@follenfang/fupload 0.0.8 → 0.0.10

package/README.md

@@ -42,7 +42,7 @@ fupload/
 - 网易 DD：Windows、Python 3、已安装并登录官方客户端
 - Heybox Workshop：Windows、Python 3、已安装并登录 Heybox 桌面客户端
 
-npm 安装和 `fupload update` 会在用户状态目录中创建 Fuploader 专用 Python venv，并自动安装 Heybox ZIP 上传所需的腾讯官方 COS SDK；不会修改系统 Python。使用 `npm --ignore-scripts` 安装时，首次运行实际 CLI 命令会校验并补齐该 runtime。
+npm 安装和 `fupload update` 会在用户状态目录中创建 Fuploader 专用 Python venv，优先使用可用的 `uv` 向其中安装固定版本依赖，并自动安装 Heybox ZIP 上传所需的腾讯官方 COS SDK；未安装 `uv` 时回退到 venv 自带的 pip，不会修改系统 Python。使用 `npm --ignore-scripts` 安装时，首次运行实际 CLI 命令会校验并补齐该 runtime。
 
 官方 `ncc` 的安装命令为 `npm i -g @newbeebox/newbeebox-creator-center-cli@latest`。Fuploader 不读取其凭据文件；用户在自己的终端完成 `ncc login`，Agent 仅用 `ncc whoami -o json` 验证。自动化可在启动 Agent 前注入 `NCC_TOKEN`，令牌不得写入命令参数、项目文件或 Git。
 

package/fupload/SKILL.md

@@ -1,13 +1,13 @@
 ---
 name: fupload
-description: Explicit author-publishing workflow for World of Warcraft plugins, configuration shares, and WA/strings on NewBeeBox, NetEase DD, CurseForge, and Heybox Workshop, including CurseForge author project lookup, plugin ZIP upload, and Heybox web-session version management. Use only when the user explicitly invokes `$fupload`, explicitly asks to use the Fupload Skill, or loads this Skill by path. Do not trigger from ordinary mentions of publishing, NewBeeBox, DD, CurseForge, Heybox, plugins, configurations, or WA.
+description: Explicit author-publishing workflow for World of Warcraft plugins, configuration shares, and WA/strings on NewBeeBox, NetEase DD, CurseForge, Heybox Workshop, and ModUs.Creator, including local Creator login reuse and plugin ZIP publishing. Use only when the user explicitly invokes `$fupload`, explicitly asks to use the Fupload Skill, or loads this Skill by path. Do not trigger from ordinary mentions of publishing, NewBeeBox, DD, CurseForge, Heybox, ModUs, plugins, configurations, or WA.
 metadata:
-  version: "0.0.8"
+  version: "0.0.10"
 ---
 
 # Fupload
 
-Act as the publishing operator. For NewBeeBox, prefer the official `ncc` CLI whenever it is installed unless the user explicitly requests the third-party Python management tool. For DD, CurseForge, Heybox Workshop, and an explicitly selected third-party NewBeeBox workflow, use the bundled Python CLI. Keep investigation, choices, planning, confirmation, and recovery in the conversation.
+Act as the publishing operator. For NewBeeBox, prefer the official `ncc` CLI whenever it is installed unless the user explicitly requests the third-party Python management tool. For DD, CurseForge, Heybox Workshop, ModUs.Creator, and an explicitly selected third-party NewBeeBox workflow, use the bundled Python CLI. Keep investigation, choices, planning, confirmation, and recovery in the conversation.
 
 When installed from npm, interpret `<fupload-cli>` as `fupload`. Only while maintaining the source repository, directly installing this Skill, or when `fupload` is absent from PATH, use `python <skill-root>/scripts/fupload.py`. Keep the user's current project as the working directory in either mode.
 
@@ -15,7 +15,7 @@ When installed from npm, interpret `<fupload-cli>` as `fupload`. Only while main
 
 When the user has not already stated both dimensions, ask in one short message:
 
-1. Platform: NewBeeBox, DD, CurseForge, or Heybox Workshop.
+1. Platform: NewBeeBox, DD, CurseForge, Heybox Workshop, or ModUs.
 2. Resource and action: plugin/configuration/WA, then create/content update/metadata edit/delete. CurseForge supports public project listing and uploading a plugin ZIP to an existing project only.
 
 Map natural language consistently:
@@ -35,6 +35,8 @@ For DD, use the bundled Python CLI.
 
