@kubb/core 5.12.1 → 5.12.3

package/dist/index.cjs

@@ -45,7 +45,7 @@ unstorage_drivers_fs = __toESM(unstorage_drivers_fs, 1);
 let node_url = require("node:url");
 let node_module = require("node:module");
 //#region package.json
-var version = "5.12.1";
+var version = "5.12.3";
 //#endregion
 //#region ../../internals/utils/src/casing.ts
 /**
@@ -1540,16 +1540,31 @@ async function resolvePublicFetchConfig(repo, signal) {
 		addresses
 	});
 }
+/** Adds an `Authorization` header for `repo`'s origin as the `GIT_CONFIG_*` pair after those in `env`, keeping the token out of the arguments; throws on a line break. */
+function gitAuthEnv(env, { repo, authorization }) {
+	if (/[\r\n]/.test(authorization) || !URL.canParse(repo)) throw gitError("The authorization for a git `input` must be one line, for an https repository.");
+	const index = Math.max(0, Number.parseInt(env.GIT_CONFIG_COUNT ?? "", 10) || 0);
+	return {
+		GIT_CONFIG_COUNT: String(index + 1),
+		[`GIT_CONFIG_KEY_${index}`]: `http.${new URL(repo).origin}/.extraheader`,
+		[`GIT_CONFIG_VALUE_${index}`]: `Authorization: ${authorization}`
+	};
+}
 /**
 * Fetches one commit of a git repository into a temporary directory with a shallow `git fetch`,
 * so any host and the user's own git credentials work, and relative `$ref` files resolve.
 * Resolves to the spec path on disk and a `dispose` that deletes the checkout.
 *
 * With `publicOnly`, the repository must be an https URL on public addresses, the fetch connects to
-* the addresses checked, and it does not follow a redirect.
+* the addresses checked, and it does not follow a redirect. `authorization` adds that header to this
+* fetch only, through {@link gitAuthEnv}.
 */
-async function checkoutGitInput(input, signal, { publicOnly = false } = {}) {
+async function checkoutGitInput(input, signal, { publicOnly = false, authorization } = {}) {
 	const { repo, ref, path } = parseGitInput(input);
+	const authEnv = authorization ? gitAuthEnv(node_process.default.env, {
+		repo,
+		authorization
+	}) : {};
 	const fetchConfig = publicOnly ? await resolvePublicFetchConfig(repo, signal) : [];
 	const dir = await (0, node_fs_promises.mkdtemp)((0, node_path.join)((0, node_os.tmpdir)(), "kubb-git-"));
 	const dispose = () => (0, node_fs_promises.rm)(dir, {
@@ -1565,6 +1580,7 @@ async function checkoutGitInput(input, signal, { publicOnly = false } = {}) {
 	const label = `${redact(repo)}${ref ? ` at ${ref}` : ""}`;
 	const env = {
 		...node_process.default.env,
+		...authEnv,
 		GIT_TERMINAL_PROMPT: "0"
 	};
 	const steps = [