@ductape/cli 0.3.32 → 0.3.34

package/dist/commands/resources.js

@@ -8,6 +8,21 @@ import { printJson } from '../lib/output.js';
 import { DuctapeOperationError } from '../lib/operation-error.js';
 import { readCanonicalTopicFile, topicBodyForTransport, validateEventTopicsProject, } from '../lib/event-topics.js';
 const CRUD_VERBS = ['create', 'list', 'get', 'update', 'delete', 'connect'];
+// Modules whose SDK exposes a real `list` method (ductape.graph.list / ductape.databases.list /
+// ductape.vector.list — each internally calls a differently-named service method, e.g.
+// GraphsService.fetchAll(), but the public/proxy-facing key is `list`) that decrypts/resolves
+// secret-backed env fields per-env, the same way their single-resource `fetch` does.
+// `resources <module> list` must route through the SDK for these instead of the raw-product-
+// document shortcut below, which plucks the component array straight off the unmodified product
+// document — any secret-backed field (connection_url/username/password) is still in its raw
+// encrypted-at-rest form there, never resolved to a $Secret{} reference. IMPORTANT: the proxy
+// method name must stay `list`, not the internal service method name (`fetchAll`) — the sdk-proxy
+// dispatcher does a literal `moduleObject[method]` lookup against `ductape.graph`/`.databases`/
+// `.vector`, none of which have a `fetchAll` property (only `list`); calling `fetchAll` throws
+// "not callable" (graph) or is rejected by the backend's method allowlist entirely (databases,
+// vector — allowlisted differently per module, `list` not `fetchAll`). Other modules are left on
+// the shortcut below, unverified.
+const MODULES_WITH_DECRYPTING_LIST = new Set(['graph', 'databases', 'vector']);
 export function resolveResourceProductTag(override, linkedProductTag) {
     return override?.trim() || linkedProductTag;
 }
@@ -336,7 +351,7 @@ export async function runResourceCrud(typeName, verb, opts, extraArgs) {
         body: payload,
     });
     const proxy = getSdkProxy(session);
-    if (crud === 'list') {
+    if (crud === 'list' && !MODULES_WITH_DECRYPTING_LIST.has(module)) {
         const product = await proxy.execute('product', 'fetch', [productTag]);
         const catalogue = listComponentsFromProduct(module, product);
         if (catalogue !== undefined) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ductape/cli",
-  "version": "0.3.32",
+  "version": "0.3.34",
   "description": "Ductape CLI — local platform, login, link projects, and manage resources via the proxy (Workbench-compatible)",
   "type": "module",
   "main": "dist/index.js",