@supacloud/admin 0.7.0 → 0.7.1

package/dist/index.js

@@ -25159,29 +25159,46 @@ function resolveSupaCloudContext(env = process.env, cwd = process.cwd()) {
 var DEFAULT_TIMEOUT = 30000;
 var MAX_RETRIES = 2;
 var RETRY_BASE_DELAY = 500;
-async function fetchWithRetry(url, options, retries = MAX_RETRIES) {
+function isRetryableMethod(method) {
+  const normalizedMethod = (method ?? "GET").toUpperCase();
+  return normalizedMethod === "GET" || normalizedMethod === "HEAD";
+}
+function isRetryableError(error) {
+  if (!(error instanceof Error))
+    return false;
+  const networkError = error;
+  return networkError.name === "AbortError" || networkError.code === "ECONNREFUSED" || networkError.code === "ECONNRESET";
+}
+async function fetchWithTimeout(url, options) {
+  const controller = new AbortController;
+  const timeout = setTimeout(() => controller.abort(), DEFAULT_TIMEOUT);
+  try {
+    return await fetch(url, {
+      ...options,
+      signal: controller.signal
+    });
+  } finally {
+    clearTimeout(timeout);
+  }
+}
+async function fetchWithRetry(url, options) {
+  const retries = isRetryableMethod(options.method) ? MAX_RETRIES : 0;
   for (let attempt = 0;attempt <= retries; attempt++) {
     try {
-      const controller = new AbortController;
-      const timeout = setTimeout(() => controller.abort(), DEFAULT_TIMEOUT);
-      const res = await fetch(url, {
-        ...options,
-        signal: controller.signal
-      });
-      clearTimeout(timeout);
-      if (res.status >= 500 && attempt < retries) {
+      const res = await fetchWithTimeout(url, options);
+      if (res.status >= 500 && res.status < 600 && attempt < retries) {
         const delay = RETRY_BASE_DELAY * Math.pow(2, attempt);
         await new Promise((r) => setTimeout(r, delay));
         continue;
       }
       return res;
-    } catch (err) {
-      if (attempt < retries && (err.name === "AbortError" || err.code === "ECONNREFUSED" || err.code === "ECONNRESET")) {
+    } catch (error) {
+      if (attempt < retries && isRetryableError(error)) {
         const delay = RETRY_BASE_DELAY * Math.pow(2, attempt);
         await new Promise((r) => setTimeout(r, delay));
         continue;
       }
-      throw err;
+      throw error;
     }
   }
   throw new Error("Unreachable");
@@ -25578,6 +25595,7 @@ class SshTransport {
 import { randomUUID } from "node:crypto";
 var SAFE_CONTAINER_NAME = /^[a-zA-Z0-9][a-zA-Z0-9_.-]{0,127}$/;
 var SAFE_PROJECT_REF = /^[a-z0-9-]{1,20}$/;
+var SAFE_SCHEMA_IDENTIFIER = /^[a-zA-Z_][a-zA-Z0-9_]{0,62}$/;
 var SAFE_RELEASE_TAG = /^[a-zA-Z0-9._-]{1,80}$/;
 var SAFE_TIMEOUT_SECONDS = 300;
 var SAFE_HOSTNAME = /^(?=.{1,253}$)(?:[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?)(?:\.(?:[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?))*$/;
@@ -26071,12 +26089,15 @@ ${output}`;
         if (sourceRef === targetRef)
           throw new Error("source_ref and target_ref must be different");
         const s = args.schemas || "public,auth,storage";
-        if (!/^[a-z_,\s]+$/.test(s))
-          throw new Error("Invalid schemas");
         const schemas = s.split(",").map((x) => x.trim()).filter(Boolean);
         if (schemas.length === 0)
           throw new Error("At least one schema is required");
-        const schemaArgs = schemas.map((schema) => `-n ${schema}`).join(" ");
+        for (const schema of schemas) {
+          if (!SAFE_SCHEMA_IDENTIFIER.test(schema)) {
+            throw new Error(`Invalid schema identifier: ${JSON.stringify(schema)}`);
+          }
+        }
+        const schemaArgs = schemas.map((schema) => `-n '${schema}'`).join(" ");
         const df = args.data_only ? "--data-only" : "";
         const cmd = [
           "set -euo pipefail",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@supacloud/admin",
-  "version": "0.7.0",
+  "version": "0.7.1",
   "description": "Platform administration CLI for SupaCloud operators",
   "type": "module",
   "main": "./dist/index.js",