@fern-api/fdr-sdk 1.1.7-45ebcd86eb → 1.1.7-97cbb284fe

package/dist/js/client/FdrClient.js

@@ -2530,9 +2530,36 @@ var import_fetch5 = require("@orpc/openapi-client/fetch");
 // src/orpc-client/docs/v2/library-docs/contract.ts
 var import_contract8 = require("@orpc/contract");
 var z13 = __toESM(require("zod"), 1);
+var ALLOWED_HOSTNAMES = /* @__PURE__ */ new Set(["github.com", "gitlab.com"]);
+var GithubUrlSchema = z13.string().url().describe(
+  "HTTPS URL of a GitHub or GitLab repository. Currently only github.com and gitlab.com are supported. Must match the pattern https://github.com/<owner>/<repo> or https://gitlab.com/<owner>/<repo>."
+).refine(
+  (url) => {
+    try {
+      const parsed = new URL(url);
+      if (parsed.protocol !== "https:") {
+        return false;
+      }
+      if (!ALLOWED_HOSTNAMES.has(parsed.hostname)) {
+        return false;
+      }
+      if (parsed.username || parsed.password) {
+        return false;
+      }
+      return /^\/[\w.-]+\/[\w.-]+(?:\.git)?\/?$/.test(parsed.pathname);
+    } catch {
+      return false;
+    }
+  },
+  { message: "Must be a valid https://github.com/<owner>/<repo> or https://gitlab.com/<owner>/<repo> URL" }
+);
+var SafeBranchSchema = z13.string().regex(/^[a-zA-Z0-9._/-]+$/, "Invalid branch name").nullish();
+var SafePackagePathSchema = z13.string().refine((p) => !p.includes("..") && !p.startsWith("/"), {
+  message: "packagePath must not contain path traversal sequences"
+}).nullish();
 var LibraryDocsBaseConfigSchema = z13.object({
-  branch: z13.string().nullish(),
-  packagePath: z13.string().nullish(),
+  branch: SafeBranchSchema,
+  packagePath: SafePackagePathSchema,
   title: z13.string().nullish(),
   slug: z13.string().nullish()
 });
@@ -2543,13 +2570,13 @@ var CppLibraryDocsConfigSchema = LibraryDocsBaseConfigSchema.extend({
 var StartLibraryDocsGenerationInputSchema = z13.discriminatedUnion("language", [
   z13.object({
     orgId: z13.string(),
-    githubUrl: z13.string(),
+    githubUrl: GithubUrlSchema,
     language: z13.literal("PYTHON"),
     config: PythonLibraryDocsConfigSchema.nullish()
   }),
   z13.object({
     orgId: z13.string(),
-    githubUrl: z13.string(),
+    githubUrl: GithubUrlSchema,
     language: z13.literal("CPP"),
     config: CppLibraryDocsConfigSchema.nullish()
   })