Sign In

@mesadev/sdk

Package Overview
Dependencies
Maintainers
4
Versions
69
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install
This package has malicious versions linked to the ongoing "Mini Shai-Hulud" supply chain attack.

Affected versions:

0.28.3
View campaign page

@mesadev/sdk

Official Mesa TypeScript SDK

Source
npmnpm
Version
0.44.0
Version published
Weekly downloads
10K
-24.2%
Maintainers
4
Weekly downloads
 
Created
Source

@mesadev/sdk

Official Mesa TypeScript SDK.

This is the primary TypeScript SDK for Mesa. It includes ergonomic REST resources with default org inference.

Node.js runtime is required.

Install

bun add @mesadev/sdk

Usage

import { Mesa } from '@mesadev/sdk';

const mesa = new Mesa({
  apiKey: process.env.MESA_API_KEY,
});

// Uses org inferred from /whoami
const repo = await mesa.repos.create({ name: 'my-repo' });

// Optional constructor org bypasses /whoami default-org resolution
const mesaWithOrg = new Mesa({
  apiKey: process.env.MESA_API_KEY,
  org: 'acme',
});

await mesaWithOrg.repos.list();

// Per-call org override
await mesa.repos.list({ org: 'other-org' });

console.log(repo.name);

This package exposes org-inferred REST resources under mesa.*.

Configuration

Mesa accepts:

  • apiKey?: string (falls back to MESA_API_KEY in Node)
  • apiUrl?: string (defaults to https://api.mesa.dev/v1)
  • vcsUrl?: string (optional VCS gateway override; only use when self-hosting Mesa)
  • org?: string (optional default org; bypasses /whoami resolution)
  • fetch?: typeof fetch
  • userAgent?: string
  • webhookSecret?: string (used by mesa.webhooks.receive(...))

Webhook Handlers

Register typed handlers with mesa.webhooks.on(...) and pass the incoming request to mesa.webhooks.receive(...). receive verifies the signature, parses the payload, and dispatches any registered handlers.

import { Hono } from 'hono';
import { Mesa } from '@mesadev/sdk';

const mesa = new Mesa({
  apiKey: process.env.MESA_API_KEY,
  webhookSecret: process.env.MESA_WEBHOOK_SECRET,
});

mesa.webhooks.on('push', (event) => {
  console.log('push:', event.data.updates[0]?.ref);
});

const app = new Hono();

app.post('/webhooks/mesa', async (c) => {
  await mesa.webhooks.receive(c.req.raw);
  return c.text('ok');
});

Package Relationship

  • @mesadev/sdk is the ergonomic, main SDK.
  • @mesadev/rest is the generated REST package used under the hood.

Low-Level REST Access

Use @mesadev/rest directly, or call the API with your own HTTP client, when you need low-level REST access beyond the resource namespaces.

Migration Note

If you previously used the older generated @mesadev/sdk package:

  • use apiUrl instead of serverURL
  • rely on default org inference from /whoami or pass org per call
  • use resource namespaces (mesa.repos, mesa.changes, etc.); install @mesadev/rest directly when you need generated REST operations

FAQs

Package last updated on 09 Aug 2026

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts