,IAAI,OAAO,MAAM,YAAY,IAAI,eAAe,GAAG;AACjD,SAAQ,MAAM,2CAA2C;AACzD,SAAQ,KAAK,EAAE;;AAGjB,MAAM,qBAAqB,OAAO;AAClC,IACE,uBAAuB,UACvB,uBAAuB,YACvB,uBAAuB,YACvB;AACA,SAAQ,MACN,8BAA8B,mBAAmB,oCAClD;AACD,SAAQ,KAAK,EAAE;;AAEjB,MAAM,iBAAiD;AAEvD,MAAM,aAAa,OAAO,OAAO,eAAe;AAChD,IAAI,OAAO,MAAM,WAAW,IAAI,CAAC,OAAO,UAAU,WAAW,IAAI,aAAa,GAAG;AAC/E,SAAQ,MACN,wBAAwB,OAAO,eAAe,kDAC/C;AACD,SAAQ,KAAK,EAAE;;AAGjB,MAAM,sBAAsB,OAAO;AACnC,MAAM,mBAAmB,OAAO,oBAAoB;AACpD,IAAI,OAAO,MAAM,iBAAiB,IAAI,CAAC,OAAO,UAAU,iBAAiB,IAAI,mBAAmB,GAAG;AACjG,SAAQ,MACN,+BAA+B,oBAAoB,kDACpD;AACD,SAAQ,KAAK,EAAE;;AAGjB,MAAM,uBAAuB,OAAO;AACpC,IAAI;AACJ,IAAI,yBAAyB,QAAW;AACtC,qBAAoB,OAAO,qBAAqB;AAChD,KAAI,CAAC,OAAO,SAAS,kBAAkB,IAAI,qBAAqB,GAAG;AACjE,UAAQ,MACN,gCAAgC,qBAAqB,qCACtD;AACD,UAAQ,KAAK,EAAE;;;AAInB,MAAM,mBAAmB,OAAO;AAChC,IAAI;AACJ,IAAI,qBAAqB,QAAW;AAClC,iBAAgB,OAAO,iBAAiB;AACxC,KAAI,CAAC,OAAO,SAAS,cAAc,IAAI,iBAAiB,GAAG;AACzD,UAAQ,MACN,4BAA4B,iBAAiB,qCAC9C;AACD,UAAQ,KAAK,EAAE;;;AAInB,MAAM,yBAAyB,OAAO;AACtC,IAAI;AACJ,IAAI,2BAA2B,QAAW;AACxC,uBAAsB,OAAO,uBAAuB;AACpD,KAAI,CAAC,OAAO,SAAS,oBAAoB,IAAI,uBAAuB,GAAG;AACrE,UAAQ,MACN,mCAAmC,uBAAuB,qCAC3D;AACD,UAAQ,KAAK,EAAE;;;AAInB,MAAM,0BAA0B,OAAO;AACvC,IAAI;AACJ,IAAI,4BAA4B,QAAW;AACzC,wBAAuB,OAAO,wBAAwB;AACtD,KAAI,CAAC,OAAO,SAAS,qBAAqB,IAAI,wBAAwB,GAAG;AACvE,UAAQ,MACN,oCAAoC,wBAAwB,qCAC7D;AACD,UAAQ,KAAK,EAAE;;;AAInB,MAAM,SAAS,IAAIC,sBAAO,SAAS;AAGnC,IAAI;AACJ;CACE,MAAM,UAAU,OAAO;CACvB,MAAM,eAAe,OAAO;CAC5B,MAAM,gBAAgB,OAAO;CAC7B,MAAM,eAAe,OAAO;CAC5B,MAAM,aAAa,OAAO;AAE1B,KACE,YAAY,UACZ,iBAAiB,UACjB,kBAAkB,UAClB,iBAAiB,UACjB,eAAe,QACf;AAOA,UAAQ,EAAE;EACV,MAAM,aAAkF;GACtF;IAAE,MAAM;IAAc,OAAO;IAAY,KAAK;IAAS;GACvD;IAAE,MAAM;IAAmB,OAAO;IAAiB,KAAK;IAAc;GACtE;IAAE,MAAM;IAAoB,OAAO;IAAkB,KAAK;IAAe;GACzE;IAAE,MAAM;IAAmB,OAAO;IAAiB,KAAK;IAAc;GACtE;IAAE,MAAM;IAAiB,OAAO;IAAa,KAAK;IAAY;GAC/D;AACD,OAAK,MAAM,EAAE,MAAM,OAAO,SAAS,YAAY;AAC7C,OAAI,QAAQ,OAAW;GACvB,MAAM,MAAMC,8BAAgB,OAAO,IAAI;AACvC,OAAI,QAAQ,QAAW;AACrB,YAAQ,MAAM,WAAW,KAAK,IAAI,IAAI,cAAcF,2BAAa,OAAO,IAAI,GAAG;AAC/E,YAAQ,KAAK,EAAE;;AAEjB,SAAM,SAAS;;;;AAMrB,IAAI;AACJ,IAAI,OAAO,UAAU,OAAO,eAAe;CACzC,MAAM,YAAuC,EAAE;AAC/C,KAAI,OAAO,mBAAoB,WAAU,SAAS,OAAO;AACzD,KAAI,OAAO,sBAAuB,WAAU,YAAY,OAAO;AAC/D,KAAI,OAAO,mBAAoB,WAAU,SAAS,OAAO;AACzD,KAAI,OAAO,qBAAsB,WAAU,WAAW,OAAO;AAC7D,KAAI,OAAO,oBAAqB,WAAU,UAAU,OAAO;AAC3D,KAAI,OAAO,kBAAmB,WAAU,QAAQ,OAAO;AACvD,KAAI,OAAO,mBAAoB,WAAU,SAAS,OAAO;AACzD,KAAI,OAAO,mBAAoB,WAAU,SAAS,OAAO;AACzD,KAAI,OAAO,uBAAwB,WAAU,aAAa,OAAO;AACjE,KAAI,OAAO,qBAAsB,WAAU,WAAW,OAAO;AAE7D,KAAI,OAAO,KAAK,UAAU,CAAC,WAAW,GAAG;AACvC,UAAQ,MACN,YAAY,OAAO,gBAAgB,eAAe,SAAS,0CAC5D;AACD,UAAQ,KAAK,EAAE;;CAOjB,MAAM,aAAa,cAAc;CACjC,MAAM,kBAAkB,gBAAgB,KAAK,WAAW;AACxD,KAAI,OAAO,UAAU,iBAAiB;AACpC,UAAQ,MACN,2FAA2F,aAC5F;AACD,UAAQ,KAAK,EAAE;;AAEjB,UAAS;EACP;EAIA,cAAcG,+CAAyB;EAIvC,aAAa,kBAAkB,gCAAoB,YAAY,WAAW;EAC1E,WAAW,OAAO;EAClB,wBAAwB,OAAO;EAC/B;EACA;EACA;EACA;EACD;OACI;CAIL,MAAM,uBACJ;EACE;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CACD,QAAQ,SAAS,OAAO,UAAU,OAAU;AAC9C,KAAI,qBAAqB,SAAS,EAChC,QAAO,KACL,KAAK,qBAAqB,KAAK,MAAM,CAAC,8FACvC;AAEH,KACE,sBAAsB,UACtB,kBAAkB,UAClB,wBAAwB,UACxB,yBAAyB,OAEzB,QAAO,KACL,yLACD;;AAKL,IAAI;AACJ,IAAI,OAAO,kBAAkB,OAAO,oBAAoB;AACtD,KAAI,CAAC,OAAO,kBAAkB;AAC5B,UAAQ,MAAM,kEAAkE;AAChF,UAAQ,KAAK,EAAE;;CAIjB,MAAM,WAAW,cAAc;CAC/B,MAAM,gBAAgB,gBAAgB,KAAK,SAAS;AACpD,KAAI,OAAO,kBAAkB,eAAe;AAC1C,UAAQ,MACN,gGAAgG,WACjG;AACD,UAAQ,KAAK,EAAE;;CAEjB,MAAM,OAAO,IAAIC,4BAAU;AAC3B,MAAK,gBAAgB;EACnB,UAAU,OAAO;EAIjB,aAAa,gBAAgB,gCAAoB,UAAU,gBAAgB;EAC3E,WAAW,OAAO;EACnB,CAAC;AACF,aAAY;EAAE,MAAM;EAAS,SAAS;EAAM;;AAI9C,MAAM,kBAAwD,EAAE;AAChE;CACE,MAAM,eAAe,OAAO,iBAAiB,EAAE;CAC/C,MAAM,cAAc,OAAO,qBAAqB,EAAE;AAClD,KAAI,aAAa,SAAS,GAAG;AAE3B,MAAI,EAAE,OAAO,YAAY,OAAO,SAAS,SAAS,IAAI;AACpD,WAAQ,MACN,qFACD;AACD,WAAQ,KAAK,EAAE;;AAEjB,MAAI,gBAAgB,KAAK,OAAO,SAAS,GAAG,EAAE;AAC5C,WAAQ,MACN,+FAA+F,OAAO,SAAS,KAChH;AACD,WAAQ,KAAK,EAAE;;;CAGnB,MAAM,QAAQ,CACZ,GAAG,aAAa,KAAK,WAAW;EAAE,MAAM;EAAgB;EAAO,WAAW;EAAO,EAAE,EACnF,GAAG,YAAY,KAAK,WAAW;EAAE,MAAM;EAAoB;EAAO,WAAW;EAAM,EAAE,CACtF;AACD,KAAI,MAAM,SAAS,GAAG;EACpB,IAAI;AACJ,MAAI;AACF,SAAMC,kCAAa,QAAQ,IAAI;WACxB,KAAK;AACZ,WAAQ,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,GAAG;AAC3E,WAAQ,KAAK,EAAE;;AAEjB,OAAK,MAAM,EAAE,MAAM,OAAO,eAAe,MACvC,KAAI;GACF,MAAM,EAAE,OAAO,aAAaC,wCAAmB,OAAO,KAAK;AAC3D,OAAI,aAAa,UAAU,UAAU,KACnC,OAAM,IAAI,MAAM,GAAG,KAAK,SAAS,MAAM,6CAA6C;AAEtF,OAAI,gBAAgB,MAAM,MAAM,EAAE,SAAS,MAAM,CAC/C,OAAM,IAAI,MAAM,GAAG,KAAK,SAAS,MAAM,0BAA0B;GAEnE,MAAM,MAAM,IAAIC,0BAAS,CAAC,gBAAgB;IACxC;IACA,aAAa,YAAY,gCAAoB,OAAO,SAAU,IAAI,WAAW;IAC7E;IACA,cAAc,IAAI;IAClB,cAAc,IAAI;IAClB,QAAQ,OAAO;IAChB,CAAC;AACF,mBAAgB,KAAK;IAAE,MAAM;IAAO,SAAS;IAAK,CAAC;WAC5C,KAAK;AACZ,WAAQ,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,GAAG;AAC3E,WAAQ,KAAK,EAAE;;;;AAYvB,eAAe,2BAA6D;CAC1E,MAAM,WAAoC,EAAE;AAC5C,MAAK,MAAM,SAAS,eAAe;EACjC,IAAI;AACJ,MAAI;AACF,WAAQ,MAAMC,6CAAqB,OAAO;IACxC;IACA;IACD,CAAC;WACK,KAAK;GACZ,MAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC5D,WAAQ,MAAM,uCAAuC,MAAM,KAAK,MAAM;AACtE,WAAQ,KAAK,EAAE;;AAEjB,MAAI,CAAC,MAAM,KAET;AAEF,MAAI;GACF,MAAM,6BAAgB,MAAM,KAAK;AACjC,YAAS,KAAK;IAAE,QAAQ,MAAM;IAAQ,MAAM,MAAM;IAAM,OAAO,KAAK,aAAa;IAAE,CAAC;WAC7E,KAAK;AACZ,OAAK,IAA8B,SAAS,SAC1C,SAAQ,MAAM,4BAA4B,MAAM,OAAO;QAClD;IACL,MAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC5D,YAAQ,MAAM,gCAAgC,MAAM,KAAK,IAAI,MAAM;;AAErE,WAAQ,KAAK,EAAE;;;AAGnB,QAAO;;AAMT,SAAS,WAAW,QAAqD;CACvE,MAAM,SAAS,OAAO,QAClBC,gEAAgC,OAAO,MAAM,OAAO,GACpDC,4DAA4B,OAAO,MAAM,QAAQ,QAAW,OAAO,OAAO;AAE9E,KAAI,OAAO,YAAa,QAAO,SAAS,QAAQC,oDAA6B;AAC7E,QAAO;;;AAIT,SAAS,cAAc,QAAiD;CACtE,MAAM,2BAAW,IAAI,KAAwB;AAC7C,MAAK,MAAM,SAAS,QAAQ;EAC1B,MAAM,OAAO,SAAS,IAAI,MAAM,OAAO,IAAI,EAAE;AAC7C,OAAK,KAAK,CAAC,MAAM,YAAY,MAAM,IAAI,CAAC;AACxC,WAAS,IAAI,MAAM,QAAQ,KAAK;;AAElC,QAAO;;;;;;;;AAST,SAAS,mBACP,MACA,QACA,YACe;CACf,MAAM,SAAS,cAAc,KAAK;CAClC,MAAM,QAAQ,cAAc,OAAO;AACnC,MAAK,MAAM,UAAU,IAAI,IAAI,CAAC,GAAG,OAAO,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,CAAC,EAAE;AACjE,MAAI,WAAW,IAAI,OAAO,CAAE;AAC5B,MAAI,kCAAmB,OAAO,IAAI,OAAO,EAAE,MAAM,IAAI,OAAO,CAAC,CAAE,QAAO;;AAExE,QAAO;;;;;;AAOT,SAAS,eAAe,KAAsD;CAC5E,MAAM,SAAS,eAAeC,qCAAmB,IAAI,SAAS,CAAC,IAAI;AACnE,MAAK,MAAM,KAAK,OAAQ,SAAQ,MAAM,EAAE,QAAQ;AAChD,KAAI,eAAeA,mCACjB,MAAK,MAAM,KAAK,IAAI,SAAU,SAAQ,KAAK,EAAE,QAAQ;;;AAKzD,IAAM,iBAAN,cAA6B,MAAM;;;;;AAMnC,IAAM,cAAN,cAA0BX,sBAAO;CAC/B,AAAS,MAAM,GAAG,MAAuB;AACvC,MAAI,KAAK,MAAM,MAAM,aAAa,eAAe,CAAE;AACnD,QAAM,MAAM,GAAG,KAAK;;;;;;;;;;;AAYxB,SAAS,cACP,SACA,cAC2C;CAC3C,MAAM,SAAS,gBAAgB,KAAK,MAAM,EAAE,QAAQ,gBAAgB,CAAC,CAAC,QAAQ,OAAO,OAAO,KAAK;AACjG,KAAI,OAAO,WAAW,KAAK,CAAC,QAAQ,MAAO,QAAO,EAAE;AACpD,MAAK,MAAM,MAAM,OACf,IAAG,SAAS,MAAM,YAAY;EAC5B,MAAM,iCAAkB,QAAQ,MAAM,KAAK,CAAC,MAAMY,cAAI,CAAC,KAAK,IAAI;EAChE,MAAM,SAA0B,MAAM,QAAQ,QAAQ,GAClD,QAAQ,KAAK,KAAK,gBAAgB;GAAE;GAAQ;GAAY;GAAK,EAAE,GAC/D,CAAC;GAAE;GAAQ,YAAY;GAAM,KAAK;GAAS,CAAC;AAChD,gBAAc,SAAS;GAErB,MAAM,SAAS,KAAK,QAAQ,MAAM,EAAE,WAAW,OAAO;GACtD,MAAM,KAAK,KAAK,WAAW,MAAM,EAAE,WAAW,OAAO;GACrD,MAAM,MAAM,OAAO,KAAK,OAAO,SAAS;AACxC,UAAO;IAAC,GAAG,OAAO,MAAM,GAAG,IAAI;IAAE,GAAG;IAAQ,GAAG,OAAO,MAAM,IAAI;IAAC;IACjE;GACF;AAEJ,QAAO,EACL,SAAS,YAA6B;AAEpC,MAAI,sBAAsB,KAAK,QAAQ,CAAE,QAAO;EAChD,IAAI;AACJ,MAAI;AACF,8BAAc,QAAQ;UAChB;AACN,UAAO;;AAET,MAAI,GAAG,aAAa,CAAE,QAAO;EAC7B,IAAI;AACJ,MAAI;AACF,oCAAoB,QAAQ;UACtB;AACN,UAAO;;EAET,MAAM,mCAAkB,SAAS,CAAC,OAAO,KAAK,CAAC,OAAO,MAAM;AAC5D,SAAO,OAAO,MAAM,OAAO,GAAG,gBAAgB,QAAQ,KAAK,KAAK;IAEnE;;AAGH,eAAe,OAAO;CACpB,MAAM,UAAU,MAAM,0BAA0B;CAEhD,MAAM,WAAsB,EAAE;CAC9B,MAAM,WAA4B,EAAE;CAEpC,IAAI,eAAgC,EAAE;AACtC,MAAK,MAAM,OAAO,SAAS;EACzB,MAAM,SAAS,WAAW,IAAI;AAC9B,WAAS,KAAK,GAAG,OAAO,SAAS;AACjC,WAAS,KAAK,GAAG,OAAO,SAAS;AACjC,MAAI,QAAQ,QAAQ,GAAI,gBAAe,OAAO;;AAGhD,KAAI,SAAS,WAAW,KAAK,SAAS,SAAS,EAE7C,SAAQ,KAAKC,2BAAM,wBAAG,gEAAgE,CAAC;UAC9E,SAAS,WAAW,GAAG;AAChC,MAAI,kBAAkB,OAAO,QAAQ;AACnC,WAAQ,MAAM,8EAA8E;AAC5F,WAAQ,KAAK,EAAE;;AAEjB,UAAQ,KAAK,4EAA4E;;CAG3F,MAAM,cAAc,QAAQ,KAAK,MAAM,EAAE,OAAO,CAAC,KAAK,KAAK,IAAI;AAC/D,QAAO,KAAK,UAAU,SAAS,OAAO,mBAAmB,cAAc;AAGvE,KAAI,gBAAgB;AAClB,MAAI,mBAAmB,WAAY,UAAS,QAAQC,yDAAkC;EACtF,MAAM,UAAUC,wCAAiB,SAAS;EAC1C,MAAM,SAAS,QAAQ,QAAQ,MAAM,EAAE,aAAa,QAAQ;EAC5D,MAAM,WAAW,QAAQ,QAAQ,MAAM,EAAE,aAAa,UAAU;AAEhE,OAAK,MAAM,KAAK,SACd,QAAO,KAAK,WAAW,EAAE,aAAa,IAAI,EAAE,UAAU;AAIxD,OAAK,MAAM,KAAK,OACd,QAAO,MAAM,WAAW,EAAE,aAAa,IAAI,EAAE,UAAU;AAGzD,MAAI,OAAO,SAAS,GAAG;AACrB,WAAQ,MAAM,sBAAsB,OAAO,OAAO,aAAa,SAAS,OAAO,aAAa;AAC5F,WAAQ,KAAK,EAAE;;;CAInB,MAAM,YAAoD,CACxD,GAAI,YAAY,CAAC,UAAU,GAAG,EAAE,EAChC,GAAG,gBACJ;CACD,MAAM,SAAS,UAAU,SAAS,IAAI,YAAY;CAElD,MAAM,WAAW,MAAMC,4BACrB,UACA;EACE;EACA;EACA;EACA;EACA;EACA;EACA;EACA,SAAS,OAAO;EAChB;EACA,QAAQ,OAAO;EACf,qBAAqB,OAAO;EAC5B,mBAAmB,OAAO;EAC1B,GAAI,mBAAmB,SAAY,EAAE,gBAAgB,GAAG,EAAE;EAC1D,mBAAmB;EACnB,yBAAyB;EACzB,MAAMC,wCAAmBC,6CAAwB,OAAU,CAAC,CAAC;EAC9D,EACD,QACA;EAAE,QAAQ,EAAE;EAAE,QAAQ,EAAE;EAAE,YAAY,EAAE;EAAE;EAAU,CACrD;CAKD,IAAI,UAAwC;CAE5C,SAAS,WAAW;AAClB,SAAO,KAAK,mBAAmB;AAC/B,MAAI,QAAS,SAAQ,OAAO;AAC5B,WAAS,OAAO,YAAY;AAC1B,WAAQ,KAAK,EAAE;IACf;;AAQJ,SAAQ,GAAG,UAAU,SAAS;AAC9B,SAAQ,GAAG,WAAW,SAAS;AAE/B,QAAO,KAAK,8BAA8B,SAAS,MAAM;AAGzD,KAAI,WAAW;EACb,MAAM,UAAU,QAAQ;AACxB,MAAI,CAAC,QACH,QAAO,KAAK,wEAAwE;OAC/E;GAIL,MAAM,UAAU,QAA0D;AACxE,mBAAe,IAAI;AACnB,UAAM,IAAI,eAAeL,2BAAM,wBAAG,0BAA0B,CAAC;;GAE/D,MAAM,eAA0B;IAC9B,IAAI;AACJ,QAAI;AACF,cAAS,WAAW,QAAQ;aACrB,KAAK;AAEZ,SAAI,eAAeM,2CAAoB,eAAeC,8CACpD,QAAO,OAAO,IAAI;AAEpB,WAAM;;IAER,MAAM,UAAU,mBACd,cACA,OAAO,UACP,IAAI,IAAI,OAAO,WAAW,CAC3B;AACD,QAAI,YAAY,KAEd,QAAO,OACL,IAAID,wCAAiB;KACnB,MAAM;KACN,MAAM;KACN,QAAQ,wBAAG;KACZ,CAAC,CACH;AAEH,QAAI,mBAAmB,WACrB,QAAO,SAAS,QAAQL,yDAAkC;AAE5D,WAAO,OAAO;;AAEhB,aAAUO,8BAAc,QAAQ,MAAM,UAAU,QAAQ;IACtD,QAAQ,IAAI,YAAY,SAAS;IACjC,UAAU;IACV,YAAYN;IACZ,GAAG,cAAc,UAAU,UAAW,eAAe,MAAM,aAAa,CAAE;IAC3E,CAAC;AACF,UAAO,KAAK,YAAY,QAAQ,KAAK,cAAc;;;;AAKzD,MAAM,CAAC,OAAO,QAAQ;AACpB,KAAI,eAAeI,2CAAoB,eAAeC,8CACpD,gBAAe,IAAI;KAEnB,SAAQ,MAAM,IAAI;AAEpB,SAAQ,KAAK,EAAE;EACf"}

package/dist/cli.js

@@ -1,16 +1,22 @@
 #!/usr/bin/env node
+import { build, msg } from "./message-text.js";
 import { resolveInboundAuth, selectInboundAuthSource } from "./api-key-auth.js";
 import { CHAOS_FIELDS, parseChaosField } from "./chaos.js";
-import { loadFixtureFile, loadFixturesFromDir, validateFixtures } from "./fixture-loader.js";
+import { FixtureLoadError, MisbehaviorConfigError, enableHeldFixtureMisbehavior, markFixtureResponsesToolsExtended, validateFixtures } from "./fixture-loader.js";
 import { readProviderKeysFromEnv } from "./provider-auth.js";
 import { Logger } from "./logger.js";
 import { AGUIMock } from "./agui-mock.js";
+import { McpFakesAddError } from "./mcp-fakes.js";
+import { mcpRecordEnv, parseMcpRecordFlag } from "./mcp-recorder.js";
+import { MCPMock } from "./mcp-mock.js";
 import { createServer } from "./server.js";
+import { loadFixtureFileWithServices, loadFixturesFromDirWithServices } from "./fixture-loader-services.js";
 import { watchFixtures } from "./watcher.js";
 import { resolveFixturesValue } from "./fixtures-remote.js";
-import { statSync } from "node:fs";
-import { resolve } from "node:path";
-import { parseArgs } from "node:util";
+import { createHash } from "node:crypto";
+import { readFileSync, statSync } from "node:fs";
+import { relative, resolve, sep } from "node:path";
+import { isDeepStrictEqual, parseArgs } from "node:util";
 
 //#region src/cli.ts
 const HELP = `
@@ -27,11 +33,16 @@ Options:
   -w, --watch               Watch fixture path for changes and reload
       --log-level <level>   Log verbosity: silent, warn, info, debug (default: info)
       --validate-on-load    Validate fixture schemas at startup
+      --misbehavior         Enable model misbehavior: fixture misbehavior keys and the
+                            X-AIMock-Misbehavior header (ignored without this flag)
       --metrics             Enable Prometheus metrics at GET /metrics
       --record              Record mode: proxy unmatched requests and save fixtures
       --record-full-model-version  Record exact model version without date stripping (default: false)
       --proxy-only          Proxy mode: forward unmatched requests without saving
       --strict              Strict mode: fail on unmatched requests (overridable per-request via X-AIMock-Strict header)
+      --strict-tool-arguments  Reject fixture tool calls with invalid JSON arguments instead of serving {} (default: false)
+      --responses-tools <mode>  OpenAI Responses tool handling: legacy (default) or extended (namespaced and
+                            custom tools visible to matching, custom tool rounds counted, namespaces emitted and recorded)
       --journal-max <n>     Max request entries retained in memory (default: 1000, 0 = unbounded)
       --fixture-counts-max <n>  Max unique testIds retained in fixture match-count map (default: 500, 0 = unbounded)
       --provider-openai <url>     Upstream URL for OpenAI (used with --record)
@@ -51,6 +62,8 @@ Options:
       --agui-record              Enable AG-UI recording (proxy unmatched AG-UI requests)
       --agui-upstream <url>      Upstream AG-UI agent URL (used with --agui-record)
       --agui-proxy-only          AG-UI proxy mode: forward without saving
+      --mcp-record <mount>=<url>   Record an upstream MCP server into mcpFakes (repeatable)
+      --mcp-proxy-only <mount>=<url>  Proxy an upstream MCP server without saving
       --replay-speed <n>    Replay speed multiplier (default: 1.0, 2.0 = 2x faster)
       --chaos-drop <rate>   Probability (0-1) of dropping requests with 500
       --chaos-malformed <rate>  Probability (0-1) of returning malformed JSON
@@ -100,6 +113,10 @@ const { values } = parseArgs({
 			type: "boolean",
 			default: false
 		},
+		misbehavior: {
+			type: "boolean",
+			default: false
+		},
 		metrics: {
 			type: "boolean",
 			default: false
@@ -120,6 +137,11 @@ const { values } = parseArgs({
 			type: "boolean",
 			default: false
 		},
+		"strict-tool-arguments": {
+			type: "boolean",
+			default: false
+		},
+		"responses-tools": { type: "string" },
 		"provider-openai": { type: "string" },
 		"provider-anthropic": { type: "string" },
 		"provider-gemini": { type: "string" },
@@ -143,6 +165,14 @@ const { values } = parseArgs({
 			type: "boolean",
 			default: false
 		},
+		"mcp-record": {
+			type: "string",
+			multiple: true
+		},
+		"mcp-proxy-only": {
+			type: "string",
+			multiple: true
+		},
 		"replay-speed": {
 			type: "string",
 			default: "1.0"
@@ -206,6 +236,12 @@ if (Number.isNaN(replaySpeed) || replaySpeed <= 0) {
 	console.error("--replay-speed must be a positive number");
 	process.exit(1);
 }
+const responsesToolsFlag = values["responses-tools"];
+if (responsesToolsFlag !== void 0 && responsesToolsFlag !== "legacy" && responsesToolsFlag !== "extended") {
+	console.error(`Invalid --responses-tools: ${responsesToolsFlag} (expected "legacy" or "extended")`);
+	process.exit(1);
+}
+const responsesTools = responsesToolsFlag;
 const journalMax = Number(values["journal-max"]);
 if (Number.isNaN(journalMax) || !Number.isInteger(journalMax) || journalMax < 0) {
 	console.error(`Invalid journal-max: ${values["journal-max"]} (must be a non-negative integer; 0 = unbounded)`);
@@ -374,6 +410,59 @@ if (values["agui-record"] || values["agui-proxy-only"]) {
 		handler: agui
 	};
 }
+const mcpRecordMounts = [];
+{
+	const recordValues = values["mcp-record"] ?? [];
+	const proxyValues = values["mcp-proxy-only"] ?? [];
+	if (recordValues.length > 0) {
+		if (!(values.fixtures && values.fixtures.length > 0)) {
+			console.error("Error: --mcp-record requires --fixtures <local path> for the recording destination");
+			process.exit(1);
+		}
+		if (/^https?:\/\//i.test(values.fixtures[0])) {
+			console.error(`Error: --mcp-record requires a local --fixtures path for the recording destination; got URL ${values.fixtures[0]}`);
+			process.exit(1);
+		}
+	}
+	const flags = [...recordValues.map((value) => ({
+		flag: "--mcp-record",
+		value,
+		proxyOnly: false
+	})), ...proxyValues.map((value) => ({
+		flag: "--mcp-proxy-only",
+		value,
+		proxyOnly: true
+	}))];
+	if (flags.length > 0) {
+		let env;
+		try {
+			env = mcpRecordEnv(process.env);
+		} catch (err) {
+			console.error(`Error: ${err instanceof Error ? err.message : String(err)}`);
+			process.exit(1);
+		}
+		for (const { flag, value, proxyOnly } of flags) try {
+			const { mount, upstream } = parseMcpRecordFlag(value, flag);
+			if (aguiMount && mount === aguiMount.path) throw new Error(`${flag} mount ${mount} is held by a mount that is not an MCP mock`);
+			if (mcpRecordMounts.some((m) => m.path === mount)) throw new Error(`${flag} mount ${mount} is given more than once`);
+			const mcp = new MCPMock().enableRecording({
+				upstream,
+				fixturePath: proxyOnly ? void 0 : resolve(values.fixtures[0], "recorded"),
+				proxyOnly,
+				secretValues: env.secretValues,
+				upstreamAuth: env.upstreamAuth,
+				strict: values.strict
+			});
+			mcpRecordMounts.push({
+				path: mount,
+				handler: mcp
+			});
+		} catch (err) {
+			console.error(`Error: ${err instanceof Error ? err.message : String(err)}`);
+			process.exit(1);
+		}
+	}
+}
 async function resolveAllFixtureSources() {
