@testsmith/api-spector 0.6.3 → 0.6.5

package/out/main/chunks/{request-exec-DAFA6Fap.js → request-exec-BRmVweue.js}

@@ -22,21 +22,20 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
   mod
 ));
 const undici = require("undici");
-const promises = require("fs/promises");
+const promises$1 = require("fs/promises");
 const nodeTls = require("tls");
 const handle = require("./handle-CL-nWtYA.js");
 const fs = require("node:fs");
 const os = require("node:os");
-const path$1 = require("node:path");
-const node_crypto = require("node:crypto");
-const crypto = require("crypto");
-const path = require("path");
+const path = require("node:path");
+const crypto = require("node:crypto");
+const promises = require("node:fs/promises");
 const dayjs = require("dayjs");
-const vm = require("vm");
+const vm = require("node:vm");
 const tv4 = require("tv4");
 const jsonpathPlus = require("jsonpath-plus");
 const xmldom = require("@xmldom/xmldom");
-const http = require("http");
+const http = require("node:http");
 const Ajv = require("ajv");
 function _interopNamespaceDefault(e) {
   const n = Object.create(null, { [Symbol.toStringTag]: { value: "Module" } });
@@ -135,7 +134,7 @@ function resolveConn$3() {
   if (!address) {
     throw new Error("Vault is not configured: set VAULT_ADDR (or settings.secrets.vault.address)");
   }
-  const token = env$3("VAULT_TOKEN", "API_SPECTOR_VAULT_TOKEN") ?? readFileTrim(path$1.join(os.homedir(), ".vault-token"));
+  const token = env$3("VAULT_TOKEN", "API_SPECTOR_VAULT_TOKEN") ?? readFileTrim(path.join(os.homedir(), ".vault-token"));
   const roleId = env$3("VAULT_ROLE_ID", "API_SPECTOR_VAULT_ROLE_ID") ?? cfg.roleId;
   const secretId = env$3("VAULT_SECRET_ID", "API_SPECTOR_VAULT_SECRET_ID");
   const jwt = env$3("VAULT_JWT", "API_SPECTOR_VAULT_JWT") ?? (env$3("VAULT_JWT_PATH", "API_SPECTOR_VAULT_JWT_PATH") ? readFileTrim(env$3("VAULT_JWT_PATH", "API_SPECTOR_VAULT_JWT_PATH")) : void 0);
@@ -264,19 +263,19 @@ const vaultProvider = {
   resolve: (refBody) => readSecret(refBody)
 };
 function hmac(key, data) {
-  return node_crypto.createHmac("sha256", key).update(data, "utf8").digest();
+  return crypto.createHmac("sha256", key).update(data, "utf8").digest();
 }
 function sha256hex(data) {
-  return node_crypto.createHash("sha256").update(data, "utf8").digest("hex");
+  return crypto.createHash("sha256").update(data, "utf8").digest("hex");
 }
 function signSigV4(input) {
-  const amzDate = input.now.toISOString().replace(/[:-]|\.\d{3}/g, "");
+  const amzDate = input.now.toISOString().replaceAll(/[:-]|\.\d{3}/g, "");
   const dateStamp = amzDate.slice(0, 8);
   const headers = { ...input.headers, host: input.host, "x-amz-date": amzDate };
   if (input.sessionToken) headers["x-amz-security-token"] = input.sessionToken;
   const lower = {};
-  for (const k of Object.keys(headers)) lower[k.toLowerCase()] = headers[k].trim().replace(/\s+/g, " ");
-  const sortedKeys = Object.keys(lower).sort();
+  for (const k of Object.keys(headers)) lower[k.toLowerCase()] = headers[k].trim().replaceAll(/\s+/g, " ");
+  const sortedKeys = Object.keys(lower).sort((a, b) => a.localeCompare(b));
   const canonicalHeaders = sortedKeys.map((k) => `${k}:${lower[k]}
 `).join("");
   const signedHeaders = sortedKeys.join(";");
@@ -288,7 +287,7 @@ function signSigV4(input) {
   const kRegion = hmac(kDate, input.region);
   const kService = hmac(kRegion, input.service);
   const kSigning = hmac(kService, "aws4_request");
-  const signature = node_crypto.createHmac("sha256", kSigning).update(stringToSign, "utf8").digest("hex");
+  const signature = crypto.createHmac("sha256", kSigning).update(stringToSign, "utf8").digest("hex");
   return {
     ...headers,
     Authorization: `AWS4-HMAC-SHA256 Credential=${input.accessKeyId}/${scope}, SignedHeaders=${signedHeaders}, Signature=${signature}`
@@ -529,7 +528,7 @@ async function resolve(refBody) {
     if (!sectionLabel) return true;
     return String(f?.section?.label ?? "").toLowerCase() === sectionLabel.toLowerCase();
   });
-  if (!match || match.value === void 0) {
+  if (match?.value === void 0) {
     throw new Error(`1Password: field '${fieldLabel}' not found on item '${item}'`);
