@testsmith/api-spector 0.3.6 → 0.3.8

package/out/renderer/assets/{index-htBErIFG.js → index-BK58GuOI.js}

@@ -13404,14 +13404,33 @@ const createWsSlice = (set2) => ({
   })
 });
 const HISTORY_CAP = 200;
-const createHistorySlice = (set2) => ({
+let saveTimer = null;
+function persistIfEnabled(get2) {
+  if (!get2().workspace?.settings?.persistHistory) return;
+  if (saveTimer) clearTimeout(saveTimer);
+  saveTimer = setTimeout(() => {
+    window.electron.saveHistory(get2().history).catch((err) => {
+      console.warn("persistHistory: could not save history.json", err);
+    });
+  }, 800);
+}
+const createHistorySlice = (set2, get2) => ({
   history: [],
-  addHistoryEntry: (entry) => set2((s) => {
-    s.history.unshift(entry);
-    if (s.history.length > HISTORY_CAP) s.history.length = HISTORY_CAP;
-  }),
-  clearHistory: () => set2((s) => {
-    s.history = [];
+  addHistoryEntry: (entry) => {
+    set2((s) => {
+      s.history.unshift(entry);
+      if (s.history.length > HISTORY_CAP) s.history.length = HISTORY_CAP;
+    });
+    persistIfEnabled(get2);
+  },
+  clearHistory: () => {
+    set2((s) => {
+      s.history = [];
+    });
+    persistIfEnabled(get2);
+  },
+  setHistory: (entries) => set2((s) => {
+    s.history = entries.slice(0, HISTORY_CAP);
   })
 });
 const createRunnerSlice = (set2) => ({
@@ -13983,6 +14002,21 @@ const createEnvironmentsSlice = (set2, get2) => ({
   updateEnvironment: (id2, data) => set2((s) => {
     if (s.environments[id2]) s.environments[id2].data = data;
   }),
+  upsertEnvVar: (envId, key, value) => {
+    set2((s) => {
+      const env = s.environments[envId]?.data;
+      if (!env) return;
+      const existing = env.variables.find((v) => v.key === key && !v.secret);
+      if (existing) existing.value = value;
+      else env.variables.push({ key, value, enabled: true });
+    });
+    const entry = get2().environments[envId];
+    if (entry) {
+      window.electron.saveEnvironment(entry.relPath, entry.data).catch((err) => {
+        console.warn("upsertEnvVar: could not save environment", entry.relPath, err);
+      });
+    }
+  },
   addEnvironment: () => set2((s) => {
     const existingNames = Object.values(s.environments).map((e) => e.data.name);
     const envName = uniqueName("New Environment", existingNames);
@@ -14152,7 +14186,7 @@ const useStore = create()(
   immer((set2, get2, api) => ({
     // ── Slice composition ─────────────────────────────────────────────────────
     ...createWsSlice(set2),
-    ...createHistorySlice(set2),
+    ...createHistorySlice(set2, get2),
     ...createRunnerSlice(set2),
     ...createRecorderSlice(set2),
     ...createContractSlice(set2),
@@ -14244,7 +14278,7 @@ const useStore = create()(
     })
   }))
 );
-const { electron: electron$r } = window;
+const { electron: electron$s } = window;
 function useAutoSave() {
   const collections = useStore((s) => s.collections);
   useStore((s) => s.environments);
@@ -14260,7 +14294,7 @@ function useAutoSave() {
       for (const { relPath, data, dirty } of dirtyCollections) {
         if (!dirty) continue;
         try {
-          await electron$r.saveCollection(relPath, data);
+          await electron$s.saveCollection(relPath, data);
           markCollectionClean(data.id);
         } catch (e) {
           console.error("Auto-save failed for", relPath, e);
@@ -14276,7 +14310,7 @@ function useAutoSave() {
     if (wsTimerRef.current) clearTimeout(wsTimerRef.current);
     wsTimerRef.current = setTimeout(async () => {
       try {
-        await electron$r.saveWorkspace(workspace);
+        await electron$s.saveWorkspace(workspace);
       } catch {
       }
     }, 300);
@@ -14285,7 +14319,7 @@ function useAutoSave() {
     };
   }, [workspace]);
 }
-const { electron: electron$q } = window;
+const { electron: electron$r } = window;
 function useWorkspaceLoader() {
   const loadCollection = useStore((s) => s.loadCollection);
   const loadEnvironment = useStore((s) => s.loadEnvironment);
@@ -14307,16 +14341,25 @@ function useWorkspaceLoader() {
     });
     if (ws2.settings?.theme) setTheme(ws2.settings.theme);
     if (typeof ws2.settings?.zoom === "number") setZoom(ws2.settings.zoom);
+    if (ws2.settings?.persistHistory) {
+      try {
+        const entries = await electron$r.loadHistory();
+        useStore.getState().setHistory(entries);
+      } catch {
+      }
+    } else {
+      useStore.getState().setHistory([]);
+    }
     for (const colPath of ws2.collections) {
       try {
-        const col = await electron$q.loadCollection(colPath);
+        const col = await electron$r.loadCollection(colPath);
         loadCollection(colPath, col);
       } catch {
       }
     }
     for (const envPath of ws2.environments) {
       try {
-        const env = await electron$q.loadEnvironment(envPath);
+        const env = await electron$r.loadEnvironment(envPath);
         loadEnvironment(envPath, env);
       } catch {
       }
@@ -14335,19 +14378,19 @@ function useWorkspaceLoader() {
     }
     for (const relPath of ws2.mocks ?? []) {
       try {
-        const mockData = await electron$q.loadMock(relPath);
+        const mockData = await electron$r.loadMock(relPath);
         loadMock(relPath, mockData);
       } catch {
       }
     }
     try {
-      const snapshots = await electron$q.listContractSnapshots(ws2.contracts ?? []);
+      const snapshots = await electron$r.listContractSnapshots(ws2.contracts ?? []);
       for (const { relPath, snapshot } of snapshots) loadContractSnapshot(relPath, snapshot);
     } catch {
     }
     if (ws2.collections.length > 0) {
       try {
-        const firstCol = await electron$q.loadCollection(ws2.collections[0]);
+        const firstCol = await electron$r.loadCollection(ws2.collections[0]);
         setActiveCollection(firstCol.id);
       } catch {
       }
@@ -33137,8 +33180,8 @@ class CompletionTooltip {
           if (typeof section != "string" && section.header) {
             ul.appendChild(section.header(section));
           } else {
-            let header = ul.appendChild(document.createElement("completion-section"));
-            header.textContent = name2;
+            let header2 = ul.appendChild(document.createElement("completion-section"));
+            header2.textContent = name2;
           }
         }
       }
@@ -35948,7 +35991,7 @@ function CollectionSettingsModal({ collection, onClose }) {
     }
   );
 }
-const { electron: electron$p } = window;
+const { electron: electron$q } = window;
 function normalisePath(url) {
   let path = url.replace(/^\{\{[^}]+\}\}/, "").replace(/^https?:\/\/[^/]+/, "");
   if (!path.startsWith("/")) path = "/" + path;
@@ -36035,7 +36078,7 @@ function SchemaSyncModal({
     setLoading(true);
     setError(null);
     try {
-      const entries = await electron$p.extractOpenApiSchemas();
+      const entries = await electron$q.extractOpenApiSchemas();
       if (!entries) {
         setLoading(false);
         return;
@@ -36054,7 +36097,7 @@ function SchemaSyncModal({
     setLoading(true);
     setError(null);
     try {
-      const entries = await electron$p.extractOpenApiSchemasFromUrl(trimmed);
+      const entries = await electron$q.extractOpenApiSchemasFromUrl(trimmed);
       setSpecEntries(entries);
       autoSelectChanged(entries);
     } catch (err) {
@@ -36087,7 +36130,7 @@ function SchemaSyncModal({
       }
       const entry = useStore.getState().collections[collectionId];
       if (entry) {
-        await electron$p.saveCollection(entry.relPath, entry.data);
+        await electron$q.saveCollection(entry.relPath, entry.data);
         markCollectionClean(collectionId);
       }
       onClose();
@@ -55343,7 +55386,7 @@ function withContentType(headers, value) {
   if (idx === -1) return [...headers, next];
   return headers.map((h, i) => i === idx ? { ...h, value, enabled: true } : h);
 }
-const { electron: electron$o } = window;
+const { electron: electron$p } = window;
 function ParamTree({ params, depth = 0 }) {
   if (params.length === 0) {
     return /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "text-[10px] text-surface-600 italic", children: "No parameters declared in WSDL." });
@@ -55369,7 +55412,7 @@ function SoapEditor({ request, onChange }) {
     let cancelled = false;
     (async () => {
       try {
-        const result = await electron$o.wsdlFetch(url);
+        const result = await electron$p.wsdlFetch(url);
         if (cancelled) return;
         setOperations(result.operations);
         setEndpoints(result.endpoints);
@@ -55406,7 +55449,7 @@ function SoapEditor({ request, onChange }) {
     setFetching(true);
     setFetchError(null);
     try {
-      const result = await electron$o.wsdlFetch(soap.wsdlUrl.trim());
+      const result = await electron$p.wsdlFetch(soap.wsdlUrl.trim());
       setOperations(result.operations);
       setEndpoints(result.endpoints);
       setTargetNs(result.targetNamespace);
@@ -55676,7 +55719,7 @@ function BodyTab({ request, onChange }) {
     mode === "soap" && /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "flex-1 min-h-0", children: /* @__PURE__ */ jsxRuntimeExports.jsx(SoapEditor, { request, onChange }) })
   ] });
 }
-const { electron: electron$n } = window;
+const { electron: electron$o } = window;
 const AUTH_TYPES = ["none", "bearer", "basic", "digest", "ntlm", "apikey", "oauth2"];
 function AuthTab({ request, onChange }) {
   const auth = request.auth;
@@ -55690,7 +55733,7 @@ function AuthTab({ request, onChange }) {
   }
   async function saveSecret(ref2) {
     if (!secretValue || !ref2) return;
-    await electron$n.setSecret(ref2, secretValue);
+    await electron$o.setSecret(ref2, secretValue);
     setSaved(true);
     setSecretValue("");
     setTimeout(() => setSaved(false), 2e3);
@@ -55702,7 +55745,7 @@ function AuthTab({ request, onChange }) {
     setOauth2Error("");
     try {
       const vars = {};
-      const result = await electron$n.oauth2StartFlow(oauth2Auth, vars);
+      const result = await electron$o.oauth2StartFlow(oauth2Auth, vars);
       setAuth({
         oauth2CachedToken: result.accessToken,
         oauth2TokenExpiry: result.expiresAt
@@ -55720,7 +55763,7 @@ function AuthTab({ request, onChange }) {
     setOauth2Status("fetching");
     setOauth2Error("");
     try {
-      const result = await electron$n.oauth2RefreshToken(oauth2Auth, {}, oauth2RefreshToken);
+      const result = await electron$o.oauth2RefreshToken(oauth2Auth, {}, oauth2RefreshToken);
       setAuth({
         oauth2CachedToken: result.accessToken,
         oauth2TokenExpiry: result.expiresAt
@@ -63028,7 +63071,7 @@ function SchemaTab({ request, onChange }) {
     ] }) })
   ] });
 }
-const { electron: electron$m } = window;
+const { electron: electron$n } = window;
 const EMPTY = { statusCode: 200, headers: [], bodySchema: "" };
 function ContractTab({ request, onChange }) {
   const activeTab = useStore((s) => s.tabs.find((t2) => t2.id === s.activeTabId));
@@ -63042,7 +63085,7 @@ function ContractTab({ request, onChange }) {
     if (!lastResponse?.body) return;
     setInferring(true);
     try {
-      const schema = await electron$m.inferContractSchema(lastResponse.body);
+      const schema = await electron$n.inferContractSchema(lastResponse.body);
       if (schema) update({ bodySchema: schema });
     } finally {
       setInferring(false);
@@ -63168,7 +63211,7 @@ function ContractTab({ request, onChange }) {
     ] })
   ] });
 }
-const { electron: electron$l } = window;
+const { electron: electron$m } = window;
 function formatTime$1(ts) {
   const d = new Date(ts);
   const hh = String(d.getHours()).padStart(2, "0");
@@ -63188,14 +63231,14 @@ function WebSocketPanel({ request }) {
   const [sendText, setSendText] = reactExports.useState("");
   const logEndRef = reactExports.useRef(null);
   reactExports.useEffect(() => {
-    electron$l.onWsMessage(({ requestId, message }) => {
+    electron$m.onWsMessage(({ requestId, message }) => {
       addWsMessage(requestId, message);
     });
-    electron$l.onWsStatus(({ requestId, status, error: error2 }) => {
+    electron$m.onWsStatus(({ requestId, status, error: error2 }) => {
       setWsStatus(requestId, status, error2);
     });
     return () => {
-      electron$l.offWsEvents();
+      electron$m.offWsEvents();
     };
   }, [addWsMessage, setWsStatus]);
   reactExports.useEffect(() => {
@@ -63208,19 +63251,19 @@ function WebSocketPanel({ request }) {
       if (h.enabled && h.key) headers[h.key] = h.value;
     }
     try {
-      await electron$l.wsConnect(request.id, request.url, headers);
+      await electron$m.wsConnect(request.id, request.url, headers);
     } catch (err) {
       setWsStatus(request.id, "error", err instanceof Error ? err.message : String(err));
     }
   }
   async function disconnect() {
-    await electron$l.wsDisconnect(request.id);
+    await electron$m.wsDisconnect(request.id);
   }
   async function sendMessage() {
     const text = sendText.trim();
     if (!text || !isConnected) return;
     try {
-      await electron$l.wsSend(request.id, text);
+      await electron$m.wsSend(request.id, text);
       const msg = {
         id: crypto.randomUUID(),
         direction: "sent",
@@ -63592,7 +63635,7 @@ function FuzzResultsPanel({ report, onClear }) {
     ] }) })
   ] });
 }
-const { electron: electron$k } = window;
+const { electron: electron$l } = window;
 const WRITE_METHODS = /* @__PURE__ */ new Set(["POST", "PUT", "PATCH", "DELETE"]);
 function FuzzModal({ request, onClose }) {
   const environments = useStore((s) => s.environments);
@@ -63618,7 +63661,7 @@ function FuzzModal({ request, onClose }) {
       const env = resolveEnvironmentById(environments, activeEnvironmentId);
       const envVars = env ? Object.fromEntries(env.variables.filter((v) => v.enabled).map((v) => [v.key, v.value])) : {};
       const collectionVars = activeCollectionId ? collections[activeCollectionId]?.data.collectionVariables ?? {} : {};
-      const result = await electron$k.fuzzContracts({
+      const result = await electron$l.fuzzContracts({
         requests: [request],
         envVars,
         collectionVars,
@@ -63710,7 +63753,7 @@ function FuzzModal({ request, onClose }) {
     }
   );
 }
-const { electron: electron$j } = window;
+const { electron: electron$k } = window;
 const METHODS = ["GET", "POST", "PUT", "PATCH", "DELETE", "HEAD", "OPTIONS", "QUERY"];
 const METHOD_COLORS = {
   GET: "text-emerald-400",
@@ -63802,7 +63845,7 @@ function RequestBuilder({ request }) {
             activeEnvironmentId
           );
           const hookSessionVars = useStore.getState().sessionVars;
-          const r = await electron$j.sendRequest({
+          const r = await electron$k.sendRequest({
             ...basePayload,
             environment: hookEnv,
             request: hook,
@@ -63846,7 +63889,7 @@ function RequestBuilder({ request }) {
         activeEnvironmentId
       );
       const freshSessionVars = useStore.getState().sessionVars;
-      const result = await electron$j.sendRequest({
+      const result = await electron$k.sendRequest({
         ...basePayload,
         environment: freshEnv,
         request: mergedRequest,
@@ -63874,7 +63917,7 @@ function RequestBuilder({ request }) {
             activeEnvironmentId
           );
           const hookSessionVars = useStore.getState().sessionVars;
-          const r = await electron$j.sendRequest({
+          const r = await electron$k.sendRequest({
             ...basePayload,
             environment: hookEnv,
             request: hook,
@@ -64650,7 +64693,7 @@ function HookResultsPanel({ results }) {
     }) })
   ] });
 }
-const { electron: electron$i } = window;
+const { electron: electron$j } = window;
 function extractPath(url) {
   try {
     return new URL(url).pathname || "/";
@@ -64704,14 +64747,14 @@ function SaveAsMockModal({ onClose }) {
         const entry = state.mocks[serverId];
         const updated = { ...entry.data, name: newServerName, port: Number(newServerPort), routes: [route] };
         updateMock(serverId, updated);
-        await electron$i.saveMock(entry.relPath, updated);
+        await electron$j.saveMock(entry.relPath, updated);
         const ws2 = useStore.getState().workspace;
-        if (ws2) await electron$i.saveWorkspace(ws2);
+        if (ws2) await electron$j.saveWorkspace(ws2);
       } else {
         const entry = useStore.getState().mocks[serverId];
         const updated = { ...entry.data, routes: [...entry.data.routes, route] };
         updateMock(serverId, updated);
-        await electron$i.saveMock(entry.relPath, updated);
+        await electron$j.saveMock(entry.relPath, updated);
       }
       onClose();
     } finally {
@@ -64994,7 +65037,7 @@ function RequestPanel({ sentRequest }) {
   if (!sentRequest) {
     return /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "flex items-center justify-center h-full text-surface-400 text-xs", children: "Send a request to see what was transmitted." });
   }
-  const hasBody = sentRequest.body !== void 0 && sentRequest.body !== "";
+  const hasBody2 = sentRequest.body !== void 0 && sentRequest.body !== "";
   return /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex-1 min-h-0 overflow-y-auto text-xs font-mono", children: [
     /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "px-4 py-3 border-b border-surface-800 flex items-center gap-3", children: [
       /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "font-bold text-blue-400 shrink-0", children: sentRequest.method }),
@@ -65007,7 +65050,7 @@ function RequestPanel({ sentRequest }) {
         /* @__PURE__ */ jsxRuntimeExports.jsx("td", { className: "py-1 text-white break-all", children: v })
       ] }, k)) }) })
     ] }),
-    hasBody && /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "px-4 py-2", children: [
+    hasBody2 && /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "px-4 py-2", children: [
       /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "text-[10px] text-surface-400 uppercase tracking-wider font-medium mb-1.5", children: "Body" }),
       /* @__PURE__ */ jsxRuntimeExports.jsx("pre", { className: "text-white whitespace-pre-wrap break-all text-[11px]", children: sentRequest.body })
     ] })
@@ -65043,7 +65086,183 @@ function ConsolePanel({ scriptResult }) {
     )) })
   ] });
 }
-const { electron: electron$h } = window;
+function header(headers, name2) {
+  const lower = name2.toLowerCase();
+  for (const [k, v] of Object.entries(headers)) {
+    if (k.toLowerCase() === lower) return v;
+  }
+  return void 0;
+}
+function hasBody(res) {
+  return (res.bodySize ?? res.body.length) > 0;
+}
+const REDIRECTS_NEEDING_LOCATION = /* @__PURE__ */ new Set([301, 302, 303, 307, 308]);
+const BODILESS = {
+  204: { label: "No Content", ref: "RFC 9110 §15.3.5" },
+  205: { label: "Reset Content", ref: "RFC 9110 §15.3.6" },
+  304: { label: "Not Modified", ref: "RFC 9110 §15.4.5" }
+};
+function validateHttpSemantics(res, opts = {}) {
+  if (!res.status || res.status === 0) return [];
+  const f = [];
+  const method = res.method.toUpperCase();
+  const { status } = res;
+  const body = hasBody(res);
+  const contentType = header(res.headers, "content-type");
+  const contentEncoding = header(res.headers, "content-encoding");
+  const clNum = Number(header(res.headers, "content-length") ?? NaN);
+  const isBodiless = status in BODILESS || status >= 100 && status < 200;
+  if (isBodiless) {
+    const declaresBody = body || Number.isFinite(clNum) && clNum > 0;
+    if (declaresBody) {
+      const info = BODILESS[status] ?? { label: "Informational", ref: "RFC 9110 §15.2" };
+      const via = body ? "" : ` (it declares Content-Length: ${clNum}; the body was discarded by the client)`;
+      f.push({
+        rule: status in BODILESS ? `no-body-${status}` : "no-body-1xx",
+        severity: "error",
+        message: `${status} ${info.label} must not include a message body${via}.`,
+        ref: info.ref
+      });
+    }
+  }
+  if (method === "HEAD" && body) {
+    f.push({ rule: "no-body-head", severity: "error", message: "Response to a HEAD request must not include a body.", ref: "RFC 9110 §9.3.2" });
+  }
+  if (status === 206 && !header(res.headers, "content-range")) {
+    f.push({ rule: "206-no-content-range", severity: "error", message: "206 Partial Content must include a Content-Range header.", ref: "RFC 9110 §15.3.7" });
+  }
+  if (status === 416 && !header(res.headers, "content-range")) {
+    f.push({ rule: "416-no-content-range", severity: "warning", message: '416 Range Not Satisfiable should include a Content-Range header (e.g. "bytes */1234").', ref: "RFC 9110 §15.5.17" });
+  }
+  if (REDIRECTS_NEEDING_LOCATION.has(status) && !header(res.headers, "location")) {
+    f.push({ rule: "redirect-no-location", severity: "error", message: `${status} redirect has no Location header, so the client cannot follow it.`, ref: "RFC 9110 §15.4" });
+  }
+  if (status === 401 && !header(res.headers, "www-authenticate")) {
+    f.push({ rule: "401-no-www-authenticate", severity: "error", message: "401 Unauthorized must include a WWW-Authenticate header.", ref: "RFC 9110 §15.5.2" });
+  }
+  if (status === 405 && !header(res.headers, "allow")) {
+    f.push({ rule: "405-no-allow", severity: "error", message: "405 Method Not Allowed must include an Allow header listing valid methods.", ref: "RFC 9110 §15.5.6" });
+  }
+  if (body && !contentType && status !== 204 && status !== 304) {
+    f.push({ rule: "body-no-content-type", severity: "warning", message: "Response has a body but no Content-Type header; clients must guess how to parse it.", ref: "RFC 9110 §8.3" });
+  }
+  if (body && contentType && /application\/(json|.*\+json)/i.test(contentType)) {
+    try {
+      JSON.parse(res.body);
+    } catch {
+      f.push({ rule: "json-invalid", severity: "error", message: `Content-Type is "${contentType}" but the body is not valid JSON.`, ref: "RFC 8259" });
+    }
+  }
+  if (body && contentType && /[/+]xml\b/i.test(contentType) && opts.checkXml?.(res.body) === false) {
+    f.push({ rule: "xml-invalid", severity: "error", message: `Content-Type is "${contentType}" but the body is not well-formed XML.`, ref: "XML 1.0 §2.1" });
+  }
+  if (contentType && /^text\//i.test(contentType) && !/charset=/i.test(contentType)) {
+    f.push({ rule: "text-no-charset", severity: "hint", message: `"${contentType}" has no charset parameter; clients may misinterpret the encoding.`, ref: "RFC 9110 §8.3.2" });
+  }
+  const clRaw = header(res.headers, "content-length");
+  if (clRaw !== void 0 && !contentEncoding && method !== "HEAD" && !isBodiless) {
+    const actual = res.bodySize ?? res.body.length;
+    if (Number.isFinite(clNum) && clNum !== actual) {
+      f.push({ rule: "content-length-mismatch", severity: "error", message: `Content-Length is ${clNum} but the body is ${actual} bytes.`, ref: "RFC 9110 §8.6" });
+    }
+  }
+  if (status < 100 || status > 599) {
+    f.push({ rule: "status-out-of-range", severity: "warning", message: `${status} is not a valid HTTP status code (must be 100-599).`, ref: "RFC 9110 §15" });
+  }
+  if (!header(res.headers, "date") && status >= 200) {
+    f.push({ rule: "no-date", severity: "hint", message: "No Date header; origin servers are expected to send one.", ref: "RFC 9110 §6.6.1" });
+  }
+  if ((status === 429 || status === 503) && !header(res.headers, "retry-after")) {
+    f.push({ rule: "no-retry-after", severity: "hint", message: `${status} should include a Retry-After header telling clients when to retry.`, ref: "RFC 9110 §10.2.3" });
+  }
+  if (status === 201 && !header(res.headers, "location")) {
+    f.push({ rule: "201-no-location", severity: "warning", message: "201 Created should include a Location header pointing at the new resource.", ref: "RFC 9110 §15.3.2" });
+  }
+  const order = { error: 0, warning: 1, hint: 2 };
+  return f.sort((a, b) => order[a.severity] - order[b.severity]);
+}
+const { electron: electron$i } = window;
+function xmlWellFormed(body) {
+  try {
+    const doc2 = new DOMParser().parseFromString(body, "application/xml");
+    return doc2.getElementsByTagName("parsererror").length === 0;
+  } catch {
+    return true;
+  }
+}
+function requestBodyText(body) {
+  switch (body?.mode) {
+    case "json":
+      return body.json ?? "";
+    case "raw":
+      return body.raw ?? "";
+    case "graphql":
+      return body.graphql?.query ?? "";
+    case "soap":
+      return body.soap?.envelope ?? "";
+    case "form":
+      return (body.form ?? []).filter((p2) => p2.enabled && p2.key).map((p2) => `${p2.key}=${p2.value}`).join("\n");
+    default:
+      return "";
+  }
+}
+function KVBlock({ label, rows }) {
+  if (rows.length === 0) return null;
+  return /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex flex-col gap-0.5", children: [
+    /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "text-[9px] uppercase tracking-wider text-surface-600 font-medium", children: label }),
+    rows.map(([k, v]) => /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex gap-2 font-mono text-[10px]", children: [
+      /* @__PURE__ */ jsxRuntimeExports.jsxs("span", { className: "text-surface-500 shrink-0", children: [
+        k,
+        ":"
+      ] }),
+      /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "text-surface-300 break-all", children: v })
+    ] }, k))
+  ] });
+}
+function HistoryTabRow({ entry, onLoad }) {
+  const [open, setOpen] = reactExports.useState(false);
+  const reqBody = requestBodyText(entry.request.body);
+  return /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "border-b border-surface-800", children: [
+    /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex items-center gap-3 px-4 py-2 hover:bg-surface-800/40", children: [
+      /* @__PURE__ */ jsxRuntimeExports.jsx("button", { onClick: () => setOpen((o) => !o), className: "text-surface-600 text-xs w-3 shrink-0", children: open ? "▾" : "▸" }),
+      /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: `text-[10px] font-bold font-mono shrink-0 w-10 ${getMethodColor(entry.request.method)}`, children: entry.request.method }),
+      /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: `text-xs font-bold font-mono shrink-0 w-8 ${getStatusColor(entry.response.status)}`, children: entry.response.status || "ERR" }),
+      /* @__PURE__ */ jsxRuntimeExports.jsxs("span", { className: "text-xs text-surface-400 shrink-0", children: [
+        entry.response.durationMs,
+        "ms"
+      ] }),
+      /* @__PURE__ */ jsxRuntimeExports.jsxs("span", { className: "text-[11px] text-surface-500 shrink-0", children: [
+        (entry.response.bodySize / 1024).toFixed(1),
+        " KB"
+      ] }),
+      entry.environmentName && /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "text-[10px] bg-surface-800 text-surface-400 px-1.5 py-0.5 rounded shrink-0", children: entry.environmentName }),
+      /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "text-[11px] text-surface-500 ml-auto shrink-0", children: new Date(entry.timestamp).toLocaleString([], { month: "short", day: "numeric", hour: "2-digit", minute: "2-digit", second: "2-digit" }) }),
+      /* @__PURE__ */ jsxRuntimeExports.jsx("button", { onClick: onLoad, title: "Load this response into the viewer", className: "text-[10px] text-blue-400 hover:text-blue-300 shrink-0", children: "load" })
+    ] }),
+    open && /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "px-4 pb-3 pt-1 flex flex-col gap-3 bg-surface-950/40", children: [
+      /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex flex-col gap-1.5", children: [
+        /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "text-[10px] uppercase tracking-wider text-surface-500 font-semibold", children: "Request" }),
+        /* @__PURE__ */ jsxRuntimeExports.jsxs("p", { className: "font-mono text-[10px] text-surface-300 break-all", children: [
+          entry.request.method,
+          " ",
+          entry.resolvedUrl
+        ] }),
+        /* @__PURE__ */ jsxRuntimeExports.jsx(KVBlock, { label: "Headers", rows: entry.request.headers.filter((h) => h.enabled && h.key).map((h) => [h.key, h.value]) }),
+        reqBody && /* @__PURE__ */ jsxRuntimeExports.jsx("pre", { className: "text-[10px] font-mono text-surface-300 bg-surface-900 border border-surface-800 rounded px-2 py-1.5 overflow-x-auto whitespace-pre-wrap break-words max-h-40 overflow-y-auto", children: reqBody })
+      ] }),
+      /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex flex-col gap-1.5", children: [
+        /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "text-[10px] uppercase tracking-wider text-surface-500 font-semibold", children: "Response" }),
+        /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "font-mono text-[10px]", children: /* @__PURE__ */ jsxRuntimeExports.jsxs("span", { className: getStatusColor(entry.response.status), children: [
+          entry.response.status,
+          " ",
+          entry.response.statusText
+        ] }) }),
+        /* @__PURE__ */ jsxRuntimeExports.jsx(KVBlock, { label: "Headers", rows: Object.entries(entry.response.headers) }),
+        entry.response.body && /* @__PURE__ */ jsxRuntimeExports.jsx("pre", { className: "text-[10px] font-mono text-surface-300 bg-surface-900 border border-surface-800 rounded px-2 py-1.5 overflow-x-auto whitespace-pre-wrap break-words max-h-56 overflow-y-auto", children: entry.response.body })
+      ] })
+    ] })
+  ] });
+}
 function ResponseViewer() {
   const activeTab = useStore((s) => s.tabs.find((t2) => t2.id === s.activeTabId));
   const activeTabId = useStore((s) => s.activeTabId);
@@ -65058,7 +65277,25 @@ function ResponseViewer() {
   const sentRequest = activeTab?.lastSentRequest ?? null;
   const hookResults = activeTab?.lastHookResults ?? null;
   const requestId = activeTab?.requestId ?? null;
+  const setTabResponse = useStore((s) => s.setTabResponse);
+  const history2 = useStore((s) => s.history);
+  const activeEnvironmentId = useStore((s) => s.activeEnvironmentId);
+  const environments = useStore((s) => s.environments);
+  const upsertEnvVar = useStore((s) => s.upsertEnvVar);
   const [tab, setTab] = reactExports.useState("body");
+  const requestHistory = requestId ? history2.filter((e) => e.request.id === requestId) : [];
+  const httpFindings = response && !response.error ? validateHttpSemantics({
+    method: sentRequest?.method ?? "GET",
+    status: response.status,
+    statusText: response.statusText,
+    headers: response.headers,
+    body: response.body,
+    bodySize: response.bodySize
+  }, { checkXml: xmlWellFormed }) : [];
+  const httpErrors = httpFindings.filter((x) => x.severity === "error").length;
+  const [headerMenu, setHeaderMenu] = reactExports.useState(null);
+  const [varDialog, setVarDialog] = reactExports.useState(null);
+  const activeEnvName = activeEnvironmentId ? environments[activeEnvironmentId]?.data.name : void 0;
   reactExports.useEffect(() => {
     if (scriptResult?.preScriptError || scriptResult?.postScriptError) {
       setTab("console");
@@ -65071,7 +65308,7 @@ function ResponseViewer() {
   const contractToast = useToast(2500);
   async function saveAsContract() {
     if (!response || !requestId || !activeTabId) return;
-    const schema = response.body ? await electron$h.inferContractSchema(response.body) : null;
+    const schema = response.body ? await electron$i.inferContractSchema(response.body) : null;
     const contentType2 = response.headers["content-type"];
     const headers = contentType2 ? [{ key: "content-type", value: contentType2, required: true }] : [];
     updateRequest(requestId, {
@@ -65115,16 +65352,26 @@ function ResponseViewer() {
   const isXml = !isJson && (contentType.includes("xml") || contentType.includes("html"));
   const supportsTree = isJson || isXml;
   const displayBody = isJson ? prettyJson(response.body) : isXml ? prettyXml(response.body) : response.body;
+  const bodyParseError = response.body.trim().length > 0 && (isJson && (() => {
+    try {
+      JSON.parse(response.body);
+      return false;
+    } catch {
+      return true;
+    }
+  })() || isXml && contentType.includes("xml") && !xmlWellFormed(response.body));
   const passedCount = scriptResult?.testResults.filter((t2) => t2.passed).length ?? 0;
   const totalCount = scriptResult?.testResults.length ?? 0;
   const consoleCount = scriptResult?.consoleOutput.length ?? 0;
   const hasScriptError = !!(scriptResult?.preScriptError || scriptResult?.postScriptError);
   const tabList = [
     { id: "request", label: "Request" },
-    { id: "body", label: "Body" },
+    { id: "body", label: "Body", badge: bodyParseError ? "!" : void 0, error: bodyParseError },
     { id: "headers", label: "Headers" },
     { id: "tests", label: "Tests", badge: totalCount > 0 ? `${passedCount}/${totalCount}` : void 0 },
-    { id: "console", label: "Console", badge: hasScriptError ? "!" : consoleCount > 0 ? consoleCount : void 0, error: hasScriptError }
+    { id: "console", label: "Console", badge: hasScriptError ? "!" : consoleCount > 0 ? consoleCount : void 0, error: hasScriptError },
+    { id: "history", label: "History", badge: requestHistory.length > 0 ? requestHistory.length : void 0 },
+    { id: "http", label: "HTTP", badge: httpFindings.length > 0 ? httpErrors > 0 ? "!" : httpFindings.length : void 0, error: httpErrors > 0 }
   ];
   return /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "h-full flex flex-col", children: [
     hookResults && hookResults.length > 0 && /* @__PURE__ */ jsxRuntimeExports.jsx(HookResultsPanel, { results: hookResults }),
@@ -65232,13 +65479,122 @@ function ResponseViewer() {
         readOnly: true,
         basicSetup: { lineNumbers: true, foldGutter: true }
       }
-    ) : tab === "headers" ? /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "flex-1 min-h-0 overflow-y-auto", children: /* @__PURE__ */ jsxRuntimeExports.jsx("table", { className: "w-full text-xs px-4 py-2", children: /* @__PURE__ */ jsxRuntimeExports.jsx("tbody", { children: Object.entries(response.headers).map(([k, v]) => /* @__PURE__ */ jsxRuntimeExports.jsxs("tr", { className: "border-b border-surface-800", children: [
-      /* @__PURE__ */ jsxRuntimeExports.jsx("td", { className: "py-1.5 px-4 text-surface-400 font-mono w-56 align-top", children: k }),
-      /* @__PURE__ */ jsxRuntimeExports.jsx("td", { className: "py-1.5 px-4 text-white font-mono break-all", children: v })
-    ] }, k)) }) }) }) : tab === "tests" ? /* @__PURE__ */ jsxRuntimeExports.jsx(TestsPanel, { scriptResult }) : tab === "console" ? /* @__PURE__ */ jsxRuntimeExports.jsx(ConsolePanel, { scriptResult }) : tab === "request" ? /* @__PURE__ */ jsxRuntimeExports.jsx(RequestPanel, { sentRequest }) : null })
