@aifabrix/builder 2.54.1 → 2.55.0

package/lib/api/work.api.js

@@ -7,7 +7,9 @@
 'use strict';
 
 const { createDataplaneApiClient } = require('./index');
+const { throwIfApiFailed } = require('./api-response-errors');
 const { unwrapApiData } = require('../utils/external-system-readiness-core');
+const { pickHumanRespondBody } = require('../role-assistant/test-runner-respond-body');
 
 /** Work Hub plan create runs LLM planning; 30s default is too short under load/reload. */
 const WORK_PLAN_TIMEOUT_MS = 120000;
@@ -59,7 +61,10 @@ function assertObjectShape(value, fallbackMessage) {
  */
 async function startWorkIntent(dataplaneUrl, authConfig, body) {
   const client = createDataplaneApiClient(dataplaneUrl, authConfig);
-  const res = await client.post('/api/v1/work/start', { body });
+  const res = await client.post('/api/v1/work/start', {
+    body,
+    timeoutMs: WORK_PLAN_TIMEOUT_MS
+  });
   if (res && res.success === false) {
     throw new Error(extractApiErrorMessage(res, 'work.start request failed'));
   }
@@ -70,7 +75,7 @@ async function startWorkIntent(dataplaneUrl, authConfig, body) {
 
 /**
  * GET /api/v1/work/executions/{processExecutionId}
- * @requiresPermission {Dataplane} worker-task:read
+ * @requiresPermission {Dataplane} worker:read
  * @async
  * @param {string} dataplaneUrl
  * @param {Object} authConfig
@@ -80,12 +85,13 @@ async function startWorkIntent(dataplaneUrl, authConfig, body) {
 async function getWorkExecutionStatus(dataplaneUrl, authConfig, processExecutionId) {
   const client = createDataplaneApiClient(dataplaneUrl, authConfig);
   const encodedId = encodeURIComponent(String(processExecutionId));
-  const res = await client.get(`/api/v1/work/executions/${encodedId}`, {
+  const endpoint = `/api/v1/work/executions/${encodedId}`;
+  const res = await client.get(endpoint, {
     timeoutMs: WORK_TASK_TIMEOUT_MS
   });
-  if (res && res.success === false) {
-    throw new Error(extractApiErrorMessage(res, 'work.status request failed'));
-  }
+  throwIfApiFailed(res, {
+    endpointUrl: `${String(dataplaneUrl || '').replace(/\/$/, '')}${endpoint}`
+  });
   const unwrapped = unwrapWorkPayload(res);
   assertObjectShape(unwrapped, 'work.status returned an unexpected response shape');
   return unwrapped;
@@ -105,7 +111,7 @@ async function respondWorkExecution(dataplaneUrl, authConfig, processExecutionId
   const client = createDataplaneApiClient(dataplaneUrl, authConfig);
   const encodedId = encodeURIComponent(String(processExecutionId));
   const res = await client.post(`/api/v1/work/executions/${encodedId}/respond`, {
-    body,
+    body: pickHumanRespondBody(body),
     timeoutMs: WORK_TASK_TIMEOUT_MS
   });
   if (res && res.success === false) {
@@ -143,7 +149,7 @@ async function continueWorkExecution(dataplaneUrl, authConfig, processExecutionI
 
 /**
  * GET /api/v1/work/executions/{processExecutionId}/result
- * @requiresPermission {Dataplane} worker-task:read
+ * @requiresPermission {Dataplane} worker:read
  * @async
  * @param {string} dataplaneUrl
  * @param {Object} authConfig
@@ -154,6 +160,7 @@ async function continueWorkExecution(dataplaneUrl, authConfig, processExecutionI
 async function getWorkExecutionResult(dataplaneUrl, authConfig, processExecutionId, query = {}) {
   const client = createDataplaneApiClient(dataplaneUrl, authConfig);
   const encodedId = encodeURIComponent(String(processExecutionId));
+  const endpoint = `/api/v1/work/executions/${encodedId}/result`;
   const params = {};
   if (query && typeof query === 'object') {
     if (query.requestedDepth) {
@@ -166,13 +173,13 @@ async function getWorkExecutionResult(dataplaneUrl, authConfig, processExecution
       params.projection = String(query.projection);
     }
   }
-  const res = await client.get(`/api/v1/work/executions/${encodedId}/result`, {
+  const res = await client.get(endpoint, {
     params,
     timeoutMs: WORK_TASK_TIMEOUT_MS
   });
-  if (res && res.success === false) {
-    throw new Error(extractApiErrorMessage(res, 'work.result request failed'));
-  }
+  throwIfApiFailed(res, {
+    endpointUrl: `${String(dataplaneUrl || '').replace(/\/$/, '')}${endpoint}`
+  });
   const unwrapped = unwrapWorkPayload(res);
   assertObjectShape(unwrapped, 'work.result returned an unexpected response shape');
   return unwrapped;

