@testsmith/api-spector 0.7.2 → 0.7.3

package/out/main/chunks/{request-exec-DLBjLZe1.js → request-exec-CcLHtkwG.js}

@@ -24,7 +24,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 const undici = require("undici");
 const promises$1 = require("fs/promises");
 const nodeTls = require("tls");
-const handle = require("./handle-DDZ37J8G.js");
+const handle = require("./handle-BY_jaVBT.js");
 const fs = require("node:fs");
 const os = require("node:os");
 const path = require("node:path");
@@ -1036,22 +1036,7 @@ function buildAt(ctx, testResults, consoleOutput) {
   }
   return sp;
 }
-async function runScript(code, ctx, timeoutMs = 5e3) {
-  const faker = await getFaker();
-  const testResults = [];
-  const consoleOutput = [];
-  const envVarsCopy = { ...ctx.envVars };
-  const collectionCopy = { ...ctx.collectionVars };
-  const globalsCopy = { ...ctx.globals };
-  const localVarsCopy = { ...ctx.localVars };
-  const scriptCtx = {
-    envVars: envVarsCopy,
-    collectionVars: collectionCopy,
-    globals: globalsCopy,
-    localVars: localVarsCopy,
-    response: ctx.response,
-    piiMaskPatterns: ctx.piiMaskPatterns
-  };
+function buildSandbox(scriptCtx, testResults, consoleOutput, faker) {
   const sp = buildAt(scriptCtx, testResults, consoleOutput);
   const captureConsole = {
     log: (...args) => consoleOutput.push(args.map(String).join(" ")),
@@ -1059,8 +1044,9 @@ async function runScript(code, ctx, timeoutMs = 5e3) {
     error: (...args) => consoleOutput.push("[error] " + args.map(String).join(" ")),
     info: (...args) => consoleOutput.push("[info] " + args.map(String).join(" "))
   };
-  const sandbox = {
+  return {
     sp,
+    data: scriptCtx.data ?? {},
     DOMParser: makeSandboxDOMParser,
     dayjs,
     faker,
@@ -1082,6 +1068,24 @@ async function runScript(code, ctx, timeoutMs = 5e3) {
     // not available in sync vm context
     setInterval: void 0
   };
+}
+async function runScript(code, ctx, timeoutMs = 5e3) {
+  const faker = await getFaker();
+  const testResults = [];
+  const consoleOutput = [];
+  const envVarsCopy = { ...ctx.envVars };
+  const collectionCopy = { ...ctx.collectionVars };
+  const globalsCopy = { ...ctx.globals };
+  const localVarsCopy = { ...ctx.localVars };
+  const scriptCtx = {
+    envVars: envVarsCopy,
+    collectionVars: collectionCopy,
+    globals: globalsCopy,
+    localVars: localVarsCopy,
+    response: ctx.response,
+    piiMaskPatterns: ctx.piiMaskPatterns
+  };
+  const sandbox = buildSandbox(scriptCtx, testResults, consoleOutput, faker);
   try {
     vm__namespace.runInNewContext(code, sandbox, { timeout: timeoutMs, filename: "script.js" });
   } catch (err) {
@@ -1105,6 +1109,42 @@ async function runScript(code, ctx, timeoutMs = 5e3) {
     updatedLocalVars: localVarsCopy
   };
 }
+async function evaluateExpression(code, ctx, timeoutMs = 5e3) {
+  const faker = await getFaker();
+  const testResults = [];
+  const consoleOutput = [];
+  const envVarsCopy = { ...ctx.envVars };
+  const collectionCopy = { ...ctx.collectionVars };
+  const globalsCopy = { ...ctx.globals };
+  const localVarsCopy = { ...ctx.localVars };
+  const scriptCtx = {
+    envVars: envVarsCopy,
+    collectionVars: collectionCopy,
+    globals: globalsCopy,
+    localVars: localVarsCopy,
+    response: ctx.response,
+    piiMaskPatterns: ctx.piiMaskPatterns,
+    data: ctx.data
+  };
+  const sandbox = buildSandbox(scriptCtx, testResults, consoleOutput, faker);
+  const scopes = {
+    updatedEnvVars: envVarsCopy,
+    updatedCollectionVars: collectionCopy,
+    updatedGlobals: globalsCopy,
+    updatedLocalVars: localVarsCopy
+  };
+  try {
+    let value;
