@databehave/server 0.1.0

package/dist/admin/inject.js

@@ -0,0 +1,167 @@
+import { parseHeaderMode } from './header-parser.js';
+import { DESTROY_SOCKET_SENTINEL } from './admin-types.js';
+const TAG_HEADER = 'x-mock-injected';
+/**
+ * Pure resolver: header overrides beat sticky overrides. Returns
+ * `'none'` when nothing applies and `'error'` for malformed headers.
+ */
+export const resolveMode = (store, method, path, headers) => {
+    const fromHeader = parseHeaderMode(headers);
+    if (fromHeader.kind === 'error')
+        return { kind: 'error', message: fromHeader.message };
+    if (fromHeader.kind === 'mode') {
+        return { kind: 'mode', mode: fromHeader.mode, source: 'header' };
+    }
+    const sticky = store.resolve(method, path);
+    if (sticky)
+        return { kind: 'mode', mode: sticky.mode, source: 'sticky' };
+    return { kind: 'none' };
+};
+const buildResponse = (mode, source) => {
+    const tagHeaders = {
+        [TAG_HEADER]: `${mode.kind}:${source}`,
+    };
+    switch (mode.kind) {
+        case 'http-status':
+            return {
+                status: mode.status,
+                json: { error: true, status: mode.status, injected: mode.kind },
+                headers: tagHeaders,
+            };
+        case 'business-failure':
+            return {
+                status: 200,
+                json: {
+                    success: false,
+                    message: mode.message,
+                    ...(mode.extra ?? {}),
+                },
+                headers: { ...tagHeaders, 'content-type': 'application/json' },
+            };
+        case 'custom-body': {
+            const status = mode.status ?? 200;
+            const contentType = mode.contentType ?? 'application/json';
+            if (typeof mode.body === 'string' && !contentType.includes('json')) {
+                return {
+                    status,
+                    text: mode.body,
+                    headers: { ...tagHeaders, 'content-type': contentType },
+                };
+            }
+            const payload = typeof mode.body === 'string' ? mode.body : JSON.stringify(mode.body);
+            return {
+                status,
+                raw: payload,
+                headers: { ...tagHeaders, 'content-type': contentType },
+            };
+        }
+        case 'empty-body':
+            return {
+                status: mode.status ?? 204,
+                empty: true,
+                headers: tagHeaders,
+            };
+        case 'malformed-json':
+            return {
+                status: mode.status ?? 200,
+                raw: '{',
+                headers: { ...tagHeaders, 'content-type': 'application/json' },
+            };
+        /* v8 ignore start -- defensive: delay/hang/destroy never reach here */
+        case 'delay':
+        case 'hang':
+        case 'destroy':
+            // delay/hang are handled before this function; destroy is dispatched
+            // through the sentinel branch. Reaching here is a bug.
+            return {
+                status: 500,
+                json: {
+                    error: true,
+                    message: `inject: ${mode.kind} should be handled before buildResponse`,
+                },
+                headers: tagHeaders,
+            };
+        /* v8 ignore stop */
+    }
+};
+const buildDestroyDisabledResponse = () => ({
+    status: 503,
+    json: {
+        error: 'x-mock-destroy disabled by admin.allowDestroy:false',
+    },
+    headers: { [TAG_HEADER]: 'destroy-disabled' },
+});
+/**
+ * Sentinel response: shaped as a normal empty 204 so anything that
+ * inspects the public type sees a valid response, but tagged with
+ * {@link DESTROY_SOCKET_SENTINEL} so `server.listen()` can drop the
+ * socket instead of writing the body.
+ */
+const buildDestroySentinel = () => {
+    const base = {
+        status: 204,
+        empty: true,
+        headers: { [TAG_HEADER]: 'destroy' },
+    };
+    Object.defineProperty(base, DESTROY_SOCKET_SENTINEL, {
+        value: true,
+        enumerable: false,
+        writable: false,
+        configurable: false,
+    });
+    return base;
+};
+export const createInjectHook = (opts) => {
+    const { store } = opts;
+    const bypass = opts.bypassPathPrefixes ?? ['/databehave'];
+    const allowDestroy = opts.allowDestroy !== false;
+    const logger = opts.logger ?? console;
+    const shouldBypass = (path) => bypass.some((p) => path.startsWith(p));
+    return async (req) => {
+        if (shouldBypass(req.path))
+            return undefined;
+        const resolved = resolveMode(store, req.method, req.path, req.headers);
+        if (resolved.kind === 'none')
+            return undefined;
+        if (resolved.kind === 'error') {
+            return {
+                status: 400,
+                json: { error: 'invalid x-mock-* header', detail: resolved.message },
+                headers: { [TAG_HEADER]: 'header-error' },
+            };
+        }
+        const { mode, source } = resolved;
+        if (mode.kind === 'hang') {
+            logger.warn(`[@databehave/server/admin] hang triggered on ${req.method} ${req.path} ` +
+                `(source=${source}) — request will never resolve; close the client to recover.`);
+            /* v8 ignore start -- promise never resolves; return is unreachable */
+            await new Promise(() => {
+                /* never resolves */
+            });
+            return undefined;
+            /* v8 ignore stop */
+        }
+        if (mode.kind === 'destroy') {
+            if (!allowDestroy) {
+                logger.warn(`[@databehave/server/admin] destroy requested on ${req.method} ${req.path} ` +
+                    `(source=${source}) but admin.allowDestroy:false — responding 503.`);
+                return buildDestroyDisabledResponse();
+            }
+            return buildDestroySentinel();
+        }
+        if (mode.kind === 'delay') {
+            await new Promise((r) => setTimeout(r, mode.ms));
+            if (mode.then === undefined)
+                return undefined;
+            return buildResponse(mode.then, source);
+        }
+        return buildResponse(mode, source);
+    };
+};
+/** True when the response carries the internal destroy-socket sentinel. */
+export const isDestroySocketSentinel = (res) => {
+    if (!res)
+        return false;
+    return res[DESTROY_SOCKET_SENTINEL] === true;
+};
+//# sourceMappingURL=inject.js.map

