@yrest/cli 0.11.1 → 0.11.2

package/README.md

@@ -10,7 +10,7 @@
 [![CI](https://github.com/aggiovato/yRest/actions/workflows/ci.yml/badge.svg)](https://github.com/aggiovato/yRest/actions)
 [![Node](https://img.shields.io/node/v/@yrest/cli)](https://www.npmjs.com/package/@yrest/cli)
 [![TypeScript](https://img.shields.io/badge/TypeScript-ready-blue)](https://www.typescriptlang.org/)
-[![Socket](https://badge.socket.dev/npm/package/@yrest/cli/0.11.1)](https://socket.dev/npm/package/@yrest/cli)
+[![Socket](https://badge.socket.dev/npm/package/@yrest/cli/0.11.2)](https://socket.dev/npm/package/@yrest/cli)
 
 YAML-powered json-server alternative. Zero-config REST API mock server with full CRUD, relations, filters and snapshots from a `db.yml` file.
 
@@ -241,26 +241,59 @@ posts:
 
 Each top-level key becomes a resource with full CRUD endpoints.
 
+Alternatively, collections can be grouped under a `_data` block:
+
+```yaml
+_data:
+  users:
+    - id: 1
+      name: Ana
+  posts:
+    - id: 1
+      title: First post
+      userId: 1
+```
+
+Both formats are equivalent. You can also mix them — if the same collection name appears both inside `_data` and at the root level, the root-level entry wins. The file is persisted in whichever format it was originally written.
+
 ---
 
 ## Field annotations (`_schema`)
 
 Add a `_schema` block to `db.yml` to declare field-level metadata per collection. Used by the OpenAPI generator to produce accurate schemas — has no effect on runtime CRUD behavior.
 
+All keys inside `_schema` field objects use the `_` prefix convention. Two shorthand strings are also accepted at the field level:
+
 ```yaml
 _schema:
   users:
-    name: required # shorthand: marks field as required
+    name: required # shorthand → { _required: true }
     email:
-      required: true
-      format: email
+      _required: true
+      _type: string
+      _format: email
+      _minLength: 5
+      _maxLength: 100
     age:
-      type: integer
+      _type: integer
+      _minimum: 0
+      _maximum: 150
+      _nullable: true
     role:
-      type: string
-      enum: [admin, editor, viewer]
-      default: viewer
-      description: User role
+      _type: string
+      _enum: [admin, editor, viewer]
+      _default: viewer
+      _description: User role
+    tags:
+      _type: array
+      _items:
+        _type: string
+      _minItems: 1
+      _uniqueItems: true
+    createdAt:
+      _type: string
+      _format: date-time
+      _readOnly: true
 
 users:
   - id: 1
@@ -270,14 +303,53 @@ users:
     role: admin
 ```
 
-| Key           | Type      | Description                                                                               |
-| ------------- | --------- | ----------------------------------------------------------------------------------------- |
-| `required`    | `boolean` | Marks the field as required in the OpenAPI schema                                         |
-| `type`        | `string`  | Overrides the inferred type (`string`, `integer`, `number`, `boolean`, `array`, `object`) |
-| `format`      | `string`  | OpenAPI format hint (`email`, `date`, `date-time`, `uuid`, `uri`, …)                      |
-| `enum`        | `array`   | Restricts the field to a fixed set of values                                              |
-| `description` | `string`  | Field description included in the OpenAPI schema                                          |
-| `default`     | `any`     | Default value shown in the OpenAPI schema                                                 |
+**Core**
+
+| Key            | Type      | Description                                                                               |
+| -------------- | --------- | ----------------------------------------------------------------------------------------- |
+| `_required`    | `boolean` | Marks the field as required in the OpenAPI schema                                         |
+| `_type`        | `string`  | Overrides the inferred type (`string`, `integer`, `number`, `boolean`, `array`, `object`) |
+| `_format`      | `string`  | OpenAPI format hint (`email`, `date`, `date-time`, `uuid`, `uri`, …)                      |
+| `_enum`        | `array`   | Restricts the field to a fixed set of values                                              |
+| `_description` | `string`  | Field description included in the OpenAPI schema                                          |
+| `_default`     | `any`     | Default value shown in the OpenAPI schema                                                 |
+| `_example`     | `any`     | Example value shown in the OpenAPI schema                                                 |
+| `_nullable`    | `boolean` | Allows the field to be `null`                                                             |
+
+**String constraints**
+
+| Key          | Type     | Description                          |
+| ------------ | -------- | ------------------------------------ |
+| `_minLength` | `number` | Minimum string length                |
+| `_maxLength` | `number` | Maximum string length                |
+| `_pattern`   | `string` | Regex pattern the value must satisfy |
+
+**Number / integer constraints**
+
+| Key                 | Type     | Description                   |
+| ------------------- | -------- | ----------------------------- |
+| `_minimum`          | `number` | Inclusive lower bound         |
+| `_maximum`          | `number` | Inclusive upper bound         |
+| `_exclusiveMinimum` | `number` | Exclusive lower bound         |
+| `_exclusiveMaximum` | `number` | Exclusive upper bound         |
+| `_multipleOf`       | `number` | Value must be a multiple of N |
+
+**Array constraints**
+
+| Key            | Type      | Description                                                  |
+| -------------- | --------- | ------------------------------------------------------------ |
+| `_minItems`    | `number`  | Minimum number of array items                                |
+| `_maxItems`    | `number`  | Maximum number of array items                                |
+| `_uniqueItems` | `boolean` | All items must be unique                                     |
+| `_items`       | `object`  | Schema for array items — accepts `_type`, `_format`, `_enum` |
+
+**OpenAPI meta**
+
+| Key           | Type      | Description                             |
+| ------------- | --------- | --------------------------------------- |
+| `_deprecated` | `boolean` | Marks the field as deprecated           |
+| `_readOnly`   | `boolean` | Field is read-only (excluded from POST) |
+| `_writeOnly`  | `boolean` | Field is write-only (excluded from GET) |
 
 Fields not listed in `_schema` are inferred from the first items in the collection and treated as optional. `_schema` itself is excluded from the generated REST resources.
