@simpleapps-com/augur-api 2026.5.5 → 2026.5.6

package/dist/index.mjs

@@ -109,6 +109,15 @@ var RateLimitError = class extends AugurError {
     });
   }
 };
+var InvalidArgumentError = class extends AugurError {
+  constructor(params) {
+    super({
+      ...params,
+      code: "INVALID_ARGUMENT",
+      statusCode: 400
+    });
+  }
+};
 
 // src/core/client.ts
 function generateRequestKey(method, url, params) {
@@ -431,6 +440,39 @@ var HTTPClient = class {
   }
 };
 
+// src/core/path-validation.ts
+var normalise = (name) => name.replace(/[-_]/g, "").toLowerCase();
+var NUMERIC_EXACT = /* @__PURE__ */ new Set(["id", "linenumber"]);
+var NUMERIC_SUFFIX_RE = /(?:id|uid|no|num|number)$/;
+var STRING_OVERRIDES = /* @__PURE__ */ new Set(["siteid", "pono", "importuid", "scheduledimportmasteruid"]);
+var isNumericPlaceholder = (placeholder) => {
+  const normalised = normalise(placeholder);
+  if (STRING_OVERRIDES.has(normalised)) return false;
+  if (NUMERIC_EXACT.has(normalised)) return true;
+  return NUMERIC_SUFFIX_RE.test(normalised);
+};
+var INTEGER_RE = /^-?\d+$/;
+var validatePathSegment = (pathTemplate, placeholder, value) => {
+  const isNumeric = isNumericPlaceholder(placeholder);
+  if (isNumeric) {
+    if (!INTEGER_RE.test(value)) {
+      throw new InvalidArgumentError({
+        message: `Invalid path parameter '${placeholder}': expected an integer, received ${JSON.stringify(value)}`,
+        service: "http-client",
+        endpoint: pathTemplate
+      });
+    }
+    return;
+  }
+  if (value === "") {
+    throw new InvalidArgumentError({
+      message: `Invalid path parameter '${placeholder}': expected a non-empty string, received ${JSON.stringify(value)}`,
+      service: "http-client",
+      endpoint: pathTemplate
+    });
+  }
+};
+
 // src/core/schemas.ts
 import * as v from "valibot";
 var logNormalizationWarning = (message) => {
@@ -978,16 +1020,19 @@ Provided parameters: ${JSON.stringify(params, null, 2)}`;
     if (!pathParams) {
       return pathTemplate;
     }
-    const normalise = (s) => s.replace(/[-_]/g, "").toLowerCase();
+    const normalise2 = (s) => s.replace(/[-_]/g, "").toLowerCase();
     let path = pathTemplate;
     for (const [key, value] of Object.entries(pathParams)) {
+      const stringValue = String(value);
       if (path.includes(`{${key}}`)) {
-        path = path.replace(`{${key}}`, String(value));
+        validatePathSegment(pathTemplate, key, stringValue);
+        path = path.replace(`{${key}}`, stringValue);
       } else {
-        const normKey = normalise(key);
+        const normKey = normalise2(key);
         path = path.replace(/\{([^}]+)\}/g, (match, placeholder) => {
-          if (normalise(placeholder) === normKey) {
-            return String(value);
+          if (normalise2(placeholder) === normKey) {
+            validatePathSegment(pathTemplate, placeholder, stringValue);
+            return stringValue;
           }
           return match;
         });
@@ -14201,7 +14246,7 @@ function createCrossSiteAuthenticator(augurInfoToken) {
 }
 
 // src/index.ts
-var VERSION = "2026.5.5";
+var VERSION = "2026.5.6";
 export {
   AgrInfoClient,
   AgrSiteClient,
@@ -14218,6 +14263,7 @@ export {
   CustomersClient,
   GregorovichClient,
   HealthCheckDataSchema,
+  InvalidArgumentError,
   ItemsClient,
   JoomlaClient,
   LegacyClient,