callman-core 1.38.0 → 1.39.0

package/dist/mock-engine/auth.d.ts

@@ -0,0 +1,29 @@
+import type { MockCryptoPort } from "./types.js";
+export declare const isHashedPassword: (value: unknown) => value is string;
+export declare const hashPassword: (crypto: MockCryptoPort, password: string) => Promise<string>;
+export declare const verifyPassword: (crypto: MockCryptoPort, stored: unknown, candidate: string) => Promise<boolean>;
+export declare const generateMockSecret: (crypto: MockCryptoPort) => string;
+export interface MockJwtClaims {
+    sub: string;
+    iat: number;
+    exp: number;
+    iss?: string;
+    aud?: string;
+    [claim: string]: unknown;
+}
+export declare const signMockJwt: (crypto: MockCryptoPort, secretHex: string, claims: MockJwtClaims) => Promise<string>;
+export type JwtVerifyResult = {
+    ok: true;
+    claims: MockJwtClaims;
+} | {
+    ok: false;
+    reason: "malformed" | "signature" | "expired" | "issuer" | "audience";
+};
+export declare const verifyMockJwt: (crypto: MockCryptoPort, secretHex: string, token: string, options: {
+    nowSeconds: number;
+    issuer?: string;
+    audience?: string;
+}) => Promise<JwtVerifyResult>;
+/** Bearer token from an Authorization header, or null. */
+export declare const bearerToken: (authorization: string | undefined) => string | null;
+//# sourceMappingURL=auth.d.ts.map

package/dist/mock-engine/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/mock-engine/auth.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAKjD,eAAO,MAAM,gBAAgB,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,MACK,CAAC;AASjE,eAAO,MAAM,YAAY,GAAU,QAAQ,cAAc,EAAE,UAAU,MAAM,KAAG,OAAO,CAAC,MAAM,CAI3F,CAAC;AAEF,eAAO,MAAM,cAAc,GAAU,QAAQ,cAAc,EAAE,QAAQ,OAAO,EAAE,WAAW,MAAM,KAAG,OAAO,CAAC,OAAO,CAWhH,CAAC;AAEF,eAAO,MAAM,kBAAkB,GAAI,QAAQ,cAAc,KAAG,MAAuC,CAAC;AAEpG,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;CAC1B;AAID,eAAO,MAAM,WAAW,GAAU,QAAQ,cAAc,EAAE,WAAW,MAAM,EAAE,QAAQ,aAAa,KAAG,OAAO,CAAC,MAAM,CAKlH,CAAC;AAEF,MAAM,MAAM,eAAe,GACvB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,aAAa,CAAA;CAAE,GACnC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,WAAW,GAAG,WAAW,GAAG,SAAS,GAAG,QAAQ,GAAG,UAAU,CAAA;CAAE,CAAC;AAEzF,eAAO,MAAM,aAAa,GACxB,QAAQ,cAAc,EACtB,WAAW,MAAM,EACjB,OAAO,MAAM,EACb,SAAS;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,KAClE,OAAO,CAAC,eAAe,CA0BzB,CAAC;AAEF,0DAA0D;AAC1D,eAAO,MAAM,WAAW,GAAI,eAAe,MAAM,GAAG,SAAS,KAAG,MAAM,GAAG,IAIxE,CAAC"}

