@m8t-stack/cli 0.2.133 → 0.2.134

package/dist/cli.js

@@ -1454,7 +1454,7 @@ function installFoundryDnsShim() {
 }
 
 // src/lib/package-version.ts
-var CLI_VERSION = "0.2.133";
+var CLI_VERSION = "0.2.134";
 
 // src/lib/render-error.ts
 init_errors();
@@ -21082,17 +21082,63 @@ async function fetchPublicTags(repo, fetchImpl = fetch) {
       hint: "Make the package public (deploy/ghcr-package-visibility.md), then retry."
     });
   }
-  const tagsRes = await fetchImpl(`https://ghcr.io/v2/${path47}/tags/list`, {
-    headers: { Authorization: `Bearer ${token}` }
-  });
-  if (!tagsRes.ok) {
-    throw new LocalCliError({
-      code: "PLATFORM_GHCR_TAGS_FAILED",
-      message: `Could not list tags for ${repo} (HTTP ${tagsRes.status.toString()}).`
+  const expectedPath = `/v2/${path47}/tags/list`;
+  let pageUrl = new URL(`https://ghcr.io${expectedPath}`);
+  pageUrl.searchParams.set("n", "1000");
+  const visited = /* @__PURE__ */ new Set();
+  const tags = /* @__PURE__ */ new Set();
+  const maxPages = 100;
+  for (let page = 0; page < maxPages; page += 1) {
+    const href = pageUrl.toString();
+    if (visited.has(href)) {
+      throw new LocalCliError({
+        code: "PLATFORM_GHCR_TAGS_PAGINATION_LOOP",
+        message: `GHCR returned a pagination loop while listing tags for ${repo}.`
+      });
+    }
+    visited.add(href);
+    const tagsRes = await fetchImpl(href, {
+      headers: { Authorization: `Bearer ${token}` }
     });
+    if (!tagsRes.ok) {
+      throw new LocalCliError({
+        code: "PLATFORM_GHCR_TAGS_FAILED",
+        message: `Could not list tags for ${repo} (HTTP ${tagsRes.status.toString()}).`
+      });
+    }
+    const body = await tagsRes.json();
+    if (body.tags !== void 0 && (!Array.isArray(body.tags) || body.tags.some((tag) => typeof tag !== "string"))) {
+      throw new LocalCliError({
+        code: "PLATFORM_GHCR_TAGS_INVALID",
+        message: `GHCR returned an invalid tags list for ${repo}.`
+      });
+    }
+    for (const tag of body.tags ?? []) tags.add(tag);
+    const next = nextLink(tagsRes.headers.get("link"));
+    if (!next) return [...tags];
+    const nextUrl = new URL(next, pageUrl);
+    if (nextUrl.origin !== "https://ghcr.io" || nextUrl.pathname !== expectedPath || nextUrl.username !== "" || nextUrl.password !== "" || nextUrl.hash !== "") {
+      throw new LocalCliError({
+        code: "PLATFORM_GHCR_TAGS_PAGINATION_UNSAFE",
+        message: `GHCR returned an unsafe pagination link while listing tags for ${repo}.`
+      });
+    }
+    pageUrl = nextUrl;
   }
-  const body = await tagsRes.json();
-  return body.tags ?? [];
+  throw new LocalCliError({
+    code: "PLATFORM_GHCR_TAGS_PAGINATION_LIMIT",
+    message: `GHCR returned more than ${maxPages.toString()} tag pages for ${repo}.`
+  });
+}
+function nextLink(header) {
+  if (!header) return null;
+  for (const entry of header.split(/,(?=\s*<)/)) {
+    const target = /^\s*<([^>]+)>/.exec(entry)?.[1];
+    if (!target) continue;
+    const rel = entry.split(";").slice(1).map((parameter) => /^\s*rel\s*=\s*"?([^";]+)"?\s*$/i.exec(parameter)?.[1]).find((value) => value !== void 0);
+    if (rel?.split(/\s+/).includes("next")) return target;
+  }
+  return null;
 }
 
 // src/lib/release-channel.ts