@testsmith/api-spector 0.6.3 → 0.6.4

package/out/main/agents.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 "use strict";
-const promises = require("fs/promises");
-const path = require("path");
-const cliCommon = require("./chunks/cli-common-vASoDfQH.js");
-require("./chunks/data-files-Br2h3Dt2.js");
-require("crypto");
+const promises = require("node:fs/promises");
+const path = require("node:path");
+const cliCommon = require("./chunks/cli-common-Cq_cphpZ.js");
+require("./chunks/data-files-BYqhsoPe.js");
+require("node:crypto");
 const AGENTS = {
   claude: {
     name: "Claude Code",

package/out/main/chunks/{broker-client-WEymdqAK.js → broker-client-CvRuiX3o.js}

@@ -1,13 +1,13 @@
 "use strict";
-const promises = require("fs/promises");
-const path = require("path");
-const crypto = require("crypto");
+const promises = require("node:fs/promises");
+const path = require("node:path");
+const crypto = require("node:crypto");
 const undici = require("undici");
-const requestExec = require("./request-exec-DAFA6Fap.js");
+const requestExec = require("./request-exec-BRmVweue.js");
 const Ajv = require("ajv");
 const jsYaml = require("js-yaml");
-require("http");
-const escape = require("./escape-BwPM4Tf6.js");
+require("node:http");
+const escape = require("./escape-DDVAlOvZ.js");
 const MATCH_KEY = "__match";
 function isMatcher$1(node) {
   return typeof node === "object" && node !== null && !Array.isArray(node) && typeof node[MATCH_KEY] === "string";
@@ -325,7 +325,8 @@ function exportPact(consumer, provider, requests) {
     const query = {};
     for (const p of r.params ?? []) {
       if (p.enabled === false || !p.key) continue;
-      (query[p.key] ??= []).push(p.value);
+      query[p.key] ??= [];
+      query[p.key].push(p.value);
     }
     const response = {};
     if (c.statusCode !== void 0) response["status"] = c.statusCode;
@@ -381,12 +382,13 @@ function kvToQuery(kv) {
   const out = {};
   for (const p of kv ?? []) {
     if (p.enabled === false || !p.key) continue;
-    (out[p.key] ??= []).push(p.value);
+    out[p.key] ??= [];
+    out[p.key].push(p.value);
   }
   return Object.keys(out).length ? out : void 0;
 }
 function parseJson(s) {
-  if (!s || !s.trim()) return void 0;
+  if (!s?.trim()) return void 0;
   try {
     return JSON.parse(s);
   } catch {
@@ -434,14 +436,14 @@ function tokenizeShape(src) {
   while (i < src.length) {
     re.lastIndex = i;
     const m = re.exec(src);
-    if (!m || m.index !== i) return void 0;
+    if (m?.index !== i) return void 0;
     tokens.push(m[1].startsWith('"') ? m[1].slice(1, -1) : m[1]);
     i = re.lastIndex;
   }
   return tokens;
 }
 function parseShape(src) {
-  if (!src || !src.trim()) return void 0;
+  if (!src?.trim()) return void 0;
   const tokens = tokenizeShape(src);
   if (!tokens || tokens.length === 0) return void 0;
   let pos = 0;
@@ -530,7 +532,7 @@ function compileShape(shape) {
   return { body, rules };
 }
 function compileResponseBody(text, loose = true) {
-  if (!text || !text.trim()) return void 0;
+  if (!text?.trim()) return void 0;
   try {
     const json = JSON.parse(text);
     const rules = loose ? typeMatchingRules(json) : {};
@@ -607,7 +609,8 @@ async function loadDesignContractRequests(workspace, dir) {
       files = (await promises.readdir(path.join(dir, "pacts"))).filter((f) => f.endsWith(".json"));
     } catch {
     }
-    for (const f of files.sort()) {
+    files.sort((a, b) => a.localeCompare(b));
+    for (const f of files) {
       try {
         add(importPact(await promises.readFile(path.join(dir, "pacts", f), "utf8")).requests);
       } catch {
@@ -852,8 +855,8 @@ function urlPathname(raw, baseUrl) {
   }
 }
 function pathTemplateToRegex(base, template) {
-  const combined = (base + template).replace(/\/+/g, "/");
-  const pattern = combined.replace(/\{[^}]+\}/g, "[^/]+");
+  const combined = (base + template).replaceAll(/\/+/g, "/");
+  const pattern = combined.replaceAll(/\{[^}]+\}/g, "[^/]+");