package/lib/app/list-external-systems.js

@@ -15,6 +15,7 @@ const { listExternalSystems } = require('../api/external-systems.api');
 const { formatApiError } = require('../utils/api-error-handler');
 const { getListAuthToken } = require('./list');
 const logger = require('../utils/logger');
+const { formatLifecycleLabel } = require('../utils/external-system-readiness-compact-display');
 
 /**
  * Normalize list response shapes from the dataplane API client.
@@ -56,7 +57,7 @@ function displayExternalSystems(systems, environment, dataplaneUrl, json) {
   systems.forEach((system) => {
     const key = system.key || system.systemKey || system.id || '—';
     const displayName = system.displayName || key;
-    const status = system.status || 'unknown';
+    const status = formatLifecycleLabel(system.status || 'unknown');
     logger.log(`✔ ${chalk.cyan(key)} - ${displayName} (${status})`);
   });
   logger.log(chalk.gray('  To show details: aifabrix show <systemKey> --online\n'));

package/lib/app/show-display.js

@@ -11,6 +11,11 @@
 
 const chalk = require('chalk');
 const logger = require('../utils/logger');
+const { formatCredentialShowLine } = require('../utils/authentication-slot-show');
+const {
+  formatConnectedSystemLifecycleLabel,
+  formatLifecycleLabel
+} = require('../utils/external-system-readiness-compact-display');
 
 function logSourceAndHeader(summary) {
   const isOffline = summary.source === 'offline';
@@ -93,14 +98,36 @@ function logApplicationFields(a) {
   logApplicationOptional(a);
 }
 
+/**
+ * Draft / Published / Archived only — never controller `active`.
+ * @param {Object} a
+ * @param {Object} [summary]
+ * @returns {string|null}
+ */
+function resolveExternalApplicationStatusLabel(a, summary) {
+  const ext = summary && summary.externalSystem;
+  const fromDataplane = ext && !ext.error ? (ext.status || ext.dataplaneStatus) : null;
+  return formatConnectedSystemLifecycleLabel(fromDataplane || a.status);
+}
+
+function logExternalApplicationStatus(a, summary) {
+  const label = resolveExternalApplicationStatusLabel(a, summary);
+  if (label) logger.log(`  Status:        ${label}`);
+}
+
+function formatDataplaneStatusDisplay(status) {
+  if (status === undefined || status === null || status === '' || status === '—') return '—';
+  return formatConnectedSystemLifecycleLabel(status) || formatLifecycleLabel(status);
+}
+
 /** Application section for online + external: Key, Display name, Description, Deployment, Status (no Type; Dataplane block follows). */
-function logApplicationFieldsOnlineExternal(a) {
+function logApplicationFieldsOnlineExternal(a, summary) {
   logger.log('🧷 Application - external');
   logger.log(`  Key:           ${a.key ?? '—'}`);
   logger.log(`  Display name:  ${a.displayName ?? '—'}`);
   logger.log(`  Description:   ${a.description ?? '—'}`);
   logger.log('  Deployment:    —');
-  if (a.status !== undefined && a.status !== '—') logger.log(`  Status:        ${a.status}`);
+  logExternalApplicationStatus(a, summary);
 }
 
 /** Application section for offline + external: Key, Display name, Description, Deployment, Status, Version when present. */
@@ -110,7 +137,7 @@ function logApplicationFieldsOfflineExternal(a) {
   logger.log(`  Display name:  ${a.displayName ?? '—'}`);
   logger.log(`  Description:   ${a.description ?? '—'}`);
   logger.log('  Deployment:    —');
-  if (a.status !== undefined && a.status !== '—') logger.log(`  Status:        ${a.status}`);
+  logExternalApplicationStatus(a);
   if (a.version !== undefined && a.version !== null) logger.log(`  Version:       ${a.version}`);
 }
 
