@databehave/openapi 0.0.0-stage → 0.1.0

package/dist/middleware/request-validation.js

@@ -0,0 +1,353 @@
+import { matchPattern, parseRoutePattern } from '@databehave/server';
+import { compileValidator } from '../validation/validate.js';
+const PROBLEM_TYPE_BASE = 'https://github.com/ochairo/databehave/blob/main/docs/errors';
+const PROBLEM_TYPE_SLUG = {
+    400: 'malformed-body',
+    401: 'unauthorized',
+    413: 'payload-too-large',
+    415: 'unsupported-media-type',
+    422: 'request-validation',
+};
+const problemType = (status) => `${PROBLEM_TYPE_BASE}/${PROBLEM_TYPE_SLUG[status] ?? 'request-validation'}.md`;
+// Default cap on request-body size (bytes). Matches the express
+// `body-parser` default; raise via `validation.maxBodyBytes` only if
+// the spec genuinely demands large bodies.
+const DEFAULT_MAX_BODY_BYTES = 102400;
+const STATUS_TITLES = {
+    400: 'Malformed request',
+    401: 'Unauthorized',
+    413: 'Payload too large',
+    415: 'Unsupported media type',
+    422: 'Request validation failed',
+};
+const isObj = (v) => typeof v === 'object' && v !== null && !Array.isArray(v);
+const resolveParam = (raw, doc) => {
+    if (!isObj(raw))
+        return null;
+    let node = raw;
+    if (typeof node.$ref === 'string') {
+        const m = /^#\/components\/parameters\/(.+)$/.exec(node.$ref);
+        if (!m)
+            return null;
+        const docAny = doc;
+        const target = docAny.components?.parameters?.[decodeURIComponent(m[1])];
+        if (!isObj(target))
+            return null;
+        node = target;
+    }
+    const location = node.in;
+    if ((location !== 'query' && location !== 'path' && location !== 'header' && location !== 'cookie') || typeof node.name !== 'string')
+        return null;
+    return {
+        in: location, name: node.name,
+        ...(typeof node.required === 'boolean' ? { required: node.required } : {}),
+        ...(isObj(node.schema) ? { schema: node.schema } : {}),
+    };
+};
+export const createRequestValidationContext = (catalog, options = {}) => {
+    const maxBodyBytes = options.maxBodyBytes ?? DEFAULT_MAX_BODY_BYTES;
+    if (!Number.isSafeInteger(maxBodyBytes) || maxBodyBytes < 0) {
+        throw new Error('maxBodyBytes must be a nonnegative safe integer');
+    }
+    const doc = catalog.document;
+    const schemes = new Map();
+    for (const [name, scheme] of Object.entries(doc.components?.securitySchemes ?? {})) {
+        if (isObj(scheme) && typeof scheme.type === 'string') {
+            schemes.set(name, scheme);
+        }
+    }
+    const globalSecurity = doc.security ?? [];
+    const routes = [];
+    for (const operation of catalog.operations) {
+        const oasPath = operation.sourcePath;
+        const methodName = operation.method;
+        const pattern = parseRoutePattern(operation.path);
+        const pathLevelParams = operation.pathParameters;
+        const op = operation.definition;
+        const opNode = op;
+        const params = [];
+        const rawParams = [...pathLevelParams, ...(opNode.parameters ?? [])];
+        for (const raw of rawParams) {
+            const p = resolveParam(raw, doc);
+            if (!p || p.in === 'cookie')
+                continue;
+            const schema = (p.schema ?? {});
+            const validator = compileValidator(schema, doc, `#/paths/${oasPath}/${methodName}/parameters/${p.name}`);
+            params.push({
+                name: p.name,
+                in: p.in,
+                required: p.required === true || p.in === 'path',
+                type: typeof schema.type === 'string' ? schema.type : null,
+                validator,
+            });
+        }
+        const requestBody = opNode.requestBody;
+        const content = requestBody?.content;
+        const declaredTypes = content ? Object.keys(content) : [];
+        const hasJsonBody = declaredTypes.some((c) => /^application\/json(\b|;)/i.test(c));
+        const bodyOnlyJson = hasJsonBody &&
+            declaredTypes.every((c) => /^application\/json(\b|;)/i.test(c));
+        const jsonSchema = content?.['application/json']?.schema;
+        const bodyValidator = jsonSchema
+            ? compileValidator(jsonSchema, doc, `#/paths/${oasPath}/${methodName}/requestBody`)
+            : null;
+        routes.push({
+            key: operation.key,
+            pattern,
+            hasBody: requestBody !== undefined,
+            hasJsonBody,
+            bodyOnlyJson,
+            bodyRequired: requestBody?.required === true,
+            bodyValidator,
+            params,
+            security: opNode.security ?? globalSecurity,
+        });
+    }
+    return {
+        catalog,
+        routes,
+        schemes,
+        maxBodyBytes,
+    };
+};
+const coerce = (raw, type) => {
+    if (type === 'integer') {
+        if (!/^-?\d+$/.test(raw))
+            return raw;
+        const n = Number(raw);
+        return Number.isFinite(n) ? n : raw;
+    }
+    if (type === 'number') {
+        if (!/^-?\d+(?:\.\d+)?$/.test(raw))
+            return raw;
+        const n = Number(raw);
+        return Number.isFinite(n) ? n : raw;
+    }
+    if (type === 'boolean') {
+        if (raw === 'true')
+            return true;
+        if (raw === 'false')
+            return false;
+        return raw;
+    }
+    return raw;
+};
+const isSecuritySatisfied = (req, ctx, headers, url) => {
+    const names = Object.keys(req);
+    if (names.length === 0)
+        return true;
+    return names.every((name) => {
+        const scheme = ctx.schemes.get(name);
+        if (!scheme)
+            return false;
+        if (scheme.type === 'http') {
+            const auth = headers.get('authorization') ?? '';
+            const want = (scheme.scheme ?? 'bearer').toLowerCase();
+            return new RegExp(`^${want}\\s+`, 'i').test(auth);
+        }
+        if (scheme.type === 'apiKey') {
+            if (scheme.in === 'header' && scheme.name) {
+                return headers.has(scheme.name.toLowerCase());
+            }
+            if (scheme.in === 'query' && scheme.name) {
+                return url.searchParams.has(scheme.name);
+            }
+            return false;
+        }
+        // oauth2 / openIdConnect: presence-only check; full token validation
+        // (introspection, signature verification) is out of scope for a
+        // zero-dep walker. Consumers needing it should layer it via
+        // a separate HTTP preflight or validation plugin.
+        return headers.has('authorization');
+    });
+};
+const buildAuthChallenge = (reqs, ctx) => {
+    for (const r of reqs) {
+        for (const name of Object.keys(r)) {
+            const scheme = ctx.schemes.get(name);
+            if (scheme?.type === 'http') {
+                const s = (scheme.scheme ?? 'bearer').replace(/^./, (c) => c.toUpperCase());
+                return { 'www-authenticate': `${s} realm="api"` };
+            }
+        }
+    }
+    return { 'www-authenticate': 'Bearer realm="api"' };
+};
+const problem = (status, detail, violations = [], extraHeaders = {}) => {
+    const body = {
+        type: problemType(status),
+        title: STATUS_TITLES[status] ?? 'Request validation failed',
+        status,
+        detail,
+    };
+    if (violations.length > 0)
+        body.violations = violations;
+    return new Response(JSON.stringify(body), {
+        status,
+        headers: {
+            'content-type': 'application/problem+json',
+            ...extraHeaders,
+        },
+    });
+};
+const readBody = async (req, maxBodyBytes) => {
+    let reader;
+    // Tee cancellation only reaches the source after both branches cancel. Neither
+    // promise can be awaited here: a user source may never settle its cancel hook.
+    const cancel = () => {
+        void reader?.cancel().catch(() => { });
+        void req.body?.cancel().catch(() => { });
+    };
+    let onAbort = () => { };
+    try {
+        if (req.signal.aborted)
+            throw new Error('request aborted');
+        reader = req.clone().body?.getReader();
+        if (!reader)
+            return { raw: '', bytes: 0 };
+        const aborted = new Promise((_, reject) => {
+            onAbort = () => reject(new Error('request aborted'));
+            req.signal.addEventListener('abort', onAbort, { once: true });
+        });
+        const decoder = new TextDecoder();
+        let bytes = 0;
+        let raw = '';
+        while (true) {
+            const chunk = await Promise.race([reader.read(), aborted]);
+            if (req.signal.aborted)
+                throw new Error('request aborted');
+            if (chunk.done)
+                return { raw: raw + decoder.decode(), bytes };
+            bytes += chunk.value.byteLength;
+            if (bytes > maxBodyBytes) {
+                cancel();
+                return { response: problem(413, `request body exceeds maxBodyBytes (${maxBodyBytes})`) };
+            }
+            raw += decoder.decode(chunk.value, { stream: true });
+        }
+    }
+    catch {
+        cancel();
+        return { response: problem(400, 'request body could not be read') };
+    }
+    finally {
+        req.signal.removeEventListener('abort', onAbort);
+        reader?.releaseLock();
+    }
+};
+export const validateRequest = async (req, ctx, effectiveMethod = req.method) => {
+    const url = new URL(req.url);
+    const method = effectiveMethod.toUpperCase();
+    const operation = ctx.catalog.find(method, url.pathname);
+    let matched = null;
+    for (const r of ctx.routes) {
+        if (r.key !== operation?.key)
+            continue;
+        const params = matchPattern(r.pattern, url.pathname);
+        if (params) {
+            matched = { route: r, params };
+            break;
+        }
+    }
+    // Unmatched paths fall through — they are either hand-written routes
+    // outside the OAS document or genuine 404s. Either way the validator
+    // has no contract to enforce.
+    if (!matched)
+        return null;
+    const { route, params } = matched;
+    const headers = new Map();
+    req.headers.forEach((v, k) => headers.set(k.toLowerCase(), v));
+    // 1) Security gate.
+    if (route.security.length > 0) {
+        const ok = route.security.some((sr) => isSecuritySatisfied(sr, ctx, headers, url));
+        if (!ok) {
+            return problem(401, 'missing or invalid credentials', [], buildAuthChallenge(route.security, ctx));
+        }
+    }
+    const hasBodyMethod = method !== 'GET' && method !== 'HEAD';
+    const contentType = (headers.get('content-type') ?? '').split(';')[0]?.trim().toLowerCase() ?? '';
+    // 2) Content-Type guard for routes that declare a JSON-only requestBody.
+    if (hasBodyMethod && route.bodyOnlyJson && contentType && contentType !== 'application/json') {
+        return problem(415, `unsupported media type '${contentType}' (expected application/json)`);
+    }
+    const violations = [];
+    // 3) Body parse + validate.
+    if (hasBodyMethod && route.hasBody) {
+        const body = await readBody(req, ctx.maxBodyBytes);
+        if ('response' in body)
+            return body.response;
+        const { raw } = body;
+        if (body.bytes === 0) {
+            if (route.bodyRequired) {
+                return problem(422, 'request body is required', [
+                    { path: '/body', keyword: 'required', message: 'missing required body' },
+                ]);
+            }
+        }
+        else if (route.hasJsonBody && (!contentType || contentType === 'application/json')) {
+            let parsed;
+            try {
+                parsed = JSON.parse(raw);
+            }
+            catch {
+                return problem(400, 'malformed JSON body');
+            }
+            if (route.bodyValidator)
+                violations.push(...route.bodyValidator(parsed, '/body'));
+        }
+    }
+    // 4) Param validation (with type coercion for query/path/header).
+    for (const p of route.params) {
+        if (p.in === 'query') {
+            const raw = url.searchParams.get(p.name);
+            if (raw === null) {
+                if (p.required) {
+                    violations.push({
+                        path: `/query/${p.name}`,
+                        keyword: 'required',
+                        message: 'missing required query parameter',
+                    });
+                }
+                continue;
+            }
+            violations.push(...p.validator(coerce(raw, p.type), `/query/${p.name}`));
+        }
+        else if (p.in === 'path') {
+            const raw = params[p.name];
+            // Defensive: `matchPattern` always populates every named path
+            // segment when the route matches, so a missing path param is
+            // unreachable in practice. Kept as a guard against future
+            // refactors that loosen the matcher contract.
+            /* c8 ignore start */
+            if (raw === undefined) {
+                violations.push({
+                    path: `/path/${p.name}`,
+                    keyword: 'required',
+                    message: 'missing required path parameter',
+                });
+                continue;
+            }
+            /* c8 ignore stop */
+            violations.push(...p.validator(coerce(raw, p.type), `/path/${p.name}`));
+        }
+        else {
+            const raw = headers.get(p.name.toLowerCase());
+            if (raw === undefined) {
+                if (p.required) {
+                    violations.push({
+                        path: `/header/${p.name}`,
+                        keyword: 'required',
+                        message: 'missing required header',
+                    });
+                }
+                continue;
+            }
+            violations.push(...p.validator(coerce(raw, p.type), `/header/${p.name}`));
+        }
+    }
+    if (violations.length > 0) {
+        return problem(422, `request validation failed (${violations.length} violation${violations.length === 1 ? '' : 's'})`, violations);
+    }
+    return null;
+};
+//# sourceMappingURL=request-validation.js.map