 
@@ -722,14 +794,14 @@ when:
   - body.role: superadmin
 ```
 
-Condition keys use dot-notation to address request data:
+Condition keys use dot-notation to address request data. Both bare and `_`-prefixed forms are accepted:
 
-| Prefix      | Example             | Resolves to                |
-| ----------- | ------------------- | -------------------------- |
-| `body.X`    | `body.email`        | `req.body.email`           |
-| `params.X`  | `params.id`         | `req.params.id`            |
-| `query.X`   | `query.page`        | `req.query.page`           |
-| `headers.X` | `headers.x-api-key` | `req.headers["x-api-key"]` |
+| Prefix                     | Example             | Resolves to                |
+| -------------------------- | ------------------- | -------------------------- |
+| `body.X` / `_body.X`       | `body.email`        | `req.body.email`           |
+| `params.X` / `_params.X`   | `params.id`         | `req.params.id`            |
+| `query.X` / `_query.X`     | `query.page`        | `req.query.page`           |
+| `headers.X` / `_headers.X` | `headers.x-api-key` | `req.headers["x-api-key"]` |
 
 Field operator suffixes (`_ne`, `_like`, `_start`, `_regex`, `_gte`, `_lte`) work on condition keys exactly as they do on query params:
 

package/dist/cli/index.js

@@ -717,6 +717,7 @@ function parseSchema(raw) {
   }
   return result;
 }
+var VALID_TYPES = /* @__PURE__ */ new Set(["string", "integer", "number", "boolean", "object", "array"]);
 function normaliseFieldDef(value) {
   if (value === "required") return { required: true };
   if (value === "optional") return { required: false };
@@ -724,15 +725,60 @@ function normaliseFieldDef(value) {
   const v = value;
   const def = {};
   if (v["_required"] === true || v["_required"] === false) def.required = v["_required"];
-  if (typeof v["_type"] === "string" && ["string", "integer", "number", "boolean", "object", "array"].includes(v["_type"]))
+  if (typeof v["_type"] === "string" && VALID_TYPES.has(v["_type"]))
     def.type = v["_type"];
   if (typeof v["_format"] === "string") def.format = v["_format"];
   if (Array.isArray(v["_enum"])) def.enum = v["_enum"];
   if (typeof v["_description"] === "string") def.description = v["_description"];
   if (v["_default"] !== void 0) def.default = v["_default"];
+  if (v["_example"] !== void 0) def.example = v["_example"];
+  if (v["_nullable"] === true || v["_nullable"] === false) def.nullable = v["_nullable"];
+  if (typeof v["_minLength"] === "number") def.minLength = v["_minLength"];
+  if (typeof v["_maxLength"] === "number") def.maxLength = v["_maxLength"];
+  if (typeof v["_pattern"] === "string") def.pattern = v["_pattern"];
+  if (typeof v["_minimum"] === "number") def.minimum = v["_minimum"];
+  if (typeof v["_maximum"] === "number") def.maximum = v["_maximum"];
+  if (typeof v["_exclusiveMinimum"] === "number") def.exclusiveMinimum = v["_exclusiveMinimum"];
+  if (typeof v["_exclusiveMaximum"] === "number") def.exclusiveMaximum = v["_exclusiveMaximum"];
+  if (typeof v["_multipleOf"] === "number") def.multipleOf = v["_multipleOf"];
+  if (typeof v["_minItems"] === "number") def.minItems = v["_minItems"];
+  if (typeof v["_maxItems"] === "number") def.maxItems = v["_maxItems"];
+  if (v["_uniqueItems"] === true || v["_uniqueItems"] === false)
+    def.uniqueItems = v["_uniqueItems"];
+  if (v["_items"] && typeof v["_items"] === "object" && !Array.isArray(v["_items"])) {
+    const items = v["_items"];
+    const itemsDef = {};
+    if (typeof items["_type"] === "string" && VALID_TYPES.has(items["_type"]))
+      itemsDef.type = items["_type"];
+    if (typeof items["_format"] === "string") itemsDef.format = items["_format"];
+    if (Array.isArray(items["_enum"])) itemsDef.enum = items["_enum"];
+    def.items = itemsDef;
+  }
+  if (v["_deprecated"] === true || v["_deprecated"] === false)
+    def.deprecated = v["_deprecated"];
+  if (v["_readOnly"] === true || v["_readOnly"] === false) def.readOnly = v["_readOnly"];
+  if (v["_writeOnly"] === true || v["_writeOnly"] === false)
+    def.writeOnly = v["_writeOnly"];
   return def;
 }
 
+// src/storage/parseData.ts
+var RESERVED = /* @__PURE__ */ new Set(["_rel", "_routes", "_schema", "_data"]);
+function parseData(raw) {
+  const block = raw["_data"];
+  const fromBlock = block && typeof block === "object" && !Array.isArray(block) ? Object.fromEntries(
+    Object.entries(block).filter(([, v]) => Array.isArray(v))
+  ) : {};
+  const fromRoot = Object.fromEntries(
+    Object.entries(raw).filter(([key, val]) => !RESERVED.has(key) && Array.isArray(val))
+  );
+  return { ...fromBlock, ...fromRoot };
+}
+function hasDataBlock(raw) {
+  const d = raw["_data"];
+  return d !== null && d !== void 0 && typeof d === "object" && !Array.isArray(d);
+}
+
 // src/utils/deepCopy.ts
 function deepCopyData(source) {
   return Object.fromEntries(
@@ -798,13 +844,11 @@ function serializeScenario(s) {
 function createYrestStorage(filePath) {
   const absPath = (0, import_node_path2.resolve)(filePath);
   const raw = (0, import_yaml.parse)((0, import_node_fs2.readFileSync)(absPath, "utf8")) ?? {};
-  const RESERVED = /* @__PURE__ */ new Set(["_rel", "_routes", "_schema"]);
   const relations = parseRelations(raw["_rel"]);
   const routes = parseRoutes(raw["_routes"]);
   const schema = parseSchema(raw["_schema"]);
-  const data = Object.fromEntries(
-    Object.entries(raw).filter(([key]) => !RESERVED.has(key))
-  );
+  const dataBlock = hasDataBlock(raw);
+  const data = parseData(raw);
   let snapshot = {
     data: deepCopyData(data),
     relations: { ...relations },
@@ -833,7 +877,11 @@ function createYrestStorage(filePath) {
       const payload = {};
       if (Object.keys(relations).length > 0) payload._rel = serializeRelations(relations);
       if (routes.length > 0) payload._routes = serializeRoutes(routes);
-      Object.assign(payload, data);
+      if (dataBlock) {
+        payload._data = data;
+      } else {
+        Object.assign(payload, data);
+      }
       const tmp = (0, import_node_path2.resolve)((0, import_node_path2.dirname)(absPath), `.yrest-${(0, import_node_crypto.randomUUID)()}.tmp`);
       (0, import_node_fs2.writeFileSync)(tmp, (0, import_yaml.stringify)(payload), "utf8");
       (0, import_node_fs2.renameSync)(tmp, absPath);
@@ -841,9 +889,7 @@ function createYrestStorage(filePath) {
     reload() {
       const fresh = (0, import_yaml.parse)((0, import_node_fs2.readFileSync)(absPath, "utf8")) ?? {};
