@xcelera/cli 2.3.1 → 3.0.0

package/dist/cli.js

@@ -62,7 +62,7 @@ function isNetworkError(error) {
 	return errorMessages.has(message);
 }
 
-async function requestAudit(url, token, context, auth) {
+async function requestAudit(ref, token, context, auth) {
     const apiUrl = `${getApiBaseUrl()}/api/v1/audit`;
     try {
         const response = await fetch(apiUrl, {
@@ -72,7 +72,7 @@ async function requestAudit(url, token, context, auth) {
                 Authorization: `Bearer ${token}`
             },
             body: JSON.stringify({
-                url,
+                ref,
                 context,
                 ...(auth && { auth })
             })
@@ -9338,24 +9338,99 @@ async function inferBuildContext() {
     };
 }
 
-async function runAuditCommand(url, token, authOptions) {
+function readNetscapeCookieFileSync(filePath, now = new Date()) {
+    try {
+        const contents = readFileSync(filePath, 'utf8');
+        return parseNetscapeCookieFileContents(contents, filePath, now);
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        throw new Error(`Unable to read cookie file "${filePath}": ${message}`);
+    }
+}
+function parseNetscapeCookieFileContents(contents, sourceLabel = 'cookie file', now = new Date()) {
+    const cookies = [];
+    const expiredCookieNames = [];
+    const nowEpochSeconds = Math.floor(now.getTime() / 1000);
+    const lines = contents.split(/\r?\n/);
+    for (let index = 0; index < lines.length; index++) {
+        const rawLine = lines[index];
+        const line = rawLine.trim();
+        if (!line) {
+            continue;
+        }
+        if (line.startsWith('#') && !line.startsWith('#HttpOnly_')) {
+            continue;
+        }
+        const fields = line.split('\t');
+        if (fields.length !== 7) {
+            throw new Error(`Invalid Netscape cookie line ${index + 1} in ${sourceLabel}: expected 7 tab-separated fields`);
+        }
+        let domain = fields[0];
+        const path = fields[2] || undefined;
+        const secure = toBool(fields[3]);
+        const expiresEpochSeconds = parseEpochSeconds(fields[4], index + 1, sourceLabel);
+        const name = fields[5];
+        const value = fields[6] ?? '';
+        let httpOnly;
+        if (domain.startsWith('#HttpOnly_')) {
+            httpOnly = true;
+            domain = domain.slice('#HttpOnly_'.length);
+        }
+        const isExpired = expiresEpochSeconds > 0 && expiresEpochSeconds < nowEpochSeconds;
+        if (isExpired) {
+            expiredCookieNames.push(name);
+            continue;
+        }
+        const cookie = {
+            name,
+            value,
+            ...(domain && { domain }),
+            ...(path && { path }),
+            ...(secure && { secure: true }),
+            ...(httpOnly && { httpOnly: true })
+        };
+        cookies.push(cookie);
+    }
+    const warnings = [];
+    if (expiredCookieNames.length > 0) {
+        const preview = expiredCookieNames.slice(0, 5).join(', ');
+        const suffix = expiredCookieNames.length > 5 ? ', …' : '';
+        warnings.push(`⚠️ Dropped ${expiredCookieNames.length} expired cookie(s) from ${sourceLabel}: ${preview}${suffix}`);
+    }
+    return { cookies, warnings };
+}
+function toBool(value) {
+    return value.trim().toUpperCase() === 'TRUE';
+}
+function parseEpochSeconds(value, lineNumber, sourceLabel) {
+    const trimmed = value.trim();
+    const num = Number.parseInt(trimmed, 10);
+    if (Number.isNaN(num)) {
+        throw new Error(`Invalid expiration epoch seconds at line ${lineNumber} in ${sourceLabel}`);
+    }
+    return num;
+}
+
+async function runAuditCommand(ref, token, authOptions) {
     const output = [];
     const errors = [];
     try {
         const buildContext = await inferBuildContext();
         output.push(...formatBuildContext(buildContext));
-        const auth = parseAuthCredentials(authOptions);
+        const { auth, warnings } = parseAuthCredentials(authOptions);
+        errors.push(...warnings);
         if (auth) {
             output.push('🔐 Authentication credentials detected');
             output.push('');
         }
-        const response = await requestAudit(url, token, buildContext, auth);
+        const response = await requestAudit(ref, token, buildContext, auth);
         if (!response.success) {
             const { message, details } = response.error;
             errors.push('❌ Unable to schedule audit :(');
             errors.push(` ↳ ${message}`);
             if (details) {
-                errors.push(` ↳ ${details}`);
+                errors.push(` ↳ ${JSON.stringify(details)}`);
             }
             return { exitCode: 1, output, errors };
         }
@@ -9442,35 +9517,26 @@ function formatGitHubIntegrationStatus(context) {
     return { output, errors };
 }
 function parseAuthCredentials(options) {
-    const envAuth = process.env.XCELERA_AUTH;
-    if (envAuth) {
-        try {
-            return JSON.parse(envAuth);
-        }
-        catch {
-            throw new Error('XCELERA_AUTH environment variable contains invalid JSON');
-        }
+    const warnings = [];
+    const cookies = [];
+    if (options?.cookieFile) {
+        const parsed = readNetscapeCookieFileSync(options.cookieFile);
+        warnings.push(...parsed.warnings);
+        cookies.push(...parsed.cookies);
     }
-    // Check for --auth JSON option
-    if (options?.authJson) {
-        try {
-            return JSON.parse(options.authJson);
-        }
-        catch {
-            throw new Error('--auth option contains invalid JSON');
-        }
+    if (options?.cookies && options.cookies.length > 0) {
+        cookies.push(...options.cookies.map(parseCookie));
     }
-    // Build auth from --cookie and --header options
-    const hasCookies = options?.cookies && options.cookies.length > 0;
     const hasHeaders = options?.headers && options.headers.length > 0;
+    const hasCookies = cookies.length > 0;
     if (!hasCookies && !hasHeaders) {
-        return undefined;
+        return { auth: undefined, warnings };
     }
     const auth = {};
-    if (hasCookies && options.cookies) {
-        auth.cookies = options.cookies.map(parseCookie);
+    if (hasCookies) {
+        auth.cookies = cookies;
     }
-    if (hasHeaders && options.headers) {
+    if (hasHeaders && options?.headers) {
         auth.headers = {};
         for (const header of options.headers) {
             const colonIndex = header.indexOf(':');
@@ -9482,7 +9548,7 @@ function parseAuthCredentials(options) {
             auth.headers[name] = value;
         }
     }
-    return auth;
+    return { auth, warnings };
 }
 function parseCookie(cookie) {
     const equalsIndex = cookie.indexOf('=');
@@ -9497,7 +9563,7 @@ function parseCookie(cookie) {
 
