@jaypie/express 1.2.31 → 1.2.33

package/dist/cjs/adapter/headers.helper.d.ts

@@ -0,0 +1,15 @@
+export declare const SET_COOKIE = "set-cookie";
+/**
+ * Normalize a header value for storage, preserving arrays.
+ * Node's ServerResponse keeps multi-value headers as arrays; stringifying
+ * here would fold them into a single comma-separated value.
+ */
+export declare function normalizeHeaderValue(value: number | string | string[]): string | string[];
+/**
+ * Split stored headers into a single-value header record and a cookies
+ * array, matching the Lambda Function URL (v2) response shape.
+ */
+export declare function splitCookieHeaders(source: Map<string, string | string[]>): {
+    cookies: string[];
+    headers: Record<string, string>;
+};

package/dist/cjs/adapter/types.d.ts

@@ -82,6 +82,7 @@ export interface ResponseStream {
     write(chunk: string | Uint8Array): void;
 }
 export interface HttpResponseStreamMetadata {
+    cookies?: string[];
     headers: Record<string, string>;
     statusCode: number;
 }

package/dist/cjs/index.cjs

@@ -278,6 +278,50 @@ function createLambdaRequest(event, context) {
     });
 }
 
+//
+//
+// Constants
+//
+// Set-Cookie is the one header that must never be comma-folded: cookie
+// expiry dates contain commas, so a folded value is unparseable. Lambda
+// carries these out-of-band in the `cookies` field of the v2 response
+// payload and of the response-streaming metadata prelude.
+const SET_COOKIE = "set-cookie";
+//
+//
+// Functions
+//
+/**
+ * Normalize a header value for storage, preserving arrays.
+ * Node's ServerResponse keeps multi-value headers as arrays; stringifying
+ * here would fold them into a single comma-separated value.
+ */
+function normalizeHeaderValue(value) {
+    return Array.isArray(value) ? value.map(String) : String(value);
+}
+/**
+ * Split stored headers into a single-value header record and a cookies
+ * array, matching the Lambda Function URL (v2) response shape.
+ */
+function splitCookieHeaders(source) {
+    const cookies = [];
+    const headers = {};
+    for (const [key, value] of source) {
+        if (key === SET_COOKIE) {
+            if (Array.isArray(value)) {
+                cookies.push(...value);
+            }
+            else {
+                cookies.push(value);
+            }
+        }
+        else {
+            headers[key] = Array.isArray(value) ? value.join(", ") : String(value);
+        }
+    }
+    return { cookies, headers };
+}
+
 //
 //
 // Constants
@@ -415,13 +459,14 @@ class LambdaResponseBuffered extends node_stream.Writable {
             return this;
         }
         const lowerName = name.toLowerCase();
-        this._headers.set(lowerName, String(value));
+        const normalized = normalizeHeaderValue(value);
+        this._headers.set(lowerName, normalized);
         // Sync with kOutHeaders for dd-trace compatibility
         // Node stores as { 'header-name': ['Header-Name', value] }
         if (kOutHeaders$1) {
             const outHeaders = this[kOutHeaders$1];
             if (outHeaders) {
-                outHeaders[lowerName] = [name, String(value)];
+                outHeaders[lowerName] = [name, normalized];
             }
         }
         return this;
@@ -509,7 +554,7 @@ class LambdaResponseBuffered extends node_stream.Writable {
             // Use direct _headers access to bypass dd-trace interception
             for (const [key, value] of Object.entries(headersToSet)) {
                 if (value !== undefined) {
-                    this._headers.set(key.toLowerCase(), String(value));
+                    this._headers.set(key.toLowerCase(), normalizeHeaderValue(value));
                 }
             }
         }
@@ -537,7 +582,7 @@ class LambdaResponseBuffered extends node_stream.Writable {
      */
     set(name, value) {
         if (!this._headersSent) {
-            this._headers.set(name.toLowerCase(), String(value));
+            this._headers.set(name.toLowerCase(), normalizeHeaderValue(value));
         }
         return this;
     }
@@ -607,23 +652,8 @@ class LambdaResponseBuffered extends node_stream.Writable {
         const contentType = this._headers.get("content-type") || "";
         // Determine if response should be base64 encoded
         const isBase64Encoded = this.isBinaryContentType(contentType);
-        // Build headers object
-        const headers = {};
-        const cookies = [];
-        for (const [key, value] of this._headers) {
-            if (key === "set-cookie") {
-                // Collect Set-Cookie headers for v2 response format
-                if (Array.isArray(value)) {
-                    cookies.push(...value);
-                }
-                else {
-                    cookies.push(value);
-                }
-            }
-            else {
-                headers[key] = Array.isArray(value) ? value.join(", ") : String(value);
-            }
-        }
+        // Build headers object, carrying Set-Cookie out-of-band (v2 format)
+        const { cookies, headers } = splitCookieHeaders(this._headers);
         const result = {
             body: isBase64Encoded ? body.toString("base64") : body.toString("utf8"),
             headers,
@@ -756,13 +786,14 @@ class LambdaResponseStreaming extends node_stream.Writable {
             return this;
         }
         const lowerName = name.toLowerCase();
-        this._headers.set(lowerName, String(value));
+        const normalized = normalizeHeaderValue(value);
+        this._headers.set(lowerName, normalized);
         // Sync with kOutHeaders for dd-trace compatibility
         // Node stores as { 'header-name': ['Header-Name', value] }
         if (kOutHeaders) {
             const outHeaders = this[kOutHeaders];
             if (outHeaders) {
-                outHeaders[lowerName] = [name, String(value)];
+                outHeaders[lowerName] = [name, normalized];
             }
         }
         return this;
@@ -857,7 +888,7 @@ class LambdaResponseStreaming extends node_stream.Writable {
             // Use direct _headers access to bypass dd-trace interception
             for (const [key, value] of Object.entries(headersToSet)) {
                 if (value !== undefined) {
-                    this._headers.set(key.toLowerCase(), String(value));
+                    this._headers.set(key.toLowerCase(), normalizeHeaderValue(value));
                 }
             }
         }
@@ -871,10 +902,8 @@ class LambdaResponseStreaming extends node_stream.Writable {
         if (this._headersSent) {
             return;
         }
-        const headers = {};
-        for (const [key, value] of this._headers) {
-            headers[key] = Array.isArray(value) ? value.join(", ") : String(value);
-        }
+        // Set-Cookie travels in metadata.cookies, never folded into headers
+        const { cookies, headers } = splitCookieHeaders(this._headers);
         // Lambda streaming requires body content for metadata to be transmitted.
         // Convert 204 No Content to 200 OK with empty JSON body as workaround.
         // See: https://github.com/finlaysonstudio/jaypie/issues/178
@@ -889,6 +918,10 @@ class LambdaResponseStreaming extends node_stream.Writable {
             headers,
             statusCode,
         };
+        // Only include cookies if present (v2 format)
+        if (cookies.length > 0) {
+            metadata.cookies = cookies;
+        }
         // Create wrapped stream with metadata
         this._wrappedStream = awslambda.HttpResponseStream.from(this._responseStream, metadata);
         this._headersSent = true;
@@ -917,7 +950,7 @@ class LambdaResponseStreaming extends node_stream.Writable {
      */
     set(name, value) {
         if (!this._headersSent) {
-            this._headers.set(name.toLowerCase(), String(value));
+            this._headers.set(name.toLowerCase(), normalizeHeaderValue(value));
         }
         return this;
     }
@@ -1757,7 +1790,6 @@ function safeSend(res, statusCode, body) {
     }
 }
 function expressHandler(handlerOrOptions, optionsOrHandler) {
-    /* eslint-enable no-redeclare */
     let handler;
     let options;
     // If handler is an object and options is a function, swap them
@@ -2174,7 +2206,6 @@ function getErrorBody(error) {
         : new errors.UnhandledError().body();
 }
 function expressStreamHandler(handlerOrOptions, optionsOrHandler) {
-    /* eslint-enable no-redeclare */
     let handler;
     let options;
     // If handler is an object and options is a function, swap them