       const freshRelations = parseRelations(fresh["_rel"]);
-      const freshData = Object.fromEntries(
-        Object.entries(fresh).filter(([key]) => !RESERVED.has(key))
-      );
+      const freshData = parseData(fresh);
       for (const key of Object.keys(data)) delete data[key];
       Object.assign(data, freshData);
       for (const key of Object.keys(relations)) delete relations[key];
@@ -2403,15 +2449,19 @@ function resolveRequestPath(dotPath, req) {
   const [root, ...rest] = dotPath.split(".");
   let value;
   switch (root) {
+    case "_body":
     case "body":
       value = req.body;
       break;
+    case "_params":
     case "params":
       value = req.params;
       break;
+    case "_query":
     case "query":
       value = req.query;
       break;
+    case "_headers":
     case "headers":
       value = req.headers;
       break;
@@ -2703,6 +2753,23 @@ function buildCollectionSchema(items, fieldDefs = {}) {
     if (def?.description) prop.description = def.description;
     if (def?.enum) prop.enum = def.enum;
     if (def?.default !== void 0) prop.default = def.default;
+    if (def?.example !== void 0) prop.example = def.example;
+    if (def?.nullable) prop.nullable = def.nullable;
+    if (def?.minLength !== void 0) prop.minLength = def.minLength;
+    if (def?.maxLength !== void 0) prop.maxLength = def.maxLength;
+    if (def?.pattern) prop.pattern = def.pattern;
+    if (def?.minimum !== void 0) prop.minimum = def.minimum;
+    if (def?.maximum !== void 0) prop.maximum = def.maximum;
+    if (def?.exclusiveMinimum !== void 0) prop.exclusiveMinimum = def.exclusiveMinimum;
+    if (def?.exclusiveMaximum !== void 0) prop.exclusiveMaximum = def.exclusiveMaximum;
+    if (def?.multipleOf !== void 0) prop.multipleOf = def.multipleOf;
+    if (def?.items) prop.items = def.items;
+    if (def?.minItems !== void 0) prop.minItems = def.minItems;
+    if (def?.maxItems !== void 0) prop.maxItems = def.maxItems;
+    if (def?.uniqueItems !== void 0) prop.uniqueItems = def.uniqueItems;
+    if (def?.deprecated) prop.deprecated = def.deprecated;
+    if (def?.readOnly) prop.readOnly = def.readOnly;
+    if (def?.writeOnly) prop.writeOnly = def.writeOnly;
     properties[field] = prop;
     if (def?.required === true) required.push(field);
   }
@@ -3245,6 +3312,14 @@ async function loadHandlers(filePath) {
 }
 
 // src/cli/commands/serve.ts
+function buildServeOptions(file, fileConfig, cliOverrides, fileArgIsExplicit = false) {
+  return yrestOptionsSchema.parse({
+    file,
+    ...fileConfig,
+    ...fileArgIsExplicit ? { file } : {},
+    ...cliOverrides
+  });
+}
 function registerServe(program2) {
   program2.command("serve").description("Start the mock server using a YAML file as database").argument("[file]", "Path to the YAML database file", "db.yml").option("-p, --port <number>", "Port to listen on", "3070").option("-H, --host <host>", "Host to bind", "localhost").option("-b, --base <path>", "Base path prefix for all routes", "").option("-w, --watch", "Reload db.yml automatically when it changes on disk").option("-r, --readonly", "Reject all write operations (POST, PUT, PATCH, DELETE) with 405").option(
     "-d, --delay <ms>",
@@ -3268,13 +3343,7 @@ function registerServe(program2) {
     const cliOverrides = Object.fromEntries(
       Object.entries(flags).filter(([key]) => cmd.getOptionValueSource(key) === "cli")
     );
-    const merged = {
-      file,
-      ...fileConfig,
-      ...cmd.args.length > 0 ? { file } : {},
-      ...cliOverrides
-    };
-    const options = yrestOptionsSchema.parse(merged);
+    const options = buildServeOptions(file, fileConfig, cliOverrides, cmd.args.length > 0);
     let storage;
     try {
       storage = createYrestStorage(options.file);

package/dist/cli/index.mjs

@@ -690,6 +690,7 @@ function parseSchema(raw) {
   }
   return result;
 }
+var VALID_TYPES = /* @__PURE__ */ new Set(["string", "integer", "number", "boolean", "object", "array"]);
 function normaliseFieldDef(value) {
   if (value === "required") return { required: true };
   if (value === "optional") return { required: false };
@@ -697,15 +698,60 @@ function normaliseFieldDef(value) {
   const v = value;
   const def = {};
   if (v["_required"] === true || v["_required"] === false) def.required = v["_required"];
-  if (typeof v["_type"] === "string" && ["string", "integer", "number", "boolean", "object", "array"].includes(v["_type"]))
+  if (typeof v["_type"] === "string" && VALID_TYPES.has(v["_type"]))
     def.type = v["_type"];
   if (typeof v["_format"] === "string") def.format = v["_format"];
   if (Array.isArray(v["_enum"])) def.enum = v["_enum"];
   if (typeof v["_description"] === "string") def.description = v["_description"];
   if (v["_default"] !== void 0) def.default = v["_default"];
+  if (v["_example"] !== void 0) def.example = v["_example"];
+  if (v["_nullable"] === true || v["_nullable"] === false) def.nullable = v["_nullable"];
+  if (typeof v["_minLength"] === "number") def.minLength = v["_minLength"];
+  if (typeof v["_maxLength"] === "number") def.maxLength = v["_maxLength"];
+  if (typeof v["_pattern"] === "string") def.pattern = v["_pattern"];
+  if (typeof v["_minimum"] === "number") def.minimum = v["_minimum"];
+  if (typeof v["_maximum"] === "number") def.maximum = v["_maximum"];
+  if (typeof v["_exclusiveMinimum"] === "number") def.exclusiveMinimum = v["_exclusiveMinimum"];
+  if (typeof v["_exclusiveMaximum"] === "number") def.exclusiveMaximum = v["_exclusiveMaximum"];
+  if (typeof v["_multipleOf"] === "number") def.multipleOf = v["_multipleOf"];
+  if (typeof v["_minItems"] === "number") def.minItems = v["_minItems"];
+  if (typeof v["_maxItems"] === "number") def.maxItems = v["_maxItems"];
+  if (v["_uniqueItems"] === true || v["_uniqueItems"] === false)
+    def.uniqueItems = v["_uniqueItems"];
+  if (v["_items"] && typeof v["_items"] === "object" && !Array.isArray(v["_items"])) {
+    const items = v["_items"];
+    const itemsDef = {};
+    if (typeof items["_type"] === "string" && VALID_TYPES.has(items["_type"]))
+      itemsDef.type = items["_type"];
+    if (typeof items["_format"] === "string") itemsDef.format = items["_format"];
+    if (Array.isArray(items["_enum"])) itemsDef.enum = items["_enum"];
+    def.items = itemsDef;
+  }
+  if (v["_deprecated"] === true || v["_deprecated"] === false)
+    def.deprecated = v["_deprecated"];
+  if (v["_readOnly"] === true || v["_readOnly"] === false) def.readOnly = v["_readOnly"];
+  if (v["_writeOnly"] === true || v["_writeOnly"] === false)
+    def.writeOnly = v["_writeOnly"];
   return def;
 }
 
+// src/storage/parseData.ts
+var RESERVED = /* @__PURE__ */ new Set(["_rel", "_routes", "_schema", "_data"]);
+function parseData(raw) {
+  const block = raw["_data"];
+  const fromBlock = block && typeof block === "object" && !Array.isArray(block) ? Object.fromEntries(
+    Object.entries(block).filter(([, v]) => Array.isArray(v))
+  ) : {};
+  const fromRoot = Object.fromEntries(
+    Object.entries(raw).filter(([key, val]) => !RESERVED.has(key) && Array.isArray(val))
+  );
+  return { ...fromBlock, ...fromRoot };
+}
+function hasDataBlock(raw) {
+  const d = raw["_data"];
+  return d !== null && d !== void 0 && typeof d === "object" && !Array.isArray(d);
+}
+
 // src/utils/deepCopy.ts
 function deepCopyData(source) {
   return Object.fromEntries(
@@ -771,13 +817,11 @@ function serializeScenario(s) {
 function createYrestStorage(filePath) {
   const absPath = resolve2(filePath);
   const raw = parse(readFileSync(absPath, "utf8")) ?? {};
-  const RESERVED = /* @__PURE__ */ new Set(["_rel", "_routes", "_schema"]);
   const relations = parseRelations(raw["_rel"]);
   const routes = parseRoutes(raw["_routes"]);
   const schema = parseSchema(raw["_schema"]);
-  const data = Object.fromEntries(
-    Object.entries(raw).filter(([key]) => !RESERVED.has(key))
-  );
+  const dataBlock = hasDataBlock(raw);
+  const data = parseData(raw);
   let snapshot = {
     data: deepCopyData(data),
     relations: { ...relations },
@@ -806,7 +850,11 @@ function createYrestStorage(filePath) {
       const payload = {};
       if (Object.keys(relations).length > 0) payload._rel = serializeRelations(relations);
       if (routes.length > 0) payload._routes = serializeRoutes(routes);
-      Object.assign(payload, data);
+      if (dataBlock) {
+        payload._data = data;
+      } else {
+        Object.assign(payload, data);
+      }
       const tmp = resolve2(dirname(absPath), `.yrest-${randomUUID()}.tmp`);
       writeFileSync2(tmp, stringify(payload), "utf8");
       renameSync(tmp, absPath);
@@ -814,9 +862,7 @@ function createYrestStorage(filePath) {
     reload() {
       const fresh = parse(readFileSync(absPath, "utf8")) ?? {};
       const freshRelations = parseRelations(fresh["_rel"]);
-      const freshData = Object.fromEntries(
-        Object.entries(fresh).filter(([key]) => !RESERVED.has(key))
-      );
+      const freshData = parseData(fresh);
       for (const key of Object.keys(data)) delete data[key];
       Object.assign(data, freshData);
       for (const key of Object.keys(relations)) delete relations[key];
@@ -2376,15 +2422,19 @@ function resolveRequestPath(dotPath, req) {
   const [root, ...rest] = dotPath.split(".");
   let value;
   switch (root) {
+    case "_body":
     case "body":
       value = req.body;
       break;
+    case "_params":
     case "params":
       value = req.params;
       break;
+    case "_query":
     case "query":
       value = req.query;
       break;
+    case "_headers":
     case "headers":
       value = req.headers;
       break;
@@ -2676,6 +2726,23 @@ function buildCollectionSchema(items, fieldDefs = {}) {
     if (def?.description) prop.description = def.description;
     if (def?.enum) prop.enum = def.enum;
     if (def?.default !== void 0) prop.default = def.default;
+    if (def?.example !== void 0) prop.example = def.example;
+    if (def?.nullable) prop.nullable = def.nullable;
+    if (def?.minLength !== void 0) prop.minLength = def.minLength;
+    if (def?.maxLength !== void 0) prop.maxLength = def.maxLength;
+    if (def?.pattern) prop.pattern = def.pattern;
+    if (def?.minimum !== void 0) prop.minimum = def.minimum;
+    if (def?.maximum !== void 0) prop.maximum = def.maximum;
+    if (def?.exclusiveMinimum !== void 0) prop.exclusiveMinimum = def.exclusiveMinimum;
+    if (def?.exclusiveMaximum !== void 0) prop.exclusiveMaximum = def.exclusiveMaximum;
+    if (def?.multipleOf !== void 0) prop.multipleOf = def.multipleOf;
+    if (def?.items) prop.items = def.items;
+    if (def?.minItems !== void 0) prop.minItems = def.minItems;
+    if (def?.maxItems !== void 0) prop.maxItems = def.maxItems;
+    if (def?.uniqueItems !== void 0) prop.uniqueItems = def.uniqueItems;
+    if (def?.deprecated) prop.deprecated = def.deprecated;
+    if (def?.readOnly) prop.readOnly = def.readOnly;
+    if (def?.writeOnly) prop.writeOnly = def.writeOnly;
     properties[field] = prop;
     if (def?.required === true) required.push(field);
   }
@@ -3218,6 +3285,14 @@ async function loadHandlers(filePath) {
 }
 
 // src/cli/commands/serve.ts
+function buildServeOptions(file, fileConfig, cliOverrides, fileArgIsExplicit = false) {
+  return yrestOptionsSchema.parse({
+    file,
+    ...fileConfig,
+    ...fileArgIsExplicit ? { file } : {},
+    ...cliOverrides
+  });
+}
 function registerServe(program2) {
   program2.command("serve").description("Start the mock server using a YAML file as database").argument("[file]", "Path to the YAML database file", "db.yml").option("-p, --port <number>", "Port to listen on", "3070").option("-H, --host <host>", "Host to bind", "localhost").option("-b, --base <path>", "Base path prefix for all routes", "").option("-w, --watch", "Reload db.yml automatically when it changes on disk").option("-r, --readonly", "Reject all write operations (POST, PUT, PATCH, DELETE) with 405").option(
     "-d, --delay <ms>",
@@ -3241,13 +3316,7 @@ function registerServe(program2) {
     const cliOverrides = Object.fromEntries(
       Object.entries(flags).filter(([key]) => cmd.getOptionValueSource(key) === "cli")
     );
-    const merged = {
-      file,
-      ...fileConfig,
-      ...cmd.args.length > 0 ? { file } : {},
-      ...cliOverrides
-    };
-    const options = yrestOptionsSchema.parse(merged);
+    const options = buildServeOptions(file, fileConfig, cliOverrides, cmd.args.length > 0);
     let storage;
     try {
       storage = createYrestStorage(options.file);

package/dist/index.d.mts

@@ -10,21 +10,87 @@ type Resource = Record<string, unknown>;
  * All properties are optional — omit what you don't need. Fields not mentioned
  * in `_schema` are inferred from the collection data and treated as optional.
  *
+ * In the YAML file every property uses the `_` prefix convention:
+ * `_type`, `_required`, `_format`, `_enum`, `_description`, `_default`, etc.
+ *
  * Shorthand: `fieldName: required` normalises to `{ required: true }`.