+    try {
+      value = vm__namespace.runInNewContext(`(${code})`, sandbox, { timeout: timeoutMs, filename: "expression.js" });
+    } catch {
+      value = vm__namespace.runInNewContext(code, sandbox, { timeout: timeoutMs, filename: "expression.js" });
+    }
+    return { value, consoleOutput, ...scopes };
+  } catch (err) {
+    return { value: void 0, consoleOutput, ...scopes, error: err instanceof Error ? err.message : String(err) };
+  }
+}
 function buildProxyUri(proxy) {
   const raw = proxy.url.trim();
   if (!raw) throw new Error("Proxy URL is empty");
@@ -2277,6 +2317,7 @@ exports.buildProxyUri = buildProxyUri;
 exports.buildSchemaTestResults = buildSchemaTestResults;
 exports.buildUrl = buildUrl;
 exports.deriveRunStatus = deriveRunStatus;
+exports.evaluateExpression = evaluateExpression;
 exports.executeRunnerRequest = executeRunnerRequest;
 exports.fetchOAuth2Token = fetchOAuth2Token;
 exports.getGlobals = getGlobals;

package/out/main/chunks/{soap-handler-C_LCcPwE.js → soap-handler-CkoLJHoI.js}

@@ -1,5 +1,5 @@
 "use strict";
-const handle = require("./handle-DDZ37J8G.js");
+const handle = require("./handle-BY_jaVBT.js");
 const https = require("node:https");
 const http = require("node:http");
 const xmldom = require("@xmldom/xmldom");
@@ -313,7 +313,7 @@ function registerSoapHandlers(ipc) {
   handle.handleIpc(ipc, handle.IPC.wsdl.import, async (_event, opts) => {
     const { validateWsdlImport } = await Promise.resolve().then(() => require("./ipc-validate-sqUFqRmE.js"));
     validateWsdlImport(opts);
-    const { importWsdl } = await Promise.resolve().then(() => require("./import-CBAklepT.js"));
+    const { importWsdl } = await Promise.resolve().then(() => require("./import-DR_r1DUP.js"));
     const wsdlText = opts.xml ?? (opts.url ? await fetchUrl(opts.url) : "");
     if (!wsdlText) throw new Error("wsdl:import requires either `url` or `xml`");
     return importWsdl(wsdlText, { name: opts.name, existingMockPorts: opts.existingMockPorts });

package/out/main/compare.js

@@ -4,7 +4,7 @@ const promises = require("node:fs/promises");
 const jsYaml = require("js-yaml");
 const undici = require("undici");
 const coverage = require("./chunks/coverage-C0U4QM83.js");
-const cliCommon = require("./chunks/cli-common-Cq_cphpZ.js");
+const cliCommon = require("./chunks/cli-common-GnihVSjU.js");
 require("node:path");
 require("./chunks/data-files-BYqhsoPe.js");
 require("node:crypto");

package/out/main/contract.js

@@ -2,19 +2,19 @@
 "use strict";
 const promises = require("node:fs/promises");
 const path = require("node:path");
-const brokerClient = require("./chunks/broker-client-BSTNMPtT.js");
+const brokerClient = require("./chunks/broker-client-VwFF9sbp.js");
 const escape = require("./chunks/escape-DDVAlOvZ.js");
 const crypto = require("node:crypto");
 const undici = require("undici");
 const os = require("node:os");
-const cliCommon = require("./chunks/cli-common-Cq_cphpZ.js");
+const cliCommon = require("./chunks/cli-common-GnihVSjU.js");
 const node_child_process = require("node:child_process");
 const jsYaml = require("js-yaml");
 const environments = require("./chunks/environments-iM3SUM-4.js");
-require("./chunks/request-exec-DLBjLZe1.js");
+require("./chunks/request-exec-CcLHtkwG.js");
 require("fs/promises");
 require("tls");
-require("./chunks/handle-DDZ37J8G.js");
+require("./chunks/handle-BY_jaVBT.js");
 require("node:fs");
 require("dayjs");
 require("node:vm");

package/out/main/coverage.js

@@ -4,7 +4,7 @@ const promises = require("node:fs/promises");
 const jsYaml = require("js-yaml");
 const undici = require("undici");
 const coverage = require("./chunks/coverage-C0U4QM83.js");