package/dist/mock-engine/auth.js

@@ -0,0 +1,86 @@
+// Auth simulation primitives: mock-grade password hashing and HS256 JWTs.
+// Everything goes through the injected `MockCryptoPort` (WebCrypto by
+// default), so the same code runs on the server, in Electron main and in the
+// renderer. These are simulated credentials for test APIs — not a real
+// identity system.
+import { base64UrlDecode, base64UrlEncode, fromHex, fromUtf8, timingSafeEqualBytes, toHex, utf8 } from "./util.js";
+const PASSWORD_PREFIX = "$mockpw$v1$";
+export const isHashedPassword = (value) => typeof value === "string" && value.startsWith(PASSWORD_PREFIX);
+const concat = (a, b) => {
+    const out = new Uint8Array(a.length + b.length);
+    out.set(a, 0);
+    out.set(b, a.length);
+    return out;
+};
+export const hashPassword = async (crypto, password) => {
+    const salt = crypto.randomBytes(16);
+    const digest = await crypto.sha256(concat(salt, utf8(password)));
+    return `${PASSWORD_PREFIX}${toHex(salt)}$${toHex(digest)}`;
+};
+export const verifyPassword = async (crypto, stored, candidate) => {
+    if (typeof stored !== "string")
+        return false;
+    if (!isHashedPassword(stored)) {
+        // Seeds and imports may hold plain values; compare their digests.
+        const [a, b] = await Promise.all([crypto.sha256(utf8(stored)), crypto.sha256(utf8(candidate))]);
+        return timingSafeEqualBytes(a, b);
+    }
+    const [saltHex, hashHex] = stored.slice(PASSWORD_PREFIX.length).split("$");
+    if (!saltHex || !hashHex)
+        return false;
+    const digest = await crypto.sha256(concat(fromHex(saltHex), utf8(candidate)));
+    return timingSafeEqualBytes(digest, fromHex(hashHex));
+};
+export const generateMockSecret = (crypto) => toHex(crypto.randomBytes(32));
+const HEADER = base64UrlEncode(utf8(JSON.stringify({ alg: "HS256", typ: "JWT" })));
+export const signMockJwt = async (crypto, secretHex, claims) => {
+    const payload = base64UrlEncode(utf8(JSON.stringify(claims)));
+    const signingInput = `${HEADER}.${payload}`;
+    const signature = await crypto.hmacSha256(fromHex(secretHex), utf8(signingInput));
+    return `${signingInput}.${base64UrlEncode(signature)}`;
+};
+export const verifyMockJwt = async (crypto, secretHex, token, options) => {
+    const parts = token.split(".");
+    if (parts.length !== 3)
+        return { ok: false, reason: "malformed" };
+    const [headerPart, payloadPart, signaturePart] = parts;
+    const headerBytes = base64UrlDecode(headerPart);
+    const payloadBytes = base64UrlDecode(payloadPart);
+    const signature = base64UrlDecode(signaturePart);
+    if (!headerBytes || !payloadBytes || !signature)
+        return { ok: false, reason: "malformed" };
+    let header;
+    let claims;
+    try {
+        header = JSON.parse(fromUtf8(headerBytes));
+        claims = JSON.parse(fromUtf8(payloadBytes));
+    }
+    catch {
+        return { ok: false, reason: "malformed" };
+    }
+    if (!header || typeof header !== "object" || header.alg !== "HS256")
+        return { ok: false, reason: "malformed" };
+    const expected = await crypto.hmacSha256(fromHex(secretHex), utf8(`${headerPart}.${payloadPart}`));
+    if (!timingSafeEqualBytes(expected, signature))
+        return { ok: false, reason: "signature" };
+    if (!claims || typeof claims !== "object")
+        return { ok: false, reason: "malformed" };
+    const c = claims;
+    if (typeof c.sub !== "string")
+        return { ok: false, reason: "malformed" };
+    if (typeof c.exp === "number" && c.exp <= options.nowSeconds)
+        return { ok: false, reason: "expired" };
+    if (options.issuer && c.iss !== options.issuer)
+        return { ok: false, reason: "issuer" };
+    if (options.audience && c.aud !== options.audience)
+        return { ok: false, reason: "audience" };
+    return { ok: true, claims: c };
+};
+/** Bearer token from an Authorization header, or null. */
+export const bearerToken = (authorization) => {
+    if (!authorization)
+        return null;
+    const match = /^Bearer\s+(.+)$/i.exec(authorization.trim());
+    return match ? match[1].trim() : null;
+};
+//# sourceMappingURL=auth.js.map

package/dist/mock-engine/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/mock-engine/auth.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,sEAAsE;AACtE,6EAA6E;AAC7E,uEAAuE;AACvE,mBAAmB;AAGnB,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,OAAO,EAAE,QAAQ,EAAE,oBAAoB,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEnH,MAAM,eAAe,GAAG,aAAa,CAAC;AAEtC,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,KAAc,EAAmB,EAAE,CAClE,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;AAEjE,MAAM,MAAM,GAAG,CAAC,CAAa,EAAE,CAAa,EAAc,EAAE;IAC1D,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IAChD,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACd,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IACrB,OAAO,GAAG,CAAC;AACb,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAAG,KAAK,EAAE,MAAsB,EAAE,QAAgB,EAAmB,EAAE;IAC9F,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IACjE,OAAO,GAAG,eAAe,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;AAC7D,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,EAAE,MAAsB,EAAE,MAAe,EAAE,SAAiB,EAAoB,EAAE;IACnH,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC7C,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9B,kEAAkE;QAClE,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QAChG,OAAO,oBAAoB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACpC,CAAC;IACD,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3E,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IACvC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAC9E,OAAO,oBAAoB,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;AACxD,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,MAAsB,EAAU,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;AAWpG,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;AAEnF,MAAM,CAAC,MAAM,WAAW,GAAG,KAAK,EAAE,MAAsB,EAAE,SAAiB,EAAE,MAAqB,EAAmB,EAAE;IACrH,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC9D,MAAM,YAAY,GAAG,GAAG,MAAM,IAAI,OAAO,EAAE,CAAC;IAC5C,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;IAClF,OAAO,GAAG,YAAY,IAAI,eAAe,CAAC,SAAS,CAAC,EAAE,CAAC;AACzD,CAAC,CAAC;AAMF,MAAM,CAAC,MAAM,aAAa,GAAG,KAAK,EAChC,MAAsB,EACtB,SAAiB,EACjB,KAAa,EACb,OAAmE,EACzC,EAAE;IAC5B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAClE,MAAM,CAAC,UAAU,EAAE,WAAW,EAAE,aAAa,CAAC,GAAG,KAAK,CAAC;IACvD,MAAM,WAAW,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;IAChD,MAAM,YAAY,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,eAAe,CAAC,aAAa,CAAC,CAAC;IACjD,IAAI,CAAC,WAAW,IAAI,CAAC,YAAY,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAC3F,IAAI,MAAe,CAAC;IACpB,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC;QAC3C,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAC5C,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAK,MAA2B,CAAC,GAAG,KAAK,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACrI,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,GAAG,UAAU,IAAI,WAAW,EAAE,CAAC,CAAC,CAAC;IACnG,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,SAAS,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAC1F,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACrF,MAAM,CAAC,GAAG,MAAuB,CAAC;IAClC,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACzE,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,IAAI,OAAO,CAAC,UAAU;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACtG,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IACvF,IAAI,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,KAAK,OAAO,CAAC,QAAQ;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAC7F,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;AACjC,CAAC,CAAC;AAEF,0DAA0D;AAC1D,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,aAAiC,EAAiB,EAAE;IAC9E,IAAI,CAAC,aAAa;QAAE,OAAO,IAAI,CAAC;IAChC,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5D,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACxC,CAAC,CAAC"}