@@ -129,7 +156,7 @@ function logApplicationSection(a, summary) {
   const onlineExternal = summary.source === 'online' && isExternal;
   const offlineExternal = summary.source === 'offline' && isExternal;
   if (onlineExternal) {
-    logApplicationFieldsOnlineExternal(a);
+    logApplicationFieldsOnlineExternal(a, summary);
   } else if (offlineExternal) {
     logApplicationFieldsOfflineExternal(a);
   } else {
@@ -205,8 +232,8 @@ function logDatabasesSection(dbNames) {
 function logExternalSystemMain(ext) {
   logger.log('🧩 Dataplane');
   logger.log(`  Version:       ${ext.version ?? '—'}`);
-  logger.log(`  Credential:    ${ext.credentialId ?? '—'}`);
-  logger.log(`  Status:        ${ext.status ?? '—'}`);
+  logger.log(`  Credential:    ${formatCredentialShowLine(ext)}`);
+  logger.log(`  Status:        ${formatDataplaneStatusDisplay(ext.status)}`);
   logger.log(`  API docs:      ${ext.openApiDocsPageUrl ?? ext.apiDocumentUrl ?? '—'}`);
   logger.log(`  MCP server:    ${ext.mcpServerUrl ?? '—'}`);
   logger.log(`  OpenAPI spec:  ${ext.apiDocumentUrl ?? '—'}`);

package/lib/app/show.js

@@ -33,6 +33,8 @@ const {
   attachCertificationVerifyFromDataplane,
   sanitizeCertificationForJson
 } = require('./certification-show-enrich');
+const { resolveManifestAuthMethod } = require('../utils/external-system-readiness-compact-display');
+const { resolveAuthenticationSlots } = require('../utils/authentication-slot-show');
 
 /**
  * Attach `runReloadDefault` / `runProxyDefault` from ~/.aifabrix `applications.<appKey>`.
@@ -466,6 +468,13 @@ function pickExternalVersion(res, config, system) {
   return (res && res.version) ?? config.version ?? system.version ?? '—';
 }
 
+function pickCredentialMethod(config, system) {
+  const source = config && (config.authentication || config.authentications) ? config : system;
+  const method = resolveManifestAuthMethod(source);
+  if (!method || method === 'unknown') return undefined;
+  return method;
+}
+
 function resolveExternalSystemMeta(res, config, system, application, appKey) {
   return {
     displayName: pickExternalDisplayName(res, system, application, appKey),
@@ -501,13 +510,27 @@ function buildBaseExternalResult(configData, appKey, openapiFiles, openapiEndpoi
       permissions: application.permissions
     },
     openapiFiles,
-    openapiEndpoints
+    openapiEndpoints,
+    credentialMethod: pickCredentialMethod(config, system),
+    authenticationSlots: resolveAuthenticationSlots(config, system)
   };
 }
 
+function applyCredentialFieldsToResult(result, res) {
+  if (res.credentialId !== undefined && res.credentialId !== null) result.credentialId = res.credentialId;
+  if (res.authenticationStatus !== undefined && res.authenticationStatus !== null) {
+    result.authenticationStatus = res.authenticationStatus;
+  }
+  const resConfig = res.config && typeof res.config === 'object' ? res.config : {};
+  const fromConfig = pickCredentialMethod(resConfig, {});
+  if (fromConfig) result.credentialMethod = fromConfig;
+  const fromSlots = resolveAuthenticationSlots(resConfig, {});
+  if (fromSlots.length > 0) result.authenticationSlots = fromSlots;
+}
+
 function applySystemResponseToResult(result, res) {
   result.dataplaneStatus = res.status;
-  if (res.credentialId !== undefined && res.credentialId !== null) result.credentialId = res.credentialId;
+  applyCredentialFieldsToResult(result, res);
   if (res.showOpenApiDocs !== undefined) result.showOpenApiDocs = res.showOpenApiDocs;
   if (res.mcpServerUrl !== undefined && res.mcpServerUrl !== null) result.mcpServerUrl = res.mcpServerUrl;
   if (res.apiDocumentUrl !== undefined && res.apiDocumentUrl !== null) result.apiDocumentUrl = res.apiDocumentUrl;

