@copilotkit/aimock 1.45.0 → 1.46.0

package/dist/moderation.cjs

@@ -1,3 +1,5 @@
+const require_errors = require('./response/errors.cjs');
+const require_policy = require('./response/policy.cjs');
 const require_helpers = require('./helpers.cjs');
 
 //#region src/moderation.ts
@@ -62,11 +64,11 @@ async function handleModeration(req, res, raw, fixtures, journal, defaults, setC
 			}
 		});
 		res.writeHead(400, { "Content-Type": "application/json" });
-		res.end(JSON.stringify({ error: {
+		res.end(require_errors.renderError("openai", "validation", {
 			message: `Malformed JSON: ${detail}`,
 			type: "invalid_request_error",
 			code: "invalid_json"
-		} }));
+		}).body);
 		return;
 	}
 	if (!require_helpers.isJsonObject(body)) {
@@ -82,10 +84,10 @@ async function handleModeration(req, res, raw, fixtures, journal, defaults, setC
 			}
 		});
 		res.writeHead(400, { "Content-Type": "application/json" });
-		res.end(JSON.stringify({ error: {
+		res.end(require_errors.renderError("openai", "validation", {
 			message: "Request body must be a JSON object",
 			type: "invalid_request_error"
-		} }));
+		}).body);
 		return;
 	}
 	const normalized = require_helpers.normalizeTextInput(body.input ?? "");
@@ -102,12 +104,13 @@ async function handleModeration(req, res, raw, fixtures, journal, defaults, setC
 			}
 		});
 		res.writeHead(400, { "Content-Type": "application/json" });
-		res.end(JSON.stringify({ error: {
+		res.end(require_errors.renderError("openai", "validation", {
 			message: "Invalid parameter: 'input' must be a string, an array of strings, or an array of multimodal parts",
 			type: "invalid_request_error",
 			param: null,
-			code: null
-		} }));
+			code: null,
+			includeParam: true
+		}).body);
 		return;
 	}
 	const inputText = normalized;
@@ -121,7 +124,7 @@ async function handleModeration(req, res, raw, fixtures, journal, defaults, setC
 	}
 	if (matchedFixture) logger.debug(`Moderation fixture matched for input "${inputText.slice(0, 80)}"`);
 	else logger.debug(`No moderation fixture matched for input "${inputText.slice(0, 80)}" — returning unflagged`);
-	if (!matchedFixture && require_helpers.resolveStrictMode(defaults.strict, req.headers)) {
+	if (!matchedFixture && require_policy.resolveRequestDecisions(defaults.strict, req.headers).fixtureMiss) {
 		const strictMessage = require_helpers.strictNoMatchMessage(0);
 		logger.error(require_helpers.strictNoMatchLogLine(req.method ?? "POST", req.url ?? "/v1/moderations", 0));
 		journal.add({
@@ -133,15 +136,15 @@ async function handleModeration(req, res, raw, fixtures, journal, defaults, setC
 			response: {
 				status: 503,
 				fixture: null,
-				...require_helpers.strictOverrideField(defaults.strict, req.headers)
+				...require_policy.strictOverrideField(defaults.strict, req.headers)
 			}
 		});
 		res.writeHead(503, { "Content-Type": "application/json" });
-		res.end(JSON.stringify({ error: {
+		res.end(require_errors.renderError("openai", "strict-miss", {
 			message: strictMessage,
 			type: "invalid_request_error",
 			code: "no_fixture_match"
-		} }));
+		}).body);
 		return;
 	}
 	journal.add({
@@ -153,7 +156,7 @@ async function handleModeration(req, res, raw, fixtures, journal, defaults, setC
 		response: {
 			status: 200,
 			fixture: null,
-			...require_helpers.strictOverrideField(defaults.strict, req.headers)
+			...require_policy.strictOverrideField(defaults.strict, req.headers)
 		}
 	});
 	res.writeHead(200, { "Content-Type": "application/json" });

package/dist/moderation.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"moderation.cjs","names":["flattenHeaders","isJsonObject","normalizeTextInput","matchesPattern","resolveStrictMode","strictNoMatchMessage","strictNoMatchLogLine","strictOverrideField","generateId"],"sources":["../src/moderation.ts"],"sourcesContent":["/**\n * Moderation API support for LLMock.\n *\n * Handles POST /v1/moderations requests (OpenAI-compatible). Matches\n * fixtures by comparing the request `input` field against registered\n * patterns. First match wins; no match returns a default unflagged result.\n */\n\nimport type * as http from \"node:http\";\nimport {\n  flattenHeaders,\n  generateId,\n  isJsonObject,\n  matchesPattern,\n  normalizeTextInput,\n  resolveStrictMode,\n  strictNoMatchLogLine,\n  strictNoMatchMessage,\n  strictOverrideField,\n} from \"./helpers.js\";\nimport type { Journal } from \"./journal.js\";\nimport type { Logger } from \"./logger.js\";\n\n// ─── Moderation types ─────────────────────────────────────────────────────\n\nexport interface ModerationResult {\n  flagged: boolean;\n  categories: Record<string, boolean>;\n  category_scores?: Record<string, number>;\n}\n\nexport interface ModerationFixture {\n  match: string | RegExp;\n  result: ModerationResult;\n}\n\n/**\n * Model echoed when the caller sends no `model`.\n *\n * The real API echoes back the model the request asked for. `text-moderation-*`\n * was removed from the OpenAI API on 2025-10-27; `omni-moderation-latest` is\n * the current moderation model, so it stands in when the caller omits one.\n */\nconst DEFAULT_MODERATION_MODEL = \"omni-moderation-latest\";\n\n// ─── Default unflagged result ─────────────────────────────────────────────\n\nconst DEFAULT_RESULT: ModerationResult = {\n  flagged: false,\n  categories: {\n    sexual: false,\n    hate: false,\n    harassment: false,\n    \"self-harm\": false,\n    \"sexual/minors\": false,\n    \"hate/threatening\": false,\n    \"violence/graphic\": false,\n    \"self-harm/intent\": false,\n    \"self-harm/instructions\": false,\n    \"harassment/threatening\": false,\n    violence: false,\n    illicit: false,\n    \"illicit/violent\": false,\n  },\n  category_scores: {\n    sexual: 0,\n    hate: 0,\n    harassment: 0,\n    \"self-harm\": 0,\n    \"sexual/minors\": 0,\n    \"hate/threatening\": 0,\n    \"violence/graphic\": 0,\n    \"self-harm/intent\": 0,\n    \"self-harm/instructions\": 0,\n    \"harassment/threatening\": 0,\n    violence: 0,\n    illicit: 0,\n    \"illicit/violent\": 0,\n  },\n};\n\n// ─── Request handler ──────────────────────────────────────────────────────\n\nexport async