repo-sdk 0.3.3 → 0.3.5

package/dist/azure-devops.js

@@ -1,6 +1,6 @@
 import { t as RepoError } from "./errors-Cxq_CqYv.js";
 import { a as isRecord, i as filenameFromContentDisposition, l as decodeCursor, n as commitWebUrlBuilder, s as toCloneUrl, u as encodeCursor } from "./shared-C6m-C4My.js";
-import { t as HttpClient } from "./http-DOXOhL_I.js";
+import { t as HttpClient } from "./http-Bm-gcgMf.js";
 import { a as headShaOrUndefined, n as timingSafeEqual, r as toIncomingWebhook } from "./verify-BBMVxz8q.js";
 //#region src/providers/azure-devops/auth.ts
 /**

package/dist/bitbucket.js

@@ -1,6 +1,6 @@
 import { t as RepoError } from "./errors-Cxq_CqYv.js";
 import { a as isRecord, c as assertSameOriginUrl, i as filenameFromContentDisposition, l as decodeCursor, n as commitWebUrlBuilder, s as toCloneUrl, t as clampPerPage, u as encodeCursor } from "./shared-C6m-C4My.js";
-import { t as HttpClient } from "./http-DOXOhL_I.js";
+import { t as HttpClient } from "./http-Bm-gcgMf.js";
 import { a as headShaOrUndefined, i as verifyHmacSignature, r as toIncomingWebhook } from "./verify-BBMVxz8q.js";
 //#region src/providers/bitbucket/index.ts
 const BASE_URL = "https://api.bitbucket.org/2.0";

package/dist/git-http.js

@@ -1,6 +1,6 @@
 import { t as RepoError } from "./errors-Cxq_CqYv.js";
 import { f as stringToBase64, l as decodeCursor, s as toCloneUrl, t as clampPerPage, u as encodeCursor } from "./shared-C6m-C4My.js";
-import { t as HttpClient } from "./http-DOXOhL_I.js";
+import { t as HttpClient } from "./http-Bm-gcgMf.js";
 //#region src/providers/git-http/index.ts
 const CAPABILITIES = {
 	userProfile: false,

package/dist/gitea.js

@@ -1,6 +1,6 @@
 import { t as RepoError } from "./errors-Cxq_CqYv.js";
 import { a as isRecord, c as assertSameOriginUrl, i as filenameFromContentDisposition, l as decodeCursor, n as commitWebUrlBuilder, o as parseLinkNext, r as encodeRefPath, s as toCloneUrl, t as clampPerPage, u as encodeCursor } from "./shared-C6m-C4My.js";
-import { t as HttpClient } from "./http-DOXOhL_I.js";
+import { t as HttpClient } from "./http-Bm-gcgMf.js";
 import { a as headShaOrUndefined, n as timingSafeEqual, r as toIncomingWebhook, t as hmacSha256Hex } from "./verify-BBMVxz8q.js";
 //#region src/providers/gitea/index.ts
 const DEFAULT_BASE_URL = "https://gitea.com/api/v1";
@@ -28,6 +28,13 @@ function reposFromBody(body) {
 	if (isRecord(body) && Array.isArray(body.data)) return body.data;
 	return [];
 }
+function orgsFromBody(body) {
+	if (Array.isArray(body)) return body;
+	throw new RepoError("gitea returned an unexpected response for the organizations list", {
+		code: "invalid_response",
+		provider: "gitea"
+	});
+}
 function toUserNamespace(user) {
 	const slug = user.login ?? user.username ?? "";
 	return {
@@ -216,7 +223,7 @@ function gitea(options) {
 				assertSameOriginUrl("gitea", baseUrl, url);
 				const { data, response } = await http.json(url, { signal: params.signal });
 				return {
-					data: data.map(toOrgNamespace),
+					data: orgsFromBody(data).map(toOrgNamespace),
 					cursor: nextCursor(response)
 				};
 			}
@@ -226,7 +233,7 @@ function gitea(options) {
 				signal: params.signal
 			});
 			return {
-				data: [toUserNamespace(user), ...orgs.map(toOrgNamespace)],
+				data: [toUserNamespace(user), ...orgsFromBody(orgs).map(toOrgNamespace)],
 				cursor: nextCursor(response)
 			};
 		},

package/dist/github.js

@@ -1,8 +1,17 @@
 import { n as codeFromStatus, t as RepoError } from "./errors-Cxq_CqYv.js";
 import { a as isRecord, c as assertSameOriginUrl, d as bytesToBase64Url, i as filenameFromContentDisposition, l as decodeCursor, n as commitWebUrlBuilder, o as parseLinkNext, r as encodeRefPath, s as toCloneUrl, t as clampPerPage, u as encodeCursor } from "./shared-C6m-C4My.js";
-import { t as HttpClient } from "./http-DOXOhL_I.js";
+import { t as HttpClient } from "./http-Bm-gcgMf.js";
 import { a as headShaOrUndefined, i as verifyHmacSignature, r as toIncomingWebhook } from "./verify-BBMVxz8q.js";
 //#region src/providers/github/app-auth.ts
+/** GitHub repository ids are positive integers; anything else would only surface as an opaque 422. */
+function toRepositoryId(value) {
+	const id = typeof value === "string" && /^\d+$/.test(value) ? Number(value) : value;
+	if (typeof id !== "number" || !Number.isSafeInteger(id) || id <= 0) throw new RepoError(`Invalid GitHub repository id: ${String(value)}`, {
+		code: "validation",
+		provider: "github"
+	});
+	return id;
+}
 const RSA_ALGORITHM_IDENTIFIER = [
 	48,
 	13,
@@ -146,7 +155,7 @@ var AppTokenSource = class {
 		this.installationId = options.installationId === void 0 ? void 0 : String(options.installationId);
 		this.owner = options.owner;
 		this.repositories = options.repositories;
-		this.repositoryIds = options.repositoryIds?.map(Number);
+		this.repositoryIds = options.repositoryIds?.map(toRepositoryId);
 	}
 	async getToken() {
 		return (await this.resolveToken()).token;

