@xdelivered/emberflow 0.2.0

package/dist/server/authAttach.js

@@ -0,0 +1,79 @@
+/**
+ * Attaches a captured credential value onto a headers object for a run.
+ * Pure and non-mutating: returns a NEW headers object.
+ * Additive + non-destructive — if the target header/cookie-name is already
+ * present, the input is returned unchanged (caller-explicit wins).
+ */
+export function attachCredential(headers, attach, value) {
+    const attachedValue = attach.prefix ? `${attach.prefix}${value}` : value;
+    if (attach.as === 'cookie') {
+        const existingCookie = typeof headers['cookie'] === 'string' ? headers['cookie'] : undefined;
+        if (existingCookie !== undefined && hasCookieName(existingCookie, attach.name)) {
+            return headers;
+        }
+        const nextCookie = existingCookie
+            ? `${existingCookie}; ${attach.name}=${attachedValue}`
+            : `${attach.name}=${attachedValue}`;
+        return { ...headers, cookie: nextCookie };
+    }
+    const headerKey = attach.name.toLowerCase();
+    const existing = Object.keys(headers).find((k) => k.toLowerCase() === headerKey);
+    if (existing !== undefined) {
+        return headers;
+    }
+    return { ...headers, [headerKey]: attachedValue };
+}
+function hasCookieName(cookieHeader, name) {
+    return cookieHeader
+        .split(';')
+        .map((pair) => pair.trim().split('=')[0])
+        .some((cookieName) => cookieName === name);
+}
+/**
+ * Extracts a captured credential value from a login response.
+ * Pure with respect to its inputs (no I/O of its own) — the caller performs
+ * the actual fetch and passes in the response-like object.
+ */
+export async function captureCredential(res, capture) {
+    if (capture.from === 'set-cookie') {
+        const single = res.headers.get('set-cookie');
+        const lines = res.headers.getSetCookie?.() ?? (single ? [single] : []);
+        if (lines.length === 0) {
+            return null;
+        }
+        if (!capture.cookieName) {
+            const firstPair = lines[0]?.split(';')[0]?.trim();
+            return firstPair || null;
+        }
+        for (const line of lines) {
+            const firstPair = line.split(';')[0]?.trim();
+            if (!firstPair) {
+                continue;
+            }
+            const [cookieName, ...rest] = firstPair.split('=');
+            if (cookieName === capture.cookieName) {
+                return rest.join('=');
+            }
+        }
+        return null;
+    }
+    if (capture.from === 'json') {
+        const body = await res.json();
+        return readDotPath(body, capture.path);
+    }
+    return res.headers.get(capture.name);
+}
+function readDotPath(body, path) {
+    const segments = path.split('.');
+    let current = body;
+    for (const segment of segments) {
+        if (current === null || typeof current !== 'object') {
+            return null;
+        }
+        current = current[segment];
+    }
+    if (current === undefined || current === null) {
+        return null;
+    }
+    return String(current);
+}

package/dist/server/cli.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Runs a single CLI command in-process and resolves to a process exit code
+ * (0 success, non-zero on error) — never calls process.exit, so it's safe to
+ * drive from the register-API bin inside a sandbox (no `tsx` child spawn).
+ * `argv` is `[command, ...rest]`.
+ */
+export declare function runCli(argv: string[]): Promise<number>;