@fotor-ai/dsh-fotor-plugin 0.6.0 → 0.6.1-test.2

package/runtime/config.mjs

@@ -0,0 +1,95 @@
+/** Resolve installed resources without persisting machine-specific configuration. */
+import { access, readFile, realpath, stat } from 'node:fs/promises';
+import { constants } from 'node:fs';
+import { createRequire } from 'node:module';
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+export const PACKAGE_ROOT = fileURLToPath(new URL('../', import.meta.url));
+export const ENDPOINT = 'https://mcp.fotor.com/mcp';
+export const CALLBACK_HOST = '127.0.0.1';
+const execute = promisify(execFile);
+export function supportedNode(version) {
+  const match = /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)$/.exec(version);
+  return !!match && ((Number(match[1]) === 24 && Number(match[2]) >= 2) || Number(match[1]) === 26);
+}
+export function requireValue(condition, message) {
+  if (!condition) throw new Error('Fotor configuration: ' + message);
+}
+export function inputObject(input) {
+  requireValue(input !== null && typeof input === 'object' && !Array.isArray(input), 'expected an object');
+  return input;
+}
+async function absoluteResource(value, directory = false) {
+  requireValue(typeof value === 'string' && path.isAbsolute(value), 'use an absolute resource path');
+  const info = await stat(value).catch(() => null);
+  requireValue(info && (directory ? info.isDirectory() : info.isFile()), 'configured resource is missing; preserve the override or remove it to use automatic resolution');
+  return value;
+}
+function serviceUrl(value) {
+  const url = new URL(value);
+  requireValue(!url.username && !url.password && !url.hash, 'invalid service URL');
+  requireValue(url.href === ENDPOINT || (url.protocol === 'http:' && ['127.0.0.1', '[::1]', 'localhost'].includes(url.hostname)), 'only production Fotor or a loopback acceptance service is supported');
+  return value;
+}
+export async function resolveSkills(input = {}, options = {}) {
+  inputObject(input);
+  const packageRoot = options.packageRoot ?? PACKAGE_ROOT;
+  requireValue(input.includeDefaultRoots === undefined || input.includeDefaultRoots === false, 'default skill roots must stay disabled');
+  const roots = input.customSkillDirs ?? [path.join(packageRoot, 'skills')];
+  requireValue(Array.isArray(roots) && roots.length === 1, 'configure one Fotor skill root or remove customSkillDirs for automatic resolution');
+  await absoluteResource(roots[0], true);
+  return { ...input, providerName: input.providerName ?? 'fotor', includeDefaultRoots: false, customSkillDirs: [...roots], watch: input.watch ?? false };
+}
+export async function resolveMcp(input = {}, options = {}) {
+  inputObject(input);
+  const packageRoot = options.packageRoot ?? PACKAGE_ROOT;
+  const profileDir = options.profileDir;
+  requireValue(typeof profileDir === 'string' && path.isAbsolute(profileDir), 'an active profile is required');
+  requireValue(input.transport === undefined || input.transport === 'stdio', 'expected the managed stdio transport');
+  requireValue(input.reconnect === undefined || input.reconnect.enabled === false, 'automatic host reconnect must stay disabled');
+  const command = input.command ?? process.execPath;
+  await absoluteResource(command);
+  await access(command, constants.X_OK);
+  const version = command === process.execPath ? process.versions.node : (await execute(command, ['--version'], { timeout: 5000, env: childEnvironment({}) })).stdout.trim().replace(/^v/, '');
+  requireValue(supportedNode(version), 'use stable Node 24.2.0 or later in 24.x, or Node 26.x');
+  const suppliedArgs = input.args;
+  requireValue(suppliedArgs === undefined || (Array.isArray(suppliedArgs) && suppliedArgs.length >= 2 && suppliedArgs.every(value => typeof value === 'string')), 'args must be a complete bridge argument array');
+  const proxy = suppliedArgs?.[0] ?? path.join(path.dirname(createRequire(path.join(packageRoot, 'package.json')).resolve('mcp-remote/package.json')), 'dist/proxy.js');
+  await absoluteResource(proxy);
+  requireValue(path.basename(proxy) === 'proxy.js', 'expected the mcp-remote proxy entry');
+  const bridgeRoot = path.dirname(path.dirname(await realpath(proxy)));
+  const manifest = JSON.parse(await readFile(path.join(bridgeRoot, 'package.json'), 'utf8'));
+  requireValue(manifest.name === 'mcp-remote' && manifest.version === '0.15.2', 'expected installed mcp-remote 0.15.2');
+  const client = path.join(bridgeRoot, 'dist/client.js');
+  await absoluteResource(client);
+  const endpoint = serviceUrl(suppliedArgs?.[1] ?? input.endpoint ?? ENDPOINT);
+  const callbackPort = input.callbackPort ?? 3335;
+  requireValue(Number.isInteger(callbackPort) && callbackPort > 0 && callbackPort < 65536, 'invalid callback port');
+  const args = suppliedArgs ? [...suppliedArgs] : [proxy, endpoint, String(callbackPort), '--host', CALLBACK_HOST, '--transport', 'http-only', '--resource', endpoint, '--auth-timeout', '600', '--connect-timeout', '20', '--headers-timeout', '20', '--body-timeout', '20'];
+  requireValue(!args.some(value => ['--allow-http', '--skip-resource-parameter', '--debug'].includes(value)), 'unsafe or sensitive-output bridge option');
+  const option = name => args[args.indexOf(name) + 1];
+  requireValue(args.includes('--resource') && option('--resource') === endpoint, 'preserve the MCP resource parameter');
+  requireValue(!args.includes('--host') || option('--host') === CALLBACK_HOST, 'callback must stay on the loopback host');
+  const env = { ...inputObject(input.env ?? {}) };
+  requireValue(Object.values(env).every(value => typeof value === 'string'), 'environment values must be strings');
+  requireValue(env.NODE_TLS_REJECT_UNAUTHORIZED !== '0', 'TLS verification must stay enabled');
+  env.MCP_REMOTE_CONFIG_DIR ??= path.join(profileDir, 'fotor', 'mcp-auth');
+  requireValue(path.isAbsolute(env.MCP_REMOTE_CONFIG_DIR), 'the credential directory must be absolute');
+  const relative = path.relative(packageRoot, env.MCP_REMOTE_CONFIG_DIR);
+  requireValue(relative.startsWith('..' + path.sep) || path.isAbsolute(relative), 'credentials must be outside the installed package');
+  const cwd = await absoluteResource(input.cwd ?? options.cwd ?? profileDir, true);
+  const { endpoint: _endpoint, callbackPort: _callback, ...nativeInput } = input;
+  return {
+    client,
+    native: { ...nativeInput, transport: 'stdio', serverName: input.serverName ?? 'fotor', command, args, env, cwd,
+      toolCallTimeoutMs: input.toolCallTimeoutMs ?? 25000, failOnStartupError: input.failOnStartupError ?? true, reconnect: { ...input.reconnect, enabled: false } },
+  };
+}
+/** Share desktop routing, but never copy ambient account credentials into the child. */
+export function childEnvironment(extra) {
+  const keys = ['PATH', 'HOME', 'USER', 'LOGNAME', 'LANG', 'LC_ALL', 'DISPLAY', 'WAYLAND_DISPLAY', 'DBUS_SESSION_BUS_ADDRESS', 'XDG_RUNTIME_DIR', 'XDG_CONFIG_HOME', 'XDG_DATA_HOME', 'XDG_CURRENT_DESKTOP', 'DESKTOP_SESSION', 'BROWSER', 'HTTP_PROXY', 'HTTPS_PROXY', 'NO_PROXY', 'http_proxy', 'https_proxy', 'no_proxy', 'NODE_EXTRA_CA_CERTS'];
+  return { ...Object.fromEntries(keys.filter(key => process.env[key] !== undefined).map(key => [key, process.env[key]])), ...extra };
+}

