If the sapi is cli-server, and the request path matches a file in public/, decline the request so that the built-in webserver can pass through the file contents itself.