Enforce HTTP status range in APIResponse

Co-authored-by: Shri Sukhani <shrisukhani@users.noreply.github.com>

Author: cursoragent

hyperbrowser/transport/base.py

@@ -8,6 +8,8 @@
 _TRUNCATED_DISPLAY_SUFFIX = "... (truncated)"
 _MAX_MODEL_NAME_DISPLAY_LENGTH = 120
 _MAX_MAPPING_KEY_DISPLAY_LENGTH = 120
+_MIN_HTTP_STATUS_CODE = 100
+_MAX_HTTP_STATUS_CODE = 599
 
 
 def _sanitize_display_text(value: str, *, max_length: int) -> str:
@@ -57,6 +59,8 @@ class APIResponse(Generic[T]):
     def __init__(self, data: Optional[Union[dict, T]] = None, status_code: int = 200):
         if isinstance(status_code, bool) or not isinstance(status_code, int):
             raise HyperbrowserError("status_code must be an integer")
+        if not (_MIN_HTTP_STATUS_CODE <= status_code <= _MAX_HTTP_STATUS_CODE):
+            raise HyperbrowserError("status_code must be between 100 and 599")
         self.data = data
         self.status_code = status_code
 

tests/test_transport_base.py

@@ -245,6 +245,22 @@ def test_api_response_constructor_rejects_boolean_status_code() -> None:
         APIResponse(status_code=True)
 
 
+@pytest.mark.parametrize("status_code", [99, 600])
+def test_api_response_constructor_rejects_out_of_range_status_code(
+    status_code: int,
+) -> None:
+    with pytest.raises(HyperbrowserError, match="status_code must be between 100 and 599"):
+        APIResponse(status_code=status_code)
+
+
 def test_api_response_from_status_rejects_boolean_status_code() -> None:
     with pytest.raises(HyperbrowserError, match="status_code must be an integer"):
         APIResponse.from_status(True)  # type: ignore[arg-type]
+
+
+@pytest.mark.parametrize("status_code", [99, 600])
+def test_api_response_from_status_rejects_out_of_range_status_code(
+    status_code: int,
+) -> None:
+    with pytest.raises(HyperbrowserError, match="status_code must be between 100 and 599"):
+        APIResponse.from_status(status_code)