 	const resolved = [];
 	for (const value of fixtureValues) {
@@ -408,13 +497,121 @@ async function resolveAllFixtureSources() {
 	return resolved;
 }
 function loadSource(source) {
-	return source.isDir ? loadFixturesFromDir(source.path, logger) : loadFixtureFile(source.path, logger);
+	const loaded = source.isDir ? loadFixturesFromDirWithServices(source.path, logger) : loadFixtureFileWithServices(source.path, logger, void 0, source.source);
+	if (values.misbehavior) loaded.fixtures.forEach(enableHeldFixtureMisbehavior);
+	return loaded;
+}
+/** Each source's `mcpFakes` blocks, in load order, for the --watch comparison. */
+function fakesBySource(blocks) {
+	const bySource = /* @__PURE__ */ new Map();
+	for (const block of blocks) {
+		const list = bySource.get(block.source) ?? [];
+		list.push([block.blockIndex, block.raw]);
+		bySource.set(block.source, list);
+	}
+	return bySource;
+}
+/**
+* R9/F11: fakes are not reloaded by --watch, so a reload whose `mcpFakes`
+* differ from the boot set is rejected. Returns the first changed source.
+* A source in `unreadable` could not be read or parsed: it is not compared,
+* because its blocks are unknown, not removed.
+*/
+function changedFakesSource(boot, reload, unreadable) {
+	const before = fakesBySource(boot);
+	const after = fakesBySource(reload);
+	for (const source of new Set([...before.keys(), ...after.keys()])) {
+		if (unreadable.has(source)) continue;
+		if (!isDeepStrictEqual(before.get(source), after.get(source))) return source;
+	}
+	return null;
+}
+/**
+* L3: a load error on stderr, whatever the log level: every error of a
+* `McpFakesAddError`, one per line, then its L8 warnings.
+*/
+function printLoadError(err) {
+	const errors = err instanceof McpFakesAddError ? err.errors : [err];
+	for (const e of errors) console.error(e.message);
+	if (err instanceof McpFakesAddError) for (const w of err.warnings) console.warn(w.message);
+}
+/** A --watch reload that `loadFn` rejected and already printed (L3, L7). */
+var ReloadRejected = class extends Error {};
+/**
+* The --watch logger: as `Logger`, except that the watcher's own report of a
+* {@link ReloadRejected} reload is dropped, so the error is printed once.
+*/
+var WatchLogger = class extends Logger {
+	error(...args) {
+		if (args.some((a) => a instanceof ReloadRejected)) return;
+		super.error(...args);
+	}
+};
+/**
+* MR13: --watch with record mounts. (a) An event for a recorder temp file, or
+* for a file whose bytes are exactly what a recorder last wrote there, does
+* not reload; everything else (a delete, a directory, a user edit) reloads as
+* on main. (b) Each recorder write moves the --watch baseline of that file,
+* so the next reload does not reject the recording as a changed `mcpFakes`.
+* Without record mounts (or for a file source), --watch is exactly as on main.
