@cloudgrid-io/mcp 0.20.4 → 0.20.6

package/src/corpus/workflows/web-app.md

@@ -4,7 +4,7 @@ when: calculator, converter, generator, timer, quiz, interactive tool, mini-app,
 needs: none
 deploy: inspiration
 editions: all
-capabilities_note: static — no infrastructure, state lives only in memory. Publishes as an inspiration (instant, works on hosted) via grid_plug.
+capabilities_note: static — no infrastructure, state lives only in memory. Publishes as an inspiration (instant, works on hosted) via grid_deploy.
 summary: Fetch the web-app template, adapt its markup and inline JS to the user's tool, deploy it, and return the live share URL.
 ---
 
@@ -14,9 +14,9 @@ Detect the intent ("build me a web app / tool / calculator that does X") and
 follow this recipe. Do not ask setup questions first; use sensible defaults and
 build.
 
-1. **Fetch the template.** Call `grid_fetch("template", "web-app")` to load
+1. **Fetch the template.** Call `grid_get_template("template", "web-app")` to load
    the self-contained interactive HTML app template.
-2. **(Optional) Fetch the example.** Call `grid_fetch("example", "web-app")`
+2. **(Optional) Fetch the example.** Call `grid_get_template("example", "web-app")`
    to see a real working tool as a reference for structure and inline logic.
 3. **Adapt the template.** Rework the markup and inline JavaScript into the tool
    the user asked for:

package/src/session-logger.js

@@ -179,13 +179,13 @@ export class SessionLogger {
         key: this._keyResult(name, result),
         duration_ms: durationMs,
       });
-      // Only a deploy failure (grid_plug) is the QA "failure" trigger. Other
+      // Only a deploy failure (grid_deploy) is the QA "failure" trigger. Other
       // tools' fail() results are recorded but must not flush/freeze the session
       // (grid_fetch typo, login-status "none", etc. are routine, not terminal).
       const s = result?.structuredContent;
-      if (name === "grid_plug" && outcome === "error") {
+      if (name === "grid_deploy" && outcome === "error") {
         this.flush("error").catch(() => {});
-      } else if (name === "grid_plug" && (s?.url || s?.poll_url)) {
+      } else if (name === "grid_deploy" && (s?.url || s?.poll_url)) {
         this.flush("live").catch(() => {});
       } else {
         this._resetIdle();
@@ -237,11 +237,18 @@ export class SessionLogger {
   }
 
   setUserRequest(text) {
-    try { if (!this.userRequest && text) this.userRequest = scrubText(text); } catch { /* noop */ }
+    // Scrub FIRST, then cap — capping before scrub could clip a credential
+    // mid-token, and an uncapped value would push the whole trail past the
+    // Slack 38KB clip. Only-if-unset (stdio env/header value wins).
+    try { if (!this.userRequest && text) this.userRequest = scrubText(text).slice(0, 2000); } catch { /* noop */ }
   }
 
   setNarrative(text) {
-    try { if (text) this.narrative = String(text).slice(0, 4000); } catch { /* noop */ }
+    // Scrub FIRST, then cap: slicing before scrub can leave a partial token
+    // prefix at the 4000 boundary that no longer matches the redaction patterns.
+    // Last-write-wins — a later note replaces an earlier one. (flush() scrubs
+    // again, a harmless double-scrub.)
+    try { if (text) this.narrative = scrubText(String(text)).slice(0, 4000); } catch { /* noop */ }
   }
 }