@copilotkit/aimock 1.45.0 → 1.46.0

package/dist/cli.js

@@ -11,6 +11,7 @@ import { mcpRecordEnv, parseMcpRecordFlag } from "./mcp-recorder.js";
 import { MCPMock } from "./mcp-mock.js";
 import { createServer } from "./server.js";
 import { loadFixtureFileWithServices, loadFixturesFromDirWithServices } from "./fixture-loader-services.js";
+import { parsePolicyFlags } from "./config-loader.js";
 import { watchFixtures } from "./watcher.js";
 import { resolveFixturesValue } from "./fixtures-remote.js";
 import { createHash } from "node:crypto";
@@ -43,6 +44,9 @@ Options:
       --strict-tool-arguments  Reject fixture tool calls with invalid JSON arguments instead of serving {} (default: false)
       --responses-tools <mode>  OpenAI Responses tool handling: legacy (default) or extended (namespaced and
                             custom tools visible to matching, custom tool rounds counted, namespaces emitted and recorded)
+      --policy <key=value>  Request policy (repeatable): requiredHeaders=off|enforce (default: off),
+                            authErrors=legacy|native (default: legacy),
+                            modelCatalog=legacy|native (default: legacy)
       --journal-max <n>     Max request entries retained in memory (default: 1000, 0 = unbounded)
       --fixture-counts-max <n>  Max unique testIds retained in fixture match-count map (default: 500, 0 = unbounded)
       --provider-openai <url>     Upstream URL for OpenAI (used with --record)
@@ -142,6 +146,10 @@ const { values } = parseArgs({
 			default: false
 		},
 		"responses-tools": { type: "string" },
+		policy: {
+			type: "string",
+			multiple: true
+		},
 		"provider-openai": { type: "string" },
 		"provider-anthropic": { type: "string" },
 		"provider-gemini": { type: "string" },
@@ -242,6 +250,12 @@ if (responsesToolsFlag !== void 0 && responsesToolsFlag !== "legacy" && response
 	process.exit(1);
 }
 const responsesTools = responsesToolsFlag;
+const parsedPolicy = parsePolicyFlags(values.policy ?? []);
+if (!parsedPolicy.ok) {
+	console.error(`${parsedPolicy.error}\n\n${HELP}`);
+	process.exit(1);
+}
+const policy = parsedPolicy.policy;
 const journalMax = Number(values["journal-max"]);
 if (Number.isNaN(journalMax) || !Number.isInteger(journalMax) || journalMax < 0) {
 	console.error(`Invalid journal-max: ${values["journal-max"]} (must be a non-negative integer; 0 = unbounded)`);
@@ -645,6 +659,7 @@ async function main() {
 		metrics: values.metrics,
 		record,
 		strict: values.strict,
+		policy,
 		strictToolArguments: values["strict-tool-arguments"],
 		enableMisbehavior: values.misbehavior,
 		...responsesTools !== void 0 ? { responsesTools } : {},

package/dist/cli.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli.js","names":[],"sources":["../src/cli.ts"],"sourcesContent":["#!/usr/bin/env node\nimport { isDeepStrictEqual, parseArgs } from \"node:util\";\nimport { createHash } from \"node:crypto\";\nimport { readFileSync, statSync, type Stats } from \"node:fs\";\nimport { relative, resolve, sep } from \"node:path\";\nimport { createServer } from \"./server.js\";\nimport type { ResponsesToolsMode } from \"./types.js\";\nimport {\n  FixtureLoadError,\n  MisbehaviorConfigError,\n  enableHeldFixtureMisbehavior,\n  markFixtureResponsesToolsExtended,\n  validateFixtures,\n} from \"./fixture-loader.js\";\nimport {\n  loadFixtureFileWithServices,\n  loadFixturesFromDirWithServices,\n  type FixturesWithServices,\n} from \"./fixture-loader-services.js\";\nimport { McpFakesAddError } from \"./mcp-fakes.js\";\nimport { build, msg } from \"./message-text.js\";\nimport { Logger, type LogLevel } from \"./logger.js\";\nimport { watchFixtures } from \"./watcher.js\";\nimport { AGUIMock } from \"./agui-mock.js\";\nimport { MCPMock } from \"./mcp-mock.js\";\nimport { mcpRecordEnv, parseMcpRecordFlag } from \"./mcp-recorder.js\";\nimport { parseChaosField, CHAOS_FIELDS, type ChaosField } from \"./chaos.js\";\nimport { resolveFixturesValue } from \"./fixtures-remote.js\";\nimport { readProviderKeysFromEnv } from \"./provider-auth.js\";\nimport { resolveInboundAuth, selectInboundAuthSource } from \"./api-key-auth.js\";\nimport type { Fixture, ChaosConfig, RecordConfig, McpFakeSource, Mountable } from \"./types.js\";\n\nconst HELP = `\nUsage: aimock [options]\n\nOptions:\n  -p, --port <number>       Port to listen on (default: 4010)\n  -h, --host <string>       Host to bind to (default: 127.0.0.1)\n  -f, --fixtures <value>    Fixture source (repeatable). Accepts:\n                              - filesystem path to a directory or .json file (default: ./fixtures)\n                              - https:// or http:// URL to a .json fixture file\n  -l, --latency <ms>        Latency in ms between SSE chunks (default: 0)\n  -c, --chunk-size <chars>  Chunk size in characters (default: 20)\n  -w, --watch               Watch fixture path for changes and reload\n      --log-level <level>   Log verbosity: silent, warn, info, debug (default: info)\n      --validate-on-load    Validate fixture schemas at startup\n      --misbehavior         Enable model misbehavior: fixture misbehavior keys and the\n                            X-AIMock-Misbehavior header (ignored without this flag)\n      --metrics             Enable Prometheus metrics at GET /metrics\n      --record              Record mode: proxy unmatched requests and save fixtures\n      --record-full-model-version  Record exact model version without date stripping (default: false)\n      --proxy-only          Proxy mode: forward unmatched requests without saving\n      --strict              Strict mode: fail on unmatched requests (overridable per-request via X-AIMock-Strict header)\n      --strict-tool-arguments  Reject fixture tool calls with invalid JSON arguments instead of serving {} (default: false)\n      --responses-tools <mode>  OpenAI Responses tool handling: legacy (default) or extended (namespaced and\n                            custom tools visible to matching, custom tool rounds counted, namespaces emitted and recorded)\n      --journal-max <n>     Max request entries retained in memory (default: 1000, 0 = unbounded)\n      --fixture-counts-max <n>  Max unique testIds retained in fixture match-count map (default: 500, 0 = unbounded)\n      --provider-openai <url>     Upstream URL for OpenAI (used with --record)\n      --provider-anthropic <url>  Upstream URL for Anthropic\n      --provider-gemini <url>     Upstream URL for Gemini\n      --provider-vertexai <url>   Upstream URL for Vertex AI\n      --provider-bedrock <url>    Upstream URL for Bedrock\n      --provider-azure <url>      Upstream URL for Azure OpenAI\n      --provider-ollama <url>     Upstream URL for Ollama\n      --provider-cohere <url>     Upstream URL for Cohere\n      --provider-openrouter <url> Upstream URL for OpenRouter (video record proxy)\n      --provider-byteplus <url>   Upstream ORIGIN for BytePlus Ark (e.g. https://ark.ap-southeast.bytepluses.com — origin only, no /api/v3)\n      --upstream-timeout-ms <ms>  Idle timeout (ms) on upstream socket before response (default: 30000)\n      --body-timeout-ms <ms>      Idle timeout (ms) on upstream response body between chunks (default: 30000)\n      --max-proxy-buffer-bytes <n> Cap (bytes) on in-memory proxy-path buffer; full body still relayed (default: 67108864)\n      --max-proxy-buffer-frames <n> Cap (frames) on in-memory proxy-path per-frame state; full body still relayed (default: 5000000)\n      --agui-record              Enable AG-UI recording (proxy unmatched AG-UI requests)\n      --agui-upstream <url>      Upstream AG-UI agent URL (used with --agui-record)\n      --agui-proxy-only          AG-UI proxy mode: forward without saving\n      --mcp-record <mount>=<url>   Record an upstream MCP server into mcpFakes (repeatable)\n      --mcp-proxy-only <mount>=<url>  Proxy an upstream MCP server without saving\n      --replay-speed <n>    Replay speed multiplier (default: 1.0, 2.0 = 2x faster)\n      --chaos-drop <rate>   Probability (0-1) of dropping requests with 500\n      --chaos-malformed <rate>  Probability (0-1) of returning malformed JSON\n      --chaos-disconnect <rate> Probability (0-1) of destroying connection\n      --chaos-ratelimit <rate> Probability (0-1) of 429 with Retry-After\n      --chaos-latency <ms> Delay (0-${CHAOS_FIELDS.latencyMs.max}ms) injected before handling\n      AIMOCK_API_KEYS  Comma-separated inbound test API keys (environment only)\n      --help                Show this help message\n`.trim();\n\nconst { values } = parseArgs({\n  options: {\n    port: { type: \"string\", short: \"p\", default: \"4010\" },\n    host: { type: \"string\", short: \"h\", default: \"127.0.0.1\" },\n    fixtures: { type: \"string\", short: \"f\", multiple: true },\n    latency: { type: \"string\", short: \"l\", default: \"0\" },\n    \"chunk-size\": { type: \"string\", short: \"c\", default: \"20\" },\n    watch: { type: \"boolean\", short: \"w\", default: false },\n    \"log-level\": { type: \"string\", default: \"info\" },\n    \"validate-on-load\": { type: \"boolean\", default: false },\n    misbehavior: { type: \"boolean\", default: false },\n    metrics: { type: \"boolean\", default: false },\n    record: { type: \"boolean\", default: false },\n    \"record-full-model-version\": { type: \"boolean\", default: false },\n    \"proxy-only\": { type: \"boolean\", default: false },\n    strict: { type: \"boolean\", default: false },\n    \"strict-tool-arguments\": { type: \"boolean\", default: false },\n    \"responses-tools\": { type: \"string\" },\n    \"provider-openai\": { type: \"string\" },\n    \"provider-anthropic\": { type: \"string\" },\n    \"provider-gemini\": { type: \"string\" },\n    \"provider-vertexai\": { type: \"string\" },\n    \"provider-bedrock\": { type: \"string\" },\n    \"provider-azure\": { type: \"string\" },\n    \"provider-ollama\": { type: \"string\" },\n    \"provider-cohere\": { type: \"string\" },\n    \"provider-openrouter\": { type: \"string\" },\n    \"provider-byteplus\": { type: \"string\" },\n    \"upstream-timeout-ms\": { type: \"string\" },\n    \"body-timeout-ms\": { type: \"string\" },\n    \"max-proxy-buffer-bytes\": { type: \"string\" },\n    \"max-proxy-buffer-frames\": { type: \"string\" },\n    \"agui-record\": { type: \"boolean\", default: false },\n    \"agui-upstream\": { type: \"string\" },\n    \"agui-proxy-only\": { type: \"boolean\", default: false },\n    \"mcp-record\": { type: \"string\", multiple: true },\n    \"mcp-proxy-only\": { type: \"string\", multiple: true },\n    \"replay-speed\": { type: \"string\", default: \"1.0\" },\n    \"chaos-drop\": { type: \"string\" },\n    \"chaos-malformed\": { type: \"string\" },\n    \"chaos-disconnect\": { type: \"string\" },\n    \"chaos-ratelimit\": { type: \"string\" },\n    \"chaos-latency\": { type: \"string\" },\n    \"journal-max\": { type: \"string\", default: \"1000\" },\n    \"fixture-counts-max\": { type: \"string\", default: \"500\" },\n    help: { type: \"boolean\", default: false },\n  },\n  strict: true,\n});\n\nif (values.help) {\n  console.log(HELP);\n  process.exit(0);\n}\n\nconst port = Number(values.port);\nconst host = values.host!;\nconst latency = Number(values.latency);\nconst chunkSize = Number(values[\"chunk-size\"]);\nconst fixtureValues: string[] =\n  values.fixtures && values.fixtures.length > 0 ? values.fixtures : [\"./fixtures\"];\nconst watchMode = values.watch!;\nconst validateOnLoad = values[\"validate-on-load\"]!;\nconst logLevelStr = values[\"log-level\"]!;\n\nif (![\"silent\", \"warn\", \"info\", \"debug\"].includes(logLevelStr)) {\n  console.error(`Invalid log-level: ${logLevelStr} (must be silent, warn, info, or debug)`);\n  process.exit(1);\n}\nconst logLevel = logLevelStr as LogLevel;\n\nif (Number.isNaN(port) || port < 0 || port > 65535) {\n  console.error(`Invalid port: ${values.port}`);\n  process.exit(1);\n}\n\nif (Number.isNaN(latency) || latency < 0) {\n  console.error(`Invalid latency: ${values.latency}`);\n  process.exit(1);\n}\n\nif (Number.isNaN(chunkSize) || chunkSize < 1) {\n  console.error(`Invalid chunk-size: ${values[\"chunk-size\"]}`);\n  process.exit(1);\n}\n\nconst replaySpeed = Number(values[\"replay-speed\"]);\nif (Number.isNaN(replaySpeed) || replaySpeed <= 0) {\n  console.error(\"--replay-speed must be a positive number\");\n  process.exit(1);\n}\n\nconst responsesToolsFlag = values[\"responses-tools\"];\nif (\n  responsesToolsFlag !== undefined &&\n  responsesToolsFlag !== \"legacy\" &&\n  responsesToolsFlag !== \"extended\"\n) {\n  console.error(\n    `Invalid --responses-tools: ${responsesToolsFlag} (expected \"legacy\" or \"extended\")`,\n  );\n  process.exit(1);\n}\nconst responsesTools: ResponsesToolsMode | undefined = responsesToolsFlag;\n\nconst journalMax = Number(values[\"journal-max\"]);\nif (Number.isNaN(journalMax) || !Number.isInteger(journalMax) || journalMax < 0) {\n  console.error(\n    `Invalid journal-max: ${values[\"journal-max\"]} (must be a non-negative integer; 0 = unbounded)`,\n  );\n  process.exit(1);\n}\n\nconst fixtureCountsMaxStr = values[\"fixture-counts-max\"];\nconst fixtureCountsMax = Number(fixtureCountsMaxStr);\nif (Number.isNaN(fixtureCountsMax) || !Number.isInteger(fixtureCountsMax) || fixtureCountsMax < 0) {\n  console.error(\n    `Invalid fixture-counts-max: ${fixtureCountsMaxStr} (must be a non-negative integer; 0 = unbounded)`,\n  );\n  process.exit(1);\n}\n\nconst upstreamTimeoutMsStr = values[\"upstream-timeout-ms\"];\nlet upstreamTimeoutMs: number | undefined;\nif (upstreamTimeoutMsStr !== undefined) {\n  upstreamTimeoutMs = Number(upstreamTimeoutMsStr);\n  if (!Number.isFinite(upstreamTimeoutMs) || upstreamTimeoutMs <= 0) {\n    console.error(\n      `Invalid upstream-timeout-ms: ${upstreamTimeoutMsStr} (must be a positive finite number)`,\n    );\n    process.exit(1);\n  }\n}\n\nconst bodyTimeoutMsStr = values[\"body-timeout-ms\"];\nlet bodyTimeoutMs: number | undefined;\nif (bodyTimeoutMsStr !