package/dist/mock-engine/conditions.d.ts

@@ -0,0 +1,31 @@
+import type { MockRegexRunner, VariantCondition } from "./types.js";
+export declare const MAX_PATTERN_LENGTH = 512;
+/** Subjects are truncated before matching so a 1 MB field cannot turn a linear pattern into a long scan. */
+export declare const MAX_REGEX_SUBJECT_CHARS = 4096;
+/**
+ * Why a `matches` pattern is refused, or `null` when it is acceptable.
+ * Human-readable: the message is returned to the editor as a 400.
+ */
+export declare const describeUnsafePattern: (source: string) => string | null;
+/**
+ * A runner without a timeout, for hosts that cannot use `vm` (the renderer
+ * previews). Patterns were vetted by `describeUnsafePattern` at save time;
+ * the subject is truncated. Node hosts use the vm runner instead.
+ */
+export declare const createBasicRegexRunner: () => MockRegexRunner;
+export interface ConditionContext {
+    params: Record<string, string>;
+    query: Record<string, unknown>;
+    headers: Record<string, string>;
+    body?: unknown;
+    auth?: {
+        authenticated: boolean;
+        sub?: string;
+        claims?: Record<string, unknown>;
+    };
+    session?: {
+        id: string | null;
+    };
+}
+export declare const evaluateCondition: (condition: VariantCondition, ctx: ConditionContext, regex: MockRegexRunner) => boolean;
+//# sourceMappingURL=conditions.d.ts.map

package/dist/mock-engine/conditions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"conditions.d.ts","sourceRoot":"","sources":["../../src/mock-engine/conditions.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAGpE,eAAO,MAAM,kBAAkB,MAAM,CAAC;AAGtC,4GAA4G;AAC5G,eAAO,MAAM,uBAAuB,OAAQ,CAAC;AAuC7C;;;GAGG;AACH,eAAO,MAAM,qBAAqB,GAAI,QAAQ,MAAM,KAAG,MAAM,GAAG,IAsE/D,CAAC;AAKF;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,QAAO,eAoBzC,CAAC;AAEF,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,IAAI,CAAC,EAAE;QAAE,aAAa,EAAE,OAAO,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC;IAClF,OAAO,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;CACjC;AA+BD,eAAO,MAAM,iBAAiB,GAC5B,WAAW,gBAAgB,EAC3B,KAAK,gBAAgB,EACrB,OAAO,eAAe,KACrB,OAyBF,CAAC"}

