@onlineapps/conn-orch-api-mapper 1.0.18 → 1.0.20

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@onlineapps/conn-orch-api-mapper",
-  "version": "1.0.18",
+  "version": "1.0.20",
   "description": "API mapping connector for OA Drive - maps cookbook operations to HTTP endpoints",
   "main": "src/index.js",
   "scripts": {

package/src/ApiMapper.js

@@ -414,7 +414,7 @@ class ApiMapper {
       const handlerInput = await this._resolveContentDescriptors(resolvedInput, operation);
 
       // Build request
-      const request = this._buildRequest(operation, handlerInput);
+      const request = this._buildRequest(operation, handlerInput, context);
 
       // Make the call
       let response;
@@ -664,9 +664,10 @@ class ApiMapper {
    * @private
    * @param {Object} operation - Operation definition
    * @param {Object} input - Resolved input
+   * @param {Object} context - Workflow context (may include _system.account_id)
    * @returns {Object} Request object
    */
-  _buildRequest(operation, input) {
+  _buildRequest(operation, input, context = {}) {
     const request = {
       method: operation.method,
       url: this.serviceUrl + operation.path,
@@ -716,6 +717,19 @@ class ApiMapper {
       }
     }
 
+    // Multitenancy: propagate account context from workflow _system into HTTP header.
+    // This is the single source of truth for workflow-scoped tenant.
+    // NOTE: Gateway must set cookbook._system.account_id explicitly (no fallbacks).
+    const sys = context && typeof context === 'object' ? context._system : null;
+    if (sys && Object.prototype.hasOwnProperty.call(sys, 'account_id')) {
+      const accountId = Number.parseInt(String(sys.account_id), 10);
+      if (!Number.isInteger(accountId) || accountId <= 0) {
+        throw new Error(`[ApiMapper][AccountContext] Invalid account context - Expected context._system.account_id to be a positive integer, got: ${sys.account_id}`);
+      }
+      // Do not allow step input to override tenant header
+      request.headers['account-id'] = String(accountId);
+    }
+
     return request;
   }