package/dist/admin/inject.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inject.js","sourceRoot":"","sources":["../../src/admin/inject.ts"],"names":[],"mappings":"AAqBA,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AACpD,OAAO,EAAE,uBAAuB,EAAkB,MAAM,kBAAkB,CAAA;AAE1E,MAAM,UAAU,GAAG,iBAAiB,CAAA;AAOpC;;;GAGG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CACzB,KAAqB,EACrB,MAAc,EACd,IAAY,EACZ,OAAyC,EAC1B,EAAE;IACjB,MAAM,UAAU,GAAG,eAAe,CAAC,OAAO,CAAC,CAAA;IAC3C,IAAI,UAAU,CAAC,IAAI,KAAK,OAAO;QAC7B,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,CAAA;IACvD,IAAI,UAAU,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC/B,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAA;IAClE,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IAC1C,IAAI,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAA;IACxE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAA;AACzB,CAAC,CAAA;AAED,MAAM,aAAa,GAAG,CACpB,IAAe,EACf,MAA2B,EACb,EAAE;IAChB,MAAM,UAAU,GAA2B;QACzC,CAAC,UAAU,CAAC,EAAE,GAAG,IAAI,CAAC,IAAI,IAAI,MAAM,EAAE;KACvC,CAAA;IACD,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,aAAa;YAChB,OAAO;gBACL,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE;gBAC/D,OAAO,EAAE,UAAU;aACpB,CAAA;QACH,KAAK,kBAAkB;YACrB,OAAO;gBACL,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE;oBACJ,OAAO,EAAE,KAAK;oBACd,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;iBACtB;gBACD,OAAO,EAAE,EAAE,GAAG,UAAU,EAAE,cAAc,EAAE,kBAAkB,EAAE;aAC/D,CAAA;QACH,KAAK,aAAa,CAAC,CAAC,CAAC;YACnB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,GAAG,CAAA;YACjC,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,kBAAkB,CAAA;YAC1D,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACnE,OAAO;oBACL,MAAM;oBACN,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,OAAO,EAAE,EAAE,GAAG,UAAU,EAAE,cAAc,EAAE,WAAW,EAAE;iBACxD,CAAA;YACH,CAAC;YACD,MAAM,OAAO,GACX,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACvE,OAAO;gBACL,MAAM;gBACN,GAAG,EAAE,OAAO;gBACZ,OAAO,EAAE,EAAE,GAAG,UAAU,EAAE,cAAc,EAAE,WAAW,EAAE;aACxD,CAAA;QACH,CAAC;QACD,KAAK,YAAY;YACf,OAAO;gBACL,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,GAAG;gBAC1B,KAAK,EAAE,IAAI;gBACX,OAAO,EAAE,UAAU;aACpB,CAAA;QACH,KAAK,gBAAgB;YACnB,OAAO;gBACL,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,GAAG;gBAC1B,GAAG,EAAE,GAAG;gBACR,OAAO,EAAE,EAAE,GAAG,UAAU,EAAE,cAAc,EAAE,kBAAkB,EAAE;aAC/D,CAAA;QACH,uEAAuE;QACvE,KAAK,OAAO,CAAC;QACb,KAAK,MAAM,CAAC;QACZ,KAAK,SAAS;YACZ,qEAAqE;YACrE,uDAAuD;YACvD,OAAO;gBACL,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE;oBACJ,KAAK,EAAE,IAAI;oBACX,OAAO,EAAE,WAAW,IAAI,CAAC,IAAI,yCAAyC;iBACvE;gBACD,OAAO,EAAE,UAAU;aACpB,CAAA;QACH,oBAAoB;IACtB,CAAC;AACH,CAAC,CAAA;AAED,MAAM,4BAA4B,GAAG,GAAiB,EAAE,CAAC,CAAC;IACxD,MAAM,EAAE,GAAG;IACX,IAAI,EAAE;QACJ,KAAK,EAAE,qDAAqD;KAC7D;IACD,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,kBAAkB,EAAE;CAC9C,CAAC,CAAA;AAEF;;;;;GAKG;AACH,MAAM,oBAAoB,GAAG,GAAiB,EAAE;IAC9C,MAAM,IAAI,GAAiB;QACzB,MAAM,EAAE,GAAG;QACX,KAAK,EAAE,IAAI;QACX,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE;KACrC,CAAA;IACD,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,uBAAuB,EAAE;QACnD,KAAK,EAAE,IAAI;QACX,UAAU,EAAE,KAAK;QACjB,QAAQ,EAAE,KAAK;QACf,YAAY,EAAE,KAAK;KACpB,CAAC,CAAA;IACF,OAAO,IAAI,CAAA;AACb,CAAC,CAAA;AAcD,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,IAAuB,EAAE,EAAE;IAC1D,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAA;IACtB,MAAM,MAAM,GAAG,IAAI,CAAC,kBAAkB,IAAI,CAAC,aAAa,CAAC,CAAA;IACzD,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,KAAK,KAAK,CAAA;IAChD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAA;IAErC,MAAM,YAAY,GAAG,CAAC,IAAY,EAAW,EAAE,CAC7C,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAA;IAExC,OAAO,KAAK,EACV,GAAgB,EACc,EAAE;QAChC,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,SAAS,CAAA;QAE5C,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,CAAA;QACtE,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM;YAAE,OAAO,SAAS,CAAA;QAC9C,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC9B,OAAO;gBACL,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE,EAAE,KAAK,EAAE,yBAAyB,EAAE,MAAM,EAAE,QAAQ,CAAC,OAAO,EAAE;gBACpE,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,cAAc,EAAE;aAC1C,CAAA;QACH,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAA;QAEjC,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACzB,MAAM,CAAC,IAAI,CACT,gDAAgD,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,GAAG;gBACvE,WAAW,MAAM,8DAA8D,CAClF,CAAA;YACD,sEAAsE;YACtE,MAAM,IAAI,OAAO,CAAQ,GAAG,EAAE;gBAC5B,oBAAoB;YACtB,CAAC,CAAC,CAAA;YACF,OAAO,SAAS,CAAA;YAChB,oBAAoB;QACtB,CAAC;QAED,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC5B,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,MAAM,CAAC,IAAI,CACT,mDAAmD,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,GAAG;oBAC1E,WAAW,MAAM,kDAAkD,CACtE,CAAA;gBACD,OAAO,4BAA4B,EAAE,CAAA;YACvC,CAAC;YACD,OAAO,oBAAoB,EAAE,CAAA;QAC/B,CAAC;QAED,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC1B,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAA;YAChD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAA;YAC7C,OAAO,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QACzC,CAAC;QAED,OAAO,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IACpC,CAAC,CAAA;AACH,CAAC,CAAA;AAED,2EAA2E;AAC3E,MAAM,CAAC,MAAM,uBAAuB,GAAG,CACrC,GAAoC,EAC3B,EAAE;IACX,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAA;IACtB,OAAQ,GAA+B,CAAC,uBAAuB,CAAC,KAAK,IAAI,CAAA;AAC3E,CAAC,CAAA"}

package/dist/admin/overrides-store.d.ts

@@ -0,0 +1,18 @@
+import type { ErrorMode, StickyMatcher, StickyOverride } from './admin-types.js';
+export interface OverridesStoreLogger {
+    warn(message: string): void;
+    info?(message: string): void;
+}
+export interface OverridesStore {
+    add(input: {
+        matcher: StickyMatcher;
+        mode: ErrorMode;
+        description?: string;
+    }): StickyOverride;
+    remove(id: string): boolean;
+    list(): readonly StickyOverride[];
+    clear(): number;
+    resolve(method: string, path: string): StickyOverride | undefined;
+}
+export declare const createOverridesStore: (logger?: OverridesStoreLogger) => OverridesStore;
+//# sourceMappingURL=overrides-store.d.ts.map

package/dist/admin/overrides-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"overrides-store.d.ts","sourceRoot":"","sources":["../../src/admin/overrides-store.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAEhF,MAAM,WAAW,oBAAoB;IACnC,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;CAC7B;AAED,MAAM,WAAW,cAAc;IAC7B,GAAG,CAAC,KAAK,EAAE;QACT,OAAO,EAAE,aAAa,CAAA;QACtB,IAAI,EAAE,SAAS,CAAA;QACf,WAAW,CAAC,EAAE,MAAM,CAAA;KACrB,GAAG,cAAc,CAAA;IAClB,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAA;IAC3B,IAAI,IAAI,SAAS,cAAc,EAAE,CAAA;IACjC,KAAK,IAAI,MAAM,CAAA;IACf,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAAA;CAClE;AAED,eAAO,MAAM,oBAAoB,GAC/B,SAAQ,oBAA8B,KACrC,cAkGF,CAAA"}

package/dist/admin/overrides-store.js

@@ -0,0 +1,100 @@
+/**
+ * In-memory sticky overrides registry. Lost on process restart by
+ * design — this tool is for ad-hoc dev sessions, not persistence.
+ *
+ * Resolution priority (first hit wins): `exact` > `path` > `global`.
+ * When two stickies live at the same priority level, the **last** one
+ * added wins (and a warning is logged) so the dev's most-recent click
+ * in the UI is always the active rule.
+ */
+import { randomUUID } from 'node:crypto';
+export const createOverridesStore = (logger = console) => {
+    // Insertion-ordered. `Map.values()` yields oldest → newest, so
+    // when iterating we keep track of the *last* hit per priority bucket.
+    const byId = new Map();
+    const sameMatcher = (a, b) => {
+        if (a.kind !== b.kind)
+            return false;
+        if (a.kind === 'exact' && b.kind === 'exact') {
+            return (a.method.toUpperCase() === b.method.toUpperCase() && a.path === b.path);
+        }
+        if (a.kind === 'path' && b.kind === 'path')
+            return a.path === b.path;
+        return a.kind === 'global' && b.kind === 'global';
+    };
+    const describeMatcher = (m) => {
+        if (m.kind === 'exact')
+            return `${m.method.toUpperCase()} ${m.path}`;
+        if (m.kind === 'path')
+            return `* ${m.path}`;
+        return '* (global)';
+    };
+    const add = ({ matcher, mode, description }) => {
+        // Detect same-matcher collision so the warning is informative.
+        for (const existing of byId.values()) {
+            if (sameMatcher(existing.matcher, matcher)) {
+                logger.warn(`[mock-server/overrides] duplicate matcher ${describeMatcher(matcher)} ` +
+                    `— new rule shadows ${existing.id} (last-wins). Remove the old one if unintended.`);
+            }
+        }
+        const override = {
+            id: randomUUID(),
+            matcher: matcher.kind === 'exact'
+                ? {
+                    kind: 'exact',
+                    method: matcher.method.toUpperCase(),
+                    path: matcher.path,
+                }
+                : matcher.kind === 'global' && matcher.methods && matcher.methods.length > 0
+                    ? {
+                        kind: 'global',
+                        methods: matcher.methods.map((m) => m.toUpperCase()),
+                    }
+                    : matcher.kind === 'global'
+                        ? { kind: 'global' }
+                        : matcher,
+            mode,
+            createdAt: new Date().toISOString(),
+            ...(description !== undefined ? { description } : {}),
+        };
+        byId.set(override.id, override);
+        return override;
+    };
+    const remove = (id) => byId.delete(id);
+    const list = () => [...byId.values()];
+    const clear = () => {
+        const n = byId.size;
+        byId.clear();
+        return n;
+    };
+    const resolve = (method, path) => {
+        const m = method.toUpperCase();
+        // Walk newest → oldest so the last-added rule wins per bucket.
+        const all = [...byId.values()].reverse();
+        let exactHit;
+        let pathHit;
+        let globalHit;
+        for (const o of all) {
+            if (o.matcher.kind === 'exact') {
+                if (!exactHit && o.matcher.method === m && o.matcher.path === path) {
+                    exactHit = o;
+                }
+            }
+            else if (o.matcher.kind === 'path') {
+                if (!pathHit && o.matcher.path === path)
+                    pathHit = o;
+            }
+            else {
+                if (!globalHit
+                    && (!o.matcher.methods
+                        || o.matcher.methods.length === 0
+                        || o.matcher.methods.includes(m))) {
+                    globalHit = o;
+                }
+            }
+        }
+        return exactHit ?? pathHit ?? globalHit;
+    };
+    return { add, remove, list, clear, resolve };
+};
+//# sourceMappingURL=overrides-store.js.map