package/dist/middleware/request-validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-validation.js","sourceRoot":"","sources":["../../src/middleware/request-validation.ts"],"names":[],"mappings":"AAuBA,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAqB,MAAM,oBAAoB,CAAA;AACvF,OAAO,EAAE,gBAAgB,EAAkC,MAAM,2BAA2B,CAAA;AAE5F,MAAM,iBAAiB,GACrB,6DAA6D,CAAA;AAE/D,MAAM,iBAAiB,GAA2B;IAChD,GAAG,EAAE,gBAAgB;IACrB,GAAG,EAAE,cAAc;IACnB,GAAG,EAAE,mBAAmB;IACxB,GAAG,EAAE,wBAAwB;IAC7B,GAAG,EAAE,oBAAoB;CAC1B,CAAA;AAED,MAAM,WAAW,GAAG,CAAC,MAAc,EAAU,EAAE,CAC7C,GAAG,iBAAiB,IAAI,iBAAiB,CAAC,MAAM,CAAC,IAAI,oBAAoB,KAAK,CAAA;AAGhF,gEAAgE;AAChE,qEAAqE;AACrE,2CAA2C;AAC3C,MAAM,sBAAsB,GAAG,MAAM,CAAA;AAErC,MAAM,aAAa,GAA2B;IAC5C,GAAG,EAAE,mBAAmB;IACxB,GAAG,EAAE,cAAc;IACnB,GAAG,EAAE,mBAAmB;IACxB,GAAG,EAAE,wBAAwB;IAC7B,GAAG,EAAE,2BAA2B;CACjC,CAAA;AAyCD,MAAM,KAAK,GAAG,CAAC,CAAU,EAAgC,EAAE,CACzD,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;AAU1D,MAAM,YAAY,GAAG,CAAC,GAAY,EAAE,GAAW,EAA4B,EAAE;IAC3E,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAA;IAC5B,IAAI,IAAI,GAA4B,GAAG,CAAA;IACvC,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,mCAAmC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC7D,IAAI,CAAC,CAAC;YAAE,OAAO,IAAI,CAAA;QACnB,MAAM,MAAM,GAAG,GAAgE,CAAA;QAC/E,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,EAAE,UAAU,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAA;QACzE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAA;QAC/B,IAAI,GAAG,MAAM,CAAA;IACf,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAA;IACxB,IAAI,CAAC,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,MAAM,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,QAAQ,CAAC,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAA;IACjJ,OAAO;QACL,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI;QAC7B,GAAG,CAAC,OAAO,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClE,CAAA;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAC5C,OAAuB,EACvB,UAA8C,EAAE,EACtB,EAAE;IAC5B,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,sBAAsB,CAAA;IACnE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,YAAY,CAAC,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAA;IACpE,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,QAInB,CAAA;IACD,MAAM,OAAO,GAAG,IAAI,GAAG,EAA0B,CAAA;IACjD,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,eAAe,IAAI,EAAE,CAAC,EAAE,CAAC;QACnF,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,MAAwB,CAAC,CAAA;QAC7C,CAAC;IACH,CAAC;IACD,MAAM,cAAc,GAAG,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAA;IACzC,MAAM,MAAM,GAAqB,EAAE,CAAA;IACnC,KAAK,MAAM,SAAS,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QAC3C,MAAM,OAAO,GAAG,SAAS,CAAC,UAAU,CAAA;QACpC,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,CAAA;QACnC,MAAM,OAAO,GAAG,iBAAiB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;QACjD,MAAM,eAAe,GAAG,SAAS,CAAC,cAAc,CAAA;QAChD,MAAM,EAAE,GAAG,SAAS,CAAC,UAAU,CAAA;QAC/B,MAAM,MAAM,GAAG,EAOd,CAAA;QACD,MAAM,MAAM,GAAgB,EAAE,CAAA;QAC9B,MAAM,SAAS,GAAG,CAAC,GAAG,eAAe,EAAE,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAA;QACpE,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;YAC5B,MAAM,CAAC,GAAG,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;YAChC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,QAAQ;gBAAE,SAAQ;YACrC,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAY,CAAA;YAC1C,MAAM,SAAS,GAAG,gBAAgB,CAChC,MAAM,EACN,GAAG,EACH,WAAW,OAAO,IAAI,UAAU,eAAe,CAAC,CAAC,IAAI,EAAE,CACxD,CAAA;YACD,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,QAAQ,EAAE,CAAC,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,CAAC,EAAE,KAAK,MAAM;gBAChD,IAAI,EAAE,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;gBAC1D,SAAS;aACV,CAAC,CAAA;QACJ,CAAC;QACD,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,CAAA;QACtC,MAAM,OAAO,GAAG,WAAW,EAAE,OAAO,CAAA;QACpC,MAAM,aAAa,GAAG,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;QACzD,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,2BAA2B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;QAClF,MAAM,YAAY,GAChB,WAAW;YACX,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,2BAA2B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;QACjE,MAAM,UAAU,GAAG,OAAO,EAAE,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAA;QACxD,MAAM,aAAa,GAAG,UAAU;YAC9B,CAAC,CAAC,gBAAgB,CAAC,UAAU,EAAE,GAAG,EAAE,WAAW,OAAO,IAAI,UAAU,cAAc,CAAC;YACnF,CAAC,CAAC,IAAI,CAAA;QACR,MAAM,CAAC,IAAI,CAAC;YACV,GAAG,EAAE,SAAS,CAAC,GAAG;YAClB,OAAO;YACP,OAAO,EAAE,WAAW,KAAK,SAAS;YAClC,WAAW;YACX,YAAY;YACZ,YAAY,EAAE,WAAW,EAAE,QAAQ,KAAK,IAAI;YAC5C,aAAa;YACb,MAAM;YACN,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,cAAc;SAC5C,CAAC,CAAA;IACJ,CAAC;IACD,OAAO;QACL,OAAO;QACP,MAAM;QACN,OAAO;QACP,YAAY;KACb,CAAA;AACH,CAAC,CAAA;AAED,MAAM,MAAM,GAAG,CAAC,GAAW,EAAE,IAAmB,EAAW,EAAE;IAC3D,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,GAAG,CAAA;QACpC,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;QACrB,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAA;IACrC,CAAC;IACD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,GAAG,CAAA;QAC9C,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;QACrB,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAA;IACrC,CAAC;IACD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,IAAI,GAAG,KAAK,MAAM;YAAE,OAAO,IAAI,CAAA;QAC/B,IAAI,GAAG,KAAK,OAAO;YAAE,OAAO,KAAK,CAAA;QACjC,OAAO,GAAG,CAAA;IACZ,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC,CAAA;AAED,MAAM,mBAAmB,GAAG,CAC1B,GAAgD,EAChD,GAA6B,EAC7B,OAA4B,EAC5B,GAAQ,EACC,EAAE;IACX,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC9B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IACnC,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE;QAC1B,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACpC,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAA;QACzB,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE,CAAA;YAC/C,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAA;YACtD,OAAO,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACnD,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,IAAI,MAAM,CAAC,EAAE,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;gBAC1C,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAA;YAC/C,CAAC;YACD,IAAI,MAAM,CAAC,EAAE,KAAK,OAAO,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;gBACzC,OAAO,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;YAC1C,CAAC;YACD,OAAO,KAAK,CAAA;QACd,CAAC;QACD,qEAAqE;QACrE,gEAAgE;QAChE,4DAA4D;QAC5D,kDAAkD;QAClD,OAAO,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAA;IACrC,CAAC,CAAC,CAAA;AACJ,CAAC,CAAA;AAED,MAAM,kBAAkB,GAAG,CACzB,IAA4D,EAC5D,GAA6B,EACL,EAAE;IAC1B,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAClC,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;YACpC,IAAI,MAAM,EAAE,IAAI,KAAK,MAAM,EAAE,CAAC;gBAC5B,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,QAAQ,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAA;gBAC3E,OAAO,EAAE,kBAAkB,EAAE,GAAG,CAAC,cAAc,EAAE,CAAA;YACnD,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,CAAA;AACrD,CAAC,CAAA;AAED,MAAM,OAAO,GAAG,CACd,MAAc,EACd,MAAc,EACd,aAAmC,EAAE,EACrC,eAAuC,EAAE,EAC/B,EAAE;IACZ,MAAM,IAAI,GAMN;QACF,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC;QACzB,KAAK,EAAE,aAAa,CAAC,MAAM,CAAC,IAAI,2BAA2B;QAC3D,MAAM;QACN,MAAM;KACP,CAAA;IACD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;QAAE,IAAI,CAAC,UAAU,GAAG,UAAU,CAAA;IACvD,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;QACxC,MAAM;QACN,OAAO,EAAE;YACP,cAAc,EAAE,0BAA0B;YAC1C,GAAG,YAAY;SAChB;KACF,CAAC,CAAA;AACJ,CAAC,CAAA;AAKD,MAAM,QAAQ,GAAG,KAAK,EAAE,GAAY,EAAE,YAAoB,EAAqB,EAAE;IAC/E,IAAI,MAA2D,CAAA;IAC/D,+EAA+E;IAC/E,+EAA+E;IAC/E,MAAM,MAAM,GAAG,GAAG,EAAE;QAClB,KAAK,MAAM,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QACrC,KAAK,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IACzC,CAAC,CAAA;IACD,IAAI,OAAO,GAAe,GAAG,EAAE,GAAE,CAAC,CAAA;IAClC,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;QAC1D,MAAM,GAAG,GAAG,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,CAAA;QACtC,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAA;QACzC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;YAC/C,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAA;YACpD,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QAC/D,CAAC,CAAC,CAAA;QACF,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAA;QACjC,IAAI,KAAK,GAAG,CAAC,CAAA;QACb,IAAI,GAAG,GAAG,EAAE,CAAA;QACZ,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC,CAAA;YAC1D,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;YAC1D,IAAI,KAAK,CAAC,IAAI;gBAAE,OAAO,EAAE,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAA;YAC7D,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,UAAU,CAAA;YAC/B,IAAI,KAAK,GAAG,YAAY,EAAE,CAAC;gBACzB,MAAM,EAAE,CAAA;gBACR,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,GAAG,EAAE,sCAAsC,YAAY,GAAG,CAAC,EAAE,CAAA;YAC1F,CAAC;YACD,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;QACtD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