@tokenoftrust/storefront-runner 2.4.46 → 2.4.48

package/apps/storefront/src/lib/http/fetchTransport.ts

@@ -45,7 +45,12 @@ export class FetchHttpTransport implements HttpTransport, HttpGetTransport {
   async post(url: string, headers: Record<string, string>, body: unknown): Promise<HttpResponseLike> {
     const res = await fetch(url, {
       method: "POST",
-      headers: { ...this.defaultHeaders, ...headers },
+      // `post()` always JSON.stringify()s the body below, so every call sends JSON —
+      // declare it by default rather than leaving a caller that forgets its own
+      // `content-type` to silently send an unparseable body (the receiving server's
+      // JSON body-parser skips a request with no/wrong content-type and sees an empty
+      // body). A per-call or per-transport header of the same name still wins.
+      headers: { "content-type": "application/json", ...this.defaultHeaders, ...headers },
       body: JSON.stringify(body),
       signal: this.signal(),
     });

package/apps/storefront/src/lib/http/mcpServiceCall.ts

@@ -80,6 +80,9 @@ export async function callMcpService(req: McpServiceRequest): Promise<McpService
     );
     return { kind: "misconfigured", status: res.status, reason };
   }
-  if (res.status < 200 || res.status >= 300) return { kind: "http-error", status: res.status };
+  if (res.status < 200 || res.status >= 300) {
+    console.error(`[mcp-service-seam] ${req.method} ${req.path} answered ${res.status}`);
+    return { kind: "http-error", status: res.status };
+  }
   return { kind: "ok", status: res.status, json: () => res.json() };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tokenoftrust/storefront-runner",
-  "version": "2.4.46",
+  "version": "2.4.48",
   "license": "SEE LICENSE IN LICENSE",
   "description": "World-shareable storefront runner: multi-tenant renderer on Astro/Cloudflare. No control plane.",
   "packageManager": "pnpm@11.9.0",

package/packages/public-runtime/src/declared-tenant-config.mjs

@@ -134,18 +134,16 @@ export function applyDeclaredTenantConfig(tenant, declared) {
 
 /**
  * The declaration a tenant repo commits at `ref`, read through any source with the
- * reconcile's `readFile(path, ref)` shape. `{}` when the file is absent or unreadable.
+ * reconcile's `readFile(path, ref)` shape. `{}` when the file is absent. A read that fails
+ * or a file that does not parse THROWS: an unknown declaration is never "declares nothing",
+ * which would judge a regulated store as unregulated.
  *
  * @param {{ readFile(path: string, ref: string): Promise<string | null> }} source
  * @param {string} ref
  */
 export async function readDeclaredTenantConfigAt(source, ref) {
-  try {
-    const raw = await source.readFile(".tot/config.json", ref);
-    return raw ? declaredTenantConfig(JSON.parse(raw)) : {};
-  } catch {
-    return {};
-  }
+  const raw = await source.readFile(".tot/config.json", ref);
+  return raw ? declaredTenantConfig(JSON.parse(raw)) : {};
 }
 
 /**