package/dist/admin/overrides-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"overrides-store.js","sourceRoot":"","sources":["../../src/admin/overrides-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAqBxC,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAClC,SAA+B,OAAO,EACtB,EAAE;IAClB,+DAA+D;IAC/D,sEAAsE;IACtE,MAAM,IAAI,GAAG,IAAI,GAAG,EAA0B,CAAA;IAE9C,MAAM,WAAW,GAAG,CAAC,CAAgB,EAAE,CAAgB,EAAW,EAAE;QAClE,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI;YAAE,OAAO,KAAK,CAAA;QACnC,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC7C,OAAO,CACL,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,CACvE,CAAA;QACH,CAAC;QACD,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM;YAAE,OAAO,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,CAAA;QACpE,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAA;IACnD,CAAC,CAAA;IAED,MAAM,eAAe,GAAG,CAAC,CAAgB,EAAU,EAAE;QACnD,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,IAAI,EAAE,CAAA;QACpE,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM;YAAE,OAAO,KAAK,CAAC,CAAC,IAAI,EAAE,CAAA;QAC3C,OAAO,YAAY,CAAA;IACrB,CAAC,CAAA;IAED,MAAM,GAAG,GAA0B,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE;QACpE,+DAA+D;QAC/D,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YACrC,IAAI,WAAW,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;gBAC3C,MAAM,CAAC,IAAI,CACT,6CAA6C,eAAe,CAC1D,OAAO,CACR,GAAG;oBACF,sBAAsB,QAAQ,CAAC,EAAE,iDAAiD,CACrF,CAAA;YACH,CAAC;QACH,CAAC;QACD,MAAM,QAAQ,GAAmB;YAC/B,EAAE,EAAE,UAAU,EAAE;YAChB,OAAO,EACL,OAAO,CAAC,IAAI,KAAK,OAAO;gBACtB,CAAC,CAAC;oBACE,IAAI,EAAE,OAAO;oBACb,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE;oBACpC,IAAI,EAAE,OAAO,CAAC,IAAI;iBACnB;gBACH,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;oBAC1E,CAAC,CAAC;wBACE,IAAI,EAAE,QAAQ;wBACd,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;qBACrD;oBACH,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,QAAQ;wBACzB,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE;wBACpB,CAAC,CAAC,OAAO;YACjB,IAAI;YACJ,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtD,CAAA;QACD,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAA;QAC/B,OAAO,QAAQ,CAAA;IACjB,CAAC,CAAA;IAED,MAAM,MAAM,GAA6B,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IAEhE,MAAM,IAAI,GAA2B,GAAG,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAA;IAE7D,MAAM,KAAK,GAA4B,GAAG,EAAE;QAC1C,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAA;QACnB,IAAI,CAAC,KAAK,EAAE,CAAA;QACZ,OAAO,CAAC,CAAA;IACV,CAAC,CAAA;IAED,MAAM,OAAO,GAA8B,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE;QAC1D,MAAM,CAAC,GAAG,MAAM,CAAC,WAAW,EAAE,CAAA;QAC9B,+DAA+D;QAC/D,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAA;QACxC,IAAI,QAAoC,CAAA;QACxC,IAAI,OAAmC,CAAA;QACvC,IAAI,SAAqC,CAAA;QACzC,KAAK,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;YACpB,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC/B,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;oBACnE,QAAQ,GAAG,CAAC,CAAA;gBACd,CAAC;YACH,CAAC;iBAAM,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBACrC,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,IAAI;oBAAE,OAAO,GAAG,CAAC,CAAA;YACtD,CAAC;iBAAM,CAAC;gBACN,IACE,CAAC,SAAS;uBACP,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO;2BACjB,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;2BAC9B,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EACnC,CAAC;oBACD,SAAS,GAAG,CAAC,CAAA;gBACf,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,QAAQ,IAAI,OAAO,IAAI,SAAS,CAAA;IACzC,CAAC,CAAA;IAED,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAA;AAC9C,CAAC,CAAA"}

package/dist/admin/resolve-cors.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Resolve the static CORS header bag added to admin-route responses.
+ *
+ * The policy is intentionally tiny: admin endpoints are dev-only and
+ * never see browser credentials, so a full `Access-Control-*`
+ * negotiation would be overkill. We just need to decide whether the
+ * UI / a bookmarklet on a different origin can XHR into them.
+ *
+ * Defaults:
+ *   - `'auto'` + loopback-only bind  → `'*'` (UI on any localhost port works)
+ *   - `'auto'` + bind: 'any'         → `'same-origin'` (LAN-exposed: lock down)
+ *   - `'any'`                        → `'*'`
+ *   - `'same-origin'`                → no CORS headers added
+ *   - `{ origin: 'x' | ['x', ...] }` → first allowed origin (string join with ', ')
+ *
+ * Returned object is a `Record<string, string>` ready to splat into
+ * `MockResponse.headers`. Empty object when no CORS headers
+ * should be added (same-origin).
+ */
+import type { AdminModeCors, AdminModeConfig } from './admin-types.js';
+export declare const resolveAdminCors: (bind: NonNullable<AdminModeConfig["bind"]>, cors: AdminModeCors) => Record<string, string>;
+//# sourceMappingURL=resolve-cors.d.ts.map