package/dist/mock-engine/conditions.js

@@ -0,0 +1,210 @@
+// Variant/match conditions and the save-time regex safety check.
+//
+// A condition is an AND/OR group of field-operator-value rules read from the
+// request scopes (headers, params, query, body) plus, in engine v2, the
+// signed-in user (`auth.*`) and the test session (`session.id`). The
+// `matches` operator runs through the injected `MockRegexRunner`, which the
+// Node hosts back with a vm timeout so an author's pattern cannot pin the
+// event loop on an anonymous caller's input.
+import { lookupHeader, navigatePath } from "./util.js";
+export const MAX_PATTERN_LENGTH = 512;
+// The subject is truncated before matching: a 1 MB body field must not turn
+// even a linear pattern into a long scan.
+/** Subjects are truncated before matching so a 1 MB field cannot turn a linear pattern into a long scan. */
+export const MAX_REGEX_SUBJECT_CHARS = 4_096;
+// Reads a quantifier starting at `index`. Returns its length and whether it
+// can repeat more than once (`?` and `{0,1}` cannot, so they never nest
+// dangerously).
+const readQuantifier = (source, index) => {
+    const char = source[index];
+    let length = 0;
+    let repeats = false;
+    if (char === "*" || char === "+") {
+        length = 1;
+        repeats = true;
+    }
+    else if (char === "?") {
+        length = 1;
+    }
+    else if (char === "{") {
+        const match = /^\{(\d+)(,(\d*))?\}/.exec(source.slice(index));
+        if (!match)
+            return null;
+        length = match[0].length;
+        const min = Number(match[1]);
+        const max = match[2] === undefined ? min : match[3] === "" ? Infinity : Number(match[3]);
+        repeats = max > 1;
+    }
+    else {
+        return null;
+    }
+    // Lazy / possessive-looking suffix (`*?`) — same repetition semantics.
+    if (source[index + length] === "?")
+        length += 1;
+    return { length, repeats };
+};
+/**
+ * Why a `matches` pattern is refused, or `null` when it is acceptable.
+ * Human-readable: the message is returned to the editor as a 400.
+ */
+export const describeUnsafePattern = (source) => {
+    if (source.length > MAX_PATTERN_LENGTH) {
+        return `Pattern is longer than ${MAX_PATTERN_LENGTH} characters`;
+    }
+    try {
+        new RegExp(source);
+    }
+    catch (error) {
+        return `Invalid regular expression: ${error instanceof Error ? error.message : String(error)}`;
+    }
+    const stack = [{ repeats: false }];
+    let inClass = false;
+    for (let i = 0; i < source.length; i += 1) {
+        const char = source[i];
+        if (char === "\\") {
+            const next = source[i + 1] ?? "";
+            if (!inClass && (/[1-9]/.test(next) || next === "k")) {
+                return "Backreferences are not supported in mock patterns";
+            }
+            i += 1;
+            // An escaped atom outside a class can still be quantified.
+            if (!inClass) {
+                const quantifier = readQuantifier(source, i + 1);
+                if (quantifier) {
+                    if (quantifier.repeats)
+                        stack[stack.length - 1].repeats = true;
+                    i += quantifier.length;
+                }
+            }
+            continue;
+        }
+        if (inClass) {
+            if (char === "]") {
+                inClass = false;
+                const quantifier = readQuantifier(source, i + 1);
+                if (quantifier) {
+                    if (quantifier.repeats)
+                        stack[stack.length - 1].repeats = true;
+                    i += quantifier.length;
+                }
+            }
+            continue;
+        }
+        if (char === "[") {
+            inClass = true;
+            continue;
+        }
+        if (char === "(") {
+            stack.push({ repeats: false });
+            continue;
+        }
+        if (char === ")") {
+            const closed = stack.pop() ?? { repeats: false };
+            const parent = stack[stack.length - 1] ?? stack[0];
+            const quantifier = readQuantifier(source, i + 1);
+            if (quantifier) {
+                if (quantifier.repeats && closed.repeats) {
+                    return "Pattern repeats a group that itself repeats (like (a+)+) — that can hang on crafted input; simplify it";
+                }
+                if (quantifier.repeats)
+                    parent.repeats = true;
+                i += quantifier.length;
+            }
+            if (closed.repeats)
+                parent.repeats = true;
+            continue;
+        }
+        const quantifier = readQuantifier(source, i + 1);
+        if (quantifier) {
+            if (quantifier.repeats)
+                stack[stack.length - 1].repeats = true;
+            i += quantifier.length;
+        }
+    }
+    return null;
+};
+// ── Run-time evaluation ───────────────────────────────────────────────
+/**
+ * A runner without a timeout, for hosts that cannot use `vm` (the renderer
+ * previews). Patterns were vetted by `describeUnsafePattern` at save time;
+ * the subject is truncated. Node hosts use the vm runner instead.
+ */
+export const createBasicRegexRunner = () => {
+    const cache = new Map();
+    return {
+        test(pattern, subject) {
+            if (pattern.length > MAX_PATTERN_LENGTH * 4)
+                return false;
+            let compiled = cache.get(pattern);
+            if (compiled === undefined) {
+                try {
+                    compiled = new RegExp(pattern);
+                }
+                catch {
+                    compiled = null;
+                }
+                if (cache.size > 500)
+                    cache.clear();
+                cache.set(pattern, compiled);
+            }
+            if (!compiled)
+                return false;
+            const input = subject.length > MAX_REGEX_SUBJECT_CHARS ? subject.slice(0, MAX_REGEX_SUBJECT_CHARS) : subject;
+            return compiled.test(input);
+        },
+    };
+};
+const resolveFieldValue = (field, ctx) => {
+    const segments = field.split(".");
+    const [head, ...rest] = segments;
+    switch (head) {
+        case "headers":
+            if (rest.length === 0)
+                return undefined;
+            return rest.length === 1
+                ? lookupHeader(ctx.headers, rest[0])
+                : navigatePath(lookupHeader(ctx.headers, rest[0]), rest.slice(1));
+        case "params":
+            return navigatePath(ctx.params, rest);
+        case "query":
+            return navigatePath(ctx.query, rest);
+        case "body":
+            return navigatePath(ctx.body, rest);
+        case "auth":
+            return navigatePath(ctx.auth ?? { authenticated: false }, rest);
+        case "session":
+            return navigatePath(ctx.session ?? { id: null }, rest);
+        default:
+            return undefined;
+    }
+};
+const isPresent = (value) => value !== undefined && value !== null && value !== "";
+const stringify = (value) => typeof value === "object" && value !== null ? JSON.stringify(value) : String(value);
+export const evaluateCondition = (condition, ctx, regex) => {
+    if (!condition || !Array.isArray(condition.rules) || condition.rules.length === 0)
+        return false;
+    const results = condition.rules.map((rule) => {
+        const fieldValue = resolveFieldValue(rule.field, ctx);
+        const ruleValue = rule.value ?? "";
+        switch (rule.operator) {
+            case "exists":
+                return isPresent(fieldValue);
+            case "not-exists":
+                return !isPresent(fieldValue);
+            case "equals":
+                return stringify(fieldValue) === String(ruleValue);
+            case "not-equals":
+                return stringify(fieldValue) !== String(ruleValue);
+            case "contains":
+                return stringify(fieldValue).includes(String(ruleValue));
+            case "starts-with":
+                return stringify(fieldValue).startsWith(String(ruleValue));
+            case "matches":
+                return regex.test(String(ruleValue), stringify(fieldValue));
+            default:
+                return false;
+        }
+    });
+    return condition.type === "all" ? results.every(Boolean) : results.some(Boolean);
+};
+//# sourceMappingURL=conditions.js.map

