@ductape/cli 0.2.17 → 0.2.18

package/dist/lib/platform-api.js

@@ -53,10 +53,10 @@ export async function getProduct(ctx, opts) {
         return unwrapOne(result);
     }
     if (opts.tag) {
-        const result = await client(ctx).getPath(`/integrations/v1/fetch/tag`, {
-            ...q,
-            tag: opts.tag,
-        });
+        // The integrations REST fetch-by-tag route rejects current CLI login tokens with HTTP 401.
+        // Product inventory is an administrative read, so route it through the authenticated CLI
+        // SDK proxy (x-access-token), not the publishable-key runtime MCP proxy.
+        const result = await proxy(ctx).execute('product', 'fetch', [opts.tag]);
         return unwrapOne(result);
     }
     throw new Error('Provide --id <product_id> or --tag <product_tag>');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ductape/cli",
-  "version": "0.2.17",
+  "version": "0.2.18",
   "description": "Ductape CLI — local platform, login, link projects, and manage resources via the proxy (Workbench-compatible)",
   "type": "module",
   "main": "dist/index.js",

package/src/lib/platform-api.ts

@@ -69,10 +69,10 @@ export async function getProduct(
     return unwrapOne(result);
   }
   if (opts.tag) {
-    const result = await client(ctx).getPath<unknown>(`/integrations/v1/fetch/tag`, {
-      ...q,
-      tag: opts.tag,
-    });
+    // The integrations REST fetch-by-tag route rejects current CLI login tokens with HTTP 401.
+    // Product inventory is an administrative read, so route it through the authenticated CLI
+    // SDK proxy (x-access-token), not the publishable-key runtime MCP proxy.
+    const result = await proxy(ctx).execute<unknown>('product', 'fetch', [opts.tag]);
     return unwrapOne(result);
   }
   throw new Error('Provide --id <product_id> or --tag <product_tag>');

package/test/platform-api.test.ts

@@ -1,5 +1,7 @@
 import { describe, it } from 'node:test';
 import assert from 'node:assert/strict';
+import { readFileSync } from 'node:fs';
+import { fileURLToPath } from 'node:url';
 
 // Test unwrap helpers indirectly via exported patterns — use small inline copies for unit scope
 function unwrapList<T>(result: unknown): T[] {
@@ -16,4 +18,16 @@ describe('platform-api helpers', () => {
     assert.deepEqual(unwrapList({ data: [{ tag: 'b' }] }), [{ tag: 'b' }]);
     assert.deepEqual(unwrapList({}), []);
   });
+
+  it('routes product fetch-by-tag through the authenticated CLI SDK proxy', () => {
+    const source = readFileSync(
+      fileURLToPath(new URL('../src/lib/platform-api.ts', import.meta.url)),
+      'utf8',
+    );
+    assert.match(source, /proxy\(ctx\)\.execute<unknown>\('product', 'fetch', \[opts\.tag\]\)/);
+    assert.doesNotMatch(
+      source,
+      /getPath<unknown>\(`\/integrations\/v1\/fetch\/tag`/,
+    );
+  });
 });