package/dist/admin/resolve-cors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-cors.d.ts","sourceRoot":"","sources":["../../src/admin/resolve-cors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AAuBtE,eAAO,MAAM,gBAAgB,GAC3B,MAAM,WAAW,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,EAC1C,MAAM,aAAa,KAClB,MAAM,CAAC,MAAM,EAAE,MAAM,CAQvB,CAAA"}

package/dist/admin/resolve-cors.js

@@ -0,0 +1,28 @@
+const PERMISSIVE_METHODS = 'GET,POST,DELETE,OPTIONS';
+const PERMISSIVE_HEADERS = 'content-type';
+const wildcardHeaders = () => ({
+    'access-control-allow-origin': '*',
+    'access-control-allow-methods': PERMISSIVE_METHODS,
+    'access-control-allow-headers': PERMISSIVE_HEADERS,
+});
+const explicitOriginHeaders = (origin) => {
+    const value = Array.isArray(origin) ? origin.join(', ') : origin;
+    return {
+        'access-control-allow-origin': value,
+        'access-control-allow-methods': PERMISSIVE_METHODS,
+        'access-control-allow-headers': PERMISSIVE_HEADERS,
+        vary: 'Origin',
+    };
+};
+export const resolveAdminCors = (bind, cors) => {
+    if (cors === 'same-origin')
+        return {};
+    if (cors === 'any')
+        return wildcardHeaders();
+    if (cors === 'auto') {
+        return bind === 'loopback-only' ? wildcardHeaders() : {};
+    }
+    // explicit { origin } form
+    return explicitOriginHeaders(cors.origin);
+};
+//# sourceMappingURL=resolve-cors.js.map

package/dist/admin/resolve-cors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-cors.js","sourceRoot":"","sources":["../../src/admin/resolve-cors.ts"],"names":[],"mappings":"AAqBA,MAAM,kBAAkB,GAAG,yBAAyB,CAAA;AACpD,MAAM,kBAAkB,GAAG,cAAc,CAAA;AAEzC,MAAM,eAAe,GAAG,GAA2B,EAAE,CAAC,CAAC;IACrD,6BAA6B,EAAE,GAAG;IAClC,8BAA8B,EAAE,kBAAkB;IAClD,8BAA8B,EAAE,kBAAkB;CACnD,CAAC,CAAA;AAEF,MAAM,qBAAqB,GAAG,CAC5B,MAAkC,EACV,EAAE;IAC1B,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,MAAiB,CAAA;IAC5E,OAAO;QACL,6BAA6B,EAAE,KAAK;QACpC,8BAA8B,EAAE,kBAAkB;QAClD,8BAA8B,EAAE,kBAAkB;QAClD,IAAI,EAAE,QAAQ;KACf,CAAA;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,IAA0C,EAC1C,IAAmB,EACK,EAAE;IAC1B,IAAI,IAAI,KAAK,aAAa;QAAE,OAAO,EAAE,CAAA;IACrC,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,eAAe,EAAE,CAAA;IAC5C,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,OAAO,IAAI,KAAK,eAAe,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IAC1D,CAAC;IACD,2BAA2B;IAC3B,OAAO,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;AAC3C,CAAC,CAAA"}

package/dist/admin/scenarios-store.d.ts

@@ -0,0 +1,15 @@
+import type { Scenario, ScenarioSummary, StickyOverride } from './admin-types.js';
+export declare const isValidScenarioName: (name: string) => boolean;
+export interface ScenariosStore {
+    readonly dir: string;
+    list(): Promise<ScenarioSummary[]>;
+    get(name: string): Promise<Scenario | null>;
+    save(name: string, overrides: readonly StickyOverride[]): Promise<Scenario>;
+    remove(name: string): Promise<boolean>;
+}
+interface CreateScenariosStoreOptions {
+    readonly dir: string;
+}
+export declare const createScenariosStore: (opts: CreateScenariosStoreOptions) => ScenariosStore;
+export {};
+//# sourceMappingURL=scenarios-store.d.ts.map

package/dist/admin/scenarios-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scenarios-store.d.ts","sourceRoot":"","sources":["../../src/admin/scenarios-store.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,QAAQ,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAIjF,eAAO,MAAM,mBAAmB,GAAI,MAAM,MAAM,KAAG,OAA6B,CAAA;AAEhF,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,IAAI,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC,CAAA;IAClC,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAA;IAC3C,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,cAAc,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC3E,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;CACvC;AAED,UAAU,2BAA2B;IACnC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CACrB;AAKD,eAAO,MAAM,oBAAoB,GAC/B,MAAM,2BAA2B,KAChC,cAgFF,CAAA"}

