@lizard-build/sdk 0.1.73 → 0.1.74

package/dist/index.d.mts

@@ -967,7 +967,11 @@ declare class GitReposAPI {
     /** Who moved which branch, when. */
     reflog(repo: RepoRef, ref?: string): Promise<unknown[]>;
     archive(repo: RepoRef, ref: string, format?: 'zip' | 'tar.gz'): Promise<Uint8Array>;
-    /** The HTTPS clone URL. With `withKey`, it carries the API key, so plain `git clone` works without a helper. */
+    /**
+     * The HTTPS clone URL. With `withKey`, it carries the API key, so plain `git clone` works
+     * without a helper; git then keeps it in .git/config. For anything shared or logged, use a
+     * limited Lizard Git token (`tokens.create`) as `apiKey` instead of the account's key.
+     */
     cloneUrl(repo: RepoRef, opts?: {
         withKey?: boolean;
     }): string;

package/dist/index.d.ts

@@ -967,7 +967,11 @@ declare class GitReposAPI {
     /** Who moved which branch, when. */
     reflog(repo: RepoRef, ref?: string): Promise<unknown[]>;
     archive(repo: RepoRef, ref: string, format?: 'zip' | 'tar.gz'): Promise<Uint8Array>;
-    /** The HTTPS clone URL. With `withKey`, it carries the API key, so plain `git clone` works without a helper. */
+    /**
+     * The HTTPS clone URL. With `withKey`, it carries the API key, so plain `git clone` works
+     * without a helper; git then keeps it in .git/config. For anything shared or logged, use a
+     * limited Lizard Git token (`tokens.create`) as `apiKey` instead of the account's key.
+     */
     cloneUrl(repo: RepoRef, opts?: {
         withKey?: boolean;
     }): string;

package/dist/index.js

@@ -559,9 +559,14 @@ function qs(path, values) {
   for (const [k, v] of Object.entries(values)) if (v !== void 0 && v !== "") q.set(k, String(v));
   return q.size ? `${path}?${q}` : path;
 }
+function segs(p) {
+  const parts = p.split("/");
+  if (parts.some((x) => x === "" || x === "." || x === "..")) throw new Error(`bad path: "${p}"`);
+  return parts.map(seg).join("/");
+}
 function repoPath(repo) {
   const m = /^([^/\s]+)\/([^/\s]+?)(\.git)?$/.exec(repo);
-  if (!m) throw new Error(`repository must be "owner/name", got "${repo}"`);
+  if (!m || [m[1], m[2]].some((x) => x === "." || x === "..")) throw new Error(`repository must be "owner/name", got "${repo}"`);
   return `/api/repos/${seg(m[1])}/${seg(m[2])}`;
 }
 var GitClient = class {
@@ -574,6 +579,8 @@ var GitClient = class {
       method,
       body,
       headers: { "X-API-Key": this.config.apiKey, ...headers },
+      redirect: "error",
+      // a redirect would carry the key to wherever it points
       signal: AbortSignal.timeout(this.config.requestTimeoutMs)
     });
     if (!res.ok) await handleApiError(res);
@@ -650,7 +657,7 @@ var GitReposAPI = class {
     return this.c.post(`${repoPath(repo)}/branches`, { name, from });
   }
   deleteBranch(repo, name) {
-    return this.c.delete(`${repoPath(repo)}/branches/${name.split("/").map(seg).join("/")}`);
+    return this.c.delete(`${repoPath(repo)}/branches/${segs(name)}`);
   }
   tree(repo, opts = {}) {
     return this.c.get(qs(`${repoPath(repo)}/tree`, opts));
@@ -661,8 +668,9 @@ var GitReposAPI = class {
   }
   /** A file's bytes, whatever its size or type. */
   raw(repo, path, ref) {
+    repoPath(repo);
     const [owner, name] = repo.split("/");
-    return this.c.bytes(`/raw/${seg(owner)}/${seg(name)}/${ref.split("/").map(seg).join("/")}/${path.split("/").map(seg).join("/")}`);
+    return this.c.bytes(`/raw/${seg(owner)}/${seg(name)}/${segs(ref)}/${segs(path)}`);
   }
   /** Every file path at a ref. */
   files(repo, ref) {
@@ -696,7 +704,11 @@ var GitReposAPI = class {
   archive(repo, ref, format = "tar.gz") {
     return this.c.bytes(`${repoPath(repo)}/archive/${seg(ref)}.${format}`);
   }
-  /** The HTTPS clone URL. With `withKey`, it carries the API key, so plain `git clone` works without a helper. */
+  /**
+   * The HTTPS clone URL. With `withKey`, it carries the API key, so plain `git clone` works
+   * without a helper; git then keeps it in .git/config. For anything shared or logged, use a
+   * limited Lizard Git token (`tokens.create`) as `apiKey` instead of the account's key.
+   */
   cloneUrl(repo, opts = {}) {
     repoPath(repo);
     const u = new URL(`${this.c.url}/${repo.replace(/\.git$/, "")}.git`);