+ *
+ * @example
+ * ```yaml
+ * _schema:
+ *   users:
+ *     name:
+ *       _type: string
+ *       _required: true
+ *       _minLength: 2
+ *       _maxLength: 100
+ *     email:
+ *       _type: string
+ *       _required: true
+ *       _format: email
+ *     age:
+ *       _type: integer
+ *       _minimum: 0
+ *       _maximum: 120
+ *       _nullable: true
+ *     role:
+ *       _type: string
+ *       _enum: [admin, editor, viewer]
+ *       _default: viewer
+ *     tags:
+ *       _type: array
+ *       _items:
+ *         _type: string
+ *       _uniqueItems: true
+ * ```
  */
 type FieldDef = {
-    /** If `true`, the field is listed in the OpenAPI `required` array and (Phase B) validated on POST/PUT. */
+    /** If `true`, the field is listed in the OpenAPI `required` array. */
     required?: boolean;
     /** Explicit type override. If absent, inferred from the data. */
     type?: "string" | "integer" | "number" | "boolean" | "object" | "array";
-    /** OpenAPI `format` hint (e.g. `email`, `date`, `uuid`, `uri`, `date-time`). */
+    /** OpenAPI `format` hint (e.g. `email`, `date`, `uuid`, `uri`, `date-time`, `binary`). */
     format?: string;
-    /** Restricts the field to a fixed set of values. */
+    /** Restricts the field to a fixed set of allowed values. */
     enum?: unknown[];
     /** Human-readable description included in the OpenAPI spec. */
     description?: string;
     /** Default value included in the OpenAPI spec. */
     default?: unknown;
+    /** Example value included in the OpenAPI spec. */
+    example?: unknown;
+    /** If `true`, the field may be `null` in addition to its declared type. */
+    nullable?: boolean;
+    /** Minimum string length (inclusive). Applies when `type` is `string`. */
+    minLength?: number;
+    /** Maximum string length (inclusive). Applies when `type` is `string`. */
+    maxLength?: number;
+    /** Regex pattern the string value must match. Applies when `type` is `string`. */
+    pattern?: string;
+    /** Minimum numeric value (inclusive). Applies when `type` is `number` or `integer`. */
+    minimum?: number;
+    /** Maximum numeric value (inclusive). Applies when `type` is `number` or `integer`. */
+    maximum?: number;
+    /** Exclusive lower bound. Applies when `type` is `number` or `integer`. */
+    exclusiveMinimum?: number;
+    /** Exclusive upper bound. Applies when `type` is `number` or `integer`. */
+    exclusiveMaximum?: number;
+    /** Value must be a multiple of this number. */
+    multipleOf?: number;
+    /** Schema descriptor for the items of an array field. */
+    items?: Pick<FieldDef, "type" | "format" | "enum">;
+    /** Minimum number of items in the array. */
+    minItems?: number;
+    /** Maximum number of items in the array. */
+    maxItems?: number;
+    /** If `true`, all array items must be unique. */
+    uniqueItems?: boolean;
+    /** If `true`, marks the field as deprecated in the OpenAPI spec. */
+    deprecated?: boolean;
+    /** If `true`, the field is only returned in responses (excluded from request bodies). */
+    readOnly?: boolean;
+    /** If `true`, the field is only accepted in request bodies (excluded from responses). */
+    writeOnly?: boolean;
 };
 /**
  * Field-level schema declarations for one or more collections, parsed from `_schema` in the YAML.

package/dist/index.d.ts

@@ -10,21 +10,87 @@ type Resource = Record<string, unknown>;
  * All properties are optional — omit what you don't need. Fields not mentioned
  * in `_schema` are inferred from the collection data and treated as optional.
  *
+ * In the YAML file every property uses the `_` prefix convention:
+ * `_type`, `_required`, `_format`, `_enum`, `_description`, `_default`, etc.
+ *
  * Shorthand: `fieldName: required` normalises to `{ required: true }`.
+ *
+ * @example
+ * ```yaml
+ * _schema:
+ *   users:
+ *     name:
+ *       _type: string
+ *       _required: true
+ *       _minLength: 2
+ *       _maxLength: 100
+ *     email:
+ *       _type: string
+ *       _required: true
+ *       _format: email
+ *     age:
+ *       _type: integer
+ *       _minimum: 0
+ *       _maximum: 120
+ *       _nullable: true
+ *     role:
+ *       _type: string
+ *       _enum: [admin, editor, viewer]
+ *       _default: viewer
+ *     tags:
+ *       _type: array
+ *       _items:
+ *         _type: string
+ *       _uniqueItems: true
+ * ```
  */
 type FieldDef = {
-    /** If `true`, the field is listed in the OpenAPI `required` array and (Phase B) validated on POST/PUT. */
+    /** If `true`, the field is listed in the OpenAPI `required` array. */
     required?: boolean;
     /** Explicit type override. If absent, inferred from the data. */
     type?: "string" | "integer" | "number" | "boolean" | "object" | "array";
-    /** OpenAPI `format` hint (e.g. `email`, `date`, `uuid`, `uri`, `date-time`). */
+    /** OpenAPI `format` hint (e.g. `email`, `date`, `uuid`, `uri`, `date-time`, `binary`). */
     format?: string;
-    /** Restricts the field to a fixed set of values. */
+    /** Restricts the field to a fixed set of allowed values. */
     enum?: unknown[];
     /** Human-readable description included in the OpenAPI spec. */
     description?: string;
     /** Default value included in the OpenAPI spec. */
     default?: unknown;
+    /** Example value included in the OpenAPI spec. */
+    example?: unknown;
+    /** If `true`, the field may be `null` in addition to its declared type. */
+    nullable?: boolean;
+    /** Minimum string length (inclusive). Applies when `type` is `string`. */
+    minLength?: number;
+    /** Maximum string length (inclusive). Applies when `type` is `string`. */
+    maxLength?: number;
+    /** Regex pattern the string value must match. Applies when `type` is `string`. */
+    pattern?: string;
+    /** Minimum numeric value (inclusive). Applies when `type` is `number` or `integer`. */
+    minimum?: number;
+    /** Maximum numeric value (inclusive). Applies when `type` is `number` or `integer`. */
+    maximum?: number;
+    /** Exclusive lower bound. Applies when `type` is `number` or `integer`. */
+    exclusiveMinimum?: number;
+    /** Exclusive upper bound. Applies when `type` is `number` or `integer`. */
+    exclusiveMaximum?: number;
+    /** Value must be a multiple of this number. */
+    multipleOf?: number;
+    /** Schema descriptor for the items of an array field. */
+    items?: Pick<FieldDef, "type" | "format" | "enum">;
+    /** Minimum number of items in the array. */
+    minItems?: number;
+    /** Maximum number of items in the array. */
+    maxItems?: number;
+    /** If `true`, all array items must be unique. */
+    uniqueItems?: boolean;
+    /** If `true`, marks the field as deprecated in the OpenAPI spec. */
+    deprecated?: boolean;
+    /** If `true`, the field is only returned in responses (excluded from request bodies). */
+    readOnly?: boolean;
+    /** If `true`, the field is only accepted in request bodies (excluded from responses). */
+    writeOnly?: boolean;
 };
 /**
  * Field-level schema declarations for one or more collections, parsed from `_schema` in the YAML.