+    ) : tab === "headers" ? /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "flex-1 min-h-0 overflow-y-auto", children: /* @__PURE__ */ jsxRuntimeExports.jsx("table", { className: "w-full text-xs px-4 py-2", children: /* @__PURE__ */ jsxRuntimeExports.jsx("tbody", { children: Object.entries(response.headers).map(([k, v]) => /* @__PURE__ */ jsxRuntimeExports.jsxs(
+      "tr",
+      {
+        className: "border-b border-surface-800 hover:bg-surface-800/40",
+        onContextMenu: (e) => {
+          e.preventDefault();
+          setHeaderMenu({ x: e.clientX, y: e.clientY, key: k, value: v });
+        },
+        title: "Right-click to create an environment variable",
+        children: [
+          /* @__PURE__ */ jsxRuntimeExports.jsx("td", { className: "py-1.5 px-4 text-surface-400 font-mono w-56 align-top", children: k }),
+          /* @__PURE__ */ jsxRuntimeExports.jsx("td", { className: "py-1.5 px-4 text-white font-mono break-all", children: v })
+        ]
+      },
+      k
+    )) }) }) }) : tab === "tests" ? /* @__PURE__ */ jsxRuntimeExports.jsx(TestsPanel, { scriptResult }) : tab === "console" ? /* @__PURE__ */ jsxRuntimeExports.jsx(ConsolePanel, { scriptResult }) : tab === "request" ? /* @__PURE__ */ jsxRuntimeExports.jsx(RequestPanel, { sentRequest }) : tab === "http" ? /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "flex-1 min-h-0 overflow-y-auto p-4", children: httpFindings.length === 0 ? /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex flex-col items-center justify-center h-full gap-2 text-center", children: [
+      /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "text-2xl", children: "✓" }),
+      /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "text-sm text-emerald-400", children: "Conforms to HTTP semantics" }),
+      /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "text-xs text-surface-500 max-w-sm", children: "No violations of the HTTP specification (RFC 9110/9111) in this response. This check is automatic and needs no test or spec." })
+    ] }) : /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "flex flex-col gap-2 max-w-3xl", children: httpFindings.map((find2, i) => {
+      const tone = find2.severity === "error" ? "border-red-800/60 bg-red-950/20" : find2.severity === "warning" ? "border-amber-800/50 bg-amber-950/20" : "border-surface-700 bg-surface-800/40";
+      const label = find2.severity === "error" ? "text-red-400" : find2.severity === "warning" ? "text-amber-400" : "text-surface-400";
+      return /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: `border-l-2 rounded-r px-3 py-2 ${tone}`, children: [
+        /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex items-center gap-2 flex-wrap", children: [
+          /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: `text-[10px] font-bold uppercase tracking-wider ${label}`, children: find2.severity }),
+          /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "text-[10px] font-mono text-surface-500 bg-surface-900 px-1.5 py-0.5 rounded", children: find2.rule }),
+          find2.ref && /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "text-[10px] text-surface-600 ml-auto", children: find2.ref })
+        ] }),
+        /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "text-xs text-surface-200 mt-1", children: find2.message })
+      ] }, i);
+    }) }) }) : tab === "history" ? /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "flex-1 min-h-0 overflow-y-auto", children: requestHistory.length === 0 ? /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "text-xs text-surface-500 text-center p-8", children: "No past responses for this request yet. Each send is recorded here." }) : /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "flex flex-col", children: requestHistory.map((entry) => /* @__PURE__ */ jsxRuntimeExports.jsx(
+      HistoryTabRow,
+      {
+        entry,
+        onLoad: () => {
+          if (activeTabId) setTabResponse(activeTabId, entry.response, entry.scriptResult ?? null);
+        }
+      },
+      entry.id
+    )) }) }) : null }),
+    headerMenu && /* @__PURE__ */ jsxRuntimeExports.jsx(
+      ContextMenu,
+      {
+        x: headerMenu.x,
+        y: headerMenu.y,
+        onClose: () => setHeaderMenu(null),
+        items: [
+          { type: "header", label: headerMenu.key },
+          activeEnvironmentId ? {
+            type: "item",
+            label: `Create variable in "${activeEnvName}"`,
+            onClick: () => {
+              setVarDialog({ name: headerMenu.key.replace(/[^a-zA-Z0-9]+/g, "_").replace(/^_+|_+$/g, ""), value: headerMenu.value });
+              setHeaderMenu(null);
+            }
+          } : { type: "header", label: "Select an environment first" }
+        ]
+      }
+    ),
+    varDialog && /* @__PURE__ */ jsxRuntimeExports.jsx(Modal, { onClose: () => setVarDialog(null), title: "Create environment variable", panelClassName: "bg-surface-900 border border-surface-800 rounded-lg shadow-2xl w-[420px]", children: /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex flex-col gap-3 p-4", children: [
+      /* @__PURE__ */ jsxRuntimeExports.jsxs("label", { className: "flex flex-col gap-1", children: [
+        /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "text-[10px] uppercase tracking-wider text-surface-600 font-medium", children: "Variable name" }),
+        /* @__PURE__ */ jsxRuntimeExports.jsx(
+          "input",
+          {
+            autoFocus: true,
+            value: varDialog.name,
+            onChange: (e) => setVarDialog((d) => d && { ...d, name: e.target.value }),
+            className: "bg-surface-800 border border-surface-700 rounded px-2.5 py-1.5 text-sm font-mono focus:outline-none focus:border-blue-500"
+          }
+        )
+      ] }),
+      /* @__PURE__ */ jsxRuntimeExports.jsxs("label", { className: "flex flex-col gap-1", children: [
+        /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "text-[10px] uppercase tracking-wider text-surface-600 font-medium", children: "Value" }),
+        /* @__PURE__ */ jsxRuntimeExports.jsx(
+          "input",
+          {
+            value: varDialog.value,
+            onChange: (e) => setVarDialog((d) => d && { ...d, value: e.target.value }),
+            className: "bg-surface-800 border border-surface-700 rounded px-2.5 py-1.5 text-sm font-mono focus:outline-none focus:border-blue-500"
+          }
+        )
+      ] }),
+      /* @__PURE__ */ jsxRuntimeExports.jsxs("p", { className: "text-[11px] text-surface-500", children: [
+        "Saved to ",
+        activeEnvName ? `"${activeEnvName}"` : "the active environment",
+        ". Use it as ",
+        /* @__PURE__ */ jsxRuntimeExports.jsxs("code", { className: "text-surface-300", children: [
+          "{{",
+          varDialog.name || "name",
+          "}}"
+        ] }),
+        "."
+      ] }),
+      /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex justify-end gap-2 mt-1", children: [
+        /* @__PURE__ */ jsxRuntimeExports.jsx("button", { onClick: () => setVarDialog(null), className: "px-3 py-1.5 text-xs text-surface-400 hover:text-surface-200 transition-colors", children: "Cancel" }),
+        /* @__PURE__ */ jsxRuntimeExports.jsx(
+          "button",
+          {
+            onClick: () => {
+              if (activeEnvironmentId && varDialog.name.trim()) {
+                upsertEnvVar(activeEnvironmentId, varDialog.name.trim(), varDialog.value);
+                assertToast.show(`✓ Saved {{${varDialog.name.trim()}}}`, true);
+              }
+              setVarDialog(null);
+            },
+            disabled: !varDialog.name.trim(),
+            className: "px-3 py-1.5 text-xs rounded bg-blue-600 hover:bg-blue-500 text-white font-semibold disabled:opacity-50 transition-colors",
+            children: "Create"
+          }
+        )
+      ] })
+    ] }) })
   ] });
 }
-const { electron: electron$g } = window;
+const { electron: electron$h } = window;
 const TARGETS = [
   { id: "robot_framework", label: "Robot Framework", description: "Python RequestsLibrary keywords + test suite" },
   { id: "playwright_ts", label: "Playwright TS", description: "TypeScript page-object API classes + spec files" },
@@ -65278,7 +65634,7 @@ function GeneratorPanel() {
     try {
       const col = collections[selectedCollectionId]?.data;
       const env = resolveEnvironmentById(environments, activeEnvironmentId);
-      const generated = await electron$g.generateCode({ collection: col, environment: env, target });
+      const generated = await electron$h.generateCode({ collection: col, environment: env, target });
       setFiles(generated);
       setSelectedFile(generated[0]?.path ?? null);
     } catch (e) {
@@ -65290,7 +65646,7 @@ function GeneratorPanel() {
   async function saveZip() {
     if (files.length === 0) return;
     const col = collections[selectedCollectionId]?.data;
-    await electron$g.saveGeneratedFilesAsZip(files, col?.name ?? "api-tests", target);
+    await electron$h.saveGeneratedFilesAsZip(files, col?.name ?? "api-tests", target);
   }
   const selectedContent = files.find((f) => f.path === selectedFile)?.content ?? "";
   const activeTarget = TARGETS.find((t2) => t2.id === target);
@@ -65389,6 +65745,92 @@ function GeneratorPanel() {
     files.length === 0 && !generating && /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "flex-1 flex items-center justify-center text-surface-400 text-xs text-center px-6", children: "Select a collection and hit Generate to preview the output code." })
   ] });
 }
+function enabledHeaders(headers) {
+  return headers.filter((h) => h.enabled && h.key).map((h) => ({ name: h.key, value: h.value }));
+}
+function queryStringOf(url) {
+  const q = url.indexOf("?");
+  if (q === -1) return [];
+  const out = [];
+  for (const pair2 of url.slice(q + 1).split("&")) {
+    if (!pair2) continue;
+    const eq = pair2.indexOf("=");
+    const name2 = eq === -1 ? pair2 : pair2.slice(0, eq);
+    const value = eq === -1 ? "" : pair2.slice(eq + 1);
+    try {
+      out.push({ name: decodeURIComponent(name2), value: decodeURIComponent(value) });
+    } catch {
+      out.push({ name: name2, value });
+    }
+  }
+  return out;
+}
+function postDataOf(body) {
+  if (!body || body.mode === "none") return void 0;
+  switch (body.mode) {
+    case "json":
+      return body.json ? { mimeType: "application/json", text: body.json } : void 0;
+    case "raw":
+      return body.raw ? { mimeType: body.rawContentType ?? "text/plain", text: body.raw } : void 0;
+    case "graphql":
+      return body.graphql ? { mimeType: "application/json", text: JSON.stringify(body.graphql) } : void 0;
+    case "soap":
+      return body.soap ? { mimeType: "text/xml", text: body.soap.envelope ?? "" } : void 0;
+    case "form": {
+      const text = (body.form ?? []).filter((p2) => p2.enabled && p2.key).map((p2) => `${encodeURIComponent(p2.key)}=${encodeURIComponent(p2.value)}`).join("&");
+      return { mimeType: "application/x-www-form-urlencoded", text };
+    }
+    default:
+      return void 0;
+  }
+}
+function historyToHar(entries, creatorVersion = "1.0") {
+  const harEntries = entries.map((e) => {
+    const post = postDataOf(e.request.body);
+    const contentType = e.response.headers["content-type"] ?? e.response.headers["Content-Type"] ?? "text/plain";
+    return {
+      startedDateTime: new Date(e.timestamp).toISOString(),
+      time: e.response.durationMs,
+      request: {
+        method: e.request.method,
+        url: e.resolvedUrl,
+        httpVersion: "HTTP/1.1",
+        cookies: [],
+        headers: enabledHeaders(e.request.headers),
+        queryString: queryStringOf(e.resolvedUrl),
+        ...post ? { postData: post } : {},
+        headersSize: -1,
+        bodySize: post ? post.text.length : 0
+      },
+      response: {
+        status: e.response.status,
+        statusText: e.response.statusText,
+        httpVersion: "HTTP/1.1",
+        cookies: [],
+        headers: Object.entries(e.response.headers).map(([name2, value]) => ({ name: name2, value })),
+        content: {
+          size: e.response.bodySize,
+          mimeType: contentType,
+          text: e.response.body
+        },
+        redirectURL: "",
+        headersSize: -1,
+        bodySize: e.response.bodySize
+      },
+      cache: {},
+      timings: { send: 0, wait: e.response.durationMs, receive: 0 },
+      ...e.environmentName ? { comment: `environment: ${e.environmentName}` } : {}
+    };
+  });
+  return JSON.stringify({
+    log: {
+      version: "1.2",
+      creator: { name: "API Spector", version: creatorVersion },
+      entries: harEntries
+    }
+  }, null, 2);
+}
+const { electron: electron$g } = window;
 const STATUS_COLOR = {
   "2": "text-emerald-400",
   "3": "text-amber-400",
@@ -65416,6 +65858,8 @@ function HistoryPanel() {
   const clearHistory = useStore((s) => s.clearHistory);
   const activeTabId = useStore((s) => s.activeTabId);
   const setTabResponse = useStore((s) => s.setTabResponse);
+  const setActiveRequest = useStore((s) => s.setActiveRequest);
+  const collections = useStore((s) => s.collections);
   const [selected, setSelected] = reactExports.useState(null);
   const [search, setSearch] = reactExports.useState("");
   const filtered = search ? history2.filter(
@@ -65431,9 +65875,18 @@ function HistoryPanel() {
       groups.push({ label, entries: [entry] });
     }
   }
+  async function downloadHar() {
+    const stamp = (/* @__PURE__ */ new Date()).toISOString().slice(0, 19).replace(/[:T]/g, "-");
+    await electron$g.saveResults(historyToHar(history2), `api-spector-history-${stamp}.har`);
+  }
   function open(entry) {
     setSelected(entry);
-    if (activeTabId) {
+    const stillExists = Object.values(collections).some((c) => entry.request.id in c.data.requests);
+    if (stillExists) {
+      setActiveRequest(entry.request.id);
+      const tabId = useStore.getState().activeTabId;
+      if (tabId) setTabResponse(tabId, entry.response, entry.scriptResult ?? null);
+    } else if (activeTabId) {
       setTabResponse(activeTabId, entry.response, entry.scriptResult ?? null);
     }
   }
@@ -65448,18 +65901,29 @@ function HistoryPanel() {
           className: "flex-1 bg-surface-800 rounded px-2 py-1 text-xs focus:outline-none focus:ring-1 focus:ring-blue-500"
         }
       ),
-      history2.length > 0 && /* @__PURE__ */ jsxRuntimeExports.jsx(
-        "button",
-        {
-          onClick: () => {
-            clearHistory();
-            setSelected(null);
-          },
-          className: "text-xs text-surface-400 hover:text-red-400 transition-colors px-1",
-          title: "Clear all history",
-          children: "Clear"
-        }
-      )
+      history2.length > 0 && /* @__PURE__ */ jsxRuntimeExports.jsxs(jsxRuntimeExports.Fragment, { children: [
+        /* @__PURE__ */ jsxRuntimeExports.jsx(
+          "button",
+          {
+            onClick: downloadHar,
+            className: "text-xs text-surface-400 hover:text-surface-100 transition-colors px-1",
+            title: "Download history as a HAR file",
+            children: "HAR"
+          }
+        ),
+        /* @__PURE__ */ jsxRuntimeExports.jsx(
+          "button",
+          {
+            onClick: () => {
+              clearHistory();
+              setSelected(null);
+            },
+            className: "text-xs text-surface-400 hover:text-red-400 transition-colors px-1",
+            title: "Clear all history",
+            children: "Clear"
+          }
+        )
+      ] })
     ] }),
     history2.length === 0 ? /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "flex-1 flex items-center justify-center text-xs text-surface-400 px-4 text-center", children: "No history yet. Send a request to start recording." }) : /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex-1 overflow-y-auto", children: [
       filtered.length === 0 && /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "px-3 py-4 text-xs text-surface-400", children: "No matches." }),
@@ -66241,6 +66705,7 @@ function WorkspaceSettingsModal({ onClose }) {
   const existing = workspace?.settings ?? {};
   const [activeTab, setActiveTab] = reactExports.useState("general");
   const [defaultEnvironment, setDefaultEnvironment] = reactExports.useState(existing.defaultEnvironment ?? "");
+  const [persistHistory, setPersistHistory] = reactExports.useState(existing.persistHistory ?? false);
   const [proxyUrl, setProxyUrl] = reactExports.useState(existing.proxy?.url ?? "");
   const [proxyUser, setProxyUser] = reactExports.useState(existing.proxy?.auth?.username ?? "");
   const [proxyPass, setProxyPass] = reactExports.useState(existing.proxy?.auth?.password ?? "");
@@ -66287,9 +66752,15 @@ function WorkspaceSettingsModal({ onClose }) {
     else delete settings.dashboardUrl;
     if (defaultEnvironment) settings.defaultEnvironment = defaultEnvironment;
     else delete settings.defaultEnvironment;
+    if (persistHistory) settings.persistHistory = true;
+    else delete settings.persistHistory;
     updateWorkspaceSettings(settings);
     const updated = useStore.getState().workspace;
     if (updated) await electron$b.saveWorkspace(updated);
+    if (persistHistory) {
+      await electron$b.saveHistory(useStore.getState().history).catch(() => {
+      });
+    }
     onClose();
   }
   function zoomStep(dir) {
@@ -66339,7 +66810,22 @@ function WorkspaceSettingsModal({ onClose }) {
                 }
               )
             ] }),
-            /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "text-surface-600 text-[11px]", children: "CLI runs without --environment use this environment, and the app selects it when no environment is active." })
+            /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "text-surface-600 text-[11px]", children: "CLI runs without --environment use this environment, and the app selects it when no environment is active." }),
+            /* @__PURE__ */ jsxRuntimeExports.jsxs("label", { className: "flex items-start gap-2 mt-2 cursor-pointer", children: [
+              /* @__PURE__ */ jsxRuntimeExports.jsx(
+                "input",
+                {
+                  type: "checkbox",
+                  checked: persistHistory,
+                  onChange: (e) => setPersistHistory(e.target.checked),
+                  className: "mt-0.5"
+                }
+              ),
+              /* @__PURE__ */ jsxRuntimeExports.jsxs("span", { className: "flex flex-col gap-0.5", children: [
+                /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "text-surface-200", children: "Persist request history" }),
+                /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "text-surface-600 text-[11px]", children: "Save history to history.json in the workspace folder so it survives restarts. The file is gitignored. Off by default; history stays in memory otherwise." })
+              ] })
+            ] })
           ] }),
           activeTab === "appearance" && /* @__PURE__ */ jsxRuntimeExports.jsxs(jsxRuntimeExports.Fragment, { children: [
             /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex flex-col gap-1", children: [
@@ -71568,7 +72054,7 @@ function App() {
       /* @__PURE__ */ jsxRuntimeExports.jsx("span", { style: { color: "#6aa3c8" }, children: "Spector" }),
       /* @__PURE__ */ jsxRuntimeExports.jsxs("span", { className: "ml-2 text-[10px] font-normal opacity-50", children: [
         "v",
-        "0.3.6"
+        "0.3.8"
       ] }),
       /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "mx-2 opacity-30", children: "·" }),
       /* @__PURE__ */ jsxRuntimeExports.jsx(