   }
   return String(match.value);
@@ -576,7 +575,7 @@ function registerSecretHandlers(ipc) {
   });
   handle.handleIpc(ipc, handle.IPC.secret.set, async (_e, ref, value) => {
     const ss = getSafeStorage();
-    if (!ss || !ss.isEncryptionAvailable()) {
+    if (!ss?.isEncryptionAvailable()) {
       throw new Error("OS encryption is not available - set the secret via environment variable instead");
     }
     secretStore[ref] = ss.encryptString(value).toString("base64");
@@ -597,8 +596,8 @@ function decryptSecret(encrypted, salt, iv, password) {
   const ivBuf = Buffer.from(iv, "base64");
   const encBuf = Buffer.from(encrypted, "base64");
   const key = crypto.pbkdf2Sync(password, saltBuf, 1e5, 32, "sha256");
-  const authTag = encBuf.subarray(encBuf.length - 16);
-  const ciphertext = encBuf.subarray(0, encBuf.length - 16);
+  const authTag = encBuf.subarray(-16);
+  const ciphertext = encBuf.subarray(0, -16);
   const decipher = crypto.createDecipheriv("aes-256-gcm", key, ivBuf);
   decipher.setAuthTag(authTag);
   return Buffer.concat([decipher.update(ciphertext), decipher.final()]).toString("utf8");
@@ -610,7 +609,7 @@ async function getSecret(ref) {
   const stored = secretStore[ref];
   if (stored) {
     const ss = getSafeStorage();
-    if (ss && ss.isEncryptionAvailable()) {
+    if (ss?.isEncryptionAvailable()) {
       try {
         return ss.decryptString(Buffer.from(stored, "base64"));
       } catch {
@@ -621,7 +620,7 @@ async function getSecret(ref) {
 }
 let _fakerCache$1 = null;
 async function getFaker$1() {
-  if (!_fakerCache$1) _fakerCache$1 = await import("@faker-js/faker");
+  _fakerCache$1 ??= await import("@faker-js/faker");
   return _fakerCache$1.faker;
 }
 let _exprContext = null;
@@ -650,7 +649,7 @@ async function buildDynamicVars() {
   };
 }
 function interpolate(str, vars) {
-  return str.replace(/\{\{([^}]+)\}\}/g, (match, key) => {
+  return str.replaceAll(/\{\{([^}]+)\}\}/g, (match, key) => {
     const trimmed = key.trim();
     if (trimmed in vars) return vars[trimmed];
     if (_exprContext && (trimmed.includes(".") || trimmed.includes("("))) {
@@ -670,7 +669,7 @@ function resolveDataRow(row, scope) {
 }
 function buildUrl(baseUrl, params, vars) {
   const templateTokens = /* @__PURE__ */ new Set();
-  baseUrl.replace(/\{\{([^}]+)\}\}/g, (_m, name) => {
+  baseUrl.replaceAll(/\{\{([^}]+)\}\}/g, (_m, name) => {
     templateTokens.add(String(name).trim());
     return "";
   });
@@ -698,7 +697,7 @@ function rebaseUrl(fullUrl, baseUrl) {
     const orig = new URL(fullUrl, "http://placeholder.invalid");
     const base = new URL(baseUrl);
     const basePath = base.pathname.replace(/\/$/, "");
-    base.pathname = (basePath + orig.pathname).replace(/\/{2,}/g, "/");
+    base.pathname = (basePath + orig.pathname).replaceAll(/\/{2,}/g, "/");
     base.search = orig.search;
     return base.toString();
   } catch {
@@ -755,14 +754,14 @@ function xmlFindAll(node, tag, nth) {
 }
 function xmlQuerySelector(root, selector) {
   const parts = selector.trim().split(/\s*>\s*/);
-  const m0 = parts[0].match(/^([A-Za-z0-9_:.-]+?)(?::nth-of-type\((\d+)\))?$/);
+  const m0 = /^([A-Za-z0-9_:.-]+?)(?::nth-of-type\((\d+)\))?$/.exec(parts[0]);
   if (!m0) return null;
-  let candidates = xmlFindAll(root, m0[1], m0[2] ? parseInt(m0[2]) - 1 : 0);
+  let candidates = xmlFindAll(root, m0[1], m0[2] ? Number.parseInt(m0[2]) - 1 : 0);
   for (let i = 1; i < parts.length; i++) {
-    const m = parts[i].match(/^([A-Za-z0-9_:.-]+?)(?::nth-of-type\((\d+)\))?$/);
+    const m = /^([A-Za-z0-9_:.-]+?)(?::nth-of-type\((\d+)\))?$/.exec(parts[i]);
     if (!m) return null;
     const tag = m[1];
-    const idx = m[2] ? parseInt(m[2]) - 1 : 0;
+    const idx = m[2] ? Number.parseInt(m[2]) - 1 : 0;
     const next = [];
     for (const node of candidates) {
       const children = Array.from(node.childNodes).filter((c) => c.nodeType === 1 && c.tagName === tag);
@@ -783,7 +782,7 @@ function makeSandboxDOMParser() {
 }
 let _fakerCache = null;
 async function getFaker() {
-  if (!_fakerCache) _fakerCache = await import("@faker-js/faker");
+  _fakerCache ??= await import("@faker-js/faker");