 For CurseForge, use the bundled Python CLI. Do not substitute direct HTTP calls or the CurseForge for Studios API for uploads: public project lookup uses the Core API, while game-version lookup and upload use the separate Upload API and credential.
 
+For ModUs, use the bundled Python CLI and the local ModUs.Creator login state. Do not use browser cookies, accept a caller-supplied token, or handcraft API requests.
+
 For NewBeeBox, apply this order exactly:
 
 1. If the user explicitly requests the third-party Python management tool, use the bundled Python CLI even when `ncc` is installed.
@@ -52,6 +54,8 @@ For NewBeeBox, prefer an existing official `ncc login`, then a caller-provided `
 
 For CurseForge, use `~/.fupload/curseforge.env`, created idempotently by npm install/update, with `CURSEFORGE_AUTHOR_ID`, `CURSEFORGE_API_KEY`, and `CURSEFORGE_UPLOAD_TOKEN`. The author ID is non-secret: if absent, proactively ask for its numeric value or offer `--author-id`. The API key and upload token are secrets: never ask the user to paste either into the conversation; direct them to fill the local env file in their own editor or terminal, then run `curseforge session doctor`. Never print file contents or secret values. Process environment values may override the file without being shown.
 
+For ModUs, authentication comes only from `%LOCALAPPDATA%\ModUs.Creator\auth\token.dat` under the current Windows user. `modus session doctor` reports only token presence, DPAPI decryption, nonempty plaintext, and authenticated API readiness. Never print, copy, hash, or persist the token, ciphertext, Bearer header, or signed upload URL.
+
 If a token is pasted into the conversation, do not repeat or use it. Tell the user to revoke or regenerate it at its provider and configure the replacement locally. Check only whether the expected field is present, never its length, prefix, hash, or value.
 
 ## Locate the Fuploader CLI
@@ -70,6 +74,7 @@ For npm package maintenance, use `fupload update` to update the CLI, managed Pyt
 - Read [references/dd.md](references/dd.md) only for DD.
 - Read [references/curseforge.md](references/curseforge.md) for every CurseForge lookup or upload.
 - Read [references/blackbox.md](references/blackbox.md) for Heybox Workshop plugin list/detail, metadata edit, version upload/edit/delete, and managed web-session authentication.
+- Read [references/modus.md](references/modus.md) for every ModUs project, addon discovery, release, upload, update, or delete workflow.
 - For Python, run the exact leaf command with `--help` before creating its input. Treat help as the executable schema contract.
 
 ## Investigate
@@ -90,10 +95,14 @@ For every existing DD update or edit, GET the detail first and rebuild the offic
 
 For Heybox Workshop, use Fuploader's managed Chromium web profile. If the profile is missing or the creator API reports an expired session, Fuploader opens the Workshop login page visibly for the user to complete login, then reuses the same profile headlessly for signed protocol requests. Never read the desktop client config or import another browser profile, and never accept a caller-supplied profile, cookie, token, signature, or endpoint. `blackbox plugin list`, `get`, and `versions` are read-only; `plugin edit` preserves omitted module fields by reading the complete module first; `plugin update` and `version-edit` upload or reuse a ZIP URL and verify the version readback; `version-delete` waits for asynchronous soft deletion and retries once when the audit state temporarily returns active. Do not print cookies, tokens, signatures, or temporary COS credentials, and do not delete a whole module.
 
+For ModUs, run `modus session doctor`, then read account info, project list/detail, categories, `game-versions --key wow_builds`, subscription tiers, and the target's release list/detail before writing. Project create/edit requires a completed persisted state in the order `choose_game -> basic_info -> license -> complete`. Publish targets are a nonempty multi-select: ModUs and BigFoot may coexist; ModUs-only, BigFoot-only, and both derive synchronization values 1, 2, and 3. Category `998` is BigFoot-only. Use the returned category IDs. When subscription tiers returns `[]`, “none” is the complete choice and `required_tier_id` remains null.
+
 For DD WA create, collect user choices before generating JSON, then let the Python CLI supply only the official create defaults for omitted form values: seven-day share and purchase lifetimes, `need_buy=false`, category `ui_original`, `Interface/Addons`, empty VIP levels, and version `0`. Submit category IDs as strings even when a discovery response represents them numerically. WA create/update versions contain digits only; update must be numerically greater than the current remote value. Every `!WA:2!` create/update/edit is reparsed by the installed official `WowUIInterface.parseWa` chain, including unchanged edit content. Do not carry create defaults into WA update/edit; omitted existing fields preserve their remote value.
 