package/dist/admin/scenarios-store.js

@@ -0,0 +1,109 @@
+/**
+ * File-backed scenarios registry.
+ *
+ * A *scenario* is a named JSON snapshot of one or more sticky
+ * overrides. Scenarios live as `<name>.json` files inside the
+ * configured directory (default `<cwd>/mock-scenarios`). Names are
+ * sanitised — only `[A-Za-z0-9_-]`, max 64 chars — so they map
+ * directly to safe filenames and round-trip through HTTP path
+ * segments without escaping.
+ *
+ * The directory is opt-in: a missing dir yields an empty list rather
+ * than throwing. The first save creates the dir.
+ *
+ * Writes are atomic: write to `<name>.json.<tmp>` then rename, so a
+ * partial write never produces a half-parsed file.
+ */
+import { randomBytes } from 'node:crypto';
+import { mkdir, readFile, readdir, rename, stat, unlink, writeFile } from 'node:fs/promises';
+import { join } from 'node:path';
+const NAME_RE = /^[A-Za-z0-9_-]{1,64}$/;
+export const isValidScenarioName = (name) => NAME_RE.test(name);
+const isENOENT = (err) => typeof err === 'object' && err !== null && err.code === 'ENOENT';
+export const createScenariosStore = (opts) => {
+    const { dir } = opts;
+    const filePath = (name) => join(dir, `${name}.json`);
+    const list = async () => {
+        let entries;
+        try {
+            entries = await readdir(dir);
+        }
+        catch (err) {
+            if (isENOENT(err))
+                return [];
+            throw err;
+        }
+        const out = [];
+        for (const entry of entries) {
+            if (!entry.endsWith('.json'))
+                continue;
+            const name = entry.slice(0, -5);
+            if (!isValidScenarioName(name))
+                continue;
+            try {
+                const full = join(dir, entry);
+                const [text, st] = await Promise.all([readFile(full, 'utf8'), stat(full)]);
+                const parsed = JSON.parse(text);
+                out.push({
+                    name,
+                    count: Array.isArray(parsed.overrides) ? parsed.overrides.length : 0,
+                    created: parsed.created ?? st.mtime.toISOString(),
+                });
+            }
+            catch {
+                // skip unreadable / malformed files; the UI still works.
+            }
+        }
+        out.sort((a, b) => a.name.localeCompare(b.name));
+        return out;
+    };
+    const get = async (name) => {
+        if (!isValidScenarioName(name))
+            return null;
+        try {
+            const text = await readFile(filePath(name), 'utf8');
+            const parsed = JSON.parse(text);
+            return {
+                name,
+                overrides: Array.isArray(parsed.overrides) ? parsed.overrides : [],
+                ...(parsed.created !== undefined ? { created: parsed.created } : {}),
+            };
+        }
+        catch (err) {
+            if (isENOENT(err))
+                return null;
+            return null;
+        }
+    };
+    const save = async (name, overrides) => {
+        if (!isValidScenarioName(name)) {
+            throw new Error(`@databehave/server: invalid scenario name: ${JSON.stringify(name)}`);
+        }
+        await mkdir(dir, { recursive: true });
+        const scenario = {
+            name,
+            overrides: [...overrides],
+            created: new Date().toISOString(),
+        };
+        const final = filePath(name);
+        const tmp = `${final}.${randomBytes(6).toString('hex')}.tmp`;
+        await writeFile(tmp, JSON.stringify(scenario, null, 2), 'utf8');
+        await rename(tmp, final);
+        return scenario;
+    };
+    const remove = async (name) => {
+        if (!isValidScenarioName(name))
+            return false;
+        try {
+            await unlink(filePath(name));
+            return true;
+        }
+        catch (err) {
+            if (isENOENT(err))
+                return false;
+            throw err;
+        }
+    };
+    return { dir, list, get, save, remove };
+};
+//# sourceMappingURL=scenarios-store.js.map

package/dist/admin/scenarios-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scenarios-store.js","sourceRoot":"","sources":["../../src/admin/scenarios-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC5F,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAIhC,MAAM,OAAO,GAAG,uBAAuB,CAAA;AAEvC,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,IAAY,EAAW,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AAchF,MAAM,QAAQ,GAAG,CAAC,GAAY,EAAW,EAAE,CACzC,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAK,GAAyB,CAAC,IAAI,KAAK,QAAQ,CAAA;AAEzF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAClC,IAAiC,EACjB,EAAE;IAClB,MAAM,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;IAEpB,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,OAAO,CAAC,CAAA;IAEpE,MAAM,IAAI,GAA2B,KAAK,IAAI,EAAE;QAC9C,IAAI,OAAiB,CAAA;QACrB,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAA;QAC9B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,QAAQ,CAAC,GAAG,CAAC;gBAAE,OAAO,EAAE,CAAA;YAC5B,MAAM,GAAG,CAAA;QACX,CAAC;QACD,MAAM,GAAG,GAAsB,EAAE,CAAA;QACjC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAAE,SAAQ;YACtC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;YAC/B,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC;gBAAE,SAAQ;YACxC,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;gBAC7B,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;gBAC1E,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAa,CAAA;gBAC3C,GAAG,CAAC,IAAI,CAAC;oBACP,IAAI;oBACJ,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;oBACpE,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE;iBAClD,CAAC,CAAA;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,yDAAyD;YAC3D,CAAC;QACH,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;QAChD,OAAO,GAAG,CAAA;IACZ,CAAC,CAAA;IAED,MAAM,GAAG,GAA0B,KAAK,EAAE,IAAI,EAAE,EAAE;QAChD,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAA;QAC3C,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAA;YACnD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAa,CAAA;YAC3C,OAAO;gBACL,IAAI;gBACJ,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE;gBAClE,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACrE,CAAA;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,QAAQ,CAAC,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAA;YAC9B,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC,CAAA;IAED,MAAM,IAAI,GAA2B,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE;QAC7D,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,8CAA8C,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACvF,CAAC;QACD,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACrC,MAAM,QAAQ,GAAa;YACzB,IAAI;YACJ,SAAS,EAAE,CAAC,GAAG,SAAS,CAAC;YACzB,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SAClC,CAAA;QACD,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAA;QAC5B,MAAM,GAAG,GAAG,GAAG,KAAK,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAA;QAC5D,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAA;QAC/D,MAAM,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;QACxB,OAAO,QAAQ,CAAA;IACjB,CAAC,CAAA;IAED,MAAM,MAAM,GAA6B,KAAK,EAAE,IAAI,EAAE,EAAE;QACtD,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAA;QAC5C,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAA;YAC5B,OAAO,IAAI,CAAA;QACb,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,QAAQ,CAAC,GAAG,CAAC;gBAAE,OAAO,KAAK,CAAA;YAC/B,MAAM,GAAG,CAAA;QACX,CAAC;IACH,CAAC,CAAA;IAED,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,CAAA;AACzC,CAAC,CAAA"}