package/lib/channels/add-channel.js

@@ -350,6 +350,7 @@ async function resolveInstallRuntimeValues(params, packageContext, runtimeToolNa
     appDescription: description,
     icon: options.icon,
     commandPrefix: options.commandPrefix,
+    enableMcpServer: options.enableMcpServer,
     layerBToolNames: runtimeToolNames,
     packageContext,
     entraProvider,

package/lib/channels/approval-guides/claude.js

@@ -1,7 +1,7 @@
 /**
  * Claude remaining workspace steps (customer-facing).
  *
- * @fileoverview Short Claude connector Name and Server URL steps — no protocol dump
+ * @fileoverview Short Claude connector Name, Server URL, and OAuth steps — no protocol dump
  */
 
 'use strict';
@@ -21,7 +21,7 @@ function buildClaudeApprovalGuide(ctx) {
     credentialPortalUrl: null,
     steps: [
       `Open ${CLAUDE_CONNECTORS_URL}`,
-      `Add a custom connector with Name: ${name}; Server URL: ${serverUrl}.`
+      `Add a custom connector with Name: ${name}; Server URL: ${serverUrl}; Authentication: OAuth.`
     ]
   };
 }

package/lib/channels/channel-add-failure.js

@@ -16,6 +16,7 @@ const BOUNDARY_MATCHERS = [
     tests: [/unknown channel/i, /already configured/i, /needs a terminal/i, /--name is required/i, /needs --target/i, /unknown mcp client profile/i]
   },
   { boundary: 'experimental', tests: [/is experimental/i] },
+  { boundary: 'unavailable', tests: [/is coming soon/i, /is not available/i] },
   { boundary: 'preflight', tests: [/chatgpt preflight/i, /claude preflight/i, /mcp client preflight/i, /authentication required/i, /dataplanebaseurl is required/i] },
   { boundary: 'callback', tests: [/chatgpt callback/i, /claude callback/i, /mcp client callback/i] },
   { boundary: 'oauth', tests: [/oauth/i, /trustedissuer/i, /vault-reference/i] },

package/lib/channels/channel-add-remaining.js

@@ -30,6 +30,7 @@ const { printMcpClientDryRunTty } = require('./mcp-client-channel-add');
 const { printClaudeDryRunTty } = require('./claude-channel-add');
 const { CLAUDE_REMAINING_STEPS } = require('./claude-runtime-contract');
 const { vendorFacingUrlsFromCtx } = require('./vendor-dataplane-url');
+const { slackMcpRemainingSteps } = require('./slack-mcp-runtime');
 const {
   channelDisplayLabel,
   printValidating,
@@ -280,18 +281,23 @@ function slackRecoveryOrHandshake(ctx, custom) {
  * @param {Object|null} ctx
  * @returns {Object}
  */
-function slackRemainingSpec(ctx) {
+function slackRemainingSpec(ctx, runtimeValues) {
   const custom = slackCustomSteps(ctx);
+  const mcpSteps = slackMcpRemainingSteps(runtimeValues);
+  let spec;
   if (ctx && ctx.slackConnected === true) {
-    return slackConnectedRemaining(ctx, custom);
+    spec = slackConnectedRemaining(ctx, custom);
+  } else if (ctx && ctx.slackSlashCommand) {
+    spec = slackSlashRemaining(ctx, custom);
+  } else if (ctx && ctx.slackHandshakeFailed === true) {
+    spec = slackFailedRemaining(custom);
+  } else {
+    spec = slackRecoveryOrHandshake(ctx, custom);
   }
-  if (ctx && ctx.slackSlashCommand) {
-    return slackSlashRemaining(ctx, custom);
+  if (mcpSteps.length === 0) {
+    return spec;
   }
-  if (ctx && ctx.slackHandshakeFailed === true) {
-    return slackFailedRemaining(custom);
-  }
-  return slackRecoveryOrHandshake(ctx, custom);
+  return { ...spec, steps: [...(spec.steps || []), ...mcpSteps] };
 }
 
