coinopai-mcp 2.2.4 → 2.2.6

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "coinopai-mcp",
-  "version": "2.2.4",
+  "version": "2.2.6",
   "mcpName": "io.github.forgemeshlabs/coinopai-mcp",
   "description": "Auditable market intelligence MCP with x402 payments, calibrated forecast ranges, anomaly review, risk context, and outcome audits. The hosted MCP at https://x402.coinopai.com/mcp has a free handshake (initialize, ping, tools/list); only tool calls are charged",
   "main": "index.js",

package/server.json

@@ -6,12 +6,12 @@
     "url": "https://github.com/forgemeshlabs/coinopai-mcp",
     "source": "github"
   },
-  "version": "2.2.4",
+  "version": "2.2.6",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "coinopai-mcp",
-      "version": "2.2.4",
+      "version": "2.2.6",
       "transport": {
         "type": "stdio"
       },

package/x402-guard.js

@@ -99,6 +99,20 @@ function createGuard(opts) {
     }
   }
 
+  // Keep the service's refusal intact: HTTP status, body (JSON when parseable) and the charged flag.
+  function httpError(res, prefix, charged) {
+    let upstream;
+    try { upstream = JSON.parse(res.text); } catch { upstream = res.text.slice(0, 500); }
+    // The message stays short and fixed; the service body travels only as structured, capped data.
+    const code = upstream && typeof upstream === "object" && typeof upstream.error === "string" && /^[a-z0-9_-]{1,64}$/i.test(upstream.error) ? ` ${upstream.error}` : "";
+    const err = new Error(`${prefix}HTTP ${res.status}${code}`);
+    err.status = res.status;
+    err.upstream = typeof upstream === "string" ? upstream.slice(0, 1500) : (JSON.stringify(upstream).length > 1500 ? JSON.stringify(upstream).slice(0, 1500) : upstream);
+    if (charged !== undefined) err.charged = charged;
+    else if (upstream && typeof upstream === "object" && typeof upstream.charged === "boolean") err.charged = upstream.charged;
+    return err;
+  }
+
   function parseJson(res) {
     try { return JSON.parse(res.text); } catch { throw new Error(`HTTP ${res.status}: non-JSON response`); }
   }
@@ -111,7 +125,7 @@ function createGuard(opts) {
     const init = { method, headers: { ...headers, ...(body ? { "content-type": "application/json" } : {}) }, ...(body ? { body: JSON.stringify(body) } : {}) };
     const res = await fetchBounded(url, init);
     if (res.status !== 402) {
-      if (!res.ok) throw new Error(`HTTP ${res.status}: ${res.text.slice(0, 200)}`);
+      if (!res.ok) throw httpError(res, "", false); // nothing was signed, so nothing was charged
       return parseJson(res);
     }
     let challenge;
@@ -119,7 +133,7 @@ function createGuard(opts) {
     const paymentRequired = httpClient.getPaymentRequiredResponse((n) => res.headers.get(n), challenge);
     const payload = await httpClient.createPaymentPayload(paymentRequired); // policy runs (and reserves budget) inside
     const paid = await fetchBounded(url, { ...init, headers: { ...init.headers, ...httpClient.encodePaymentSignatureHeader(payload) } });
-    if (!paid.ok) throw new Error(`Payment failed — HTTP ${paid.status}: ${paid.text.slice(0, 200)}`);
+    if (!paid.ok) throw httpError(paid, "Payment failed — ");
     let settle = null;
     try { settle = httpClient.getPaymentSettleResponse((n) => paid.headers.get(n)) || null; } catch { settle = null; }
     const contentType = paid.headers.get("content-type") || "";