   return _fakerCache.faker;
 }
 function makeAsserter(value, negated = false) {
@@ -982,7 +981,7 @@ function buildAt(ctx, testResults, consoleOutput) {
       const period = options?.period ?? 30;
       const algorithm = options?.algorithm ?? "sha1";
       const base32chars = "ABCDEFGHIJKLMNOPQRSTUVWXYZ234567";
-      const cleaned = secret.replace(/[\s=-]/g, "").toUpperCase();
+      const cleaned = secret.replaceAll(/[\s=-]/g, "").toUpperCase();
       let bits = "";
       for (const c of cleaned) {
         const val = base32chars.indexOf(c);
@@ -991,7 +990,7 @@ function buildAt(ctx, testResults, consoleOutput) {
       }
       const keyBytes = Buffer.alloc(Math.floor(bits.length / 8));
       for (let i = 0; i < keyBytes.length; i++) {
-        keyBytes[i] = parseInt(bits.slice(i * 8, i * 8 + 8), 2);
+        keyBytes[i] = Number.parseInt(bits.slice(i * 8, i * 8 + 8), 2);
       }
       const counter = Math.floor(Date.now() / 1e3 / period);
       const counterBuf = Buffer.alloc(8);
@@ -1070,8 +1069,9 @@ async function runScript(code, ctx, timeoutMs = 5e3) {
     JSON,
     Math,
     Date,
-    parseInt,
-    parseFloat,
+    parseInt: Number.parseInt,
+    parseFloat: Number.parseFloat,
+    // isNaN/isFinite intentionally expose the global (coercing) semantics user scripts expect
     isNaN,
     isFinite,
     encodeURIComponent,
@@ -1148,7 +1148,7 @@ class StreamFramer {
   carry = "";
   /** Feed a decoded text chunk; returns the frames that completed. */
   push(text) {
-    this.carry += text.replace(/\r\n?/g, "\n");
+    this.carry += text.replaceAll(/\r\n?/g, "\n");
     return this.mode === "sse" ? this.drainSse() : this.drainNdjson();
   }
   /** Emit whatever remains once the stream closes (a last line/block with no
@@ -1211,7 +1211,7 @@ class StreamFramer {
 function toEvent(frame, kind, seq, tMs) {
   let json;
   const trimmed = frame.data.trim();
-  if (trimmed && (trimmed[0] === "{" || trimmed[0] === "[")) {
+  if (trimmed && (trimmed.startsWith("{") || trimmed.startsWith("["))) {
     try {
       json = JSON.parse(trimmed);
     } catch {
@@ -1305,7 +1305,7 @@ async function readStream(body, kind, startMs, opts = {}) {
     } catch {
     }
   }
-  return { events, text, close, firstEventMs: firstEventMs < 0 ? 0 : firstEventMs };
+  return { events, text, close, firstEventMs: Math.max(firstEventMs, 0) };
 }
 const SIGNATURE = Buffer.from("NTLMSSP\0", "latin1");
 const F_UNICODE = 1;
@@ -1756,11 +1756,11 @@ function maskObject(obj, patterns) {
 }
 function maskHeaders(headers, patterns) {
   if (!patterns.length) return headers;
-  const alwaysMask = ["authorization", "cookie", "set-cookie"];
+  const alwaysMask = /* @__PURE__ */ new Set(["authorization", "cookie", "set-cookie"]);
   const result = {};
   for (const [k, v] of Object.entries(headers)) {
     const lower = k.toLowerCase();
-    if (alwaysMask.includes(lower) || patterns.some((p) => lower.includes(p.toLowerCase()))) {
+    if (alwaysMask.has(lower) || patterns.some((p) => lower.includes(p.toLowerCase()))) {
       result[k] = "[REDACTED]";
     } else {
       result[k] = v;
@@ -1853,7 +1853,7 @@ function applyRequestDefaults(req) {
 }
 let _defaultAgent;
 function defaultAgent() {
-  if (!_defaultAgent) _defaultAgent = new undici.Agent({ allowH2: true });
+  _defaultAgent ??= new undici.Agent({ allowH2: true });
   return _defaultAgent;
 }
 async function buildDispatcher(proxy, tls) {
@@ -1867,19 +1867,19 @@ async function buildDispatcher(proxy, tls) {
     }
     if (tls.caCertPath) {
       try {
-        connectOpts["ca"] = await promises.readFile(tls.caCertPath);
+        connectOpts["ca"] = await promises$1.readFile(tls.caCertPath);
       } catch {
       }
     }
     if (tls.clientCertPath) {
       try {
-        connectOpts["cert"] = await promises.readFile(tls.clientCertPath);
+        connectOpts["cert"] = await promises$1.readFile(tls.clientCertPath);
       } catch {
       }
     }
     if (tls.clientKeyPath) {
       try {
-        connectOpts["key"] = await promises.readFile(tls.clientKeyPath);
+        connectOpts["key"] = await promises$1.readFile(tls.clientKeyPath);
       } catch {
       }
     }