package/dist/mock-engine/conditions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"conditions.js","sourceRoot":"","sources":["../../src/mock-engine/conditions.ts"],"names":[],"mappings":"AAAA,iEAAiE;AACjE,EAAE;AACF,6EAA6E;AAC7E,wEAAwE;AACxE,qEAAqE;AACrE,4EAA4E;AAC5E,0EAA0E;AAC1E,6CAA6C;AAG7C,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAEvD,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,CAAC;AACtC,4EAA4E;AAC5E,0CAA0C;AAC1C,4GAA4G;AAC5G,MAAM,CAAC,MAAM,uBAAuB,GAAG,KAAK,CAAC;AAS7C,4EAA4E;AAC5E,wEAAwE;AACxE,gBAAgB;AAChB,MAAM,cAAc,GAAG,CACrB,MAAc,EACd,KAAa,EACgC,EAAE;IAC/C,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3B,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;QACjC,MAAM,GAAG,CAAC,CAAC;QACX,OAAO,GAAG,IAAI,CAAC;IACjB,CAAC;SAAM,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;QACxB,MAAM,GAAG,CAAC,CAAC;IACb,CAAC;SAAM,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9D,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxB,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QACzB,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7B,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACzF,OAAO,GAAG,GAAG,GAAG,CAAC,CAAC;IACpB,CAAC;SAAM,CAAC;QACN,OAAO,IAAI,CAAC;IACd,CAAC;IACD,uEAAuE;IACvE,IAAI,MAAM,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,GAAG;QAAE,MAAM,IAAI,CAAC,CAAC;IAChD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAC7B,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,MAAc,EAAiB,EAAE;IACrE,IAAI,MAAM,CAAC,MAAM,GAAG,kBAAkB,EAAE,CAAC;QACvC,OAAO,0BAA0B,kBAAkB,aAAa,CAAC;IACnE,CAAC;IACD,IAAI,CAAC;QACH,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC;IACrB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,+BAA+B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IACjG,CAAC;IAED,MAAM,KAAK,GAAiB,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IACjD,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACvB,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YACjC,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;gBACrD,OAAO,mDAAmD,CAAC;YAC7D,CAAC;YACD,CAAC,IAAI,CAAC,CAAC;YACP,2DAA2D;YAC3D,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,UAAU,GAAG,cAAc,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;gBACjD,IAAI,UAAU,EAAE,CAAC;oBACf,IAAI,UAAU,CAAC,OAAO;wBAAE,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC;oBAC/D,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC;gBACzB,CAAC;YACH,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBACjB,OAAO,GAAG,KAAK,CAAC;gBAChB,MAAM,UAAU,GAAG,cAAc,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;gBACjD,IAAI,UAAU,EAAE,CAAC;oBACf,IAAI,UAAU,CAAC,OAAO;wBAAE,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC;oBAC/D,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC;gBACzB,CAAC;YACH,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjB,OAAO,GAAG,IAAI,CAAC;YACf,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjB,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;YAC/B,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjB,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;YACjD,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;YACnD,MAAM,UAAU,GAAG,cAAc,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACjD,IAAI,UAAU,EAAE,CAAC;gBACf,IAAI,UAAU,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;oBACzC,OAAO,wGAAwG,CAAC;gBAClH,CAAC;gBACD,IAAI,UAAU,CAAC,OAAO;oBAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;gBAC9C,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC;YACzB,CAAC;YACD,IAAI,MAAM,CAAC,OAAO;gBAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;YAC1C,SAAS;QACX,CAAC;QACD,MAAM,UAAU,GAAG,cAAc,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACjD,IAAI,UAAU,EAAE,CAAC;YACf,IAAI,UAAU,CAAC,OAAO;gBAAE,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC;YAC/D,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC;QACzB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAGF,yEAAyE;AAEzE;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAoB,EAAE;IAC1D,MAAM,KAAK,GAAG,IAAI,GAAG,EAAyB,CAAC;IAC/C,OAAO;QACL,IAAI,CAAC,OAAO,EAAE,OAAO;YACnB,IAAI,OAAO,CAAC,MAAM,GAAG,kBAAkB,GAAG,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC1D,IAAI,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAClC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,IAAI,CAAC;oBACH,QAAQ,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC;gBACjC,CAAC;gBAAC,MAAM,CAAC;oBACP,QAAQ,GAAG,IAAI,CAAC;gBAClB,CAAC;gBACD,IAAI,KAAK,CAAC,IAAI,GAAG,GAAG;oBAAE,KAAK,CAAC,KAAK,EAAE,CAAC;gBACpC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YAC/B,CAAC;YACD,IAAI,CAAC,QAAQ;gBAAE,OAAO,KAAK,CAAC;YAC5B,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,GAAG,uBAAuB,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,uBAAuB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YAC7G,OAAO,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;KACF,CAAC;AACJ,CAAC,CAAC;AAWF,MAAM,iBAAiB,GAAG,CAAC,KAAa,EAAE,GAAqB,EAAW,EAAE;IAC1E,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,QAAQ,CAAC;IACjC,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,SAAS;YACZ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,SAAS,CAAC;YACxC,OAAO,IAAI,CAAC,MAAM,KAAK,CAAC;gBACtB,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;gBACpC,CAAC,CAAC,YAAY,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACtE,KAAK,QAAQ;YACX,OAAO,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACxC,KAAK,OAAO;YACV,OAAO,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACvC,KAAK,MAAM;YACT,OAAO,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACtC,KAAK,MAAM;YACT,OAAO,YAAY,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC;QAClE,KAAK,SAAS;YACZ,OAAO,YAAY,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;QACzD;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,SAAS,GAAG,CAAC,KAAc,EAAW,EAAE,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;AAErG,MAAM,SAAS,GAAG,CAAC,KAAc,EAAU,EAAE,CAC3C,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAEtF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAC/B,SAA2B,EAC3B,GAAqB,EACrB,KAAsB,EACb,EAAE;IACX,IAAI,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAChG,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QAC3C,MAAM,UAAU,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACtD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QACnC,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;YACtB,KAAK,QAAQ;gBACX,OAAO,SAAS,CAAC,UAAU,CAAC,CAAC;YAC/B,KAAK,YAAY;gBACf,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;YAChC,KAAK,QAAQ;gBACX,OAAO,SAAS,CAAC,UAAU,CAAC,KAAK,MAAM,CAAC,SAAS,CAAC,CAAC;YACrD,KAAK,YAAY;gBACf,OAAO,SAAS,CAAC,UAAU,CAAC,KAAK,MAAM,CAAC,SAAS,CAAC,CAAC;YACrD,KAAK,UAAU;gBACb,OAAO,SAAS,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;YAC3D,KAAK,aAAa;gBAChB,OAAO,SAAS,CAAC,UAAU,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;YAC7D,KAAK,SAAS;gBACZ,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;YAC9D;gBACE,OAAO,KAAK,CAAC;QACjB,CAAC;IACH,CAAC,CAAC,CAAC;IACH,OAAO,SAAS,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACnF,CAAC,CAAC"}