 /**
@@ -350,7 +356,7 @@ function teamsBotRemainingSpec(ctx, runtimeValues) {
  */
 function remainingSpec(channelTarget, ctx, runtimeValues) {
   if (channelTarget === 'slack') {
-    return slackRemainingSpec(ctx);
+    return slackRemainingSpec(ctx, runtimeValues);
   }
   if (channelTarget === 'microsoft-copilot') {
     return copilotRemainingSpec(ctx, runtimeValues);

package/lib/channels/channel-definition-status.js

@@ -0,0 +1,115 @@
+/**
+ * Channel Definition catalog/install status (visible | hide | coming-soon).
+ *
+ * @fileoverview Omit or visible: listed and installable. hide: omitted and refused. coming-soon: listed read-only.
+ * @author AI Fabrix Team
+ * @version 1.0.0
+ */
+
+'use strict';
+
+const registry = require('./channel-definition-registry');
+
+const CHANNEL_STATUSES = ['visible', 'hide', 'coming-soon'];
+const COMING_SOON_REASON = 'This channel is coming soon.';
+const HIDE_REASON = 'This channel is not available.';
+
+/**
+ * @param {Object|null} definition
+ * @returns {'visible'|'hide'|'coming-soon'}
+ */
+function normalizeChannelStatus(definition) {
+  const raw = definition && definition.channel && definition.channel.status;
+  if (raw === 'hide' || raw === 'coming-soon') {
+    return raw;
+  }
+  return 'visible';
+}
+
+/**
+ * Live status from the Channel Definition registry (spy-friendly).
+ * @param {string} key
+ * @returns {'visible'|'hide'|'coming-soon'}
+ */
+function channelStatusOf(key) {
+  return normalizeChannelStatus(registry.getChannelDefinition(key));
+}
+
+/**
+ * @param {string} status
+ * @returns {boolean}
+ */
+function isCatalogHiddenStatus(status) {
+  return status === 'hide';
+}
+
+/**
+ * @param {string} status
+ * @returns {boolean}
+ */
+function isInstallableStatus(status) {
+  return status === 'visible';
+}
+
+/**
+ * @param {string} key
+ * @param {string} status
+ * @returns {Error}
+ */
+function statusUnavailableError(key, status) {
+  const message =
+    status === 'coming-soon'
+      ? `Channel target "${key}" is coming soon.`
+      : `Channel target "${key}" is not available.`;
+  const err = new Error(message);
+  err.statusCode = 403;
+  return err;
+}
+
+/**
+ * Refuse new install for hide and coming-soon. Continue of an existing session skips.
+ * --force / allowExperimental do not override.
+ * @param {string} key
+ * @param {{ continueInstall?: boolean }} [options]
+ * @returns {void}
+ */
+function assertChannelStatusInstallable(key, options = {}) {
+  if (options.continueInstall === true) {
+    return;
+  }
+  const status = channelStatusOf(key);
+  if (isInstallableStatus(status)) {
+    return;
+  }
+  throw statusUnavailableError(key, status);
+}
+
+/**
+ * Overlay coming-soon onto a catalog/detail projection (canInstall false).
+ * @param {string} status
+ * @param {Object} [projection]
+ * @returns {Object}
+ */
+function applyChannelStatusProjection(status, projection = {}) {
+  if (status !== 'coming-soon') {
+    return { ...projection, status };
+  }
+  return {
+    ...projection,
+    status,
+    canInstall: false,
+    blockedReason: COMING_SOON_REASON
+  };
+}
+
+module.exports = {
+  CHANNEL_STATUSES,
+  COMING_SOON_REASON,
+  HIDE_REASON,
+  normalizeChannelStatus,
+  channelStatusOf,
+  isCatalogHiddenStatus,
+  isInstallableStatus,
+  assertChannelStatusInstallable,
+  applyChannelStatusProjection
+};

package/lib/channels/channel-description.js

@@ -99,7 +99,8 @@ function fillSlackManifestDescriptions(channelTarget, runtimeValues) {
   return {
     ...runtimeValues,
     appLongDescription,
-    appLongDescriptionJson: JSON.stringify(appLongDescription)
+    appLongDescriptionJson: JSON.stringify(appLongDescription),
+    enableMcpServer: runtimeValues.enableMcpServer === true
   };
 }
 

package/lib/channels/channel-install-envelope.js

@@ -135,7 +135,8 @@ function claudeCopyActions(runtimeValues) {
   const values = buildClaudeFormValues({ runtimeValues: runtimeValues || {} });
   return [
     copyValueAction('Name', values.name, 'copy-name'),
-    copyValueAction('Server URL', values.serverUrl, 'copy-server-url')
+    copyValueAction('Server URL', values.serverUrl, 'copy-server-url'),
+    copyValueAction('Authentication', values.authentication, 'copy-authentication')
   ].filter(Boolean);
 }
 