,EAAE,CAAA;QACR,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,GAAG,EAAE,gCAAgC,CAAC,EAAE,CAAA;IACrE,CAAC;YAAS,CAAC;QACT,GAAG,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QAChD,MAAM,EAAE,WAAW,EAAE,CAAA;IACvB,CAAC;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,EAClC,GAAY,EACZ,GAA6B,EAC7B,eAAe,GAAG,GAAG,CAAC,MAAM,EACF,EAAE;IAC5B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IAC5B,MAAM,MAAM,GAAG,eAAe,CAAC,WAAW,EAAE,CAAA;IAC5C,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAA;IACxD,IAAI,OAAO,GAA+E,IAAI,CAAA;IAC9F,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,CAAC,GAAG,KAAK,SAAS,EAAE,GAAG;YAAE,SAAQ;QACtC,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAA;QACpD,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAA;YAC9B,MAAK;QACP,CAAC;IACH,CAAC;IACD,qEAAqE;IACrE,qEAAqE;IACrE,8BAA8B;IAC9B,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAA;IAEzB,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAA;IACjC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAA;IACzC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;IAE9D,oBAAoB;IACpB,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,MAAM,EAAE,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,mBAAmB,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,CAAA;QAClF,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,OAAO,OAAO,CACZ,GAAG,EACH,gCAAgC,EAChC,EAAE,EACF,kBAAkB,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,CACxC,CAAA;QACH,CAAC;IACH,CAAC;IAED,MAAM,aAAa,GAAG,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,CAAA;IAC3D,MAAM,WAAW,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,CAAA;IAEjG,yEAAyE;IACzE,IAAI,aAAa,IAAI,KAAK,CAAC,YAAY,IAAI,WAAW,IAAI,WAAW,KAAK,kBAAkB,EAAE,CAAC;QAC7F,OAAO,OAAO,CAAC,GAAG,EAAE,2BAA2B,WAAW,+BAA+B,CAAC,CAAA;IAC5F,CAAC;IAED,MAAM,UAAU,GAAgB,EAAE,CAAA;IAElC,4BAA4B;IAC5B,IAAI,aAAa,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,YAAY,CAAC,CAAA;QAClD,IAAI,UAAU,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAA;QAC5C,MAAM,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;QACpB,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC;YACrB,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;gBACvB,OAAO,OAAO,CAAC,GAAG,EAAE,0BAA0B,EAAE;oBAC9C,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,uBAAuB,EAAE;iBACzE,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;aAAM,IAAI,KAAK,CAAC,WAAW,IAAI,CAAC,CAAC,WAAW,IAAI,WAAW,KAAK,kBAAkB,CAAC,EAAE,CAAC;YACrF,IAAI,MAAe,CAAA;YACnB,IAAI,CAAC;gBACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;YAC1B,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,OAAO,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAA;YAC5C,CAAC;YACD,IAAI,KAAK,CAAC,aAAa;gBAAE,UAAU,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;QACnF,CAAC;IACH,CAAC;IAED,kEAAkE;IAClE,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QAC7B,IAAI,CAAC,CAAC,EAAE,KAAK,OAAO,EAAE,CAAC;YACrB,MAAM,GAAG,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;YACxC,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;gBACjB,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;oBACf,UAAU,CAAC,IAAI,CAAC;wBACd,IAAI,EAAE,UAAU,CAAC,CAAC,IAAI,EAAE;wBACxB,OAAO,EAAE,UAAU;wBACnB,OAAO,EAAE,kCAAkC;qBAC5C,CAAC,CAAA;gBACJ,CAAC;gBACD,SAAQ;YACV,CAAC;YACD,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;QAC1E,CAAC;aAAM,IAAI,CAAC,CAAC,EAAE,KAAK,MAAM,EAAE,CAAC;YAC3B,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;YAC1B,8DAA8D;YAC9D,6DAA6D;YAC7D,0DAA0D;YAC1D,8CAA8C;YAC9C,qBAAqB;YACrB,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACtB,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,SAAS,CAAC,CAAC,IAAI,EAAE;oBACvB,OAAO,EAAE,UAAU;oBACnB,OAAO,EAAE,iCAAiC;iBAC3C,CAAC,CAAA;gBACF,SAAQ;YACV,CAAC;YACD,oBAAoB;YACpB,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;QACzE,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAA;YAC7C,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACtB,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;oBACf,UAAU,CAAC,IAAI,CAAC;wBACd,IAAI,EAAE,WAAW,CAAC,CAAC,IAAI,EAAE;wBACzB,OAAO,EAAE,UAAU;wBACnB,OAAO,EAAE,yBAAyB;qBACnC,CAAC,CAAA;gBACJ,CAAC;gBACD,SAAQ;YACV,CAAC;YACD,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;QAC3E,CAAC;IACH,CAAC;IAED,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO,OAAO,CACZ,GAAG,EACH,8BAA8B,UAAU,CAAC,MAAM,aAAa,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,EACjG,UAAU,CACX,CAAA;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC,CAAA"}