-const cliCommon = require("./chunks/cli-common-Cq_cphpZ.js");
+const cliCommon = require("./chunks/cli-common-GnihVSjU.js");
 require("node:path");
 require("./chunks/data-files-BYqhsoPe.js");
 require("node:crypto");

package/out/main/flow.js

@@ -0,0 +1,401 @@
+#!/usr/bin/env node
+"use strict";
+const promises = require("node:fs/promises");
+const path = require("node:path");
+const requestExec = require("./chunks/request-exec-CcLHtkwG.js");
+const requestCollection = require("./chunks/request-collection-KGPuvN7o.js");
+const environments = require("./chunks/environments-iM3SUM-4.js");
+const flowEngine = require("./chunks/flow-engine-DuO1iX7c.js");
+const cliCommon = require("./chunks/cli-common-GnihVSjU.js");
+require("undici");
+require("fs/promises");
+require("tls");
+require("./chunks/handle-BY_jaVBT.js");
+require("node:fs");
+require("node:os");
+require("node:crypto");
+require("dayjs");
+require("node:vm");
+require("tv4");
+require("jsonpath-plus");
+require("@xmldom/xmldom");
+require("node:http");
+require("ajv");
+require("uuid");
+require("./chunks/data-files-BYqhsoPe.js");
+function esc(s) {
+  return String(s ?? "").replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;");
+}
+function pretty(v) {
+  if (typeof v === "string") {
+    try {
+      return esc(JSON.stringify(JSON.parse(v), null, 2));
+    } catch {
+      return esc(v);
+    }
+  }
+  try {
+    return esc(JSON.stringify(v, null, 2));
+  } catch {
+    return esc(String(v));
+  }
+}
+const STATUS_CLS = {
+  passed: "badge-pass",
+  failed: "badge-fail",
+  error: "badge-err",
+  done: "badge-done",
+  skipped: "badge-skip",
+  running: "badge-done"
+};
+function blockDetail(b) {
+  const parts = [];
+  if (b.error) parts.push(`<div class="err-row">&#x26a0; ${esc(b.error)}</div>`);
+  if (b.testResults?.length) {
+    const rows = b.testResults.map(
+      (tr) => `<div class="test-row ${tr.passed ? "test-pass" : "test-fail"}"><span class="dot">${tr.passed ? "✓" : "✗"}</span> ${esc(tr.name)}${!tr.passed && tr.error ? `<div class="test-err">${esc(tr.error)}</div>` : ""}</div>`
+    ).join("");
+    parts.push(`<div class="section-label">Tests</div><div class="tests-wrap">${rows}</div>`);
+  }
+  if (b.type === "request" && b.resolvedUrl) {
+    parts.push(`<div class="section-label">Request</div><div class="mono url">${esc(b.method ?? "")} ${esc(b.resolvedUrl)}</div>`);
+  }
+  if (b.type === "log" && b.message) {
+    parts.push(`<div class="section-label">Message</div><pre class="code-block">${esc(b.message)}</pre>`);
+  }
+  if (b.type === "display" && b.display !== void 0) {
+    parts.push(`<div class="section-label">Value</div><pre class="code-block">${pretty(b.display)}</pre>`);
+  }
+  return parts.join("");
+}
+function buildFlowHtmlReport(summary, meta = {}) {
+  const ts = meta.timestamp ?? (/* @__PURE__ */ new Date()).toISOString();
+  const flow = meta.flow ?? "Flow";
+  const env = meta.environment ?? "—";
+  const passRate = summary.total > 0 ? Math.round(summary.passed / summary.total * 100) : 0;
+  const cards = summary.blocks.map((b, idx) => {
+    const statusCls = STATUS_CLS[b.status] ?? "badge-done";
+    const httpCls = b.httpStatus == null ? "" : b.httpStatus < 400 ? "http-ok" : "http-err";
+    const dur = b.durationMs != null ? `${b.durationMs} ms` : "";
+    const at = b.atMs != null ? `+${b.atMs} ms` : "";
+    const detail = blockDetail(b);
+    return `
+    <div class="card" id="r${idx}">
+      <div class="card-header" ${detail ? `onclick="toggle(${idx})"` : ""}>
+        <span class="chevron" id="ch${idx}">${detail ? "▶" : ""}</span>
+        <span class="at mono muted">${esc(at)}</span>