 For official NewBeeBox, use only `ncc whoami -o json` to verify authentication; do not inspect its credential files. For third-party Python NewBeeBox, run `newbee session doctor`; credentials must come from the Windows Known Folder auth-store and all authenticated requests must use fixed official HTTPS origins. For DD, run `dd session doctor`; discovery must accept only an Authenticode-valid executable from an allowed official NetEase publisher. Doctor is local-only and must not start a native login. Do not set endpoint, credential-directory, or DD executable-path environment overrides.
 
+For ModUs, require all four `modus session doctor` booleans to be true before an authenticated read or write. A false result means the local Creator session must be repaired in ModUs.Creator; do not ask for or accept token input.
+
 ## Own one DD task session
 
 Before any DD live GET or write, run `dd session doctor`. If it reports `gui_running=true`, tell the user that continuing will close the listed official DD GUI instances and ask for explicit consent. Without consent, do not run start, do not close a process, and do not issue a native login. After consent, run `dd session start --confirm-close-gui`; when no GUI is running, run `dd session start` without that flag.
@@ -110,6 +119,8 @@ Expose every business field writable through the selected channel. Do not silent
 
 Use existing remote values only for omitted fields in `edit` or `update`, where omission means preserve. Show candidates by human name plus ID/SN and relevant status. Ask only choices that cannot be determined from the user's explicit request, local artifacts, or remote reads. For CurseForge upload, collect project ID, ZIP path, changelog, release type, version IDs/names or parent file choice, and each requested optional metadata field; do not infer visibility or approval from upload acceptance. For DD, do not draft the executable JSON incrementally: close the full dependency graph first, then generate one final JSON containing parent fields and stable child IDs/selectors. Python repeats the live GETs before upload or mutation and rejects missing or cross-parent selections; detail is authoritative when DD list and detail timestamps differ. When an existing plugin or WA has `assign_user_sn`, only public scope is selectable and the final rebuilt form must remain public.
 
+For ModUs project create/edit, collect the game object; name, alias, summary, category IDs, publish platforms, repository URL, description, dependency IDs, logo/screenshots; and license type, holder, year, and content. Preserve server-managed `logo`, `status`, and `game` detail fields. Project edits use explicit Creator null markers for cleared description, dependencies, and tier. For releases, collect project/file IDs, ZIP, version, release type, changelog, and transaction log path; ZIP parsing derives MD5, sizes, TOC, and supported game versions.
+
 ## Prepare and confirm
 
 Create a durable release directory under the target project's root, never under or beside the installed Skill. Use `publish/<YYYYMMDD-HHmmss>-<platform>-<resource>-<action>/`; if that name already exists, append `-2`, `-3`, and so on instead of reusing it. Put every atomic step in a versioned JSON file ordered as `01-<action>.json`, `02-<action>.json`, and so on. A retry or readback for the same plan reuses its directory; a new independent publishing plan gets a new directory. Use JSON, not YAML. Keep the directory after execution as the target project's publishing record, and do not change its ignore rules unless the user asks.
@@ -140,6 +151,8 @@ For CurseForge, treat the Upload API's returned file ID as upload acceptance onl
 
 In the third-party Python NewBeeBox channel, public plugin publication is three atomic writes: create privately, upload and verify the first version, then edit to public with explicit review intent. Never send a public `share_state` during Python create. In the official channel, follow the installed `ncc docs` sequence for create, init, push, and visibility instead of applying Python wire rules.
 
+For ModUs `plugin create|upload|update`, require the success transaction to record the actual file ID, metadata, signature, and binary-upload stages without the signed URL. A metadata-only `plugin edit` must record no binary upload. Read back with `plugin get`, `list`, and `versions`; for deletion, delete the release before its project and require negative detail readback for each object.
+
 Stop on the first failure. Report completed steps, retained IDs/SNs or media references, the redacted failure stage, whether verification is required, and the smallest safe retry. Explicit DD HTTP/business rejection has `verification_required=false`; interrupted PUT/mutation or failed readback after an accepted write has `verification_required=true`. Native DD failures may include a bounded message, HTTP status, native business code, field validation hints, and `details.log_path`. When `log_path` is present, read only the referenced Fuploader JSONL record under the DD version directory; do not inspect DD's other logs or any credential files. The Fuploader record contains sanitized request and response JSON/body plus byte counts and truncation flags, with signed URLs, cookies, JWTs, credentials, client identifiers, signatures, and tokens recursively redacted. Read back after an uncertain write before resending it. Official NewBeeBox exit codes are `0` success, `1` business error, `2` authentication failure, and `3` network error. Never loop on `quota_exceeded`.
 