package/dist/index.js

@@ -174,18 +174,48 @@ function normaliseFieldDef(value) {
   const v = value;
   const def = {};
   if (v["_required"] === true || v["_required"] === false) def.required = v["_required"];
-  if (typeof v["_type"] === "string" && ["string", "integer", "number", "boolean", "object", "array"].includes(v["_type"]))
+  if (typeof v["_type"] === "string" && VALID_TYPES.has(v["_type"]))
     def.type = v["_type"];
   if (typeof v["_format"] === "string") def.format = v["_format"];
   if (Array.isArray(v["_enum"])) def.enum = v["_enum"];
   if (typeof v["_description"] === "string") def.description = v["_description"];
   if (v["_default"] !== void 0) def.default = v["_default"];
+  if (v["_example"] !== void 0) def.example = v["_example"];
+  if (v["_nullable"] === true || v["_nullable"] === false) def.nullable = v["_nullable"];
+  if (typeof v["_minLength"] === "number") def.minLength = v["_minLength"];
+  if (typeof v["_maxLength"] === "number") def.maxLength = v["_maxLength"];
+  if (typeof v["_pattern"] === "string") def.pattern = v["_pattern"];
+  if (typeof v["_minimum"] === "number") def.minimum = v["_minimum"];
+  if (typeof v["_maximum"] === "number") def.maximum = v["_maximum"];
+  if (typeof v["_exclusiveMinimum"] === "number") def.exclusiveMinimum = v["_exclusiveMinimum"];
+  if (typeof v["_exclusiveMaximum"] === "number") def.exclusiveMaximum = v["_exclusiveMaximum"];
+  if (typeof v["_multipleOf"] === "number") def.multipleOf = v["_multipleOf"];
+  if (typeof v["_minItems"] === "number") def.minItems = v["_minItems"];
+  if (typeof v["_maxItems"] === "number") def.maxItems = v["_maxItems"];
+  if (v["_uniqueItems"] === true || v["_uniqueItems"] === false)
+    def.uniqueItems = v["_uniqueItems"];
+  if (v["_items"] && typeof v["_items"] === "object" && !Array.isArray(v["_items"])) {
+    const items = v["_items"];
+    const itemsDef = {};
+    if (typeof items["_type"] === "string" && VALID_TYPES.has(items["_type"]))
+      itemsDef.type = items["_type"];
+    if (typeof items["_format"] === "string") itemsDef.format = items["_format"];
+    if (Array.isArray(items["_enum"])) itemsDef.enum = items["_enum"];
+    def.items = itemsDef;
+  }
+  if (v["_deprecated"] === true || v["_deprecated"] === false)
+    def.deprecated = v["_deprecated"];
+  if (v["_readOnly"] === true || v["_readOnly"] === false) def.readOnly = v["_readOnly"];
+  if (v["_writeOnly"] === true || v["_writeOnly"] === false)
+    def.writeOnly = v["_writeOnly"];
   return def;
 }
+var VALID_TYPES;
 var init_parseSchema = __esm({
   "src/storage/parseSchema.ts"() {
     "use strict";
     init_cjs_shims();
+    VALID_TYPES = /* @__PURE__ */ new Set(["string", "integer", "number", "boolean", "object", "array"]);
   }
 });
 
@@ -256,6 +286,30 @@ var init_parseRoutes = __esm({
   }
 });
 
+// src/storage/parseData.ts
+function parseData(raw) {
+  const block = raw["_data"];
+  const fromBlock = block && typeof block === "object" && !Array.isArray(block) ? Object.fromEntries(
+    Object.entries(block).filter(([, v]) => Array.isArray(v))
+  ) : {};
+  const fromRoot = Object.fromEntries(
+    Object.entries(raw).filter(([key, val]) => !RESERVED.has(key) && Array.isArray(val))
+  );
+  return { ...fromBlock, ...fromRoot };
+}
+function hasDataBlock(raw) {
+  const d = raw["_data"];
+  return d !== null && d !== void 0 && typeof d === "object" && !Array.isArray(d);
+}
+var RESERVED;
+var init_parseData = __esm({
+  "src/storage/parseData.ts"() {
+    "use strict";
+    init_cjs_shims();
+    RESERVED = /* @__PURE__ */ new Set(["_rel", "_routes", "_schema", "_data"]);
+  }
+});
+
 // src/storage/yrestStorage.ts
 var yrestStorage_exports = {};
 __export(yrestStorage_exports, {
@@ -318,13 +372,11 @@ function serializeScenario(s) {
 function createYrestStorage(filePath) {
   const absPath = (0, import_node_path2.resolve)(filePath);
   const raw = (0, import_yaml3.parse)((0, import_node_fs3.readFileSync)(absPath, "utf8")) ?? {};
-  const RESERVED = /* @__PURE__ */ new Set(["_rel", "_routes", "_schema"]);
   const relations = parseRelations(raw["_rel"]);
   const routes = parseRoutes(raw["_routes"]);
   const schema = parseSchema(raw["_schema"]);
-  const data = Object.fromEntries(
-    Object.entries(raw).filter(([key]) => !RESERVED.has(key))
-  );
+  const dataBlock = hasDataBlock(raw);
+  const data = parseData(raw);
   let snapshot = {
     data: deepCopyData(data),
     relations: { ...relations },
@@ -353,7 +405,11 @@ function createYrestStorage(filePath) {
       const payload = {};
       if (Object.keys(relations).length > 0) payload._rel = serializeRelations(relations);
       if (routes.length > 0) payload._routes = serializeRoutes(routes);
-      Object.assign(payload, data);
+      if (dataBlock) {
+        payload._data = data;
+      } else {
+        Object.assign(payload, data);
+      }
       const tmp = (0, import_node_path2.resolve)((0, import_node_path2.dirname)(absPath), `.yrest-${(0, import_node_crypto2.randomUUID)()}.tmp`);
       (0, import_node_fs3.writeFileSync)(tmp, (0, import_yaml3.stringify)(payload), "utf8");
       (0, import_node_fs3.renameSync)(tmp, absPath);
@@ -361,9 +417,7 @@ function createYrestStorage(filePath) {
     reload() {
       const fresh = (0, import_yaml3.parse)((0, import_node_fs3.readFileSync)(absPath, "utf8")) ?? {};
       const freshRelations = parseRelations(fresh["_rel"]);
-      const freshData = Object.fromEntries(
-        Object.entries(fresh).filter(([key]) => !RESERVED.has(key))
-      );
+      const freshData = parseData(fresh);
       for (const key of Object.keys(data)) delete data[key];
       Object.assign(data, freshData);
       for (const key of Object.keys(relations)) delete relations[key];
@@ -401,6 +455,7 @@ var init_yrestStorage = __esm({
     init_parseRelations();
     init_parseRoutes();
     init_parseSchema();
+    init_parseData();
     init_deepCopy();
   }
 });