package/dist/mock-mode-plugin.d.ts

@@ -0,0 +1,5 @@
+import type { Plugin } from '@databehave/core';
+import type { MockModeOptions } from './mock-mode.js';
+export type { MockModeOptions } from './mock-mode.js';
+export declare const mockModePlugin: (options?: MockModeOptions) => Plugin;
+//# sourceMappingURL=mock-mode-plugin.d.ts.map

package/dist/mock-mode-plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mock-mode-plugin.d.ts","sourceRoot":"","sources":["../src/mock-mode-plugin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AAI9C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AACrD,YAAY,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AAErD,eAAO,MAAM,cAAc,GAAI,UAAS,eAAoB,KAAG,MAc7D,CAAA"}

package/dist/mock-mode-plugin.js

@@ -0,0 +1,20 @@
+import { httpCapability } from '@databehave/server';
+import { openapiCapability } from './catalog.js';
+import { buildMockModeHooks } from './mock-mode.js';
+export const mockModePlugin = (options = {}) => ({
+    id: 'databehave.openapi.mock-mode', apiVersion: 1,
+    requires: [httpCapability, openapiCapability],
+    setup(ctx) {
+        const catalog = ctx.use(openapiCapability);
+        const runtime = ctx.use(httpCapability);
+        const hooks = buildMockModeHooks({ ...options, enabled: true }, (request, status) => {
+            const operation = catalog.find(request.effectiveMethod, request.path);
+            return operation ? catalog.body(operation, status, request) : undefined;
+        });
+        if (!hooks)
+            throw new Error('Mock mode configuration failed');
+        runtime.registerMiddleware({ owner: 'databehave.openapi.mock-mode', order: ctx.order, stage: 'interception', handle: hooks.onRequest });
+        runtime.registerMiddleware({ owner: 'databehave.openapi.mock-mode', order: ctx.order, stage: 'decoration', handle: hooks.onResponse });
+    },
+});
+//# sourceMappingURL=mock-mode-plugin.js.map

package/dist/mock-mode-plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mock-mode-plugin.js","sourceRoot":"","sources":["../src/mock-mode-plugin.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAA;AAChD,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAA;AAInD,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,UAA2B,EAAE,EAAU,EAAE,CAAC,CAAC;IACxE,EAAE,EAAE,8BAA8B,EAAE,UAAU,EAAE,CAAC;IACjD,QAAQ,EAAE,CAAC,cAAc,EAAE,iBAAiB,CAAC;IAC7C,KAAK,CAAC,GAAG;QACP,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAA;QAC1C,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,CAAA;QACvC,MAAM,KAAK,GAAG,kBAAkB,CAAC,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAClF,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;YACrE,OAAO,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QACzE,CAAC,CAAC,CAAA;QACF,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAA;QAC7D,OAAO,CAAC,kBAAkB,CAAC,EAAE,KAAK,EAAE,8BAA8B,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAA;QACvI,OAAO,CAAC,kBAAkB,CAAC,EAAE,KAAK,EAAE,8BAA8B,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAA;IACxI,CAAC;CACF,CAAC,CAAA"}

package/dist/mock-mode.d.ts

@@ -0,0 +1,76 @@
+/** Explicit status selection and response tagging policy. */
+import type { MockRequest, MockResponse } from '@databehave/server';
+/** Optional generated body lookup for a selected route and status. */
+export type BodyResolver = (request: MockRequest, status: number) => unknown | undefined;
+/**
+ * Minimal logger interface (compatible with the host server's logger
+ * and with `console`). Only `warn` is required by mock-mode today; the
+ * shape is kept narrow so callers can pass an existing logger without
+ * adapter glue.
+ */
+export interface MockModeLogger {
+    warn(message: string): void;
+}
+/** Status policy enabled by including the mock-mode plugin. */
+export interface MockModeOptions {
+    /** MockResponse header that tags every response with the resolved status. */
+    header?: string;
+    /**
+     * When `true`, an incoming request may force the mocked status by
+     * sending the same header (default `x-mock-status: 500`). Disabled
+     * by default so production-style mock servers don't expose status
+     * injection to arbitrary clients. Resolution becomes:
+     *   1. request `header` value (when `allowHeaderOverride === true`)
+     *   2. `pathOverrides["<METHOD> <path>"]`
+     *   3. `pathOverrides["<path>"]`
+     *   4. `defaultStatus`
+     *   5. passthrough
+     */
+    allowHeaderOverride?: boolean;
+    /** Paths exempt from status injection (typically health probes). */
+    healthPaths?: readonly string[];
+    /**
+     * Status applied when no `pathOverrides` entry matches. Omit (or set
+     * `undefined`) for passthrough (real handler runs). Set to an error
+     * code (e.g. `500`) to force every route to that status by default.
+     */
+    defaultStatus?: number;
+    /**
+     * Per-route status overrides. Keys use one of:
+     *   - `"<METHOD> <path>"` (e.g. `"GET /api/v1/x"`) — method-scoped
+     *   - `"<path>"`          (e.g. `"/api/v1/x"`)     — any method
+     * Paths must be absolute (start with `/`). Values are HTTP status codes.
+     */
+    pathOverrides?: Record<string, number>;
+    /**
+     * Logger used for non-fatal diagnostics (e.g. out-of-range header
+     * overrides). Defaults to the global `console`. Pass the host
+     * application's logger to keep mock-server output in one place
+     * instead of leaking to stdout/stderr.
+     */
+    logger?: MockModeLogger;
+}
+/** Interception and decoration callbacks for the HTTP middleware stages. */
+export interface MockModeHooks {
+    onRequest: (req: MockRequest) => MockResponse | undefined;
+    onResponse: (req: MockRequest, res: MockResponse) => MockResponse;
+}
+/**
+ * Resolve the status code for a request using only the supplied config.
+ * Returns `undefined` when the request should pass through.
+ * Exported for unit-testing; callers normally use `buildMockModeHooks`.
+ */
+export declare const resolveStatus: (method: string, path: string, config: MockModeOptions) => number | undefined;
+/**
+ * Build the onRequest / onResponse hook pair. Returns `undefined`
+ * when the feature is disabled (caller may skip wiring entirely).
+ *
+ * `bodyResolver` is optional. When provided, @databehave/server asks it for a
+ * body for the configured status (typically a generator backed by
+ * the OpenAPI `responses[N]` schema). When it returns `undefined`,
+ * the minimal envelope `{ error: true, status: N }` is used instead.
+ */
+export declare const buildMockModeHooks: (config: MockModeOptions & {
+    readonly enabled?: boolean;
+}, bodyResolver?: BodyResolver) => MockModeHooks | undefined;
+//# sourceMappingURL=mock-mode.d.ts.map