package/out/main/chunks/{soap-handler-BAPCALkN.js → soap-handler-BznuMFIP.js}

@@ -1,7 +1,7 @@
 "use strict";
 const handle = require("./handle-CL-nWtYA.js");
-const https = require("https");
-const http = require("http");
+const https = require("node:https");
+const http = require("node:http");
 const xmldom = require("@xmldom/xmldom");
 function fetchUrl(url, headers = {}) {
   return new Promise((resolveP, rejectP) => {
@@ -26,9 +26,7 @@ function isElement(node) {
 }
 function nodeListToArray(list) {
   if (!list || typeof list.length !== "number") return [];
-  const out = [];
-  for (let i = 0; i < list.length; i++) out.push(list[i]);
-  return out;
+  return Array.from(list);
 }
 function children(node) {
   return nodeListToArray(node.childNodes).filter(isElement);
@@ -113,7 +111,7 @@ function indent(level) {
 }
 function renderParams(params, level) {
   return params.map((p) => {
-    if (p.children && p.children.length) {
+    if (p.children?.length) {
       return `${indent(level)}<tns:${p.name}>
 ${renderParams(p.children, level + 1)}
 ${indent(level)}</tns:${p.name}>`;
@@ -246,7 +244,7 @@ function parseWsdl(wsdlText) {
     const soapActionByName = {};
     const blockRx = /<(?:wsdl:)?operation\s+name\s*=\s*["']([^"']+)["'][^>]*>([\s\S]*?)<\/(?:wsdl:)?operation>/g;
     while ((m = blockRx.exec(wsdlText)) !== null) {
-      const sa = m[2].match(/soapAction\s*=\s*["']([^"']*)["']/);
+      const sa = /soapAction\s*=\s*["']([^"']*)["']/.exec(m[2]);
       if (sa) soapActionByName[m[1]] = sa[1];
     }
     for (const name of seen) {
@@ -283,7 +281,7 @@ const ct = (metadata && metadata.soapVersion === '1.2')
   : 'text/xml; charset=utf-8';
 
