@tokenoftrust/cli 2.2.1 → 2.2.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tokenoftrust/cli",
-  "version": "2.2.1",
+  "version": "2.2.3",
   "description": "Token of Trust developer CLI — clone a tenant store, run it locally with save→reload, and submit it for preview. Installs the `tot` command.",
   "license": "Apache-2.0",
   "author": "Token of Trust",

package/src/mcp.mjs

@@ -12,6 +12,10 @@ import { randomUUID } from "node:crypto";
 import os from "node:os";
 import { CliDiagnosticError, recordDiagnostic, sanitizeDiagnosticText } from "./diagnostics.mjs";
 
+// A server's refusal is written for the person reading it and usually ends with what to do,
+// so it is shown whole. The cap only bounds a runaway body; sanitizing still applies.
+export const MAX_SERVER_MESSAGE = 4000;
+
 const TRACE_HEADER = "X-Trace-Id";
 const REQUEST_ID_HEADERS = ["x-request-id", "x-amzn-trace-id", "x-correlation-id"];
 const DEFAULT_REQUEST_TIMEOUT_MS = 120_000;
@@ -188,7 +192,7 @@ export function createMcpClient(baseUrl, opts = {}) {
       const category = signal.aborted ? "timeout" : "network";
       const message = signal.aborted
         ? `${method} timed out after ${timeoutMs}ms`
-        : `${method} failed before a response arrived: ${sanitizeDiagnosticText(cause?.message || cause, 300)}`;
+        : `${method} failed before a response arrived: ${sanitizeDiagnosticText(cause?.message || cause, MAX_SERVER_MESSAGE)}`;
       throw diagnosticError(message, { operation: method, category, message, traceId }, cause);
     }
     const sid = res.headers.get("Mcp-Session-Id");
@@ -229,7 +233,7 @@ export function createMcpClient(baseUrl, opts = {}) {
       const category = oauth ? "oauth" : res.status === 413 ? "http_413" : `http_${res.status}`;
       const message = sanitizeDiagnosticText(
         failure.message || parsed?.error_description || `${res.status} ${res.statusText}`,
-        300,
+        MAX_SERVER_MESSAGE,
       );
       throw diagnosticError(`${method} failed: HTTP ${res.status}${message ? ` — ${message}` : ""}`, {
         operation: method, category, httpStatus: res.status, statusText: res.statusText,
@@ -249,7 +253,7 @@ export function createMcpClient(baseUrl, opts = {}) {
 
     if (parsed?.error) {
       const failure = safeServerFailure(parsed);
-      const message = sanitizeDiagnosticText(failure.message || "JSON-RPC error", 300);
+      const message = sanitizeDiagnosticText(failure.message || "JSON-RPC error", MAX_SERVER_MESSAGE);
       throw diagnosticError(`${method} failed: ${message}`, {
         operation: method, category: "json_rpc", httpStatus: res.status,
         statusText: res.statusText, serverCode: failure.serverCode, message,
@@ -310,7 +314,7 @@ export function createMcpClient(baseUrl, opts = {}) {
       }
       const message = sanitizeDiagnosticText(
         payload?.message || payload?.error?.message || tb?.text || `${name} failed`,
-        300,
+        MAX_SERVER_MESSAGE,
       );
       throw diagnosticError(`${name} failed: ${message}`, {
         operation: name, category: "tool_error",

package/template/sample-store/content/chrome.html

@@ -84,7 +84,7 @@
         <p>A fictional demo store for the Token of Trust local dev loop.<br>Not a real merchant — sample content only.</p>
       </div>
       <div class="footer-col">
-        <h4>Shop</h4>
+        <p class="footer-col-title">Shop</p>
         <ul>
           <li><a href="/collections/e-liquid">E-Liquid</a></li>
           <li><a href="/collections/salt-nic">Salt Nic</a></li>
@@ -94,7 +94,7 @@
         </ul>
       </div>
       <div class="footer-col">
-        <h4>Support</h4>
+        <p class="footer-col-title">Support</p>
         <ul>
           <li><a href="/search">Search</a></li>
           <li><a href="/pages/about-us">About Us</a></li>
@@ -103,7 +103,7 @@
         </ul>
       </div>
       <div class="footer-col">
-        <h4>Company</h4>
+        <p class="footer-col-title">Company</p>
         <ul>
           <li><a href="/pages/shipping-returns">Shipping &amp; Returns</a></li>
           <li><a href="/pages/privacy-policy">Privacy Policy</a></li>

package/template/sample-store/public/pages/home.css

@@ -60,7 +60,7 @@
 .footer-news input { flex: 1; border: 1px solid rgba(255,255,255,.3); background: transparent; color: #fff; border-radius: 999px; padding: 10px 16px; font-size: .9rem; }
 .footer-news input::placeholder { color: #a9b8e6; }
 .footer-news button { background: #fff; color: var(--navy-ink); border: 0; border-radius: 999px; width: 42px; font-size: 1.1rem; font-weight: 700; cursor: pointer; }
-.footer-col > p { color: #a9b8e6; font-size: .88rem; margin-top: 4px; }
+.footer-col > p:not(.footer-col-title) { color: #a9b8e6; font-size: .88rem; margin-top: 4px; }
 
 /* --- Payment badges ------------------------------------------------------- */
 .pay-badges { display: flex; flex-wrap: wrap; gap: 8px; margin-top: 16px; }

package/template/sample-store/public/pages/mkt.css

@@ -147,7 +147,7 @@
 .footer-grid { display: grid; grid-template-columns: 1.4fr repeat(3, 1fr); gap: clamp(24px, 4vw, 56px); }
 .footer-brand img { height: 40px; filter: brightness(0) invert(1); opacity: .95; }
 .footer-brand p { color: #a9b8e6; margin-top: 14px; font-size: .9rem; max-width: 34ch; }
-.footer-col h4 { color: #fff; font-size: .82rem; letter-spacing: .1em; text-transform: uppercase; margin-bottom: 14px; }
+.footer-col .footer-col-title { color: #fff; font-size: .82rem; font-weight: bold; letter-spacing: .1em; text-transform: uppercase; margin: 0 0 14px; }
 .footer-col ul { display: flex; flex-direction: column; gap: 9px; }
 .footer-col a { color: #c3cff0; font-size: .92rem; }
 .footer-col a:hover { color: #fff; text-decoration: underline; }