package/dist/index.mjs

@@ -489,9 +489,14 @@ function qs(path, values) {
   for (const [k, v] of Object.entries(values)) if (v !== void 0 && v !== "") q.set(k, String(v));
   return q.size ? `${path}?${q}` : path;
 }
+function segs(p) {
+  const parts = p.split("/");
+  if (parts.some((x) => x === "" || x === "." || x === "..")) throw new Error(`bad path: "${p}"`);
+  return parts.map(seg).join("/");
+}
 function repoPath(repo) {
   const m = /^([^/\s]+)\/([^/\s]+?)(\.git)?$/.exec(repo);
-  if (!m) throw new Error(`repository must be "owner/name", got "${repo}"`);
+  if (!m || [m[1], m[2]].some((x) => x === "." || x === "..")) throw new Error(`repository must be "owner/name", got "${repo}"`);
   return `/api/repos/${seg(m[1])}/${seg(m[2])}`;
 }
 var GitClient = class {
@@ -504,6 +509,8 @@ var GitClient = class {
       method,
       body,
       headers: { "X-API-Key": this.config.apiKey, ...headers },
+      redirect: "error",
+      // a redirect would carry the key to wherever it points
       signal: AbortSignal.timeout(this.config.requestTimeoutMs)
     });
     if (!res.ok) await handleApiError(res);
@@ -580,7 +587,7 @@ var GitReposAPI = class {
     return this.c.post(`${repoPath(repo)}/branches`, { name, from });
   }
   deleteBranch(repo, name) {
-    return this.c.delete(`${repoPath(repo)}/branches/${name.split("/").map(seg).join("/")}`);
+    return this.c.delete(`${repoPath(repo)}/branches/${segs(name)}`);
   }
   tree(repo, opts = {}) {
     return this.c.get(qs(`${repoPath(repo)}/tree`, opts));
@@ -591,8 +598,9 @@ var GitReposAPI = class {
   }
   /** A file's bytes, whatever its size or type. */
   raw(repo, path, ref) {
+    repoPath(repo);
     const [owner, name] = repo.split("/");
-    return this.c.bytes(`/raw/${seg(owner)}/${seg(name)}/${ref.split("/").map(seg).join("/")}/${path.split("/").map(seg).join("/")}`);
+    return this.c.bytes(`/raw/${seg(owner)}/${seg(name)}/${segs(ref)}/${segs(path)}`);
   }
   /** Every file path at a ref. */
   files(repo, ref) {
@@ -626,7 +634,11 @@ var GitReposAPI = class {
   archive(repo, ref, format = "tar.gz") {
     return this.c.bytes(`${repoPath(repo)}/archive/${seg(ref)}.${format}`);
   }
-  /** The HTTPS clone URL. With `withKey`, it carries the API key, so plain `git clone` works without a helper. */
+  /**
+   * The HTTPS clone URL. With `withKey`, it carries the API key, so plain `git clone` works
+   * without a helper; git then keeps it in .git/config. For anything shared or logged, use a
+   * limited Lizard Git token (`tokens.create`) as `apiKey` instead of the account's key.
+   */
   cloneUrl(repo, opts = {}) {
     repoPath(repo);
     const u = new URL(`${this.c.url}/${repo.replace(/\.git$/, "")}.git`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lizard-build/sdk",
-  "version": "0.1.73",
+  "version": "0.1.74",
   "description": "TypeScript SDK for Lizard: Firecracker microVM sandboxes, code execution and cloud apps.",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",