 Never print or persist tokens, cookies, JWTs, signed URLs, DD `clientNo`, raw WA strings, or raw configuration backup contents.

package/fupload/references/modus.md

@@ -0,0 +1,77 @@
+# ModUs.Creator
+
+The ModUs provider reuses the local Windows Creator login state from
+`%LOCALAPPDATA%\ModUs.Creator\auth\token.dat`. The file is decrypted with
+CurrentUser DPAPI and the fixed entropy `ModUs.Creator.TokenStore.v1`; token
+contents, cookies, and signed URLs are never accepted as input or printed.
+
+## Read operations
+
+`modus session doctor` reports only `token_present`, `token_decrypted`,
+`token_nonempty`, and `api_ready`. API readiness is a real read-only
+`system/user/getInfo` probe.
+`modus project list|get` reads author projects. `modus plugin list|get|versions`
+reads release records. `modus options categories|game-versions|subscription-tiers`
+reads dynamic choices returned by the service. `categories` uses Creator's
+`GET plugin/list/Categories`; `subscription-tiers` uses `GET
+user/author/subscription/tiers`; `game-versions` uses `POST
+game/data/config/detail` with a JSON `{"keys": [...]}` body. Repeat `--key`
+to request selected server-defined configuration keys; at least one key is
+required because the service rejects an empty list.
+
+## Project writes
+
+`modus project create|edit|delete` uses versioned JSON through `--input`.
+The complete project model includes `project_id`, `name`, `alt_name`, `summary`,
+`categories`, `synchronization_type`, `license`, `images`, `repo_url`,
+`required_tier_id`, `required_dependencies`, `cf_url`, returned `logo`, `status`,
+`game`, and `description`. Write inputs use `project_state`, `publish_platforms`,
+`logo_base64`, the compatibility `screenshot_base64s`, and edit-only `image_ops`.
+`publish_platforms` is a non-empty array containing `modus`,
+`bigfoot`, or both; the two values are not mutually exclusive. Creator derives
+wire `synchronizationType` as 1 for ModUs, 2 for BigFoot, and 3 for both.
+When BigFoot is selected, `required_tier_id` must be null. Category ID 998 is
+BigFoot-exclusive and forces BigFoot as the only platform. `categories` contains
+one to five positive integer IDs.
+
+Create sends `name`, `altName`, `summary`, comma-delimited `categories`,
+`synchronizationType`, `license`, `images: 0`, `screenshotBase64sReqs`, optional
+`repoUrl`, and optional positive `requiredTierId`. `logo_base64` is the payload
+named `logo.webp`; `screenshot_base64s` remains the compatibility alias.
+`license` is the JSON string generated from `type`, `holder`, `year`, and
+`content`.
+
+Edit sends only changed Creator fields plus `projectId`. `description`, cleared
+`repo_url`, cleared `alt_name`, null `required_tier_id`, and cleared
+`required_dependencies` use Creator's literal `<null>` marker. `image_ops` maps
+to `imagesOps` entries with `op` (`upload` or `delete`), `name`, and upload-only
+`base64`; `images` is required with image operations. `cf_url`, returned `logo`,
+and `status` are read-only/server-managed. `publish_platforms` and `game` are
+local form state, not project update keys.
+`project_state` is a resumable `choose_game` -> `basic_info` -> `license` ->
+`complete` snapshot and is required for both create and edit; incomplete or
+missing snapshots are rejected before dry-run or network access. Each step preserves
+its state on validation failure. `required_tier_id` is null for the explicit
+no-tier branch or a positive dropdown ID.
+The write document also accepts `confirm` for destructive operations.
+Deletion requires `confirm: "DELETE"`.
+
+## Plugin release writes
+
+`modus plugin create|upload|update|edit|delete` uses the release fields
+`project_id`, `file_id`, `version`, `type`, `supported_game_versions`, `md5`,
+`zip_size`, `unzip_size`, `path`, `toc_version`, `changelog`, and `file`.
+`transaction_log` optionally selects the redacted transaction record path.
+Successful records include the completed `file_id`, metadata, signature, and
+binary upload stages that ran; failed records include `failed_stage`, a redacted
+error, and whether the ZIP was retained. The provider parses every ZIP `.toc`
+`Interface` value to derive
+`toc_version` and `supported_game_versions`; explicit caller values must match.
+The provider validates the ZIP, computes `md5`, `zip_size`, and `unzip_size`,
+registers metadata, obtains a signed URL, then uploads the ZIP bytes with HTTP
+`PUT` and `Content-Type: application/zip`. A local path is metadata only; it is
+never substituted for the binary upload. Release deletion requires
+`confirm: "DELETE"`.
+
+All write commands support `--dry-run`, which validates the versioned JSON and
+local files without constructing an authenticated provider or making a request.

package/fupload/scripts/fupload_cli/__init__.py

@@ -1,3 +1,3 @@
 """Fupload Python CLI."""
 
