@postman/sdk-config 0.1.0 → 0.1.1

package/dist/sdk-config/v1/index.cjs

@@ -9,6 +9,10 @@ var semver__default = /*#__PURE__*/_interopDefault(semver);
 
 // src/sdk-config-domain/v1/api.ts
 var nonEmptyStringSchema = zod.z.string().min(1);
+var relativePathSchema = nonEmptyStringSchema.refine(
+  (value) => !/^(?:[\\/]|[A-Za-z]:)/.test(value) && !value.split(/[\\/]/).some((segment) => segment === ".."),
+  { message: "must be a relative path without parent directory segments" }
+);
 var exactSemverSchema = zod.z.string().refine(
   (value) => {
     if (value.trim() !== value || !/^\d/.test(value)) {
@@ -253,7 +257,7 @@ var clientConfigSchema = zod.z.strictObject({
 
 // src/sdk-config/v1/client.ts
 var sdkConfigV1ClientConfigSchema = clientConfigSchema;
-var goModulePathSchema = nonEmptyStringSchema.regex(
+var goModulePathSchema = relativePathSchema.regex(
   /^(?!.*(?:^|\/)\.{1,2}(?:\/|$))[A-Za-z0-9._~-]+(?:\/[A-Za-z0-9._~-]+)+$/,
   "Go module path must be a slash-delimited path using letters, numbers, dots, dashes, underscores, or tildes"
 );
@@ -934,7 +938,7 @@ function outputDiagnostic(path, index) {
   };
 }
 var customerGenerationAssetSchema = zod.z.discriminatedUnion("type", [
-  zod.z.strictObject({ type: zod.z.literal("path"), location: nonEmptyStringSchema }),
+  zod.z.strictObject({ type: zod.z.literal("path"), location: relativePathSchema }),
   zod.z.strictObject({ type: zod.z.literal("url"), location: nonEmptyStringSchema })
 ]);
 var hookDependencySchema = zod.z.strictObject({
@@ -955,7 +959,7 @@ var customCodeConfigSchema = zod.z.strictObject({
   protectedFiles: zod.z.array(nonEmptyStringSchema).optional()
 });
 var workflowConfigSchema = zod.z.strictObject({
-  path: nonEmptyStringSchema,
+  path: relativePathSchema,
   outputName: nonEmptyStringSchema.optional()
 });
 var analyticsHeaderSchema = zod.z.union([
@@ -1032,7 +1036,7 @@ var sdkConfigV1GenerationConfigSchema = zod.z.strictObject({
   hooks: hooksConfigSchema.optional(),
   customCode: customCodeConfigSchema.optional(),
   workflows: zod.z.array(workflowConfigSchema).optional(),
-  customQueryPaths: zod.z.array(nonEmptyStringSchema).optional(),
+  customQueryPaths: zod.z.array(relativePathSchema).optional(),
   analytics: analyticsConfigSchema.optional(),
   wireTests: wireTestsSchema.optional(),
   unitTests: unitTestsSchema.optional(),
@@ -2222,6 +2226,7 @@ exports.sdkConfigV1PublishRegistrySchema = sdkConfigV1PublishRegistrySchema;
 exports.sdkConfigV1PythonGenerationConfigSchema = pythonGenerationConfigSchema;
 exports.sdkConfigV1ReadmeCustomSectionSchema = sdkConfigV1ReadmeCustomSectionSchema;
 exports.sdkConfigV1ReadmeEndpointSchema = sdkConfigV1ReadmeEndpointSchema;
+exports.sdkConfigV1RelativePathSchema = relativePathSchema;
 exports.sdkConfigV1RubyGenerationConfigSchema = rubyGenerationConfigSchema;
 exports.sdkConfigV1RustGenerationConfigSchema = rustGenerationConfigSchema;
 exports.sdkConfigV1Schema = sdkConfigV1Schema;