@carthooks/arcubase-cli 0.1.6 → 0.1.7

package/bundle/arcubase-admin.mjs

@@ -92,9 +92,7 @@ function optionalValue(env, scope, key) {
 function loadRuntimeEnv(scope, env = process.env) {
   return {
     ARCUBASE_BASE_URL: requiredValue(env, scope, "ARCUBASE_BASE_URL"),
-    ARCUBASE_TENANT_ID: requiredValue(env, scope, "ARCUBASE_TENANT_ID"),
     ARCUBASE_ACCESS_TOKEN: requiredValue(env, scope, "ARCUBASE_ACCESS_TOKEN"),
-    ARCUBASE_HOST: optionalValue(env, scope, "ARCUBASE_HOST"),
     ARCUBASE_TRACE_ID: optionalValue(env, scope, "ARCUBASE_TRACE_ID"),
     ARCUBASE_SUBJECT_TYPE: optionalValue(env, scope, "ARCUBASE_SUBJECT_TYPE"),
     ARCUBASE_SUBJECT_ID: optionalValue(env, scope, "ARCUBASE_SUBJECT_ID"),
@@ -105,12 +103,8 @@ function loadRuntimeEnv(scope, env = process.env) {
 // src/runtime/http.ts
 function buildRequestHeaders(env) {
   const headers = {
-    Authorization: `Bearer ${env.ARCUBASE_ACCESS_TOKEN}`,
-    "X-Tenant-Id": env.ARCUBASE_TENANT_ID
+    Authorization: `Bearer ${env.ARCUBASE_ACCESS_TOKEN}`
   };
-  if (env.ARCUBASE_HOST && env.ARCUBASE_HOST.trim() !== "") {
-    headers["X-Host"] = env.ARCUBASE_HOST;
-  }
   if (env.ARCUBASE_TRACE_ID) {
     headers["X-Trace-Id"] = env.ARCUBASE_TRACE_ID;
   }

package/bundle/arcubase.mjs

@@ -92,9 +92,7 @@ function optionalValue(env, scope, key) {
 function loadRuntimeEnv(scope, env = process.env) {
   return {
     ARCUBASE_BASE_URL: requiredValue(env, scope, "ARCUBASE_BASE_URL"),
-    ARCUBASE_TENANT_ID: requiredValue(env, scope, "ARCUBASE_TENANT_ID"),
     ARCUBASE_ACCESS_TOKEN: requiredValue(env, scope, "ARCUBASE_ACCESS_TOKEN"),
-    ARCUBASE_HOST: optionalValue(env, scope, "ARCUBASE_HOST"),
     ARCUBASE_TRACE_ID: optionalValue(env, scope, "ARCUBASE_TRACE_ID"),
     ARCUBASE_SUBJECT_TYPE: optionalValue(env, scope, "ARCUBASE_SUBJECT_TYPE"),
     ARCUBASE_SUBJECT_ID: optionalValue(env, scope, "ARCUBASE_SUBJECT_ID"),
@@ -105,12 +103,8 @@ function loadRuntimeEnv(scope, env = process.env) {
 // src/runtime/http.ts
 function buildRequestHeaders(env) {
   const headers = {
-    Authorization: `Bearer ${env.ARCUBASE_ACCESS_TOKEN}`,
-    "X-Tenant-Id": env.ARCUBASE_TENANT_ID
+    Authorization: `Bearer ${env.ARCUBASE_ACCESS_TOKEN}`
   };
-  if (env.ARCUBASE_HOST && env.ARCUBASE_HOST.trim() !== "") {
-    headers["X-Host"] = env.ARCUBASE_HOST;
-  }
   if (env.ARCUBASE_TRACE_ID) {
     headers["X-Trace-Id"] = env.ARCUBASE_TRACE_ID;
   }