 /* istanbul ignore file */
 const options = {
-    url: {
+    ref: {
         type: 'string',
         required: true
     },
@@ -9506,7 +9572,7 @@ const options = {
         required: true,
         default: process.env.XCELERA_TOKEN
     },
-    auth: {
+    'cookie-file': {
         type: 'string'
     },
     cookie: {
@@ -9538,17 +9604,18 @@ if (command !== 'audit') {
     printHelp();
     process.exit(1);
 }
-const { url, token, auth, cookie, header } = values;
-if (!url) {
-    console.error('URL is required. Use --url <url> to specify the URL to audit.');
+const { ref, token, cookie, header } = values;
+const cookieFile = values['cookie-file'];
+if (!ref) {
+    console.error('Page ref is required. Use --ref <ref> to specify the page reference to audit. This can be found on the page definition in the xcelera dashboard.');
     process.exit(1);
 }
 if (!token) {
     console.error('A token is required. Use --token or set XCELERA_TOKEN environment variable.');
     process.exit(1);
 }
-const result = await runAuditCommand(url, token, {
-    authJson: auth,
+const result = await runAuditCommand(ref, token, {
+    cookieFile,
     cookies: cookie,
     headers: header
 });
@@ -9556,39 +9623,38 @@ result.output.forEach((line) => console.log(line));
 result.errors.forEach((line) => console.error(line));
 process.exit(result.exitCode);
 function printHelp() {
-    console.log('Usage: xcelera audit --url <url> [options]');
+    console.log('Usage: xcelera audit --ref <ref> [options]');
     console.log('');
     console.log('Options:');
     console.log('  --token <token>    The xcelera API token.');
     console.log('                     Can also be set with XCELERA_TOKEN env var.');
-    console.log('  --url <url>        The URL to audit.');
+    console.log('  --ref <ref>        The reference of the page to audit.');
     console.log('');
     console.log('Authentication (for pages behind login):');
     console.log('  --cookie <cookie>  Cookie in "name=value" format.');
     console.log('                     Can be specified multiple times.');
     console.log('  --header <header>  Header in "Name: Value" format.');
     console.log('                     Can be specified multiple times.');
-    console.log('  --auth <json>      Full auth config as JSON.');
-    console.log('                     Can also be set with XCELERA_AUTH env var.');
+    console.log('  --cookie-file <path> Netscape cookie file (cookies.txt).');
+    console.log('                     Expired cookies are ignored with a warning.');
     console.log('');
     console.log('Examples:');
     console.log('  # Basic audit');
-    console.log('  xcelera audit --url https://example.com');
+    console.log('  xcelera audit --ref example-page-xdfd');
     console.log('');
     console.log('  # With session cookie');
-    console.log('  xcelera audit --url https://myapp.com/dashboard --cookie "session=abc123"');
+    console.log('  xcelera audit --ref example-page-xdfd --cookie "session=abc123"');
     console.log('');
     console.log('  # With bearer token');
-    console.log('  xcelera audit --url https://api.myapp.com/admin \\');
+    console.log('  xcelera audit --ref example-page-xdfd \\');
     console.log('    --header "Authorization: Bearer eyJhbG..."');
     console.log('');
     console.log('  # Multiple cookies');
-    console.log('  xcelera audit --url https://myapp.com/dashboard \\');
+    console.log('  xcelera audit --ref example-page-xdfd \\');
     console.log('    --cookie "session=abc123" --cookie "csrf=xyz"');
     console.log('');
-    console.log('  # Full auth JSON (multiple cookies and headers)');
-    console.log('  xcelera audit --url https://myapp.com/dashboard \\');
-    console.log('    --auth \'{"cookies":[{"name":"session","value":"abc123"}],"headers":{"X-Custom":"value"}}\'');
+    console.log('  # With cookie file (Netscape cookies.txt format)');
+    console.log('  xcelera audit --ref example-page-xdfd --cookie-file ./cookies.txt');
     console.log('');
 }
 //# sourceMappingURL=cli.js.map