@fern-api/fdr-sdk 1.1.7-45ebcd86eb → 1.1.7-97cbb284fe

package/dist/js/orpc-client.mjs

@@ -2696,9 +2696,36 @@ import { OpenAPILink as OpenAPILink5 } from "@orpc/openapi-client/fetch";
 // src/orpc-client/docs/v2/library-docs/contract.ts
 import { oc as oc5 } from "@orpc/contract";
 import * as z14 from "zod";
+var ALLOWED_HOSTNAMES = /* @__PURE__ */ new Set(["github.com", "gitlab.com"]);
+var GithubUrlSchema = z14.string().url().describe(
+  "HTTPS URL of a GitHub or GitLab repository. Currently only github.com and gitlab.com are supported. Must match the pattern https://github.com/<owner>/<repo> or https://gitlab.com/<owner>/<repo>."
+).refine(
+  (url) => {
+    try {
+      const parsed = new URL(url);
+      if (parsed.protocol !== "https:") {
+        return false;
+      }
+      if (!ALLOWED_HOSTNAMES.has(parsed.hostname)) {
+        return false;
+      }
+      if (parsed.username || parsed.password) {
+        return false;
+      }
+      return /^\/[\w.-]+\/[\w.-]+(?:\.git)?\/?$/.test(parsed.pathname);
+    } catch {
+      return false;
+    }
+  },
+  { message: "Must be a valid https://github.com/<owner>/<repo> or https://gitlab.com/<owner>/<repo> URL" }
+);
+var SafeBranchSchema = z14.string().regex(/^[a-zA-Z0-9._/-]+$/, "Invalid branch name").nullish();
+var SafePackagePathSchema = z14.string().refine((p) => !p.includes("..") && !p.startsWith("/"), {
+  message: "packagePath must not contain path traversal sequences"
+}).nullish();
 var LibraryDocsBaseConfigSchema = z14.object({
-  branch: z14.string().nullish(),
-  packagePath: z14.string().nullish(),
+  branch: SafeBranchSchema,
+  packagePath: SafePackagePathSchema,
   title: z14.string().nullish(),
   slug: z14.string().nullish()
 });
@@ -2709,13 +2736,13 @@ var CppLibraryDocsConfigSchema = LibraryDocsBaseConfigSchema.extend({
 var StartLibraryDocsGenerationInputSchema = z14.discriminatedUnion("language", [
   z14.object({
     orgId: z14.string(),
-    githubUrl: z14.string(),
+    githubUrl: GithubUrlSchema,
     language: z14.literal("PYTHON"),
     config: PythonLibraryDocsConfigSchema.nullish()
   }),
   z14.object({
     orgId: z14.string(),
-    githubUrl: z14.string(),
+    githubUrl: GithubUrlSchema,
     language: z14.literal("CPP"),
     config: CppLibraryDocsConfigSchema.nullish()
   })
@@ -4062,6 +4089,7 @@ export {
   GetSdkDynamicIrUploadUrlsResponseSchema,
   GithubRepositoryIdSchema,
   GithubTeamSchema,
+  GithubUrlSchema,
   GithubUserSchema,
   GoModuleSchema,
   GraphQlArgumentSchema,