package/dist/runtime/env.d.ts

@@ -1,8 +1,6 @@
 export type RuntimeEnv = {
     ARCUBASE_BASE_URL: string;
-    ARCUBASE_TENANT_ID: string;
     ARCUBASE_ACCESS_TOKEN: string;
-    ARCUBASE_HOST?: string;
     ARCUBASE_TRACE_ID?: string;
     ARCUBASE_SUBJECT_TYPE?: string;
     ARCUBASE_SUBJECT_ID?: string;

package/dist/runtime/env.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../src/runtime/env.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,UAAU,GAAG;IACvB,iBAAiB,EAAE,MAAM,CAAA;IACzB,kBAAkB,EAAE,MAAM,CAAA;IAC1B,qBAAqB,EAAE,MAAM,CAAA;IAC7B,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,yBAAyB,CAAC,EAAE,MAAM,CAAA;CACnC,CAAA;AAED,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,MAAM,CAAA;AAE9C,KAAK,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAA;AAqClD,wBAAgB,cAAc,CAAC,KAAK,EAAE,eAAe,EAAE,GAAG,GAAE,QAAsB,GAAG,UAAU,CAW9F"}
+{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../src/runtime/env.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,UAAU,GAAG;IACvB,iBAAiB,EAAE,MAAM,CAAA;IACzB,qBAAqB,EAAE,MAAM,CAAA;IAC7B,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,yBAAyB,CAAC,EAAE,MAAM,CAAA;CACnC,CAAA;AAED,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,MAAM,CAAA;AAE9C,KAAK,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAA;AAqClD,wBAAgB,cAAc,CAAC,KAAK,EAAE,eAAe,EAAE,GAAG,GAAE,QAAsB,GAAG,UAAU,CAS9F"}

package/dist/runtime/env.js

@@ -32,9 +32,7 @@ function optionalValue(env, scope, key) {
 export function loadRuntimeEnv(scope, env = process.env) {
     return {
         ARCUBASE_BASE_URL: requiredValue(env, scope, 'ARCUBASE_BASE_URL'),
-        ARCUBASE_TENANT_ID: requiredValue(env, scope, 'ARCUBASE_TENANT_ID'),
         ARCUBASE_ACCESS_TOKEN: requiredValue(env, scope, 'ARCUBASE_ACCESS_TOKEN'),
-        ARCUBASE_HOST: optionalValue(env, scope, 'ARCUBASE_HOST'),
         ARCUBASE_TRACE_ID: optionalValue(env, scope, 'ARCUBASE_TRACE_ID'),
         ARCUBASE_SUBJECT_TYPE: optionalValue(env, scope, 'ARCUBASE_SUBJECT_TYPE'),
         ARCUBASE_SUBJECT_ID: optionalValue(env, scope, 'ARCUBASE_SUBJECT_ID'),

package/dist/runtime/http.d.ts

@@ -1,5 +1,5 @@
 import type { RuntimeEnv } from './env.js';
-export declare function buildRequestHeaders(env: Pick<RuntimeEnv, 'ARCUBASE_ACCESS_TOKEN' | 'ARCUBASE_TENANT_ID' | 'ARCUBASE_HOST' | 'ARCUBASE_TRACE_ID'>): Record<string, string>;
+export declare function buildRequestHeaders(env: Pick<RuntimeEnv, 'ARCUBASE_ACCESS_TOKEN' | 'ARCUBASE_TRACE_ID'>): Record<string, string>;
 export declare function normalizeExternalEndpoint(endpoint: string): string;
 export declare function buildURL(baseURL: string, endpoint: string, query?: Record<string, any>): string;
 //# sourceMappingURL=http.d.ts.map

package/dist/runtime/http.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../src/runtime/http.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,UAAU,CAAA;AAE1C,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,EAAE,uBAAuB,GAAG,oBAAoB,GAAG,eAAe,GAAG,mBAAmB,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAYzK;AAED,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CASlE;AAED,wBAAgB,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,MAAM,CAS/F"}
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../src/runtime/http.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,UAAU,CAAA;AAE1C,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,EAAE,uBAAuB,GAAG,mBAAmB,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAQhI;AAED,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CASlE;AAED,wBAAgB,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,MAAM,CAS/F"}

package/dist/runtime/http.js

@@ -1,11 +1,7 @@
 export function buildRequestHeaders(env) {
     const headers = {
         Authorization: `Bearer ${env.ARCUBASE_ACCESS_TOKEN}`,
-        'X-Tenant-Id': env.ARCUBASE_TENANT_ID
     };
-    if (env.ARCUBASE_HOST && env.ARCUBASE_HOST.trim() !== '') {
-        headers['X-Host'] = env.ARCUBASE_HOST;
-    }
     if (env.ARCUBASE_TRACE_ID) {
         headers['X-Trace-Id'] = env.ARCUBASE_TRACE_ID;
     }

package/dist/tests/bootstrap.test.js

@@ -1,21 +1,18 @@
 import test from 'node:test';
 import assert from 'node:assert/strict';
 import { loadRuntimeEnv } from '../runtime/env.js';
-test('loadRuntimeEnv requires base url, tenant id and access token', () => {
+test('loadRuntimeEnv requires base url and access token', () => {
     assert.throws(() => loadRuntimeEnv('admin', {}), /ARCUBASE_BASE_URL is required/);
 });
 test('loadRuntimeEnv returns normalized runtime env', () => {
     const env = loadRuntimeEnv('admin', {
         ARCUBASE_BASE_URL: ' http://example.com ',
-        ARCUBASE_TENANT_ID: ' tenant-1 ',
         ARCUBASE_ACCESS_TOKEN: ' token-1 ',
         ARCUBASE_TRACE_ID: ' trace-1 '
     });
     assert.deepEqual(env, {
         ARCUBASE_BASE_URL: 'http://example.com',
-        ARCUBASE_TENANT_ID: 'tenant-1',
         ARCUBASE_ACCESS_TOKEN: 'token-1',
-        ARCUBASE_HOST: undefined,
         ARCUBASE_TRACE_ID: 'trace-1',
         ARCUBASE_SUBJECT_TYPE: undefined,
         ARCUBASE_SUBJECT_ID: undefined,
@@ -25,17 +22,13 @@ test('loadRuntimeEnv returns normalized runtime env', () => {
 test('loadRuntimeEnv accepts admin-prefixed runtime env', () => {
     const env = loadRuntimeEnv('admin', {
         ARCUBASE_ADMIN_BASE_URL: ' https://admin.example.com ',
-        ARCUBASE_ADMIN_TENANT_ID: ' tenant-admin ',
         ARCUBASE_ADMIN_ACCESS_TOKEN: ' token-admin ',
-        ARCUBASE_ADMIN_HOST: ' tenant-admin.arcubase.co ',
         ARCUBASE_ADMIN_SUBJECT_TYPE: ' system_admin ',
         ARCUBASE_ADMIN_SUBJECT_ID: ' user-admin ',
     });
     assert.deepEqual(env, {
         ARCUBASE_BASE_URL: 'https://admin.example.com',
-        ARCUBASE_TENANT_ID: 'tenant-admin',
         ARCUBASE_ACCESS_TOKEN: 'token-admin',
-        ARCUBASE_HOST: 'tenant-admin.arcubase.co',
         ARCUBASE_TRACE_ID: undefined,
         ARCUBASE_SUBJECT_TYPE: 'system_admin',
         ARCUBASE_SUBJECT_ID: 'user-admin',
@@ -45,17 +38,13 @@ test('loadRuntimeEnv accepts admin-prefixed runtime env', () => {
 test('loadRuntimeEnv accepts user-prefixed runtime env', () => {
     const env = loadRuntimeEnv('user', {
         ARCUBASE_USER_BASE_URL: ' https://user.example.com ',
-        ARCUBASE_USER_TENANT_ID: ' tenant-user ',
         ARCUBASE_USER_ACCESS_TOKEN: ' token-user ',
-        ARCUBASE_USER_HOST: ' tenant-user.arcubase.co ',
         ARCUBASE_USER_SUBJECT_TYPE: ' service_account ',
         ARCUBASE_USER_SUBJECT_ID: ' sa-user ',
     });
     assert.deepEqual(env, {
         ARCUBASE_BASE_URL: 'https://user.example.com',
-        ARCUBASE_TENANT_ID: 'tenant-user',
         ARCUBASE_ACCESS_TOKEN: 'token-user',
-        ARCUBASE_HOST: 'tenant-user.arcubase.co',
         ARCUBASE_TRACE_ID: undefined,
         ARCUBASE_SUBJECT_TYPE: 'service_account',
         ARCUBASE_SUBJECT_ID: 'sa-user',

package/dist/tests/execute_validation.test.js

@@ -7,9 +7,7 @@ import { executeCLI } from '../runtime/execute.js';
 import { CLIError } from '../runtime/errors.js';
 const env = {
     ARCUBASE_BASE_URL: 'https://arcubase.example.com',
-    ARCUBASE_TENANT_ID: 'tenant_1',
     ARCUBASE_ACCESS_TOKEN: 'tok',
-    ARCUBASE_HOST: 'tenant_1.arcubase.co',
     ARCUBASE_TRACE_ID: '',
     ARCUBASE_SUBJECT_TYPE: '',
     ARCUBASE_SUBJECT_ID: '',
@@ -49,11 +47,13 @@ test('admin create app by tenants rejects name longer than 20 chars', async () =
 });
 test('admin create entity executes with valid body file', async () => {
     const bodyFile = tempJSONFile({ name: '订单', parent: 0 });
-    const out = await executeCLI('admin', ['app', 'create-entity', '--id', 'app_1', '--body-file', bodyFile], env, async (url, init) => new Response(JSON.stringify({ ok: true, url, method: init?.method, host: init?.headers?.['X-Host'] }), { status: 200 }));
+    const out = await executeCLI('admin', ['app', 'create-entity', '--id', 'app_1', '--body-file', bodyFile], env, async (url, init) => new Response(JSON.stringify({ ok: true, url, method: init?.method, headers: init?.headers }), { status: 200 }));
     assert.equal(out.kind, 'result');
     assert.equal(out.status, 200);
     assert.equal(out.data.url, 'https://arcubase.example.com/apps/app_1/entities');
-    assert.equal(out.data.host, 'tenant_1.arcubase.co');
+    assert.equal(out.data.headers['Authorization'], 'Bearer tok');
+    assert.equal(out.data.headers['X-Host'], undefined);
+    assert.equal(out.data.headers['X-Tenant-Id'], undefined);
 });
 test('admin api-prefixed command executes against external root path', async () => {
     const out = await executeCLI('admin', ['app-entity-share', 'get-app-entity-shares', '--app-id', 'app_1'], env, async (url, init) => new Response(JSON.stringify({ ok: true, url, method: init?.method }), { status: 200 }));

package/dist/tests/help.test.js

@@ -3,7 +3,6 @@ import assert from 'node:assert/strict';
 import { executeCLI } from '../runtime/execute.js';
 const env = {
     ARCUBASE_BASE_URL: 'https://arcubase.example.com',
-    ARCUBASE_TENANT_ID: 'tenant_1',
     ARCUBASE_ACCESS_TOKEN: 'tok',
     ARCUBASE_TRACE_ID: '',
     ARCUBASE_SUBJECT_TYPE: '',

