Sign In

@mesadev/sdk

Package Overview
Dependencies
Maintainers
8
Versions
68
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install
Package version was removed
This package version has been unpublished, mostly likely due to security reasons
This package has malicious versions linked to the ongoing "Mini Shai-Hulud" supply chain attack.

Affected versions:

0.28.3
View campaign page

@mesadev/sdk

Official Mesa TypeScript SDK

unpublished
Source
npmnpm
Version
0.28.3
Version published
Weekly downloads
9.3K
-29.1%
Maintainers
8
Weekly downloads
 
Created
Source

@mesadev/sdk

Official Mesa TypeScript SDK.

This is the primary TypeScript SDK for Mesa. It includes ergonomic REST resources with default org inference.

Node.js runtime is required.

Install

bun add @mesadev/sdk

Usage

import { Mesa } from '@mesadev/sdk';

const mesa = new Mesa({
  apiKey: process.env.MESA_API_KEY,
});

// Uses org inferred from /whoami
const repo = await mesa.repos.create({ name: 'my-repo' });

// Optional constructor org bypasses /whoami default-org resolution
const mesaWithOrg = new Mesa({
  apiKey: process.env.MESA_API_KEY,
  org: 'acme',
});

await mesaWithOrg.repos.list();

// Per-call org override
await mesa.repos.list({ org: 'other-org' });

console.log(repo.name);

This package exposes org-inferred REST resources under mesa.*.

Configuration

Mesa accepts:

  • apiKey?: string (falls back to MESA_API_KEY in Node)
  • apiUrl?: string (defaults to https://api.mesa.dev/v1)
  • org?: string (optional default org; bypasses /whoami resolution)
  • fetch?: typeof fetch
  • userAgent?: string
  • webhookSecret?: string (used by mesa.webhooks.receive(...))

Webhook Handlers

Register typed handlers with mesa.webhooks.on(...) and pass the incoming request to mesa.webhooks.receive(...). receive verifies the signature, parses the payload, and dispatches any registered handlers.

import { Hono } from 'hono';
import { Mesa } from '@mesadev/sdk';

const mesa = new Mesa({
  apiKey: process.env.MESA_API_KEY,
  webhookSecret: process.env.MESA_WEBHOOK_SECRET,
});

mesa.webhooks.on('push', (event) => {
  console.log('push:', event.data.updates[0]?.ref);
});

const app = new Hono();

app.post('/webhooks/mesa', async (c) => {
  await mesa.webhooks.receive(c.req.raw);
  return c.text('ok');
});

Package Relationship

  • @mesadev/sdk is the ergonomic, main SDK.
  • @mesadev/rest is the generated REST package used under the hood.

Use mesa.raw.* when you need direct generated operations.

Migration Note

If you previously used the older generated @mesadev/sdk package:

  • use apiUrl instead of serverURL
  • rely on default org inference from /whoami or pass org per call
  • use resource namespaces (mesa.repos, mesa.changes, etc.) and mesa.raw.* for low-level calls

FAQs

Package last updated on 11 May 2026

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts