@kubb/core 5.12.2 → 5.12.4

package/dist/index.cjs

@@ -45,7 +45,7 @@ unstorage_drivers_fs = __toESM(unstorage_drivers_fs, 1);
 let node_url = require("node:url");
 let node_module = require("node:module");
 //#region package.json
-var version = "5.12.2";
+var version = "5.12.4";
 //#endregion
 //#region ../../internals/utils/src/casing.ts
 /**
@@ -1541,15 +1541,34 @@ async function resolvePublicFetchConfig(repo, signal) {
 	});
 }
 /**
+* The `GIT_CONFIG_*` pair that sends an `Authorization` header to `repo`'s origin, numbered after
+* the pairs already in `env`, so the token stays out of the process arguments. Throws
+* `KUBB_GIT_INPUT_FAILED` for a value with a line break, which would add another header.
+*/
+function gitAuthEnv(env, { repo, authorization }) {
+	if (/[\r\n]/.test(authorization) || !URL.canParse(repo)) throw gitError("The authorization for a git `input` must be one line, for an https repository.");
+	const index = Math.max(0, Number.parseInt(env.GIT_CONFIG_COUNT ?? "", 10) || 0);
+	return {
+		GIT_CONFIG_COUNT: String(index + 1),
+		[`GIT_CONFIG_KEY_${index}`]: `http.${new URL(repo).origin}/.extraheader`,
+		[`GIT_CONFIG_VALUE_${index}`]: `Authorization: ${authorization}`
+	};
+}
+/**
 * Fetches one commit of a git repository into a temporary directory with a shallow `git fetch`,
 * so any host and the user's own git credentials work, and relative `$ref` files resolve.
 * Resolves to the spec path on disk and a `dispose` that deletes the checkout.
 *
 * With `publicOnly`, the repository must be an https URL on public addresses, the fetch connects to
-* the addresses checked, and it does not follow a redirect.
+* the addresses checked, and it does not follow a redirect. `authorization` adds that header to this
+* fetch only, through {@link gitAuthEnv}.
 */
-async function checkoutGitInput(input, signal, { publicOnly = false } = {}) {
+async function checkoutGitInput(input, signal, { publicOnly = false, authorization } = {}) {
 	const { repo, ref, path } = parseGitInput(input);
+	const authEnv = authorization ? gitAuthEnv(node_process.default.env, {
+		repo,
+		authorization
+	}) : {};
 	const fetchConfig = publicOnly ? await resolvePublicFetchConfig(repo, signal) : [];
 	const dir = await (0, node_fs_promises.mkdtemp)((0, node_path.join)((0, node_os.tmpdir)(), "kubb-git-"));
 	const dispose = () => (0, node_fs_promises.rm)(dir, {
@@ -1565,6 +1584,7 @@ async function checkoutGitInput(input, signal, { publicOnly = false } = {}) {
 	const label = `${redact(repo)}${ref ? ` at ${ref}` : ""}`;
 	const env = {
 		...node_process.default.env,
+		...authEnv,
 		GIT_TERMINAL_PROMPT: "0"
 	};
 	const steps = [