fix: enforce server trust boundaries

2026-08-05 11:42:35 +02:00
parent 96fe5bfa79
commit a94affd6ac
10 changed files with 511 additions and 40 deletions
@@ -172,7 +172,14 @@ func writeRemovalTargets(outputWriter io.Writer, project string, targets []serve
 }

 func serverOperationFailure(stderr io.Writer, err error, secretValues []string) int {
-	fmt.Fprintf(stderr, "thothctl: %s\n", output.Sanitize(err.Error(), secretValues))
+	message := output.Sanitize(err.Error(), secretValues)
+	var operationErr *serverops.OperationError
+	if errors.As(err, &operationErr) && operationErr.Detail() != "" {
+		detail := output.Sanitize(operationErr.Detail(), secretValues)
+		fmt.Fprintf(stderr, "thothctl: %s: %s\n", message, detail)
+	} else {
+		fmt.Fprintf(stderr, "thothctl: %s\n", message)
+	}
 	if errors.Is(err, serverops.ErrConfirmationRequired) || errors.Is(err, serverops.ErrUnsafeState) {
 		return 2
 	}