package/dist/tests/upload.test.js

@@ -6,7 +6,6 @@ import path from 'path';
 import { executeCLI } from '../runtime/execute.js';
 const env = {
     ARCUBASE_BASE_URL: 'https://arcubase.example.com',
-    ARCUBASE_TENANT_ID: 'tenant_1',
     ARCUBASE_ACCESS_TOKEN: 'tok',
     ARCUBASE_TRACE_ID: '',
     ARCUBASE_SUBJECT_TYPE: '',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@carthooks/arcubase-cli",
-  "version": "0.1.6",
+  "version": "0.1.7",
   "description": "Arcubase runtime CLI for admin and user command execution",
   "type": "module",
   "main": "./dist/index.js",

package/sdk-dist/docs/runtime-reference/README.md

@@ -101,22 +101,16 @@ arcubase rows query-entity \
 The CLIs accept either generic env keys:
 
 - `ARCUBASE_BASE_URL`
-- `ARCUBASE_TENANT_ID`
 - `ARCUBASE_ACCESS_TOKEN`
-- `ARCUBASE_HOST`
 
 or scoped env keys:
 
 - admin:
   - `ARCUBASE_ADMIN_BASE_URL`
-  - `ARCUBASE_ADMIN_TENANT_ID`
   - `ARCUBASE_ADMIN_ACCESS_TOKEN`
-  - `ARCUBASE_ADMIN_HOST`
 - user:
   - `ARCUBASE_USER_BASE_URL`
-  - `ARCUBASE_USER_TENANT_ID`
   - `ARCUBASE_USER_ACCESS_TOKEN`
-  - `ARCUBASE_USER_HOST`
 
 Help should work without runtime env:
 

package/sdk-dist/docs/runtime-reference/app-discovery.md

@@ -58,22 +58,6 @@ If the app already exists:
 3. inspect the existing entity list
 4. decide whether to create a new entity or write rows into an existing entity
 
-## Per-employee permission scenarios
-
-If the business requirement says different digiEmployees should have different Arcubase abilities:
-
-- first resolve the app with `arcubase-admin app inventory`
-- then resolve digiEmployee mappings with `arcubase.get_digiemployee_users`
-- then continue with ingress-oriented admin configuration
-
-Do not treat this as a reason to ask the user for:
-
-- `app_id`
-- `entity_id`
-- `tenantUserId`
-
-Do not treat this as a primary app-sharing or permission-template discovery task.
-
 ## New app flow
 
 If the user clearly wants a brand-new app:

package/src/runtime/env.ts

@@ -1,8 +1,6 @@
 export type RuntimeEnv = {
   ARCUBASE_BASE_URL: string
-  ARCUBASE_TENANT_ID: string
   ARCUBASE_ACCESS_TOKEN: string
-  ARCUBASE_HOST?: string
   ARCUBASE_TRACE_ID?: string
   ARCUBASE_SUBJECT_TYPE?: string
   ARCUBASE_SUBJECT_ID?: string
@@ -51,9 +49,7 @@ function optionalValue(env: EnvInput, scope: RuntimeEnvScope, key: keyof Runtime
 export function loadRuntimeEnv(scope: RuntimeEnvScope, env: EnvInput = process.env): RuntimeEnv {
   return {
     ARCUBASE_BASE_URL: requiredValue(env, scope, 'ARCUBASE_BASE_URL'),
-    ARCUBASE_TENANT_ID: requiredValue(env, scope, 'ARCUBASE_TENANT_ID'),
     ARCUBASE_ACCESS_TOKEN: requiredValue(env, scope, 'ARCUBASE_ACCESS_TOKEN'),
-    ARCUBASE_HOST: optionalValue(env, scope, 'ARCUBASE_HOST'),
     ARCUBASE_TRACE_ID: optionalValue(env, scope, 'ARCUBASE_TRACE_ID'),
     ARCUBASE_SUBJECT_TYPE: optionalValue(env, scope, 'ARCUBASE_SUBJECT_TYPE'),
     ARCUBASE_SUBJECT_ID: optionalValue(env, scope, 'ARCUBASE_SUBJECT_ID'),

package/src/runtime/http.ts

@@ -1,12 +1,8 @@
 import type { RuntimeEnv } from './env.js'
 