+        <span class="badge ${statusCls}">${esc(b.status)}</span>
+        <span class="type mono">${esc(b.type)}</span>
+        <span class="card-name">${esc(b.label)}${b.iteration != null ? ` <span class="muted">#${b.iteration}</span>` : ""}</span>
+        <span class="card-url muted">${esc(b.resolvedUrl ?? "")}</span>
+        <span class="dur muted">${esc(dur)}</span>
+        ${b.httpStatus != null ? `<span class="http-badge ${httpCls}">${b.httpStatus}</span>` : ""}
+      </div>
+      ${detail ? `<div class="card-body" id="cb${idx}" style="display:none">${detail}</div>` : ""}
+    </div>`;
+  }).join("\n");
+  const vars = summary.variables;
+  const varRows = vars ? [
+    ...Object.entries(vars.localVars).map(([k, v]) => [k, v, "local"]),
+    ...Object.entries(vars.collectionVars).map(([k, v]) => [k, v, "collection"]),
+    ...Object.entries(vars.globals).map(([k, v]) => [k, v, "global"])
+  ].map(([k, v, scope]) => `<tr><td class="hk mono">${esc(k)}</td><td class="muted">${esc(scope)}</td><td class="hv mono">${esc(v)}</td></tr>`).join("") : "";
+  return `<!DOCTYPE html>
+<html lang="en">
+<head>
+<meta charset="UTF-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<title>${esc(flow)} — Flow Report</title>
+<style>
+  :root { --bg:#0f1117; --surface:#161b22; --border:#21262d; --text:#c9d1d9; --bright:#e6edf3; --muted:#8b949e;
+    --green:#3fb950; --red:#f85149; --amber:#d29922; --blue:#79c0ff;
+    --pass-bg:#0d3a1e; --fail-bg:#3d1014; --err-bg:#3d2a00; --skip-bg:#21262d; }
+  html.light { --bg:#fff; --surface:#f6f8fa; --border:#d0d7de; --text:#1f2328; --bright:#1f2328; --muted:#656d76;
+    --green:#1a7f37; --red:#cf222e; --amber:#9a6700; --blue:#0969da;
+    --pass-bg:#dafbe1; --fail-bg:#ffebe9; --err-bg:#fff8c5; --skip-bg:#f6f8fa; }
+  *,*::before,*::after { box-sizing:border-box; margin:0; padding:0; }
+  body { font-family:system-ui,sans-serif; background:var(--bg); color:var(--text); font-size:13px; line-height:1.5; }
+  .wrap { max-width:1100px; margin:0 auto; padding:32px 24px; }
+  h1 { font-size:20px; font-weight:600; color:var(--bright); margin-bottom:4px; }
+  .meta-line { color:var(--muted); font-size:11px; margin-bottom:24px; }
+  .mono { font-family:ui-monospace,Menlo,Consolas,monospace; }
+  .muted { color:var(--muted); }
+  .theme-toggle { position:fixed; top:16px; right:16px; background:var(--surface); border:1px solid var(--border); border-radius:6px; padding:4px 10px; font-size:16px; cursor:pointer; line-height:1; }
+  .summary { display:flex; gap:12px; margin-bottom:24px; flex-wrap:wrap; }
+  .stat { background:var(--surface); border:1px solid var(--border); border-radius:8px; padding:12px 20px; min-width:90px; }
+  .stat-val { font-size:22px; font-weight:700; color:var(--bright); }
+  .stat-lbl { font-size:11px; color:var(--muted); margin-top:2px; }
+  .stat-pass .stat-val { color:var(--green); } .stat-fail .stat-val { color:var(--red); } .stat-err .stat-val { color:var(--amber); }
+  .section-title { font-size:12px; text-transform:uppercase; letter-spacing:.06em; color:var(--muted); font-weight:600; margin:24px 0 8px; }
+  .card { background:var(--surface); border:1px solid var(--border); border-radius:8px; margin-bottom:6px; overflow:hidden; }
+  .card-header { display:flex; align-items:center; gap:10px; padding:10px 14px; cursor:default; }
+  .card-header[onclick] { cursor:pointer; }
+  .chevron { width:10px; color:var(--muted); font-size:9px; transition:transform .15s; }
+  .chevron.open { transform:rotate(90deg); }
+  .at { width:74px; font-size:11px; text-align:right; flex-shrink:0; }
