@xcelera/cli 2.2.2 → 2.3.0

package/dist/cli.js

@@ -62,7 +62,7 @@ function isNetworkError(error) {
 	return errorMessages.has(message);
 }
 
-async function requestAudit(url, token, context) {
+async function requestAudit(url, token, context, auth) {
     const apiUrl = `${getApiBaseUrl()}/api/v1/audit`;
     try {
         const response = await fetch(apiUrl, {
@@ -73,7 +73,8 @@ async function requestAudit(url, token, context) {
             },
             body: JSON.stringify({
                 url,
-                context
+                context,
+                ...(auth && { auth })
             })
         });
         if (!response.ok) {
@@ -105,6 +106,7 @@ async function requestAudit(url, token, context) {
         throw error;
     }
 }
+/* istanbul ignore next */
 function getApiBaseUrl() {
     if (process.env.NODE_ENV === 'development') {
         return 'http://localhost:3000';
@@ -9338,13 +9340,18 @@ async function inferBuildContext() {
     };
 }
 
-async function runAuditCommand(url, token) {
+async function runAuditCommand(url, token, authOptions) {
     const output = [];
     const errors = [];
     try {
         const buildContext = await inferBuildContext();
         output.push(...formatBuildContext(buildContext));
-        const response = await requestAudit(url, token, buildContext);
+        const auth = parseAuthCredentials(authOptions);
+        if (auth) {
+            output.push('🔐 Authentication credentials detected');
+            output.push('');
+        }
+        const response = await requestAudit(url, token, buildContext, auth);
         if (!response.success) {
             const { message, details } = response.error;
             errors.push('❌ Unable to schedule audit :(');
@@ -9436,6 +9443,59 @@ function formatGitHubIntegrationStatus(context) {
     }
     return { output, errors };
 }
+function parseAuthCredentials(options) {
+    const envAuth = process.env.XCELERA_AUTH;
+    if (envAuth) {
+        try {
+            return JSON.parse(envAuth);
+        }
+        catch {
+            throw new Error('XCELERA_AUTH environment variable contains invalid JSON');
+        }
+    }
+    // Check for --auth JSON option
+    if (options?.authJson) {
+        try {
+            return JSON.parse(options.authJson);
+        }
+        catch {
+            throw new Error('--auth option contains invalid JSON');
+        }
+    }
+    // Build auth from --cookie and --header options
+    const hasCookies = options?.cookies && options.cookies.length > 0;
+    const hasHeaders = options?.headers && options.headers.length > 0;
+    if (!hasCookies && !hasHeaders) {
+        return undefined;
+    }
+    const auth = {};
+    if (hasCookies && options.cookies) {
+        auth.cookies = options.cookies.map(parseCookie);
+    }
+    if (hasHeaders && options.headers) {
+        auth.headers = {};
+        for (const header of options.headers) {
+            const colonIndex = header.indexOf(':');
+            if (colonIndex === -1) {
+                throw new Error(`Invalid header format: "${header}". Expected "Name: Value"`);
+            }
+            const name = header.slice(0, colonIndex).trim();
+            const value = header.slice(colonIndex + 1).trim();
+            auth.headers[name] = value;
+        }
+    }
+    return auth;
+}
+function parseCookie(cookie) {
+    const equalsIndex = cookie.indexOf('=');
+    if (equalsIndex === -1) {
+        throw new Error(`Invalid cookie format: "${cookie}". Expected "name=value"`);
+    }
+    return {
+        name: cookie.slice(0, equalsIndex),
+        value: cookie.slice(equalsIndex + 1)
+    };
+}
 
 /* istanbul ignore file */
 const options = {
@@ -9447,6 +9507,17 @@ const options = {
         type: 'string',
         required: true,
         default: process.env.XCELERA_TOKEN
+    },
+    auth: {
+        type: 'string'
+    },
+    cookie: {
+        type: 'string',
+        multiple: true
+    },
+    header: {
+        type: 'string',
+        multiple: true
     }
 };
 const { positionals, values } = parseArgs({
@@ -9469,7 +9540,7 @@ if (command !== 'audit') {
     printHelp();
     process.exit(1);
 }
-const { url, token } = values;
+const { url, token, auth, cookie, header } = values;
 if (!url) {
     console.error('URL is required. Use --url <url> to specify the URL to audit.');
     process.exit(1);
@@ -9478,17 +9549,48 @@ if (!token) {
     console.error('A token is required. Use --token or set XCELERA_TOKEN environment variable.');
     process.exit(1);
 }
-const result = await runAuditCommand(url, token);
+const result = await runAuditCommand(url, token, {
+    authJson: auth,
+    cookies: cookie,
+    headers: header
+});
 result.output.forEach((line) => console.log(line));
 result.errors.forEach((line) => console.error(line));
 process.exit(result.exitCode);
 function printHelp() {
-    console.log('Usage: xcelera audit --url <url> [--token <token>]');
+    console.log('Usage: xcelera audit --url <url> [options]');
     console.log('');
     console.log('Options:');
-    console.log('  --token <token>  The xcelera API token to use for authentication.');
-    console.log('Can also be set with the XCELERA_TOKEN environment variable.');
-    console.log('  --url <url>      The URL to audit.');
+    console.log('  --token <token>    The xcelera API token.');
+    console.log('                     Can also be set with XCELERA_TOKEN env var.');
+    console.log('  --url <url>        The URL to audit.');
+    console.log('');
+    console.log('Authentication (for pages behind login):');
+    console.log('  --cookie <cookie>  Cookie in "name=value" format.');
+    console.log('                     Can be specified multiple times.');
+    console.log('  --header <header>  Header in "Name: Value" format.');
+    console.log('                     Can be specified multiple times.');
+    console.log('  --auth <json>      Full auth config as JSON.');
+    console.log('                     Can also be set with XCELERA_AUTH env var.');
+    console.log('');
+    console.log('Examples:');
+    console.log('  # Basic audit');
+    console.log('  xcelera audit --url https://example.com');
+    console.log('');
+    console.log('  # With session cookie');
+    console.log('  xcelera audit --url https://myapp.com/dashboard --cookie "session=abc123"');
+    console.log('');
+    console.log('  # With bearer token');
+    console.log('  xcelera audit --url https://api.myapp.com/admin \\');
+    console.log('    --header "Authorization: Bearer eyJhbG..."');
+    console.log('');
+    console.log('  # Multiple cookies');
+    console.log('  xcelera audit --url https://myapp.com/dashboard \\');
+    console.log('    --cookie "session=abc123" --cookie "csrf=xyz"');
+    console.log('');
+    console.log('  # Full auth JSON (multiple cookies and headers)');
+    console.log('  xcelera audit --url https://myapp.com/dashboard \\');
+    console.log('    --auth \'{"cookies":[{"name":"session","value":"abc123"}],"headers":{"X-Custom":"value"}}\'');
     console.log('');
 }
 //# sourceMappingURL=cli.js.map