@ductape/cli 0.3.33 → 0.3.35

package/dist/commands/resources.js

@@ -8,16 +8,21 @@ import { printJson } from '../lib/output.js';
 import { DuctapeOperationError } from '../lib/operation-error.js';
 import { readCanonicalTopicFile, topicBodyForTransport, validateEventTopicsProject, } from '../lib/event-topics.js';
 const CRUD_VERBS = ['create', 'list', 'get', 'update', 'delete', 'connect'];
-// Modules whose SDK exposes a real fetchAll(product) that decrypts/resolves secret-backed env
-// fields per-env, the same way their single-resource `fetch` does. `resources <module> list` must
-// route through the SDK for these instead of the raw-product-document shortcut below, which plucks
-// the component array straight off the unmodified product document — any secret-backed field
-// (connection_url/username/password) is still in its raw encrypted-at-rest form there, never
-// resolved to a $Secret{} reference. Confirmed by reading source: graphs.service.ts fetchAll() ->
-// products.service.ts fetchGraphs() decrypts each env; databases.service.ts fetchAllDatabases() ->
-// fetchDatabases() decrypts connection_url; vector-database.service.ts fetchAll() has the same
-// per-env resolution. Other modules are left on the shortcut below, unverified.
-const MODULES_WITH_DECRYPTING_FETCH_ALL = new Set(['graph', 'databases', 'vector']);
+// Modules whose SDK exposes a real `list` method (ductape.graph.list / ductape.databases.list /
+// ductape.vector.list — each internally calls a differently-named service method, e.g.
+// GraphsService.fetchAll(), but the public/proxy-facing key is `list`) that decrypts/resolves
+// secret-backed env fields per-env, the same way their single-resource `fetch` does.
+// `resources <module> list` must route through the SDK for these instead of the raw-product-
+// document shortcut below, which plucks the component array straight off the unmodified product
+// document — any secret-backed field (connection_url/username/password) is still in its raw
+// encrypted-at-rest form there, never resolved to a $Secret{} reference. IMPORTANT: the proxy
+// method name must stay `list`, not the internal service method name (`fetchAll`) — the sdk-proxy
+// dispatcher does a literal `moduleObject[method]` lookup against `ductape.graph`/`.databases`/
+// `.vector`, none of which have a `fetchAll` property (only `list`); calling `fetchAll` throws
+// "not callable" (graph) or is rejected by the backend's method allowlist entirely (databases,
+// vector — allowlisted differently per module, `list` not `fetchAll`). Other modules are left on
+// the shortcut below, unverified.
+const MODULES_WITH_DECRYPTING_LIST = new Set(['graph', 'databases', 'vector']);
 export function resolveResourceProductTag(override, linkedProductTag) {
     return override?.trim() || linkedProductTag;
 }
@@ -306,7 +311,7 @@ export async function runResourceCrud(typeName, verb, opts, extraArgs) {
     // body) destructures product's string as `options` and fails with "No database connection
     // established", not a useful error about the definition update. The definition updater is a
     // separate method, databases.updateDatabase(product, database, data).
-    const proxyMethod = (module === 'models' || module === 'feature' || MODULES_WITH_DECRYPTING_FETCH_ALL.has(module)) && method === 'list'
+    const proxyMethod = (module === 'models' || module === 'feature') && method === 'list'
         ? 'fetchAll'
         : module === 'databases' && method === 'update'
             ? 'updateDatabase'
@@ -346,7 +351,7 @@ export async function runResourceCrud(typeName, verb, opts, extraArgs) {
         body: payload,
     });
     const proxy = getSdkProxy(session);
-    if (crud === 'list' && !MODULES_WITH_DECRYPTING_FETCH_ALL.has(module)) {
+    if (crud === 'list' && !MODULES_WITH_DECRYPTING_LIST.has(module)) {
         const product = await proxy.execute('product', 'fetch', [productTag]);
         const catalogue = listComponentsFromProduct(module, product);
         if (catalogue !== undefined) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ductape/cli",
-  "version": "0.3.33",
+  "version": "0.3.35",
   "description": "Ductape CLI — local platform, login, link projects, and manage resources via the proxy (Workbench-compatible)",
   "type": "module",
   "main": "dist/index.js",