 const headers = request.headers || {};
-const sa      = String(headers['soapaction'] || headers['SOAPAction'] || '').replace(/"/g, '');
+const sa      = String(headers['soapaction'] || headers['SOAPAction'] || '').replaceAll('"', '');
 const body    = request.body || '';
 
 let opName = null;
@@ -315,7 +313,7 @@ function registerSoapHandlers(ipc) {
   handle.handleIpc(ipc, handle.IPC.wsdl.import, async (_event, opts) => {
     const { validateWsdlImport } = await Promise.resolve().then(() => require("./ipc-validate-sqUFqRmE.js"));
     validateWsdlImport(opts);
-    const { importWsdl } = await Promise.resolve().then(() => require("./import-DdXhO56X.js"));
+    const { importWsdl } = await Promise.resolve().then(() => require("./import-DYssQzex.js"));
     const wsdlText = opts.xml ?? (opts.url ? await fetchUrl(opts.url) : "");
     if (!wsdlText) throw new Error("wsdl:import requires either `url` or `xml`");
     return importWsdl(wsdlText, { name: opts.name, existingMockPorts: opts.existingMockPorts });

package/out/main/compare.js

@@ -1,17 +1,17 @@
 #!/usr/bin/env node
 "use strict";
-const promises = require("fs/promises");
+const promises = require("node:fs/promises");
 const jsYaml = require("js-yaml");
 const undici = require("undici");
-const coverage = require("./chunks/coverage-C54mZEh_.js");
-const cliCommon = require("./chunks/cli-common-vASoDfQH.js");
-require("path");
-require("./chunks/data-files-Br2h3Dt2.js");
-require("crypto");
-const HTTP_METHODS = ["get", "put", "post", "delete", "options", "head", "patch", "trace"];
+const coverage = require("./chunks/coverage-C0U4QM83.js");
+const cliCommon = require("./chunks/cli-common-Cq_cphpZ.js");
+require("node:path");
+require("./chunks/data-files-BYqhsoPe.js");
+require("node:crypto");
+const HTTP_METHODS = /* @__PURE__ */ new Set(["get", "put", "post", "delete", "options", "head", "patch", "trace"]);
 function resolveRef(spec, ref) {
   const parts = ref.replace(/^#\//, "").split("/");
-  return parts.reduce((o, k) => o?.[decodeURIComponent(k.replace(/~1/g, "/").replace(/~0/g, "~"))], spec);
+  return parts.reduce((o, k) => o?.[decodeURIComponent(k.replaceAll("~1", "/").replaceAll("~0", "~"))], spec);
 }
 function deref(spec, node, depth = 0, seen = /* @__PURE__ */ new Set()) {
   if (!node || typeof node !== "object" || depth > 8) return node;
@@ -52,7 +52,7 @@ function requestSchema(spec, op) {
 }
 function successResponseSchema(spec, op) {
   const responses = op?.responses ?? {};
-  const code = Object.keys(responses).filter((c) => /^2\d\d$/.test(c)).sort()[0];
+  const code = Object.keys(responses).filter((c) => /^2\d\d$/.test(c)).sort((a, b) => a.localeCompare(b))[0];
   return code ? deref(spec, responses[code])?.content?.["application/json"]?.schema : void 0;
 }
 function paramRequired(spec, pathItem, op) {
@@ -66,7 +66,7 @@ function operations(spec) {
   for (const [path, item] of Object.entries(spec?.paths ?? {})) {
     if (!item || typeof item !== "object") continue;
     for (const [method, op] of Object.entries(item)) {
-      if (!HTTP_METHODS.includes(method.toLowerCase())) continue;
+      if (!HTTP_METHODS.has(method.toLowerCase())) continue;
       map.set(`${method.toUpperCase()} ${path}`, { method: method.toUpperCase(), path, pathItem: item, op });
     }
   }