package/dist/mock-mode.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mock-mode.d.ts","sourceRoot":"","sources":["../src/mock-mode.ts"],"names":[],"mappings":"AAAA,6DAA6D;AAC7D,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAEnE,sEAAsE;AACtE,MAAM,MAAM,YAAY,GAAG,CACzB,OAAO,EAAE,WAAW,EACpB,MAAM,EAAE,MAAM,KACX,OAAO,GAAG,SAAS,CAAA;AAExB;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;CAC5B;AAED,+DAA+D;AAC/D,MAAM,WAAW,eAAe;IAC9B,6EAA6E;IAC7E,MAAM,CAAC,EAAE,MAAM,CAAA;IACf;;;;;;;;;;OAUG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAA;IAC7B,oEAAoE;IACpE,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IAC/B;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB;;;;;OAKG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACtC;;;;;OAKG;IACH,MAAM,CAAC,EAAE,cAAc,CAAA;CACxB;AAED,4EAA4E;AAC5E,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,CAAC,GAAG,EAAE,WAAW,KAAK,YAAY,GAAG,SAAS,CAAA;IACzD,UAAU,EAAE,CAAC,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,YAAY,KAAK,YAAY,CAAA;CAClE;AAED;;;;GAIG;AACH,eAAO,MAAM,aAAa,GACxB,QAAQ,MAAM,EACd,MAAM,MAAM,EACZ,QAAQ,eAAe,KACtB,MAAM,GAAG,SAQX,CAAA;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,kBAAkB,GAC7B,QAAQ,eAAe,GAAG;IAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,EACxD,eAAe,YAAY,KAC1B,aAAa,GAAG,SAyElB,CAAA"}

package/dist/mock-mode.js

@@ -0,0 +1,93 @@
+/**
+ * Resolve the status code for a request using only the supplied config.
+ * Returns `undefined` when the request should pass through.
+ * Exported for unit-testing; callers normally use `buildMockModeHooks`.
+ */
+export const resolveStatus = (method, path, config) => {
+    const overrides = config.pathOverrides ?? {};
+    const m = method.toUpperCase();
+    const byMethodPath = overrides[`${m} ${path}`];
+    if (byMethodPath !== undefined)
+        return byMethodPath;
+    const byPath = overrides[path];
+    if (byPath !== undefined)
+        return byPath;
+    return config.defaultStatus;
+};
+/**
+ * Build the onRequest / onResponse hook pair. Returns `undefined`
+ * when the feature is disabled (caller may skip wiring entirely).
+ *
+ * `bodyResolver` is optional. When provided, @databehave/server asks it for a
+ * body for the configured status (typically a generator backed by
+ * the OpenAPI `responses[N]` schema). When it returns `undefined`,
+ * the minimal envelope `{ error: true, status: N }` is used instead.
+ */
+export const buildMockModeHooks = (config, bodyResolver) => {
+    if (config.enabled !== true)
+        return undefined;
+    const header = config.header ?? 'x-mock-status';
+    const healthPaths = new Set(config.healthPaths ?? []);
+    const isHealthPath = (p) => healthPaths.has(p);
+    const logger = config.logger ?? console;
+    const synthesize = (request, status) => {
+        const headers = { [header]: String(status) };
+        if (status === 204 || status === 205 || status === 304) {
+            return { status, empty: true, headers };
+        }
+        const resolved = bodyResolver?.(request, status);
+        const body = resolved === undefined ? { error: true, status } : resolved;
+        return { status, json: body, headers };
+    };
+    const onRequest = (req) => {
+        if (isHealthPath(req.path))
+            return undefined;
+        // Header override (opt-in). The header name is the same one used
+        // to tag responses so a single curl flag flips both directions.
+        // 1xx (informational) responses are rejected: Node's HTTP layer
+        // treats them specially and a mock server has no use for them.
+        if (config.allowHeaderOverride === true) {
+            const raw = req.headers[header.toLowerCase()];
+            if (raw !== undefined) {
+                const n = Number.parseInt(raw, 10);
+                if (Number.isFinite(n) && n >= 200 && n < 600) {
+                    return synthesize(req, n);
+                }
+                // Out-of-range or non-numeric values were previously dropped on
+                // the floor, which made debugging "why doesn't my override
+                // work?" needlessly hard. Emit a single warn line so the typo
+                // is visible without escalating to a hard failure (which would
+                // break legitimate clients that ship the header for other
+                // reasons).
+                logger.warn(`@databehave/openapi/mock-mode: ignored ${header}=${JSON.stringify(raw)} ` +
+                    `(must be an integer in [200, 600))`);
+            }
+        }
+        const status = resolveStatus(req.method, req.path, config);
+        if (status === undefined)
+            return undefined;
+        return synthesize(req, status);
+    };
+    const onResponse = (req, res) => {
+        if (isHealthPath(req.path))
+            return res;
+        // Skip when the response (synthesised or handler-supplied) already
+        // carries the tag header. Header lookup is case-insensitive so
+        // `'X-Mock-Status'` from a handler is recognised against the
+        // configured (typically lowercase) `header` name.
+        if (res.headers) {
+            const wanted = header.toLowerCase();
+            for (const k of Object.keys(res.headers)) {
+                if (k.toLowerCase() === wanted)
+                    return res;
+            }
+        }
+        const tag = String(res.status ?? 200);
+        return {
+            ...res,
+            headers: { ...(res.headers ?? {}), [header]: tag },
+        };
+    };
+    return { onRequest, onResponse };
+};
+//# sourceMappingURL=mock-mode.js.map

