@schmock/cli 2.4.1 → 2.5.0

package/dist/cli.d.ts

@@ -1,74 +1,5 @@
-import type { Server } from "node:http";
-import type * as Schmock from "@schmock/core";
-export interface CliOptions {
-    spec: string;
-    port?: number;
-    hostname?: string;
-    seed?: string;
-    cors?: boolean;
-    debug?: boolean;
-    fakerSeed?: number;
-    errors?: boolean;
-    watch?: boolean;
-    admin?: boolean;
-    /**
-     * Bearer token required by every `/schmock-admin/*` request (`--admin-token`).
-     * When `admin` is on and this is omitted, a random token is minted once and
-     * surfaced on {@link CliServer.adminToken}.
-     */
-    adminToken?: string;
-    /**
-     * How many requests the mock retains for `GET /schmock-admin/history`
-     * (`--admin-history-limit`, default 500). Ignored — history is disabled
-     * entirely — when `admin` is off.
-     */
-    adminHistoryLimit?: number;
-    /** Validate the spec against the OpenAPI schema at startup (`--strict`). */
-    strict?: boolean;
-    /** Resolve `$ref`s outside the spec document (`--refs-external`). */
-    refsExternal?: boolean;
-    /**
-     * Hosts an `http(s)` `$ref` may target (`--refs-allow-http`). Supplying this
-     * also enables http resolution, which still requires `refsExternal`.
-     */
-    refsAllowHttp?: string[];
-    /**
-     * How long {@link CliServer.close} waits for in-flight requests before the
-     * remaining sockets are destroyed (default 5000 ms). A half-sent request
-     * never completes on its own, so without a bound the close would hang.
-     */
-    shutdownGraceMs?: number;
-}
-export interface CliServer {
-    server: Server;
-    port: number;
-    hostname: string;
-    /**
-     * The bearer token this server requires on `/schmock-admin/*`. Present only
-     * when admin is enabled; supply it as `Authorization: Bearer <token>`.
-     */
-    adminToken?: string;
-    /**
-     * Stop watching, stop accepting, and settle once the socket is released —
-     * within {@link CliOptions.shutdownGraceMs}. Memoized: every call observes
-     * the same shutdown, so closing twice is safe and resolves twice.
-     */
-    close(): Promise<void>;
-}
-/**
- * Read a `--seed` manifest.
- *
- * Every entry shape is checked explicitly and anything unrecognised throws:
- * silently dropping a malformed entry used to start a server whose collections
- * were quietly empty. File entries resolve relative to the manifest rather than
- * the process CWD, and may not escape the manifest directory.
- */
-export declare function loadSeedFile(seedPath: string): Schmock.SeedConfig;
-export declare function createCliServer(options: CliOptions): Promise<CliServer>;
-/** Loopback binds are `127.0.0.0/8`, `::1` and `localhost`; everything else is reachable off-box. */
-export declare function isLoopbackHost(hostname: string): boolean;
-export declare function parseCliArgs(args: string[]): CliOptions & {
-    help: boolean;
-};
+export { isLoopbackHost, parseCliArgs } from "./args.js";
+export { loadSeedFile } from "./seed-manifest.js";
+export { createCliServer } from "./server.js";
+export type { CliOptions, CliServer } from "./types.js";
 export declare function run(args: string[]): Promise<void>;
-//# sourceMappingURL=cli.d.ts.map

package/dist/cors.d.ts

@@ -0,0 +1,30 @@
+import type * as Schmock from "@schmock/core";
+/**
+ * A request's raw headers, as Node delivers them. Structural rather than
+ * `IncomingMessage`, so it accepts the request whichever `@types/node` copy
+ * typed it.
+ */
+export interface HeaderSource {
+    readonly headers: {
+        readonly [header: string]: string | string[] | undefined;
+    };
+}
+/**
+ * A repeated header arrives as an array; treat that as "not presented" rather
+ * than joining it, so a duplicated `Authorization` cannot smuggle a token past
+ * the comparison.
+ */
+export declare function singleHeader(value: string | string[] | undefined): string | undefined;
+/**
+ * The CORS headers for one request. A dev-server convenience, not a policy:
+ * the origin is always `*`, which is why credentials are never allowed and no
+ * `Vary: Origin` is needed.
+ */
+export declare function corsHeadersFor(req: HeaderSource): Record<string, string>;
+/**
+ * A browser preflight, as opposed to any other OPTIONS request: both `Origin`
+ * and `Access-Control-Request-Method` are present. Answering only these leaves
+ * a spec-declared `options` operation reachable, and keeps an unrouted path
+ * answering 404 instead of a misleading 204.
+ */
+export declare function isCorsPreflight(req: HeaderSource, method: Schmock.HttpMethod): boolean;

package/dist/index.d.ts

@@ -1,3 +1,2 @@
 export type { CliOptions, CliServer } from "./cli.js";
 export { createCliServer, loadSeedFile, parseCliArgs, run } from "./cli.js";
-//# sourceMappingURL=index.d.ts.map