wirl 0.2.5 → 0.2.6

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wirl",
-  "version": "0.2.5",
+  "version": "0.2.6",
   "description": "Deploy an internal app somewhere real, privately. One command; sharing by email; API keys declared, never pasted.",
   "keywords": [
     "deploy",

package/serve-module.mjs

@@ -315,6 +315,7 @@ var handler = loaded?.default?.fetch;
 if (typeof handler !== "function") die(`${modulePath} has no default export with a fetch.`);
 var localDb = process.env.WIRL_LOCAL_DB;
 var env = localDb ? { DB: createLocalDatabase(localDb) } : {};
+if (process.env.WIRL_DEPLOYMENT) env.WIRL_DEPLOYMENT = process.env.WIRL_DEPLOYMENT;
 var devIdentity = null;
 if (process.env.WIRL_DEV_IDENTITY) {
   try {
@@ -326,6 +327,7 @@ if (process.env.WIRL_DEV_IDENTITY) {
 var SCHEDULE_PREFIX = "/__wirl/schedule/";
 var FLOW_PREFIX = "/__wirl/flow/";
 var FLOW_ONLY_HEADERS = ["x-wirl-flow", "x-wirl-step", "x-wirl-n", "x-wirl-idempotency-key"];
+var OWNER_EMAIL_HEADER = "x-wirl-app-owner-email";
 var STEP_WORD = /^[A-Za-z0-9_-]{1,100}$/;
 function flowStepOf(body) {
   let posted = null;
@@ -345,15 +347,25 @@ function idempotencyKeyOf(appId, { run, n, step }) {
 var VISITOR_HEADERS = ["x-wirl-user-id", "x-wirl-user-email", "x-wirl-user-name", "x-wirl-role"];
 var publicPaths = [];
 if (process.env.WIRL_DEV_PUBLIC_PATHS) {
+  let given;
   try {
-    publicPaths = JSON.parse(process.env.WIRL_DEV_PUBLIC_PATHS);
+    given = JSON.parse(process.env.WIRL_DEV_PUBLIC_PATHS);
   } catch {
     die("WIRL_DEV_PUBLIC_PATHS is not valid JSON.");
   }
+  publicPaths = (Array.isArray(given) ? given : []).flatMap((entry) => {
+    if (typeof entry === "string") return [{ path: entry, verify: null }];
+    if (entry !== null && typeof entry === "object" && typeof entry.path === "string") {
+      const verify = typeof entry.verify === "string" && entry.verify !== "" && entry.verify !== "none" ? entry.verify : null;
+      return [{ path: entry.path, verify }];
+    }
+    return [];
+  });
 }
-var isPublicPath = (pathname) => publicPaths.some(
-  (path) => path.endsWith("/*") ? pathname.startsWith(path.slice(0, -1)) : pathname === path
-);
+var publicPathFor = (pathname) => publicPaths.find(
+  ({ path }) => path.endsWith("/*") ? pathname.startsWith(path.slice(0, -1)) : pathname === path
+) ?? null;
+var isPublicPath = (pathname) => publicPathFor(pathname) !== null;
 var staticFiles = null;
 if (process.env.WIRL_DEV_STATIC) {
   try {
@@ -455,11 +467,16 @@ createServer(async (incoming, outgoing) => {
       const pathname = (incoming.url ?? "/").split("?")[0] ?? "/";
       let flowStep = null;
       for (const name of FLOW_ONLY_HEADERS) headers.delete(name);
+      headers.delete(OWNER_EMAIL_HEADER);
+      headers.delete("x-wirl-dev");
+      headers.delete("x-wirl-verified");
+      const ownerEmail = typeof devIdentity.email === "string" ? devIdentity.email : "";
       if (pathname.startsWith(SCHEDULE_PREFIX)) {
         for (const name of VISITOR_HEADERS) headers.set(name, "");
         headers.set("x-wirl-schedule", pathname.slice(SCHEDULE_PREFIX.length));
         headers.set("x-wirl-run", "dev");
         headers.set("x-wirl-attempt", "1");
+        if (ownerEmail !== "") headers.set(OWNER_EMAIL_HEADER, ownerEmail);
       } else if (pathname.startsWith(FLOW_PREFIX)) {
         for (const name of VISITOR_HEADERS) headers.set(name, "");
         flowStep = flowStepOf(Buffer.concat(chunks));
@@ -468,9 +485,14 @@ createServer(async (incoming, outgoing) => {
         headers.set("x-wirl-step", flowStep.step);
         headers.set("x-wirl-n", String(flowStep.n));
         headers.set("x-wirl-attempt", String(flowStep.attempt));
+        if (ownerEmail !== "") headers.set(OWNER_EMAIL_HEADER, ownerEmail);
       } else if (isPublicPath(pathname)) {
         for (const name of VISITOR_HEADERS) headers.set(name, "");
         headers.set("x-wirl-public", "1");
+        const { verify } = publicPathFor(pathname);
+        if (verify !== null) headers.set("x-wirl-verified", verify);
+        else headers.delete("x-wirl-verified");
+        headers.set("x-wirl-dev", "1");
       } else {
         fillIn("x-wirl-user-id", devIdentity.userId ?? "");
         fillIn("x-wirl-user-email", devIdentity.email ?? "");