package/dist/mock-engine/constants.d.ts

@@ -0,0 +1,28 @@
+import type { MockEngineLimits } from "./types.js";
+export declare const MOCK_FIELD_TYPES: readonly ["string", "number", "integer", "boolean", "object", "array", "date", "datetime", "email", "uuid", "password"];
+export declare const MOCK_ID_STRATEGIES: readonly ["uuid", "incremental", "objectId", "nanoid", "client"];
+export declare const MOCK_DATA_OPERATIONS: readonly ["insert", "find", "findOne", "update", "delete", "count", "upsert"];
+export declare const MOCK_RESOURCE_ENDPOINTS: readonly ["list", "get", "create", "replace", "patch", "delete"];
+/** Faker hints offered by editors (any `$random*` token also works). */
+export declare const MOCK_FAKER_HINTS: readonly ["$randomFirstName", "$randomLastName", "$randomFullName", "$randomUserName", "$randomEmail", "$randomPhoneNumber", "$randomPassword", "$randomUUID", "$randomInt", "$randomPrice", "$randomBoolean", "$randomCity", "$randomCountry", "$randomCountryCode", "$randomStreetAddress", "$randomZipCode", "$randomLatitude", "$randomLongitude", "$randomCompanyName", "$randomJobTitle", "$randomDepartment", "$randomProductName", "$randomProduct", "$randomCurrencyCode", "$randomColor", "$randomWord", "$randomWords", "$randomSentence", "$randomParagraph", "$randomUrl", "$randomDomainName", "$randomIP", "$randomImageUrl", "$randomDatePast", "$randomDateRecent", "$randomDateFuture", "$isoTimestamp", "$timestamp"];
+/** Paths under this prefix are reserved for the engine's control endpoints. */
+export declare const MOCK_CONTROL_PREFIX = "/__callman";
+export declare const MOCK_SESSION_HEADER = "x-mock-session";
+export declare const MOCK_SESSION_ID_PATTERN: RegExp;
+export declare const MOCK_DEFAULT_NAMESPACE = "_";
+export declare const MOCK_FIELD_NAME_PATTERN: RegExp;
+export declare const MOCK_RESOURCE_NAME_PATTERN: RegExp;
+export declare const DEFAULT_MOCK_ENGINE_LIMITS: MockEngineLimits;
+/** Desktop defaults: one user's own machine, so larger. */
+export declare const DESKTOP_MOCK_ENGINE_LIMITS: MockEngineLimits;
+/** Hard ceilings the definition validator applies regardless of host limits. */
+export declare const MOCK_DEFINITION_LIMITS: {
+    readonly maxRoutes: 500;
+    readonly maxResources: 50;
+    readonly maxFieldsPerResource: 100;
+    readonly maxVariantsPerRoute: 20;
+    readonly maxMatchRules: 10;
+    readonly maxFaultRules: 20;
+    readonly maxSeedRecords: 5000;
+};
+//# sourceMappingURL=constants.d.ts.map

package/dist/mock-engine/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../src/mock-engine/constants.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,gBAAgB,EAAiC,MAAM,YAAY,CAAC;AAElF,eAAO,MAAM,gBAAgB,yHAYgB,CAAC;AAE9C,eAAO,MAAM,kBAAkB,kEAMe,CAAC;AAE/C,eAAO,MAAM,oBAAoB,+EAAgF,CAAC;AAElH,eAAO,MAAM,uBAAuB,kEAAmE,CAAC;AAExG,wEAAwE;AACxE,eAAO,MAAM,gBAAgB,0sBAuCnB,CAAC;AAEX,+EAA+E;AAC/E,eAAO,MAAM,mBAAmB,eAAe,CAAC;AAEhD,eAAO,MAAM,mBAAmB,mBAAmB,CAAC;AAEpD,eAAO,MAAM,uBAAuB,QAA4B,CAAC;AAEjE,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAE1C,eAAO,MAAM,uBAAuB,QAAkC,CAAC;AAEvE,eAAO,MAAM,0BAA0B,QAA+B,CAAC;AAEvE,eAAO,MAAM,0BAA0B,EAAE,gBAiBxC,CAAC;AAEF,2DAA2D;AAC3D,eAAO,MAAM,0BAA0B,EAAE,gBASxC,CAAC;AAEF,gFAAgF;AAChF,eAAO,MAAM,sBAAsB;;;;;;;;CAQzB,CAAC"}