function handleModeration(\n  req: http.IncomingMessage,\n  res: http.ServerResponse,\n  raw: string,\n  fixtures: ModerationFixture[],\n  journal: Journal,\n  defaults: { logger: Logger; strict?: boolean },\n  setCorsHeaders: (res: http.ServerResponse) => void,\n): Promise<void> {\n  const { logger } = defaults;\n  setCorsHeaders(res);\n\n  let body: { input?: string | string[]; model?: unknown };\n  try {\n    body = JSON.parse(raw) as { input?: string | string[]; model?: unknown };\n  } catch (parseErr) {\n    const detail = parseErr instanceof Error ? parseErr.message : \"unknown\";\n    journal.add({\n      method: req.method ?? \"POST\",\n      path: req.url ?? \"/v1/moderations\",\n      headers: flattenHeaders(req.headers),\n      body: null,\n      service: \"moderation\",\n      response: { status: 400, fixture: null },\n    });\n    res.writeHead(400, { \"Content-Type\": \"application/json\" });\n    res.end(\n      JSON.stringify({\n        error: {\n          message: `Malformed JSON: ${detail}`,\n          type: \"invalid_request_error\",\n          code: \"invalid_json\",\n        },\n      }),\n    );\n    return;\n  }\n\n  // Reject bodies that parsed but are not a JSON object (e.g. `null`) before\n  // touching fields — otherwise `body.input` throws a TypeError that surfaces\n  // as a 500 instead of a 400.\n  if (!isJsonObject(body)) {\n    journal.add({\n      method: req.method ?? \"POST\",\n      path: req.url ?? \"/v1/moderations\",\n      headers: flattenHeaders(req.headers),\n      body: null,\n      service: \"moderation\",\n      response: { status: 400, fixture: null },\n    });\n    res.writeHead(400, { \"Content-Type\": \"application/json\" });\n    res.end(\n      JSON.stringify({\n        error: {\n          message: \"Request body must be a JSON object\",\n          type: \"invalid_request_error\",\n        },\n      }),\n    );\n    return;\n  }\n\n  // Normalize input to a single string for matching — reject non-string\n  // inputs with 400 instead of crashing in matchesPattern()/slice() (500).\n  const rawInput: unknown = body.input ?? \"\";\n  const normalized = normalizeTextInput(rawInput);\n  if (normalized === null) {\n    journal.add({\n      method: req.method ?? \"POST\",\n      path: req.url ?? \"/v1/moderations\",\n      headers: flattenHeaders(req.headers),\n      body: null,\n      service: \"moderation\",\n      response: { status: 400, fixture: null },\n    });\n    res.writeHead(400, { \"Content-Type\": \"application/json\" });\n    res.end(\n      JSON.stringify({\n        error: {\n          message:\n            \"Invalid parameter: 'input' must be a string, an array of strings, or an array of multimodal parts\",\n          type: \"invalid_request_error\",\n          param: null,\n          code: null,\n        },\n      }),\n    );\n    return;\n  }\n  const inputText = normalized;\n\n  // Echo the requested model, like the real API. A missing (or non-string)\n  // `model` falls back to the current default rather than a removed id.\n  const requestedModel =\n    typeof body.model === \"string\" && body.model.length > 0 ? body.model : DEFAULT_MODERATION_MODEL;\n\n  // Find first matching fixture\n  let matchedResult: ModerationResult = DEFAULT_RESULT;\n  let matchedFixture: ModerationFixture | null = null;\n\n  for (const fixture of fixtures) {\n    if (matchesPattern(inputText, fixture.match)) {\n      matchedFixture = fixture;\n      matchedResult = fixture.result;\n      break;\n    }\n  }\n\n  if (matchedFixture) {\n    logger.debug(`Moderation fixture matched for input \"${inputText.slice(0, 80)}\"`);\n  } else {\n    logger.debug(\n      `No moderation fixture matched for input \"${inputText.slice(0, 80)}\" — returning unflagged`,\n    );\n  }\n\n  // Strict mode turns the lenient default (unflagged) into a no-match error,\n  // like every other fixture-matching handler. These fixtures carry no\n  // sequence/turn state, so the skipped count is always 0.\n  if (!matchedFixture && resolveStrictMode(defaults.strict, req.headers)) {\n    const strictMessage = strictNoMatchMessage(0);\n    logger.error(strictNoMatchLogLine(req.method ?? \"POST\", req.url ?? \"/v1/moderations\", 0));\n    journal.add({\n      method: req.method ?? \"POST\",\n      path: req.url ?? \"/v1/moderations\",\n      headers: flattenHeaders(req.headers),\n      body: null,\n      service: \"moderation\",\n      response: {\n        status: 503,\n        fixture: null,\n        ...strictOverrideField(defaults.strict, req.headers),\n      },\n    });\n    res.writeHead(503, { \"Content-Type\": \"application/json\" });\n    res.end(\n      JSON.stringify({\n        error: {\n          message: strictMessage,\n          type: \"invalid_request_error\",\n          code: \"no_fixture_match\",\n        },\n      }),\n    );\n    return;\n  }\n\n  journal.add({\n    method: req.method ?? \"POST\",\n    path: req.url ?? \"/v1/moderations\",\n    headers: flattenHeaders(req.headers),\n    body: null,\n    service: \"moderation\",\n    response: {\n      status: 200,\n      fixture: null,\n      ...strictOverrideField(defaults.strict, req.headers),\n    },\n  });\n\n  res.writeHead(200, { \"Content-Type\": \"application/json\" });\n  res.end(\n    JSON.stringify({\n      id: generateId(\"modr\"),\n      model: requestedModel,\n      results: [matchedResult],\n    }),\n  );\n}\n"],"mappings":";;;;;;;;;;AA2CA,MAAM,2BAA2B;AAIjC,MAAM,iBAAmC;CACvC,SAAS;CACT,YAAY;EACV,QAAQ;EACR,MAAM;EACN,YAAY;EACZ,aAAa;EACb,iBAAiB;EACjB,oBAAoB;EACpB,oBAAoB;EACpB,oBAAoB;EACpB,0BAA0B;EAC1B,0BAA0B;EAC1B,UAAU;EACV,SAAS;EACT,mBAAmB;EACpB;CACD,iBAAiB;EACf,QAAQ;EACR,MAAM;EACN,YAAY;EACZ,aAAa;EACb,iBAAiB;EACjB,oBAAoB;EACpB,oBAAoB;EACpB,oBAAoB;EACpB,0BAA0B;EAC1B,0BAA0B;EAC1B,UAAU;EACV,SAAS;EACT,mBAAmB;EACpB;CACF;AAID,eAAsB,iBACpB,KACA,KACA,KACA,UACA,SACA,UACA,gBACe;CACf,MAAM,EAAE,WAAW;AACnB,gBAAe,IAAI;CAEnB,IAAI;AACJ,KAAI;AACF,SAAO,KAAK,MAAM,IAAI;UACf,UAAU;EACjB,MAAM,SAAS,oBAAoB,QAAQ,SAAS,UAAU;AAC9D,UAAQ,IAAI;GACV,QAAQ,IAAI,UAAU;GACtB,MAAM,IAAI,OAAO;GACjB,SAASA,+BAAe,IAAI,QAAQ;GACpC,MAAM;GACN,SAAS;GACT,UAAU;IAAE,QAAQ;IAAK,SAAS;IAAM;GACzC,CAAC;AACF,MAAI,UAAU,KAAK,EAAE,gBAAgB,oBAAoB,CAAC;AAC1D,MAAI,IACF,KAAK,UAAU,EACb,OAAO;GACL,SAAS,mBAAmB;GAC5B,MAAM;GACN,MAAM;GACP,EACF,CAAC,CACH;AACD;;AAMF,KAAI,CAACC,6BAAa,KAAK,EAAE;AACvB,UAAQ,IAAI;GACV,QAAQ,IAAI,UAAU;GACtB,MAAM,IAAI,OAAO;GACjB,SAASD,+BAAe,IAAI,QAAQ;GACpC,MAAM;GACN,SAAS;GACT,UAAU;IAAE,QAAQ;IAAK,SAAS;IAAM;GACzC,CAAC;AACF,MAAI,UAAU,KAAK,EAAE,gBAAgB,oBAAoB,CAAC;AAC1D,MAAI,IACF,KAAK,UAAU,EACb,OAAO;GACL,SAAS;GACT,MAAM;GACP,EACF,CAAC,CACH;AACD;;CAMF,MAAM,aAAaE,mCADO,KAAK,SAAS,GACO;AAC/C,KAAI,eAAe,MAAM;AACvB,UAAQ,IAAI;GACV,QAAQ,IAAI,UAAU;GACtB,MAAM,IAAI,OAAO;GACjB,SAASF,+BAAe,IAAI,QAAQ;GACpC,MAAM;GACN,SAAS;GACT,UAAU;IAAE,QAAQ;IAAK,SAAS;IAAM;GACzC,CAAC;AACF,MAAI,UAAU,KAAK,EAAE,gBAAgB,oBAAoB,CAAC;AAC1D,MAAI,IACF,KAAK,UAAU,EACb,OAAO;GACL,SACE;GACF,MAAM;GACN,OAAO;GACP,MAAM;GACP,EACF,CAAC,CACH;AACD;;CAEF,MAAM,YAAY;CAIlB,MAAM,iBACJ,OAAO,KAAK,UAAU,YAAY,KAAK,MAAM,SAAS,IAAI,KAAK,QAAQ;CAGzE,IAAI,gBAAkC;CACtC,IAAI,iBAA2C;AAE/C,MAAK,MAAM,WAAW,SACpB,KAAIG,+BAAe,WAAW,QAAQ,MAAM,EAAE;AAC5C,mBAAiB;AACjB,kBAAgB,QAAQ;AACxB;;AAIJ,KAAI,eACF,QAAO,MAAM,yCAAyC,UAAU,MAAM,GAAG,GAAG,CAAC,GAAG;KAEhF,QAAO,MACL,4CAA4C,UAAU,MAAM,GAAG,GAAG,CAAC,yBACpE;AAMH,KAAI,CAAC,kBAAkBC,kCAAkB,SAAS,QAAQ,IAAI,QAAQ,EAAE;EACtE,MAAM,gBAAgBC,qCAAqB,EAAE;AAC7C,SAAO,MAAMC,qCAAqB,IAAI,UAAU,QAAQ,IAAI,OAAO,mBAAmB,EAAE,CAAC;AACzF,UAAQ,IAAI;GACV,QAAQ,IAAI,UAAU;GACtB,MAAM,IAAI,OAAO;GACjB,SAASN,+BAAe,IAAI,QAAQ;GACpC,MAAM;GACN,SAAS;GACT,UAAU;IACR,QAAQ;IACR,SAAS;IACT,GAAGO,oCAAoB,SAAS,QAAQ,IAAI,QAAQ;IACrD;GACF,CAAC;AACF,MAAI,UAAU,KAAK,EAAE,gBAAgB,oBAAoB,CAAC;AAC1D,MAAI,IACF,KAAK,UAAU,EACb,OAAO;GACL,SAAS;GACT,MAAM;GACN,MAAM;GACP,EACF,CAAC,CACH;AACD;;AAGF,SAAQ,IAAI;EACV,QAAQ,IAAI,UAAU;EACtB,MAAM,IAAI,OAAO;EACjB,SAASP,+BAAe,IAAI,QAAQ;EACpC,MAAM;EACN,SAAS;EACT,UAAU;GACR,QAAQ;GACR,SAAS;GACT,GAAGO,oCAAoB,SAAS,QAAQ,IAAI,QAAQ;GACrD;EACF,CAAC;AAEF,KAAI,UAAU,KAAK,EAAE,gBAAgB,oBAAoB,CAAC;AAC1D,KAAI,IACF,KAAK,UAAU;EACb,IAAIC,2BAAW,OAAO;EACtB,OAAO;EACP,SAAS,CAAC,cAAc;EACzB,CAAC,CACH"}
+{"version":3,"file":"moderation.cjs","names":["flattenHeaders","renderError","isJsonObject","normalizeTextInput","matchesPattern","resolveRequestDecisions","strictNoMatchMessage","strictNoMatchLogLine","strictOverrideField","generateId"],"sources":["../src/moderation.ts"],"sourcesContent":["/**\n * Moderation API support for LLMock.\n *\n * Handles POST /v1/moderations requests (OpenAI-compatible). Matches\n * fixtures by comparing the request `input` field against registered\n * patterns. First match wins; no match returns a default unflagged result.\n */\n\nimport type * as http from \"node:http\";\nimport { resolveRequestDecisions, strictOverrideField } from \"./response/policy.js\";\nimport { renderError } from \"./response/errors.js\";\nimport {\n  flattenHeaders,\n  generateId,\n  isJsonObject,\n  matchesPattern,\n  normalizeTextInput,\n  strictNoMatchLogLine,\n  strictNoMatchMessage,\n} from \"./helpers.js\";\nimport type { Journal } from \"./journal.js\";\nimport type { Logger } from \"./logger.js\";\n\n// ─── Moderation types ─────────────────────────────────────────────────────\n\nexport interface ModerationResult {\n  flagged: boolean;\n  categories: Record<string, boolean>;\n  category_scores?: Record<string, number>;\n}\n\nexport interface ModerationFixture {\n  match: string | RegExp;\n  result: ModerationResult;\n}\n\n/**\n * Model echoed when the caller sends no `model`.\n *\n * The real API echoes back the model the request asked for. `text-moderation-*`\n * was removed from the OpenAI API on 2025-10-27; `omni-moderation-latest` is\n * the current moderation model, so it stands in when the caller omits one.\n */\nconst DEFAULT_MODERATION_MODEL = \"omni-moderation-latest\";\n\n// ─── Default unflagged result ─────────────────────────────────────────────\n\nconst DEFAULT_RESULT: ModerationResult = {\n  flagged: false,\n  categories: {\n    sexual: false,\n    hate: false,\n    harassment: false,\n    \"self-harm\": false,\n    \"sexual/minors\": false,\n    \"hate/threatening\": false,\n    \"violence/graphic\": false,\n    \"self-harm/intent\": false,\n    \"self-harm/instructions\": false,\n    \"harassment/threatening\": false,\n    violence: false,\n    illicit: false,\n    \"illicit/violent\": false,\n  },\n  category_scores: {\n    sexual: 0,\n    hate: 0,\n    harassment: 0,\n    \"self-harm\": 0,\n    \"sexual/minors\": 0,\n    \"hate/threatening\": 0,\n    \"violence/graphic\": 0,\n    \"self-harm/intent\": 0,\n    \"self-harm/instructions\": 0,\n    \"harassment/threatening\": 0,\n    violence: 0,\n    illicit: 0,\n    \"illicit/violent\": 0,\n  },\n};\n\n// ─── Request handler ──────────────────────────────────────────────────────\n\nexport async function handleModeration(\n  req: http.IncomingMessage,\n  res: http.ServerResponse,\n  raw: string,\n  fixtures: ModerationFixture[],\n  journal: Journal,\n  defaults: { logger: Logger; strict?: boolean },\n  setCorsHeaders: (res: http.ServerResponse) => void,\n): Promise<void> {\n  const { logger } = defaults;\n  setCorsHeaders(res);\n\n  let body: { input?: string | string[]; model?: unknown };\n  try {\n    body = JSON.parse(raw) as { input?: string | string[]; model?: unknown };\n  } catch (parseErr) {\n    const detail = parseErr instanceof Error ? parseErr.message : \"unknown\";\n    journal.add({\n      method: req.method ?? \"POST\",\n      path: req.url ?? \"/v1/moderations\",\n      headers: flattenHeaders(req.headers),\n      body: null,\n      service: \"moderation\",\n      response: { status: 400, fixture: null },\n    });\n    res.writeHead(400, { \"Content-Type\": \"application/json\" });\n    res.end(\n      renderError(\"openai\", \"validation\", {\n        message: `Malformed JSON: ${detail}`,\n        type: \"invalid_request_error\",\n        code: \"invalid_json\",\n      }).body,\n    );\n    return;\n  }\n\n  // Reject bodies that parsed but are not a JSON object (e.g. `null`) before\n  // touching fields — otherwise `body.input` throws a TypeError that surfaces\n  // as a 500 instead of a 400.\n  if (!isJsonObject(body)) {\n    journal.add({\n      method: req.method ?? \"POST\",\n      path: req.url ?? \"/v1/moderations\",\n      headers: flattenHeaders(req.headers),\n      body: null,\n      service: \"moderation\",\n      response: { status: 400, fixture: null },\n    });\n    res.writeHead(400, { \"Content-Type\": \"application/json\" });\n    res.end(\n      renderError(\"openai\", \"validation\", {\n        message: \"Request body must be a JSON object\",\n        type: \"invalid_request_error\",\n      }).body,\n    );\n    return;\n  }\n\n  // Normalize input to a single string for matching — reject non-string\n  // inputs with 400 instead of crashing in matchesPattern()/slice() (500).\n  const rawInput: unknown = body.input ?? \"\";\n  const normalized = normalizeTextInput(rawInput);\n  if (normalized === null) {\n    journal.add({\n      method: req.method ?? \"POST\",\n      path: req.url ?? \"/v1/moderations\",\n      headers: flattenHeaders(req.headers),\n      body: null,\n      service: \"moderation\",\n      response: { status: 400, fixture: null },\n    });\n    res.writeHead(400, { \"Content-Type\": \"application/json\" });\n    res.end(\n      renderError(\"openai\", \"validation\", {\n        message:\n          \"Invalid parameter: 'input' must be a string, an array of strings, or an array of multimodal parts\",\n        type: \"invalid_request_error\",\n        param: null,\n        code: null,\n        includeParam: true,\n      }).body,\n    );\n    return;\n  }\n  const inputText = normalized;\n\n  // Echo the requested model, like the real API. A missing (or non-string)\n  // `model` falls back to the current default rather than a removed id.\n  const requestedModel =\n    typeof body.model === \"string\" && body.model.length > 0 ? body.model : DEFAULT_MODERATION_MODEL;\n\n  // Find first matching fixture\n  let matchedResult: ModerationResult = DEFAULT_RESULT;\n  let matchedFixture: ModerationFixture | null = null;\n\n  for (const fixture of fixtures) {\n    if (matchesPattern(inputText, fixture.match)) {\n      matchedFixture = fixture;\n      matchedResult = fixture.result;\n      break;\n    }\n  }\n\n  if (matchedFixture) {\n    logger.debug(`Moderation fixture matched for input \"${inputText.slice(0, 80)}\"`);\n  } else {\n    logger.debug(\n      `No moderation fixture matched for input \"${inputText.slice(0, 80)}\" — returning unflagged`,\n    );\n  }\n\n  // Strict mode turns the lenient default (unflagged) into a no-match error,\n  // like every other fixture-matching handler. These fixtures carry no\n  // sequence/turn state, so the skipped count is always 0.\n  if (!matchedFixture && resolveRequestDecisions(defaults.strict, req.headers).fixtureMiss) {\n    const strictMessage = strictNoMatchMessage(0);\n    logger.error(strictNoMatchLogLine(req.method ?? \"POST\", req.url ?? \"/v1/moderations\", 0));\n    journal.add({\n      method: req.method ?? \"POST\",\n      path: req.url ?? \"/v1/moderations\",\n      headers: flattenHeaders(req.headers),\n      body: null,\n      service: \"moderation\",\n      response: {\n        status: 503,\n        fixture: null,\n        ...strictOverrideField(defaults.strict, req.headers),\n      },\n    });\n    res.writeHead(503, { \"Content-Type\": \"application/json\" });\n    res.end(\n      renderError(\"openai\", \"strict-miss\", {\n        message: strictMessage,\n        type: \"invalid_request_error\",\n        code: \"no_fixture_match\",\n      }).body,\n    );\n    return;\n  }\n\n  journal.add({\n    method: req.method ?? \"POST\",\n    path: req.url ?? \"/v1/moderations\",\n    headers: flattenHeaders(req.headers),\n    body: null,\n    service: \"moderation\",\n    response: {\n      status: 200,\n      fixture: null,\n      ...strictOverrideField(defaults.strict, req.headers),\n    },\n  });\n\n  res.writeHead(200, { \"Content-Type\": \"application/json\" });\n  res.end(\n    JSON.stringify({\n      id: generateId(\"modr\"),\n      model: requestedModel,\n      results: [matchedResult],\n    }),\n  );\n}\n"],"mappings":";;;;;;;;;;;;AA2CA,MAAM,2BAA2B;AAIjC,MAAM,iBAAmC;CACvC,SAAS;CACT,YAAY;EACV,QAAQ;EACR,MAAM;EACN,YAAY;EACZ,aAAa;EACb,iBAAiB;EACjB,oBAAoB;EACpB,oBAAoB;EACpB,oBAAoB;EACpB,0BAA0B;EAC1B,0BAA0B;EAC1B,UAAU;EACV,SAAS;EACT,mBAAmB;EACpB;CACD,iBAAiB;EACf,QAAQ;EACR,MAAM;EACN,YAAY;EACZ,aAAa;EACb,iBAAiB;EACjB,oBAAoB;EACpB,oBAAoB;EACpB,oBAAoB;EACpB,0BAA0B;EAC1B,0BAA0B;EAC1B,UAAU;EACV,SAAS;EACT,mBAAmB;EACpB;CACF;AAID,eAAsB,iBACpB,KACA,KACA,KACA,UACA,SACA,UACA,gBACe;CACf,MAAM,EAAE,WAAW;AACnB,gBAAe,IAAI;CAEnB,IAAI;AACJ,KAAI;AACF,SAAO,KAAK,MAAM,IAAI;UACf,UAAU;EACjB,MAAM,SAAS,oBAAoB,QAAQ,SAAS,UAAU;AAC9D,UAAQ,IAAI;GACV,QAAQ,IAAI,UAAU;GACtB,MAAM,IAAI,OAAO;GACjB,SAASA,+BAAe,IAAI,QAAQ;GACpC,MAAM;GACN,SAAS;GACT,UAAU;IAAE,QAAQ;IAAK,SAAS;IAAM;GACzC,CAAC;AACF,MAAI,UAAU,KAAK,EAAE,gBAAgB,oBAAoB,CAAC;AAC1D,MAAI,IACFC,2BAAY,UAAU,cAAc;GAClC,SAAS,mBAAmB;GAC5B,MAAM;GACN,MAAM;GACP,CAAC,CAAC,KACJ;AACD;;AAMF,KAAI,CAACC,6BAAa,KAAK,EAAE;AACvB,UAAQ,IAAI;GACV,QAAQ,IAAI,UAAU;GACtB,MAAM,IAAI,OAAO;GACjB,SAASF,+BAAe,IAAI,QAAQ;GACpC,MAAM;GACN,SAAS;GACT,UAAU;IAAE,QAAQ;IAAK,SAAS;IAAM;GACzC,CAAC;AACF,MAAI,UAAU,KAAK,EAAE,gBAAgB,oBAAoB,CAAC;AAC1D,MAAI,IACFC,2BAAY,UAAU,cAAc;GAClC,SAAS;GACT,MAAM;GACP,CAAC,CAAC,KACJ;AACD;;CAMF,MAAM,aAAaE,mCADO,KAAK,SAAS,GACO;AAC/C,KAAI,eAAe,MAAM;AACvB,UAAQ,IAAI;GACV,QAAQ,IAAI,UAAU;GACtB,MAAM,IAAI,OAAO;GACjB,SAASH,+BAAe,IAAI,QAAQ;GACpC,MAAM;GACN,SAAS;GACT,UAAU;IAAE,QAAQ;IAAK,SAAS;IAAM;GACzC,CAAC;AACF,MAAI,UAAU,KAAK,EAAE,gBAAgB,oBAAoB,CAAC;AAC1D,MAAI,IACFC,2BAAY,UAAU,cAAc;GAClC,SACE;GACF,MAAM;GACN,OAAO;GACP,MAAM;GACN,cAAc;GACf,CAAC,CAAC,KACJ;AACD;;CAEF,MAAM,YAAY;CAIlB,MAAM,iBACJ,OAAO,KAAK,UAAU,YAAY,KAAK,MAAM,SAAS,IAAI,KAAK,QAAQ;CAGzE,IAAI,gBAAkC;CACtC,IAAI,iBAA2C;AAE/C,MAAK,MAAM,WAAW,SACpB,KAAIG,+BAAe,WAAW,QAAQ,MAAM,EAAE;AAC5C,mBAAiB;AACjB,kBAAgB,QAAQ;AACxB;;AAIJ,KAAI,eACF,QAAO,MAAM,yCAAyC,UAAU,MAAM,GAAG,GAAG,CAAC,GAAG;KAEhF,QAAO,MACL,4CAA4C,UAAU,MAAM,GAAG,GAAG,CAAC,yBACpE;AAMH,KAAI,CAAC,kBAAkBC,uCAAwB,SAAS,QAAQ,IAAI,QAAQ,CAAC,aAAa;EACxF,MAAM,gBAAgBC,qCAAqB,EAAE;AAC7C,SAAO,MAAMC,qCAAqB,IAAI,UAAU,QAAQ,IAAI,OAAO,mBAAmB,EAAE,CAAC;AACzF,UAAQ,IAAI;GACV,QAAQ,IAAI,UAAU;GACtB,MAAM,IAAI,OAAO;GACjB,SAASP,+BAAe,IAAI,QAAQ;GACpC,MAAM;GACN,SAAS;GACT,UAAU;IACR,QAAQ;IACR,SAAS;IACT,GAAGQ,mCAAoB,SAAS,QAAQ,IAAI,QAAQ;IACrD;GACF,CAAC;AACF,MAAI,UAAU,KAAK,EAAE,gBAAgB,oBAAoB,CAAC;AAC1D,MAAI,IACFP,2BAAY,UAAU,eAAe;GACnC,SAAS;GACT,MAAM;GACN,MAAM;GACP,CAAC,CAAC,KACJ;AACD;;AAGF,SAAQ,IAAI;EACV,QAAQ,IAAI,UAAU;EACtB,MAAM,IAAI,OAAO;EACjB,SAASD,+BAAe,IAAI,QAAQ;EACpC,MAAM;EACN,SAAS;EACT,UAAU;GACR,QAAQ;GACR,SAAS;GACT,GAAGQ,mCAAoB,SAAS,QAAQ,IAAI,QAAQ;GACrD;EACF,CAAC;AAEF,KAAI,UAAU,KAAK,EAAE,gBAAgB,oBAAoB,CAAC;AAC1D,KAAI,IACF,KAAK,UAAU;EACb,IAAIC,2BAAW,OAAO;EACtB,OAAO;EACP,SAAS,CAAC,cAAc;EACzB,CAAC,CACH"}