-__version__ = "0.0.8"
+__version__ = "0.0.10"

package/fupload/scripts/fupload_cli/cli.py

@@ -30,6 +30,13 @@ schema exposes them. The calling Skill must show the complete plan and obtain co
 """
 
 
+def _modus_provider(*, authenticate: bool = True) -> Any:
+    # Keep ModUs optional at import time so existing platform commands remain
+    # usable while the provider is installed or upgraded independently.
+    from .modus import Modus
+    return Modus(authenticate=authenticate)
+
+
 def _parser(**kwargs: Any) -> argparse.ArgumentParser:
     return argparse.ArgumentParser(
         formatter_class=argparse.RawDescriptionHelpFormatter,
@@ -221,6 +228,65 @@ def _blackbox_tree(platforms: argparse._SubParsersAction) -> None:
     _write_leaf(plugin, "blackbox", "version", "delete", "Soft-delete one Heybox Workshop plugin version and verify its deleted state.", command="version-delete")
 
 
+def _modus_tree(platforms: argparse._SubParsersAction) -> None:
+    root = platforms.add_parser(
+        "modus", help="ModUs.Creator author plugin operations",
+        description="Reuse the local ModUs.Creator Windows login state; token and signed upload material are never accepted as input.",
+    )
+    groups = root.add_subparsers(dest="resource_command", required=True)
+    session = groups.add_parser("session", help="Local authentication diagnostics").add_subparsers(dest="action_command", required=True)
+    _read_leaf(session, "doctor", "Check the local ModUs.Creator token store, DPAPI decryption, and authenticated API readiness without exposing credentials.", platform="modus", resource="session", action="doctor")
+
+    account = groups.add_parser("account", help="ModUs author account and statistics").add_subparsers(dest="action_command", required=True)
+    _read_leaf(account, "info", "Read the current ModUs account capability flags.", platform="modus", resource="account", action="info")
+    _read_leaf(account, "subscription-count", "Read the active author subscription count.", platform="modus", resource="account", action="subscription-count")
+    _read_leaf(account, "statistics", "Read current author project statistics.", platform="modus", resource="account", action="statistics")
+
+    addon = groups.add_parser("addon", help="ModUs addon discovery and history APIs").add_subparsers(dest="action_command", required=True)
+    leaf = _read_leaf(addon, "info", "Resolve addon directories to project records.", platform="modus", resource="addon", action="info")
+    leaf.add_argument("--directory", dest="directories", action="append", required=True)
+    leaf.add_argument("--server-type", type=int, default=1)
+    leaf = _read_leaf(addon, "project-info", "Resolve addon project IDs to names.", platform="modus", resource="addon", action="project-info")
+    leaf.add_argument("--project-id", dest="project_ids", action="append", type=_positive, required=True)
+    leaf.add_argument("--server-type", type=int, default=1)
+    leaf = _read_leaf(addon, "history", "Read addon project version history.", platform="modus", resource="addon", action="history")
+    leaf.add_argument("--project-id", type=_positive, required=True)
+    leaf.add_argument("--server-type", type=int, default=1)
+    _page_flags(leaf)
+
+    options = groups.add_parser("options", help="Read ModUs dynamic choices").add_subparsers(dest="option_action", required=True)
+    _read_leaf(options, "categories", "List plugin categories returned by ModUs.", platform="modus", resource="options", action="categories")
+    game_versions = _read_leaf(options, "game-versions", "List supported ModUs game versions.", platform="modus", resource="options", action="game-versions")
+    game_versions.add_argument("--key", dest="keys", action="append", required=True, help="Request one game config key; repeatable.")
+    _read_leaf(options, "subscription-tiers", "List author subscription tiers returned by ModUs.", platform="modus", resource="options", action="subscription-tiers")
+
+    project = groups.add_parser("project", help="ModUs plugin project records").add_subparsers(dest="action_command", required=True)
+    for action, text in (
+        ("create", "Create a ModUs plugin project."),
+        ("edit", "Edit ModUs plugin project metadata."),
+        ("delete", "Delete one explicitly confirmed ModUs plugin project."),
+    ):
+        _write_leaf(project, "modus", "project", action, text)
+    leaf = _read_leaf(project, "list", "List plugin projects owned by the current ModUs author.", platform="modus", resource="project", action="list"); _list_flags(leaf)
+    leaf = _read_leaf(project, "get", "Read one ModUs plugin project detail.", platform="modus", resource="project", action="get"); leaf.add_argument("--project-id", type=_positive, required=True)
+    leaf = _read_leaf(project, "dependencies", "Query ModUs project dependency candidates.", platform="modus", resource="project", action="dependencies")
+    leaf.add_argument("--query", help="Dependency search text or JSON request body.")
+    leaf.add_argument("--project-id", type=_positive)
+
+    plugin = groups.add_parser("plugin", help="ModUs plugin releases and ZIP uploads").add_subparsers(dest="action_command", required=True)
+    for action, text in (
+        ("create", "Create and upload the first ModUs plugin release."),
+        ("upload", "Upload a ModUs plugin ZIP and register its release metadata."),
+        ("update", "Publish a new ModUs plugin release version."),
+        ("edit", "Edit ModUs plugin release metadata."),
+        ("delete", "Delete one explicitly confirmed ModUs plugin release."),
+    ):
+        _write_leaf(plugin, "modus", "plugin", action, text)
+    leaf = _read_leaf(plugin, "list", "List releases for one ModUs plugin project.", platform="modus", resource="plugin", action="list"); leaf.add_argument("--project-id", type=_positive, required=True); _page_flags(leaf)
+    leaf = _read_leaf(plugin, "get", "Read one ModUs plugin release detail.", platform="modus", resource="plugin", action="get"); leaf.add_argument("--project-id", type=_positive, required=True); leaf.add_argument("--file-id", type=_positive, required=True)
+    leaf = _read_leaf(plugin, "versions", "List releases for one ModUs plugin project.", platform="modus", resource="plugin", action="versions"); leaf.add_argument("--project-id", type=_positive, required=True); _page_flags(leaf)
+
+
 def build_parser() -> argparse.ArgumentParser:
     parser = _parser(
         prog="fupload",
@@ -233,6 +299,7 @@ def build_parser() -> argparse.ArgumentParser:
     _dd_tree(platforms)
     _curseforge_tree(platforms)
     _blackbox_tree(platforms)
+    _modus_tree(platforms)
     return parser
 