+*/
+function recorderWatch(primary, moveBaseline) {
+	const events = mcpRecordMounts.map((m) => m.handler.recorderEvents()).filter((ev) => ev !== null);
+	if (events.length === 0 || !primary.isDir) return {};
+	for (const ev of events) ev.onWrite((file, written) => {
+		const source = relative(primary.path, file).split(sep).join("/");
+		const blocks = Array.isArray(written) ? written.map((raw, blockIndex) => ({
+			source,
+			blockIndex,
+			raw
+		})) : [{
+			source,
+			blockIndex: null,
+			raw: written
+		}];
+		moveBaseline((boot) => {
+			const others = boot.filter((b) => b.source !== source);
+			const at = boot.findIndex((b) => b.source === source);
+			const pos = at === -1 ? others.length : at;
+			return [
+				...others.slice(0, pos),
+				...blocks,
+				...others.slice(pos)
+			];
+		});
+	});
+	return { ignore: (absPath) => {
+		if (/\.tmp\.[0-9a-f-]+$/i.test(absPath)) return true;
+		let st;
+		try {
+			st = statSync(absPath);
+		} catch {
+			return false;
+		}
+		if (st.isDirectory()) return false;
+		let data;
+		try {
+			data = readFileSync(absPath);
+		} catch {
+			return false;
+		}
+		const hash = createHash("sha256").update(data).digest("hex");
+		return events.some((ev) => ev.lastWrittenHash(absPath) === hash);
+	} };
 }
 async function main() {
 	const sources = await resolveAllFixtureSources();
 	const fixtures = [];
-	for (const src of sources) fixtures.push(...loadSource(src));
-	if (fixtures.length === 0) {
+	const mcpFakes = [];
+	let primaryFakes = [];
+	for (const src of sources) {
+		const loaded = loadSource(src);
+		fixtures.push(...loaded.fixtures);
+		mcpFakes.push(...loaded.mcpFakes);
+		if (src === sources[0]) primaryFakes = loaded.mcpFakes;
+	}
+	if (fixtures.length === 0 && mcpFakes.length > 0) console.warn(build(msg`Warning: No LLM fixtures loaded; LLM requests will return 404`));
+	else if (fixtures.length === 0) {
 		if (validateOnLoad || values.strict) {
 			console.error("Error: No fixtures loaded and validation/strict mode is enabled — aborting.");
 			process.exit(1);
@@ -424,6 +621,7 @@ async function main() {
 	const sourceLabel = sources.map((s) => s.source).join(", ") || "<none>";
 	logger.info(`Loaded ${fixtures.length} fixture(s) from ${sourceLabel}`);
 	if (validateOnLoad) {
+		if (responsesTools === "extended") fixtures.forEach(markFixtureResponsesToolsExtended);
 		const results = validateFixtures(fixtures);
 		const errors = results.filter((r) => r.severity === "error");
 		const warnings = results.filter((r) => r.severity === "warning");
@@ -434,7 +632,8 @@ async function main() {
 			process.exit(1);
 		}
 	}
-	const mounts = aguiMount ? [aguiMount] : void 0;
+	const allMounts = [...aguiMount ? [aguiMount] : [], ...mcpRecordMounts];
+	const mounts = allMounts.length > 0 ? allMounts : void 0;
 	const instance = await createServer(fixtures, {
 		port,
 		host,
@@ -446,10 +645,18 @@ async function main() {
 		metrics: values.metrics,
 		record,
 		strict: values.strict,
+		strictToolArguments: values["strict-tool-arguments"],
+		enableMisbehavior: values.misbehavior,
+		...responsesTools !== void 0 ? { responsesTools } : {},
 		journalMaxEntries: journalMax,
 		fixtureCountsMaxTestIds: fixtureCountsMax,
 		auth: resolveInboundAuth(selectInboundAuthSource(void 0)).publicConfig
-	}, mounts);
+	}, mounts, {
+		search: [],
+		rerank: [],
+		moderation: [],
+		mcpFakes
+	});
 	let watcher = null;
 	function shutdown() {
 		logger.info("Shutting down...");
@@ -465,18 +672,40 @@ async function main() {
 		const primary = sources[0];
 		if (!primary) logger.warn("--watch requested but no resolvable fixture sources; skipping watcher");
 		else {
-			const loadFn = () => loadSource(primary);
+			const reject = (err) => {
+				printLoadError(err);
+				throw new ReloadRejected(build(msg`--watch reload rejected`));
+			};
+			const loadFn = () => {
+				let loaded;
+				try {
+					loaded = loadSource(primary);
+				} catch (err) {
+					if (err instanceof FixtureLoadError || err instanceof MisbehaviorConfigError) return reject(err);
+					throw err;
+				}
+				const changed = changedFakesSource(primaryFakes, loaded.mcpFakes, new Set(loaded.unreadable));
+				if (changed !== null) return reject(new FixtureLoadError({
+					rule: "mcp-fakes/watch-reload-changed",
+					file: changed,
+					detail: msg`mcpFakes changed on --watch reload; MCP fakes are not reloaded, so the whole reload is rejected and the previous fixtures stay loaded. Restart aimock to load the new fakes`
+				}));
+				if (responsesTools === "extended") loaded.fixtures.forEach(markFixtureResponsesToolsExtended);
+				return loaded.fixtures;
+			};
 			watcher = watchFixtures(primary.path, fixtures, loadFn, {
-				logger,
+				logger: new WatchLogger(logLevel),
 				validate: validateOnLoad,
-				validateFn: validateFixtures
+				validateFn: validateFixtures,
+				...recorderWatch(primary, (moved) => primaryFakes = moved(primaryFakes))
 			});
 			logger.info(`Watching ${primary.path} for changes`);
 		}
 	}
 }
 main().catch((err) => {
-	console.error(err);
+	if (err instanceof FixtureLoadError || err instanceof MisbehaviorConfigError) printLoadError(err);
+	else console.error(err);
 	process.exit(1);
 });