costgrep-cli 0.7.6 → 0.7.7

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "costgrep-cli",
-  "version": "0.7.6",
+  "version": "0.7.7",
   "description": "GitHub Actions cost breakdown: human vs AI agent vs bot. Zero-dependency CLI + composite action.",
   "type": "module",
   "license": "Apache-2.0",

package/scripts/costgrep.mjs

@@ -22,7 +22,7 @@ import { parseArgs } from 'node:util';
 
 const API = process.env.COSTGREP_API || 'https://api.github.com'; // env override exists for local-mock verification only
 const HTTP_TIMEOUT = Math.max(1_000, parseInt(process.env.COSTGREP_TIMEOUT_MS, 10) || 30_000);
-const VERSION = '0.7.6'; // keep in sync with package.json
+const VERSION = '0.7.7'; // keep in sync with package.json
 
 // ---------------------------------------------------------------------------
 // Rate matrix — GitHub-hosted runners, list prices effective 2026-01-01.
@@ -183,7 +183,14 @@ async function gh(path, token) {
       throw new Error(`GitHub API rate limited on ${path} (403/429). Pass --token or narrow --days/--max-runs.`);
     }
     if (!res.ok) throw new Error(`GitHub API ${res.status} on ${path}: ${(await res.text()).slice(0, 300)}`);
-    return res.json();
+    try {
+      return await res.json();
+    } catch (e) {
+      if (e.name === 'TimeoutError' || e.name === 'AbortError') {
+        throw new Error(`GitHub API timeout reading body of ${path} after ${HTTP_TIMEOUT / 1000}s (set COSTGREP_TIMEOUT_MS to override)`);
+      }
+      throw new Error(`invalid JSON from ${path}: ${e.message}`);
+    }
   }
 }