mirror of
https://github.com/garrytan/gstack.git
synced 2026-09-09 22:48:57 +02:00
Garry Tan
127eb33bc6
Three codex-adversarial findings in the provision port: (1) raw DB_PASS interpolation — a reserved character (/ # ? % @) restructured the URI, provisioning succeeded, and every consumer then failed to parse the DSN (unusable billable orphan); now encodeURIComponent, round-trip pinned. (2) await res.text() sat outside the transport try — a server that sent headers then reset the stream was an uncaught exit 1 instead of a retry-then-exit-8. (3) The bin entrypoint called process.exit() after unawaited stdout writes, truncating piped JSON; exitCode lets writes drain.
30 lines
1.3 KiB
TypeScript
Executable File
30 lines
1.3 KiB
TypeScript
Executable File
#!/usr/bin/env -S bun run
|
|
/**
|
|
* gstack-gbrain-supabase-provision — Supabase Management API wrapper for
|
|
* /setup-gbrain path 2a (auto-provision). Thin entry: all logic lives in
|
|
* lib/gbrain-supabase-provision.ts so tests can drive it in-process with
|
|
* injected fetch/env/sleep instead of spawning a process per test.
|
|
*
|
|
* Rewritten from bash to TypeScript; filename and exec semantics unchanged —
|
|
* callers shell out to this path and the bun shebang resolves at runtime
|
|
* (same pattern as bin/gstack-gbrain-detect). CLI surface, stdout/stderr
|
|
* shapes, env handling (SUPABASE_ACCESS_TOKEN / DB_PASS / SUPABASE_API_BASE),
|
|
* and exit codes are unchanged; run --help for the full contract.
|
|
*
|
|
* Egress receipts stay fail-closed at the API-call layer (sink
|
|
* "supabase-provision", receipt-before-send) — see the module header.
|
|
*/
|
|
|
|
import { runProvision } from '../lib/gbrain-supabase-provision';
|
|
|
|
// exitCode, not process.exit(): exit() drops pending stdout writes, which
|
|
// truncates piped JSON / large listings; setting exitCode lets writes drain
|
|
// and the process exit naturally.
|
|
runProvision(process.argv.slice(2)).then(
|
|
(code) => { process.exitCode = code; },
|
|
(error) => {
|
|
process.stderr.write(`gstack-gbrain-supabase-provision: ${(error as Error)?.stack ?? error}\n`);
|
|
process.exitCode = 1;
|
|
},
|
|
);
|