   return new RegExp("^" + pattern + "/?$");
 }
 function findOperation(spec, method, reqUrl, requestBaseUrl) {
@@ -1237,7 +1240,7 @@ async function runBidirectional(requests, envVars, collectionVars = {}, specUrl,
 }
 const RESULTS_DIR = "contracts/results";
 function safe(part) {
-  return part.trim().replace(/[^a-zA-Z0-9._-]+/g, "-").replace(/^-+|-+$/g, "") || "unknown";
+  return part.trim().replaceAll(/[^a-zA-Z0-9._-]+/g, "-").replaceAll(/^-+|-+$/g, "") || "unknown";
 }
 function resultPath(dir, pacticipant, version) {
   return path.join(dir, RESULTS_DIR, safe(pacticipant), `${safe(version)}.json`);
@@ -1465,7 +1468,7 @@ const NAUGHTY_STRINGS = [
   ["huge", "A".repeat(5e4)]
 ];
 function clone(v) {
-  return JSON.parse(JSON.stringify(v));
+  return structuredClone(v);
 }
 function setAtPath(root, path2, value) {
   if (path2.length === 0) return value;
@@ -1518,7 +1521,7 @@ function mutate(baseline, schema, label, level = "standard") {
     if (type === "array" && schemaNode) {
       const items = schemaNode["items"];
       const arr = getAtPath(baseline, path2);
-      if (arr && arr.length) walk(items, [...path2, "0"]);
+      if (arr?.length) walk(items, [...path2, "0"]);
       cases.push({
         mutation: { target, kind: "type:array→string", description: "send a string where an array is expected" },
         value: setAtPath(baseline, path2, "not-an-array")
@@ -1822,7 +1825,7 @@ async function runFuzz(opts) {
   const casesPerOp = opts.casesPerOperation ?? 40;
   const level = opts.level ?? "standard";
   const vars = requestExec.mergeVars(opts.envVars, opts.collectionVars ?? {}, {}, {}, await requestExec.buildDynamicVars());
-  const dispatcher = await requestExec.buildDispatcher(void 0, void 0);
+  const dispatcher = await requestExec.buildDispatcher();
   const start = Date.now();
   const results = [];
   let totalCases = 0;
@@ -2065,7 +2068,7 @@ function violationHtml(r) {
   const items = r.violations.map((v) => {
     const path2 = v.path ? `<span class="path">${esc(v.path)}</span>` : "";
     const ea = v.expected || v.actual ? `<div class="ea">${v.expected ? `<span><span class="lab">expected </span><span class="exp">${esc(v.expected)}</span></span>` : ""}${v.actual ? `<span><span class="lab">actual </span><span class="act">${esc(v.actual)}</span></span>` : ""}</div>` : "";
-    return `<div class="v"><div><span class="t">${esc(v.type.replace(/_/g, " "))}</span>${path2}</div><p class="m">${esc(v.message)}</p>${ea}</div>`;
+    return `<div class="v"><div><span class="t">${esc(v.type.replaceAll("_", " "))}</span>${path2}</div><p class="m">${esc(v.message)}</p>${ea}</div>`;
   }).join("");
   return `<div class="viol">${items}</div>`;
 }
@@ -2103,8 +2106,8 @@ function reportToHtml(report, meta = {}) {
   return page(meta.title ?? "Contract Verification Report", body);
 }
 function dashboardToHtml(records, generatedAt, opts = {}) {
-  const pacticipants = [...new Set(records.map((r) => r.pacticipant))].sort();
-  const versions = [...new Set(records.map((r) => r.version))].sort();
+  const pacticipants = [...new Set(records.map((r) => r.pacticipant))].sort((a, b) => a.localeCompare(b));
+  const versions = [...new Set(records.map((r) => r.version))].sort((a, b) => a.localeCompare(b));
   const byKey = new Map(records.map((r) => [`${r.pacticipant}@@${r.version}`, r]));
   const header = `<tr><th>Pacticipant \\ Version</th>${versions.map((v) => `<th>${esc(v)}</th>`).join("")}</tr>`;
   const rows = pacticipants.map((p) => {
@@ -2197,7 +2200,7 @@ ${cleanOps ? `<p class="foot">${cleanOps} operation${cleanOps === 1 ? "" : "s"}
 }
 const SNAPSHOT_DIR = "contracts";
 function safeName(raw) {
-  return raw.trim().toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 40) || "spec";
+  return raw.trim().toLowerCase().replaceAll(/[^a-z0-9]+/g, "-").replaceAll(/^-+|-+$/g, "").slice(0, 40) || "spec";
 }
 function sha256(text) {
   return crypto.createHash("sha256").update(text).digest("hex");

package/out/main/chunks/{cli-common-vASoDfQH.js → cli-common-Cq_cphpZ.js}

@@ -1,8 +1,8 @@
 "use strict";
-const promises = require("fs/promises");
-const path = require("path");
-const dataFiles = require("./data-files-Br2h3Dt2.js");
-require("crypto");
+const promises = require("node:fs/promises");
+const path = require("node:path");
+const dataFiles = require("./data-files-BYqhsoPe.js");
+require("node:crypto");
 const C = {
   reset: "\x1B[0m",
   bold: "\x1B[1m",

package/out/main/chunks/{coverage-C54mZEh_.js → coverage-C0U4QM83.js}

@@ -1,11 +1,11 @@
 "use strict";
-const HTTP_METHODS = ["get", "put", "post", "delete", "options", "head", "patch", "trace"];
+const HTTP_METHODS = /* @__PURE__ */ new Set(["get", "put", "post", "delete", "options", "head", "patch", "trace"]);
 function normalizePath(url) {
   let u = (url || "").trim();
   u = u.split("#")[0].split("?")[0];
-  u = u.replace(/\{\{[^}]*\}\}/g, "");
+  u = u.replaceAll(/\{\{[^}]*\}\}/g, "");
   u = u.replace(/^[a-z0-9+.-]+:\/\/[^/]*/i, "");
-  u = u.replace(/\/{2,}/g, "/");
+  u = u.replaceAll(/\/{2,}/g, "/");
   if (!u.startsWith("/")) u = "/" + u;
   u = u.replace(/\/+$/, "");
   return u === "" ? "/" : u;
@@ -25,7 +25,7 @@ function pathMatches(requestUrl, template) {
 }
 function resolveRef(spec, ref) {
   const parts = ref.replace(/^#\//, "").split("/");
-  return parts.reduce((o, k) => o?.[decodeURIComponent(k.replace(/~1/g, "/").replace(/~0/g, "~"))], spec);
+  return parts.reduce((o, k) => o?.[decodeURIComponent(k.replaceAll("~1", "/").replaceAll("~0", "~"))], spec);
 }
 function deref(spec, node, depth = 0, seen = /* @__PURE__ */ new Set()) {
   if (!node || typeof node !== "object" || depth > 8) return node;
@@ -46,8 +46,7 @@ function flattenSchemaPaths(schema, prefix = "", depth = 0) {
   if (type === "object" || schema.properties) {
     for (const [name, sub] of Object.entries(schema.properties ?? {})) {
       const path = prefix ? `${prefix}.${name}` : name;
-      out.push(path);
-      out.push(...flattenSchemaPaths(sub, path, depth + 1));
+      out.push(path, ...flattenSchemaPaths(sub, path, depth + 1));
     }
   } else if (type === "array" && schema.items) {
     out.push(...flattenSchemaPaths(schema.items, `${prefix}[]`, depth + 1));
@@ -62,14 +61,13 @@ function flattenValuePaths(value, prefix = "", depth = 0) {
   } else {
     for (const [k, v] of Object.entries(value)) {
       const path = prefix ? `${prefix}.${k}` : k;
-      out.push(path);
-      out.push(...flattenValuePaths(v, path, depth + 1));
+      out.push(path, ...flattenValuePaths(v, path, depth + 1));
     }
   }
   return [...new Set(out)];
 }
 function successResponseSchema(spec, responses) {
-  const code = Object.keys(responses ?? {}).filter((c) => /^2\d\d$/.test(c)).sort()[0];
+  const code = Object.keys(responses ?? {}).filter((c) => /^2\d\d$/.test(c)).sort((a, b) => a.localeCompare(b))[0];
   if (!code) return void 0;
   const schema = responses[code]?.content?.["application/json"]?.schema ?? responses[code]?.content?.["application/json;charset=utf-8"]?.schema;
   return schema ? deref(spec, schema) : void 0;
@@ -80,7 +78,7 @@ function enumerateOperations(spec) {
   for (const [path, item] of Object.entries(doc.paths ?? {})) {
     if (!item || typeof item !== "object") continue;
     for (const [method, op] of Object.entries(item)) {
-      if (!HTTP_METHODS.includes(method.toLowerCase())) continue;
+      if (!HTTP_METHODS.has(method.toLowerCase())) continue;
       if (!op || typeof op !== "object") continue;
       const declaredStatuses = Object.keys(op.responses ?? {}).filter((c) => /^\d{3}$/.test(c));
       ops.push({ method: method.toUpperCase(), path, operationId: op.operationId, declaredStatuses, responses: op.responses });

package/out/main/chunks/{data-files-Br2h3Dt2.js → data-files-BYqhsoPe.js}

@@ -1,8 +1,8 @@
 "use strict";
-const path = require("path");
-const promises = require("fs/promises");
+const path = require("node:path");
+const promises = require("node:fs/promises");
 function toCSV(ds) {
-  const escape = (s) => s.includes(",") || s.includes('"') || s.includes("\n") ? `"${s.replace(/"/g, '""')}"` : s;
+  const escape = (s) => s.includes(",") || s.includes('"') || s.includes("\n") ? `"${s.replaceAll('"', '""')}"` : s;
   return [ds.columns, ...ds.rows].map((row) => row.map(escape).join(",")).join("\n");
 }
 function parseCSV(text) {
@@ -37,7 +37,7 @@ const DATA_DIR = "data";
 const hasRows = (ds) => !!ds && ds.columns.length > 0;
 const refFor = (id) => `${DATA_DIR}/${id}.csv`;
 async function externalizeDataSets(col, colDir) {
-  const clone = JSON.parse(JSON.stringify(col));
+  const clone = structuredClone(col);
   const writes = [];
   const removals = [];
   const handle = (h) => {

package/out/main/chunks/escape-DDVAlOvZ.js

@@ -0,0 +1,9 @@
+"use strict";
+function escapeHtml(s) {
+  return String(s ?? "").replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;").replaceAll('"', "&quot;");
+}
+function escapeXml(s) {
+  return escapeHtml(s).replaceAll("'", "&apos;");
+}
+exports.escapeHtml = escapeHtml;
+exports.escapeXml = escapeXml;

package/out/main/chunks/{import-DdXhO56X.js → import-DYssQzex.js}

@@ -1,10 +1,10 @@
 "use strict";
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const uuid = require("uuid");
-const soapHandler = require("./soap-handler-BAPCALkN.js");
+const soapHandler = require("./soap-handler-BznuMFIP.js");
 require("./handle-CL-nWtYA.js");
-require("https");
-require("http");
+require("node:https");
+require("node:http");
 require("@xmldom/xmldom");
 const SOAP_11_CONTENT_TYPE = "text/xml; charset=utf-8";
 const SOAP_12_CONTENT_TYPE = "application/soap+xml; charset=utf-8";
@@ -134,7 +134,7 @@ function importWsdl(wsdlText, opts = {}) {
   return { parsed, collection, mock };
 }
 function defaultCollectionRelPath(ws, collection) {
-  const safe = collection.name.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "") || "wsdl";
+  const safe = collection.name.toLowerCase().replaceAll(/[^a-z0-9]+/g, "-").replaceAll(/^-+|-+$/g, "") || "wsdl";
   let i = 0;
   let candidate = `collections/${safe}.json`;
   const existing = new Set(ws.collections);