package/dist/moderation.js

@@ -1,4 +1,6 @@
-import { flattenHeaders, generateId, isJsonObject, matchesPattern, normalizeTextInput, resolveStrictMode, strictNoMatchLogLine, strictNoMatchMessage, strictOverrideField } from "./helpers.js";
+import { renderError } from "./response/errors.js";
+import { resolveRequestDecisions, strictOverrideField } from "./response/policy.js";
+import { flattenHeaders, generateId, isJsonObject, matchesPattern, normalizeTextInput, strictNoMatchLogLine, strictNoMatchMessage } from "./helpers.js";
 
 //#region src/moderation.ts
 /**
@@ -62,11 +64,11 @@ async function handleModeration(req, res, raw, fixtures, journal, defaults, setC
 			}
 		});
 		res.writeHead(400, { "Content-Type": "application/json" });
-		res.end(JSON.stringify({ error: {
+		res.end(renderError("openai", "validation", {
 			message: `Malformed JSON: ${detail}`,
 			type: "invalid_request_error",
 			code: "invalid_json"
-		} }));
+		}).body);
 		return;
 	}
 	if (!isJsonObject(body)) {
@@ -82,10 +84,10 @@ async function handleModeration(req, res, raw, fixtures, journal, defaults, setC
 			}
 		});
 		res.writeHead(400, { "Content-Type": "application/json" });
-		res.end(JSON.stringify({ error: {
+		res.end(renderError("openai", "validation", {
 			message: "Request body must be a JSON object",
 			type: "invalid_request_error"
-		} }));
+		}).body);
 		return;
 	}
 	const normalized = normalizeTextInput(body.input ?? "");
@@ -102,12 +104,13 @@ async function handleModeration(req, res, raw, fixtures, journal, defaults, setC
 			}
 		});
 		res.writeHead(400, { "Content-Type": "application/json" });
-		res.end(JSON.stringify({ error: {
+		res.end(renderError("openai", "validation", {
 			message: "Invalid parameter: 'input' must be a string, an array of strings, or an array of multimodal parts",
 			type: "invalid_request_error",
 			param: null,
-			code: null
-		} }));
+			code: null,
+			includeParam: true
+		}).body);
 		return;
 	}
 	const inputText = normalized;
@@ -121,7 +124,7 @@ async function handleModeration(req, res, raw, fixtures, journal, defaults, setC
 	}
 	if (matchedFixture) logger.debug(`Moderation fixture matched for input "${inputText.slice(0, 80)}"`);
 	else logger.debug(`No moderation fixture matched for input "${inputText.slice(0, 80)}" — returning unflagged`);
-	if (!matchedFixture && resolveStrictMode(defaults.strict, req.headers)) {
+	if (!matchedFixture && resolveRequestDecisions(defaults.strict, req.headers).fixtureMiss) {
 		const strictMessage = strictNoMatchMessage(0);
 		logger.error(strictNoMatchLogLine(req.method ?? "POST", req.url ?? "/v1/moderations", 0));
 		journal.add({
@@ -137,11 +140,11 @@ async function handleModeration(req, res, raw, fixtures, journal, defaults, setC
 			}
 		});
 		res.writeHead(503, { "Content-Type": "application/json" });
-		res.end(JSON.stringify({ error: {
+		res.end(renderError("openai", "strict-miss", {
 			message: strictMessage,
 			type: "invalid_request_error",
 			code: "no_fixture_match"
-		} }));
+		}).body);
 		return;
 	}
 	journal.add({

package/dist/moderation.js.map

@@ -1 +1 @@
-{"version":3,"file":"moderation.js","names":[],"sources":["../src/moderation.ts"],"sourcesContent":["/**\n * Moderation API support for LLMock.\n *\n * Handles POST /v1/moderations requests (OpenAI-compatible). Matches\n * fixtures by comparing the request `input` field against registered\n * patterns. First match wins; no match returns a default unflagged result.\n */\n\nimport type * as http from \"node:http\";\nimport {\n  flattenHeaders,\n  generateId,\n  isJsonObject,\n  matchesPattern,\n  normalizeTextInput,\n  resolveStrictMode,\n  strictNoMatchLogLine,\n  strictNoMatchMessage,\n  strictOverrideField,\n} from \"./helpers.js\";\nimport type { Journal } from \"./journal.js\";\nimport type { Logger } from \"./logger.js\";\n\n// ─── Moderation types ─────────────────────────────────────────────────────\n\nexport interface ModerationResult {\n  flagged: boolean;\n  categories: Record<string, boolean>;\n  category_scores?: Record<string, number>;\n}\n\nexport interface ModerationFixture {\n  match: string | RegExp;\n  result: ModerationResult;\n}\n\n/**\n * Model echoed when the caller sends no `model`.\n *\n * The real API echoes back the model the request asked for. `text-moderation-*`\n * was removed from the OpenAI API on 2025-10-27; `omni-moderation-latest` is\n * the current moderation model, so it stands in when the caller omits one.\n */\nconst DEFAULT_MODERATION_MODEL = \"omni-moderation-latest\";\n\n// ─── Default unflagged result ─────────────────────────────────────────────\n\nconst DEFAULT_RESULT: ModerationResult = {\n  flagged: false,\n  categories: {\n    sexual: false,\n    hate: false,\n    harassment: false,\n    \"self-harm\": false,\n    \"sexual/minors\": false,\n    \"hate/threatening\": false,\n    \"violence/graphic\": false,\n    \"self-harm/intent\": false,\n    \"self-harm/instructions\": false,\n    \"harassment/threatening\": false,\n    violence: false,\n    illicit: false,\n    \"illicit/violent\": false,\n  },\n  category_scores: {\n    sexual: 0,\n    hate: 0,\n    harassment: 0,\n    \"self-harm\": 0,\n    \"sexual/minors\": 0,\n    \"hate/threatening\": 0,\n    \"violence/graphic\": 0,\n    \"self-harm/intent\": 0,\n    \"self-harm/instructions\": 0,\n    \"harassment/threatening\": 0,\n    violence: 0,\n    illicit: 0,\n    \"illicit/violent\": 0,\n  },\n};\n\n// ─── Request handler ──────────────────────────────────────────────────────\n\nexport async function handleModeration(\n  req: http.IncomingMessage,\n  res: http.ServerResponse,\n  raw: string,\n  fixtures: ModerationFixture[],\n  journal: Journal,\n  defaults: { logger: Logger; strict?: boolean },\n  setCorsHeaders: (res: http.ServerResponse) => void,\n): Promise<void> {\n  const { logger } = defaults;\n  setCorsHeaders(res);\n\n  let body: { input?: string | string[]; model?: unknown };\n  try {\n    body = JSON.parse(raw) as { input?: string | string[]; model?: unknown };\n  } catch (parseErr) {\n    const detail = parseErr instanceof Error ? parseErr.message : \"unknown\";\n    journal.add({\n      method: req.method ?? \"POST\",\n      path: req.url ?? \"/v1/moderations\",\n      headers: flattenHeaders(req.headers),\n      body: null,\n      service: \"moderation\",\n      response: { status: 400, fixture: null },\n    });\n    res.writeHead(400, { \"Content-Type\": \"application/json\" });\n    res.end(\n      JSON.stringify({\n        error: {\n          message: `Malformed JSON: ${detail}`,\n          type: \"invalid_request_error\",\n          code: \"invalid_json\",\n        },\n      }),\n    );\n    return;\n  }\n\n  // Reject bodies that parsed but are not a JSON object (e.g. `null`) before\n  // touching fields — otherwise `body.input` throws a TypeError that surfaces\n  // as a 500 instead of a 400.\n  if (!isJsonObject(body)) {\n    journal.add({\n      method: req.method ?? \"POST\",\n      path: req.url ?? \"/v1/moderations\",\n      headers: flattenHeaders(req.headers),\n      body: null,\n      service: \"moderation\",\n      response: { status: 400, fixture: null },\n    });\n    res.writeHead(400, { \"Content-Type\": \"application/json\" });\n    res.end(\n      JSON.stringify({\n        error: {\n          message: \"Request body must be a JSON object\",\n          type: \"invalid_request_error\",\n        },\n      }),\n    );\n    return;\n  }\n\n  // Normalize input to a single string for matching — reject non-string\n  // inputs with 400 instead of crashing in matchesPattern()/slice() (500).\n  const rawInput: unknown = body.input ?? \"\";\n  const normalized = normalizeTextInput(rawInput);\n  if (normalized === null) {\n    journal.add({\n      method: req.method ?? \"POST\",\n      path: req.url ?? \"/v1/moderations\",\n      headers: flattenHeaders(req.headers),\n      body: null,\n      service: \"moderation\",\n      response: { status: 400, fixture: null },\n    });\n    res.writeHead(400, { \"Content-Type\": \"application/json\" });\n    res.end(\n      JSON.stringify({\n        error: {\n          message:\n            \"Invalid parameter: 'input' must be a string, an array of strings, or an array of multimodal parts\",\n          type: \"invalid_request_error\",\n          param: null,\n          code: null,\n        },\n      }),\n    );\n    return;\n  }\n  const inputText = normalized;\n\n  // Echo the requested model, like the real API. A missing (or non-string)\n  // `model` falls back to the current default rather than a removed id.\n  const requestedModel =\n    typeof body.model === \"string\" && body.model.length > 0 ? body.model : DEFAULT_MODERATION_MODEL;\n\n  // Find first matching fixture\n  let matchedResult: ModerationResult = DEFAULT_RESULT;\n  let matchedFixture: ModerationFixture | null = null;\n\n  for (const fixture of fixtures) {\n    if (matchesPattern(inputText, fixture.match)) {\n      matchedFixture = fixture;\n      matchedResult = fixture.result;\n      break;\n    }\n  }\n\n  if (matchedFixture) {\n    logger.debug(`Moderation fixture matched for input \"${inputText.slice(0, 80)}\"`);\n  } else {\n    logger.debug(\n      `No moderation fixture matched for input \"${inputText.slice(0, 80)}\" — returning unflagged`,\n    );\n  }\n\n  // Strict mode turns the lenient default (unflagged) into a no-match error,\n  // like every other fixture-matching handler. These fixtures carry no\n  // sequence/turn state, so the skipped count is always 0.\n  if (!matchedFixture && resolveStrictMode(defaults.strict, req.headers)) {\n    const strictMessage = strictNoMatchMessage(0);\n    logger.error(strictNoMatchLogLine(req.method ?? \"POST\", req.url ?? \"/v1/moderations\", 0));\n    journal.add({\n      method: req.method ?? \"POST\",\n      path: req.url ?? \"/v1/moderations\",\n      headers: flattenHeaders(req.headers),\n      body: null,\n      service: \"moderation\",\n      response: {\n        status: 503,\n        fixture: null,\n        ...strictOverrideField(defaults.strict, req.headers),\n      },\n    });\n    res.writeHead(503, { \"Content-Type\": \"application/json\" });\n    res.end(\n      JSON.stringify({\n        error: {\n          message: strictMessage,\n          type: \"invalid_request_error\",\n          code: \"no_fixture_match\",\n        },\n      }),\n    );\n    return;\n  }\n\n  journal.add({\n    method: req.method ?? \"POST\",\n    path: req.url ?? \"/v1/moderations\",\n    headers: flattenHeaders(req.headers),\n    body: null,\n    service: \"moderation\",\n    response: {\n      status: 200,\n      fixture: null,\n      ...strictOverrideField(defaults.strict, req.headers),\n    },\n  });\n\n  res.writeHead(200, { \"Content-Type\": \"application/json\" });\n  res.end(\n    JSON.stringify({\n      id: generateId(\"modr\"),\n      model: requestedModel,\n      results: [matchedResult],\n    }),\n  );\n}\n"],"mappings":";;;;;;;;;;AA2CA,MAAM,2BAA2B;AAIjC,MAAM,iBAAmC;CACvC,SAAS;CACT,YAAY;EACV,QAAQ;EACR,MAAM;EACN,YAAY;EACZ,aAAa;EACb,iBAAiB;EACjB,oBAAoB;EACpB,oBAAoB;EACpB,oBAAoB;EACpB,0BAA0B;EAC1B,0BAA0B;EAC1B,UAAU;EACV,SAAS;EACT,mBAAmB;EACpB;CACD,iBAAiB;EACf,QAAQ;EACR,MAAM;EACN,YAAY;EACZ,aAAa;EACb,iBAAiB;EACjB,oBAAoB;EACpB,oBAAoB;EACpB,oBAAoB;EACpB,0BAA0B;EAC1B,0BAA0B;EAC1B,UAAU;EACV,SAAS;EACT,mBAAmB;EACpB;CACF;AAID,eAAsB,iBACpB,KACA,KACA,KACA,UACA,SACA,UACA,gBACe;CACf,MAAM,EAAE,WAAW;AACnB,gBAAe,IAAI;CAEnB,IAAI;AACJ,KAAI;AACF,SAAO,KAAK,MAAM,IAAI;UACf,UAAU;EACjB,MAAM,SAAS,oBAAoB,QAAQ,SAAS,UAAU;AAC9D,UAAQ,IAAI;GACV,QAAQ,IAAI,UAAU;GACtB,MAAM,IAAI,OAAO;GACjB,SAAS,eAAe,IAAI,QAAQ;GACpC,MAAM;GACN,SAAS;GACT,UAAU;IAAE,QAAQ;IAAK,SAAS;IAAM;GACzC,CAAC;AACF,MAAI,UAAU,KAAK,EAAE,gBAAgB,oBAAoB,CAAC;AAC1D,MAAI,IACF,KAAK,UAAU,EACb,OAAO;GACL,SAAS,mBAAmB;GAC5B,MAAM;GACN,MAAM;GACP,EACF,CAAC,CACH;AACD;;AAMF,KAAI,CAAC,aAAa,KAAK,EAAE;AACvB,UAAQ,IAAI;GACV,QAAQ,IAAI,UAAU;GACtB,MAAM,IAAI,OAAO;GACjB,SAAS,eAAe,IAAI,QAAQ;GACpC,MAAM;GACN,SAAS;GACT,UAAU;IAAE,QAAQ;IAAK,SAAS;IAAM;GACzC,CAAC;AACF,MAAI,UAAU,KAAK,EAAE,gBAAgB,oBAAoB,CAAC;AAC1D,MAAI,IACF,KAAK,UAAU,EACb,OAAO;GACL,SAAS;GACT,MAAM;GACP,EACF,CAAC,CACH;AACD;;CAMF,MAAM,aAAa,mBADO,KAAK,SAAS,GACO;AAC/C,KAAI,eAAe,MAAM;AACvB,UAAQ,IAAI;GACV,QAAQ,IAAI,UAAU;GACtB,MAAM,IAAI,OAAO;GACjB,SAAS,eAAe,IAAI,QAAQ;GACpC,MAAM;GACN,SAAS;GACT,UAAU;IAAE,QAAQ;IAAK,SAAS;IAAM;GACzC,CAAC;AACF,MAAI,UAAU,KAAK,EAAE,gBAAgB,oBAAoB,CAAC;AAC1D,MAAI,IACF,KAAK,UAAU,EACb,OAAO;GACL,SACE;GACF,MAAM;GACN,OAAO;GACP,MAAM;GACP,EACF,CAAC,CACH;AACD;;CAEF,MAAM,YAAY;CAIlB,MAAM,iBACJ,OAAO,KAAK,UAAU,YAAY,KAAK,MAAM,SAAS,IAAI,KAAK,QAAQ;CAGzE,IAAI,gBAAkC;CACtC,IAAI,iBAA2C;AAE/C,MAAK,MAAM,WAAW,SACpB,KAAI,eAAe,WAAW,QAAQ,MAAM,EAAE;AAC5C,mBAAiB;AACjB,kBAAgB,QAAQ;AACxB;;AAIJ,KAAI,eACF,QAAO,MAAM,yCAAyC,UAAU,MAAM,GAAG,GAAG,CAAC,GAAG;KAEhF,QAAO,MACL,4CAA4C,UAAU,MAAM,GAAG,GAAG,CAAC,yBACpE;AAMH,KAAI,CAAC,kBAAkB,kBAAkB,SAAS,QAAQ,IAAI,QAAQ,EAAE;EACtE,MAAM,gBAAgB,qBAAqB,EAAE;AAC7C,SAAO,MAAM,qBAAqB,IAAI,UAAU,QAAQ,IAAI,OAAO,mBAAmB,EAAE,CAAC;AACzF,UAAQ,IAAI;GACV,QAAQ,IAAI,UAAU;GACtB,MAAM,IAAI,OAAO;GACjB,SAAS,eAAe,IAAI,QAAQ;GACpC,MAAM;GACN,SAAS;GACT,UAAU;IACR,QAAQ;IACR,SAAS;IACT,GAAG,oBAAoB,SAAS,QAAQ,IAAI,QAAQ;IACrD;GACF,CAAC;AACF,MAAI,UAAU,KAAK,EAAE,gBAAgB,oBAAoB,CAAC;AAC1D,MAAI,IACF,KAAK,UAAU,EACb,OAAO;GACL,SAAS;GACT,MAAM;GACN,MAAM;GACP,EACF,CAAC,CACH;AACD;;AAGF,SAAQ,IAAI;EACV,QAAQ,IAAI,UAAU;EACtB,MAAM,IAAI,OAAO;EACjB,SAAS,eAAe,IAAI,QAAQ;EACpC,MAAM;EACN,SAAS;EACT,UAAU;GACR,QAAQ;GACR,SAAS;GACT,GAAG,oBAAoB,SAAS,QAAQ,IAAI,QAAQ;GACrD;EACF,CAAC;AAEF,KAAI,UAAU,KAAK,EAAE,gBAAgB,oBAAoB,CAAC;AAC1D,KAAI,IACF,KAAK,UAAU;EACb,IAAI,WAAW,OAAO;EACtB,OAAO;EACP,SAAS,CAAC,cAAc;EACzB,CAAC,CACH"}
+{"version":3,"file":"moderation.js","names":[],"sources":["../src/moderation.ts"],"sourcesContent":["/**\n * Moderation API support for LLMock.\n *\n * Handles POST /v1/moderations requests (OpenAI-compatible). Matches\n * fixtures by comparing the request `input` field against registered\n * patterns. First match wins; no match returns a default unflagged result.\n */\n\nimport type * as http from \"node:http\";\nimport { resolveRequestDecisions, strictOverrideField } from \"./response/policy.js\";\nimport { renderError } from \"./response/errors.js\";\nimport {\n  flattenHeaders,\n  generateId,\n  isJsonObject,\n  matchesPattern,\n  normalizeTextInput,\n  strictNoMatchLogLine,\n  strictNoMatchMessage,\n} from \"./helpers.js\";\nimport type { Journal } from \"./journal.js\";\nimport type { Logger } from \"./logger.js\";\n\n// ─── Moderation types ─────────────────────────────────────────────────────\n\nexport interface ModerationResult {\n  flagged: boolean;\n  categories: Record<string, boolean>;\n  category_scores?: Record<string, number>;\n}\n\nexport interface ModerationFixture {\n  match: string | RegExp;\n  result: ModerationResult;\n}\n\n/**\n * Model echoed when the caller sends no `model`.\n *\n * The real API echoes back the model the request asked for. `text-moderation-*`\n * was removed from the OpenAI API on 2025-10-27; `omni-moderation-latest` is\n * the current moderation model, so it stands in when the caller omits one.\n */\nconst DEFAULT_MODERATION_MODEL = \"omni-moderation-latest\";\n\n// ─── Default unflagged result ─────────────────────────────────────────────\n\nconst DEFAULT_RESULT: ModerationResult = {\n  flagged: false,\n  categories: {\n    sexual: false,\n    hate: false,\n    harassment: false,\n    \"self-harm\": false,\n    \"sexual/minors\": false,\n    \"hate/threatening\": false,\n    \"violence/graphic\": false,\n    \"self-harm/intent\": false,\n    \"self-harm/instructions\": false,\n    \"harassment/threatening\": false,\n    violence: false,\n    illicit: false,\n    \"illicit/violent\": false,\n  },\n  category_scores: {\n    sexual: 0,\n    hate: 0,\n    harassment: 0,\n    \"self-harm\": 0,\n    \"sexual/minors\": 0,\n    \"hate/threatening\": 0,\n    \"violence/graphic\": 0,\n    \"self-harm/intent\": 0,\n    \"self-harm/instructions\": 0,\n    \"harassment/threatening\": 0,\n    violence: 0,\n    illicit: 0,\n    \"illicit/violent\": 0,\n  },\n};\n\n// ─── Request handler ──────────────────────────────────────────────────────\n\nexport async function handleModeration(\n  req: http.IncomingMessage,\n  res: http.ServerResponse,\n  raw: string,\n  fixtures: ModerationFixture[],\n  journal: Journal,\n  defaults: { logger: Logger; strict?: boolean },\n  setCorsHeaders: (res: http.ServerResponse) => void,\n): Promise<void> {\n  const { logger } = defaults;\n  setCorsHeaders(res);\n\n  let body: { input?: string | string[]; model?: unknown };\n  try {\n    body = JSON.parse(raw) as { input?: string | string[]; model?: unknown };\n  } catch (parseErr) {\n    const detail = parseErr instanceof Error ? parseErr.message : \"unknown\";\n    journal.add({\n      method: req.method ?? \"POST\",\n      path: req.url ?? \"/v1/moderations\",\n      headers: flattenHeaders(req.headers),\n      body: null,\n      service: \"moderation\",\n      response: { status: 400, fixture: null },\n    });\n    res.writeHead(400, { \"Content-Type\": \"application/json\" });\n    res.end(\n      renderError(\"openai\", \"validation\", {\n        message: `Malformed JSON: ${detail}`,\n        type: \"invalid_request_error\",\n        code: \"invalid_json\",\n      }).body,\n    );\n    return;\n  }\n\n  // Reject bodies that parsed but are not a JSON object (e.g. `null`) before\n  // touching fields — otherwise `body.input` throws a TypeError that surfaces\n  // as a 500 instead of a 400.\n  if (!isJsonObject(body)) {\n    journal.add({\n      method: req.method ?? \"POST\",\n      path: req.url ?? \"/v1/moderations\",\n      headers: flattenHeaders(req.headers),\n      body: null,\n      service: \"moderation\",\n      response: { status: 400, fixture: null },\n    });\n    res.writeHead(400, { \"Content-Type\": \"application/json\" });\n    res.end(\n      renderError(\"openai\", \"validation\", {\n        message: \"Request body must be a JSON object\",\n        type: \"invalid_request_error\",\n      }).body,\n    );\n    return;\n  }\n\n  // Normalize input to a single string for matching — reject non-string\n  // inputs with 400 instead of crashing in matchesPattern()/slice() (500).