package/dist/admin/ui.css

@@ -0,0 +1,2 @@
+*{box-sizing:border-box}html,body{color:#1f2328;background:#f6f8fa;margin:0;padding:0;font:13px/1.45 -apple-system,BlinkMacSystemFont,Segoe UI,system-ui,Roboto,Noto Sans,Ubuntu,Cantarell,Helvetica Neue,sans-serif}button{font:inherit;cursor:pointer}input,select,textarea{font:inherit;color:inherit}code,pre,.mono{font-family:ui-monospace,SF Mono,Menlo,monospace}a{color:#0969da}.app{min-height:100vh;padding-bottom:60px}.top-bar{z-index:30;color:#fff;background:#24292f;align-items:center;gap:12px;padding:10px 16px;display:flex;position:sticky;top:0}.top-bar h1{flex:1;margin:0;font-size:15px;font-weight:600}.top-bar .url{color:#adbac7;font-family:ui-monospace,Menlo,monospace;font-size:11px}.top-bar .badge{color:#fff;background:#1f883d;border-radius:10px;padding:2px 8px;font-size:11px;font-weight:600}.top-bar button,.top-bar select{color:#24292f;background:#fff;border:1px solid #57606a;border-radius:6px;padding:4px 10px;font-size:12px}.top-bar button.ghost{color:#fff;background:0 0;border-color:#57606a}.filter-bar{z-index:25;background:#fff;border-bottom:1px solid #d0d7de;flex-wrap:wrap;align-items:center;gap:16px;padding:10px 16px;display:flex;position:sticky;top:48px}.filter-bar input[type=text]{border:1px solid #d0d7de;border-radius:6px;flex:1;min-width:260px;padding:6px 10px}.filter-bar label{align-items:center;gap:4px;font-size:12px;display:inline-flex}.main{max-width:1300px;margin:0 auto;padding:12px 16px}.right-panel{z-index:40;background:#fff;border-left:1px solid #d0d7de;flex-direction:column;width:360px;max-width:90vw;height:100vh;transition:transform .18s;display:flex;position:fixed;top:0;right:0;transform:translate(100%);box-shadow:-4px 0 12px #0000000f}.right-panel.open{transform:translate(0)}.right-panel header{border-bottom:1px solid #d0d7de;align-items:center;gap:8px;padding:12px 16px;display:flex}.right-panel header h2{flex:1;margin:0;font-size:14px}.right-panel .list{flex:1;padding:8px;overflow-y:auto}.pill-float{color:#fff;z-index:35;background:#cf222e;border:none;border-radius:999px;padding:8px 14px;font-size:12px;font-weight:600;position:fixed;bottom:16px;right:16px;box-shadow:0 2px 8px #00000026}.toast-stack{z-index:50;flex-direction:column;gap:6px;display:flex;position:fixed;bottom:60px;right:16px}.toast{color:#fff;cursor:pointer;border-radius:6px;min-width:180px;padding:8px 12px;font-size:12px;box-shadow:0 2px 8px #00000026}.toast.success{background:#1f883d}.toast.error{background:#cf222e}.toast.info{background:#0969da}.modal-backdrop{z-index:60;background:#0006;justify-content:center;align-items:center;display:flex;position:fixed;top:0;bottom:0;left:0;right:0}.modal{background:#fff;border-radius:8px;width:92%;max-width:520px;padding:20px}.modal h2{margin-top:0}.modal table{width:100%;font-size:12px}.modal kbd{background:#f6f8fa;border:1px solid #d0d7de;border-radius:3px;padding:1px 6px;font-family:ui-monospace,Menlo,monospace;font-size:11px}.group{background:#fff;border:1px solid #d0d7de;border-radius:8px;margin-bottom:10px;overflow:hidden}.group-header{cursor:pointer;background:#f6f8fa;border-bottom:1px solid #eaeef2;align-items:center;gap:10px;padding:10px 14px;display:flex}.group-header h3{text-transform:capitalize;flex:1;margin:0;font-size:13px}.group-header .count{color:#57606a;font-size:11px}.group-body{display:none}.group.open .group-body{display:block}.op-row{cursor:pointer;border-bottom:1px solid #eaeef2;align-items:center;gap:10px;padding:8px 14px;display:flex}.op-row:last-child{border-bottom:none}.op-row:hover{background:#f6f8fa}.op-row.focused{background:#ddf4ff}.op-row .path{flex:1;font-family:ui-monospace,Menlo,monospace;font-size:12px}.op-row .path .no-oas-pill{color:#6e7781;letter-spacing:.02em;margin-left:6px;font-family:-apple-system,BlinkMacSystemFont,Segoe UI,sans-serif;font-size:10px;font-weight:500}.op-row .summary{color:#57606a;text-overflow:ellipsis;white-space:nowrap;max-width:380px;font-size:11px;overflow:hidden}.op-row .dot{background:0 0;border:1px solid #d0d7de;border-radius:50%;width:10px;height:10px}.op-row .dot.active{border-color:#0000}.method-badge{text-align:center;color:#fff;border-radius:4px;min-width:56px;padding:3px 8px;font-family:ui-monospace,Menlo,monospace;font-size:11px;font-weight:700;display:inline-block}.op-card{border-top:1px solid #eaeef2;padding:0}.spec-zone{background:#fff;border-bottom:1px solid #eaeef2;padding:14px 18px}.spec-zone h4{color:#57606a;text-transform:uppercase;letter-spacing:.5px;margin:0 0 6px;font-size:12px}.spec-zone .desc{color:#1f2328;font-size:12px}.spec-zone table{border-collapse:collapse;width:100%;margin-top:4px;font-size:12px}.spec-zone th,.spec-zone