@se-studio/skills 1.6.3 → 1.6.5

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # @se-studio/skills
 
+## 1.6.5
+
+### Patch Changes
+
+- 35c02f0: Keep hosted MCP auth alive across Grok refresh and host deploys: slide the Contentful token TTL to 30 days, refuse MCP token grants when the CMA cache is gone, and return `invalid_token` so clients re-run Contentful sign-in instead of looping on “Failed to get tools after auth”.
+
+## 1.6.4
+
+### Patch Changes
+
+- 2c479e7: Wrap HtmlComponent customJs in an IIFE so `hcRoot` is per-instance. Two HtmlComponents with scripts on the same page no longer throw `Identifier 'hcRoot' has already been declared`.
+
 ## 1.6.3
 
 ### Patch Changes

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@se-studio/skills",
-  "version": "1.6.3",
+  "version": "1.6.5",
   "description": "SE Studio agent skills for marketing site development with Contentful CMS",
   "repository": {
     "type": "git",

package/references/contentful-cms-cms-guidelines/html-component-authoring.md

@@ -228,7 +228,7 @@ Never redeclare colours or typography in `customCss` — those already exist as
 
 ## Custom JavaScript (`customJs`)
 
-The renderer automatically injects a `hcRoot` variable pointing to this component's own `[data-hc-id]` element before your script runs. **Always use `hcRoot` as the root for DOM queries** — never `document.querySelector('[data-hc-id]')`, which matches the first component on the page, not this one.
+The renderer injects `hcRoot` (this component's `[data-hc-id]` root) inside an IIFE so each instance has its own binding. Multiple HtmlComponents with `customJs` on one page are safe. **Always use `hcRoot` as the root for DOM queries** — never `document.querySelector('[data-hc-id]')`, which matches the first component on the page, not this one.
 
 ```js
 // ✓ Correct — hcRoot is scoped to this component automatically
@@ -246,6 +246,7 @@ var section = document.querySelector('[data-hc-id]');
 **Rules:**
 - Use `hcRoot.querySelector` / `hcRoot.querySelectorAll` for all DOM lookups.
 - Keep scripts small and self-contained — no module imports, no global state.
+- Top-level `function` / `var` / `const` stay inside the IIFE. Do not call them from `rawHtml` (`onclick="setup()"`). Bind listeners on `hcRoot`. Assign `window.foo` only if another script must see the name.
 - Avoid `document.getElementById` unless the ID is guaranteed unique across the whole page.
 - Default `scriptStrategy` is `afterInteractive` — runs after page hydration. Use `lazyOnload` for non-critical third-party widgets.
 

package/skills/contentful-cms-setup/SKILL.md

@@ -86,6 +86,9 @@ Do **not** register a local `mcpServers.cms-edit` entry in Claude Desktop — us
 **OAuth / sign-in fails**
 → Confirm the user was invited to the Contentful space and is signing in with the correct account. In Grok, use `/mcps` → press `i` (not just toggle). Confirm config URL ends with `/api/mcp`.
 
+**Grok: Failed to get tools after auth**
+→ MCP refresh succeeded but the host has no Contentful token for that space. Delete the server’s entry in `~/.grok/mcp_credentials.json`, then `/mcps` → `i` and complete Contentful sign-in. Current cms-edit refuses refresh without a CMA cache so this loop should stop after the host is bumped.
+
 **Grok browser flashes and closes**
 → Usually a redirect_uri mismatch before cms-edit v2.7.7+; upgrade the hosted deployment and retry OAuth.