== undefined) {\n  bodyTimeoutMs = Number(bodyTimeoutMsStr);\n  if (!Number.isFinite(bodyTimeoutMs) || bodyTimeoutMs <= 0) {\n    console.error(\n      `Invalid body-timeout-ms: ${bodyTimeoutMsStr} (must be a positive finite number)`,\n    );\n    process.exit(1);\n  }\n}\n\nconst maxProxyBufferBytesStr = values[\"max-proxy-buffer-bytes\"];\nlet maxProxyBufferBytes: number | undefined;\nif (maxProxyBufferBytesStr !== undefined) {\n  maxProxyBufferBytes = Number(maxProxyBufferBytesStr);\n  if (!Number.isFinite(maxProxyBufferBytes) || maxProxyBufferBytes <= 0) {\n    console.error(\n      `Invalid max-proxy-buffer-bytes: ${maxProxyBufferBytesStr} (must be a positive finite number)`,\n    );\n    process.exit(1);\n  }\n}\n\nconst maxProxyBufferFramesStr = values[\"max-proxy-buffer-frames\"];\nlet maxProxyBufferFrames: number | undefined;\nif (maxProxyBufferFramesStr !== undefined) {\n  maxProxyBufferFrames = Number(maxProxyBufferFramesStr);\n  if (!Number.isFinite(maxProxyBufferFrames) || maxProxyBufferFrames <= 0) {\n    console.error(\n      `Invalid max-proxy-buffer-frames: ${maxProxyBufferFramesStr} (must be a positive finite number)`,\n    );\n    process.exit(1);\n  }\n}\n\nconst logger = new Logger(logLevel);\n\n// Parse chaos config from CLI flags\nlet chaos: ChaosConfig | undefined;\n{\n  const dropStr = values[\"chaos-drop\"];\n  const malformedStr = values[\"chaos-malformed\"];\n  const disconnectStr = values[\"chaos-disconnect\"];\n  const ratelimitStr = values[\"chaos-ratelimit\"];\n  const latencyStr = values[\"chaos-latency\"];\n\n  if (\n    dropStr !== undefined ||\n    malformedStr !== undefined ||\n    disconnectStr !== undefined ||\n    ratelimitStr !== undefined ||\n    latencyStr !== undefined\n  ) {\n    // Same parser, same TABLE, same reject-never-clamp policy as every other\n    // chaos input (headers, fixture, server default, control API) — see\n    // `ChaosConfig`. The bounds and the integer-vs-rate grammar are read out of\n    // `CHAOS_FIELDS`, never re-typed here, so raising a cap in that one table\n    // moves the flag with it instead of leaving `--chaos-latency` on the old\n    // limit with no compile error.\n    chaos = {};\n    const flagFields: Array<{ flag: string; field: ChaosField; raw: string | undefined }> = [\n      { flag: \"chaos-drop\", field: \"dropRate\", raw: dropStr },\n      { flag: \"chaos-malformed\", field: \"malformedRate\", raw: malformedStr },\n      { flag: \"chaos-disconnect\", field: \"disconnectRate\", raw: disconnectStr },\n      { flag: \"chaos-ratelimit\", field: \"rateLimitRate\", raw: ratelimitStr },\n      { flag: \"chaos-latency\", field: \"latencyMs\", raw: latencyStr },\n    ];\n    for (const { flag, field, raw } of flagFields) {\n      if (raw === undefined) continue;\n      const val = parseChaosField(field, raw);\n      if (val === undefined) {\n        console.error(`Invalid ${flag}: ${raw} (must be 0-${CHAOS_FIELDS[field].max})`);\n        process.exit(1);\n      }\n      chaos[field] = val;\n    }\n  }\n}\n\n// Parse record/proxy config from CLI flags\nlet record: RecordConfig | undefined;\nif (values.record || values[\"proxy-only\"]) {\n  const providers: RecordConfig[\"providers\"] = {};\n  if (values[\"provider-openai\"]) providers.openai = values[\"provider-openai\"];\n  if (values[\"provider-anthropic\"]) providers.anthropic = values[\"provider-anthropic\"];\n  if (values[\"provider-gemini\"]) providers.gemini = values[\"provider-gemini\"];\n  if (values[\"provider-vertexai\"]) providers.vertexai = values[\"provider-vertexai\"];\n  if (values[\"provider-bedrock\"]) providers.bedrock = values[\"provider-bedrock\"];\n  if (values[\"provider-azure\"]) providers.azure = values[\"provider-azure\"];\n  if (values[\"provider-ollama\"]) providers.ollama = values[\"provider-ollama\"];\n  if (values[\"provider-cohere\"]) providers.cohere = values[\"provider-cohere\"];\n  if (values[\"provider-openrouter\"]) providers.openrouter = values[\"provider-openrouter\"];\n  if (values[\"provider-byteplus\"]) providers.byteplus = values[\"provider-byteplus\"];\n\n  if (Object.keys(providers).length === 0) {\n    console.error(\n      `Error: --${values[\"proxy-only\"] ? \"proxy-only\" : \"record\"} requires at least one --provider-* flag`,\n    );\n    process.exit(1);\n  }\n\n  // For --record, the first --fixtures value is the base path for the recording\n  // destination and must be a local filesystem path — writing to a URL is not supported.\n  // For --proxy-only, unmatched requests are forwarded without saving, so no writable\n  // destination is required; URL-only --fixtures is valid in that mode.\n  const recordBase = fixtureValues[0];\n  const recordBaseIsUrl = /^https?:\\/\\//i.test(recordBase);\n  if (values.record && recordBaseIsUrl) {\n    console.error(\n      `Error: --record requires a local --fixtures path for the recording destination; got URL ${recordBase}`,\n    );\n    process.exit(1);\n  }\n  record = {\n    providers,\n    // aimock's own upstream keys, sourced from AIMOCK_PROVIDER_*_KEY env vars\n    // (not CLI flags — secrets must not appear in `ps`). Injected on a\n    // fixture-miss passthrough when the caller sent no/dummy credential.\n    providerKeys: readProviderKeysFromEnv(),\n    // In proxy-only mode with only URL sources, fixturePath is never consumed\n    // (recorder.ts skips disk writes when proxyOnly is set). Leave it undefined\n    // rather than resolving a URL string as a filesystem path.\n    fixturePath: recordBaseIsUrl ? undefined : resolve(recordBase, \"recorded\"),\n    proxyOnly: values[\"proxy-only\"],\n    recordFullModelVersion: values[\"record-full-model-version\"],\n    upstreamTimeoutMs,\n    bodyTimeoutMs,\n    maxProxyBufferBytes,\n    maxProxyBufferFrames,\n  };\n} else {\n  // These flags configure upstream proxying — without --record or\n  // --proxy-only they would be parsed and then silently dropped. Routed\n  // through the constructed logger so --log-level is respected.\n  const droppedProviderFlags = (\n    [\n      \"provider-openai\",\n      \"provider-anthropic\",\n      \"provider-gemini\",\n      \"provider-vertexai\",\n      \"provider-bedrock\",\n      \"provider-azure\",\n      \"provider-ollama\",\n      \"provider-cohere\",\n      \"provider-openrouter\",\n      \"provider-byteplus\",\n    ] as const\n  ).filter((flag) => values[flag] !== undefined);\n  if (droppedProviderFlags.length > 0) {\n    logger.warn(\n      `--${droppedProviderFlags.join(\"/--\")} only apply to --record/--proxy-only upstream proxying — ignored without one of those flags.`,\n    );\n  }\n  if (\n    upstreamTimeoutMs !== undefined ||\n    bodyTimeoutMs !== undefined ||\n    maxProxyBufferBytes !== undefined ||\n    maxProxyBufferFrames !== undefined\n  ) {\n    logger.warn(\n      \"--upstream-timeout-ms/--body-timeout-ms/--max-proxy-buffer-bytes/--max-proxy-buffer-frames only apply to --record/--proxy-only upstream proxying — ignored without one of those flags.\",\n    );\n  }\n}\n\n// Parse AG-UI record/proxy config from CLI flags\nlet aguiMount: { path: string; handler: AGUIMock } | undefined;\nif (values[\"agui-record\"] || values[\"agui-proxy-only\"]) {\n  if (!values[\"agui-upstream\"]) {\n    console.error(\"Error: --agui-record/--agui-proxy-only requires --agui-upstream\");\n    process.exit(1);\n  }\n  // --agui-record writes recorded AG-UI fixtures to disk, so a URL source is unsupported.\n  // --agui-proxy-only forwards without saving, so URL-only --fixtures is valid.\n  const aguiBase = fixtureValues[0];\n  const aguiBaseIsUrl = /^https?:\\/\\//i.test(aguiBase);\n  if (values[\"agui-record\"] && aguiBaseIsUrl) {\n    console.error(\n      `Error: --agui-record requires a local --fixtures path for the recording destination; got URL ${aguiBase}`,\n    );\n    process.exit(1);\n  }\n  const agui = new AGUIMock();\n  agui.enableRecording({\n    upstream: values[\"agui-upstream\"],\n    // In proxy-only mode with a URL-only --fixtures, the AG-UI recorder never\n    // writes to disk (see agui-recorder.ts). Leave fixturePath undefined rather\n    // than resolving a URL as a filesystem path.\n    fixturePath: aguiBaseIsUrl ? undefined : resolve(aguiBase, \"agui-recorded\"),\n    proxyOnly: values[\"agui-proxy-only\"],\n  });\n  aguiMount = { path: \"/agui\", handler: agui };\n}\n\n// Parse MCP record/proxy mounts (MR1, AM6): --mcp-record / --mcp-proxy-only <mount>=<url>\nconst mcpRecordMounts: { path: string; handler: MCPMock }[] = [];\n{\n  const recordValues = values[\"mcp-record\"] ?? [];\n  const proxyValues = values[\"mcp-proxy-only\"] ?? [];\n  if (recordValues.length > 0) {\n    // C11: check the flag itself; fixtureValues defaults to ./fixtures.\n    if (!(values.fixtures && values.fixtures.length > 0)) {\n      console.error(\n        \"Error: --mcp-record requires --fixtures <local path> for the recording destination\",\n      );\n      process.exit(1);\n    }\n    if (/^https?:\\/\\//i.test(values.fixtures[0])) {\n      console.error(\n        `Error: --mcp-record requires a local --fixtures path for the recording destination; got URL ${values.fixtures[0]}`,\n      );\n      process.exit(1);\n    }\n  }\n  const flags = [\n    ...recordValues.map((value) => ({ flag: \"--mcp-record\", value, proxyOnly: false })),\n    ...proxyValues.map((value) => ({ flag: \"--mcp-proxy-only\", value, proxyOnly: true })),\n  ];\n  if (flags.length > 0) {\n    let env: ReturnType<typeof mcpRecordEnv>;\n    try {\n      env = mcpRecordEnv(process.env);\n    } catch (err) {\n      console.error(`Error: ${err instanceof Error ? err.message : String(err)}`);\n      process.exit(1);\n    }\n    for (const { flag, value, proxyOnly } of flags) {\n      try {\n        const { mount, upstream } = parseMcpRecordFlag(value, flag);\n        if (aguiMount && mount === aguiMount.path) {\n          throw new Error(`${flag} mount ${mount} is held by a mount that is not an MCP mock`);\n        }\n        if (mcpRecordMounts.some((m) => m.path === mount)) {\n          throw new Error(`${flag} mount ${mount} is given more than once`);\n        }\n        const mcp = new MCPMock().enableRecording({\n          upstream,\n          fixturePath: proxyOnly ? undefined : resolve(values.fixtures![0], \"recorded\"),\n          proxyOnly,\n          secretValues: env.secretValues,\n          upstreamAuth: env.upstreamAuth,\n          strict: values.strict,\n        });\n        mcpRecordMounts.push({ path: mount, handler: mcp });\n      } catch (err) {\n        console.error(`Error: ${err instanceof Error ? err.message : String(err)}`);\n        process.exit(1);\n      }\n    }\n  }\n}\n\ninterface ResolvedFixtureSource {\n  source: string;\n  path: string;\n  isDir: boolean;\n}\n\nasync function resolveAllFixtureSources(): Promise<ResolvedFixtureSource[]> {\n  const resolved: ResolvedFixtureSource[] = [];\n  for (const value of fixtureValues) {\n    let local;\n    try {\n      local = await resolveFixturesValue(value, {\n        validateOnLoad,\n        logger,\n      });\n    } catch (err) {\n      const msg = err instanceof Error ? err.message : String(err);\n      console.error(`Failed to resolve --fixtures value \"${value}\": ${msg}`);\n      process.exit(1);\n    }\n    if (!local.path) {\n      // Remote fetch failed without validate-on-load and no cache — already warned; skip.\n      continue;\n    }\n    try {\n      const stat = statSync(local.path);\n      resolved.push({ source: local.source, path: local.path, isDir: stat.isDirectory() });\n    } catch (err) {\n      if ((err as NodeJS.ErrnoException).code === \"ENOENT\") {\n        console.error(`Fixtures path not found: ${local.path}`);\n      } else {\n        const msg = err instanceof Error ? err.message : String(err);\n        console.error(`Failed to load fixtures from ${local.path}: ${msg}`);\n      }\n      process.exit(1);\n    }\n  }\n  return resolved;\n}\n\n// F3: the loaders that carry `mcpFakes`. A file's entry-id source (I6) is the\n// --fixtures value as given: the path, or the URL of a remote file (whose\n// `path` is the on-disk cache).\nfunction loadSource(source: ResolvedFixtureSource): FixturesWithServices {\n  const loaded = source.isDir\n    ? loadFixturesFromDirWithServices(source.path, logger)\n    : loadFixtureFileWithServices(source.path, logger, undefined, source.source);\n  // --misbehavior: a bad fixture `misbehavior` key fails the load; without it the key is ignored.\n  if (values.misbehavior) loaded.fixtures.forEach(enableHeldFixtureMisbehavior);\n  return loaded;\n}\n\n/** Each source's `mcpFakes` blocks, in load order, for the --watch comparison. */\nfunction fakesBySource(blocks: McpFakeSource[]): Map<string, unknown[]> {\n  const bySource = new Map<string, unknown[]>();\n  for (const block of blocks) {\n    const list = bySource.get(block.source) ?? [];\n    list.push([block.blockIndex, block.raw]);\n    bySource.set(block.source, list);\n  }\n  return bySource;\n}\n\n/**\n * R9/F11: fakes are not reloaded by --watch, so a reload whose `mcpFakes`\n * differ from the boot set is rejected. Returns the first changed source.\n * A source in `unreadable` could not be read or parsed: it is not compared,\n * because its blocks are unknown, not removed.\n */\nfunction changedFakesSource(\n  boot: McpFakeSource[],\n  reload: McpFakeSource[],\n  unreadable: ReadonlySet<string>,\n): string | null {\n  const before = fakesBySource(boot);\n  const after = fakesBySource(reload);\n  for (const source of new Set([...before.keys(), ...after.keys()])) {\n    if (unreadable.has(source)) continue;\n    if (!isDeepStrictEqual(before.get(source), after.get(source))) return source;\n  }\n  return null;\n}\n\n/**\n * L3: a load error on stderr, whatever the log level: every error of a\n * `McpFakesAddError`, one per line, then its L8 warnings.\n */\nfunction printLoadError(err: FixtureLoadError | MisbehaviorConfigError): void {\n  const errors = err instanceof McpFakesAddError ? err.errors : [err];\n  for (const e of errors) console.error(e.message);\n  if (err instanceof McpFakesAddError) {\n    for (const w of err.warnings) console.warn(w.message);\n  }\n}\n\n/** A --watch reload that `loadFn` rejected and already printed (L3, L7). */\nclass ReloadRejected extends Error {}\n\n/**\n * The --watch logger: as `Logger`, except that the watcher's own report of a\n * {@link ReloadRejected} reload is dropped, so the error is printed once.