package/dist/gitlab.js

@@ -1,6 +1,6 @@
 import { t as RepoError } from "./errors-Cxq_CqYv.js";
 import { a as isRecord, c as assertSameOriginUrl, i as filenameFromContentDisposition, l as decodeCursor, n as commitWebUrlBuilder, o as parseLinkNext, s as toCloneUrl, t as clampPerPage, u as encodeCursor } from "./shared-C6m-C4My.js";
-import { t as HttpClient } from "./http-DOXOhL_I.js";
+import { t as HttpClient } from "./http-Bm-gcgMf.js";
 import { a as headShaOrUndefined, n as timingSafeEqual, r as toIncomingWebhook } from "./verify-BBMVxz8q.js";
 //#region src/providers/gitlab/index.ts
 const DEFAULT_BASE_URL = "https://gitlab.com/api/v4";

package/dist/{http-DOXOhL_I.js → http-Bm-gcgMf.js}

@@ -1,13 +1,14 @@
 import { n as codeFromStatus, r as parseRetryAfter, t as RepoError } from "./errors-Cxq_CqYv.js";
 //#region src/http.ts
 const USER_AGENT = "repo-sdk";
+const UNSAFE_RELATIVE_PATH = /(^|\/)(\.|%2e){1,2}(\/|$)|[?#\\]/i;
 var HttpClient = class {
 	options;
 	constructor(options) {
 		this.options = options;
 	}
 	buildUrl(path, query) {
-		const url = /^https?:\/\//.test(path) ? new URL(path) : new URL(this.options.baseUrl.replace(/\/+$/, "") + "/" + path.replace(/^\/+/, ""));
+		const url = /^https?:\/\//.test(path) ? new URL(path) : this.resolveRelativePath(path);
 		if (query) for (const [key, value] of Object.entries(query)) {
 			if (value === void 0) continue;
 			if (Array.isArray(value)) for (const entry of value) url.searchParams.append(key, entry);
@@ -15,6 +16,15 @@ var HttpClient = class {
 		}
 		return url;
 	}
+	resolveRelativePath(path) {
+		const parsedPath = path.replace(/[\t\n\r]/g, "").replace(/[\u0000- ]+$/, "");
+		if (UNSAFE_RELATIVE_PATH.test(parsedPath)) throw new RepoError(`${this.options.provider} request path must not contain '.' or '..' segments, '?', '#' or '\\'`, {
+			code: "validation",
+			provider: this.options.provider,
+			secrets: this.options.secrets?.() ?? []
+		});
+		return new URL(this.options.baseUrl.replace(/\/+$/, "") + "/" + path.replace(/^\/+/, ""));
+	}
 	async raw(path, options = {}) {
 		const url = this.buildUrl(path, options.query);
 		const fetchImpl = this.options.fetchImpl ?? fetch;

package/dist/index.js

@@ -48,13 +48,26 @@ function createClient(options) {
 	const { provider } = options;
 	const retryRateLimit = options.retry?.rateLimit ?? true;
 	const maxRetryAfterSeconds = options.retry?.maxRetryAfterSeconds ?? 10;
+	function toRepoError(error) {
+		if (error instanceof RepoError) return error;
+		return new RepoError(`${provider.name} returned a response the SDK could not read`, {
+			code: "invalid_response",
+			provider: provider.name,
+			cause: error
+		});
+	}
 	async function withRetry(operation) {
 		try {
 			return await operation();
-		} catch (error) {
-			if (retryRateLimit && error instanceof RepoError && error.code === "rate_limited" && error.retryAfter !== void 0 && error.retryAfter <= maxRetryAfterSeconds) {
+		} catch (caught) {
+			const error = toRepoError(caught);
+			if (retryRateLimit && error.code === "rate_limited" && error.retryAfter !== void 0 && error.retryAfter <= maxRetryAfterSeconds) {
 				await delay(error.retryAfter * 1e3);
-				return operation();
+				try {
+					return await operation();
+				} catch (retried) {
+					throw toRepoError(retried);
+				}
 			}
 			throw error;
 		}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "repo-sdk",
-  "version": "0.3.3",
+  "version": "0.3.5",
   "description": "Unified TypeScript SDK for git providers — GitHub, GitLab, Bitbucket, Azure DevOps, Gitea",
   "license": "MIT",
   "author": "Robin Genz <mail@robingenz.dev>",