@@ -195,7 +196,8 @@ function claudeEnvelopeParts(params) {
     useValues: runtimeOk
       ? {
         Name: values.name,
-        'Server URL': values.serverUrl
+        'Server URL': values.serverUrl,
+        Authentication: values.authentication
       }
       : {}
   };

package/lib/channels/channel-integration-generator.js

@@ -12,6 +12,7 @@
 
 const path = require('path');
 const { getChannelTarget } = require('./channel-targets');
+const { assertChannelStatusInstallable } = require('./channel-definition-status');
 const { getIntegrationPath } = require('../utils/paths');
 const {
   copyChannelIntegrationTemplate,
@@ -29,6 +30,7 @@ const { generateDeployJson } = require('../generator/index');
  */
 async function scaffoldChannelIntegration(channelTarget, options = {}) {
   const target = getChannelTarget(channelTarget);
+  assertChannelStatusInstallable(channelTarget, options);
   if (target.experimental && !options.allowExperimental) {
     throw new Error(
       `Channel target "${channelTarget}" is experimental. Pass --allow-experimental to scaffold.`

package/lib/channels/channel-runtime-resolver.js

@@ -36,6 +36,7 @@ const { applyCopilotOauthProfile, applyCopilotRuntimeDomain } = require('./chann
 const { chatgptDiscoveryBlockerLabel } = require('./chatgpt-setup-values');
 const { applyMcpClientRuntimeValues } = require('./mcp-client/runtime');
 const { applyClaudeRuntimeValues } = require('./claude-runtime');
+const { applySlackMcpRuntimeValues } = require('./slack-mcp-runtime');
 
 const DEFAULT_SLACK_COMMAND_PREFIX = 'af';
 
@@ -347,6 +348,7 @@ function applySlackRuntimeValues(resolved, params) {
   Object.assign(resolved, resolveSlackOAuthManifestFields());
   delete resolved.oauthCallbackUrl;
   resolved.commandPrefix = normalizeSlackCommandPrefix(params.commandPrefix);
+  resolved.enableMcpServer = isTrueLike(params.enableMcpServer);
   resolved.packageVersion =
     typeof params.packageVersion === 'string' && params.packageVersion.trim()
       ? params.packageVersion.trim()
@@ -356,6 +358,17 @@ function applySlackRuntimeValues(resolved, params) {
   resolved.appLongDescriptionJson = JSON.stringify(appLongDescription);
 }
 
+/**
+ * @param {unknown} value
+ * @returns {boolean}
+ */
+function isTrueLike(value) {
+  if (value === true) {
+    return true;
+  }
+  return typeof value === 'string' && /^(true|1|yes|on)$/i.test(value.trim());
+}
+
 /**
  * Slack slash alias prefix: letters then letters/digits, 1–16 chars.
  * @param {unknown} raw
@@ -438,6 +451,7 @@ function applyChannelSpecificRuntime(resolved, params) {
   if (params.channelTarget === 'slack') {
     applySlackRuntimeValues(resolved, params);
     applyDiscoveryPackageContext(resolved, params.packageContext);
+    applySlackMcpRuntimeValues(resolved, params);
   }
   if (params.channelTarget === 'microsoft-copilot') {
     applyMicrosoftCopilotRuntimeValues(resolved, params);

package/lib/channels/channel-targets.js

@@ -14,6 +14,12 @@ const {
   listChannelDefinitionKeys
 } = require('./channel-definition-registry');
 const { toChannelTargetProjection } = require('./channel-definition-project');
+const {
+  assertChannelStatusInstallable,
+  channelStatusOf,
+  isCatalogHiddenStatus,
+  isInstallableStatus
+} = require('./channel-definition-status');
 
