feat(shared): extract client/server pure helpers into @jerapah-flow/shared

Share profile merge, workflow filename/path helpers, HTTP_METHODS (with OPTIONS), and isPlainObject so web and server stop drifting. Core script sandboxes keep local isPlainObject copies.

Co-authored-by: Cursor <cursoragent@cursor.com>

packages/shared/package.json

@@ -0,0 +1,9 @@
+{
+  "name": "@jerapah-flow/shared",
+  "version": "0.1.0",
+  "private": true,
+  "type": "module",
+  "exports": {
+    ".": "./src/index.js"
+  }
+}

packages/shared/src/index.js

@@ -0,0 +1,4 @@
+export { isPlainObject } from "./is-plain-object.js";
+export { mergeProfileConfig, configHasOverlay } from "./profile-config.js";
+export { ensureWorkflowFilename, suggestCopyFilename } from "./workflow-filename.js";
+export { HTTP_METHODS, namespacedPath, hasWorkflowTrigger } from "./workflow-path.js";

packages/shared/src/is-plain-object.js

@@ -0,0 +1,3 @@
+export function isPlainObject(value) {
+  return value != null && typeof value === "object" && !Array.isArray(value);
+}

packages/shared/src/profile-config.js

@@ -0,0 +1,31 @@
+/**
+ * Shallow merge: step overlay keys replace profile defaults (including "").
+ * Nested objects/arrays are replaced, not deep-merged.
+ *
+ * @param {unknown} profileConfig
+ * @param {unknown} stepConfig
+ * @returns {Record<string, unknown>}
+ */
+export function mergeProfileConfig(profileConfig, stepConfig) {
+  const base =
+    profileConfig != null && typeof profileConfig === "object" && !Array.isArray(profileConfig)
+      ? { ...profileConfig }
+      : {};
+  if (stepConfig == null || typeof stepConfig !== "object" || Array.isArray(stepConfig)) {
+    return base;
+  }
+  return { ...base, ...stepConfig };
+}
+
+/**
+ * @param {unknown} config
+ * @returns {boolean}
+ */
+export function configHasOverlay(config) {
+  return (
+    config != null &&
+    typeof config === "object" &&
+    !Array.isArray(config) &&
+    Object.keys(config).length > 0
+  );
+}

packages/shared/src/workflow-filename.js

@@ -0,0 +1,27 @@
+export function ensureWorkflowFilename(file) {
+  const trimmed = String(file ?? "").trim();
+  if (!trimmed) return "";
+  return /\.ya?ml$/i.test(trimmed) ? trimmed : `${trimmed}.yaml`;
+}
+
+/**
+ * Legacy human-readable copy name (kept for UI hints).
+ * @param {string} file
+ * @param {string[]} existingFiles
+ */
+export function suggestCopyFilename(file, existingFiles = []) {
+  const name = ensureWorkflowFilename(file) || "workflow.yaml";
+  const match = name.match(/^(.*?)(\.ya?ml)$/i);
+  const base = match ? match[1] : name;
+  const ext = match ? match[2] : ".yaml";
+  const existing = new Set(existingFiles);
+
+  const copyMatch = base.match(/^(.*)-copy(?:-(\d+))?$/);
+  const root = copyMatch ? copyMatch[1] : base;
+  const candidate = (i) =>
+    i <= 1 ? `${root}-copy${ext}` : `${root}-copy-${i}${ext}`;
+
+  let n = copyMatch ? Number(copyMatch[2] || 1) + 1 : 1;
+  while (existing.has(candidate(n))) n += 1;
+  return candidate(n);
+}

packages/shared/src/workflow-path.js

@@ -0,0 +1,13 @@
+export const HTTP_METHODS = ["GET", "HEAD", "POST", "PUT", "PATCH", "DELETE", "OPTIONS"];
+
+export function namespacedPath(owner, triggerPath) {
+  const cleaned = String(triggerPath ?? "").replace(/^\/+/, "").trim();
+  return `/u/${owner}/${cleaned}`;
+}
+
+export function hasWorkflowTrigger(workflow) {
+  if (!workflow || typeof workflow !== "object") return false;
+  const triggers = workflow.triggers;
+  if (!Array.isArray(triggers)) return false;
+  return triggers.some((t) => String(t?.type ?? "").toLowerCase() === "workflow");
+}