\n  const rawInput: unknown = body.input ?? \"\";\n  const normalized = normalizeTextInput(rawInput);\n  if (normalized === null) {\n    journal.add({\n      method: req.method ?? \"POST\",\n      path: req.url ?? \"/v1/moderations\",\n      headers: flattenHeaders(req.headers),\n      body: null,\n      service: \"moderation\",\n      response: { status: 400, fixture: null },\n    });\n    res.writeHead(400, { \"Content-Type\": \"application/json\" });\n    res.end(\n      renderError(\"openai\", \"validation\", {\n        message:\n          \"Invalid parameter: 'input' must be a string, an array of strings, or an array of multimodal parts\",\n        type: \"invalid_request_error\",\n        param: null,\n        code: null,\n        includeParam: true,\n      }).body,\n    );\n    return;\n  }\n  const inputText = normalized;\n\n  // Echo the requested model, like the real API. A missing (or non-string)\n  // `model` falls back to the current default rather than a removed id.\n  const requestedModel =\n    typeof body.model === \"string\" && body.model.length > 0 ? body.model : DEFAULT_MODERATION_MODEL;\n\n  // Find first matching fixture\n  let matchedResult: ModerationResult = DEFAULT_RESULT;\n  let matchedFixture: ModerationFixture | null = null;\n\n  for (const fixture of fixtures) {\n    if (matchesPattern(inputText, fixture.match)) {\n      matchedFixture = fixture;\n      matchedResult = fixture.result;\n      break;\n    }\n  }\n\n  if (matchedFixture) {\n    logger.debug(`Moderation fixture matched for input \"${inputText.slice(0, 80)}\"`);\n  } else {\n    logger.debug(\n      `No moderation fixture matched for input \"${inputText.slice(0, 80)}\" — returning unflagged`,\n    );\n  }\n\n  // Strict mode turns the lenient default (unflagged) into a no-match error,\n  // like every other fixture-matching handler. These fixtures carry no\n  // sequence/turn state, so the skipped count is always 0.\n  if (!matchedFixture && resolveRequestDecisions(defaults.strict, req.headers).fixtureMiss) {\n    const strictMessage = strictNoMatchMessage(0);\n    logger.error(strictNoMatchLogLine(req.method ?? \"POST\", req.url ?? \"/v1/moderations\", 0));\n    journal.add({\n      method: req.method ?? \"POST\",\n      path: req.url ?? \"/v1/moderations\",\n      headers: flattenHeaders(req.headers),\n      body: null,\n      service: \"moderation\",\n      response: {\n        status: 503,\n        fixture: null,\n        ...strictOverrideField(defaults.strict, req.headers),\n      },\n    });\n    res.writeHead(503, { \"Content-Type\": \"application/json\" });\n    res.end(\n      renderError(\"openai\", \"strict-miss\", {\n        message: strictMessage,\n        type: \"invalid_request_error\",\n        code: \"no_fixture_match\",\n      }).body,\n    );\n    return;\n  }\n\n  journal.add({\n    method: req.method ?? \"POST\",\n    path: req.url ?? \"/v1/moderations\",\n    headers: flattenHeaders(req.headers),\n    body: null,\n    service: \"moderation\",\n    response: {\n      status: 200,\n      fixture: null,\n      ...strictOverrideField(defaults.strict, req.headers),\n    },\n  });\n\n  res.writeHead(200, { \"Content-Type\": \"application/json\" });\n  res.end(\n    JSON.stringify({\n      id: generateId(\"modr\"),\n      model: requestedModel,\n      results: [matchedResult],\n    }),\n  );\n}\n"],"mappings":";;;;;;;;;;;;AA2CA,MAAM,2BAA2B;AAIjC,MAAM,iBAAmC;CACvC,SAAS;CACT,YAAY;EACV,QAAQ;EACR,MAAM;EACN,YAAY;EACZ,aAAa;EACb,iBAAiB;EACjB,oBAAoB;EACpB,oBAAoB;EACpB,oBAAoB;EACpB,0BAA0B;EAC1B,0BAA0B;EAC1B,UAAU;EACV,SAAS;EACT,mBAAmB;EACpB;CACD,iBAAiB;EACf,QAAQ;EACR,MAAM;EACN,YAAY;EACZ,aAAa;EACb,iBAAiB;EACjB,oBAAoB;EACpB,oBAAoB;EACpB,oBAAoB;EACpB,0BAA0B;EAC1B,0BAA0B;EAC1B,UAAU;EACV,SAAS;EACT,mBAAmB;EACpB;CACF;AAID,eAAsB,iBACpB,KACA,KACA,KACA,UACA,SACA,UACA,gBACe;CACf,MAAM,EAAE,WAAW;AACnB,gBAAe,IAAI;CAEnB,IAAI;AACJ,KAAI;AACF,SAAO,KAAK,MAAM,IAAI;UACf,UAAU;EACjB,MAAM,SAAS,oBAAoB,QAAQ,SAAS,UAAU;AAC9D,UAAQ,IAAI;GACV,QAAQ,IAAI,UAAU;GACtB,MAAM,IAAI,OAAO;GACjB,SAAS,eAAe,IAAI,QAAQ;GACpC,MAAM;GACN,SAAS;GACT,UAAU;IAAE,QAAQ;IAAK,SAAS;IAAM;GACzC,CAAC;AACF,MAAI,UAAU,KAAK,EAAE,gBAAgB,oBAAoB,CAAC;AAC1D,MAAI,IACF,YAAY,UAAU,cAAc;GAClC,SAAS,mBAAmB;GAC5B,MAAM;GACN,MAAM;GACP,CAAC,CAAC,KACJ;AACD;;AAMF,KAAI,CAAC,aAAa,KAAK,EAAE;AACvB,UAAQ,IAAI;GACV,QAAQ,IAAI,UAAU;GACtB,MAAM,IAAI,OAAO;GACjB,SAAS,eAAe,IAAI,QAAQ;GACpC,MAAM;GACN,SAAS;GACT,UAAU;IAAE,QAAQ;IAAK,SAAS;IAAM;GACzC,CAAC;AACF,MAAI,UAAU,KAAK,EAAE,gBAAgB,oBAAoB,CAAC;AAC1D,MAAI,IACF,YAAY,UAAU,cAAc;GAClC,SAAS;GACT,MAAM;GACP,CAAC,CAAC,KACJ;AACD;;CAMF,MAAM,aAAa,mBADO,KAAK,SAAS,GACO;AAC/C,KAAI,eAAe,MAAM;AACvB,UAAQ,IAAI;GACV,QAAQ,IAAI,UAAU;GACtB,MAAM,IAAI,OAAO;GACjB,SAAS,eAAe,IAAI,QAAQ;GACpC,MAAM;GACN,SAAS;GACT,UAAU;IAAE,QAAQ;IAAK,SAAS;IAAM;GACzC,CAAC;AACF,MAAI,UAAU,KAAK,EAAE,gBAAgB,oBAAoB,CAAC;AAC1D,MAAI,IACF,YAAY,UAAU,cAAc;GAClC,SACE;GACF,MAAM;GACN,OAAO;GACP,MAAM;GACN,cAAc;GACf,CAAC,CAAC,KACJ;AACD;;CAEF,MAAM,YAAY;CAIlB,MAAM,iBACJ,OAAO,KAAK,UAAU,YAAY,KAAK,MAAM,SAAS,IAAI,KAAK,QAAQ;CAGzE,IAAI,gBAAkC;CACtC,IAAI,iBAA2C;AAE/C,MAAK,MAAM,WAAW,SACpB,KAAI,eAAe,WAAW,QAAQ,MAAM,EAAE;AAC5C,mBAAiB;AACjB,kBAAgB,QAAQ;AACxB;;AAIJ,KAAI,eACF,QAAO,MAAM,yCAAyC,UAAU,MAAM,GAAG,GAAG,CAAC,GAAG;KAEhF,QAAO,MACL,4CAA4C,UAAU,MAAM,GAAG,GAAG,CAAC,yBACpE;AAMH,KAAI,CAAC,kBAAkB,wBAAwB,SAAS,QAAQ,IAAI,QAAQ,CAAC,aAAa;EACxF,MAAM,gBAAgB,qBAAqB,EAAE;AAC7C,SAAO,MAAM,qBAAqB,IAAI,UAAU,QAAQ,IAAI,OAAO,mBAAmB,EAAE,CAAC;AACzF,UAAQ,IAAI;GACV,QAAQ,IAAI,UAAU;GACtB,MAAM,IAAI,OAAO;GACjB,SAAS,eAAe,IAAI,QAAQ;GACpC,MAAM;GACN,SAAS;GACT,UAAU;IACR,QAAQ;IACR,SAAS;IACT,GAAG,oBAAoB,SAAS,QAAQ,IAAI,QAAQ;IACrD;GACF,CAAC;AACF,MAAI,UAAU,KAAK,EAAE,gBAAgB,oBAAoB,CAAC;AAC1D,MAAI,IACF,YAAY,UAAU,eAAe;GACnC,SAAS;GACT,MAAM;GACN,MAAM;GACP,CAAC,CAAC,KACJ;AACD;;AAGF,SAAQ,IAAI;EACV,QAAQ,IAAI,UAAU;EACtB,MAAM,IAAI,OAAO;EACjB,SAAS,eAAe,IAAI,QAAQ;EACpC,MAAM;EACN,SAAS;EACT,UAAU;GACR,QAAQ;GACR,SAAS;GACT,GAAG,oBAAoB,SAAS,QAAQ,IAAI,QAAQ;GACrD;EACF,CAAC;AAEF,KAAI,UAAU,KAAK,EAAE,gBAAgB,oBAAoB,CAAC;AAC1D,KAAI,IACF,KAAK,UAAU;EACb,IAAI,WAAW,OAAO;EACtB,OAAO;EACP,SAAS,CAAC,cAAc;EACzB,CAAC,CACH"}