package/dist/mock-engine/constants.js

@@ -0,0 +1,113 @@
+// Shared vocabularies and defaults. The MCP builds its zod enums from these
+// tuples and the desktop builds its pickers from them, so every client speaks
+// exactly the words the engine understands.
+export const MOCK_FIELD_TYPES = [
+    "string",
+    "number",
+    "integer",
+    "boolean",
+    "object",
+    "array",
+    "date",
+    "datetime",
+    "email",
+    "uuid",
+    "password",
+];
+export const MOCK_ID_STRATEGIES = [
+    "uuid",
+    "incremental",
+    "objectId",
+    "nanoid",
+    "client",
+];
+export const MOCK_DATA_OPERATIONS = ["insert", "find", "findOne", "update", "delete", "count", "upsert"];
+export const MOCK_RESOURCE_ENDPOINTS = ["list", "get", "create", "replace", "patch", "delete"];
+/** Faker hints offered by editors (any `$random*` token also works). */
+export const MOCK_FAKER_HINTS = [
+    "$randomFirstName",
+    "$randomLastName",
+    "$randomFullName",
+    "$randomUserName",
+    "$randomEmail",
+    "$randomPhoneNumber",
+    "$randomPassword",
+    "$randomUUID",
+    "$randomInt",
+    "$randomPrice",
+    "$randomBoolean",
+    "$randomCity",
+    "$randomCountry",
+    "$randomCountryCode",
+    "$randomStreetAddress",
+    "$randomZipCode",
+    "$randomLatitude",
+    "$randomLongitude",
+    "$randomCompanyName",
+    "$randomJobTitle",
+    "$randomDepartment",
+    "$randomProductName",
+    "$randomProduct",
+    "$randomCurrencyCode",
+    "$randomColor",
+    "$randomWord",
+    "$randomWords",
+    "$randomSentence",
+    "$randomParagraph",
+    "$randomUrl",
+    "$randomDomainName",
+    "$randomIP",
+    "$randomImageUrl",
+    "$randomDatePast",
+    "$randomDateRecent",
+    "$randomDateFuture",
+    "$isoTimestamp",
+    "$timestamp",
+];
+/** Paths under this prefix are reserved for the engine's control endpoints. */
+export const MOCK_CONTROL_PREFIX = "/__callman";
+export const MOCK_SESSION_HEADER = "x-mock-session";
+export const MOCK_SESSION_ID_PATTERN = /^[A-Za-z0-9._:-]{1,64}$/;
+export const MOCK_DEFAULT_NAMESPACE = "_";
+export const MOCK_FIELD_NAME_PATTERN = /^[A-Za-z_][A-Za-z0-9_]{0,63}$/;
+export const MOCK_RESOURCE_NAME_PATTERN = /^[a-z][a-zA-Z0-9_-]{0,39}$/;
+export const DEFAULT_MOCK_ENGINE_LIMITS = {
+    maxRecordsPerResource: 1_000,
+    maxRecordsPerNamespace: 5_000,
+    maxRecordBytes: 16_384,
+    maxSessions: 20,
+    sessionIdleTtlMs: 60 * 60 * 1000,
+    maxDataOpsPerRequest: 25,
+    maxResponseBodyBytes: 102_400,
+    maxDelayMs: 60_000,
+    maxPageSize: 1_000,
+    maxFilterClauses: 20,
+    maxInValues: 100,
+    maxExpand: 3,
+    maxEmbedPerParent: 100,
+    maxCascadeDepth: 3,
+    maxCascadeRecords: 1_000,
+    maxSeedGenerate: 1_000,
+};
+/** Desktop defaults: one user's own machine, so larger. */
+export const DESKTOP_MOCK_ENGINE_LIMITS = {
+    ...DEFAULT_MOCK_ENGINE_LIMITS,
+    maxRecordsPerResource: 10_000,
+    maxRecordsPerNamespace: 50_000,
+    maxRecordBytes: 65_536,
+    maxSessions: 50,
+    maxDataOpsPerRequest: 50,
+    maxDelayMs: 30_000,
+    maxSeedGenerate: 5_000,
+};
+/** Hard ceilings the definition validator applies regardless of host limits. */
+export const MOCK_DEFINITION_LIMITS = {
+    maxRoutes: 500,
+    maxResources: 50,
+    maxFieldsPerResource: 100,
+    maxVariantsPerRoute: 20,
+    maxMatchRules: 10,
+    maxFaultRules: 20,
+    maxSeedRecords: 5_000,
+};
+//# sourceMappingURL=constants.js.map

