@kubb/core 5.12.2 → 5.12.4

package/dist/{Hookable-DuUzYJNA.js → Hookable-CIEVq8yT.js}

@@ -19,7 +19,7 @@ var __name = (target, value) => __defProp(target, "name", {
 });
 //#endregion
 //#region package.json
-var version = "5.12.2";
+var version = "5.12.4";
 //#endregion
 //#region ../../internals/utils/src/casing.ts
 /**
@@ -1359,15 +1359,34 @@ async function resolvePublicFetchConfig(repo, signal) {
 	});
 }
 /**
+* The `GIT_CONFIG_*` pair that sends an `Authorization` header to `repo`'s origin, numbered after
+* the pairs already in `env`, so the token stays out of the process arguments. Throws
+* `KUBB_GIT_INPUT_FAILED` for a value with a line break, which would add another header.
+*/
+function gitAuthEnv(env, { repo, authorization }) {
+	if (/[\r\n]/.test(authorization) || !URL.canParse(repo)) throw gitError("The authorization for a git `input` must be one line, for an https repository.");
+	const index = Math.max(0, Number.parseInt(env.GIT_CONFIG_COUNT ?? "", 10) || 0);
+	return {
+		GIT_CONFIG_COUNT: String(index + 1),
+		[`GIT_CONFIG_KEY_${index}`]: `http.${new URL(repo).origin}/.extraheader`,
+		[`GIT_CONFIG_VALUE_${index}`]: `Authorization: ${authorization}`
+	};
+}
+/**
 * Fetches one commit of a git repository into a temporary directory with a shallow `git fetch`,
 * so any host and the user's own git credentials work, and relative `$ref` files resolve.
 * Resolves to the spec path on disk and a `dispose` that deletes the checkout.
 *
 * With `publicOnly`, the repository must be an https URL on public addresses, the fetch connects to
-* the addresses checked, and it does not follow a redirect.
+* the addresses checked, and it does not follow a redirect. `authorization` adds that header to this
+* fetch only, through {@link gitAuthEnv}.
 */
-async function checkoutGitInput(input, signal, { publicOnly = false } = {}) {
+async function checkoutGitInput(input, signal, { publicOnly = false, authorization } = {}) {
 	const { repo, ref, path } = parseGitInput(input);
+	const authEnv = authorization ? gitAuthEnv(process$1.env, {
+		repo,
+		authorization
+	}) : {};
 	const fetchConfig = publicOnly ? await resolvePublicFetchConfig(repo, signal) : [];
 	const dir = await mkdtemp(join(tmpdir(), "kubb-git-"));
 	const dispose = () => rm(dir, {
@@ -1383,6 +1402,7 @@ async function checkoutGitInput(input, signal, { publicOnly = false } = {}) {
 	const label = `${redact(repo)}${ref ? ` at ${ref}` : ""}`;
 	const env = {
 		...process$1.env,
+		...authEnv,
 		GIT_TERMINAL_PROMPT: "0"
 	};
 	const steps = [
@@ -3068,4 +3088,4 @@ var Hookable = class {
 //#endregion
 export { formatMs as A, toError as B, useConfig as C, defineExtension as D, checkCompatibility as E, listFiles as F, __name as H, read as I, rm$1 as L, inParallel as M, existsSync$1 as N, resolveMeta as O, isPathInside as P, write as R, tryUseKubb as S, useOptions as T, camelCase as V, kubbContext as _, FileManager as a, setOptions as b, Resolver as c, isPublicAddress as d, assertPluginOption as f, injectFile as g, addMacro as h, createNodeCache as i, getElapsedMs as j, Diagnostics as k, getInputKind as l, addGenerator as m, KubbDriver as n, _usingCtx as o, definePlugin as p, pluginNotFoundError as r, createResolver as s, Hookable as t, checkoutGitInput as u, requirePlugin as v, useKubb as w, setResolver as x, setMacros as y, writeRaw as z };
 
-//# sourceMappingURL=Hookable-DuUzYJNA.js.map
+//# sourceMappingURL=Hookable-CIEVq8yT.js.map