package/out/main/contract.js

@@ -1,31 +1,29 @@
 #!/usr/bin/env node
 "use strict";
-const promises = require("fs/promises");
-const path = require("path");
-const brokerClient = require("./chunks/broker-client-WEymdqAK.js");
-const escape = require("./chunks/escape-BwPM4Tf6.js");
-const crypto = require("crypto");
+const promises = require("node:fs/promises");
+const path = require("node:path");
+const brokerClient = require("./chunks/broker-client-CvRuiX3o.js");
+const escape = require("./chunks/escape-DDVAlOvZ.js");
+const crypto = require("node:crypto");
 const undici = require("undici");
-const os = require("os");
-const cliCommon = require("./chunks/cli-common-vASoDfQH.js");
-const child_process = require("child_process");
+const os = require("node:os");
+const cliCommon = require("./chunks/cli-common-Cq_cphpZ.js");
+const node_child_process = require("node:child_process");
 const jsYaml = require("js-yaml");
 const environments = require("./chunks/environments-iM3SUM-4.js");
-require("./chunks/request-exec-DAFA6Fap.js");
+require("./chunks/request-exec-BRmVweue.js");
+require("fs/promises");
 require("tls");
 require("./chunks/handle-CL-nWtYA.js");
 require("node:fs");
-require("node:os");
-require("node:path");
-require("node:crypto");
 require("dayjs");
-require("vm");
+require("node:vm");
 require("tv4");
 require("jsonpath-plus");
 require("@xmldom/xmldom");
-require("http");
+require("node:http");
 require("ajv");
-require("./chunks/data-files-Br2h3Dt2.js");
+require("./chunks/data-files-BYqhsoPe.js");
 function caseXml(r) {
   const name = escape.escapeXml(`${r.method} ${r.requestName}`);
   const time = ((r.durationMs ?? 0) / 1e3).toFixed(3);
@@ -99,7 +97,7 @@ function applyPendingSemantics(report, requests, store, now) {
 }
 const WEBHOOKS_FILE = "contracts/webhooks.json";
 function substituteEnv(value, env) {
-  return value.replace(/\$([A-Z_][A-Z0-9_]*)/g, (_, name) => env[name] ?? "");
+  return value.replaceAll(/\$([A-Z_][A-Z0-9_]*)/g, (_, name) => env[name] ?? "");
 }
 async function loadWebhookConfig(dir) {
   let raw;
@@ -137,7 +135,7 @@ function resolveVersion(override) {
   const env = process.env["GITHUB_SHA"] || process.env["CI_COMMIT_SHA"] || process.env["GIT_COMMIT"] || process.env["CIRCLE_SHA1"] || process.env["BUILD_SOURCEVERSION"] || process.env["BITBUCKET_COMMIT"];
   if (env) return env.trim();
   try {
-    return child_process.execSync("git rev-parse HEAD", { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] }).trim();
+    return node_child_process.execSync("git rev-parse HEAD", { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] }).trim();
   } catch {
     throw new Error("Could not resolve a version. Pass --version <sha>, or run inside a git repo / CI.");
   }
@@ -147,10 +145,10 @@ function parseSelfVerification(text, path2) {
   const isXml = path2.toLowerCase().endsWith(".xml") || trimmed.startsWith("<");
   if (isXml) {
     const num = (tag, name) => {
-      const m = tag.match(new RegExp(`\\b${name}="(\\d+(?:\\.\\d+)?)"`));
+      const m = new RegExp(`\\b${name}="(\\d+(?:\\.\\d+)?)"`).exec(tag);
       return m ? Math.round(Number(m[1])) : 0;
     };
-    const agg = text.match(/<testsuites\b[^>]*>/);
+    const agg = /<testsuites\b[^>]*>/.exec(text);
     let tests = 0, failures = 0, errors = 0;
     if (agg) {
       tests = num(agg[0], "tests");
@@ -789,7 +787,7 @@ async function cmdCheck(args) {
   for (const c of checks.filter((c2) => !c2.passed)) {
     console.error(`    ${c.interaction}`);
     for (const m of c.mismatches ?? []) console.error(`      ${m.location}: consumer requires ${m.consumer}, provider ${m.provider}`);
-    if ((!c.mismatches || !c.mismatches.length) && c.error) console.error(`      ${c.error}`);
+    if (!c.mismatches?.length && c.error) console.error(`      ${c.error}`);
   }
   process.exit(1);
 }