\n */\nclass WatchLogger extends Logger {\n  override error(...args: unknown[]): void {\n    if (args.some((a) => a instanceof ReloadRejected)) return;\n    super.error(...args);\n  }\n}\n\n/**\n * MR13: --watch with record mounts. (a) An event for a recorder temp file, or\n * for a file whose bytes are exactly what a recorder last wrote there, does\n * not reload; everything else (a delete, a directory, a user edit) reloads as\n * on main. (b) Each recorder write moves the --watch baseline of that file,\n * so the next reload does not reject the recording as a changed `mcpFakes`.\n * Without record mounts (or for a file source), --watch is exactly as on main.\n */\nfunction recorderWatch(\n  primary: ResolvedFixtureSource,\n  moveBaseline: (moved: (boot: McpFakeSource[]) => McpFakeSource[]) => void,\n): { ignore?: (absPath: string) => boolean } {\n  const events = mcpRecordMounts.map((m) => m.handler.recorderEvents()).filter((ev) => ev !== null);\n  if (events.length === 0 || !primary.isDir) return {};\n  for (const ev of events) {\n    ev.onWrite((file, written) => {\n      const source = relative(primary.path, file).split(sep).join(\"/\");\n      const blocks: McpFakeSource[] = Array.isArray(written)\n        ? written.map((raw, blockIndex) => ({ source, blockIndex, raw }))\n        : [{ source, blockIndex: null, raw: written }];\n      moveBaseline((boot) => {\n        // Replace this source's blocks in place; a new source goes last.\n        const others = boot.filter((b) => b.source !== source);\n        const at = boot.findIndex((b) => b.source === source);\n        const pos = at === -1 ? others.length : at;\n        return [...others.slice(0, pos), ...blocks, ...others.slice(pos)];\n      });\n    });\n  }\n  return {\n    ignore: (absPath: string): boolean => {\n      // Recorder temp files only (persistServiceFakes writes `<file>.tmp.<uuid>`, then renames it).\n      if (/\\.tmp\\.[0-9a-f-]+$/i.test(absPath)) return true;\n      let st: Stats;\n      try {\n        st = statSync(absPath);\n      } catch {\n        return false; // gone: a user deleted a fixture — this MUST reload (r2 N2)\n      }\n      if (st.isDirectory()) return false; // directory events behave as on main\n      let data: Buffer;\n      try {\n        data = readFileSync(absPath);\n      } catch {\n        return false;\n      }\n      const hash = createHash(\"sha256\").update(data).digest(\"hex\");\n      return events.some((ev) => ev.lastWrittenHash(absPath) === hash);\n    },\n  };\n}\n\nasync function main() {\n  const sources = await resolveAllFixtureSources();\n\n  const fixtures: Fixture[] = [];\n  const mcpFakes: McpFakeSource[] = [];\n  // The primary source's blocks: what a --watch reload of it is compared with.\n  let primaryFakes: McpFakeSource[] = [];\n  for (const src of sources) {\n    const loaded = loadSource(src);\n    fixtures.push(...loaded.fixtures);\n    mcpFakes.push(...loaded.mcpFakes);\n    if (src === sources[0]) primaryFakes = loaded.mcpFakes;\n  }\n\n  if (fixtures.length === 0 && mcpFakes.length > 0) {\n    // F5/L9: fake blocks count as loaded; only LLM requests have nothing to match.\n    console.warn(build(msg`Warning: No LLM fixtures loaded; LLM requests will return 404`));\n  } else if (fixtures.length === 0) {\n    if (validateOnLoad || values.strict) {\n      console.error(\"Error: No fixtures loaded and validation/strict mode is enabled — aborting.\");\n      process.exit(1);\n    }\n    console.warn(\"Warning: No fixtures loaded. The server will return 404 for all requests.\");\n  }\n\n  const sourceLabel = sources.map((s) => s.source).join(\", \") || \"<none>\";\n  logger.info(`Loaded ${fixtures.length} fixture(s) from ${sourceLabel}`);\n\n  // Validate fixtures if requested\n  if (validateOnLoad) {\n    if (responsesTools === \"extended\") fixtures.forEach(markFixtureResponsesToolsExtended);\n    const results = validateFixtures(fixtures);\n    const errors = results.filter((r) => r.severity === \"error\");\n    const warnings = results.filter((r) => r.severity === \"warning\");\n\n    for (const w of warnings) {\n      logger.warn(`Fixture ${w.fixtureIndex}: ${w.message}`);\n    }\n    // L8 (shadowed mcpFakes entries) is not printed here: the hand-off in\n    // createServer prints it on every start.\n    for (const e of errors) {\n      logger.error(`Fixture ${e.fixtureIndex}: ${e.message}`);\n    }\n\n    if (errors.length > 0) {\n      console.error(`Validation failed: ${errors.length} error(s), ${warnings.length} warning(s)`);\n      process.exit(1);\n    }\n  }\n\n  const allMounts: { path: string; handler: Mountable }[] = [\n    ...(aguiMount ? [aguiMount] : []),\n    ...mcpRecordMounts,\n  ];\n  const mounts = allMounts.length > 0 ? allMounts : undefined;\n\n  const instance = await createServer(\n    fixtures,\n    {\n      port,\n      host,\n      latency,\n      chunkSize,\n      replaySpeed,\n      logLevel,\n      chaos,\n      metrics: values.metrics,\n      record,\n      strict: values.strict,\n      strictToolArguments: values[\"strict-tool-arguments\"],\n      enableMisbehavior: values.misbehavior,\n      ...(responsesTools !== undefined ? { responsesTools } : {}),\n      journalMaxEntries: journalMax,\n      fixtureCountsMaxTestIds: fixtureCountsMax,\n      auth: resolveInboundAuth(selectInboundAuthSource(undefined)).publicConfig,\n    },\n    mounts,\n    { search: [], rerank: [], moderation: [], mcpFakes },\n  );\n\n  // Only the first local source is watched — remote URL sources are fetched once\n  // at boot and are not monitored. Declared before the readiness announcement so\n  // shutdown can close it whenever the signal arrives.\n  let watcher: { close: () => void } | null = null;\n\n  function shutdown() {\n    logger.info(\"Shutting down...\");\n    if (watcher) watcher.close();\n    instance.server.close(() => {\n      process.exit(0);\n    });\n  }\n\n  // Register BEFORE announcing readiness. Writes to a pipe are synchronous on Linux\n  // (and to a file on every POSIX platform), so a supervisor that reacts to the line\n  // below can deliver SIGTERM while this process is still mid-statement. Announcing\n  // first left a window in which SIGTERM hit Node's default disposition, which\n  // re-raises: the process died with a null exit code instead of shutting down.\n  process.on(\"SIGINT\", shutdown);\n  process.on(\"SIGTERM\", shutdown);\n\n  logger.info(`aimock server listening on ${instance.url}`);\n\n  // Start file watcher if requested.\n  if (watchMode) {\n    const primary = sources[0];\n    if (!primary) {\n      logger.warn(\"--watch requested but no resolvable fixture sources; skipping watcher\");\n    } else {\n      // A rejected reload is printed here, whatever the log level, then\n      // thrown as ReloadRejected: watchFixtures keeps the previous fixtures,\n      // and its WatchLogger does not print the error a second time.\n      const reject = (err: FixtureLoadError | MisbehaviorConfigError): never => {\n        printLoadError(err);\n        throw new ReloadRejected(build(msg`--watch reload rejected`));\n      };\n      const loadFn = (): Fixture[] => {\n        let loaded: FixturesWithServices;\n        try {\n          loaded = loadSource(primary);\n        } catch (err) {\n          // L3: a bad block in the reloaded file.\n          if (err instanceof FixtureLoadError || err instanceof MisbehaviorConfigError) {\n            return reject(err);\n          }\n          throw err;\n        }\n        const changed = changedFakesSource(\n          primaryFakes,\n          loaded.mcpFakes,\n          new Set(loaded.unreadable),\n        );\n        if (changed !== null) {\n          // L7.\n          return reject(\n            new FixtureLoadError({\n              rule: \"mcp-fakes/watch-reload-changed\",\n              file: changed,\n              detail: msg`mcpFakes changed on --watch reload; MCP fakes are not reloaded, so the whole reload is rejected and the previous fixtures stay loaded. Restart aimock to load the new fakes`,\n            }),\n          );\n        }\n        if (responsesTools === \"extended\") {\n          loaded.fixtures.forEach(markFixtureResponsesToolsExtended);\n        }\n        return loaded.fixtures;\n      };\n      watcher = watchFixtures(primary.path, fixtures, loadFn, {\n        logger: new WatchLogger(logLevel),\n        validate: validateOnLoad,\n        validateFn: validateFixtures,\n        ...recorderWatch(primary, (moved) => (primaryFakes = moved(primaryFakes))),\n      });\n      logger.info(`Watching ${primary.path} for changes`);\n    }\n  }\n}\n\nmain().catch((err) => {\n  if (err instanceof FixtureLoadError || err instanceof MisbehaviorConfigError) {\n    printLoadError(err);\n  } else {\n    console.error(err);\n  }\n  process.exit(1);\n});\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAgCA,MAAM,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;sCAkDyB,aAAa,UAAU,IAAI;;;EAG/D,MAAM;AAER,MAAM,EAAE,WAAW,UAAU;CAC3B,SAAS;EACP,MAAM;GAAE,MAAM;GAAU,OAAO;GAAK,SAAS;GAAQ;EACrD,MAAM;GAAE,MAAM;GAAU,OAAO;GAAK,SAAS;GAAa;EAC1D,UAAU;GAAE,MAAM;GAAU,OAAO;GAAK,UAAU;GAAM;EACxD,SAAS;GAAE,MAAM;GAAU,OAAO;GAAK,SAAS;GAAK;EACrD,cAAc;GAAE,MAAM;GAAU,OAAO;GAAK,SAAS;GAAM;EAC3D,OAAO;GAAE,MAAM;GAAW,OAAO;GAAK,SAAS;GAAO;EACtD,aAAa;GAAE,MAAM;GAAU,SAAS;GAAQ;EAChD,oBAAoB;GAAE,MAAM;GAAW,SAAS;GAAO;EACvD,aAAa;GAAE,MAAM;GAAW,SAAS;GAAO;EAChD,SAAS;GAAE,MAAM;GAAW,SAAS;GAAO;EAC5C,QAAQ;GAAE,MAAM;GAAW,SAAS;GAAO;EAC3C,6BAA6B;GAAE,MAAM;GAAW,SAAS;GAAO;EAChE,cAAc;GAAE,MAAM;GAAW,SAAS;GAAO;EACjD,QAAQ;GAAE,MAAM;GAAW,SAAS;GAAO;EAC3C,yBAAyB;GAAE,MAAM;GAAW,SAAS;GAAO;EAC5D,mBAAmB,EAAE,MAAM,UAAU;EACrC,mBAAmB,EAAE,MAAM,UAAU;EACrC,sBAAsB,EAAE,MAAM,UAAU;EACxC,mBAAmB,EAAE,MAAM,UAAU;EACrC,qBAAqB,EAAE,MAAM,UAAU;EACvC,oBAAoB,EAAE,MAAM,UAAU;EACtC,kBAAkB,EAAE,MAAM,UAAU;EACpC,mBAAmB,EAAE,MAAM,UAAU;EACrC,mBAAmB,EAAE,MAAM,UAAU;EACrC,uBAAuB,EAAE,MAAM,UAAU;EACzC,qBAAqB,EAAE,MAAM,UAAU;EACvC,uBAAuB,EAAE,MAAM,UAAU;EACzC,mBAAmB,EAAE,MAAM,UAAU;EACrC,0BAA0B,EAAE,MAAM,UAAU;EAC5C,2BAA2B,EAAE,MAAM,UAAU;EAC7C,eAAe;GAAE,MAAM;GAAW,SAAS;GAAO;EAClD,iBAAiB,EAAE,MAAM,UAAU;EACnC,mBAAmB;GAAE,MAAM;GAAW,SAAS;GAAO;EACtD,cAAc;GAAE,MAAM;GAAU,UAAU;GAAM;EAChD,kBAAkB;GAAE,MAAM;GAAU,UAAU;GAAM;EACpD,gBAAgB;GAAE,MAAM;GAAU,SAAS;GAAO;EAClD,cAAc,EAAE,MAAM,UAAU;EAChC,mBAAmB,EAAE,MAAM,UAAU;EACrC,oBAAoB,EAAE,MAAM,UAAU;EACtC,mBAAmB,EAAE,MAAM,UAAU;EACrC,iBAAiB,EAAE,MAAM,UAAU;EACnC,eAAe;GAAE,MAAM;GAAU,SAAS;GAAQ;EAClD,sBAAsB;GAAE,MAAM;GAAU,SAAS;GAAO;EACxD,MAAM;GAAE,MAAM;GAAW,SAAS;GAAO;EAC1C;CACD,QAAQ;CACT,CAAC;AAEF,IAAI,OAAO,MAAM;AACf,SAAQ,IAAI,KAAK;AACjB,SAAQ,KAAK,EAAE;;AAGjB,MAAM,OAAO,OAAO,OAAO,KAAK;AAChC,MAAM,OAAO,OAAO;AACpB,MAAM,UAAU,OAAO,OAAO,QAAQ;AACtC,MAAM,YAAY,OAAO,OAAO,cAAc;AAC9C,MAAM,gBACJ,OAAO,YAAY,OAAO,SAAS,SAAS,IAAI,OAAO,WAAW,CAAC,aAAa;AAClF,MAAM,YAAY,OAAO;AACzB,MAAM,iBAAiB,OAAO;AAC9B,MAAM,cAAc,OAAO;AAE3B,IAAI,CAAC;CAAC;CAAU;CAAQ;CAAQ;CAAQ,CAAC,SAAS,YAAY,EAAE;AAC9D,SAAQ,MAAM,sBAAsB,YAAY,yCAAyC;AACzF,SAAQ,KAAK,EAAE;;AAEjB,MAAM,WAAW;AAEjB,IAAI,OAAO,MAAM,KAAK,IAAI,OAAO,KAAK,OAAO,OAAO;AAClD,SAAQ,MAAM,iBAAiB,OAAO,OAAO;AAC7C,SAAQ,KAAK,EAAE;;AAGjB,IAAI,OAAO,MAAM,QAAQ,IAAI,UAAU,GAAG;AACxC,SAAQ,MAAM,oBAAoB,OAAO,UAAU;AACnD,SAAQ,KAAK,EAAE;;AAGjB,IAAI,OAAO,MAAM,UAAU,IAAI,YAAY,GAAG;AAC5C,SAAQ,MAAM,uBAAuB,OAAO,gBAAgB;AAC5D,SAAQ,KAAK,EAAE;;AAGjB,MAAM,cAAc,OAAO,OAAO,gBAAgB;AAClD,IAAI,OAAO,MAAM,YAAY,IAAI,eAAe,GAAG;AACjD,SAAQ,MAAM,2CAA2C;AACzD,SAAQ,KAAK,EAAE;;AAGjB,MAAM,qBAAqB,OAAO;AAClC,IACE,uBAAuB,UACvB,uBAAuB,YACvB,uBAAuB,YACvB;AACA,SAAQ,MACN,8BAA8B,mBAAmB,oCAClD;AACD,SAAQ,KAAK,EAAE;;AAEjB,MAAM,iBAAiD;AAEvD,MAAM,aAAa,OAAO,OAAO,eAAe;AAChD,IAAI,OAAO,MAAM,WAAW,IAAI,CAAC,OAAO,UAAU,WAAW,IAAI,aAAa,GAAG;AAC/E,SAAQ,MACN,wBAAwB,OAAO,eAAe,kDAC/C;AACD,SAAQ,KAAK,EAAE;;AAGjB,MAAM,sBAAsB,OAAO;AACnC,MAAM,mBAAmB,OAAO,oBAAoB;AACpD,IAAI,OAAO,MAAM,iBAAiB,IAAI,CAAC,OAAO,UAAU,iBAAiB,IAAI,mBAAmB,GAAG;AACjG,SAAQ,MACN,+BAA+B,oBAAoB,kDACpD;AACD,SAAQ,KAAK,EAAE;;AAGjB,MAAM,uBAAuB,OAAO;AACpC,IAAI;AACJ,IAAI,yBAAyB,QAAW;AACtC,qBAAoB,OAAO,qBAAqB;AAChD,KAAI,CAAC,OAAO,SAAS,kBAAkB,IAAI,qBAAqB,GAAG;AACjE,UAAQ,MACN,gCAAgC,qBAAqB,qCACtD;AACD,UAAQ,KAAK,EAAE;;;AAInB,MAAM,mBAAmB,OAAO;AAChC,IAAI;AACJ,IAAI,qBAAqB,QAAW;AAClC,iBAAgB,OAAO,iBAAiB;AACxC,KAAI,CAAC,OAAO,SAAS,cAAc,IAAI,iBAAiB,GAAG;AACzD,UAAQ,MACN,4BAA4B,iBAAiB,qCAC9C;AACD,UAAQ,KAAK,EAAE;;;AAInB,MAAM,yBAAyB,OAAO;AACtC,IAAI;AACJ,IAAI,2BAA2B,QAAW;AACxC,uBAAsB,OAAO,uBAAuB;AACpD,KAAI,CAAC,OAAO,SAAS,oBAAoB,IAAI,uBAAuB,GAAG;AACrE,UAAQ,MACN,mCAAmC,uBAAuB,qCAC3D;AACD,UAAQ,KAAK,EAAE;;;AAInB,MAAM,0BAA0B,OAAO;AACvC,IAAI;AACJ,IAAI,4BAA4B,QAAW;AACzC,wBAAuB,OAAO,wBAAwB;AACtD,KAAI,CAAC,OAAO,SAAS,qBAAqB,IAAI,wBAAwB,GAAG;AACvE,UAAQ,MACN,oCAAoC,wBAAwB,qCAC7D;AACD,UAAQ,KAAK,EAAE;;;AAInB,MAAM,SAAS,IAAI,OAAO,SAAS;AAGnC,IAAI;AACJ;CACE,MAAM,UAAU,OAAO;CACvB,MAAM,eAAe,OAAO;CAC5B,MAAM,gBAAgB,OAAO;CAC7B,MAAM,eAAe,OAAO;CAC5B,MAAM,aAAa,OAAO;AAE1B,KACE,YAAY,UACZ,iBAAiB,UACjB,kBAAkB,UAClB,iBAAiB,UACjB,eAAe,QACf;AAOA,UAAQ,EAAE;EACV,MAAM,aAAkF;GACtF;IAAE,MAAM;IAAc,OAAO;IAAY,KAAK;IAAS;GACvD;IAAE,MAAM;IAAmB,OAAO;IAAiB,KAAK;IAAc;GACtE;IAAE,MAAM;IAAoB,OAAO;IAAkB,KAAK;IAAe;GACzE;IAAE,MAAM;IAAmB,OAAO;IAAiB,KAAK;IAAc;GACtE;IAAE,MAAM;IAAiB,OAAO;IAAa,KAAK;IAAY;GAC/D;AACD,OAAK,MAAM,EAAE,MAAM,OAAO,SAAS,YAAY;AAC7C,OAAI,QAAQ,OAAW;GACvB,MAAM,MAAM,gBAAgB,OAAO,IAAI;AACvC,OAAI,QAAQ,QAAW;AACrB,YAAQ,MAAM,WAAW,KAAK,IAAI,IAAI,cAAc,aAAa,OAAO,IAAI,GAAG;AAC/E,YAAQ,KAAK,EAAE;;AAEjB,SAAM,SAAS;;;;AAMrB,IAAI;AACJ,IAAI,OAAO,UAAU,OAAO,eAAe;CACzC,MAAM,YAAuC,EAAE;AAC/C,KAAI,OAAO,mBAAoB,WAAU,SAAS,OAAO;AACzD,KAAI,OAAO,sBAAuB,WAAU,YAAY,OAAO;AAC/D,KAAI,OAAO,mBAAoB,WAAU,SAAS,OAAO;AACzD,KAAI,OAAO,qBAAsB,WAAU,WAAW,OAAO;AAC7D,KAAI,OAAO,oBAAqB,WAAU,UAAU,OAAO;AAC3D,KAAI,OAAO,kBAAmB,WAAU,QAAQ,OAAO;AACvD,KAAI,OAAO,mBAAoB,WAAU,SAAS,OAAO;AACzD,KAAI,OAAO,mBAAoB,WAAU,SAAS,OAAO;AACzD,KAAI,OAAO,uBAAwB,WAAU,aAAa,OAAO;AACjE,KAAI,OAAO,qBAAsB,WAAU,WAAW,OAAO;AAE7D,KAAI,OAAO,KAAK,UAAU,CAAC,WAAW,GAAG;AACvC,UAAQ,MACN,YAAY,OAAO,gBAAgB,eAAe,SAAS,0CAC5D;AACD,UAAQ,KAAK,EAAE;;CAOjB,MAAM,aAAa,cAAc;CACjC,MAAM,kBAAkB,gBAAgB,KAAK,WAAW;AACxD,KAAI,OAAO,UAAU,iBAAiB;AACpC,UAAQ,MACN,2FAA2F,aAC5F;AACD,UAAQ,KAAK,EAAE;;AAEjB,UAAS;EACP;EAIA,cAAc,yBAAyB;EAIvC,aAAa,kBAAkB,SAAY,QAAQ,YAAY,WAAW;EAC1E,WAAW,OAAO;EAClB,wBAAwB,OAAO;EAC/B;EACA;EACA;EACA;EACD;OACI;CAIL,MAAM,uBACJ;EACE;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CACD,QAAQ,SAAS,OAAO,UAAU,OAAU;AAC9C,KAAI,qBAAqB,SAAS,EAChC,QAAO,KACL,KAAK,qBAAqB,KAAK,MAAM,CAAC,8FACvC;AAEH,KACE,sBAAsB,UACtB,kBAAkB,UAClB,wBAAwB,UACxB,yBAAyB,OAEzB,QAAO,KACL,yLACD;;AAKL,IAAI;AACJ,IAAI,OAAO,kBAAkB,OAAO,oBAAoB;AACtD,KAAI,CAAC,OAAO,kBAAkB;AAC5B,UAAQ,MAAM,kEAAkE;AAChF,UAAQ,KAAK,EAAE;;CAIjB,MAAM,WAAW,cAAc;CAC/B,MAAM,gBAAgB,gBAAgB,KAAK,SAAS;AACpD,KAAI,OAAO,kBAAkB,eAAe;AAC1C,UAAQ,MACN,gGAAgG,WACjG;AACD,UAAQ,KAAK,EAAE;;CAEjB,MAAM,OAAO,IAAI,UAAU;AAC3B,MAAK,gBAAgB;EACnB,UAAU,OAAO;EAIjB,aAAa,gBAAgB,SAAY,QAAQ,UAAU,gBAAgB;EAC3E,WAAW,OAAO;EACnB,CAAC;AACF,aAAY;EAAE,MAAM;EAAS,SAAS;EAAM;;AAI9C,MAAM,kBAAwD,EAAE;AAChE;CACE,MAAM,eAAe,OAAO,iBAAiB,EAAE;CAC/C,MAAM,cAAc,OAAO,qBAAqB,EAAE;AAClD,KAAI,aAAa,SAAS,GAAG;AAE3B,MAAI,EAAE,OAAO,YAAY,OAAO,SAAS,SAAS,IAAI;AACpD,WAAQ,MACN,qFACD;AACD,WAAQ,KAAK,EAAE;;AAEjB,MAAI,gBAAgB,KAAK,OAAO,SAAS,GAAG,EAAE;AAC5C,WAAQ,MACN,+FAA+F,OAAO,SAAS,KAChH;AACD,WAAQ,KAAK,EAAE;;;CAGnB,MAAM,QAAQ,CACZ,GAAG,aAAa,KAAK,WAAW;EAAE,MAAM;EAAgB;EAAO,WAAW;EAAO,EAAE,EACnF,GAAG,YAAY,KAAK,WAAW;EAAE,MAAM;EAAoB;EAAO,WAAW;EAAM,EAAE,CACtF;AACD,KAAI,MAAM,SAAS,GAAG;EACpB,IAAI;AACJ,MAAI;AACF,SAAM,aAAa,QAAQ,IAAI;WACxB,KAAK;AACZ,WAAQ,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,GAAG;AAC3E,WAAQ,KAAK,EAAE;;AAEjB,OAAK,MAAM,EAAE,MAAM,OAAO,eAAe,MACvC,KAAI;GACF,MAAM,EAAE,OAAO,aAAa,mBAAmB,OAAO,KAAK;AAC3D,OAAI,aAAa,UAAU,UAAU,KACnC,OAAM,IAAI,MAAM,GAAG,KAAK,SAAS,MAAM,6CAA6C;AAEtF,OAAI,gBAAgB,MAAM,MAAM,EAAE,SAAS,MAAM,CAC/C,OAAM,IAAI,MAAM,GAAG,KAAK,SAAS,MAAM,0BAA0B;GAEnE,MAAM,MAAM,IAAI,SAAS,CAAC,gBAAgB;IACxC;IACA,aAAa,YAAY,SAAY,QAAQ,OAAO,SAAU,IAAI,WAAW;IAC7E;IACA,cAAc,IAAI;IAClB,cAAc,IAAI;IAClB,QAAQ,OAAO;IAChB,CAAC;AACF,mBAAgB,KAAK;IAAE,MAAM;IAAO,SAAS;IAAK,CAAC;WAC5C,KAAK;AACZ,WAAQ,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,GAAG;AAC3E,WAAQ,KAAK,EAAE;;;;AAYvB,eAAe,2BAA6D;CAC1E,MAAM,WAAoC,EAAE;AAC5C,MAAK,MAAM,SAAS,eAAe;EACjC,IAAI;AACJ,MAAI;AACF,WAAQ,MAAM,qBAAqB,OAAO;IACxC;IACA;IACD,CAAC;WACK,KAAK;GACZ,MAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC5D,WAAQ,MAAM,uCAAuC,MAAM,KAAK,MAAM;AACtE,WAAQ,KAAK,EAAE;;AAEjB,MAAI,CAAC,MAAM,KAET;AAEF,MAAI;GACF,MAAM,OAAO,SAAS,MAAM,KAAK;AACjC,YAAS,KAAK;IAAE,QAAQ,MAAM;IAAQ,MAAM,MAAM;IAAM,OAAO,KAAK,aAAa;IAAE,CAAC;WAC7E,KAAK;AACZ,OAAK,IAA8B,SAAS,SAC1C,SAAQ,MAAM,4BAA4B,MAAM,OAAO;QAClD;IACL,MAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC5D,YAAQ,MAAM,gCAAgC,MAAM,KAAK,IAAI,MAAM;;AAErE,WAAQ,KAAK,EAAE;;;AAGnB,QAAO;;AAMT,SAAS,WAAW,QAAqD;CACvE,MAAM,SAAS,OAAO,QAClB,gCAAgC,OAAO,MAAM,OAAO,GACpD,4BAA4B,OAAO,MAAM,QAAQ,QAAW,OAAO,OAAO;AAE9E,KAAI,OAAO,YAAa,QAAO,SAAS,QAAQ,6BAA6B;AAC7E,QAAO;;;AAIT,SAAS,cAAc,QAAiD;CACtE,MAAM,2BAAW,IAAI,KAAwB;AAC7C,MAAK,MAAM,SAAS,QAAQ;EAC1B,MAAM,OAAO,SAAS,IAAI,MAAM,OAAO,IAAI,EAAE;AAC7C,OAAK,KAAK,CAAC,MAAM,YAAY,MAAM,IAAI,CAAC;AACxC,WAAS,IAAI,MAAM,QAAQ,KAAK;;AAElC,QAAO;;;;;;;;AAST,SAAS,mBACP,MACA,QACA,YACe;CACf,MAAM,SAAS,cAAc,KAAK;CAClC,MAAM,QAAQ,cAAc,OAAO;AACnC,MAAK,MAAM,UAAU,IAAI,IAAI,CAAC,GAAG,OAAO,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,CAAC,EAAE;AACjE,MAAI,WAAW,IAAI,OAAO,CAAE;AAC5B,MAAI,CAAC,kBAAkB,OAAO,IAAI,OAAO,EAAE,MAAM,IAAI,OAAO,CAAC,CAAE,QAAO;;AAExE,QAAO;;;;;;AAOT,SAAS,eAAe,KAAsD;CAC5E,MAAM,SAAS,eAAe,mBAAmB,IAAI,SAAS,CAAC,IAAI;AACnE,MAAK,MAAM,KAAK,OAAQ,SAAQ,MAAM,EAAE,QAAQ;AAChD,KAAI,eAAe,iBACjB,MAAK,MAAM,KAAK,IAAI,SAAU,SAAQ,KAAK,EAAE,QAAQ;;;AAKzD,IAAM,iBAAN,cAA6B,MAAM;;;;;AAMnC,IAAM,cAAN,cAA0B,OAAO;CAC/B,AAAS,MAAM,GAAG,MAAuB;AACvC,MAAI,KAAK,MAAM,MAAM,aAAa,eAAe,CAAE;AACnD,QAAM,MAAM,GAAG,KAAK;;;;;;;;;;;AAYxB,SAAS,cACP,SACA,cAC2C;CAC3C,MAAM,SAAS,gBAAgB,KAAK,MAAM,EAAE,QAAQ,gBAAgB,CAAC,CAAC,QAAQ,OAAO,OAAO,KAAK;AACjG,KAAI,OAAO,WAAW,KAAK,CAAC,QAAQ,MAAO,QAAO,EAAE;AACpD,MAAK,MAAM,MAAM,OACf,IAAG,SAAS,MAAM,YAAY;EAC5B,MAAM,SAAS,SAAS,QAAQ,MAAM,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,IAAI;EAChE,MAAM,SAA0B,MAAM,QAAQ,QAAQ,GAClD,QAAQ,KAAK,KAAK,gBAAgB;GAAE;GAAQ;GAAY;GAAK,EAAE,GAC/D,CAAC;GAAE;GAAQ,YAAY;GAAM,KAAK;GAAS,CAAC;AAChD,gBAAc,SAAS;GAErB,MAAM,SAAS,KAAK,QAAQ,MAAM,EAAE,WAAW,OAAO;GACtD,MAAM,KAAK,KAAK,WAAW,MAAM,EAAE,WAAW,OAAO;GACrD,MAAM,MAAM,OAAO,KAAK,OAAO,SAAS;AACxC,UAAO;IAAC,GAAG,OAAO,MAAM,GAAG,IAAI;IAAE,GAAG;IAAQ,GAAG,OAAO,MAAM,IAAI;IAAC;IACjE;GACF;AAEJ,QAAO,EACL,SAAS,YAA6B;AAEpC,MAAI,sBAAsB,KAAK,QAAQ,CAAE,QAAO;EAChD,IAAI;AACJ,MAAI;AACF,QAAK,SAAS,QAAQ;UAChB;AACN,UAAO;;AAET,MAAI,GAAG,aAAa,CAAE,QAAO;EAC7B,IAAI;AACJ,MAAI;AACF,UAAO,aAAa,QAAQ;UACtB;AACN,UAAO;;EAET,MAAM,OAAO,WAAW,SAAS,CAAC,OAAO,KAAK,CAAC,OAAO,MAAM;AAC5D,SAAO,OAAO,MAAM,OAAO,GAAG,gBAAgB,QAAQ,KAAK,KAAK;IAEnE;;AAGH,eAAe,OAAO;CACpB,MAAM,UAAU,MAAM,0BAA0B;CAEhD,MAAM,WAAsB,EAAE;CAC9B,MAAM,WAA4B,EAAE;CAEpC,IAAI,eAAgC,EAAE;AACtC,MAAK,MAAM,OAAO,SAAS;EACzB,MAAM,SAAS,WAAW,IAAI;AAC9B,WAAS,KAAK,GAAG,OAAO,SAAS;AACjC,WAAS,KAAK,GAAG,OAAO,SAAS;AACjC,MAAI,QAAQ,QAAQ,GAAI,gBAAe,OAAO;;AAGhD,KAAI,SAAS,WAAW,KAAK,SAAS,SAAS,EAE7C,SAAQ,KAAK,MAAM,GAAG,gEAAgE,CAAC;UAC9E,SAAS,WAAW,GAAG;AAChC,MAAI,kBAAkB,OAAO,QAAQ;AACnC,WAAQ,MAAM,8EAA8E;AAC5F,WAAQ,KAAK,EAAE;;AAEjB,UAAQ,KAAK,4EAA4E;;CAG3F,MAAM,cAAc,QAAQ,KAAK,MAAM,EAAE,OAAO,CAAC,KAAK,KAAK,IAAI;AAC/D,QAAO,KAAK,UAAU,SAAS,OAAO,mBAAmB,cAAc;AAGvE,KAAI,gBAAgB;AAClB,MAAI,mBAAmB,WAAY,UAAS,QAAQ,kCAAkC;EACtF,MAAM,UAAU,iBAAiB,SAAS;EAC1C,MAAM,SAAS,QAAQ,QAAQ,MAAM,EAAE,aAAa,QAAQ;EAC5D,MAAM,WAAW,QAAQ,QAAQ,MAAM,EAAE,aAAa,UAAU;AAEhE,OAAK,MAAM,KAAK,SACd,QAAO,KAAK,WAAW,EAAE,aAAa,IAAI,EAAE,UAAU;AAIxD,OAAK,MAAM,KAAK,OACd,QAAO,MAAM,WAAW,EAAE,aAAa,IAAI,EAAE,UAAU;AAGzD,MAAI,OAAO,SAAS,GAAG;AACrB,WAAQ,MAAM,sBAAsB,OAAO,OAAO,aAAa,SAAS,OAAO,aAAa;AAC5F,WAAQ,KAAK,EAAE;;;CAInB,MAAM,YAAoD,CACxD,GAAI,YAAY,CAAC,UAAU,GAAG,EAAE,EAChC,GAAG,gBACJ;CACD,MAAM,SAAS,UAAU,SAAS,IAAI,YAAY;CAElD,MAAM,WAAW,MAAM,aACrB,UACA;EACE;EACA;EACA;EACA;EACA;EACA;EACA;EACA,SAAS,OAAO;EAChB;EACA,QAAQ,OAAO;EACf,qBAAqB,OAAO;EAC5B,mBAAmB,OAAO;EAC1B,GAAI,mBAAmB,SAAY,EAAE,gBAAgB,GAAG,EAAE;EAC1D,mBAAmB;EACnB,yBAAyB;EACzB,MAAM,mBAAmB,wBAAwB,OAAU,CAAC,CAAC;EAC9D,EACD,QACA;EAAE,QAAQ,EAAE;EAAE,QAAQ,EAAE;EAAE,YAAY,EAAE;EAAE;EAAU,CACrD;CAKD,IAAI,UAAwC;CAE5C,SAAS,WAAW;AAClB,SAAO,KAAK,mBAAmB;AAC/B,MAAI,QAAS,SAAQ,OAAO;AAC5B,WAAS,OAAO,YAAY;AAC1B,WAAQ,KAAK,EAAE;IACf;;AAQJ,SAAQ,GAAG,UAAU,SAAS;AAC9B,SAAQ,GAAG,WAAW,SAAS;AAE/B,QAAO,KAAK,8BAA8B,SAAS,MAAM;AAGzD,KAAI,WAAW;EACb,MAAM,UAAU,QAAQ;AACxB,MAAI,CAAC,QACH,QAAO,KAAK,wEAAwE;OAC/E;GAIL,MAAM,UAAU,QAA0D;AACxE,mBAAe,IAAI;AACnB,UAAM,IAAI,eAAe,MAAM,GAAG,0BAA0B,CAAC;;GAE/D,MAAM,eAA0B;IAC9B,IAAI;AACJ,QAAI;AACF,cAAS,WAAW,QAAQ;aACrB,KAAK;AAEZ,SAAI,eAAe,oBAAoB,eAAe,uBACpD,QAAO,OAAO,IAAI;AAEpB,WAAM;;IAER,MAAM,UAAU,mBACd,cACA,OAAO,UACP,IAAI,IAAI,OAAO,WAAW,CAC3B;AACD,QAAI,YAAY,KAEd,QAAO,OACL,IAAI,iBAAiB;KACnB,MAAM;KACN,MAAM;KACN,QAAQ,GAAG;KACZ,CAAC,CACH;AAEH,QAAI,mBAAmB,WACrB,QAAO,SAAS,QAAQ,kCAAkC;AAE5D,WAAO,OAAO;;AAEhB,aAAU,cAAc,QAAQ,MAAM,UAAU,QAAQ;IACtD,QAAQ,IAAI,YAAY,SAAS;IACjC,UAAU;IACV,YAAY;IACZ,GAAG,cAAc,UAAU,UAAW,eAAe,MAAM,aAAa,CAAE;IAC3E,CAAC;AACF,UAAO,KAAK,YAAY,QAAQ,KAAK,cAAc;;;;AAKzD,MAAM,CAAC,OAAO,QAAQ;AACpB,KAAI,eAAe,oBAAoB,eAAe,uBACpD,gBAAe,IAAI;KAEnB,SAAQ,MAAM,IAAI;AAEpB,SAAQ,KAAK,EAAE;EACf"}
+{"version":3,"file":"cli.js","names":[],"sources":["../src/cli.ts"],"sourcesContent":["#!/usr/bin/env node\nimport { isDeepStrictEqual, parseArgs } from \"node:util\";\nimport { createHash } from \"node:crypto\";\nimport { readFileSync, statSync, type Stats } from \"node:fs\";\nimport { relative, resolve, sep } from \"node:path\";\nimport { createServer } from \"./server.js\";\nimport { parsePolicyFlags } from \"./config-loader.js\";\nimport type { ResponsesToolsMode } from \"./types.js\";\nimport {\n  FixtureLoadError,\n  MisbehaviorConfigError,\n  enableHeldFixtureMisbehavior,\n  markFixtureResponsesToolsExtended,\n  validateFixtures,\n} from \"./fixture-loader.js\";\nimport {\n  loadFixtureFileWithServices,\n  loadFixturesFromDirWithServices,\n  type FixturesWithServices,\n} from \"./fixture-loader-services.js\";\nimport { McpFakesAddError } from \"./mcp-fakes.js\";\nimport { build, msg } from \"./message-text.js\";\nimport { Logger, type LogLevel } from \"./logger.js\";\nimport { watchFixtures } from \"./watcher.js\";\nimport { AGUIMock } from \"./agui-mock.js\";\nimport { MCPMock } from \"./mcp-mock.js\";\nimport { mcpRecordEnv, parseMcpRecordFlag } from \"./mcp-recorder.js\";\nimport { parseChaosField, CHAOS_FIELDS, type ChaosField } from \"./chaos.js\";\nimport { resolveFixturesValue } from \"./fixtures-remote.js\";\nimport { readProviderKeysFromEnv } from \"./provider-auth.js\";\nimport { resolveInboundAuth, selectInboundAuthSource } from \"./api-key-auth.js\";\nimport type { Fixture, ChaosConfig, RecordConfig, McpFakeSource, Mountable } from \"./types.js\";\n\nconst HELP = `\nUsage: aimock [options]\n\nOptions:\n  -p, --port <number>       Port to listen on (default: 4010)\n  -h, --host <string>       Host to bind to (default: 127.0.0.1)\n  -f, --fixtures <value>    Fixture source (repeatable). Accepts:\n                              - filesystem path to a directory or .json file (default: ./fixtures)\n                              - https:// or http:// URL to a .json fixture file\n  -l, --latency <ms>        Latency in ms between SSE chunks (default: 0)\n  -c, --chunk-size <chars>  Chunk size in characters (default: 20)\n  -w, --watch               Watch fixture path for changes and reload\n      --log-level <level>   Log verbosity: silent, warn, info, debug (default: info)\n      --validate-on-load    Validate fixture schemas at startup\n      --misbehavior         Enable model misbehavior: fixture misbehavior keys and the\n                            X-AIMock-Misbehavior header (ignored without this flag)\n      --metrics             Enable Prometheus metrics at GET /metrics\n      --record              Record mode: proxy unmatched requests and save fixtures\n      --record-full-model-version  Record exact model version without date stripping (default: false)\n      --proxy-only          Proxy mode: forward unmatched requests without saving\n      --strict              Strict mode: fail on unmatched requests (overridable per-request via X-AIMock-Strict header)\n      --strict-tool-arguments  Reject fixture tool calls with invalid JSON arguments instead of serving {} (default: false)\n      --responses-tools <mode>  OpenAI Responses tool handling: legacy (default) or extended (namespaced and\n                            custom tools visible to matching, custom tool rounds counted, namespaces emitted and recorded)\n      --policy <key=value>  Request policy (repeatable): requiredHeaders=off|enforce (default: off),\n                            authErrors=legacy|native (default: legacy),\n                            modelCatalog=legacy|native (default: legacy)\n      --journal-max <n>     Max request entries retained in memory (default: 1000, 0 = unbounded)\n      --fixture-counts-max <n>  Max unique testIds retained in fixture match-count map (default: 500, 0 = unbounded)\n      --provider-openai <url>     Upstream URL for OpenAI (used with --record)\n      --provider-anthropic <url>  Upstream URL for Anthropic\n      --provider-gemini <url>     Upstream URL for Gemini\n      --provider-vertexai <url>   Upstream URL for Vertex AI\n      --provider-bedrock <url>    Upstream URL for Bedrock\n      --provider-azure <url>      Upstream URL for Azure OpenAI\n      --provider-ollama <url>     Upstream URL for Ollama\n      --provider-cohere <url>     Upstream URL for Cohere\n      --provider-openrouter <url> Upstream URL for OpenRouter (video record proxy)\n      --provider-byteplus <url>   Upstream ORIGIN for BytePlus Ark (e.g. https://ark.ap-southeast.bytepluses.com — origin only, no /api/v3)\n      --upstream-timeout-ms <ms>  Idle timeout (ms) on upstream socket before response (default: 30000)\n      --body-timeout-ms <ms>      Idle timeout (ms) on upstream response body between chunks (default: 30000)\n      --max-proxy-buffer-bytes <n> Cap (bytes) on in-memory proxy-path buffer; full body still relayed (default: 67108864)\n      --max-proxy-buffer-frames <n> Cap (frames) on in-memory proxy-path per-frame state; full body still relayed (default: 5000000)\n      --agui-record              Enable AG-UI recording (proxy unmatched AG-UI requests)\n      --agui-upstream <url>      Upstream AG-UI agent URL (used with --agui-record)\n      --agui-proxy-only          AG-UI proxy mode: forward without saving\n      --mcp-record <mount>=<url>   Record an upstream MCP server into mcpFakes (repeatable)\n      --mcp-proxy-only <mount>=<url>  Proxy an upstream MCP server without saving\n      --replay-speed <n>    Replay speed multiplier (default: 1.0, 2.0 = 2x faster)\n      --chaos-drop <rate>   Probability (0-1) of dropping requests with 500\n      --chaos-malformed <rate>  Probability (0-1) of returning malformed JSON\n      --chaos-disconnect <rate> Probability (0-1) of destroying connection\n      --chaos-ratelimit <rate> Probability (0-1) of 429 with Retry-After\n      --chaos-latency <ms> Delay (0-${CHAOS_FIELDS.latencyMs.max}ms) injected before handling\n      AIMOCK_API_KEYS  Comma-separated inbound test API keys (environment only)\n      --help                Show this help message\n`.trim();\n\nconst { values } = parseArgs({\n  options: {\n    port: { type: \"string\", short: \"p\", default: \"4010\" },\n    host: { type: \"string\", short: \"h\", default: \"127.0.0.1\" },\n    fixtures: { type: \"string\", short: \"f\", multiple: true },\n    latency: { type: \"string\", short: \"l\", default: \"0\" },\n    \"chunk-size\": { type: \"string\", short: \"c\", default: \"20\" },\n    watch: { type: \"boolean\", short: \"w\", default: false },\n    \"log-level\": { type: \"string\", default: \"info\" },\n    \"validate-on-load\": { type: \"boolean\", default: false },\n    misbehavior: { type: \"boolean\", default: false },\n    metrics: { type: \"boolean\", default: false },\n    record: { type: \"boolean\", default: false },\n    \"record-full-model-version\": { type: \"boolean\", default: false },\n    \"proxy-only\": { type: \"boolean\", default: false },\n    strict: { type: \"boolean\", default: false },\n    \"strict-tool-arguments\": { type: \"boolean\", default: false },\n    \"responses-tools\": { type: \"string\" },\n    policy: { type: \"string\", multiple: true },\n    \"provider-openai\": { type: \"string\" },\n    \"provider-anthropic\": { type: \"string\" },\n    \"provider-gemini\": { type: \"string\" },\n    \"provider-vertexai\": { type: \"string\" },\n    \"provider-bedrock\": { type: \"string\" },\n    \"provider-azure\": { type: \"string\" },\n    \"provider-ollama\": { type: \"string\" },\n    \"provider-cohere\": { type: \"string\" },\n    \"provider-openrouter\": { type: \"string\" },\n    \"provider-byteplus\": { type: \"string\" },\n    \"upstream-timeout-ms\": { type: \"string\" },\n    \"body-timeout-ms\": { type: \"string\" },\n    \"max-proxy-buffer-bytes\": { type: \"string\" },\n    \"max-proxy-buffer-frames\": { type: \"string\" },\n    \"agui-record\": { type: \"boolean\", default: false },\n    \"agui-upstream\": { type: \"string\" },\n    \"agui-proxy-only\": { type: \"boolean\", default: false },\n    \"mcp-record\": { type: \"string\", multiple: true },\n    \"mcp-proxy-only\": { type: \"string\", multiple: true },\n    \"replay-speed\": { type: \"string\", default: \"1.0\" },\n    \"chaos-drop\": { type: \"string\" },\n    \"chaos-malformed\": { type: \"string\" },\n    \"chaos-disconnect\": { type: \"string\" },\n    \"chaos-ratelimit\": { type: \"string\" },\n    \"chaos-latency\": { type: \"string\" },\n    \"journal-max\": { type: \"string\", default: \"1000\" },\n    \"fixture-counts-max\": { type: \"string\", default: \"500\" },\n    help: { type: \"boolean\", default: false },\n  },\n  strict: true,\n});\n\nif (values.help) {\n  console.log(HELP);\n  process.exit(0);\n}\n\nconst port = Number(values.port);\nconst host = values.host!;\nconst latency = Number(values.latency);\nconst chunkSize = Number(values[\"chunk-size\"]);\nconst fixtureValues: string[] =\n  values.fixtures && values.fixtures.length > 0 ? values.fixtures : [\"./fixtures\"];\nconst watchMode = values.watch!;\nconst validateOnLoad = values[\"validate-on-load\"]!;\nconst logLevelStr = values[\"log-level\"]!;\n\nif (![\"silent\", \"warn\", \"info\", \"debug\"].includes(logLevelStr)) {\n  console.error(`Invalid log-level: ${logLevelStr} (must be silent, warn, info, or debug)`);\n  process.exit(1);\n}\nconst logLevel = logLevelStr as LogLevel;\n\nif (Number.isNaN(port) || port < 0 || port > 65535) {\n  console.error(`Invalid port: ${values.port}`);\n  process.exit(1);\n}\n\nif (Number.isNaN(latency) || latency < 0) {\n  console.error(`Invalid latency: ${values.latency}`);\n  process.exit(1);\n}\n\nif (Number.isNaN(chunkSize) || chunkSize < 1) {\n  console.error(`Invalid chunk-size: ${values[\"chunk-size\"]}`);\n  process.exit(1);\n}\n\nconst replaySpeed = Number(values[\"replay-speed\"]);\nif (Number.isNaN(replaySpeed) || replaySpeed <= 0) {\n  console.error(\"--replay-speed must be a positive number\");\n  process.exit(1);\n}\n\nconst responsesToolsFlag = values[\"responses-tools\"];\nif (\n  responsesToolsFlag !== undefined &&\n  responsesToolsFlag !== \"legacy\" &&\n  responsesToolsFlag !== \"extended\"\n) {\n  console.error(\n    `Invalid --responses-tools: ${responsesToolsFlag} (expected \"legacy\" or \"extended\")`,\n  );\n  process.exit(1);\n}\nconst responsesTools: ResponsesToolsMode | undefined = responsesToolsFlag;\n\nconst parsedPolicy = parsePolicyFlags(values.policy ?? []);\nif (!parsedPolicy.ok) {\n  console.error(`${parsedPolicy.error}\\n\\n${HELP}`);\n  process.exit(1);\n}\nconst policy = parsedPolicy.policy;\n\nconst journalMax = Number(values[\"journal-max\"]);\nif (Number.isNaN(journalMax) || !Number.isInteger(journalMax) || journalMax < 0) {\n  console.error(\n    `Invalid journal-max: ${values[\"journal-max\"]} (must be a non-negative integer; 0 = unbounded)`,\n  );\n  process.exit(1);\n}\n\nconst fixtureCountsMaxStr = values[\"fixture-counts-max\"];\nconst fixtureCountsMax = Number(fixtureCountsMaxStr);\nif (Number.isNaN(fixtureCountsMax) || !Number.isInteger(fixtureCountsMax) || fixtureCountsMax < 0) {\n  console.error(\n    `Invalid fixture-counts-max: ${fixtureCountsMaxStr} (must be a non-negative integer; 0 = unbounded)`,\n  );\n  process.exit(1);\n}\n\nconst upstreamTimeoutMsStr = values[\"upstream-timeout-ms\"];\nlet upstreamTimeoutMs: number | undefined;\nif (upstreamTimeoutMsStr !== undefined) {\n  upstreamTimeoutMs = Number(upstreamTimeoutMsStr);\n  if (!Number.isFinite(upstreamTimeoutMs) || upstreamTimeoutMs <= 0) {\n    console.error(\n      `Invalid upstream-timeout-ms: ${upstreamTimeoutMsStr} (must be a positive finite number)`,\n    );\n    process.exit(1);\n  }\n}\n\nconst bodyTimeoutMsStr = values[\"body-timeout-ms\"];\nlet bodyTimeoutMs: number | undefined;\nif (bodyTimeoutMsStr !== undefined) {\n  bodyTimeoutMs = Number(bodyTimeoutMsStr);\n  if (!Number.isFinite(bodyTimeoutMs) || bodyTimeoutMs <= 0) {\n    console.error(\n      `Invalid body-timeout-ms: ${bodyTimeoutMsStr} (must be a positive finite number)`,\n    );\n    process.exit(1);\n  }\n}\n\nconst maxProxyBufferBytesStr = values[\"max-proxy-buffer-bytes\"];\nlet maxProxyBufferBytes: number | undefined;\nif (maxProxyBufferBytesStr !== undefined) {\n  maxProxyBufferBytes = Number(maxProxyBufferBytesStr);\n  if (!Number.isFinite(maxProxyBufferBytes) || maxProxyBufferBytes <= 0) {\n    console.error(\n      `Invalid max-proxy-buffer-bytes: ${maxProxyBufferBytesStr} (must be a positive finite number)`,\n    );\n    process.exit(1);\n  }\n}\n\nconst maxProxyBufferFramesStr = values[\"max-proxy-buffer-frames\"];\nlet maxProxyBufferFrames: number | undefined;\nif (maxProxyBufferFramesStr !== undefined) {\n  maxProxyBufferFrames = Number(maxProxyBufferFramesStr);\n  if (!Number.isFinite(maxProxyBufferFrames) || maxProxyBufferFrames <= 0) {\n    console.error(\n      `Invalid max-proxy-buffer-frames: ${maxProxyBufferFramesStr} (must be a positive finite number)`,\n    );\n    process.exit(1);\n  }\n}\n\nconst logger = new Logger(logLevel);\n\n// Parse chaos config from CLI flags\nlet chaos: ChaosConfig | undefined;\n{\n  const dropStr = values[\"chaos-drop\"];\n  const malformedStr = values[\"chaos-malformed\"];\n  const disconnectStr = values[\"chaos-disconnect\"];\n  const ratelimitStr = values[\"chaos-ratelimit\"];\n  const latencyStr = values[\"chaos-latency\"];\n\n  if (\n    dropStr !== undefined ||\n    malformedStr !== undefined ||\n    disconnectStr !== undefined ||\n    ratelimitStr !== undefined ||\n    latencyStr !== undefined\n  ) {\n    // Same parser, same TABLE, same reject-never-clamp policy as every other\n    // chaos input (headers, fixture, server default, control API) — see\n    // `ChaosConfig`. The bounds and the integer-vs-rate grammar are read out of\n    // `CHAOS_FIELDS`, never re-typed here, so raising a cap in that one table\n    // moves the flag with it instead of leaving `--chaos-latency` on the old\n    // limit with no compile error.\n    chaos = {};\n    const flagFields: Array<{ flag: string; field: ChaosField; raw: string | undefined }> = [\n      { flag: \"chaos-drop\", field: \"dropRate\", raw: dropStr },\n      { flag: \"chaos-malformed\", field: \"malformedRate\", raw: malformedStr },\n      { flag: \"chaos-disconnect\", field: \"disconnectRate\", raw: disconnectStr },\n      { flag: \"chaos-ratelimit\", field: \"rateLimitRate\", raw: ratelimitStr },\n      { flag: \"chaos-latency\", field: \"latencyMs\", raw: latencyStr },\n    ];\n    for (const { flag, field, raw } of flagFields) {\n      if (raw === undefined) continue;\n      const val = parseChaosField(field, raw);\n      if (val === undefined) {\n        console.error(`Invalid ${flag}: ${raw} (must be 0-${CHAOS_FIELDS[field].max})`);\n        process.exit(1);\n      }\n      chaos[field] = val;\n    }\n  }\n}\n\n// Parse record/proxy config from CLI flags\nlet record: RecordConfig | undefined;\nif (values.record || values[\"proxy-only\"]) {\n  const providers: RecordConfig[\"providers\"] = {};\n  if (values[\"provider-openai\"]) providers.openai = values[\"provider-openai\"];\n  if (values[\"provider-anthropic\"]) providers.anthropic = values[\"provider-anthropic\"];\n  if (values[\"provider-gemini\"]) providers.gemini = values[\"provider-gemini\"];\n  if (values[\"provider-vertexai\"]) providers.vertexai = values[\"provider-vertexai\"];\n  if (values[\"provider-bedrock\"]) providers.bedrock = values[\"provider-bedrock\"];\n  if (values[\"provider-azure\"]) providers.azure = values[\"provider-azure\"];\n  if (values[\"provider-ollama\"]) providers.ollama = values[\"provider-ollama\"];\n  if (values[\"provider-cohere\"]) providers.cohere = values[\"provider-cohere\"];\n  if (values[\"provider-openrouter\"]) providers.openrouter = values[\"provider-openrouter\"];\n  if (values[\"provider-byteplus\"]) providers.byteplus = values[\"provider-byteplus\"];\n\n  if (Object.keys(providers).length === 0) {\n    console.error(\n      `Error: --${values[\"proxy-only\"] ? \"proxy-only\" : \"record\"} requires at least one --provider-* flag`,\n    );\n    process.exit(1);\n  }\n\n  // For --record, the first --fixtures value is the base path for the recording\n  // destination and must be a local filesystem path — writing to a URL is not supported.\n  // For --proxy-only, unmatched requests are forwarded without saving, so no writable\n  // destination is required; URL-only --fixtures is valid in that mode.\n  const recordBase = fixtureValues[0];\n  const recordBaseIsUrl = /^https?:\\/\\//i.test(recordBase);\n  if (values.record && recordBaseIsUrl) {\n    console.error(\n      `Error: --record requires a local --fixtures path for the recording destination; got URL ${recordBase}`,\n    );\n    process.exit(1);\n  }\n  record = {\n    providers,\n    // aimock's own upstream keys, sourced from AIMOCK_PROVIDER_*_KEY env vars\n    // (not CLI flags — secrets must not appear in `ps`). Injected on a\n    // fixture-miss passthrough when the caller sent no/dummy credential.\n    providerKeys: readProviderKeysFromEnv(),\n    // In proxy-only mode with only URL sources, fixturePath is never consumed\n    // (recorder.ts skips disk writes when proxyOnly is set). Leave it undefined\n    // rather than resolving a URL string as a filesystem path.\n    fixturePath: recordBaseIsUrl ? undefined : resolve(recordBase, \"recorded\"),\n    proxyOnly: values[\"proxy-only\"],\n    recordFullModelVersion: values[\"record-full-model-version\"],\n    upstreamTimeoutMs,\n    bodyTimeoutMs,\n    maxProxyBufferBytes,\n    maxProxyBufferFrames,\n  };\n} else {\n  // These flags configure upstream proxying — without --record or\n  // --proxy-only they would be parsed and then silently dropped. Routed\n  // through the constructed logger so --log-level is respected.\n  const droppedProviderFlags = (\n    [\n      \"provider-openai\",\n      \"provider-anthropic\",\n      \"provider-gemini\",\n      \"provider-vertexai\",\n      \"provider-bedrock\",\n      \"provider-azure\",\n      \"provider-ollama\",\n      \"provider-cohere\",\n      \"provider-openrouter\",\n      \"provider-byteplus\",\n    ] as const\n  ).filter((flag) => values[flag] !== undefined);\n  if (droppedProviderFlags.length > 0) {\n    logger.warn(\n      `--${droppedProviderFlags.join(\"/--\")} only apply to --record/--proxy-only upstream proxying — ignored without one of those flags.`,\n    );\n  }\n  if (\n    upstreamTimeoutMs !== undefined ||\n    bodyTimeoutMs !== undefined ||\n    maxProxyBufferBytes !== undefined ||\n    maxProxyBufferFrames !== undefined\n  ) {\n    logger.warn(\n      \"--upstream-timeout-ms/--body-timeout-ms/--max-proxy-buffer-bytes/--max-proxy-buffer-frames only apply to --record/--proxy-only upstream proxying — ignored without one of those flags.\",\n    );\n  }\n}\n\n// Parse AG-UI record/proxy config from CLI flags\nlet aguiMount: { path: string; handler: AGUIMock } | undefined;\nif (values[\"agui-record\"] || values[\"agui-proxy-only\"]) {\n  if (!values[\"agui-upstream\"]) {\n    console.error(\"Error: --agui-record/--agui-proxy-only requires --agui-upstream\");\n    process.exit(1);\n  }\n  // --agui-record writes recorded AG-UI fixtures to disk, so a URL source is unsupported.\n  // --agui-proxy-only forwards without saving, so URL-only --fixtures is valid.\n  const aguiBase = fixtureValues[0];\n  const aguiBaseIsUrl = /^https?:\\/\\//i.test(aguiBase);\n  if (values[\"agui-record\"] && aguiBaseIsUrl) {\n    console.error(\n      `Error: --agui-record requires a local --fixtures path for the recording destination; got URL ${aguiBase}`,\n    );\n    process.exit(1);\n  }\n  const agui = new AGUIMock();\n  agui.enableRecording({\n    upstream: values[\"agui-upstream\"],\n    // In proxy-only mode with a URL-only --fixtures, the AG-UI recorder never\n    // writes to disk (see agui-recorder.ts). Leave fixturePath undefined rather\n    // than resolving a URL as a filesystem path.\n    fixturePath: aguiBaseIsUrl ? undefined : resolve(aguiBase, \"agui-recorded\"),\n    proxyOnly: values[\"agui-proxy-only\"],\n  });\n  aguiMount = { path: \"/agui\", handler: agui };\n}\n\n// Parse MCP record/proxy mounts (MR1, AM6): --mcp-record / --mcp-proxy-only <mount>=<url>\nconst mcpRecordMounts: { path: string; handler: MCPMock }[] = [];\n{\n  const recordValues = values[\"mcp-record\"] ?? [];\n  const proxyValues = values[\"mcp-proxy-only\"] ?? [];\n  if (recordValues.length > 0) {\n    // C11: check the flag itself; fixtureValues defaults to ./fixtures.\n    if (!