 
@@ -280,7 +347,7 @@ def main(argv: Optional[Sequence[str]] = None) -> int:
             if args.dry_run:
                 write_output(platform, operation, _dry_run_data(doc, schema.name), dry_run=True)
                 return 0
-            provider = NewBee() if platform == "newbee" else (DD() if platform == "dd" else (Blackbox() if platform == "blackbox" else CurseForge()))
+            provider = NewBee() if platform == "newbee" else (DD() if platform == "dd" else (Blackbox() if platform == "blackbox" else (CurseForge() if platform == "curseforge" else _modus_provider())))
             try:
                 if platform == "dd":
                     data = provider.execute_write(resource, action, doc, getattr(args, "session", None))
@@ -292,7 +359,8 @@ def main(argv: Optional[Sequence[str]] = None) -> int:
                     close()
             write_output(platform, operation, data)
             return 0
-        provider = NewBee() if platform == "newbee" else (DD() if platform == "dd" else (Blackbox() if platform == "blackbox" else CurseForge()))
+        modus_doctor = platform == "modus" and resource == "session" and action == "doctor"
+        provider = NewBee() if platform == "newbee" else (DD() if platform == "dd" else (Blackbox() if platform == "blackbox" else (CurseForge() if platform == "curseforge" else _modus_provider(authenticate=not modus_doctor))))
         try:
             if platform == "dd":
                 data = provider.execute_read(resource, action, args, getattr(args, "session", None))

package/fupload/scripts/fupload_cli/io.py

@@ -89,7 +89,9 @@ def sanitize_output(value: Any) -> Any:
         result: Dict[str, Any] = {}
         for key, item in value.items():
             normalized = str(key).replace("-", "_").lower()
-            if normalized in _SENSITIVE_KEYS or any(
+            if normalized in {"token_present", "token_decrypted", "token_nonempty", "api_ready"} and isinstance(item, bool):
+                result[key] = item
+            elif normalized in _SENSITIVE_KEYS or any(
                 marker in normalized
                 for marker in ("token", "cookie", "credential", "signature", "password", "secret")
             ):