package/out/main/coverage.js

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 "use strict";
-const promises = require("fs/promises");
+const promises = require("node:fs/promises");
 const jsYaml = require("js-yaml");
 const undici = require("undici");
-const coverage = require("./chunks/coverage-C54mZEh_.js");
-const cliCommon = require("./chunks/cli-common-vASoDfQH.js");
-require("path");
-require("./chunks/data-files-Br2h3Dt2.js");
-require("crypto");
+const coverage = require("./chunks/coverage-C0U4QM83.js");
+const cliCommon = require("./chunks/cli-common-Cq_cphpZ.js");
+require("node:path");
+require("./chunks/data-files-BYqhsoPe.js");
+require("node:crypto");
 async function loadObservations(path) {
   const report = JSON.parse(await promises.readFile(path, "utf8"));
   const out = [];
@@ -87,7 +87,7 @@ function toHtml(report) {
       <td><code>${op.path}</code></td>
       <td>${op.declaredStatuses.length ? `${op.coveredStatuses.length}/${op.declaredStatuses.length}` : "-"}</td>
       <td>${op.tested ? op.hasNegativeTest ? "yes" : '<span class="warn">missing</span>' : "-"}</td>
-      <td>${op.requests.map((r) => r.replace(/</g, "&lt;")).join("<br>") || "-"}</td>
+      <td>${op.requests.map((r) => r.replaceAll("<", "&lt;")).join("<br>") || "-"}</td>
     </tr>`).join("");
   const title = (report.spec.title ?? "API") + (report.spec.version ? ` v${report.spec.version}` : "");
   return `<!doctype html><meta charset="utf-8"><title>${title} coverage</title>

package/out/main/generate-tests.js

@@ -1,18 +1,18 @@
 #!/usr/bin/env node
 "use strict";
-const promises = require("fs/promises");
+const promises = require("node:fs/promises");
 const jsYaml = require("js-yaml");
 const undici = require("undici");
 const uuid = require("uuid");
-const coverage = require("./chunks/coverage-C54mZEh_.js");
-const cliCommon = require("./chunks/cli-common-vASoDfQH.js");
-require("path");
-require("./chunks/data-files-Br2h3Dt2.js");
-require("crypto");
-const HTTP_METHODS = ["get", "put", "post", "delete", "options", "head", "patch", "trace"];
+const coverage = require("./chunks/coverage-C0U4QM83.js");
+const cliCommon = require("./chunks/cli-common-Cq_cphpZ.js");
+require("node:path");
+require("./chunks/data-files-BYqhsoPe.js");
+require("node:crypto");
+const HTTP_METHODS = /* @__PURE__ */ new Set(["get", "put", "post", "delete", "options", "head", "patch", "trace"]);
 function resolveRef(spec, ref) {
   const parts = ref.replace(/^#\//, "").split("/");
-  return parts.reduce((o, k) => o?.[decodeURIComponent(k.replace(/~1/g, "/").replace(/~0/g, "~"))], spec);
+  return parts.reduce((o, k) => o?.[decodeURIComponent(k.replaceAll("~1", "/").replaceAll("~0", "~"))], spec);
 }
 function deref(spec, node, depth = 0, seen = /* @__PURE__ */ new Set()) {
   if (!node || typeof node !== "object" || depth > 8) return node;
@@ -185,7 +185,7 @@ function generateTests(spec, options = {}) {
   for (const [path, item] of Object.entries(doc.paths ?? {})) {
     if (!item || typeof item !== "object") continue;
     for (const [method, op] of Object.entries(item)) {
-      if (!HTTP_METHODS.includes(method.toLowerCase())) continue;
+      if (!HTTP_METHODS.has(method.toLowerCase())) continue;
       if (!op || typeof op !== "object") continue;
       if (opts.only.size && !opts.only.has(`${method.toUpperCase()} ${path}`)) continue;
       out.push(...generateForOperation(doc, method.toUpperCase(), path, item, op, opts));