@faable/faable 3.3.0 → 3.3.2

package/dist/api/FaableApi.js

@@ -8,6 +8,13 @@ const RETRY_DELAY_MS = 300;
 const is_connection_reset = (e) => e.isAxiosError &&
     !e.response &&
     (RESET_CODES.has(e.code ?? '') || e.message.includes('socket hang up'));
+// The api's tenant header is `x-faable-project: project_<hex>`; the old
+// `x-faable-team` is deprecated. A project and a team share the hex suffix,
+// so the app's `team` (`team_<hex>`) maps 1:1. Never send both: the api
+// rejects a pair that disagrees.
+const projectHeader = (team) => ({
+    'x-faable-project': team.replace(/^team_/, 'project_')
+});
 const firstPage = async (res) => {
     const items = (await res).results;
     return items;
@@ -165,9 +172,9 @@ class FaableApi {
     // app; the per-secret upsert/delete endpoints are not used by the CLI.
     // The endpoint stamps the created secrets with the team from the request
     // context, which a CLI user token does not carry — pass the app's team
-    // (from getApp) so it travels as the `x-faable-team` header.
+    // (from getApp) so it travels as the `x-faable-project` header.
     async createSecretsBatch(context_id, team, secrets) {
-        return data(this.client.post(`/secret/createbatch`, { context_id, secrets }, { headers: { 'x-faable-team': team } }));
+        return data(this.client.post(`/secret/createbatch`, { context_id, secrets }, { headers: projectHeader(team) }));
     }
     async updateApp(app_id, params) {
         return data(this.client.post(`/app/${app_id}`, params));
@@ -196,7 +203,7 @@ class FaableApi {
     async listDeployments(app_id, team) {
         return firstPage(data(this.client.get(`/deployment`, {
             params: { app_id },
-            headers: { 'x-faable-team': team }
+            headers: projectHeader(team)
         })));
     }
     // Build and deploy the current head of the deploy branch server-side —
@@ -208,44 +215,44 @@ class FaableApi {
     // git ref). The API enforces the guards: failed phase only, never older
     // than what production serves.
     async redeployDeployment(deployment_id, team) {
-        return data(this.client.post(`/deployment/${deployment_id}/redeploy`, undefined, { headers: { 'x-faable-team': team } }));
+        return data(this.client.post(`/deployment/${deployment_id}/redeploy`, undefined, { headers: projectHeader(team) }));
     }
     // Give up on a build still in the pre-handoff window (QUEUED/BUILDING).
     // A route of its own rather than a `{phase: 'CANCELED'}` status write:
     // phase transitions belong to the controller, and the api only lets a user
     // token touch the phases the CLI owns.
     async cancelDeployment(deployment_id, team) {
-        return data(this.client.post(`/deployment/${deployment_id}/cancel`, undefined, { headers: { 'x-faable-team': team } }));
+        return data(this.client.post(`/deployment/${deployment_id}/cancel`, undefined, { headers: projectHeader(team) }));
     }
     // Domains are team-scoped rows; a CLI user token carries no default team,
-    // so every call pins the app's team via `x-faable-team` (same pattern as
-    // createSecretsBatch).
+    // so every call pins the app's project via `x-faable-project` (same pattern
+    // as createSecretsBatch).
     async listDomains(app_id, team) {
         return firstPage(data(this.client.get(`/domain`, {
             params: { app_id },
-            headers: { 'x-faable-team': team }
+            headers: projectHeader(team)
         })));
     }
     async createDomain(team, params) {
         return data(this.client.post(`/domain`, params, {
-            headers: { 'x-faable-team': team }
+            headers: projectHeader(team)
         }));
     }
     async getDomain(domain_id, team) {
         return data(this.client.get(`/domain/${domain_id}`, {
-            headers: { 'x-faable-team': team }
+            headers: projectHeader(team)
         }));
     }
     async deleteDomain(domain_id, team) {
         return data(this.client.delete(`/domain/${domain_id}`, {
-            headers: { 'x-faable-team': team }
+            headers: projectHeader(team)
         }));
     }
     // ── per-app WAF ───────────────────────────────────────────────────────────
     //
-    // No `x-faable-team` header on any of these: the routes are scoped by the
-    // app in the path (the server reads the team off the App row), and sending
-    // a team override would only narrow the lookup.
+    // No `x-faable-project` header on any of these: the routes are scoped by the
+    // app in the path (the server reads the project off the App row), and sending
+    // a project override would only narrow the lookup.
     async getAppWaf(app_id) {
         return data(this.client.get(`/app/${app_id}/waf`));
     }
@@ -259,4 +266,4 @@ class FaableApi {
     }
 }
 
-export { FaableApi };
+export { FaableApi, projectHeader };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@faable/faable",
-  "version": "3.3.0",
+  "version": "3.3.2",
   "main": "dist/index.js",
   "license": "MIT",
   "author": "Marc Pomar <marc@faable.com>",
@@ -27,7 +27,7 @@
   ],
   "dependencies": {
     "@actions/core": "^3.0.0",
-    "@faable/auth-sdk": "^2.6.0",
+    "@faable/auth-sdk": "^2.6.3",
     "axios": "^1.18.1",
     "fs-extra": "^11.3.2",
     "open": "^11.0.0",