(values.fixtures && values.fixtures.length > 0)) {\n      console.error(\n        \"Error: --mcp-record requires --fixtures <local path> for the recording destination\",\n      );\n      process.exit(1);\n    }\n    if (/^https?:\\/\\//i.test(values.fixtures[0])) {\n      console.error(\n        `Error: --mcp-record requires a local --fixtures path for the recording destination; got URL ${values.fixtures[0]}`,\n      );\n      process.exit(1);\n    }\n  }\n  const flags = [\n    ...recordValues.map((value) => ({ flag: \"--mcp-record\", value, proxyOnly: false })),\n    ...proxyValues.map((value) => ({ flag: \"--mcp-proxy-only\", value, proxyOnly: true })),\n  ];\n  if (flags.length > 0) {\n    let env: ReturnType<typeof mcpRecordEnv>;\n    try {\n      env = mcpRecordEnv(process.env);\n    } catch (err) {\n      console.error(`Error: ${err instanceof Error ? err.message : String(err)}`);\n      process.exit(1);\n    }\n    for (const { flag, value, proxyOnly } of flags) {\n      try {\n        const { mount, upstream } = parseMcpRecordFlag(value, flag);\n        if (aguiMount && mount === aguiMount.path) {\n          throw new Error(`${flag} mount ${mount} is held by a mount that is not an MCP mock`);\n        }\n        if (mcpRecordMounts.some((m) => m.path === mount)) {\n          throw new Error(`${flag} mount ${mount} is given more than once`);\n        }\n        const mcp = new MCPMock().enableRecording({\n          upstream,\n          fixturePath: proxyOnly ? undefined : resolve(values.fixtures![0], \"recorded\"),\n          proxyOnly,\n          secretValues: env.secretValues,\n          upstreamAuth: env.upstreamAuth,\n          strict: values.strict,\n        });\n        mcpRecordMounts.push({ path: mount, handler: mcp });\n      } catch (err) {\n        console.error(`Error: ${err instanceof Error ? err.message : String(err)}`);\n        process.exit(1);\n      }\n    }\n  }\n}\n\ninterface ResolvedFixtureSource {\n  source: string;\n  path: string;\n  isDir: boolean;\n}\n\nasync function resolveAllFixtureSources(): Promise<ResolvedFixtureSource[]> {\n  const resolved: ResolvedFixtureSource[] = [];\n  for (const value of fixtureValues) {\n    let local;\n    try {\n      local = await resolveFixturesValue(value, {\n        validateOnLoad,\n        logger,\n      });\n    } catch (err) {\n      const msg = err instanceof Error ? err.message : String(err);\n      console.error(`Failed to resolve --fixtures value \"${value}\": ${msg}`);\n      process.exit(1);\n    }\n    if (!local.path) {\n      // Remote fetch failed without validate-on-load and no cache — already warned; skip.\n      continue;\n    }\n    try {\n      const stat = statSync(local.path);\n      resolved.push({ source: local.source, path: local.path, isDir: stat.isDirectory() });\n    } catch (err) {\n      if ((err as NodeJS.ErrnoException).code === \"ENOENT\") {\n        console.error(`Fixtures path not found: ${local.path}`);\n      } else {\n        const msg = err instanceof Error ? err.message : String(err);\n        console.error(`Failed to load fixtures from ${local.path}: ${msg}`);\n      }\n      process.exit(1);\n    }\n  }\n  return resolved;\n}\n\n// F3: the loaders that carry `mcpFakes`. A file's entry-id source (I6) is the\n// --fixtures value as given: the path, or the URL of a remote file (whose\n// `path` is the on-disk cache).\nfunction loadSource(source: ResolvedFixtureSource): FixturesWithServices {\n  const loaded = source.isDir\n    ? loadFixturesFromDirWithServices(source.path, logger)\n    : loadFixtureFileWithServices(source.path, logger, undefined, source.source);\n  // --misbehavior: a bad fixture `misbehavior` key fails the load; without it the key is ignored.\n  if (values.misbehavior) loaded.fixtures.forEach(enableHeldFixtureMisbehavior);\n  return loaded;\n}\n\n/** Each source's `mcpFakes` blocks, in load order, for the --watch comparison. */\nfunction fakesBySource(blocks: McpFakeSource[]): Map<string, unknown[]> {\n  const bySource = new Map<string, unknown[]>();\n  for (const block of blocks) {\n    const list = bySource.get(block.source) ?? [];\n    list.push([block.blockIndex, block.raw]);\n    bySource.set(block.source, list);\n  }\n  return bySource;\n}\n\n/**\n * R9/F11: fakes are not reloaded by --watch, so a reload whose `mcpFakes`\n * differ from the boot set is rejected. Returns the first changed source.\n * A source in `unreadable` could not be read or parsed: it is not compared,\n * because its blocks are unknown, not removed.\n */\nfunction changedFakesSource(\n  boot: McpFakeSource[],\n  reload: McpFakeSource[],\n  unreadable: ReadonlySet<string>,\n): string | null {\n  const before = fakesBySource(boot);\n  const after = fakesBySource(reload);\n  for (const source of new Set([...before.keys(), ...after.keys()])) {\n    if (unreadable.has(source)) continue;\n    if (!isDeepStrictEqual(before.get(source), after.get(source))) return source;\n  }\n  return null;\n}\n\n/**\n * L3: a load error on stderr, whatever the log level: every error of a\n * `McpFakesAddError`, one per line, then its L8 warnings.\n */\nfunction printLoadError(err: FixtureLoadError | MisbehaviorConfigError): void {\n  const errors = err instanceof McpFakesAddError ? err.errors : [err];\n  for (const e of errors) console.error(e.message);\n  if (err instanceof McpFakesAddError) {\n    for (const w of err.warnings) console.warn(w.message);\n  }\n}\n\n/** A --watch reload that `loadFn` rejected and already printed (L3, L7). */\nclass ReloadRejected extends Error {}\n\n/**\n * The --watch logger: as `Logger`, except that the watcher's own report of a\n * {@link ReloadRejected} reload is dropped, so the error is printed once.\n */\nclass WatchLogger extends Logger {\n  override error(...args: unknown[]): void {\n    if (args.some((a) => a instanceof ReloadRejected)) return;\n    super.error(...args);\n  }\n}\n\n/**\n * MR13: --watch with record mounts. (a) An event for a recorder temp file, or\n * for a file whose bytes are exactly what a recorder last wrote there, does\n * not reload; everything else (a delete, a directory, a user edit) reloads as\n * on main. (b) Each recorder write moves the --watch baseline of that file,\n * so the next reload does not reject the recording as a changed `mcpFakes`.\n * Without record mounts (or for a file source), --watch is exactly as on main.\n */\nfunction recorderWatch(\n  primary: ResolvedFixtureSource,\n  moveBaseline: (moved: (boot: McpFakeSource[]) => McpFakeSource[]) => void,\n): { ignore?: (absPath: string) => boolean } {\n  const events = mcpRecordMounts.map((m) => m.handler.recorderEvents()).filter((ev) => ev !== null);\n  if (events.length === 0 || !primary.isDir) return {};\n  for (const ev of events) {\n    ev.onWrite((file, written) => {\n      const source = relative(primary.path, file).split(sep).join(\"/\");\n      const blocks: McpFakeSource[] = Array.isArray(written)\n        ? written.map((raw, blockIndex) => ({ source, blockIndex, raw }))\n        : [{ source, blockIndex: null, raw: written }];\n      moveBaseline((boot) => {\n        // Replace this source's blocks in place; a new source goes last.\n        const others = boot.filter((b) => b.source !== source);\n        const at = boot.findIndex((b) => b.source === source);\n        const pos = at === -1 ? others.length : at;\n        return [...others.slice(0, pos), ...blocks, ...others.slice(pos)];\n      });\n    });\n  }\n  return {\n    ignore: (absPath: string): boolean => {\n      // Recorder temp files only (persistServiceFakes writes `<file>.tmp.<uuid>`, then renames it).\n      if (/\\.tmp\\.[0-9a-f-]+$/i.test(absPath)) return true;\n      let st: Stats;\n      try {\n        st = statSync(absPath);\n      } catch {\n        return false; // gone: a user deleted a fixture — this MUST reload (r2 N2)\n      }\n      if (st.isDirectory()) return false; // directory events behave as on main\n      let data: Buffer;\n      try {\n        data = readFileSync(absPath);\n      } catch {\n        return false;\n      }\n      const hash = createHash(\"sha256\").update(data).digest(\"hex\");\n      return events.some((ev) => ev.lastWrittenHash(absPath) === hash);\n    },\n  };\n}\n\nasync function main() {\n  const sources = await resolveAllFixtureSources();\n\n  const fixtures: Fixture[] = [];\n  const mcpFakes: McpFakeSource[] = [];\n  // The primary source's blocks: what a --watch reload of it is compared with.\n  let primaryFakes: McpFakeSource[] = [];\n  for (const src of sources) {\n    const loaded = loadSource(src);\n    fixtures.push(...loaded.fixtures);\n    mcpFakes.push(...loaded.mcpFakes);\n    if (src === sources[0]) primaryFakes = loaded.mcpFakes;\n  }\n\n  if (fixtures.length === 0 && mcpFakes.length > 0) {\n    // F5/L9: fake blocks count as loaded; only LLM requests have nothing to match.\n    console.warn(build(msg`Warning: No LLM fixtures loaded; LLM requests will return 404`));\n  } else if (fixtures.length === 0) {\n    if (validateOnLoad || values.strict) {\n      console.error(\"Error: No fixtures loaded and validation/strict mode is enabled — aborting.\");\n      process.exit(1);\n    }\n    console.warn(\"Warning: No fixtures loaded. The server will return 404 for all requests.\");\n  }\n\n  const sourceLabel = sources.map((s) => s.source).join(\", \") || \"<none>\";\n  logger.info(`Loaded ${fixtures.length} fixture(s) from ${sourceLabel}`);\n\n  // Validate fixtures if requested\n  if (validateOnLoad) {\n    if (responsesTools === \"extended\") fixtures.forEach(markFixtureResponsesToolsExtended);\n    const results = validateFixtures(fixtures);\n    const errors = results.filter((r) => r.severity === \"error\");\n    const warnings = results.filter((r) => r.severity === \"warning\");\n\n    for (const w of warnings) {\n      logger.warn(`Fixture ${w.fixtureIndex}: ${w.message}`);\n    }\n    // L8 (shadowed mcpFakes entries) is not printed here: the hand-off in\n    // createServer prints it on every start.\n    for (const e of errors) {\n      logger.error(`Fixture ${e.fixtureIndex}: ${e.message}`);\n    }\n\n    if (errors.length > 0) {\n      console.error(`Validation failed: ${errors.length} error(s), ${warnings.length} warning(s)`);\n      process.exit(1);\n    }\n  }\n\n  const allMounts: { path: string; handler: Mountable }[] = [\n    ...(aguiMount ? [aguiMount] : []),\n    ...mcpRecordMounts,\n  ];\n  const mounts = allMounts.length > 0 ? allMounts : undefined;\n\n  const instance = await createServer(\n    fixtures,\n    {\n      port,\n      host,\n      latency,\n      chunkSize,\n      replaySpeed,\n      logLevel,\n      chaos,\n      metrics: values.metrics,\n      record,\n      strict: values.strict,\n      policy,\n      strictToolArguments: values[\"strict-tool-arguments\"],\n      enableMisbehavior: values.misbehavior,\n      ...(responsesTools !== undefined ? { responsesTools } : {}),\n      journalMaxEntries: journalMax,\n      fixtureCountsMaxTestIds: fixtureCountsMax,\n      auth: resolveInboundAuth(selectInboundAuthSource(undefined)).publicConfig,\n    },\n    mounts,\n    { search: [], rerank: [], moderation: [], mcpFakes },\n  );\n\n  // Only the first local source is watched — remote URL sources are fetched once\n  // at boot and are not monitored. Declared before the readiness announcement so\n  // shutdown can close it whenever the signal arrives.\n  let watcher: { close: () => void } | null = null;\n\n  function shutdown() {\n    logger.info(\"Shutting down...\");\n    if (watcher) watcher.close();\n    instance.server.close(() => {\n      process.exit(0);\n    });\n  }\n\n  // Register BEFORE announcing readiness. Writes to a pipe are synchronous on Linux\n  // (and to a file on every POSIX platform), so a supervisor that reacts to the line\n  // below can deliver SIGTERM while this process is still mid-statement. Announcing\n  // first left a window in which SIGTERM hit Node's default disposition, which\n  // re-raises: the process died with a null exit code instead of shutting down.\n  process.on(\"SIGINT\", shutdown);\n  process.on(\"SIGTERM\", shutdown);\n\n  logger.info(`aimock server listening on ${instance.url}`);\n\n  // Start file watcher if requested.\n  if (watchMode) {\n    const primary = sources[0];\n    if (!primary) {\n      logger.warn(\"--watch requested but no resolvable fixture sources; skipping watcher\");\n    } else {\n      // A rejected reload is printed here, whatever the log level, then\n      // thrown as ReloadRejected: watchFixtures keeps the previous fixtures,\n      // and its WatchLogger does not print the error a second time.\n      const reject = (err: FixtureLoadError | MisbehaviorConfigError): never => {\n        printLoadError(err);\n        throw new ReloadRejected(build(msg`--watch reload rejected`));\n      };\n      const loadFn = (): Fixture[] => {\n        let loaded: FixturesWithServices;\n        try {\n          loaded = loadSource(primary);\n        } catch (err) {\n          // L3: a bad block in the reloaded file.\n          if (err instanceof FixtureLoadError || err instanceof MisbehaviorConfigError) {\n            return reject(err);\n          }\n          throw err;\n        }\n        const changed = changedFakesSource(\n          primaryFakes,\n          loaded.mcpFakes,\n          new Set(loaded.unreadable),\n        );\n        if (changed !== null) {\n          // L7.