-export function buildRequestHeaders(env: Pick<RuntimeEnv, 'ARCUBASE_ACCESS_TOKEN' | 'ARCUBASE_TENANT_ID' | 'ARCUBASE_HOST' | 'ARCUBASE_TRACE_ID'>): Record<string, string> {
+export function buildRequestHeaders(env: Pick<RuntimeEnv, 'ARCUBASE_ACCESS_TOKEN' | 'ARCUBASE_TRACE_ID'>): Record<string, string> {
   const headers: Record<string, string> = {
     Authorization: `Bearer ${env.ARCUBASE_ACCESS_TOKEN}`,
-    'X-Tenant-Id': env.ARCUBASE_TENANT_ID
-  }
-  if (env.ARCUBASE_HOST && env.ARCUBASE_HOST.trim() !== '') {
-    headers['X-Host'] = env.ARCUBASE_HOST
   }
   if (env.ARCUBASE_TRACE_ID) {
     headers['X-Trace-Id'] = env.ARCUBASE_TRACE_ID

package/src/tests/bootstrap.test.ts

@@ -3,23 +3,20 @@ import assert from 'node:assert/strict'
 
 import { loadRuntimeEnv } from '../runtime/env.js'
 
-test('loadRuntimeEnv requires base url, tenant id and access token', () => {
+test('loadRuntimeEnv requires base url and access token', () => {
   assert.throws(() => loadRuntimeEnv('admin', {}), /ARCUBASE_BASE_URL is required/)
 })
 
 test('loadRuntimeEnv returns normalized runtime env', () => {
   const env = loadRuntimeEnv('admin', {
     ARCUBASE_BASE_URL: ' http://example.com ',
-    ARCUBASE_TENANT_ID: ' tenant-1 ',
     ARCUBASE_ACCESS_TOKEN: ' token-1 ',
     ARCUBASE_TRACE_ID: ' trace-1 '
   })
 
   assert.deepEqual(env, {
     ARCUBASE_BASE_URL: 'http://example.com',
-    ARCUBASE_TENANT_ID: 'tenant-1',
     ARCUBASE_ACCESS_TOKEN: 'token-1',
-    ARCUBASE_HOST: undefined,
     ARCUBASE_TRACE_ID: 'trace-1',
     ARCUBASE_SUBJECT_TYPE: undefined,
     ARCUBASE_SUBJECT_ID: undefined,
@@ -30,18 +27,14 @@ test('loadRuntimeEnv returns normalized runtime env', () => {
 test('loadRuntimeEnv accepts admin-prefixed runtime env', () => {
   const env = loadRuntimeEnv('admin', {
     ARCUBASE_ADMIN_BASE_URL: ' https://admin.example.com ',
-    ARCUBASE_ADMIN_TENANT_ID: ' tenant-admin ',
     ARCUBASE_ADMIN_ACCESS_TOKEN: ' token-admin ',
-    ARCUBASE_ADMIN_HOST: ' tenant-admin.arcubase.co ',
     ARCUBASE_ADMIN_SUBJECT_TYPE: ' system_admin ',
     ARCUBASE_ADMIN_SUBJECT_ID: ' user-admin ',
   })
 