package/runtime/lease.mjs

@@ -0,0 +1,25 @@
+/** Reserve one external Fotor store across host processes without reading credentials. */
+import { constants } from 'node:fs';
+import { mkdir, open, lstat, unlink } from 'node:fs/promises';
+import path from 'node:path';
+
+export async function acquireLease(directory) {
+  await mkdir(path.dirname(directory), { recursive: true, mode: 0o700 });
+  const filename = directory + '.connection-lock';
+  let handle;
+  try { handle = await open(filename, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | constants.O_NOFOLLOW, 0o600); }
+  catch (error) {
+    if (error.code === 'EEXIST') throw new Error('Fotor connection lock exists; stop the other connection or inspect this adapter-owned lock before retrying');
+    throw new Error('Fotor connection lock could not be created');
+  }
+  const identity = await handle.stat();
+  try { await handle.writeFile(JSON.stringify({ pid: process.pid }) + '\n'); }
+  finally { await handle.close(); }
+  let released = false;
+  return async () => {
+    if (released) return;
+    released = true;
+    const current = await lstat(filename).catch(() => null);
+    if (current?.isFile() && current.ino === identity.ino && current.dev === identity.dev) await unlink(filename);
+  };
+}

package/runtime/lifecycle.mjs

@@ -0,0 +1,65 @@
+/** One cancellable connection owner; activation never waits for human consent. */
+import { setTimeout as delay } from 'node:timers/promises';
+import { authorize, checkCallbackPort } from './client.mjs';
+import { acquireLease } from './lease.mjs';
+
+const owners = new Map();
+export function startConnection(connection, { mount, status, authorizeClient = authorize, lease = acquireLease, checkPort = checkCallbackPort, wait = delay, automaticMs = 90000 }) {
+  const key = connection.native.env.MCP_REMOTE_CONFIG_DIR + '\n' + connection.native.args[1];
+  if (owners.has(key)) throw new Error('Fotor connection already active for this credential directory');
+  const controller = new AbortController();
+  let releaseLease;
+  let child, state = 'preparing', diagnostic;
+  const publish = (next, message) => { state = next; diagnostic = message; status(next, message); };
+  const owner = { getStatus: () => ({ state, ...(diagnostic ? { diagnostic } : {}) }), dispose };
+  owners.set(key, owner);
+  publish('preparing');
+  const task = Promise.resolve().then(async () => {
+    releaseLease = await lease(connection.native.env.MCP_REMOTE_CONFIG_DIR);
+    if (controller.signal.aborted) return;
+    const checking = Date.now();
+    await checkPort(connection.native.args);
+    if (controller.signal.aborted) return;
+    let remaining = automaticMs - (Date.now() - checking);
+    for (let attempt = 0; ; attempt++) {
+      const attemptStarted = Date.now();
+      try {
+        const result = await authorizeClient(connection, { signal: controller.signal, status: publish, automaticMs: Math.max(1, remaining) });
+        remaining -= result?.automaticMsUsed ?? Date.now() - attemptStarted;
+        break;
+      } catch (error) {
+        remaining -= Date.now() - attemptStarted;
+        const pause = [2000, 5000][attempt];
+        if (controller.signal.aborted || !error.transient || attempt === 2 || remaining <= pause) throw error;
+        await wait(pause, undefined, { signal: controller.signal });
+        remaining -= pause;
+      }
+    }
+    if (controller.signal.aborted) return;
+    if (remaining <= 0) throw new Error('Fotor automatic connection budget exceeded');
+    child = mount(connection.native);
+    // Disposal is registered before awaiting the native handshake.
+    let timer;
+    try {
+      await Promise.race([child.await(), new Promise((_, reject) => {
+        timer = setTimeout(() => reject(new Error('Fotor automatic connection budget exceeded')), Math.max(1, remaining));
+      })]);
+    } finally { clearTimeout(timer); }
+    if (!controller.signal.aborted) publish('connected');
+  }).catch(async error => {
+    if (!controller.signal.aborted) publish('failed', error.message);
+    if (child) await child.dispose();
+  });
+  let disposed;
+  function dispose() {
+    return disposed ??= (async () => {
+      controller.abort();
+      if (child) await child.dispose();
+      await task;
+      await releaseLease?.();
+      if (owners.get(key) === owner) owners.delete(key);
+      publish('stopped');
+    })();
+  }
+  return owner;
+}

package/runtime/mcp.mjs

@@ -0,0 +1,34 @@
+/** Auto-configure the host MCP client and own its cancellable authorization stage. */
+import z from '@deepseek-ai/schemastery';
+import { resolveMcp } from './config.mjs';
+import { startConnection } from './lifecycle.mjs';
+export const name = 'fotor-mcp';
+export const inject = ['profileContext', 'tools'];
+export const Config = z.object({
+  transport: z.const('stdio'), serverName: z.string(), command: z.string(),
+  args: z.union([z.const(undefined), z.array(z.string())]), env: z.dict(String), cwd: z.string(),
+  toolCallTimeoutMs: z.number().min(1), failOnStartupError: z.boolean(),
+  maxInstructionBytes: z.natural().min(1), endpoint: z.string(),
+  callbackPort: z.natural().min(1).max(65535),
+  reconnect: z.union([z.const(undefined), z.object({ enabled: z.const(false), initialDelayMs: z.number(), maxDelayMs: z.number(), maxAttempts: z.number() })]),
+});
+export async function apply(ctx, input = {}) {
+  const connection = await resolveMcp(input, { profileDir: ctx.profileContext.dir, cwd: ctx.profileContext.cwd });
+  const prefix = 'mcp__' + connection.native.serverName + '__';
+  if (ctx.get('fotorConnection') || ctx.tools.schemas().some(tool => tool.name.startsWith(prefix))) throw new Error('Fotor MCP service already registered');
+  const native = await import('@deepseek-ai/dsh-mcp-client');
+  const owner = startConnection(connection, {
+    mount: config => {
+      const prefix = 'mcp__' + config.serverName + '__';
+      if (ctx.tools.schemas().some(tool => tool.name.startsWith(prefix))) throw new Error('Fotor MCP service already registered');
+      const child = ctx.plugin(native, config);
+      return { dispose: () => child.dispose(), await: async () => {
+        await child.await();
+        if (!ctx.tools.schemas().some(tool => tool.name.startsWith(prefix))) throw new Error('Fotor MCP did not discover tools');
+      } };
+    },
+    status: (state, diagnostic) => ctx.logger.info('Fotor MCP: %s%s', state, diagnostic ? ' — ' + diagnostic : ''),
+  });
+  ctx.effect(() => () => owner.dispose(), 'fotor connection and callback cleanup');
+  ctx.provide('fotorConnection', owner);
+}

package/runtime/skills.mjs

@@ -0,0 +1,19 @@
+/** Adapt the native filesystem provider to this installed package. */
+import z from '@deepseek-ai/schemastery';
+import { resolveSkills } from './config.mjs';
+export const name = 'fotor-skills';
+export const inject = ['skills'];
+export const Config = z.object({
+  providerName: z.string(), includeDefaultRoots: z.const(false),
+  customSkillDirs: z.union([z.const(undefined), z.array(z.string())]), watch: z.boolean(),
+  dshHome: z.string(), agentsHome: z.string(),
+});
+export async function apply(ctx, input = {}) {
+  if (ctx.get('fotorSkills')) throw new Error('Fotor skill provider already registered');
+  const config = await resolveSkills(input);
+  ctx.provide('fotorSkills', { root: config.customSkillDirs[0] });
+  const native = await import('@deepseek-ai/dsh-skill-filesystem');
+  const child = ctx.plugin(native, config);
+  ctx.effect(() => () => child.dispose(), 'fotor skill provider');
+  await child.await();
+}

package/skills/fotor-connect/references/authentication.md

@@ -8,41 +8,29 @@ DeepSeek Harness is abbreviated as `dsh` in commands and native identifiers.
 
 ## Ownership and baseline
 
-This Bundle targets Linux DeepSeek Harness Web `0.2.1-rc.2`, with package-manager-owned `mcp-remote 0.15.2` and stable Node `>=24.2.0 <25.0.0 || 26.x`. DeepSeek Harness owns the stdio client and tool permissions; the bridge owns OAuth and its credential store. Do not describe this as native remote OAuth in DeepSeek Harness. Desktop, headless and ACP have separate acceptance scopes.
+The current acceptance baseline is Linux DeepSeek Harness Web `0.2.1-rc.3`, with package-manager-owned `mcp-remote 0.15.2` and stable Node `>=24.2.0 <25.0.0 || 26.x`. Historical rc.2 results retain their original scope; matching the declared host range alone is not acceptance. DeepSeek Harness owns the stdio client and tool permissions; the bridge owns OAuth and its credential store. Do not describe this as native remote OAuth in DeepSeek Harness. Desktop, headless and ACP have separate acceptance scopes.
 
 Use this guide with the [shared runtime workflow](mcp-integration.md#runtime-workflow). Installation, authorization, actual calls, website access, restart reuse and reauthorization recovery are distinct outcomes. Do not infer full support from one successful call.
 
-## Inspect and configure
+## Installation and automatic configuration
 
-Installation declares two disabled components. The package manager automatically obtains the pinned bridge dependency. Installation does not register a working connection, scan unconfigured skill roots or start OAuth. For first installation, a missing bridge, unconfigured paths or missing skills, open the installed package's README and follow its `INSTALL.md` guide before continuing. That guide covers GitHub/npm installation, native dependency-path queries and complete configuration; no internal development document is required. The user or an Agent acting on their installation request completes those steps before connection.
+For installation, source changes, missing dependencies, or invalid saved paths, read the installed package README and `INSTALL.md`. GitHub installation obtains the pinned bridge through the package manager; npm carries its full dependency tree. Node remains external.
 
-For an update or source change, read the same guide's maintenance section before changing the installation. npm updates use an explicit published target version; preserve the original profile/store and verify actual installed files before declaring success. Immediate tag updates have a recorded limitation. Updating paths is distinct from authorizing Fotor or opening its website; preserve the existing external credential directory.
+From 0.6.1, select the installed Bundle with Web **Enable now** or load its CLI profile. Host activation enables both adapters by default. `fotor-skills` resolves this package's skills and uses the native filesystem provider without default-root scanning. `fotor-mcp` resolves Node and both installed bridge entrypoints, then supplies complete native stdio configuration. Runtime defaults are not written into a user patch. A package download alone runs no hook or authorization.
 
-Copy `configuration.example.yml` outside the package. Inspect the effective profile, home patch and launch overlays before changing them. Stop on a conflicting `fotor` service or duplicate skill provider; preserve the existing configuration.
+Explicit profile/home/launch overrides, including disabled states and the external `MCP_REMOTE_CONFIG_DIR`, take precedence. Do not replace them or clear credentials to repair a path error. An obsolete path requires a targeted native configuration edit: remove only that override to adopt automatic resolution, or correct it. Conflicting Fotor services or skill providers require resolving the duplicate while preserving the existing installation.
 
-Fill every path with its actual absolute location. Only the installed Fotor skill directory belongs in `customSkillDirs`; retain `includeDefaultRoots: false`. Use the independent Fotor provider name. Configure the external Node executable, bridge proxy, working directory and Fotor-only `MCP_REMOTE_CONFIG_DIR`. Keep the bridge store separate from model-provider credentials and other clients. Preserve it across package updates. Overrides replace the entire `config` object, including security and reconnect settings; they do not deep-merge individual fields.
-
-Enable only the skill provider first. Use `/fotor-connect` when exposed by the native skill menu, or the native `skill` tool for the actual discovered Fotor connection entry. Confirm its installed resource path. Missing skills, a missing executable, a disabled component, permission denial, unauthenticated MCP and unknown state require different responses; none justifies clearing credentials.
-
-Use DeepSeek Harness's native `read` tool for the known package references. Its Linux shell sandbox can hide other host files under a private temporary-directory mount; shell `ls` failure is not proof that native file reading will fail. If the native reader cannot access this package, report that limit and stop. Do not scan unrelated installations, use another platform's guide, or widen standing sandbox permissions to work around the lookup.
+Use native `root`, `list` and `why` for diagnostics; do not guess pnpm store paths. The skill provider's running state alone is not discovery: verify the actual Fotor entries and their installed resource paths. Use native `read` for skill references; the Linux Shell sandbox can hide host paths. Do not scan unrelated packages after a native read failure.
 
 ## First authorization
 
-Verify this installed package owns mcp-remote 0.15.2, and resolve its actual client/proxy paths using the installation guide: native dependency queries for Git, or the declared bundled directory for npm. Never download or upgrade it during connection with an unpinned `npx` command. Keep the stdio proxy stopped while the standalone authorization client runs.
-
-Confirm the actual opener in this launch environment uses the user's daily ordinary browser. A task-specific desktop routing override may be needed; do not change the system default, create an incognito or headless session, or clear browser data. The model-provider login is independent of Fotor OAuth.
-
-Run the installed dependency's native client entrypoint, using the same endpoint, resource, callback port/host and credential directory configured for the proxy:
+Enabling MCP starts one cancellable connection task. The adapter runs the installed mcp-remote client with the same credential directory, endpoint, resource, callback and security arguments as the proxy. The bridge reuses valid credentials or opens the ordinary browser for user login and consent. Fotor code does not read tokens, implement OAuth, or install dependencies during connection. Model-provider login is separate.
 
-Use a native interactive terminal, or a host execution facility that keeps the client's input channel open until discovery completes. Closing stdin can make the bridge exit successfully before its tools response arrives; require actual discovery and completion rather than exit code alone.
+Confirm the opener uses the user's daily ordinary browser; retain its profile and login state. A task-specific routing override may be used without changing the system default; record it separately from untouched default-browser behavior. Human authorization still belongs to the user, including Continue / Wait / Cancel. The adapter's states and sanitized diagnostics distinguish `preparing`, `waiting-authorization`, `connected`, `failed` and `stopped`; an active adapter is not proof of a connected MCP service.
 
-```bash
-MCP_REMOTE_CONFIG_DIR=/absolute/path/to/dsh-home/mcp-auth/fotor /absolute/path/to/node /absolute/path/from/dependency-query/mcp-remote/dist/client.js https://mcp.fotor.com/mcp <callback-port> --host <callback-host> --transport http-only --resource https://mcp.fotor.com/mcp --auth-timeout 600 --connect-timeout 20 --headers-timeout 20 --body-timeout 20
-```
+After Continue, require successful client connection and actual tools discovery. The client and callback listener must exit before the native MCP client starts the proxy. Proxy tool discovery completes readiness; a consent success page or zero client exit alone is insufficient. Authorization waits at most ten minutes. Cancel by disabling `fotor-mcp` through the native plugin controls; the owned child and callback must stop without blocking the Web interface. A cancelled or failed task waits for a deliberate disable/enable before another authorization attempt.
 
-The user completes account login, consent and Continue / Wait / Cancel in conversation. After Continue, verify the actual client connected, discovered tools and finished successfully; a browser success page alone is insufficient. Limit human OAuth waiting to ten minutes and stop this client's callback listener on cancellation or timeout. Do not assume a command-line timeout enforces every callback wait.
-
-After the standalone client exits and its callback listener closes, enable the configured MCP component and restart the selected DeepSeek Harness profile. Discover actual tools and execute a read-only `list_models` check. Do not expose the whole model catalog, query credits or request a website link for an MCP-only task.
+After connection, use `/fotor-connect` or the native skill tool for the actual discovered entry. Verify with a read-only `list_models` call when requested. MCP-only requests neither request a website link nor query credits. Installation, authorization, discovery and actual queries are distinct evidence.
 
 ## Website access
 
@@ -64,13 +52,17 @@ For user-requested reauthorization, use this single sequence:
 
 1. Stop the failed operation, this profile's proxy and any leftover callback listener. Do not start a competing authorization flow.
 2. Preserve the same credential directory and connection/security arguments. Do not read, copy or edit tokens.
-3. Run the standalone authorization client above. Complete the new native consent flow only when explicitly requested, with the same Continue / Wait / Cancel handling and native-result verification.
+3. Re-enable the MCP adapter after the user requests another connection attempt. It runs the standalone authorization client and applies the same Continue / Wait / Cancel handling and native-result verification.
 4. Stop the standalone client, restart the configured DeepSeek Harness MCP and prove recovery with an actual read-only query. A successful consent page without that query is not recovery.
 
-A cached client connection without a new consent flow is reuse, not invalid-grant recovery. Never clear a global authorization directory, substitute a new empty store, weaken issuer/resource/PKCE/TLS checks or sign out the daily website to force a test. Exercise recovery only after a real failure or an available native operation that can be limited to this exact temporary grant. If no safe trigger exists, report recovery as unverified rather than claiming complete acceptance. Expiry-driven refresh likewise requires actual evidence.
+A cached client connection without a new consent flow is reuse, not invalid-grant recovery. Never clear a global authorization directory, substitute a new empty store, weaken issuer/resource/PKCE/TLS checks or sign out the daily website to force a test. Server-side invalid-grant acceptance requires a real failure or an available native operation limited to this exact temporary grant. If no safe trigger exists, report that recovery scope as unverified. Expiry-driven refresh likewise requires actual evidence.
+
+An explicitly user-approved isolated local-cache-loss test is a separate acceptance scope. After stopping all task-owned processes and callbacks, verify ownership and ordinary-file type before removing only that connection's token cache, without reading its contents. Keep the original directory, registration and connection parameters. Re-enable the adapter for user consent, then require an actual query and another query after a full restart. Label this local credential-loss recovery; it does not establish server-side revocation, expiry or intact rejected-cache recovery.
 
 ## Updating and removing
 
 Use the native Bundle commands in the package README. After updating, inspect the resolved source, version, file contents and actual skill directory; package-manager links outside the package are distinct from forbidden symlinks inside its resources. Keep only one enabled Fotor skill source. Re-resolve the managed bridge path when replacing a package; preserve the external credential store.
 
-Disable only this Bundle's two components and remove its local overrides before native removal. Cleanup of an isolated acceptance environment may delete that environment's local store after all related processes stop; that does not revoke server-side consent. Leave daily installations, credentials and browser login unchanged. Keep package, model-session, bridge, website, reuse and recovery evidence separate.
+Disable this Bundle before native removal. Retain its external overrides and credentials unless the user explicitly requests a targeted removal. Cleanup of an isolated acceptance environment may delete that environment's local store after all related processes stop; that does not revoke server-side consent. Leave daily installations, credentials and browser login unchanged. Keep package, model-session, bridge, website, reuse and recovery evidence separate.
+
+Reinstalling the same source/profile with the same credential directory can reuse accepted authorization. It still establishes a new connection, so verify actual discovery and a requested read-only query. Changing profile, home, credential directory or connection parameters can select another cache. Preserve explicit disabled settings and valid complete configuration when upgrading; correct only obsolete path overrides through native configuration.

package/skills/fotor-connect/references/mcp-integration.md

@@ -2,7 +2,7 @@
 
 ## Connection
 
-This **production release channel** package connects to the **production service** at `https://mcp.fotor.com/mcp` using Streamable HTTP. Both release channels use the production account, website, and credits. Preserve this service throughout a task and its assets.
+This **test release channel** package connects to the **production service** at `https://mcp.fotor.com/mcp` using Streamable HTTP. Both release channels use the production account, website, and credits. Preserve this service throughout a task and its assets.
 
 | Environment | MCP endpoint | Website target | Login handoff endpoint |
 | --- | --- | --- | --- |

package/skills/fotor-credits/references/authentication.md

@@ -8,41 +8,29 @@ DeepSeek Harness is abbreviated as `dsh` in commands and native identifiers.
 
 ## Ownership and baseline
 
-This Bundle targets Linux DeepSeek Harness Web `0.2.1-rc.2`, with package-manager-owned `mcp-remote 0.15.2` and stable Node `>=24.2.0 <25.0.0 || 26.x`. DeepSeek Harness owns the stdio client and tool permissions; the bridge owns OAuth and its credential store. Do not describe this as native remote OAuth in DeepSeek Harness. Desktop, headless and ACP have separate acceptance scopes.
+The current acceptance baseline is Linux DeepSeek Harness Web `0.2.1-rc.3`, with package-manager-owned `mcp-remote 0.15.2` and stable Node `>=24.2.0 <25.0.0 || 26.x`. Historical rc.2 results retain their original scope; matching the declared host range alone is not acceptance. DeepSeek Harness owns the stdio client and tool permissions; the bridge owns OAuth and its credential store. Do not describe this as native remote OAuth in DeepSeek Harness. Desktop, headless and ACP have separate acceptance scopes.
 
 Use this guide with the [shared runtime workflow](mcp-integration.md#runtime-workflow). Installation, authorization, actual calls, website access, restart reuse and reauthorization recovery are distinct outcomes. Do not infer full support from one successful call.
 
-## Inspect and configure
+## Installation and automatic configuration
 
-Installation declares two disabled components. The package manager automatically obtains the pinned bridge dependency. Installation does not register a working connection, scan unconfigured skill roots or start OAuth. For first installation, a missing bridge, unconfigured paths or missing skills, open the installed package's README and follow its `INSTALL.md` guide before continuing. That guide covers GitHub/npm installation, native dependency-path queries and complete configuration; no internal development document is required. The user or an Agent acting on their installation request completes those steps before connection.
+For installation, source changes, missing dependencies, or invalid saved paths, read the installed package README and `INSTALL.md`. GitHub installation obtains the pinned bridge through the package manager; npm carries its full dependency tree. Node remains external.
 
-For an update or source change, read the same guide's maintenance section before changing the installation. npm updates use an explicit published target version; preserve the original profile/store and verify actual installed files before declaring success. Immediate tag updates have a recorded limitation. Updating paths is distinct from authorizing Fotor or opening its website; preserve the existing external credential directory.
+From 0.6.1, select the installed Bundle with Web **Enable now** or load its CLI profile. Host activation enables both adapters by default. `fotor-skills` resolves this package's skills and uses the native filesystem provider without default-root scanning. `fotor-mcp` resolves Node and both installed bridge entrypoints, then supplies complete native stdio configuration. Runtime defaults are not written into a user patch. A package download alone runs no hook or authorization.
 
-Copy `configuration.example.yml` outside the package. Inspect the effective profile, home patch and launch overlays before changing them. Stop on a conflicting `fotor` service or duplicate skill provider; preserve the existing configuration.
+Explicit profile/home/launch overrides, including disabled states and the external `MCP_REMOTE_CONFIG_DIR`, take precedence. Do not replace them or clear credentials to repair a path error. An obsolete path requires a targeted native configuration edit: remove only that override to adopt automatic resolution, or correct it. Conflicting Fotor services or skill providers require resolving the duplicate while preserving the existing installation.
 
-Fill every path with its actual absolute location. Only the installed Fotor skill directory belongs in `customSkillDirs`; retain `includeDefaultRoots: false`. Use the independent Fotor provider name. Configure the external Node executable, bridge proxy, working directory and Fotor-only `MCP_REMOTE_CONFIG_DIR`. Keep the bridge store separate from model-provider credentials and other clients. Preserve it across package updates. Overrides replace the entire `config` object, including security and reconnect settings; they do not deep-merge individual fields.
-
-Enable only the skill provider first. Use `/fotor-connect` when exposed by the native skill menu, or the native `skill` tool for the actual discovered Fotor connection entry. Confirm its installed resource path. Missing skills, a missing executable, a disabled component, permission denial, unauthenticated MCP and unknown state require different responses; none justifies clearing credentials.
-
-Use DeepSeek Harness's native `read` tool for the known package references. Its Linux shell sandbox can hide other host files under a private temporary-directory mount; shell `ls` failure is not proof that native file reading will fail. If the native reader cannot access this package, report that limit and stop. Do not scan unrelated installations, use another platform's guide, or widen standing sandbox permissions to work around the lookup.
+Use native `root`, `list` and `why` for diagnostics; do not guess pnpm store paths. The skill provider's running state alone is not discovery: verify the actual Fotor entries and their installed resource paths. Use native `read` for skill references; the Linux Shell sandbox can hide host paths. Do not scan unrelated packages after a native read failure.
 
 ## First authorization
 
-Verify this installed package owns mcp-remote 0.15.2, and resolve its actual client/proxy paths using the installation guide: native dependency queries for Git, or the declared bundled directory for npm. Never download or upgrade it during connection with an unpinned `npx` command. Keep the stdio proxy stopped while the standalone authorization client runs.
-
-Confirm the actual opener in this launch environment uses the user's daily ordinary browser. A task-specific desktop routing override may be needed; do not change the system default, create an incognito or headless session, or clear browser data. The model-provider login is independent of Fotor OAuth.
-
-Run the installed dependency's native client entrypoint, using the same endpoint, resource, callback port/host and credential directory configured for the proxy:
+Enabling MCP starts one cancellable connection task. The adapter runs the installed mcp-remote client with the same credential directory, endpoint, resource, callback and security arguments as the proxy. The bridge reuses valid credentials or opens the ordinary browser for user login and consent. Fotor code does not read tokens, implement OAuth, or install dependencies during connection. Model-provider login is separate.
 
-Use a native interactive terminal, or a host execution facility that keeps the client's input channel open until discovery completes. Closing stdin can make the bridge exit successfully before its tools response arrives; require actual discovery and completion rather than exit code alone.
+Confirm the opener uses the user's daily ordinary browser; retain its profile and login state. A task-specific routing override may be used without changing the system default; record it separately from untouched default-browser behavior. Human authorization still belongs to the user, including Continue / Wait / Cancel. The adapter's states and sanitized diagnostics distinguish `preparing`, `waiting-authorization`, `connected`, `failed` and `stopped`; an active adapter is not proof of a connected MCP service.
 
-```bash
-MCP_REMOTE_CONFIG_DIR=/absolute/path/to/dsh-home/mcp-auth/fotor /absolute/path/to/node /absolute/path/from/dependency-query/mcp-remote/dist/client.js https://mcp.fotor.com/mcp <callback-port> --host <callback-host> --transport http-only --resource https://mcp.fotor.com/mcp --auth-timeout 600 --connect-timeout 20 --headers-timeout 20 --body-timeout 20
-```
+After Continue, require successful client connection and actual tools discovery. The client and callback listener must exit before the native MCP client starts the proxy. Proxy tool discovery completes readiness; a consent success page or zero client exit alone is insufficient. Authorization waits at most ten minutes. Cancel by disabling `fotor-mcp` through the native plugin controls; the owned child and callback must stop without blocking the Web interface. A cancelled or failed task waits for a deliberate disable/enable before another authorization attempt.
 
-The user completes account login, consent and Continue / Wait / Cancel in conversation. After Continue, verify the actual client connected, discovered tools and finished successfully; a browser success page alone is insufficient. Limit human OAuth waiting to ten minutes and stop this client's callback listener on cancellation or timeout. Do not assume a command-line timeout enforces every callback wait.
-
-After the standalone client exits and its callback listener closes, enable the configured MCP component and restart the selected DeepSeek Harness profile. Discover actual tools and execute a read-only `list_models` check. Do not expose the whole model catalog, query credits or request a website link for an MCP-only task.
+After connection, use `/fotor-connect` or the native skill tool for the actual discovered entry. Verify with a read-only `list_models` call when requested. MCP-only requests neither request a website link nor query credits. Installation, authorization, discovery and actual queries are distinct evidence.
 
 ## Website access
 
@@ -64,13 +52,17 @@ For user-requested reauthorization, use this single sequence:
 
 1. Stop the failed operation, this profile's proxy and any leftover callback listener. Do not start a competing authorization flow.
 2. Preserve the same credential directory and connection/security arguments. Do not read, copy or edit tokens.
-3. Run the standalone authorization client above. Complete the new native consent flow only when explicitly requested, with the same Continue / Wait / Cancel handling and native-result verification.
+3. Re-enable the MCP adapter after the user requests another connection attempt. It runs the standalone authorization client and applies the same Continue / Wait / Cancel handling and native-result verification.
 4. Stop the standalone client, restart the configured DeepSeek Harness MCP and prove recovery with an actual read-only query. A successful consent page without that query is not recovery.
 
-A cached client connection without a new consent flow is reuse, not invalid-grant recovery. Never clear a global authorization directory, substitute a new empty store, weaken issuer/resource/PKCE/TLS checks or sign out the daily website to force a test. Exercise recovery only after a real failure or an available native operation that can be limited to this exact temporary grant. If no safe trigger exists, report recovery as unverified rather than claiming complete acceptance. Expiry-driven refresh likewise requires actual evidence.
+A cached client connection without a new consent flow is reuse, not invalid-grant recovery. Never clear a global authorization directory, substitute a new empty store, weaken issuer/resource/PKCE/TLS checks or sign out the daily website to force a test. Server-side invalid-grant acceptance requires a real failure or an available native operation limited to this exact temporary grant. If no safe trigger exists, report that recovery scope as unverified. Expiry-driven refresh likewise requires actual evidence.
+
+An explicitly user-approved isolated local-cache-loss test is a separate acceptance scope. After stopping all task-owned processes and callbacks, verify ownership and ordinary-file type before removing only that connection's token cache, without reading its contents. Keep the original directory, registration and connection parameters. Re-enable the adapter for user consent, then require an actual query and another query after a full restart. Label this local credential-loss recovery; it does not establish server-side revocation, expiry or intact rejected-cache recovery.
 
 ## Updating and removing
 
 Use the native Bundle commands in the package README. After updating, inspect the resolved source, version, file contents and actual skill directory; package-manager links outside the package are distinct from forbidden symlinks inside its resources. Keep only one enabled Fotor skill source. Re-resolve the managed bridge path when replacing a package; preserve the external credential store.
 
-Disable only this Bundle's two components and remove its local overrides before native removal. Cleanup of an isolated acceptance environment may delete that environment's local store after all related processes stop; that does not revoke server-side consent. Leave daily installations, credentials and browser login unchanged. Keep package, model-session, bridge, website, reuse and recovery evidence separate.
+Disable this Bundle before native removal. Retain its external overrides and credentials unless the user explicitly requests a targeted removal. Cleanup of an isolated acceptance environment may delete that environment's local store after all related processes stop; that does not revoke server-side consent. Leave daily installations, credentials and browser login unchanged. Keep package, model-session, bridge, website, reuse and recovery evidence separate.
+
+Reinstalling the same source/profile with the same credential directory can reuse accepted authorization. It still establishes a new connection, so verify actual discovery and a requested read-only query. Changing profile, home, credential directory or connection parameters can select another cache. Preserve explicit disabled settings and valid complete configuration when upgrading; correct only obsolete path overrides through native configuration.

package/skills/fotor-credits/references/mcp-integration.md

@@ -2,7 +2,7 @@
 
 ## Connection
 
-This **production release channel** package connects to the **production service** at `https://mcp.fotor.com/mcp` using Streamable HTTP. Both release channels use the production account, website, and credits. Preserve this service throughout a task and its assets.
+This **test release channel** package connects to the **production service** at `https://mcp.fotor.com/mcp` using Streamable HTTP. Both release channels use the production account, website, and credits. Preserve this service throughout a task and its assets.
 
 | Environment | MCP endpoint | Website target | Login handoff endpoint |
 | --- | --- | --- | --- |

package/skills/fotor-image/references/authentication.md

@@ -8,41 +8,29 @@ DeepSeek Harness is abbreviated as `dsh` in commands and native identifiers.
 
 ## Ownership and baseline
 
-This Bundle targets Linux DeepSeek Harness Web `0.2.1-rc.2`, with package-manager-owned `mcp-remote 0.15.2` and stable Node `>=24.2.0 <25.0.0 || 26.x`. DeepSeek Harness owns the stdio client and tool permissions; the bridge owns OAuth and its credential store. Do not describe this as native remote OAuth in DeepSeek Harness. Desktop, headless and ACP have separate acceptance scopes.
+The current acceptance baseline is Linux DeepSeek Harness Web `0.2.1-rc.3`, with package-manager-owned `mcp-remote 0.15.2` and stable Node `>=24.2.0 <25.0.0 || 26.x`. Historical rc.2 results retain their original scope; matching the declared host range alone is not acceptance. DeepSeek Harness owns the stdio client and tool permissions; the bridge owns OAuth and its credential store. Do not describe this as native remote OAuth in DeepSeek Harness. Desktop, headless and ACP have separate acceptance scopes.
 
 Use this guide with the [shared runtime workflow](mcp-integration.md#runtime-workflow). Installation, authorization, actual calls, website access, restart reuse and reauthorization recovery are distinct outcomes. Do not infer full support from one successful call.
 
-## Inspect and configure
+## Installation and automatic configuration
 
-Installation declares two disabled components. The package manager automatically obtains the pinned bridge dependency. Installation does not register a working connection, scan unconfigured skill roots or start OAuth. For first installation, a missing bridge, unconfigured paths or missing skills, open the installed package's README and follow its `INSTALL.md` guide before continuing. That guide covers GitHub/npm installation, native dependency-path queries and complete configuration; no internal development document is required. The user or an Agent acting on their installation request completes those steps before connection.
+For installation, source changes, missing dependencies, or invalid saved paths, read the installed package README and `INSTALL.md`. GitHub installation obtains the pinned bridge through the package manager; npm carries its full dependency tree. Node remains external.
 
-For an update or source change, read the same guide's maintenance section before changing the installation. npm updates use an explicit published target version; preserve the original profile/store and verify actual installed files before declaring success. Immediate tag updates have a recorded limitation. Updating paths is distinct from authorizing Fotor or opening its website; preserve the existing external credential directory.
+From 0.6.1, select the installed Bundle with Web **Enable now** or load its CLI profile. Host activation enables both adapters by default. `fotor-skills` resolves this package's skills and uses the native filesystem provider without default-root scanning. `fotor-mcp` resolves Node and both installed bridge entrypoints, then supplies complete native stdio configuration. Runtime defaults are not written into a user patch. A package download alone runs no hook or authorization.
 
-Copy `configuration.example.yml` outside the package. Inspect the effective profile, home patch and launch overlays before changing them. Stop on a conflicting `fotor` service or duplicate skill provider; preserve the existing configuration.
+Explicit profile/home/launch overrides, including disabled states and the external `MCP_REMOTE_CONFIG_DIR`, take precedence. Do not replace them or clear credentials to repair a path error. An obsolete path requires a targeted native configuration edit: remove only that override to adopt automatic resolution, or correct it. Conflicting Fotor services or skill providers require resolving the duplicate while preserving the existing installation.
 
-Fill every path with its actual absolute location. Only the installed Fotor skill directory belongs in `customSkillDirs`; retain `includeDefaultRoots: false`. Use the independent Fotor provider name. Configure the external Node executable, bridge proxy, working directory and Fotor-only `MCP_REMOTE_CONFIG_DIR`. Keep the bridge store separate from model-provider credentials and other clients. Preserve it across package updates. Overrides replace the entire `config` object, including security and reconnect settings; they do not deep-merge individual fields.
-
-Enable only the skill provider first. Use `/fotor-connect` when exposed by the native skill menu, or the native `skill` tool for the actual discovered Fotor connection entry. Confirm its installed resource path. Missing skills, a missing executable, a disabled component, permission denial, unauthenticated MCP and unknown state require different responses; none justifies clearing credentials.
-
-Use DeepSeek Harness's native `read` tool for the known package references. Its Linux shell sandbox can hide other host files under a private temporary-directory mount; shell `ls` failure is not proof that native file reading will fail. If the native reader cannot access this package, report that limit and stop. Do not scan unrelated installations, use another platform's guide, or widen standing sandbox permissions to work around the lookup.
+Use native `root`, `list` and `why` for diagnostics; do not guess pnpm store paths. The skill provider's running state alone is not discovery: verify the actual Fotor entries and their installed resource paths. Use native `read` for skill references; the Linux Shell sandbox can hide host paths. Do not scan unrelated packages after a native read failure.
 
 ## First authorization
 
-Verify this installed package owns mcp-remote 0.15.2, and resolve its actual client/proxy paths using the installation guide: native dependency queries for Git, or the declared bundled directory for npm. Never download or upgrade it during connection with an unpinned `npx` command. Keep the stdio proxy stopped while the standalone authorization client runs.
-
-Confirm the actual opener in this launch environment uses the user's daily ordinary browser. A task-specific desktop routing override may be needed; do not change the system default, create an incognito or headless session, or clear browser data. The model-provider login is independent of Fotor OAuth.
-
-Run the installed dependency's native client entrypoint, using the same endpoint, resource, callback port/host and credential directory configured for the proxy:
+Enabling MCP starts one cancellable connection task. The adapter runs the installed mcp-remote client with the same credential directory, endpoint, resource, callback and security arguments as the proxy. The bridge reuses valid credentials or opens the ordinary browser for user login and consent. Fotor code does not read tokens, implement OAuth, or install dependencies during connection. Model-provider login is separate.
 
-Use a native interactive terminal, or a host execution facility that keeps the client's input channel open until discovery completes. Closing stdin can make the bridge exit successfully before its tools response arrives; require actual discovery and completion rather than exit code alone.
+Confirm the opener uses the user's daily ordinary browser; retain its profile and login state. A task-specific routing override may be used without changing the system default; record it separately from untouched default-browser behavior. Human authorization still belongs to the user, including Continue / Wait / Cancel. The adapter's states and sanitized diagnostics distinguish `preparing`, `waiting-authorization`, `connected`, `failed` and `stopped`; an active adapter is not proof of a connected MCP service.
 
-```bash
-MCP_REMOTE_CONFIG_DIR=/absolute/path/to/dsh-home/mcp-auth/fotor /absolute/path/to/node /absolute/path/from/dependency-query/mcp-remote/dist/client.js https://mcp.fotor.com/mcp <callback-port> --host <callback-host> --transport http-only --resource https://mcp.fotor.com/mcp --auth-timeout 600 --connect-timeout 20 --headers-timeout 20 --body-timeout 20
-```
+After Continue, require successful client connection and actual tools discovery. The client and callback listener must exit before the native MCP client starts the proxy. Proxy tool discovery completes readiness; a consent success page or zero client exit alone is insufficient. Authorization waits at most ten minutes. Cancel by disabling `fotor-mcp` through the native plugin controls; the owned child and callback must stop without blocking the Web interface. A cancelled or failed task waits for a deliberate disable/enable before another authorization attempt.
 
-The user completes account login, consent and Continue / Wait / Cancel in conversation. After Continue, verify the actual client connected, discovered tools and finished successfully; a browser success page alone is insufficient. Limit human OAuth waiting to ten minutes and stop this client's callback listener on cancellation or timeout. Do not assume a command-line timeout enforces every callback wait.
-
-After the standalone client exits and its callback listener closes, enable the configured MCP component and restart the selected DeepSeek Harness profile. Discover actual tools and execute a read-only `list_models` check. Do not expose the whole model catalog, query credits or request a website link for an MCP-only task.
+After connection, use `/fotor-connect` or the native skill tool for the actual discovered entry. Verify with a read-only `list_models` call when requested. MCP-only requests neither request a website link nor query credits. Installation, authorization, discovery and actual queries are distinct evidence.
 
 ## Website access
 
@@ -64,13 +52,17 @@ For user-requested reauthorization, use this single sequence:
 
 1. Stop the failed operation, this profile's proxy and any leftover callback listener. Do not start a competing authorization flow.
 2. Preserve the same credential directory and connection/security arguments. Do not read, copy or edit tokens.
-3. Run the standalone authorization client above. Complete the new native consent flow only when explicitly requested, with the same Continue / Wait / Cancel handling and native-result verification.
+3. Re-enable the MCP adapter after the user requests another connection attempt. It runs the standalone authorization client and applies the same Continue / Wait / Cancel handling and native-result verification.
 4. Stop the standalone client, restart the configured DeepSeek Harness MCP and prove recovery with an actual read-only query. A successful consent page without that query is not recovery.
 
-A cached client connection without a new consent flow is reuse, not invalid-grant recovery. Never clear a global authorization directory, substitute a new empty store, weaken issuer/resource/PKCE/TLS checks or sign out the daily website to force a test. Exercise recovery only after a real failure or an available native operation that can be limited to this exact temporary grant. If no safe trigger exists, report recovery as unverified rather than claiming complete acceptance. Expiry-driven refresh likewise requires actual evidence.
+A cached client connection without a new consent flow is reuse, not invalid-grant recovery. Never clear a global authorization directory, substitute a new empty store, weaken issuer/resource/PKCE/TLS checks or sign out the daily website to force a test. Server-side invalid-grant acceptance requires a real failure or an available native operation limited to this exact temporary grant. If no safe trigger exists, report that recovery scope as unverified. Expiry-driven refresh likewise requires actual evidence.
+
+An explicitly user-approved isolated local-cache-loss test is a separate acceptance scope. After stopping all task-owned processes and callbacks, verify ownership and ordinary-file type before removing only that connection's token cache, without reading its contents. Keep the original directory, registration and connection parameters. Re-enable the adapter for user consent, then require an actual query and another query after a full restart. Label this local credential-loss recovery; it does not establish server-side revocation, expiry or intact rejected-cache recovery.
 
 ## Updating and removing
 
 Use the native Bundle commands in the package README. After updating, inspect the resolved source, version, file contents and actual skill directory; package-manager links outside the package are distinct from forbidden symlinks inside its resources. Keep only one enabled Fotor skill source. Re-resolve the managed bridge path when replacing a package; preserve the external credential store.
 
-Disable only this Bundle's two components and remove its local overrides before native removal. Cleanup of an isolated acceptance environment may delete that environment's local store after all related processes stop; that does not revoke server-side consent. Leave daily installations, credentials and browser login unchanged. Keep package, model-session, bridge, website, reuse and recovery evidence separate.
+Disable this Bundle before native removal. Retain its external overrides and credentials unless the user explicitly requests a targeted removal. Cleanup of an isolated acceptance environment may delete that environment's local store after all related processes stop; that does not revoke server-side consent. Leave daily installations, credentials and browser login unchanged. Keep package, model-session, bridge, website, reuse and recovery evidence separate.
+
+Reinstalling the same source/profile with the same credential directory can reuse accepted authorization. It still establishes a new connection, so verify actual discovery and a requested read-only query. Changing profile, home, credential directory or connection parameters can select another cache. Preserve explicit disabled settings and valid complete configuration when upgrading; correct only obsolete path overrides through native configuration.

package/skills/fotor-image/references/mcp-integration.md

@@ -2,7 +2,7 @@
 
 ## Connection
 
-This **production release channel** package connects to the **production service** at `https://mcp.fotor.com/mcp` using Streamable HTTP. Both release channels use the production account, website, and credits. Preserve this service throughout a task and its assets.
+This **test release channel** package connects to the **production service** at `https://mcp.fotor.com/mcp` using Streamable HTTP. Both release channels use the production account, website, and credits. Preserve this service throughout a task and its assets.
 
 | Environment | MCP endpoint | Website target | Login handoff endpoint |
 | --- | --- | --- | --- |