+  .badge { font-size:10px; font-weight:700; text-transform:uppercase; padding:2px 7px; border-radius:4px; letter-spacing:.04em; }
+  .badge-pass { background:var(--pass-bg); color:var(--green); } .badge-fail { background:var(--fail-bg); color:var(--red); }
+  .badge-err { background:var(--err-bg); color:var(--amber); } .badge-done,.badge-skip { background:var(--skip-bg); color:var(--muted); }
+  .type { font-size:11px; color:var(--blue); min-width:64px; }
+  .card-name { font-weight:500; color:var(--bright); }
+  .card-url { font-family:ui-monospace,monospace; font-size:11px; margin-left:auto; max-width:40%; overflow:hidden; text-overflow:ellipsis; white-space:nowrap; }
+  .dur { font-size:11px; }
+  .http-badge { font-family:ui-monospace,monospace; font-size:11px; font-weight:600; padding:1px 6px; border-radius:4px; background:var(--skip-bg); }
+  .http-ok { color:var(--green); } .http-err { color:var(--red); }
+  .card-body { padding:12px 16px 14px 34px; border-top:1px solid var(--border); }
+  .section-label { font-size:10px; text-transform:uppercase; letter-spacing:.05em; color:var(--muted); font-weight:600; margin:10px 0 4px; }
+  .code-block { background:var(--bg); border:1px solid var(--border); border-radius:6px; padding:8px 10px; font-family:ui-monospace,monospace; font-size:11px; white-space:pre-wrap; word-break:break-all; max-height:360px; overflow:auto; }
+  .url { font-size:11px; }
+  .err-row { color:var(--red); font-size:12px; margin:4px 0; }
+  .test-row { font-size:12px; padding:2px 0; } .test-pass .dot { color:var(--green); } .test-fail { color:var(--red); } .test-fail .dot { color:var(--red); }
+  .test-err { color:var(--red); font-family:ui-monospace,monospace; font-size:11px; margin-left:16px; }
+  table.vars { width:100%; border-collapse:collapse; background:var(--surface); border:1px solid var(--border); border-radius:8px; overflow:hidden; }
+  table.vars td { padding:5px 10px; border-bottom:1px solid var(--border); font-size:12px; }
+  .hk { color:var(--bright); } .hv { color:var(--text); word-break:break-all; }
+</style>
+</head>
+<body>
+<button class="theme-toggle" onclick="document.documentElement.classList.toggle('light')" title="Toggle theme">◐</button>
+<div class="wrap">
+  <h1>${esc(flow)}</h1>
+  <div class="meta-line">Flow report · ${esc(env)} · ${esc(ts)}</div>
+  <div class="summary">
+    <div class="stat stat-pass"><div class="stat-val">${summary.passed}</div><div class="stat-lbl">Passed</div></div>
+    <div class="stat stat-fail"><div class="stat-val">${summary.failed}</div><div class="stat-lbl">Failed</div></div>
+    <div class="stat stat-err"><div class="stat-val">${summary.errors}</div><div class="stat-lbl">Errors</div></div>
+    <div class="stat"><div class="stat-val">${summary.total}</div><div class="stat-lbl">Blocks</div></div>
+    <div class="stat"><div class="stat-val">${passRate}%</div><div class="stat-lbl">Pass rate</div></div>
+    <div class="stat"><div class="stat-val">${summary.durationMs}<span style="font-size:13px">ms</span></div><div class="stat-lbl">Duration</div></div>
+  </div>
+  <div class="section-title">Run log</div>
+  ${cards}
+  ${varRows ? `<div class="section-title">Variables</div><table class="vars"><tbody>${varRows}</tbody></table>` : ""}
+</div>
+<script>
+  function toggle(i){ var b=document.getElementById('cb'+i), c=document.getElementById('ch'+i);
+    if(!b)return; var open=b.style.display!=='none'; b.style.display=open?'none':'block'; if(c)c.classList.toggle('open',!open); }
+<\/script>
+</body>
+</html>`;
+}
+function buildJunit(flowName, summary) {
+  const cases = summary.blocks.filter((b) => b.type === "request" || b.type === "validate").map((b) => {
+    const name = `${b.label}${b.resolvedUrl ? ` ${b.resolvedUrl}` : ""}`;
+    const inner = b.status === "failed" || b.status === "error" ? `
+      <failure message="${escapeXml(b.error ?? "assertion failed")}"/>
+    ` : "";
+    return `    <testcase name="${escapeXml(name)}" classname="${escapeXml(flowName)}" time="${((b.durationMs ?? 0) / 1e3).toFixed(3)}">${inner}</testcase>`;
+  }).join("\n");
+  const failures = summary.failed;
+  const errors = summary.errors;
+  const tests = summary.blocks.filter((b) => b.type === "request" || b.type === "validate").length;
+  return `<?xml version="1.0" encoding="UTF-8"?>
+<testsuites>
+  <testsuite name="${escapeXml(flowName)}" tests="${tests}" failures="${failures}" errors="${errors}" time="${(summary.durationMs / 1e3).toFixed(3)}">
+${cases}
+  </testsuite>
+</testsuites>
+`;
+}
+function escapeXml(s) {
+  return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
+}
+async function main() {
+  const argv = process.argv.slice(2);
+  const positionals = [];
+  for (const a of argv) {
+    if (a.startsWith("--")) break;
+    positionals.push(a);
+  }
+  const sub = positionals[0];
+  const name = positionals[1];
+  const args = cliCommon.parseArgs(argv);
+  if (args.help || !sub || sub !== "run" && sub !== "list") {
+    console.log(
+      "\nUsage:\n  api-spector flow list --workspace <path>\n  api-spector flow run <name> --workspace <path> [--environment <name>]\n                               [--output <path>] [--format json|junit] [--verbose]\n"
+    );
+    process.exit(args.help ? 0 : 1);
+  }
+  const wsPath = args.workspace;
+  if (!wsPath) {
+    console.error(cliCommon.color("Error: --workspace is required", cliCommon.C.red));
+    process.exit(1);
+  }
+  let workspace, wsDir;
+  try {
+    ;
+    ({ workspace, dir: wsDir } = await cliCommon.loadWorkspace(wsPath));
+  } catch {
+    console.error(cliCommon.color(`Error: could not read workspace: ${wsPath}`, cliCommon.C.red));
+    process.exit(1);
+  }
+  await requestExec.loadGlobals(wsDir);
+  requestExec.setSecretsConfig(workspace.settings?.secrets);
+  const flows = (await cliCommon.loadFlows(
+    workspace,
+    wsDir,
+    (relPath) => console.error(cliCommon.color(`  [warn] Could not load flow: ${relPath}`, cliCommon.C.yellow))
+  )).map(flowEngine.normalizeFlow);
+  if (sub === "list") {
+    if (flows.length === 0) {
+      console.log(cliCommon.color("  No flows in this workspace.", cliCommon.C.gray));
+      process.exit(0);
+    }
+    console.log("");
+    for (const f of flows) {
+      const steps = f.nodes.filter((n) => n.type !== "start" && n.type !== "end").length;
+      console.log(`  ${cliCommon.color(f.name, cliCommon.C.bold, cliCommon.C.white)}  ${cliCommon.color(`(${steps} blocks)`, cliCommon.C.gray)}`);
+    }
+    console.log("");
+    process.exit(0);
+  }
+  if (!name) {
+    console.error(cliCommon.color("Error: a flow name is required: api-spector flow run <name>", cliCommon.C.red));
+    process.exit(1);
+  }
+  const flow = flows.find((f) => f.name.toLowerCase() === name.toLowerCase());
+  if (!flow) {
+    console.error(cliCommon.color(`Error: flow "${name}" not found. Run \`api-spector flow list\` to see available flows.`, cliCommon.C.red));
+    process.exit(1);
+  }
+  const collections = await cliCommon.loadCollections(workspace, wsDir, {
+    onError: (relPath) => console.error(cliCommon.color(`  [warn] Could not load collection: ${relPath}`, cliCommon.C.yellow))
+  });
+  const environments$1 = await cliCommon.loadEnvironments(workspace, wsDir);
+  const envName = args.environment ?? args.env;
+  const env = environments.selectEnvironment(workspace, environments$1, envName);
+  const verbose = Boolean(args.verbose);
+  const version = `v${"0.7.3"}`;
+  console.log("");
+  console.log(cliCommon.color("  API Flow Runner" + (version ? ` ${version}` : ""), cliCommon.C.bold, cliCommon.C.white));
+  console.log(cliCommon.color(`  Flow:        ${flow.name}`, cliCommon.C.gray));
+  console.log(cliCommon.color(`  Workspace:   ${wsPath}`, cliCommon.C.gray));
+  console.log(cliCommon.color(`  Environment: ${env?.name ?? "(none)"}`, cliCommon.C.gray));
+  console.log("");
+  const envVars = await requestExec.buildEnvVars(env);
+  const globals = requestExec.getGlobals();
+  const dispatcher = await requestExec.buildDispatcher(workspace.settings?.proxy, workspace.settings?.tls);
+  const piiMaskPatterns = workspace.settings?.piiMaskPatterns ?? [];
+  const colById = new Map(collections.map((c) => [c.id, c]));
+  const printEvent = (evt) => {
+    const spec = flowEngine.BLOCK_SPECS[evt.blockType];
+    if (evt.kind === "log") {
+      console.log(cliCommon.color(`  · ${evt.message}`, cliCommon.C.cyan));
+      return;
+    }
+    if (evt.kind === "display") {
+      const v = evt.display?.value;
+      console.log(cliCommon.color(`  ▣ ${evt.display?.label ?? "display"}:`, cliCommon.C.magenta), typeof v === "string" ? v : JSON.stringify(v, null, 2));
+      return;
+    }
+    if (evt.kind !== "block-result") return;
+    const icon = evt.status === "passed" ? cliCommon.color("✓", cliCommon.C.green, cliCommon.C.bold) : evt.status === "failed" ? cliCommon.color("✗", cliCommon.C.red, cliCommon.C.bold) : evt.status === "error" ? cliCommon.color("⚠", cliCommon.C.yellow, cliCommon.C.bold) : cliCommon.color("•", cliCommon.C.gray);
+    const http = evt.httpStatus ? cliCommon.color(` ${evt.httpStatus}`, evt.httpStatus < 400 ? cliCommon.C.green : cliCommon.C.red) : "";
+    const dur = evt.durationMs !== void 0 ? cliCommon.color(` ${evt.durationMs}ms`, cliCommon.C.gray) : "";
+    const iter = evt.iteration !== void 0 ? cliCommon.color(` [#${evt.iteration}]`, cliCommon.C.gray) : "";
+    console.log(`  ${icon}  ${cliCommon.color((spec?.label ?? evt.blockType).padEnd(12), cliCommon.C.cyan)}${iter}${http}${dur}`);
+    if (verbose && evt.testResults?.length) {
+      for (const t of evt.testResults) {
+        console.log(`     ${t.passed ? cliCommon.color("✓", cliCommon.C.green) : cliCommon.color("✗", cliCommon.C.red)} ${t.name}${t.error ? cliCommon.color(` - ${t.error}`, cliCommon.C.red) : ""}`);
+      }
+    }
+    if (evt.error) console.log(cliCommon.color(`     Error: ${evt.error}`, cliCommon.C.red));
+  };
+  const deps = {
+    runRequest: async (ref, input) => {
+      const col = colById.get(ref.collectionId);
+      const original = col?.requests[ref.requestId];
+      if (!col || !original) return null;
+      const req = JSON.parse(JSON.stringify(original));
+      const inherited = requestCollection.resolveInheritedAuthAndHeaders(original.id, col);
+      if (!requestCollection.authIsConfigured(req.auth) && inherited.auth && inherited.auth.type !== "none") req.auth = inherited.auth;
+      const inheritedHeaders = inherited.headers.filter((h) => h.enabled && h.key);
+      if (inheritedHeaders.length) req.headers = [...inheritedHeaders, ...req.headers ?? []];
+      const { result, updatedEnvVars, updatedCollectionVars, updatedGlobals, updatedLocalVars } = await requestExec.executeRunnerRequest({
+        req,
+        collectionVars: { ...col.collectionVariables ?? {}, ...input.collectionVars },
+        envVars: input.envVars,
+        globals: input.globals,
+        localVars: input.localVars,
+        // Flows chain on the real response body (not the PII-masked report copy).
+        dispatcher,
+        piiMaskPatterns: [],
+        proxy: workspace.settings?.proxy,
+        tls: workspace.settings?.tls
+      });
+      const rr = result.receivedResponse;
+      const response = rr ? { status: rr.status, statusText: rr.statusText, headers: rr.headers, body: rr.body, bodySize: rr.body?.length ?? 0, durationMs: result.durationMs ?? 0 } : null;
+      return {
+        envVars: updatedEnvVars,
+        collectionVars: updatedCollectionVars,
+        globals: updatedGlobals,
+        localVars: updatedLocalVars,
+        response,
+        status: result.status,
+        httpStatus: result.httpStatus,
+        durationMs: result.durationMs,
+        error: result.error,
+        testResults: result.testResults,
+        name: result.name,
+        method: result.method,
+        resolvedUrl: result.resolvedUrl
+      };
+    },
+    runScript: async (code, input) => {
+      const out = await requestExec.runScript(code, { envVars: input.envVars, collectionVars: input.collectionVars, globals: input.globals, localVars: input.localVars, response: input.response ?? void 0, piiMaskPatterns, data: input.data });
+      if (verbose && out.consoleOutput?.length) for (const line of out.consoleOutput) console.log(cliCommon.color(`     ${line}`, cliCommon.C.gray));
+      return { envVars: out.updatedEnvVars, collectionVars: out.updatedCollectionVars, globals: out.updatedGlobals, localVars: out.updatedLocalVars, testResults: out.testResults, consoleOutput: out.consoleOutput, error: out.error };
+    },
+    evalExpression: async (code, input) => {
+      const out = await requestExec.evaluateExpression(code, { envVars: input.envVars, collectionVars: input.collectionVars, globals: input.globals, localVars: input.localVars, response: input.response ?? void 0, piiMaskPatterns, data: input.data });
+      return { envVars: out.updatedEnvVars, collectionVars: out.updatedCollectionVars, globals: out.updatedGlobals, localVars: out.updatedLocalVars, value: out.value, consoleOutput: out.consoleOutput, error: out.error };
+    },
+    resolveFlow: (flowId) => flows.find((f) => f.id === flowId) ?? null,
+    sleep: (ms) => new Promise((resolve) => setTimeout(resolve, ms)),
+    interpolate: (str, vars) => requestExec.interpolate(str, vars),
+    onEvent: printEvent
+  };
+  let summary;
+  try {
+    summary = await flowEngine.runFlow(flow, deps, { envVars, globals });
+  } catch (err) {
+    console.error(cliCommon.color(`
+  Flow aborted: ${err instanceof Error ? err.message : String(err)}`, cliCommon.C.red));
+    process.exit(1);
+  }
+  console.log("");
+  console.log(
+    `  ${cliCommon.color(`${summary.passed} passed`, cliCommon.C.green)}` + (summary.failed ? `  ${cliCommon.color(`${summary.failed} failed`, cliCommon.C.red)}` : "") + (summary.errors ? `  ${cliCommon.color(`${summary.errors} errors`, cliCommon.C.yellow)}` : "") + cliCommon.color(`  ${summary.total} blocks · ${summary.durationMs}ms`, cliCommon.C.gray)
+  );
+  console.log("");
+  if (verbose && summary.variables) {
+    const v = summary.variables;
+    const rows = [
+      ...Object.entries(v.localVars).map(([k, val]) => [k, val, "local"]),
+      ...Object.entries(v.collectionVars).map(([k, val]) => [k, val, "collection"]),
+      ...Object.entries(v.globals).map(([k, val]) => [k, val, "global"])
+    ];
+    if (rows.length) {
+      console.log(cliCommon.color("  Variables:", cliCommon.C.bold));
+      for (const [k, val, scope] of rows) {
+        console.log(`    ${cliCommon.color(k, cliCommon.C.cyan)} ${cliCommon.color(`(${scope})`, cliCommon.C.gray)} = ${val.length > 80 ? val.slice(0, 80) + "…" : val}`);
+      }
+      console.log("");
+    }
+  }
+  const outputPath = args.output;
+  if (outputPath) {
+    const explicit = args.format?.toLowerCase();
+    const ext = path.extname(outputPath).toLowerCase();
+    const fmt = explicit ?? (ext === ".xml" ? "junit" : ext === ".html" ? "html" : "json");
+    const content = fmt === "junit" ? buildJunit(flow.name, summary) : fmt === "html" ? buildFlowHtmlReport(summary, { flow: flow.name, environment: env?.name ?? null }) : JSON.stringify(summary, null, 2);
+    await promises.writeFile(outputPath, content, "utf8");
+    console.log(cliCommon.color(`  Report written to ${outputPath} (${fmt})`, cliCommon.C.gray));
+    console.log("");
+  }
+  process.exit(summary.failed + summary.errors > 0 ? 1 : 0);
+}
+main().catch((err) => {
+  console.error(err);
+  process.exit(1);
+});

package/out/main/generate-tests.js

@@ -5,7 +5,7 @@ const jsYaml = require("js-yaml");
 const undici = require("undici");
 const uuid = require("uuid");
 const coverage = require("./chunks/coverage-C0U4QM83.js");
-const cliCommon = require("./chunks/cli-common-Cq_cphpZ.js");
+const cliCommon = require("./chunks/cli-common-GnihVSjU.js");
 require("node:path");
 require("./chunks/data-files-BYqhsoPe.js");
 require("node:crypto");