package/dist/mock-mode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mock-mode.js","sourceRoot":"","sources":["../src/mock-mode.ts"],"names":[],"mappings":"AAiEA;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAC3B,MAAc,EACd,IAAY,EACZ,MAAuB,EACH,EAAE;IACtB,MAAM,SAAS,GAAG,MAAM,CAAC,aAAa,IAAI,EAAE,CAAA;IAC5C,MAAM,CAAC,GAAG,MAAM,CAAC,WAAW,EAAE,CAAA;IAC9B,MAAM,YAAY,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAA;IAC9C,IAAI,YAAY,KAAK,SAAS;QAAE,OAAO,YAAY,CAAA;IACnD,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAA;IAC9B,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAA;IACvC,OAAO,MAAM,CAAC,aAAa,CAAA;AAC7B,CAAC,CAAA;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAChC,MAAwD,EACxD,YAA2B,EACA,EAAE;IAC7B,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI;QAAE,OAAO,SAAS,CAAA;IAC7C,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,eAAe,CAAA;IAC/C,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC,CAAA;IACrD,MAAM,YAAY,GAAG,CAAC,CAAS,EAAW,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;IAC/D,MAAM,MAAM,GAAmB,MAAM,CAAC,MAAM,IAAI,OAAO,CAAA;IAEvD,MAAM,UAAU,GAAG,CACjB,OAAoB,EACpB,MAAc,EACA,EAAE;QAChB,MAAM,OAAO,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAA;QAC5C,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACvD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;QACzC,CAAC;QACD,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAChD,MAAM,IAAI,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAA;QACxE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;IACxC,CAAC,CAAA;IAED,MAAM,SAAS,GAAG,CAAC,GAAgB,EAA4B,EAAE;QAC/D,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,SAAS,CAAA;QAC5C,iEAAiE;QACjE,gEAAgE;QAChE,gEAAgE;QAChE,+DAA+D;QAC/D,IAAI,MAAM,CAAC,mBAAmB,KAAK,IAAI,EAAE,CAAC;YACxC,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAA;YAC7C,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACtB,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;gBAClC,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC;oBAC9C,OAAO,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;gBAC3B,CAAC;gBACD,gEAAgE;gBAChE,2DAA2D;gBAC3D,8DAA8D;gBAC9D,+DAA+D;gBAC/D,0DAA0D;gBAC1D,YAAY;gBACZ,MAAM,CAAC,IAAI,CACT,0CAA0C,MAAM,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG;oBACxE,oCAAoC,CACvC,CAAA;YACH,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QAC1D,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,SAAS,CAAA;QAC1C,OAAO,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;IAChC,CAAC,CAAA;IAED,MAAM,UAAU,GAAG,CACjB,GAAgB,EAChB,GAAiB,EACH,EAAE;QAChB,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,GAAG,CAAA;QACtC,mEAAmE;QACnE,+DAA+D;QAC/D,6DAA6D;QAC7D,kDAAkD;QAClD,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;YAChB,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,EAAE,CAAA;YACnC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBACzC,IAAI,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM;oBAAE,OAAO,GAAG,CAAA;YAC5C,CAAC;QACH,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,CAAA;QACrC,OAAO;YACL,GAAG,GAAG;YACN,OAAO,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE;SACnD,CAAA;IACH,CAAC,CAAA;IAED,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,CAAA;AAClC,CAAC,CAAA"}

package/dist/openapi/auto-schema.d.ts

@@ -0,0 +1,3 @@
+/** FNV-1a request seed derivation retained across generation strategies. */
+export declare const hashSeed: (input: string) => number;
+//# sourceMappingURL=auto-schema.d.ts.map

package/dist/openapi/auto-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-schema.d.ts","sourceRoot":"","sources":["../../src/openapi/auto-schema.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,eAAO,MAAM,QAAQ,GAAI,OAAO,MAAM,KAAG,MAOxC,CAAA"}

package/dist/openapi/auto-schema.js

@@ -0,0 +1,10 @@
+/** FNV-1a request seed derivation retained across generation strategies. */
+export const hashSeed = (input) => {
+    let h = 0x811c9dc5;
+    for (let i = 0; i < input.length; i++) {
+        h ^= input.charCodeAt(i);
+        h = (h + ((h << 1) + (h << 4) + (h << 7) + (h << 8) + (h << 24))) >>> 0;
+    }
+    return h >>> 0;
+};
+//# sourceMappingURL=auto-schema.js.map

package/dist/openapi/auto-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-schema.js","sourceRoot":"","sources":["../../src/openapi/auto-schema.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,KAAa,EAAU,EAAE;IAChD,IAAI,CAAC,GAAG,UAAU,CAAA;IAClB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAA;QACxB,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;IACzE,CAAC;IACD,OAAO,CAAC,KAAK,CAAC,CAAA;AAChB,CAAC,CAAA"}

package/dist/openapi/generate.d.ts

@@ -0,0 +1,8 @@
+/** Deterministic structural placeholder generation; no schema runtime dependency. */
+import type { OasDoc, OasNode } from './walker.js';
+/** Reserved for a future seeded mode (brief item #11). Currently ignored. */
+export interface GenerateOptions {
+    readonly seed?: number;
+}
+export declare const generateFromOasSchema: (node: OasNode, doc?: OasDoc, _opts?: GenerateOptions, seen?: Set<string>) => unknown;
+//# sourceMappingURL=generate.d.ts.map

package/dist/openapi/generate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"generate.d.ts","sourceRoot":"","sources":["../../src/openapi/generate.ts"],"names":[],"mappings":"AAAA,qFAAqF;AACrF,OAAO,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,aAAa,CAAA;AAElD,6EAA6E;AAC7E,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CACvB;AAsDD,eAAO,MAAM,qBAAqB,GAChC,MAAM,OAAO,EACb,MAAK,MAAW,EAEhB,QAAO,eAAoB,EAC3B,OAAM,GAAG,CAAC,MAAM,CAAqB,KACpC,OAqEF,CAAA"}