@aspruyt/xfg 3.9.11 → 3.9.12

package/dist/vcs/graphql-commit-strategy.d.ts

@@ -54,6 +54,13 @@ export declare class GraphQLCommitStrategy implements ICommitStrategy {
      * For direct mode (force=false): just ensure branch exists.
      */
     private ensureBranchExistsOnRemote;
+    /**
+     * Sanitize command execution errors to remove the GraphQL payload.
+     * Node.js execSync errors include "Command failed: <full command>\n<stderr>".
+     * The command contains the entire GraphQL mutation payload (potentially megabytes
+     * of base64-encoded file contents). This extracts just the meaningful stderr.
+     */
+    private sanitizeCommandError;
     /**
      * Check if an error is due to expectedHeadOid mismatch (optimistic locking failure).
      * This happens when the branch was updated between getting HEAD and making the commit.

package/dist/vcs/graphql-commit-strategy.js

@@ -173,12 +173,18 @@ export class GraphQLCommitStrategy {
         // GH_TOKEN env var must be set for the gh command (after the pipe), not echo
         const tokenPrefix = token ? `GH_TOKEN=${token} ` : "";
         const command = `echo ${escapeShellArg(requestBody)} | ${tokenPrefix}gh api graphql ${hostnameArg} --input -`;
-        const response = await withRetry(() => this.executor.exec(command, workDir), {
-            permanentErrorPatterns: [
-                ...DEFAULT_PERMANENT_ERROR_PATTERNS,
-                ...OID_MISMATCH_PATTERNS,
-            ],
-        });
+        let response;
+        try {
+            response = await withRetry(() => this.executor.exec(command, workDir), {
+                permanentErrorPatterns: [
+                    ...DEFAULT_PERMANENT_ERROR_PATTERNS,
+                    ...OID_MISMATCH_PATTERNS,
+                ],
+            });
+        }
+        catch (error) {
+            throw this.sanitizeCommandError(error, repositoryNameWithOwner);
+        }
         // Parse the response
         const parsed = JSON.parse(response);
         if (parsed.errors) {
@@ -240,6 +246,32 @@ export class GraphQLCommitStrategy {
             }
         }
     }
+    /**
+     * Sanitize command execution errors to remove the GraphQL payload.
+     * Node.js execSync errors include "Command failed: <full command>\n<stderr>".
+     * The command contains the entire GraphQL mutation payload (potentially megabytes
+     * of base64-encoded file contents). This extracts just the meaningful stderr.
+     */
+    sanitizeCommandError(error, repo) {
+        const originalMessage = error instanceof Error ? error.message : String(error);
+        let cleanMessage;
+        if (originalMessage.startsWith("Command failed:")) {
+            // Extract stderr: everything after the first newline
+            const newlineIndex = originalMessage.indexOf("\n");
+            cleanMessage =
+                newlineIndex >= 0
+                    ? originalMessage.substring(newlineIndex + 1).trim()
+                    : "unknown error";
+        }
+        else {
+            cleanMessage = originalMessage;
+        }
+        // Safety truncation for any remaining oversized messages
+        if (cleanMessage.length > 2000) {
+            cleanMessage = cleanMessage.substring(0, 2000) + "... (truncated)";
+        }
+        return new Error(`GraphQL commit failed for ${repo}: ${cleanMessage}`);
+    }
     /**
      * Check if an error is due to expectedHeadOid mismatch (optimistic locking failure).
      * This happens when the branch was updated between getting HEAD and making the commit.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aspruyt/xfg",
-  "version": "3.9.11",
+  "version": "3.9.12",
   "description": "Manage files, settings, and repositories across GitHub, Azure DevOps, and GitLab — declaratively, from a single YAML config",
   "type": "module",
   "main": "dist/index.js",