td{text-align:left;border-bottom:1px solid #eaeef2;padding:4px 6px}.spec-zone th{color:#57606a;font-weight:600}.mock-zone{background:#fff8c5;border-left:4px solid #d4a72c;padding:14px 18px}.mock-zone h4{color:#7d4e00;text-transform:uppercase;letter-spacing:.5px;margin:0 0 8px;font-size:12px}.mock-zone .row{grid-template-columns:160px 1fr;align-items:center;gap:10px;margin-bottom:8px;display:grid}.mock-zone label{color:#4a3500;font-size:12px;font-weight:500}.mock-zone input[type=text],.mock-zone input[type=number],.mock-zone select,.mock-zone textarea{background:#fff;border:1px solid #d4a72c;border-radius:4px;width:100%;padding:4px 8px}.mock-zone textarea{min-height:70px;font-family:ui-monospace,Menlo,monospace}.mock-zone .radio-group{flex-wrap:wrap;gap:12px;display:flex}.mock-zone .radio-group label{align-items:center;gap:4px;font-weight:400;display:inline-flex}.mock-zone .actions{gap:8px;margin-top:10px;display:flex}.btn{color:#1f2328;background:#fff;border:1px solid #d0d7de;border-radius:6px;padding:6px 12px}.btn.primary{color:#fff;background:#1f883d;border-color:#0000;font-weight:600}.btn.danger{color:#fff;background:#cf222e;border-color:#0000}.btn.ghost{background:0 0}.try-it{background:#f6f8fa;border-top:1px solid #eaeef2;padding:14px 18px}.try-it summary{cursor:pointer;font-size:13px;font-weight:600}.try-it .field{margin:6px 0}.try-it .response{background:#fff;border:1px solid #d0d7de;border-radius:6px;max-height:320px;margin-top:8px;padding:10px;font-family:ui-monospace,Menlo,monospace;font-size:12px;overflow:auto}.schema-tree{font-family:ui-monospace,Menlo,monospace;font-size:12px}.schema-tree details{margin-left:12px}.schema-tree summary{cursor:pointer}.schema-tree .key{color:#6f42c1}.schema-tree .type{color:#1f883d;margin-left:6px;font-style:italic}.schema-tree .req{color:#cf222e}.override-item{cursor:pointer;border-bottom:1px solid #eaeef2;align-items:center;gap:8px;padding:8px;display:flex}.override-item:hover{background:#f6f8fa}.override-item .info{flex:1;font-size:12px}.override-item .info .route{font-family:ui-monospace,Menlo,monospace}.override-item .dot{border-radius:50%;width:10px;height:10px}.global-active-hint{color:#4a2370;background:#f3e8ff;border-left:3px solid #6f42c1;border-radius:4px;align-items:center;gap:8px;margin-bottom:8px;padding:6px 10px;font-size:12px;display:flex}.global-active-hint .btn{padding:2px 8px;font-size:11px}.scope-badge{letter-spacing:.5px;text-transform:uppercase;color:#fff;border-radius:4px;padding:2px 6px;font-size:10px;font-weight:700;display:inline-block}.scope-badge.scope-global{background:#6f42c1}.override-item.is-global{background:#faf5ff}.override-item.is-global:hover{background:#f3e8ff}.top-bar .global-override-btn{align-items:center;gap:6px;display:inline-flex}.top-bar .global-badge{background:#6f42c1}.global-override-modal{max-width:560px}.global-override-header{align-items:center;gap:8px;margin-bottom:4px;display:flex}.global-override-header h2{flex:1;margin:0;font-size:16px}.global-override-header .close-x{color:#57606a;background:#fff;border:1px solid #d0d7de;padding:2px 8px;font-size:18px;line-height:1}.global-override-desc{color:#57606a;margin:0 0 12px;font-size:12px}.global-override-modal .row{grid-template-columns:140px 1fr;align-items:center;gap:10px;margin-bottom:8px;display:grid}.global-override-modal label{color:#1f2328;font-size:12px;font-weight:500}.global-override-modal input[type=text],.global-override-modal input[type=number],.global-override-modal select,.global-override-modal textarea{background:#fff;border:1px solid #d0d7de;border-radius:4px;width:100%;padding:4px 8px}.global-override-modal textarea{min-height:70px;font-family:ui-monospace,Menlo,monospace}.global-override-modal .actions{gap:8px;margin-top:12px;display:flex}.global-override-modal .method-checkboxes{flex-wrap:wrap;align-items:center;gap:6px 12px;display:flex}.global-override-modal .method-checkbox{color:#1f2328;cursor:pointer;align-items:center;gap:4px;font-size:12px;font-weight:500;display:inline-flex}.global-override-modal .method-checkbox input[type=checkbox]{width:auto;margin:0}.global-override-list{border-top:1px solid #eaeef2;margin-top:16px;padding-top:12px}.global-override-list h3{color:#57606a;text-transform:uppercase;letter-spacing:.5px;margin:0 0 8px;font-size:12px}
+/*$vite$:1*/

package/dist/admin/ui.html

@@ -0,0 +1,13 @@
+<!doctype html>
+<html lang="en">
+<head>
+<meta charset="utf-8" />
+<meta name="viewport" content="width=device-width, initial-scale=1" />
+<title>Mock Injection</title>
+  <script type="module" crossorigin src="./ui.js"></script>
+  <link rel="stylesheet" crossorigin href="./ui.css">
+</head>
+<body>
+<div id="root"></div>
+</body>
+</html>