 function buildChannelTargets() {
   const targets = {};
@@ -48,15 +54,21 @@ function isChannelTargetKey(channelTarget) {
  */
 function formatSupportedChannelTargetsHelp() {
   const targets = resolveChannelTargets();
-  const keys = Object.keys(targets);
-  const stable = keys.filter((key) => !targets[key].experimental);
-  const experimental = keys.filter((key) => targets[key].experimental);
+  const installable = listInstallableChannelTargetKeys({ allowExperimental: true });
+  const stable = installable.filter((key) => !targets[key].experimental);
+  const experimental = installable.filter((key) => targets[key].experimental);
+  const comingSoon = listLiveChannelTargetKeys({ allowExperimental: true }).filter(
+    (key) => channelStatusOf(key) === 'coming-soon'
+  );
   const lines = ['Supported channels:', `  ${stable.join(', ')}`];
   if (experimental.length > 0) {
     lines.push(
       `  ${experimental.join(', ')} (experimental — scaffold with --allow-experimental)`
     );
   }
+  if (comingSoon.length > 0) {
+    lines.push(`  ${comingSoon.join(', ')} (coming soon — not installable)`);
+  }
   return lines.join('\n');
 }
 
@@ -81,18 +93,30 @@ function getChannelTarget(channelTarget) {
 }
 
 /**
- * Live keys, plus experimental when `--allow-experimental` is set.
+ * Live keys (not hide), plus experimental when `--allow-experimental` is set.
  * @param {{ allowExperimental?: boolean }} [options]
  * @returns {string[]}
  */
 function listLiveChannelTargetKeys(options = {}) {
   const targets = resolveChannelTargets();
   return Object.keys(targets).filter((key) => {
+    if (isCatalogHiddenStatus(channelStatusOf(key))) {
+      return false;
+    }
     const target = targets[key];
     return !target.experimental || options.allowExperimental === true;
   });
 }
 
+/**
+ * Keys that may start a new install (visible). Coming-soon is catalog-only.
+ * @param {{ allowExperimental?: boolean }} [options]
+ * @returns {string[]}
+ */
+function listInstallableChannelTargetKeys(options = {}) {
+  return listLiveChannelTargetKeys(options).filter((key) => isInstallableStatus(channelStatusOf(key)));
+}
+
 /**
  * Inquirer list choices for `aifabrix channel add` (labels from the registry).
  * @param {{ allowExperimental?: boolean }} [options]
@@ -100,7 +124,7 @@ function listLiveChannelTargetKeys(options = {}) {
  */
 function listWizardChannelChoices(options = {}) {
   const targets = resolveChannelTargets();
-  return listLiveChannelTargetKeys(options)
+  return listInstallableChannelTargetKeys(options)
     .map((key) => targets[key])
     .sort((a, b) => (a.wizardOrder || 100) - (b.wizardOrder || 100))
     .map((target) => ({ name: target.displayLabel, value: target.key }));
@@ -114,6 +138,7 @@ function listWizardChannelChoices(options = {}) {
  */
 function assertChannelTargetInstallable(channelTarget, options = {}) {
   const target = getChannelTarget(channelTarget);
+  assertChannelStatusInstallable(channelTarget, options);
   if (target.experimental && options.allowExperimental !== true) {
     throw new Error(
       `Channel target "${channelTarget}" is experimental. Pass --allow-experimental to install.`
@@ -146,6 +171,7 @@ module.exports = {
   formatSupportedChannelTargetsHelp,
   formatUnknownChannelTargetError,
   listLiveChannelTargetKeys,
+  listInstallableChannelTargetKeys,
   listWizardChannelChoices,
   assertChannelTargetInstallable,
   getChannelDefinition,

package/lib/channels/claude-setup-values.js

@@ -1,5 +1,5 @@
 /**
- * Customer-facing Claude connector form values: Name and Server URL.
+ * Customer-facing Claude connector form values: Name, Server URL, OAuth.
  *
  * @fileoverview Claude channel form values — describe, don't configure
  */
@@ -78,6 +78,9 @@ function formatClaudeFormValueLines(values) {
   if (values.serverUrl) {
     lines.push(`Server URL: ${values.serverUrl}`);
   }
+  if (values.authentication) {
+    lines.push(`Authentication: ${values.authentication}`);
+  }
   return lines;
 }