package/dist/mock-engine/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../src/mock-engine/constants.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,8EAA8E;AAC9E,4CAA4C;AAI5C,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,SAAS;IACT,QAAQ;IACR,OAAO;IACP,MAAM;IACN,UAAU;IACV,OAAO;IACP,MAAM;IACN,UAAU;CACiC,CAAC;AAE9C,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,MAAM;IACN,aAAa;IACb,UAAU;IACV,QAAQ;IACR,QAAQ;CACoC,CAAC;AAE/C,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAU,CAAC;AAElH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAU,CAAC;AAExG,wEAAwE;AACxE,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,kBAAkB;IAClB,iBAAiB;IACjB,iBAAiB;IACjB,iBAAiB;IACjB,cAAc;IACd,oBAAoB;IACpB,iBAAiB;IACjB,aAAa;IACb,YAAY;IACZ,cAAc;IACd,gBAAgB;IAChB,aAAa;IACb,gBAAgB;IAChB,oBAAoB;IACpB,sBAAsB;IACtB,gBAAgB;IAChB,iBAAiB;IACjB,kBAAkB;IAClB,oBAAoB;IACpB,iBAAiB;IACjB,mBAAmB;IACnB,oBAAoB;IACpB,gBAAgB;IAChB,qBAAqB;IACrB,cAAc;IACd,aAAa;IACb,cAAc;IACd,iBAAiB;IACjB,kBAAkB;IAClB,YAAY;IACZ,mBAAmB;IACnB,WAAW;IACX,iBAAiB;IACjB,iBAAiB;IACjB,mBAAmB;IACnB,mBAAmB;IACnB,eAAe;IACf,YAAY;CACJ,CAAC;AAEX,+EAA+E;AAC/E,MAAM,CAAC,MAAM,mBAAmB,GAAG,YAAY,CAAC;AAEhD,MAAM,CAAC,MAAM,mBAAmB,GAAG,gBAAgB,CAAC;AAEpD,MAAM,CAAC,MAAM,uBAAuB,GAAG,yBAAyB,CAAC;AAEjE,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAE1C,MAAM,CAAC,MAAM,uBAAuB,GAAG,+BAA+B,CAAC;AAEvE,MAAM,CAAC,MAAM,0BAA0B,GAAG,4BAA4B,CAAC;AAEvE,MAAM,CAAC,MAAM,0BAA0B,GAAqB;IAC1D,qBAAqB,EAAE,KAAK;IAC5B,sBAAsB,EAAE,KAAK;IAC7B,cAAc,EAAE,MAAM;IACtB,WAAW,EAAE,EAAE;IACf,gBAAgB,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI;IAChC,oBAAoB,EAAE,EAAE;IACxB,oBAAoB,EAAE,OAAO;IAC7B,UAAU,EAAE,MAAM;IAClB,WAAW,EAAE,KAAK;IAClB,gBAAgB,EAAE,EAAE;IACpB,WAAW,EAAE,GAAG;IAChB,SAAS,EAAE,CAAC;IACZ,iBAAiB,EAAE,GAAG;IACtB,eAAe,EAAE,CAAC;IAClB,iBAAiB,EAAE,KAAK;IACxB,eAAe,EAAE,KAAK;CACvB,CAAC;AAEF,2DAA2D;AAC3D,MAAM,CAAC,MAAM,0BAA0B,GAAqB;IAC1D,GAAG,0BAA0B;IAC7B,qBAAqB,EAAE,MAAM;IAC7B,sBAAsB,EAAE,MAAM;IAC9B,cAAc,EAAE,MAAM;IACtB,WAAW,EAAE,EAAE;IACf,oBAAoB,EAAE,EAAE;IACxB,UAAU,EAAE,MAAM;IAClB,eAAe,EAAE,KAAK;CACvB,CAAC;AAEF,gFAAgF;AAChF,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,SAAS,EAAE,GAAG;IACd,YAAY,EAAE,EAAE;IAChB,oBAAoB,EAAE,GAAG;IACzB,mBAAmB,EAAE,EAAE;IACvB,aAAa,EAAE,EAAE;IACjB,aAAa,EAAE,EAAE;IACjB,cAAc,EAAE,KAAK;CACb,CAAC"}

package/dist/mock-engine/context.d.ts

@@ -0,0 +1,17 @@
+import type { MockCallCounters, MockClock, MockCryptoPort, MockEngineContext, MockEngineLimits, MockRandomSource } from "./types.js";
+export declare const systemClock: MockClock;
+export declare const cryptoRandom: MockRandomSource;
+/** Deterministic PRNG (mulberry32) seeded by a string — seeds and tests. */
+export declare const seededRandom: (seed: string) => MockRandomSource;
+export declare const createMemoryCounters: () => MockCallCounters;
+export declare const webCryptoPort: MockCryptoPort;
+export interface CreateEngineContextInput extends Partial<Omit<MockEngineContext, "mockId" | "limits">> {
+    mockId: string;
+    limits?: Partial<MockEngineLimits>;
+}
+export declare const createMockEngineContext: (input: CreateEngineContextInput) => MockEngineContext;
+/** Wrap a store so one request cannot run more than `max` store operations. */
+export declare class MockOpBudgetExceeded extends Error {
+    constructor();
+}
+//# sourceMappingURL=context.d.ts.map

package/dist/mock-engine/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/mock-engine/context.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EACV,gBAAgB,EAChB,SAAS,EACT,cAAc,EACd,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,EAEjB,MAAM,YAAY,CAAC;AAEpB,eAAO,MAAM,WAAW,EAAE,SAAqC,CAAC;AAQhE,eAAO,MAAM,YAAY,EAAE,gBAM1B,CAAC;AAEF,4EAA4E;AAC5E,eAAO,MAAM,YAAY,GAAI,MAAM,MAAM,KAAG,gBAgB3C,CAAC;AAEF,eAAO,MAAM,oBAAoB,QAAO,gBAoBvC,CAAC;AAKF,eAAO,MAAM,aAAa,EAAE,cAc3B,CAAC;AAEF,MAAM,WAAW,wBAAyB,SAAQ,OAAO,CAAC,IAAI,CAAC,iBAAiB,EAAE,QAAQ,GAAG,QAAQ,CAAC,CAAC;IACrG,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;CACpC;AAED,eAAO,MAAM,uBAAuB,GAAI,OAAO,wBAAwB,KAAG,iBAQxE,CAAC;AAEH,+EAA+E;AAC/E,qBAAa,oBAAqB,SAAQ,KAAK;;CAK9C"}