\n          return reject(\n            new FixtureLoadError({\n              rule: \"mcp-fakes/watch-reload-changed\",\n              file: changed,\n              detail: msg`mcpFakes changed on --watch reload; MCP fakes are not reloaded, so the whole reload is rejected and the previous fixtures stay loaded. Restart aimock to load the new fakes`,\n            }),\n          );\n        }\n        if (responsesTools === \"extended\") {\n          loaded.fixtures.forEach(markFixtureResponsesToolsExtended);\n        }\n        return loaded.fixtures;\n      };\n      watcher = watchFixtures(primary.path, fixtures, loadFn, {\n        logger: new WatchLogger(logLevel),\n        validate: validateOnLoad,\n        validateFn: validateFixtures,\n        ...recorderWatch(primary, (moved) => (primaryFakes = moved(primaryFakes))),\n      });\n      logger.info(`Watching ${primary.path} for changes`);\n    }\n  }\n}\n\nmain().catch((err) => {\n  if (err instanceof FixtureLoadError || err instanceof MisbehaviorConfigError) {\n    printLoadError(err);\n  } else {\n    console.error(err);\n  }\n  process.exit(1);\n});\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAiCA,MAAM,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;sCAqDyB,aAAa,UAAU,IAAI;;;EAG/D,MAAM;AAER,MAAM,EAAE,WAAW,UAAU;CAC3B,SAAS;EACP,MAAM;GAAE,MAAM;GAAU,OAAO;GAAK,SAAS;GAAQ;EACrD,MAAM;GAAE,MAAM;GAAU,OAAO;GAAK,SAAS;GAAa;EAC1D,UAAU;GAAE,MAAM;GAAU,OAAO;GAAK,UAAU;GAAM;EACxD,SAAS;GAAE,MAAM;GAAU,OAAO;GAAK,SAAS;GAAK;EACrD,cAAc;GAAE,MAAM;GAAU,OAAO;GAAK,SAAS;GAAM;EAC3D,OAAO;GAAE,MAAM;GAAW,OAAO;GAAK,SAAS;GAAO;EACtD,aAAa;GAAE,MAAM;GAAU,SAAS;GAAQ;EAChD,oBAAoB;GAAE,MAAM;GAAW,SAAS;GAAO;EACvD,aAAa;GAAE,MAAM;GAAW,SAAS;GAAO;EAChD,SAAS;GAAE,MAAM;GAAW,SAAS;GAAO;EAC5C,QAAQ;GAAE,MAAM;GAAW,SAAS;GAAO;EAC3C,6BAA6B;GAAE,MAAM;GAAW,SAAS;GAAO;EAChE,cAAc;GAAE,MAAM;GAAW,SAAS;GAAO;EACjD,QAAQ;GAAE,MAAM;GAAW,SAAS;GAAO;EAC3C,yBAAyB;GAAE,MAAM;GAAW,SAAS;GAAO;EAC5D,mBAAmB,EAAE,MAAM,UAAU;EACrC,QAAQ;GAAE,MAAM;GAAU,UAAU;GAAM;EAC1C,mBAAmB,EAAE,MAAM,UAAU;EACrC,sBAAsB,EAAE,MAAM,UAAU;EACxC,mBAAmB,EAAE,MAAM,UAAU;EACrC,qBAAqB,EAAE,MAAM,UAAU;EACvC,oBAAoB,EAAE,MAAM,UAAU;EACtC,kBAAkB,EAAE,MAAM,UAAU;EACpC,mBAAmB,EAAE,MAAM,UAAU;EACrC,mBAAmB,EAAE,MAAM,UAAU;EACrC,uBAAuB,EAAE,MAAM,UAAU;EACzC,qBAAqB,EAAE,MAAM,UAAU;EACvC,uBAAuB,EAAE,MAAM,UAAU;EACzC,mBAAmB,EAAE,MAAM,UAAU;EACrC,0BAA0B,EAAE,MAAM,UAAU;EAC5C,2BAA2B,EAAE,MAAM,UAAU;EAC7C,eAAe;GAAE,MAAM;GAAW,SAAS;GAAO;EAClD,iBAAiB,EAAE,MAAM,UAAU;EACnC,mBAAmB;GAAE,MAAM;GAAW,SAAS;GAAO;EACtD,cAAc;GAAE,MAAM;GAAU,UAAU;GAAM;EAChD,kBAAkB;GAAE,MAAM;GAAU,UAAU;GAAM;EACpD,gBAAgB;GAAE,MAAM;GAAU,SAAS;GAAO;EAClD,cAAc,EAAE,MAAM,UAAU;EAChC,mBAAmB,EAAE,MAAM,UAAU;EACrC,oBAAoB,EAAE,MAAM,UAAU;EACtC,mBAAmB,EAAE,MAAM,UAAU;EACrC,iBAAiB,EAAE,MAAM,UAAU;EACnC,eAAe;GAAE,MAAM;GAAU,SAAS;GAAQ;EAClD,sBAAsB;GAAE,MAAM;GAAU,SAAS;GAAO;EACxD,MAAM;GAAE,MAAM;GAAW,SAAS;GAAO;EAC1C;CACD,QAAQ;CACT,CAAC;AAEF,IAAI,OAAO,MAAM;AACf,SAAQ,IAAI,KAAK;AACjB,SAAQ,KAAK,EAAE;;AAGjB,MAAM,OAAO,OAAO,OAAO,KAAK;AAChC,MAAM,OAAO,OAAO;AACpB,MAAM,UAAU,OAAO,OAAO,QAAQ;AACtC,MAAM,YAAY,OAAO,OAAO,cAAc;AAC9C,MAAM,gBACJ,OAAO,YAAY,OAAO,SAAS,SAAS,IAAI,OAAO,WAAW,CAAC,aAAa;AAClF,MAAM,YAAY,OAAO;AACzB,MAAM,iBAAiB,OAAO;AAC9B,MAAM,cAAc,OAAO;AAE3B,IAAI,CAAC;CAAC;CAAU;CAAQ;CAAQ;CAAQ,CAAC,SAAS,YAAY,EAAE;AAC9D,SAAQ,MAAM,sBAAsB,YAAY,yCAAyC;AACzF,SAAQ,KAAK,EAAE;;AAEjB,MAAM,WAAW;AAEjB,IAAI,OAAO,MAAM,KAAK,IAAI,OAAO,KAAK,OAAO,OAAO;AAClD,SAAQ,MAAM,iBAAiB,OAAO,OAAO;AAC7C,SAAQ,KAAK,EAAE;;AAGjB,IAAI,OAAO,MAAM,QAAQ,IAAI,UAAU,GAAG;AACxC,SAAQ,MAAM,oBAAoB,OAAO,UAAU;AACnD,SAAQ,KAAK,EAAE;;AAGjB,IAAI,OAAO,MAAM,UAAU,IAAI,YAAY,GAAG;AAC5C,SAAQ,MAAM,uBAAuB,OAAO,gBAAgB;AAC5D,SAAQ,KAAK,EAAE;;AAGjB,MAAM,cAAc,OAAO,OAAO,gBAAgB;AAClD,IAAI,OAAO,MAAM,YAAY,IAAI,eAAe,GAAG;AACjD,SAAQ,MAAM,2CAA2C;AACzD,SAAQ,KAAK,EAAE;;AAGjB,MAAM,qBAAqB,OAAO;AAClC,IACE,uBAAuB,UACvB,uBAAuB,YACvB,uBAAuB,YACvB;AACA,SAAQ,MACN,8BAA8B,mBAAmB,oCAClD;AACD,SAAQ,KAAK,EAAE;;AAEjB,MAAM,iBAAiD;AAEvD,MAAM,eAAe,iBAAiB,OAAO,UAAU,EAAE,CAAC;AAC1D,IAAI,CAAC,aAAa,IAAI;AACpB,SAAQ,MAAM,GAAG,aAAa,MAAM,MAAM,OAAO;AACjD,SAAQ,KAAK,EAAE;;AAEjB,MAAM,SAAS,aAAa;AAE5B,MAAM,aAAa,OAAO,OAAO,eAAe;AAChD,IAAI,OAAO,MAAM,WAAW,IAAI,CAAC,OAAO,UAAU,WAAW,IAAI,aAAa,GAAG;AAC/E,SAAQ,MACN,wBAAwB,OAAO,eAAe,kDAC/C;AACD,SAAQ,KAAK,EAAE;;AAGjB,MAAM,sBAAsB,OAAO;AACnC,MAAM,mBAAmB,OAAO,oBAAoB;AACpD,IAAI,OAAO,MAAM,iBAAiB,IAAI,CAAC,OAAO,UAAU,iBAAiB,IAAI,mBAAmB,GAAG;AACjG,SAAQ,MACN,+BAA+B,oBAAoB,kDACpD;AACD,SAAQ,KAAK,EAAE;;AAGjB,MAAM,uBAAuB,OAAO;AACpC,IAAI;AACJ,IAAI,yBAAyB,QAAW;AACtC,qBAAoB,OAAO,qBAAqB;AAChD,KAAI,CAAC,OAAO,SAAS,kBAAkB,IAAI,qBAAqB,GAAG;AACjE,UAAQ,MACN,gCAAgC,qBAAqB,qCACtD;AACD,UAAQ,KAAK,EAAE;;;AAInB,MAAM,mBAAmB,OAAO;AAChC,IAAI;AACJ,IAAI,qBAAqB,QAAW;AAClC,iBAAgB,OAAO,iBAAiB;AACxC,KAAI,CAAC,OAAO,SAAS,cAAc,IAAI,iBAAiB,GAAG;AACzD,UAAQ,MACN,4BAA4B,iBAAiB,qCAC9C;AACD,UAAQ,KAAK,EAAE;;;AAInB,MAAM,yBAAyB,OAAO;AACtC,IAAI;AACJ,IAAI,2BAA2B,QAAW;AACxC,uBAAsB,OAAO,uBAAuB;AACpD,KAAI,CAAC,OAAO,SAAS,oBAAoB,IAAI,uBAAuB,GAAG;AACrE,UAAQ,MACN,mCAAmC,uBAAuB,qCAC3D;AACD,UAAQ,KAAK,EAAE;;;AAInB,MAAM,0BAA0B,OAAO;AACvC,IAAI;AACJ,IAAI,4BAA4B,QAAW;AACzC,wBAAuB,OAAO,wBAAwB;AACtD,KAAI,CAAC,OAAO,SAAS,qBAAqB,IAAI,wBAAwB,GAAG;AACvE,UAAQ,MACN,oCAAoC,wBAAwB,qCAC7D;AACD,UAAQ,KAAK,EAAE;;;AAInB,MAAM,SAAS,IAAI,OAAO,SAAS;AAGnC,IAAI;AACJ;CACE,MAAM,UAAU,OAAO;CACvB,MAAM,eAAe,OAAO;CAC5B,MAAM,gBAAgB,OAAO;CAC7B,MAAM,eAAe,OAAO;CAC5B,MAAM,aAAa,OAAO;AAE1B,KACE,YAAY,UACZ,iBAAiB,UACjB,kBAAkB,UAClB,iBAAiB,UACjB,eAAe,QACf;AAOA,UAAQ,EAAE;EACV,MAAM,aAAkF;GACtF;IAAE,MAAM;IAAc,OAAO;IAAY,KAAK;IAAS;GACvD;IAAE,MAAM;IAAmB,OAAO;IAAiB,KAAK;IAAc;GACtE;IAAE,MAAM;IAAoB,OAAO;IAAkB,KAAK;IAAe;GACzE;IAAE,MAAM;IAAmB,OAAO;IAAiB,KAAK;IAAc;GACtE;IAAE,MAAM;IAAiB,OAAO;IAAa,KAAK;IAAY;GAC/D;AACD,OAAK,MAAM,EAAE,MAAM,OAAO,SAAS,YAAY;AAC7C,OAAI,QAAQ,OAAW;GACvB,MAAM,MAAM,gBAAgB,OAAO,IAAI;AACvC,OAAI,QAAQ,QAAW;AACrB,YAAQ,MAAM,WAAW,KAAK,IAAI,IAAI,cAAc,aAAa,OAAO,IAAI,GAAG;AAC/E,YAAQ,KAAK,EAAE;;AAEjB,SAAM,SAAS;;;;AAMrB,IAAI;AACJ,IAAI,OAAO,UAAU,OAAO,eAAe;CACzC,MAAM,YAAuC,EAAE;AAC/C,KAAI,OAAO,mBAAoB,WAAU,SAAS,OAAO;AACzD,KAAI,OAAO,sBAAuB,WAAU,YAAY,OAAO;AAC/D,KAAI,OAAO,mBAAoB,WAAU,SAAS,OAAO;AACzD,KAAI,OAAO,qBAAsB,WAAU,WAAW,OAAO;AAC7D,KAAI,OAAO,oBAAqB,WAAU,UAAU,OAAO;AAC3D,KAAI,OAAO,kBAAmB,WAAU,QAAQ,OAAO;AACvD,KAAI,OAAO,mBAAoB,WAAU,SAAS,OAAO;AACzD,KAAI,OAAO,mBAAoB,WAAU,SAAS,OAAO;AACzD,KAAI,OAAO,uBAAwB,WAAU,aAAa,OAAO;AACjE,KAAI,OAAO,qBAAsB,WAAU,WAAW,OAAO;AAE7D,KAAI,OAAO,KAAK,UAAU,CAAC,WAAW,GAAG;AACvC,UAAQ,MACN,YAAY,OAAO,gBAAgB,eAAe,SAAS,0CAC5D;AACD,UAAQ,KAAK,EAAE;;CAOjB,MAAM,aAAa,cAAc;CACjC,MAAM,kBAAkB,gBAAgB,KAAK,WAAW;AACxD,KAAI,OAAO,UAAU,iBAAiB;AACpC,UAAQ,MACN,2FAA2F,aAC5F;AACD,UAAQ,KAAK,EAAE;;AAEjB,UAAS;EACP;EAIA,cAAc,yBAAyB;EAIvC,aAAa,kBAAkB,SAAY,QAAQ,YAAY,WAAW;EAC1E,WAAW,OAAO;EAClB,wBAAwB,OAAO;EAC/B;EACA;EACA;EACA;EACD;OACI;CAIL,MAAM,uBACJ;EACE;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CACD,QAAQ,SAAS,OAAO,UAAU,OAAU;AAC9C,KAAI,qBAAqB,SAAS,EAChC,QAAO,KACL,KAAK,qBAAqB,KAAK,MAAM,CAAC,8FACvC;AAEH,KACE,sBAAsB,UACtB,kBAAkB,UAClB,wBAAwB,UACxB,yBAAyB,OAEzB,QAAO,KACL,yLACD;;AAKL,IAAI;AACJ,IAAI,OAAO,kBAAkB,OAAO,oBAAoB;AACtD,KAAI,CAAC,OAAO,kBAAkB;AAC5B,UAAQ,MAAM,kEAAkE;AAChF,UAAQ,KAAK,EAAE;;CAIjB,MAAM,WAAW,cAAc;CAC/B,MAAM,gBAAgB,gBAAgB,KAAK,SAAS;AACpD,KAAI,OAAO,kBAAkB,eAAe;AAC1C,UAAQ,MACN,gGAAgG,WACjG;AACD,UAAQ,KAAK,EAAE;;CAEjB,MAAM,OAAO,IAAI,UAAU;AAC3B,MAAK,gBAAgB;EACnB,UAAU,OAAO;EAIjB,aAAa,gBAAgB,SAAY,QAAQ,UAAU,gBAAgB;EAC3E,WAAW,OAAO;EACnB,CAAC;AACF,aAAY;EAAE,MAAM;EAAS,SAAS;EAAM;;AAI9C,MAAM,kBAAwD,EAAE;AAChE;CACE,MAAM,eAAe,OAAO,iBAAiB,EAAE;CAC/C,MAAM,cAAc,OAAO,qBAAqB,EAAE;AAClD,KAAI,aAAa,SAAS,GAAG;AAE3B,MAAI,EAAE,OAAO,YAAY,OAAO,SAAS,SAAS,IAAI;AACpD,WAAQ,MACN,qFACD;AACD,WAAQ,KAAK,EAAE;;AAEjB,MAAI,gBAAgB,KAAK,OAAO,SAAS,GAAG,EAAE;AAC5C,WAAQ,MACN,+FAA+F,OAAO,SAAS,KAChH;AACD,WAAQ,KAAK,EAAE;;;CAGnB,MAAM,QAAQ,CACZ,GAAG,aAAa,KAAK,WAAW;EAAE,MAAM;EAAgB;EAAO,WAAW;EAAO,EAAE,EACnF,GAAG,YAAY,KAAK,WAAW;EAAE,MAAM;EAAoB;EAAO,WAAW;EAAM,EAAE,CACtF;AACD,KAAI,MAAM,SAAS,GAAG;EACpB,IAAI;AACJ,MAAI;AACF,SAAM,aAAa,QAAQ,IAAI;WACxB,KAAK;AACZ,WAAQ,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,GAAG;AAC3E,WAAQ,KAAK,EAAE;;AAEjB,OAAK,MAAM,EAAE,MAAM,OAAO,eAAe,MACvC,KAAI;GACF,MAAM,EAAE,OAAO,aAAa,mBAAmB,OAAO,KAAK;AAC3D,OAAI,aAAa,UAAU,UAAU,KACnC,OAAM,IAAI,MAAM,GAAG,KAAK,SAAS,MAAM,6CAA6C;AAEtF,OAAI,gBAAgB,MAAM,MAAM,EAAE,SAAS,MAAM,CAC/C,OAAM,IAAI,MAAM,GAAG,KAAK,SAAS,MAAM,0BAA0B;GAEnE,MAAM,MAAM,IAAI,SAAS,CAAC,gBAAgB;IACxC;IACA,aAAa,YAAY,SAAY,QAAQ,OAAO,SAAU,IAAI,WAAW;IAC7E;IACA,cAAc,IAAI;IAClB,cAAc,IAAI;IAClB,QAAQ,OAAO;IAChB,CAAC;AACF,mBAAgB,KAAK;IAAE,MAAM;IAAO,SAAS;IAAK,CAAC;WAC5C,KAAK;AACZ,WAAQ,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,GAAG;AAC3E,WAAQ,KAAK,EAAE;;;;AAYvB,eAAe,2BAA6D;CAC1E,MAAM,WAAoC,EAAE;AAC5C,MAAK,MAAM,SAAS,eAAe;EACjC,IAAI;AACJ,MAAI;AACF,WAAQ,MAAM,qBAAqB,OAAO;IACxC;IACA;IACD,CAAC;WACK,KAAK;GACZ,MAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC5D,WAAQ,MAAM,uCAAuC,MAAM,KAAK,MAAM;AACtE,WAAQ,KAAK,EAAE;;AAEjB,MAAI,CAAC,MAAM,KAET;AAEF,MAAI;GACF,MAAM,OAAO,SAAS,MAAM,KAAK;AACjC,YAAS,KAAK;IAAE,QAAQ,MAAM;IAAQ,MAAM,MAAM;IAAM,OAAO,KAAK,aAAa;IAAE,CAAC;WAC7E,KAAK;AACZ,OAAK,IAA8B,SAAS,SAC1C,SAAQ,MAAM,4BAA4B,MAAM,OAAO;QAClD;IACL,MAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC5D,YAAQ,MAAM,gCAAgC,MAAM,KAAK,IAAI,MAAM;;AAErE,WAAQ,KAAK,EAAE;;;AAGnB,QAAO;;AAMT,SAAS,WAAW,QAAqD;CACvE,MAAM,SAAS,OAAO,QAClB,gCAAgC,OAAO,MAAM,OAAO,GACpD,4BAA4B,OAAO,MAAM,QAAQ,QAAW,OAAO,OAAO;AAE9E,KAAI,OAAO,YAAa,QAAO,SAAS,QAAQ,6BAA6B;AAC7E,QAAO;;;AAIT,SAAS,cAAc,QAAiD;CACtE,MAAM,2BAAW,IAAI,KAAwB;AAC7C,MAAK,MAAM,SAAS,QAAQ;EAC1B,MAAM,OAAO,SAAS,IAAI,MAAM,OAAO,IAAI,EAAE;AAC7C,OAAK,KAAK,CAAC,MAAM,YAAY,MAAM,IAAI,CAAC;AACxC,WAAS,IAAI,MAAM,QAAQ,KAAK;;AAElC,QAAO;;;;;;;;AAST,SAAS,mBACP,MACA,QACA,YACe;CACf,MAAM,SAAS,cAAc,KAAK;CAClC,MAAM,QAAQ,cAAc,OAAO;AACnC,MAAK,MAAM,UAAU,IAAI,IAAI,CAAC,GAAG,OAAO,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,CAAC,EAAE;AACjE,MAAI,WAAW,IAAI,OAAO,CAAE;AAC5B,MAAI,CAAC,kBAAkB,OAAO,IAAI,OAAO,EAAE,MAAM,IAAI,OAAO,CAAC,CAAE,QAAO;;AAExE,QAAO;;;;;;AAOT,SAAS,eAAe,KAAsD;CAC5E,MAAM,SAAS,eAAe,mBAAmB,IAAI,SAAS,CAAC,IAAI;AACnE,MAAK,MAAM,KAAK,OAAQ,SAAQ,MAAM,EAAE,QAAQ;AAChD,KAAI,eAAe,iBACjB,MAAK,MAAM,KAAK,IAAI,SAAU,SAAQ,KAAK,EAAE,QAAQ;;;AAKzD,IAAM,iBAAN,cAA6B,MAAM;;;;;AAMnC,IAAM,cAAN,cAA0B,OAAO;CAC/B,AAAS,MAAM,GAAG,MAAuB;AACvC,MAAI,KAAK,MAAM,MAAM,aAAa,eAAe,CAAE;AACnD,QAAM,MAAM,GAAG,KAAK;;;;;;;;;;;AAYxB,SAAS,cACP,SACA,cAC2C;CAC3C,MAAM,SAAS,gBAAgB,KAAK,MAAM,EAAE,QAAQ,gBAAgB,CAAC,CAAC,QAAQ,OAAO,OAAO,KAAK;AACjG,KAAI,OAAO,WAAW,KAAK,CAAC,QAAQ,MAAO,QAAO,EAAE;AACpD,MAAK,MAAM,MAAM,OACf,IAAG,SAAS,MAAM,YAAY;EAC5B,MAAM,SAAS,SAAS,QAAQ,MAAM,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,IAAI;EAChE,MAAM,SAA0B,MAAM,QAAQ,QAAQ,GAClD,QAAQ,KAAK,KAAK,gBAAgB;GAAE;GAAQ;GAAY;GAAK,EAAE,GAC/D,CAAC;GAAE;GAAQ,YAAY;GAAM,KAAK;GAAS,CAAC;AAChD,gBAAc,SAAS;GAErB,MAAM,SAAS,KAAK,QAAQ,MAAM,EAAE,WAAW,OAAO;GACtD,MAAM,KAAK,KAAK,WAAW,MAAM,EAAE,WAAW,OAAO;GACrD,MAAM,MAAM,OAAO,KAAK,OAAO,SAAS;AACxC,UAAO;IAAC,GAAG,OAAO,MAAM,GAAG,IAAI;IAAE,GAAG;IAAQ,GAAG,OAAO,MAAM,IAAI;IAAC;IACjE;GACF;AAEJ,QAAO,EACL,SAAS,YAA6B;AAEpC,MAAI,sBAAsB,KAAK,QAAQ,CAAE,QAAO;EAChD,IAAI;AACJ,MAAI;AACF,QAAK,SAAS,QAAQ;UAChB;AACN,UAAO;;AAET,MAAI,GAAG,aAAa,CAAE,QAAO;EAC7B,IAAI;AACJ,MAAI;AACF,UAAO,aAAa,QAAQ;UACtB;AACN,UAAO;;EAET,MAAM,OAAO,WAAW,SAAS,CAAC,OAAO,KAAK,CAAC,OAAO,MAAM;AAC5D,SAAO,OAAO,MAAM,OAAO,GAAG,gBAAgB,QAAQ,KAAK,KAAK;IAEnE;;AAGH,eAAe,OAAO;CACpB,MAAM,UAAU,MAAM,0BAA0B;CAEhD,MAAM,WAAsB,EAAE;CAC9B,MAAM,WAA4B,EAAE;CAEpC,IAAI,eAAgC,EAAE;AACtC,MAAK,MAAM,OAAO,SAAS;EACzB,MAAM,SAAS,WAAW,IAAI;AAC9B,WAAS,KAAK,GAAG,OAAO,SAAS;AACjC,WAAS,KAAK,GAAG,OAAO,SAAS;AACjC,MAAI,QAAQ,QAAQ,GAAI,gBAAe,OAAO;;AAGhD,KAAI,SAAS,WAAW,KAAK,SAAS,SAAS,EAE7C,SAAQ,KAAK,MAAM,GAAG,gEAAgE,CAAC;UAC9E,SAAS,WAAW,GAAG;AAChC,MAAI,kBAAkB,OAAO,QAAQ;AACnC,WAAQ,MAAM,8EAA8E;AAC5F,WAAQ,KAAK,EAAE;;AAEjB,UAAQ,KAAK,4EAA4E;;CAG3F,MAAM,cAAc,QAAQ,KAAK,MAAM,EAAE,OAAO,CAAC,KAAK,KAAK,IAAI;AAC/D,QAAO,KAAK,UAAU,SAAS,OAAO,mBAAmB,cAAc;AAGvE,KAAI,gBAAgB;AAClB,MAAI,mBAAmB,WAAY,UAAS,QAAQ,kCAAkC;EACtF,MAAM,UAAU,iBAAiB,SAAS;EAC1C,MAAM,SAAS,QAAQ,QAAQ,MAAM,EAAE,aAAa,QAAQ;EAC5D,MAAM,WAAW,QAAQ,QAAQ,MAAM,EAAE,aAAa,UAAU;AAEhE,OAAK,MAAM,KAAK,SACd,QAAO,KAAK,WAAW,EAAE,aAAa,IAAI,EAAE,UAAU;AAIxD,OAAK,MAAM,KAAK,OACd,QAAO,MAAM,WAAW,EAAE,aAAa,IAAI,EAAE,UAAU;AAGzD,MAAI,OAAO,SAAS,GAAG;AACrB,WAAQ,MAAM,sBAAsB,OAAO,OAAO,aAAa,SAAS,OAAO,aAAa;AAC5F,WAAQ,KAAK,EAAE;;;CAInB,MAAM,YAAoD,CACxD,GAAI,YAAY,CAAC,UAAU,GAAG,EAAE,EAChC,GAAG,gBACJ;CACD,MAAM,SAAS,UAAU,SAAS,IAAI,YAAY;CAElD,MAAM,WAAW,MAAM,aACrB,UACA;EACE;EACA;EACA;EACA;EACA;EACA;EACA;EACA,SAAS,OAAO;EAChB;EACA,QAAQ,OAAO;EACf;EACA,qBAAqB,OAAO;EAC5B,mBAAmB,OAAO;EAC1B,GAAI,mBAAmB,SAAY,EAAE,gBAAgB,GAAG,EAAE;EAC1D,mBAAmB;EACnB,yBAAyB;EACzB,MAAM,mBAAmB,wBAAwB,OAAU,CAAC,CAAC;EAC9D,EACD,QACA;EAAE,QAAQ,EAAE;EAAE,QAAQ,EAAE;EAAE,YAAY,EAAE;EAAE;EAAU,CACrD;CAKD,IAAI,UAAwC;CAE5C,SAAS,WAAW;AAClB,SAAO,KAAK,mBAAmB;AAC/B,MAAI,QAAS,SAAQ,OAAO;AAC5B,WAAS,OAAO,YAAY;AAC1B,WAAQ,KAAK,EAAE;IACf;;AAQJ,SAAQ,GAAG,UAAU,SAAS;AAC9B,SAAQ,GAAG,WAAW,SAAS;AAE/B,QAAO,KAAK,8BAA8B,SAAS,MAAM;AAGzD,KAAI,WAAW;EACb,MAAM,UAAU,QAAQ;AACxB,MAAI,CAAC,QACH,QAAO,KAAK,wEAAwE;OAC/E;GAIL,MAAM,UAAU,QAA0D;AACxE,mBAAe,IAAI;AACnB,UAAM,IAAI,eAAe,MAAM,GAAG,0BAA0B,CAAC;;GAE/D,MAAM,eAA0B;IAC9B,IAAI;AACJ,QAAI;AACF,cAAS,WAAW,QAAQ;aACrB,KAAK;AAEZ,SAAI,eAAe,oBAAoB,eAAe,uBACpD,QAAO,OAAO,IAAI;AAEpB,WAAM;;IAER,MAAM,UAAU,mBACd,cACA,OAAO,UACP,IAAI,IAAI,OAAO,WAAW,CAC3B;AACD,QAAI,YAAY,KAEd,QAAO,OACL,IAAI,iBAAiB;KACnB,MAAM;KACN,MAAM;KACN,QAAQ,GAAG;KACZ,CAAC,CACH;AAEH,QAAI,mBAAmB,WACrB,QAAO,SAAS,QAAQ,kCAAkC;AAE5D,WAAO,OAAO;;AAEhB,aAAU,cAAc,QAAQ,MAAM,UAAU,QAAQ;IACtD,QAAQ,IAAI,YAAY,SAAS;IACjC,UAAU;IACV,YAAY;IACZ,GAAG,cAAc,UAAU,UAAW,eAAe,MAAM,aAAa,CAAE;IAC3E,CAAC;AACF,UAAO,KAAK,YAAY,QAAQ,KAAK,cAAc;;;;AAKzD,MAAM,CAAC,OAAO,QAAQ;AACpB,KAAI,eAAe,oBAAoB,eAAe,uBACpD,gBAAe,IAAI;KAEnB,SAAQ,MAAM,IAAI;AAEpB,SAAQ,KAAK,EAAE;EACf"}

package/dist/cohere.cjs

@@ -1,3 +1,5 @@
+const require_errors = require('./response/errors.cjs');
+const require_policy = require('./response/policy.cjs');
 const require_helpers = require('./helpers.cjs');
 const require_sse_writer = require('./sse-writer.cjs');
 const require_chaos = require('./chaos.cjs');
@@ -5,43 +7,16 @@ const require_misbehavior = require('./misbehavior.cjs');
 const require_router = require('./router.cjs');
 const require_recorder = require('./recorder.cjs');
 const require_interruption = require('./interruption.cjs');
+const require_finish = require('./response/finish.cjs');
+const require_cohere = require('./response/usage/codecs/cohere.cjs');
 
 //#region src/cohere.ts
-const ZERO_USAGE = {
-	billed_units: {
-		input_tokens: 0,
-		output_tokens: 0,
-		search_units: 0,
-		classifications: 0
-	},
-	tokens: {
-		input_tokens: 0,
-		output_tokens: 0
-	}
-};
 function cohereFinishReason(overrideFinishReason, defaultReason) {
 	if (!overrideFinishReason) return defaultReason;
-	if (overrideFinishReason === "stop") return "COMPLETE";
-	if (overrideFinishReason === "tool_calls") return "TOOL_CALL";
-	if (overrideFinishReason === "length") return "MAX_TOKENS";
-	return overrideFinishReason;
+	return require_finish.mapCohereFinish(overrideFinishReason);
 }
 function cohereUsage(overrides) {
-	if (!overrides?.usage) return ZERO_USAGE;
-	const inputTokens = overrides.usage.input_tokens ?? overrides.usage.prompt_tokens ?? 0;
-	const outputTokens = overrides.usage.output_tokens ?? overrides.usage.completion_tokens ?? 0;
-	return {
-		billed_units: {
-			input_tokens: inputTokens,
-			output_tokens: outputTokens,
-			search_units: 0,
-			classifications: 0
-		},
-		tokens: {
-			input_tokens: inputTokens,
-			output_tokens: outputTokens
-		}
-	};
+	return require_cohere.render(overrides);
 }
 /** Extract plain text from structured content (array of { type, text } parts) or passthrough string. */
 function extractTextContent(content) {
@@ -576,10 +551,10 @@ async function handleCohere(req, res, raw, fixtures, journal, defaults, setCorsH
 				fixture: null
 			}
 		});
-		require_sse_writer.writeErrorResponse(res, 400, JSON.stringify({ error: {
+		require_sse_writer.writeErrorResponse(res, 400, require_errors.renderError("cohere", "validation", {
 			message: `Malformed JSON body: ${detail}`,
 			type: "invalid_request_error"
-		} }));
+		}).body);
 		return;
 	}
 	if (!require_helpers.isJsonObject(cohereReq)) {
@@ -593,10 +568,10 @@ async function handleCohere(req, res, raw, fixtures, journal, defaults, setCorsH
 				fixture: null
 			}
 		});
-		require_sse_writer.writeErrorResponse(res, 400, JSON.stringify({ error: {
+		require_sse_writer.writeErrorResponse(res, 400, require_errors.renderError("cohere", "validation", {
 			message: "Request body must be a JSON object",
 			type: "invalid_request_error"
-		} }));
+		}).body);
 		return;
 	}
 	if (!cohereReq.model) {
@@ -610,10 +585,10 @@ async function handleCohere(req, res, raw, fixtures, journal, defaults, setCorsH
 				fixture: null
 			}
 		});
-		require_sse_writer.writeErrorResponse(res, 400, JSON.stringify({ error: {
+		require_sse_writer.writeErrorResponse(res, 400, require_errors.renderError("cohere", "validation", {
 			message: "model is required",
 			type: "invalid_request_error"
-		} }));
+		}).body);
 		return;
 	}
 	let shapeError = require_helpers.validateChatMessages(cohereReq.messages) ?? require_helpers.validateToolsField(cohereReq.tools);
@@ -632,10 +607,10 @@ async function handleCohere(req, res, raw, fixtures, journal, defaults, setCorsH
 				fixture: null
 			}
 		});
-		require_sse_writer.writeErrorResponse(res, 400, JSON.stringify({ error: {
+		require_sse_writer.writeErrorResponse(res, 400, require_errors.renderError("cohere", "validation", {
 			message: `Invalid request: ${shapeError}`,
 			type: "invalid_request_error"
-		} }));
+		}).body);
 		return;
 	}
 	const completionReq = cohereToCompletionRequest(cohereReq);
@@ -654,7 +629,7 @@ async function handleCohere(req, res, raw, fixtures, journal, defaults, setCorsH
 		body: completionReq
 	}, fixture ? "fixture" : "proxy", defaults.registry, defaults.logger)) return;
 	if (!fixture) {
-		if (require_helpers.resolveStrictMode(defaults.strict, req.headers)) {
+		if (require_policy.resolveRequestDecisions(defaults.strict, req.headers).fixtureMiss) {
 			const strictStatus = 503;
 			const strictMessage = require_helpers.strictNoMatchMessage(skippedBySequenceOrTurn);
 			logger.error(require_helpers.strictNoMatchLogLine(req.method ?? "POST", req.url ?? "/v2/chat", skippedBySequenceOrTurn));
@@ -666,13 +641,13 @@ async function handleCohere(req, res, raw, fixtures, journal, defaults, setCorsH
 				response: {
 					status: strictStatus,
 					fixture: null,
-					...require_helpers.strictOverrideField(defaults.strict, req.headers)
+					...require_policy.strictOverrideField(defaults.strict, req.headers)
 				}
 			});
-			require_sse_writer.writeErrorResponse(res, strictStatus, JSON.stringify({ error: {
+			require_sse_writer.writeErrorResponse(res, strictStatus, require_errors.renderError("cohere", "strict-miss", {
 				message: strictMessage,
 				type: "invalid_request_error"
-			} }));
+			}).body);
 			return;
 		}
 		if (defaults.record) {
@@ -701,13 +676,13 @@ async function handleCohere(req, res, raw, fixtures, journal, defaults, setCorsH
 			response: {
 				status: 404,
 				fixture: null,
-				...require_helpers.strictOverrideField(defaults.strict, req.headers)
+				...require_policy.strictOverrideField(defaults.strict, req.headers)
 			}
 		});
-		require_sse_writer.writeErrorResponse(res, 404, JSON.stringify({ error: {
+		require_sse_writer.writeErrorResponse(res, 404, require_errors.renderError("cohere", "fixture-miss", {
 			message: "No fixture matched",
 			type: "invalid_request_error"
-		} }));
+		}).body);
 		return;
 	}
 	const resolvedResponse = await require_helpers.resolveResponse(fixture, completionReq);
@@ -739,15 +714,15 @@ async function handleCohere(req, res, raw, fixtures, journal, defaults, setCorsH
 			testId
 		});
 		if (!misbehavior.summary?.evaluations.length) logger.error(misbehavior.message);
-		require_sse_writer.writeErrorResponse(res, misbehavior.status, JSON.stringify({
+		require_sse_writer.writeErrorResponse(res, misbehavior.status, require_errors.renderError("cohere", "misbehavior", {
 			message: misbehavior.message,
 			code: misbehavior.code
-		}));
+		}).body);
 		return;
 	}
 	const prepared = misbehavior.kind === "applied" ? require_helpers.prepareOpenAIChatMisbehavior(misbehavior) : void 0;
 	const observedK5Stream = cohereReq.stream === true && prepared?.summary.fault === "stop-length-mid-tool";
-	const appliedReasoning = prepared && "reasoning" in prepared.response ? require_helpers.resolveReasoningForModel(prepared.response.reasoning, cohereReq.model, require_helpers.resolveStrictMode(defaults.strict, req.headers), logger) : void 0;
+	const appliedReasoning = prepared && "reasoning" in prepared.response ? require_helpers.resolveReasoningForModel(prepared.response.reasoning, cohereReq.model, require_policy.resolveRequestDecisions(defaults.strict, req.headers).reasoningSuppression, logger) : void 0;
 	const usage = prepared ? require_helpers.resolveOpenAIChatMisbehaviorUsage(prepared, completionReq, appliedReasoning !== void 0) : void 0;
 	const response = prepared && usage ? {
 		...prepared.response,
@@ -775,13 +750,13 @@ async function handleCohere(req, res, raw, fixtures, journal, defaults, setCorsH
 			defaults,
 			testId
 		});
-		require_sse_writer.writeErrorResponse(res, status, require_helpers.serializeErrorResponse(response), { retryAfter: response.retryAfter });
+		require_sse_writer.writeErrorResponse(res, status, require_errors.renderError("openai", "fixture", response.error).body, { retryAfter: response.retryAfter });
 		return;
 	}
 	if (require_helpers.isCombinedFixtureResponse(response)) {
 		if (response.webSearches?.length) logger.warn("webSearches in fixture response are not supported for Cohere v2 Chat API — ignoring");
 		const overrides = require_helpers.extractOverrides(response);
-		const effectiveStrict = require_helpers.resolveStrictMode(defaults.strict, req.headers);
+		const effectiveStrict = require_policy.resolveRequestDecisions(defaults.strict, req.headers).reasoningSuppression;
 		const effReasoning = prepared ? appliedReasoning : require_helpers.resolveReasoningForModel(response.reasoning, cohereReq.model, effectiveStrict, logger);
 		const journalEntry = journal.add({
 			method: req.method ?? "POST",
@@ -827,7 +802,7 @@ async function handleCohere(req, res, raw, fixtures, journal, defaults, setCorsH
 	if (require_helpers.isTextResponse(response)) {
 		if (response.webSearches?.length) logger.warn("webSearches in fixture response are not supported for Cohere v2 Chat API — ignoring");
 		const overrides = require_helpers.extractOverrides(response);
-		const effectiveStrict = require_helpers.resolveStrictMode(defaults.strict, req.headers);
+		const effectiveStrict = require_policy.resolveRequestDecisions(defaults.strict, req.headers).reasoningSuppression;
 		const effReasoning = prepared ? appliedReasoning : require_helpers.resolveReasoningForModel(response.reasoning, cohereReq.model, effectiveStrict, logger);
 		const journalEntry = journal.add({
 			method: req.method ?? "POST",
@@ -881,7 +856,7 @@ async function handleCohere(req, res, raw, fixtures, journal, defaults, setCorsH
 	if (require_helpers.isToolCallResponse(response)) {
 		if (response.webSearches?.length) logger.warn("webSearches in fixture response are not supported for Cohere v2 Chat API — ignoring");
 		const overrides = require_helpers.extractOverrides(response);
-		const effectiveStrict = require_helpers.resolveStrictMode(defaults.strict, req.headers);
+		const effectiveStrict = require_policy.resolveRequestDecisions(defaults.strict, req.headers).reasoningSuppression;
 		const effReasoning = prepared ? appliedReasoning : require_helpers.resolveReasoningForModel(response.reasoning, cohereReq.model, effectiveStrict, logger);
 		const journalEntry = journal.add({
 			method: req.method ?? "POST",
@@ -939,10 +914,10 @@ async function handleCohere(req, res, raw, fixtures, journal, defaults, setCorsH
 		defaults,
 		testId
 	});
-	require_sse_writer.writeErrorResponse(res, 500, JSON.stringify({ error: {
+	require_sse_writer.writeErrorResponse(res, 500, require_errors.renderError("cohere", "unknown-response", {
 		message: "Fixture response did not match any known type",
 		type: "server_error"
-	} }));
+	}).body);
 }
 async function handleCohereEmbed(req, res, raw, fixtures, journal, defaults, setCorsHeaders) {
 	const { logger } = defaults;
@@ -962,10 +937,10 @@ async function handleCohereEmbed(req, res, raw, fixtures, journal, defaults, set
 				fixture: null
 			}
 		});
-		require_sse_writer.writeErrorResponse(res, 400, JSON.stringify({ error: {
+		require_sse_writer.writeErrorResponse(res, 400, require_errors.renderError("cohere", "validation", {
 			message: `Malformed JSON body: ${detail}`,
 			type: "invalid_request_error"
-		} }));
+		}).body);
 		return;
 	}
 	if (!require_helpers.isJsonObject(embedReq)) {
@@ -979,10 +954,10 @@ async function handleCohereEmbed(req, res, raw, fixtures, journal, defaults, set
 				fixture: null
 			}
 		});
-		require_sse_writer.writeErrorResponse(res, 400, JSON.stringify({ error: {
+		require_sse_writer.writeErrorResponse(res, 400, require_errors.renderError("cohere", "validation", {
 			message: "Request body must be a JSON object",
 			type: "invalid_request_error"
-		} }));
+		}).body);
 		return;
 	}
 	if (!embedReq.model) {
@@ -996,10 +971,10 @@ async function handleCohereEmbed(req, res, raw, fixtures, journal, defaults, set
 				fixture: null
 			}
 		});
-		require_sse_writer.writeErrorResponse(res, 400, JSON.stringify({ error: {
+		require_sse_writer.writeErrorResponse(res, 400, require_errors.renderError("cohere", "validation", {
 			message: "model is required",
 			type: "invalid_request_error"
-		} }));
+		}).body);
 		return;
 	}
 	if (!embedReq.texts || !Array.isArray(embedReq.texts)) {
@@ -1013,10 +988,10 @@ async function handleCohereEmbed(req, res, raw, fixtures, journal, defaults, set
 				fixture: null
 			}
 		});
-		require_sse_writer.writeErrorResponse(res, 400, JSON.stringify({ error: {
+		require_sse_writer.writeErrorResponse(res, 400, require_errors.renderError("cohere", "validation", {
 			message: "Invalid request: texts array is required",
 			type: "invalid_request_error"
-		} }));
+		}).body);
 		return;
 	}
 	if (!embedReq.texts.every((text) => typeof text === "string")) {
@@ -1030,10 +1005,10 @@ async function handleCohereEmbed(req, res, raw, fixtures, journal, defaults, set
 				fixture: null
 			}
 		});
-		require_sse_writer.writeErrorResponse(res, 400, JSON.stringify({ error: {
+		require_sse_writer.writeErrorResponse(res, 400, require_errors.renderError("cohere", "validation", {
 			message: "Invalid request: texts must be an array of strings",
 			type: "invalid_request_error"
-		} }));
+		}).body);
 		return;
 	}
 	const combinedInput = embedReq.texts.join(" ");
@@ -1071,10 +1046,10 @@ async function handleCohereEmbed(req, res, raw, fixtures, journal, defaults, set
 				fixture: fixture ?? null
 			}
 		});
-		require_sse_writer.writeErrorResponse(res, 400, JSON.stringify({ error: {
+		require_sse_writer.writeErrorResponse(res, 400, require_errors.renderError("cohere", "validation", {
 			message: isArray ? "Invalid request: embedding_types must be an array of strings" : "Invalid request: embedding_types must be an array",
 			type: "invalid_request_error"
-		} }));
+		}).body);
 		return true;
 	}
 	if (fixture) {
@@ -1091,7 +1066,7 @@ async function handleCohereEmbed(req, res, raw, fixtures, journal, defaults, set
 					fixture
 				}
 			});
-			require_sse_writer.writeErrorResponse(res, status, require_helpers.serializeErrorResponse(response), { retryAfter: response.retryAfter });
+			require_sse_writer.writeErrorResponse(res, status, require_errors.renderError("openai", "fixture", response.error).body, { retryAfter: response.retryAfter });
 			return;
 		}
 		if (require_helpers.isEmbeddingResponse(response)) {
@@ -1129,13 +1104,13 @@ async function handleCohereEmbed(req, res, raw, fixtures, journal, defaults, set
 				fixture
 			}
 		});
-		require_sse_writer.writeErrorResponse(res, 500, JSON.stringify({ error: {
+		require_sse_writer.writeErrorResponse(res, 500, require_errors.renderError("cohere", "unknown-response", {
 			message: "Fixture response did not match any known embedding type (must have embedding or error)",
 			type: "server_error"
-		} }));
+		}).body);
 		return;
 	}
-	if (require_helpers.resolveStrictMode(defaults.strict, req.headers)) {
+	if (require_policy.resolveRequestDecisions(defaults.strict, req.headers).fixtureMiss) {
 		const strictMessage = require_helpers.strictNoMatchMessage(skippedBySequenceOrTurn);
 		logger.error(require_helpers.strictNoMatchLogLine(req.method ?? "POST", req.url ?? "/v2/embed", skippedBySequenceOrTurn));
 		journal.add({
@@ -1146,13 +1121,13 @@ async function handleCohereEmbed(req, res, raw, fixtures, journal, defaults, set
 			response: {
 				status: 503,
 				fixture: null,
-				...require_helpers.strictOverrideField(defaults.strict, req.headers)
+				...require_policy.strictOverrideField(defaults.strict, req.headers)
 			}
 		});
-		require_sse_writer.writeErrorResponse(res, 503, JSON.stringify({ error: {
+		require_sse_writer.writeErrorResponse(res, 503, require_errors.renderError("cohere", "strict-miss", {
 			message: strictMessage,
 			type: "invalid_request_error"
-		} }));
+		}).body);
 		return;
 	}
 	if (defaults.record) {