   assert.deepEqual(env, {
     ARCUBASE_BASE_URL: 'https://admin.example.com',
-    ARCUBASE_TENANT_ID: 'tenant-admin',
     ARCUBASE_ACCESS_TOKEN: 'token-admin',
-    ARCUBASE_HOST: 'tenant-admin.arcubase.co',
     ARCUBASE_TRACE_ID: undefined,
     ARCUBASE_SUBJECT_TYPE: 'system_admin',
     ARCUBASE_SUBJECT_ID: 'user-admin',
@@ -52,18 +45,14 @@ test('loadRuntimeEnv accepts admin-prefixed runtime env', () => {
 test('loadRuntimeEnv accepts user-prefixed runtime env', () => {
   const env = loadRuntimeEnv('user', {
     ARCUBASE_USER_BASE_URL: ' https://user.example.com ',
-    ARCUBASE_USER_TENANT_ID: ' tenant-user ',
     ARCUBASE_USER_ACCESS_TOKEN: ' token-user ',
-    ARCUBASE_USER_HOST: ' tenant-user.arcubase.co ',
     ARCUBASE_USER_SUBJECT_TYPE: ' service_account ',
     ARCUBASE_USER_SUBJECT_ID: ' sa-user ',
   })
 
   assert.deepEqual(env, {
     ARCUBASE_BASE_URL: 'https://user.example.com',
-    ARCUBASE_TENANT_ID: 'tenant-user',
     ARCUBASE_ACCESS_TOKEN: 'token-user',
-    ARCUBASE_HOST: 'tenant-user.arcubase.co',
     ARCUBASE_TRACE_ID: undefined,
     ARCUBASE_SUBJECT_TYPE: 'service_account',
     ARCUBASE_SUBJECT_ID: 'sa-user',

package/src/tests/execute_validation.test.ts

@@ -8,9 +8,7 @@ import { CLIError } from '../runtime/errors.js'
 
 const env = {
   ARCUBASE_BASE_URL: 'https://arcubase.example.com',
-  ARCUBASE_TENANT_ID: 'tenant_1',
   ARCUBASE_ACCESS_TOKEN: 'tok',
-  ARCUBASE_HOST: 'tenant_1.arcubase.co',
   ARCUBASE_TRACE_ID: '',
   ARCUBASE_SUBJECT_TYPE: '',
   ARCUBASE_SUBJECT_ID: '',
@@ -63,12 +61,14 @@ test('admin create entity executes with valid body file', async () => {
     'admin',
     ['app', 'create-entity', '--id', 'app_1', '--body-file', bodyFile],
     env as any,
-    async (url, init) => new Response(JSON.stringify({ ok: true, url, method: init?.method, host: (init?.headers as Record<string, string>)?.['X-Host'] }), { status: 200 })
+    async (url, init) => new Response(JSON.stringify({ ok: true, url, method: init?.method, headers: init?.headers }), { status: 200 })
   )
   assert.equal(out.kind, 'result')
   assert.equal(out.status, 200)
   assert.equal(out.data.url, 'https://arcubase.example.com/apps/app_1/entities')
-  assert.equal(out.data.host, 'tenant_1.arcubase.co')
+  assert.equal(out.data.headers['Authorization'], 'Bearer tok')
+  assert.equal(out.data.headers['X-Host'], undefined)
+  assert.equal(out.data.headers['X-Tenant-Id'], undefined)
 })
 
 test('admin api-prefixed command executes against external root path', async () => {

package/src/tests/help.test.ts

@@ -4,7 +4,6 @@ import { executeCLI } from '../runtime/execute.js'
 
 const env = {
   ARCUBASE_BASE_URL: 'https://arcubase.example.com',
-  ARCUBASE_TENANT_ID: 'tenant_1',
   ARCUBASE_ACCESS_TOKEN: 'tok',
   ARCUBASE_TRACE_ID: '',
   ARCUBASE_SUBJECT_TYPE: '',

package/src/tests/upload.test.ts

@@ -7,7 +7,6 @@ import { executeCLI } from '../runtime/execute.js'
 
 const env = {
   ARCUBASE_BASE_URL: 'https://arcubase.example.com',
-  ARCUBASE_TENANT_ID: 'tenant_1',
   ARCUBASE_ACCESS_TOKEN: 'tok',
   ARCUBASE_TRACE_ID: '',
   ARCUBASE_SUBJECT_TYPE: '',