@@ -2059,15 +2114,19 @@ function resolveRequestPath(dotPath, req) {
   const [root, ...rest] = dotPath.split(".");
   let value;
   switch (root) {
+    case "_body":
     case "body":
       value = req.body;
       break;
+    case "_params":
     case "params":
       value = req.params;
       break;
+    case "_query":
     case "query":
       value = req.query;
       break;
+    case "_headers":
     case "headers":
       value = req.headers;
       break;
@@ -2368,6 +2427,23 @@ function buildCollectionSchema(items, fieldDefs = {}) {
     if (def?.description) prop.description = def.description;
     if (def?.enum) prop.enum = def.enum;
     if (def?.default !== void 0) prop.default = def.default;
+    if (def?.example !== void 0) prop.example = def.example;
+    if (def?.nullable) prop.nullable = def.nullable;
+    if (def?.minLength !== void 0) prop.minLength = def.minLength;
+    if (def?.maxLength !== void 0) prop.maxLength = def.maxLength;
+    if (def?.pattern) prop.pattern = def.pattern;
+    if (def?.minimum !== void 0) prop.minimum = def.minimum;
+    if (def?.maximum !== void 0) prop.maximum = def.maximum;
+    if (def?.exclusiveMinimum !== void 0) prop.exclusiveMinimum = def.exclusiveMinimum;
+    if (def?.exclusiveMaximum !== void 0) prop.exclusiveMaximum = def.exclusiveMaximum;
+    if (def?.multipleOf !== void 0) prop.multipleOf = def.multipleOf;
+    if (def?.items) prop.items = def.items;
+    if (def?.minItems !== void 0) prop.minItems = def.minItems;
+    if (def?.maxItems !== void 0) prop.maxItems = def.maxItems;
+    if (def?.uniqueItems !== void 0) prop.uniqueItems = def.uniqueItems;
+    if (def?.deprecated) prop.deprecated = def.deprecated;
+    if (def?.readOnly) prop.readOnly = def.readOnly;
+    if (def?.writeOnly) prop.writeOnly = def.writeOnly;
     properties[field] = prop;
     if (def?.required === true) required.push(field);
   }
@@ -2871,12 +2947,12 @@ function buildOptions(opts) {
 }
 function createInMemoryStorage(data) {
   const raw = data;
-  const RESERVED = /* @__PURE__ */ new Set(["_rel", "_routes", "_schema"]);
+  const RESERVED2 = /* @__PURE__ */ new Set(["_rel", "_routes", "_schema"]);
   const relations = parseRelations(raw["_rel"]);
   const routes = Array.isArray(raw["_routes"]) ? raw["_routes"] : [];
   const schema = parseSchema(raw["_schema"]);
   const collections = Object.fromEntries(
-    Object.entries(raw).filter(([k]) => !RESERVED.has(k))
+    Object.entries(raw).filter(([k]) => !RESERVED2.has(k))
   );
   let snapshot = {
     data: deepCopyData(collections),

package/dist/index.mjs

@@ -151,18 +151,48 @@ function normaliseFieldDef(value) {
   const v = value;
   const def = {};
   if (v["_required"] === true || v["_required"] === false) def.required = v["_required"];
-  if (typeof v["_type"] === "string" && ["string", "integer", "number", "boolean", "object", "array"].includes(v["_type"]))
+  if (typeof v["_type"] === "string" && VALID_TYPES.has(v["_type"]))
     def.type = v["_type"];
   if (typeof v["_format"] === "string") def.format = v["_format"];
   if (Array.isArray(v["_enum"])) def.enum = v["_enum"];
   if (typeof v["_description"] === "string") def.description = v["_description"];
   if (v["_default"] !== void 0) def.default = v["_default"];
+  if (v["_example"] !== void 0) def.example = v["_example"];
+  if (v["_nullable"] === true || v["_nullable"] === false) def.nullable = v["_nullable"];
+  if (typeof v["_minLength"] === "number") def.minLength = v["_minLength"];
+  if (typeof v["_maxLength"] === "number") def.maxLength = v["_maxLength"];
+  if (typeof v["_pattern"] === "string") def.pattern = v["_pattern"];
+  if (typeof v["_minimum"] === "number") def.minimum = v["_minimum"];
+  if (typeof v["_maximum"] === "number") def.maximum = v["_maximum"];
+  if (typeof v["_exclusiveMinimum"] === "number") def.exclusiveMinimum = v["_exclusiveMinimum"];
+  if (typeof v["_exclusiveMaximum"] === "number") def.exclusiveMaximum = v["_exclusiveMaximum"];
+  if (typeof v["_multipleOf"] === "number") def.multipleOf = v["_multipleOf"];
+  if (typeof v["_minItems"] === "number") def.minItems = v["_minItems"];
+  if (typeof v["_maxItems"] === "number") def.maxItems = v["_maxItems"];
+  if (v["_uniqueItems"] === true || v["_uniqueItems"] === false)
+    def.uniqueItems = v["_uniqueItems"];
+  if (v["_items"] && typeof v["_items"] === "object" && !Array.isArray(v["_items"])) {
+    const items = v["_items"];
+    const itemsDef = {};
+    if (typeof items["_type"] === "string" && VALID_TYPES.has(items["_type"]))
+      itemsDef.type = items["_type"];
+    if (typeof items["_format"] === "string") itemsDef.format = items["_format"];
+    if (Array.isArray(items["_enum"])) itemsDef.enum = items["_enum"];
+    def.items = itemsDef;
+  }
+  if (v["_deprecated"] === true || v["_deprecated"] === false)
+    def.deprecated = v["_deprecated"];
+  if (v["_readOnly"] === true || v["_readOnly"] === false) def.readOnly = v["_readOnly"];
+  if (v["_writeOnly"] === true || v["_writeOnly"] === false)
+    def.writeOnly = v["_writeOnly"];
   return def;
 }
+var VALID_TYPES;
 var init_parseSchema = __esm({
   "src/storage/parseSchema.ts"() {
     "use strict";
     init_esm_shims();
+    VALID_TYPES = /* @__PURE__ */ new Set(["string", "integer", "number", "boolean", "object", "array"]);
   }
 });
 
@@ -233,6 +263,30 @@ var init_parseRoutes = __esm({
   }
 });
 
+// src/storage/parseData.ts
+function parseData(raw) {
+  const block = raw["_data"];
+  const fromBlock = block && typeof block === "object" && !Array.isArray(block) ? Object.fromEntries(
+    Object.entries(block).filter(([, v]) => Array.isArray(v))
+  ) : {};
+  const fromRoot = Object.fromEntries(
+    Object.entries(raw).filter(([key, val]) => !RESERVED.has(key) && Array.isArray(val))
+  );
+  return { ...fromBlock, ...fromRoot };
+}
+function hasDataBlock(raw) {
+  const d = raw["_data"];
+  return d !== null && d !== void 0 && typeof d === "object" && !Array.isArray(d);
+}
+var RESERVED;
+var init_parseData = __esm({
+  "src/storage/parseData.ts"() {
+    "use strict";
+    init_esm_shims();
+    RESERVED = /* @__PURE__ */ new Set(["_rel", "_routes", "_schema", "_data"]);
+  }
+});
+
 // src/storage/yrestStorage.ts
 var yrestStorage_exports = {};
 __export(yrestStorage_exports, {
@@ -299,13 +353,11 @@ function serializeScenario(s) {
 function createYrestStorage(filePath) {
   const absPath = resolve(filePath);
   const raw = parse2(readFileSync2(absPath, "utf8")) ?? {};
-  const RESERVED = /* @__PURE__ */ new Set(["_rel", "_routes", "_schema"]);
   const relations = parseRelations(raw["_rel"]);
   const routes = parseRoutes(raw["_routes"]);
   const schema = parseSchema(raw["_schema"]);
-  const data = Object.fromEntries(
-    Object.entries(raw).filter(([key]) => !RESERVED.has(key))
-  );
+  const dataBlock = hasDataBlock(raw);
+  const data = parseData(raw);
   let snapshot = {
     data: deepCopyData(data),
     relations: { ...relations },
@@ -334,7 +386,11 @@ function createYrestStorage(filePath) {
       const payload = {};
       if (Object.keys(relations).length > 0) payload._rel = serializeRelations(relations);
       if (routes.length > 0) payload._routes = serializeRoutes(routes);
-      Object.assign(payload, data);
+      if (dataBlock) {
+        payload._data = data;
+      } else {
+        Object.assign(payload, data);
+      }
       const tmp = resolve(dirname2(absPath), `.yrest-${randomUUID2()}.tmp`);
       writeFileSync(tmp, stringify2(payload), "utf8");
       renameSync(tmp, absPath);
@@ -342,9 +398,7 @@ function createYrestStorage(filePath) {
     reload() {
       const fresh = parse2(readFileSync2(absPath, "utf8")) ?? {};
       const freshRelations = parseRelations(fresh["_rel"]);
-      const freshData = Object.fromEntries(
-        Object.entries(fresh).filter(([key]) => !RESERVED.has(key))
-      );
+      const freshData = parseData(fresh);
       for (const key of Object.keys(data)) delete data[key];
       Object.assign(data, freshData);
       for (const key of Object.keys(relations)) delete relations[key];
@@ -377,6 +431,7 @@ var init_yrestStorage = __esm({
     init_parseRelations();
     init_parseRoutes();
     init_parseSchema();
+    init_parseData();
     init_deepCopy();
   }
 });
@@ -2025,15 +2080,19 @@ function resolveRequestPath(dotPath, req) {
   const [root, ...rest] = dotPath.split(".");
   let value;
   switch (root) {
+    case "_body":
     case "body":
       value = req.body;
       break;
+    case "_params":
     case "params":
       value = req.params;
       break;
+    case "_query":
     case "query":
       value = req.query;
       break;
+    case "_headers":
     case "headers":
       value = req.headers;
       break;
@@ -2334,6 +2393,23 @@ function buildCollectionSchema(items, fieldDefs = {}) {
     if (def?.description) prop.description = def.description;
     if (def?.enum) prop.enum = def.enum;
     if (def?.default !== void 0) prop.default = def.default;
+    if (def?.example !== void 0) prop.example = def.example;
+    if (def?.nullable) prop.nullable = def.nullable;
+    if (def?.minLength !== void 0) prop.minLength = def.minLength;
+    if (def?.maxLength !== void 0) prop.maxLength = def.maxLength;
+    if (def?.pattern) prop.pattern = def.pattern;
+    if (def?.minimum !== void 0) prop.minimum = def.minimum;
+    if (def?.maximum !== void 0) prop.maximum = def.maximum;
+    if (def?.exclusiveMinimum !== void 0) prop.exclusiveMinimum = def.exclusiveMinimum;
+    if (def?.exclusiveMaximum !== void 0) prop.exclusiveMaximum = def.exclusiveMaximum;
+    if (def?.multipleOf !== void 0) prop.multipleOf = def.multipleOf;
+    if (def?.items) prop.items = def.items;
+    if (def?.minItems !== void 0) prop.minItems = def.minItems;
+    if (def?.maxItems !== void 0) prop.maxItems = def.maxItems;
+    if (def?.uniqueItems !== void 0) prop.uniqueItems = def.uniqueItems;
+    if (def?.deprecated) prop.deprecated = def.deprecated;
+    if (def?.readOnly) prop.readOnly = def.readOnly;
+    if (def?.writeOnly) prop.writeOnly = def.writeOnly;
     properties[field] = prop;
     if (def?.required === true) required.push(field);
   }
@@ -2837,12 +2913,12 @@ function buildOptions(opts) {
 }
 function createInMemoryStorage(data) {
   const raw = data;
-  const RESERVED = /* @__PURE__ */ new Set(["_rel", "_routes", "_schema"]);
+  const RESERVED2 = /* @__PURE__ */ new Set(["_rel", "_routes", "_schema"]);
   const relations = parseRelations(raw["_rel"]);
   const routes = Array.isArray(raw["_routes"]) ? raw["_routes"] : [];
   const schema = parseSchema(raw["_schema"]);
   const collections = Object.fromEntries(
-    Object.entries(raw).filter(([k]) => !RESERVED.has(k))
+    Object.entries(raw).filter(([k]) => !RESERVED2.has(k))
   );
   let snapshot = {
     data: deepCopyData(collections),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yrest/cli",
-  "version": "0.11.1",
+  "version": "0.11.2",
   "description": "YAML-powered json-server alternative. Zero-config REST API mock server with full CRUD, relations, filters and snapshots from a db.yml file.",
   "keywords": [
     "yrest",
@@ -60,12 +60,16 @@
     "dev": "tsup --watch",
     "test": "vitest",
     "test:run": "vitest run",
+    "test:unit": "vitest run tests/config tests/cli tests/storage tests/utils",
+    "test:integration": "vitest run tests/routes tests/openapi tests/security tests/api",
+    "test:e2e": "vitest run tests/e2e",
+    "test:preflight": "vitest run",
     "typecheck": "tsc --noEmit",
     "lint": "eslint src tests",
     "lint:fix": "eslint src tests --fix",
     "format": "prettier --write .",
     "format:check": "prettier --check .",
-    "prepublishOnly": "npm run test:run && npm run build",
+    "prepublishOnly": "npm run build && npm run test:preflight",
     "version": "node scripts/update-version-badge.mjs && git add README.md"
   },
   "dependencies": {