package/out/main/chunks/{mock-server-BxiXhP1m.js → mock-server-C4kTFkod.js}

@@ -21,9 +21,9 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
   isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
   mod
 ));
-const http = require("http");
-const crypto = require("crypto");
-const vm = require("vm");
+const http = require("node:http");
+const crypto = require("node:crypto");
+const vm = require("node:vm");
 const dayjs = require("dayjs");
 const xmldom = require("@xmldom/xmldom");
 function _interopNamespaceDefault(e) {
@@ -45,7 +45,7 @@ function _interopNamespaceDefault(e) {
 const vm__namespace = /* @__PURE__ */ _interopNamespaceDefault(vm);
 let _fakerCache = null;
 async function getFaker() {
-  if (!_fakerCache) _fakerCache = await import("@faker-js/faker");
+  _fakerCache ??= await import("@faker-js/faker");
   return _fakerCache.faker;
 }
 const running = /* @__PURE__ */ new Map();
@@ -58,7 +58,7 @@ function updateMockRoutes(id, routes) {
   liveRoutes.set(id, routes);
 }
 function matchPath(pattern, urlPath) {
-  const regexStr = pattern.replace(/[.+?^${}()|[\]\\]/g, "\\$&").replace(/:[^/]+/g, "[^/]+");
+  const regexStr = pattern.replaceAll(/[.+?^${}()|[\]\\]/g, "\\$&").replaceAll(/:[^/]+/g, "[^/]+");
   try {
     const regex = new RegExp("^" + regexStr + "/?$");
     return regex.test(urlPath.split("?")[0]);
@@ -103,15 +103,13 @@ const ELEMENT_NODE = 1, TEXT_NODE = 3, CDATA_NODE = 4;
 function elementToValue(el) {
   const obj = {};
   if (el.attributes) {
-    for (let i = 0; i < el.attributes.length; i++) {
-      const a = el.attributes[i];
+    for (const a of Array.from(el.attributes)) {
       obj["@" + a.nodeName] = a.nodeValue ?? "";
     }
   }
   let text = "";
   const childEls = [];
-  for (let i = 0; i < el.childNodes.length; i++) {
-    const c = el.childNodes[i];
+  for (const c of Array.from(el.childNodes)) {
     if (c.nodeType === ELEMENT_NODE) childEls.push(c);
     else if (c.nodeType === TEXT_NODE || c.nodeType === CDATA_NODE) text += c.nodeValue ?? "";
   }
@@ -136,7 +134,7 @@ function parseXmlToObject(xml) {
     } };
     const doc = new xmldom.DOMParser({ errorHandler: silent }).parseFromString(xml, "text/xml");
     const root = doc.documentElement;
-    if (!root || root.nodeType !== ELEMENT_NODE) return null;
+    if (root?.nodeType !== ELEMENT_NODE) return null;
     return { [root.nodeName]: elementToValue(root) };
   } catch {
     return null;
@@ -155,7 +153,7 @@ function parseRequestBody(bodyRaw, contentType) {
   return {};
 }
 function interpolateMockBody(body, context) {
-  return body.replace(/\{\{([^}]+)\}\}/g, (match, key) => {
+  return body.replaceAll(/\{\{([^}]+)\}\}/g, (match, key) => {
     const expr = key.trim();
     if (expr.includes(".") || expr.includes("(")) {
       try {

package/out/main/chunks/{recorder-0Ij921El.js → recorder-BkO8G_mB.js}

@@ -1,6 +1,6 @@
 "use strict";
-const http = require("http");
-const crypto = require("crypto");
+const http = require("node:http");
+const crypto = require("node:crypto");
 const undici = require("undici");
 const DEFAULT_MASK_HEADERS = /* @__PURE__ */ new Set([
   "authorization",

package/out/main/chunks/{request-collection-GzK4QgvT.js → request-collection-KGPuvN7o.js}

@@ -153,7 +153,7 @@ function getAllApplicableHooks(folderId, collection) {
 }
 function authIsConfigured(auth) {
   if (!auth || auth.type === "none") return false;
-  const set = (s) => !!(s && s.trim());
+  const set = (s) => !!s?.trim();
   switch (auth.type) {
     case "bearer":
       return set(auth.token) || set(auth.tokenSecretRef);
@@ -223,7 +223,7 @@ function parseDataRow(columns, row) {
     const key = col.toLowerCase();
     const val = row[ci] ?? "";
     if (RESERVED_STATUS.has(key)) {
-      const nums = val.split(/[\s,|]+/).map((x) => parseInt(x, 10)).filter((n) => Number.isFinite(n));
+      const nums = val.split(/[\s,|]+/).map((x) => Number.parseInt(x, 10)).filter((n) => Number.isFinite(n));
       if (nums.length) expectStatus = nums;
     } else if (RESERVED_OWASP.has(key)) {
       if (val.trim()) owaspTag = val.trim().toUpperCase();